Data Center and Cloud Automation

Transcription

1 Data Center and Cloud Automation Tanja Hess Systems Engineer September, 2014

2 AGENDA Challenges and Opportunities Manual vs. Automated IT Operations What problem are we trying to solve and how do we solve it Policy based Automation Cisco Intercloud Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2

3 IT Challenges and Opportunities Better alignment of IT with rapidly changing business needs requires dynamic and automated policy-based control of DC and Cloud infrastructure. Technology Transitions Public Cloud Offerings IT Processes CIOs need a model that balances agility & risk. Brings new and different security and operational challenges/opportunities. Policy semantics impede alignment of IT with business. Hybrid Cloud Offerings Cisco Intercloud Cisco Confidential 3

4 Complex IT Processes to Deploy Application Resources Challenges: Manual processes Complex handoffs between teams and domains Static resource allocation Result: Days/weeks/months to deploy IT services High operational cost Rigid silos Infrastructure inefficiency and under utilization 2 IT Planning 1 Define Cost Models Business Application Requirements Add Users and Groups Approvals Storage Network Adm Server Admins Setup Servers Create Storage Resources Create BD+EPG/VLANs Create Network Policies Create IP space Map VOL/LUN Bare metal Provisioning Create VLAN Update Trunks Create UCS Service Profiles Create Vserver Create Storage Policy Configure Servers Add VLAN to Service Profile Configure SAN Zoning Add Vserver to Group UCS Blade Power On Cisco Confidential 4

5 Typical Manual Data Center Operations and Provisioning Challenges: Many groups Many human interfaces Manual steps Virtual Admins Business Application Requirements Create VLANs IT Planning Update Trunks Server Admins Add Users and Groups Create Network Policies Storage Admins Setup VDC Create UCS Service Profiles Define Cost Models Configure SAN Zoning Network Admins Approvals Setup Servers Bare metal Provisioning (PXE Boot with ESXi) Configure Servers Create Storage Resources (LUNs and Volumes) Create VLAN Add VLAN to Service Profile Create IP space Create vfilers Add vfilers to Group Map NetApp LUN Create Storage Policy UCS Blade Power On Result: High latency Register Host Node Send Complete Notifications Weeks Cisco Confidential 5

6 Administrators Policy Makers Automation Storage SME VI SME Server SME Network SME Access configuration, VLAN, VSAN, Security, and Hardening Operating System Configuration OS Type, Patch Level, Settings Network interface card (NIC) configuration: MAC address, VLAN, and QoS settings; host bus adapter HBA configuration: worldwide names (WWNs), VSANs, and bandwidth constraints; and firmware revisions Unique service ID, Application revisions, and Storage settings Application resources: Server, Storage, Network Security, OS Access configuration, VLAN, VSAN, Security, and Hardening Operating Network System interface card Configuration (NIC) OS configuration: Type, Patch MAC address, Level, Settings VLAN, and QoS settings; host bus adapter HBA configuration: worldwide names (WWNs), VSANs, Access and bandwidth configuration, constraints; VLAN, and firmware VSAN, revisions Security, and Hardening Network Operating interface System card (NIC) Configuration configuration: OS Type, MAC Patch address, Level, VLAN, Settingsand QoS settings; host bus adapter HBA configuration: worldwide names (WWNs), VSANs, Access and configuration, bandwidth constraints; VLAN, and VSAN, firmware revisions Security, and Hardening Operating Network System interface card Configuration (NIC) OS Type, configuration: Patch Level, MAC address, Settings VLAN, and QoS settings; host bus adapter HBA configuration: worldwide names (WWNs), VSANs, Access and configuration, bandwidth constraints; VLAN, and VSAN, firmware revisions Security, and Hardening Network Operating interface System card (NIC) Configuration configuration: OS Type, MAC Patch address, Level, VLAN, Settings and QoS settings; host bus adapter HBA configuration: worldwide names (WWNs), VSANs, and bandwidth constraints; and firmware revisions 4 Subject matter experts define policies Policies used to create Infrastructure Pools, policies, templates definition Associating application profiles with fabric Cisco Confidential 6

7 Cisco Data Center and Cloud Management Portfolio INTELLIGENT AUTOMATION FOR CLOUD Cloud management private, public, hybrid cloud PRIME SERVICE CATALOG End-user storefront for IT services UCS DIRECTOR Unified infrastructure automation for compute, storage, network physical & virtual UCS MANAGER UCS CENTRAL APIC Manages single UCS domain Manages multiple UCS domains Manages Application Centric Infrastructure (ACI) and Nexus fabric Manages heterogeneous & integrated infrastructure Cisco Confidential 7

8 Cisco UCS Director Turnkey Solution End Users IT Admins IT Operations LDAP, CMDB, Metering DB Amazon, Entel, Rackspace Savvis VPDC, Terremark Single, unified product built from the ground up Modular architecture Extensibility through APIs Deployed as an on-premise Virtual Appliance(s) Mobile Platform Self Service Catalog Admin Console Dashboard Enterprise Systems Integration Cisco UCS Director Multi-tenant Infrastructure Management Platform Other Providers Virtual Infrastructure Management Provides: Policy-Driven Self-Service Infrastructure Lifecycle Management SB API API to Cisco UCSM Blade Server Managers Storage APIs Network API/CLI vcenter SCVMM RM Cisco UCS Physical Infrastructure Nexus Virtual Infrastructure VMware Hyper-V KVM Cisco UCS Director Provides Unified, Centralized Management of Physical and Virtualization Infrastructure in Private and Hybrid Clouds Cisco Confidential 8

9 Network Automation Cisco Confidential 9

10 Let s talk about the elephant in the room Current networks are not inflexible nor expensive. Operational process can make them just that. ACI simplifies IT and becomes an enabler. Elephants can dance. Cisco Confidential 10

11 Introducing: Application Centric Infrastructure Apps + Infrastructure Open + Secure Physical + Virtual On-Premises + Cloud Application Oriented Policy = Operational Simplicity Cisco Confidential 11

12 Simplification Application Centric Policy F/W ADC WEB APP DB ADC APIC WEB WEB WEB APP APP APP DB DB DB Physical Networking Hypervisors and Virtual Networking L4 L7 Services Multi DC WAN and Cloud Storage Compute Cisco Confidential 12

13 Two Types of Languages Infrastructure Language App Language VLAN IP Address Subnets Firewalls Quality of Service Load Balancer Access Lists Human Translator Application Tier Policy and Dependencies Security Requirements Service Level Agreement Application Performance Compliance Geo Dependencies Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13

14 A new common language to describe desired state is needed. Cisco Confidential 14

15 An Innovative Approach to Policy Provided Contract Provided Contract Provided Contract OUTSIDE F/W ADC WEB ADC APP DB What is an application policy? Group: A set of virtual or physical workloads with the same policy Contracts: A set of rules governing communication between groups Service Chains: A set of network services between groups Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15

16 The Benefits of an Application Centric Policy Application Workload Mobility Health Score TENANT APPLICATION Health Score Systems Telemetry 0 Packets dropped 25 Packets dropped Systems Telemetry Latency Latency Isolation Isolation CONSISTENT VISIBILITY ACROSS CLOUD AND DC Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16

17 Application Centric Infrastructure (ACI) Management Enterprise Platform-as-a-Service Use Case Application Stacks with Application Configuration (e.g. Puppet, Chef) and PaaS (e.g. OpenShift, DevOps) End-User Interface Stack Designer CISCO PRIME SERVICE CATALOG Application Infrastructure Containers Compute, Network, Storage, Virtualization, L 4-7 Services Compute Network Storage F/W L/B WEB L/B APP DB CISCO UCS DIRECTOR CISCO UCS MANAGER CISCO APIC Service Profile Application Network Profile Hypervisor Storage Cisco Confidential 17

18 Summary: Automated Service Delivery Architect Design Where Can We Put It? Procure From Weeks to Minutes Install Configure Secure Is It Ready? Automated Self-Service Provisioning Manual Capacity On-Demand Policy-Based Provisioning Adaptive Cisco Confidential 18

19 Summary UCS Director deepens ability to manage heterogeneous infrastructure Turnkey Solution ready to use in hours Automates provisioning and management of converged infrastructures Works With Others Northbound API integrates into higher platforms SDK allows for strong partner integration Strong Infrastructure & Application Focus Integration with UCS Manager & UCS Central & APIC Policy based Profiles for Applications Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19

20 Cisco Intercloud Cisco Confidential 20

21 Together with our partners, we re building an Intercloud Native Cloud Big Data to include all the cloud services Applications you re using today, and Analytics so much more! IaaS PaaS Microsoft Suite aas HCS DRaaS Enterprise Workloads Partner Clouds APIs Enterprise Private Clouds Portal Intercloud Fabric Public Clouds APIs Collaboration and Video Cloud Services and Applications APIs OpenStack WebEx Meraki Security IOE aas Analytics HANA aas vdesktop aas Cisco Confidential 21

22 Cisco s Hybrid Cloud Approach No Vendor Lock-In Any Hypervisor to Any Provider Heterogeneous Infrastructure Expanding Cloud Provider Ecosystem Customer Open Choice End-to-End Security Unified Workload Management and Governance Cisco Intercloud Fabric Workload Mobility Across Clouds Cisco Confidential 22

23 Cisco Intercloud Fabric Under the hood End Users IT Admins VM Manager VM VM Intercloud Fabric Director Intercloud Fabric for Business End User and IT Admin Portal Workload and Fabric Management VM Intercloud Fabric Provider Platform Intercloud Fabric for Providers VM Intercloud Fabric Services DC/Private Cloud Intercloud Extender Intercloud Fabric Secure Extender (Secure Network Extension) Intercloud Switch Provider Cloud Cisco Confidential 23

24 Simplify IT Combining Public and Private Cloud Enterprise Cloud APIC Provider Cloud F/W ADC L/B WE AP WEB ADC L/B APP DB B P InterCloud Secure Connection F/W ADC L/B F/W ADC L/B F/W ADC L/B WE WEB BWE WEB BWE WEB B ADC L/B ADC L/B ADC L/B AP APP P AP APP P AP APP P Consistent ACI Policy Across Public and Private Clouds Cisco and/or its affiliates. All rights reserved. Cisco Confidential 24

25 Thank you.

26 UCS Director & Application Centric Infrastructure Use Cases Cisco Confidential 26

27 Cisco UCS Director Key Use cases Tenant on-boarding Application Profile Definition Self-Service Portal Cisco Confidential 27 NetApp and Cisco Confidential

28 Cisco ACI Tenant on-boarding UCS Director defines a secure Tenant container for physical and/or virtual servers within UCS Tenant Container Compute Resources Using NetApp clustered Data ONTAP, UCS Director creates secure Storage Virtual Machines (SVM) for the Tenant s server and application data Cisco UCS Using the Application Policy Infrastructure Controller (APIC), UCS Director defines the secure networking required for the Tenant Storage Virtual Machine NetApp clustered Data ONTAP Cisco Confidential 28

29 Cisco ACI Application Profile Definition Creating an Application Profile with UCS Director: Define ACI Network Tiers for delivering application resources within a secure tenant container Define the suitable capacity and quality of UCS physical and virtual compute and NetApp storage resources for each application component Define the Cisco ACI network services required to deliver the appropriate service quality and security for the application Secure Tenant Container Web Server App Server L4-7 Services Web Tier L4-7 Services L4-7 Services DB Server Web Server Application Tier App Server Database Tier L4-7 Services Storage Tier clustered Data ONTAP Storage Virtual Machine Cisco Confidential 29

30 UCS Director Self-Service Portal Log in to the self-service portal and select among the ACI Application Profiles published by the service provider Provide custom information for this instance and request deployment Within the portal, review the status of all application services and the deployment progress of application components. Cisco Confidential 30

31 Data Center Automation Manual versus Policy Driven Architect it Design it Procure it Install it Configure it Secure it QA it Is it ready? Architect it Design it ACI Policy Driven Is procured Is installed Is configured Is secured Is QA d It is ready Service Request ARCHITECT DESIGN COMPUTE Application SERVICES SECURITY NETWORK Available Application Available Cisco Confidential 31

32 Data Center Automation and IT Collaboration Today: Serialized Configuration and Management MANUAL PROCESS LEADS TO INCREASED DEPLOYMENT TIMES Application Requirements COMPUTE SERVICES NETWORK SECURITY Successful Deployment Deployment Trigger Configuration Mismatch Policy Violation Service Request ARCHITECT DESIGN COMPUTE SERVICES SECURITY NETWORK Application Available Cisco Confidential 32

33 Data Center Automation and IT Collaboration ACI: Common Policy Framework and Operational Model POLICY-BASED AUTOMATION Deployment Trigger STORAGE SECURITY Application Requirements COMPUTE Application Policy NETWORK Defined set of application requirements APPLICATION CLOUD Team builds application policy and template Operations team deploys with minimal risk and maximum speed Service Request ARCHITECT DESIGN Application Available Cisco Confidential 33

34 Cisco UCS Director: Unique Value Proposition Out of the Box, Turn-Key Solution (1000+ Tasks, Workflows) Single Integrated Solution for Virtual and Physical Infrastructure Multi-Vendor and Converged Infrastructure Support Secure Multi Tenancy, Resource Groups, Application Containers Flexibility with Model-Based Orchestration Expanding ISV Ecosystem Based on Open Automation Northbound RESTful API and PowerShell API Ease of Use. Rapid Deployment. Lower TCO Cisco Confidential 34

35 This is an empty slide Cisco Confidential 35