Cisco Cloud Architecture with Microsoft Cloud Platform Peter Lackey Technical Solutions Architect PSOSPG-1002

Transcription

1

2 Cisco Cloud Architecture with Microsoft Cloud Platform Peter Lackey Technical Solutions Architect PSOSPG-1002

3 Agenda Joint Cisco and Microsoft Integration Efforts Introduction to CCA-MCP What is a Pattern? How This Solution Affect My Time to Provision, Security and Multi-Tenancy Conclusion

4 Joint Cisco and Microsoft Integration Efforts

5 Deeper Partnership for Service Providers Joint Product Engineering Joint Solution Development Joint Go-to-Market Aligned technology at the product level with integrated management software Provision network and application together with Cisco Application Centric Infrastructure (ACI) and Windows Azure Pack (WAP) Validated components using Fast Track architectures Deliver complete solution development through a combination of services Next Generation of IaaS / PaaS / SaaS Provide Disaster Recovery and Backup services Offering value added services such as Desktop as a Service and Database as a Service Cisco Validated Architectures & Microsoft Service Provider Reference Architectures to reduce risks and operational costs Realize unprecedented lifecycle support by leveraging Cisco Powered and Microsoft COSN partner benefits Improve your sales processes with joint go-to-market and exceptional sales and pre-sales support and collaboration from Cisco and Microsoft Offer credible solutions endorsed and branded with Cisco and Microsoft

6 Joint Product Engineering Continuing investments for deeper integration Microsoft Cloud Fast Track Fabric Management Integration Cisco UCS with Microsoft System Center Compute and Storage Integration Cisco ACI/APIC with Microsoft System Center Network and Services Integration Windows Azure Pack Microsoft System Center Windows Server (Hyper-V) Windows Azure Pack Microsoft System Center Virtual Machine Manager (SCVMM) On-board Microsoft Fabric Management on Cisco Architecture Cisco Fast Track Validated Architecture Expose Cisco SDN & Network Services with APIC and Resource Providers APIC Power tools for Compute & Storage UCS Health, Manage UCS domains, Graphical views

7 Introduction to CCA-MCP

8 Introducing Cisco Cloud Architecture Components Built with the Microsoft Cloud Platform Validated Platform Architecture Next-gen Service Patterns Lifecycle managed Service s Foundation architecture validated from the infrastructure based on Cisco Validated Designs and Microsoft Service Provider Reference Architectures Scaled to meet the multi-tenant and enterprise-grade needs of today s service providers Support for future workloads to help build your monetization pipeline Standard Service Patterns from the application to the network layers Integrated testing of workloads on the platform Combining experiences and engineering leadership around applications and network patterns Automation, integration and deployment guidance from both Microsoft and Cisco Lifecycle approach to design and deployment of packages through releases Microsoft Services and Cisco Advanced Services subscriptions to accelerate your services to market

9 Introducing Cisco Cloud Architecture Components Built with the Microsoft Cloud Platform Customer Portal Resource Clouds Automation Admin Portal Billing Tenant Mgt Hosting Plans Bringing Windows Azure Services to Windows Server For Hosting Service Providers Identity Services Cloud Service Portals Hyper-Automation Orchestrated Workloads Windows Azure Pack Services Windows Azure Pack Services Hosted Private Cloud Cloud Storage as a Service Library of Application Profiles and Cloud Service Profiles Centralized Policy Mgmt. Open APIs, Open Standards Excellent for DevOps Database Hosting Desktop Hosting CRM as a Service DR as a Service Industry-Leading 10/40/100-Gbps Programmable Fabric Physical Networking Cisco Nexus 7000 Series Hypervisors and Virtual Networking Computing L4 L7 Services Storage Multi DC WAN and Cloud Infrastructure Endpoints Physical and Virtual Cisco Nexus 2000 Series Integrated WAN Edge

10 CCA Reference BOM s & solution Scale Out Design Points Infrastructure Components Bronze Bronze with HA Silver Gold Fabric Management 6 HV nodes min distributed (C- 200M4) 6 HV nodes min distributed (C- 200M4) 6 HV nodes Min distribution (C- 200M4) 10 HV nodes Scale distributed (C- 200M4) Workload Fabric 16 HV nodes(b200 M4) 16 HV nodes(b200 M4) 48 HV nodes(b200 M4) 192 HV nodes(b200 M4) Chassis for Blades 2 (5108) 2 (5108) 6 (5108) 24 (5108) Fabric Interconnect 2 (UCS-FI-6248UP) 2 (UCS-FI-6248UP) 2 (UCS-FI-6248UP) 4 (UCS-FI-6296UP) ACI Spine switches 2 (N9K-9336PQ) 2 (N9K-9336PQ) 2 (N9K-9336PQ) 4(9504) ACI leaf Switches 2 (N9K-C9396PX) 2 (N9K-C9396PX) 2 (N9K-C9396PX) 2 (N9K-C9396PX) APIC Cluster Out of Band Management Switches APIC Cluster - Medium Configurations (Up to 1000 Edge Ports) APIC Cluster - Medium Configurations (Up to 1000 Edge Ports) APIC Cluster - Medium Configurations (Up to 1000 Edge Ports) APIC Cluster - Medium Configurations (Up to 1000 Edge Ports) 2 (Catalyst Switches 3850 ) 2 (Catalyst Switches 3850 ) 2 (Catalyst Switches 3850 ) 2 (Catalyst Switches 3850 ) Storage Connectivity 2 (Nexus 5672UP) 2 (Nexus 5672UP) 2 (Nexus 5672UP) 2 (Nexus 5672UP) Cloud service router (per Tenant) 30 (CSR1000V) 30 (CSR1000V) 30 (CSR1000V) 100 (CSR1000V) Routing Functionalities 1 (ASR 1006) 2 (ASR 1006) 2 (ASR 1006) 2 (ASR 9006) Adaptive Security Appliance 1** (ASA 5585-S10-K9) 2 (ASA 5585-S10-K9) 2 (ASA 5585-S10-K9) 2 (ASA 5585-S60-2A-K9) Cisco Cloud Network Automation Manager 100 Containers 200 Containers 500 Containers 1000 Containers Decision Points Considerations for Scale out Pair of Fabric interconnects can manage up to 20 Chassis (160 blades) Migration from ASR 1006 to ASR 9006 based on future expansion needs is a decision which should be made upfront ASA appliance migration from Bronze to Silver need to rewire Spine switches of 9504 for Gold deployments

11 What is a Pattern?

12 Introducing Cisco Cloud Architecture Service s built with the Microsoft Cloud Platform IaaS Cloud Container s Hosted Private Cloud WAN Gateway s MPLS L3 VPN Internet Access WAN Service ASR-9000 ASR-1000 CSR Site-to-Site VPN Application s Shared DB Model SQL DBaaS Dedicated DB Model SQL DBaaS Database Hosting Availability Clusters SQL DBaaS Zinc Container Copper Container Bronze Container Gold Container Palladium Container Cloud Management s Value-Added Service s Backup as a Service Disaster Recovery as a Service Identity Management Microsoft Fabric Cluster WAP Tenant Management Cisco Infrastructure Management Backup-aaS DRaaS Active Directory

13 ACI Fabric Cisco Network Resource Provider Network Pattern Example Highlighting expanded services of Cisco Network Resource Provider Cisco Network Services Resource Provider (Service Provider) MPLS L3 VPN Site to Site VPN Remote Access VPN Tenant Tenant VRF WAN Gateway Services EPG ebgp NAT EPG EPG Bridge Domains EPG Application Zone Application DMZ Zone Tenant Perimeter Services Cloud Backup as a Service Value Added Service Zone Database-aaS Provision Tenant Provision Network End Point Group (EPG) Provision Shared Load Balancer Provision new Bridge Domain Provision ACI Security Policy Provision Tenant Perimeter Firewall Provision WAN Gateway (MPLS L3 VPN) Provision WAN Gateway (Site-to-Site VPN) Provision WAN Gateway (Remote Access VPN) Provision Edge Routing Provision Secure Application Zone (DMZ) Provision Value Added Service Zone Provision PaaS Application Service Zone

14 CCA - Network Automation Manager Building Secure Value-Added Services with Window Azure Pack (WAP) Cisco Network Plan Example in WAP Value ADD-ONS to a Cisco Network PLAN Network Pattern 1 + Secure Application Zone + Backup-as-a-Service Zone Customer MPLS L3 VPN Site to Site VPN MPLS L3 VPN Site to Site VPN WAN Gateway Services WAN Gateway Services WAN Gateway Services Tenant Perimeter Services Tenant Perimeter Services Tenant Perimeter Services DMZ Application Zone Application Zone Application Zone 2 Application Zone Value Added Service Zone WEB APP Cloud Storage as a Service

15 Cloud Resource Providers Automate Cloud Offers Rapid Onboarding of Tenants and Applications onto the Cisco Cloud Infrastructure WAN Gateway, Network Segments, Security Services Container Cisco Cloud Infrastructure Cloud Management Components Cisco Network Resource Provider SQL DBaaS Network Pattern Cisco Power Tools for UCS Compute Compute, Storage, Hypervisor, Application Microsoft SQL Resource Provider SQL DBaaS App Pattern

16 How do Patterns affect time to provision, security and multitenancy

17 Cisco ACI Infrastructure with Microsoft Azure Pack Building on the Transformative Approach of UCS Network Security Application APIC Physical Networking Nexus 7K Hypervisors and Virtual Networking Compute L4 L7 Services Storage Multi DC WAN and Cloud IaaS / PaaS / SaaS Nexus 2K Integrated WAN Edge 1 Application Policies Based on Expert Reference Models 2 Policies Used To Create Catalogue of Application Network Profiles 3 Automated policy configuration across the infrastructure 4 Life cycle management for day 1, day 2 operations DevOps SYSTEMS APPROACH: Rapidly Deploy from an Application Catalogue: Scale, Performance, Security and Full Visibility

18 Example Enterprise Workload Provide a Secure Network Container to a sample EZ Trade Financial application that requires: EZ Trade Financial (Enterprise Site) EZ Trade Financial (Remote Worker) Site-to-Site VPN access Remote Access VPN from the Internet A secure DMZ Zone for Web Access Load Balancing services Access to a hosted SQL Database (DB-asa-Service)

19 Create Cisco Network Container directly from WAP Portals WAP Subscription for Services Multiple WAN Gateway Options Multi-Tier Application support Secure DMZ option for Internet Secure Connection to Customer SQL-aaS Database Service Secure L2 Segments for Apps Load Balancing Service

20 Create WAN Gateway Connectivity to Customer Site-to-Site VPN Site-to-Site VPN Settings Provider Assigned IP Subnets or Bring-your-own-IP Subnets VPN Authentication Options Pre-Shared Keys Internet Key Exchange (IKE) Digital Certificates Public Key Infrastructure (PKI)

21 Create Tenant Security Rules across the Container and Application Security Settings for Perimeter Firewall and Application Zones Support Physical and Virtual Firewalls Firewall settings configurable for Perimeter and each Application Tier Per Zone Access Lists and Policy Maps Protect the Application elements across the SDN Fabric Default settings tailored to the Application and Service (eg. SQL Database-aaS)

22 Create Tenant Application Zones across the ACI Fabric Multi-Tier Applications Supported, up to three Tiers, plus DMZ Zone Multiple L2 Segments / Subnets allowed per Application Zone Provider Assigned IP Subnets or Bring-your-own-IP Subnets Software Load Balancing supported for each Application Zone

23 Windows Azure Pack Tenant running on the Cisco ACI Fabric ACI SDN Fabric APIC Services extended to support Microsoft Cloud O/S stack Auto-discovery of APIC Networks within Microsoft Windows Azure Pack

24 Tenant Resources on the ACI Fabric Mapped to each Windows Azure Pack Application/Tenant Cisco Application Profile for each Application, captures Application requirements using an SDN Service Pattern Cisco SDN Application Profile for WAP Tenant End Point Groups for each Application Zone orchestrated thru the Cisco Resource Provider and Windows Azure Pack Portals

25 Tenant Analytics Traffic Stats and Tenant Health Score Cisco SDN exposes per Tenant Analytics Application Health Scores available for SDN Networking resources Application bandwidth consumption stats available per WAP Tenant. Best-in-Class granularity built into Cisco SDN Fabric Cisco SDN Infrastructure shared across Tenants, Best in Class Per Tenant and Per Application Analytics

26 Conclusion

27 Solution Benefits with Cisco Cloud Architecture with Microsoft More Profitable Services IaaS / SaaS / PaaS Platform jointly engineered to facilitate rapid adoption of Application Services Dramatically Lower TCO Reduce Risk and TTM Increase Demand Simplified Support Investment Protection Deep technical integration between Cisco and MSFT stacks to automate delivery of Cloud Services and common IT tasks Reduce Risk and Speed Deployment through Cisco and MSFT validated profiles, designs and Consulting Services Leverage both Cisco and MSFT GTM Programs to address Scale Up Services in market transition to as-a-service ICT Cisco and MSFT solution provide a simplified support model versus complex multi-vendor support model ACI oriented lifecycle approach to system development, improvement, support and service delivery

28 Complete Your Online Session Evaluation Give us your feedback to be entered into a Daily Survey Drawing. A daily winner will receive a $750 Amazon gift card. Complete your session surveys though the Cisco Live mobile app or your computer on Cisco Live Connect. Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online

29 Thank you

30