Cisco SD-WAN Application Acceleration

Transcription

1

2 BRKRST-2514 Cisco SD-WAN Application Acceleration Sukruth Srikantha, Technical Marketing Engineer Hamzah Kardame, Technical Marketing Engineer Atif Khan, Sr. Director Enterprise Routing

3 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#brkrst Cisco and/or its affiliates. All rights reserved. Cisco Public

4 Agenda Introduction SD-WAN Introduction and Architecture SD-WAN Application Acceleration Next-Gen WAAS Application Optimization SD-WAN WAAS Deployment Demo Conclusion

5 Introduction

6 Current WAN Challenges Insufficient Bandwidth Complex Operations High Cost Is Your WAN Business Ready? Limited Application Awareness Applications Downtime Limited Scale Fragmented Security No Cloud Apps Readiness BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 6

7 Why SD-WAN in Enterprise? 50% of Apps accessed via Internet 70% Have either 2 or 3 WAN connections/branch 32.4% Cite management of connectivity at branch as a challenge 48.6% Cite poor application performance and latency as corporate WAN concern BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 7

8 SD-WAN Introduction and Architecture

9 Cisco SD-WAN Solution Pillars Cloud-Delivered Architecture Agile Operations Cisco SD-WAN Application Quality of Experience Comprehensive Security BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 9

10 Cisco SD-WAN Secure Extensible Network Orchestration Plane vorchestrator MANAGEMENT vmanage vsmart vbond vedge Management Plane (Multi-tenant or Dedicated) ORCHESTRATION API ANALYTICS Control Plane (Containers or VMs) CONTROL INTERNET MPLS 4G Data Plane (Physical or Virtual) Data Center Campus Branch Home Office BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 10

11 SD-WAN Application Acceleration

12 Application Performance Influencers Bandwidth High Latency User Experience Brownouts Lossy Links Chatty Apps Cloud Adoption All of them contribute to bad Application Performance BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 12

13 Application Acceleration Techniques App-Aware Routing Protocol Specific TCP Optimization Compression Cloud OnRamp Deduplication QoS SD-WAN Native Caching BRKRST-2514 SD-WAN WAAS 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 13

14 Application Visibility and Recognition Deep Packet Inspection Cloud Data Center App 1 App 2 MPLS 4G Data Center App 3,000 vedge Router INET Small Office Home Office Branch Campus App Firewall Traffic prioritization Transport selection BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 14

15 Data Plane Liveliness and Quality vedge vedge vedge Bidirectional Forwarding Detection (BFD) Path liveliness and quality measurement - Up/Down, loss/latency/jitter, IPSec tunnel MTU Runs between all vedge and vedge Cloud routers in the topology - Inside IPSec tunnels - Operates in echo mode - Automatically invoked at IPSec tunnel establishment - Cannot be disabled vedge vedge Uses hello (up/down) interval, poll (app-aware) interval and multiplier for detection - Fully customizable per-vedge, per-color BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 15

16 Critical Applications SLA vedge Routers continuously perform path liveliness and quality measurements vmanage App Aware Routing Policy App A path must have: Latency < 150ms Loss < 2% Jitter < 10ms Internet Remote Site Path 2 MPLS Data Center 4G LTE Path1: 10ms, 0% loss, 5ms jitter Path2: 200ms, 3% loss, 10ms jitter Path3: 140ms, 1% loss, 10ms jitter IPSec Tunnel BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 16

17 TCP Optimization TCP Connections Optimized TCP Connections TCP Connections SD-WAN Fabric Users vedge High Latency Path vedge Servers High latency path between users and applications, i.e. geo-distances vedge routers terminate TCP sessions and provide local acknowledgements - Hosts don t have to wait for end-to-end TCP ACKs and pause TCP transmission Optimized TCP connection uses selective acknowledgement to prevent unnecessary retransmissions and large initial TCP window size to maximize throughput Hosts using older TCP/IP stacks will see the most benefit BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 17

18 Bandwidth Augmentation Augment MPLS with Internet bandwidth Create traffic engineering policy to steer application traffic - Active/Active if no policy vmanage Traffic Engineering Policy (data policy) App A -> MPLS TLOC App B -> Internet TLOC A B Remote Site Internet MPLS Data Center App A -> MPLS TLOC App B -> Internet TLOC SDWAN Tunnel SDWAN Fabric BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 18

19 Direct Internet Access Internet INET NAT Can use one or more local DIA exits or backhaul traffic to the regional hub through the SD-WAN fabric and exit to Internet from there - Per-VPN behavior enforcement VPN default route for all traffic DIA or data policy for selective traffic DIA NAT Remote Site INET INET MPLS SD-WAN Fabric Regional Data Center Data Center Network Address Translation (NAT) on the vedge router only allows response traffic back - Any unsolicited Internet traffic will be blocked by IP table filters For performance based routing toward SaaS applications use Cloud onramp BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 19

20 Cloud onramp for SaaS - DIA vedge router at the remote site performs quality probing for selected SaaS applications across each local DIA exit - Simulates client connection using HTTP ping Loss/ Latency! Remote Site ISP1 ISP2 SD-WAN Fabric Regional Data Center Data Center Results of quality probing are quantified as vqoe score (combination of loss and latency) Local DIA exit with better vqoe score is chosen to carry the traffic for the selected SaaS application - Initial application flow may choose suboptimal path until DPI identification is complete and cache table is populated Quality Probing BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 20

21 Cloud onramp for SaaS - Gateway Loss/ Latency! Remote Site ISP1 MPLS ISP2 SD-WAN Fabric Quality Probing Regional Data Center Data Center vedge routers at the remote site and regional hub perform quality probing for selected SaaS applications across their local Internet exits - Simulate client connection using HTTP ping Results of quality probing are quantified as vqoe score (combination of loss and latency) - HTTP ping for local DIA and App- Route+HTTP ping for regional Internet exit Internet exit with better vqoe score is chosen to carry the traffic for the selected SaaS application - Initial application flow may choose suboptimal path until DPI identification is complete and cache table is populated BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 21

22 Quality of Experience Score Score Color 8-10 Green 5-8 Yellow 0-5 Red Every site where SaaS application is enabled, is classified as performing Good, Average or Bad Sites are color coded based on the performance BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 22

23 vedge Router Device QoS Overview vmanage Data Policy Classification of application traffic into QoS forwarding classes (queues) Ingress Interface Egress Interface QoS forwarding classes QoS Scheduler In FC FC FC Q Q Q Out Policing Map into FCs Rewrite inner DSCP Map into Egress Queue Policing Rewrite outer DSCP Shaping Bandwidth % Buffer % Scheduling Priority Drop BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 23

24 Next-Gen WAAS Application Optimization

25 Building Blocks of WAAS AO AO AO Application Behavior TCP Flow Optimization Latency Object Cache DRE Bandwidth LZ BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 25

26 Akamai Caching Technology 1 Transparent Caching: with four (4) different mode settings BASIC Follows IETF HTTP 1.1 guidelines for standard object caching Only caches responses marked explicitly as cacheable STANDARD Default mode Also caches objects with no explicit cache marker and with a last- modified date. It ignores reload headers from clients ADVANCED Caches media files more aggressively, and all object types for longer times (when there is no explicit expiration time) BYPASS Turns off caching for a configured site(s) Connected Cache (CC): Retrieves content from Akamai s Intelligent Platform Over-the-Top Caching (OTT): Caching content of 3rd party Web sites using a predefined configuration Cache Warming or Prepositioning: Scheduled fetch and cache of content from a Web site BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 26

27 Use Case: Accelerate Live Video Challenges Delivering corporate live video over the enterprise network - serving 70K+ end users across 250 branches globally End-users in South America and Asia suffer from WAN congestion and video quality issues with frequent re-buffering and slow load times Without Cisco WAAS with Akamai Connect WAN vs LAN throughput for Multiple Video Streams Private/Public Cloud WAN/Internet LAN Branch Throughput Router Benefits Cisco WAAS with Akamai Connect caches live and on-demand HTTP video fragments Resulted in significant WAN offload while improving video quality & end-user experiences Reduced IT tickets related to corporate video webcast quality/performance issues With Cisco WAAS with Akamai Connect WAN Private/Public Cloud WAN/Internet Throughput Branch ISR-AX+AC BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 27

28 Use Case: Software Download Software updates keep growing and consuming more enterprise network bandwidth ios 8 Update = ~1.1MB; ios 9 Update = ~ 1.2GB Akamai Connect can help by caching ios and OS X updates locally in the branch Improving performance Offloading the enterprise network Updating 3 ipads resulted in 2.67GB of WAN offload BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 28

29 Cloud and SaaS

30 WAAS 6.4 : Dual-Sided and Smart SSL Ability to cache both HTTP and SSL in DIA scenario Branch WAN DC Internet Office365 Optimization Optimization Caching only BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 30

31 Dual-Sided SSL Optimization Solution send session key Edge WAE Transparent Secure Channel Core WAE Client SSL server SSL Handshake SSL Handshake SSL Session: client to core WAE SSL Session: core WAE to server Original Data - Encrypted Optimized & Encrypted BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 31

32 AppNav Redirection

33 Load Distribution AppNav Solution Data Center Data Center Optimization AppNav Redirection Interception AppNav-XE Asymmetric Traffic and H.A. BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 33

34 AppNav Affinity Features Branch Office_1 Branch Office_2 WAN Cisco AppNav Br3_WAAS Br2_WAAS AppNav s powerful policy engine allows for easy separation of branch traffic Branch Office_3 Branch1 Traffic Branch2 Traffic Branch3 Traffic Br1_WAAS Data Center No knowledge of IP addresses or ACLs required Branch Office Branch Office WAN HTTP Traffic SSL Traffic Cisco AppNav HTTP Cluster Other Cluster SSL Cluster Split traffic into separate application clusters Allows WAAS to easily adapt to application traffic increases and changes. Branch Office Other Traffic BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 34

35 NG-WAAS

36 Cisco Application Optimization Form Factors WAAS Appliance Application acceleration Scalable platforms for range of deployments ,000 optimized flows Next-Gen WAAS Appliance Application acceleration Improved HW and performance optimized flows Virtual WAAS in the cloud For public cloud and SaaS acceleration ,000 Connections Hourly based/byol Solution template for ease of deployment Cisco WAAS ISR-WAAS on ISR4K Identical features and management as other WAAS options Simple installation has you up and running in 7 minutes Included in Cisco One Foundation and AX WAAS NFV on ENCS Scale as you grow WAAS 200 Conn- 750 conn Interop/Service Chaining with other NFVs Included in WAN Foundation Virtual WAAS on UCS-E Ideal for hosting on UCS-E on ISR 4K with other apps No forklift upgrade Included with Cisco and AX on ISR4K router BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 36

37 What s new with WAAS? On September 30th 2017, End-of-Sale and End-of-Life was announced for the Cisco WAVE x94, 7541, 7571 and 8541 platforms as well as the AppNav IOM cards. Replacement solutions will be released in phases, starting with branch-side WAVE replacements by Jan At a high-level the current replacement offerings are as follows: For DC-side WAVE (8541/7571/7541), move to BYOH model and run vwaas (150K*/50K/12K) For branch-side WAVE (694/594/294), move to new WAAS HW platform (ENCS-W) For AppNav IOM, move to AppNav-XE which is a software feature available on CSR/ISR4K/ASR platforms. BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 37

38 SD-WAN WAAS Deployment

39 SD-WAN WAAS Inline LAN DC/Remote Office Internet SD-WAN Fabric MPLS OMP-to-BGP/OSPF BGP/OSPF-to-OMP vedge Local prefixes (OSPF/BGP) (WAAS, UC, Akamai Connect) LAN SD-WAN Traffic BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 39

40 SD-WAN WAAS Offpath LAN DC/Remote Office VPN1 VPN2 Internet SD-WAN Fabric MPLS vedge VPN2 VPN1 (WAAS, UC, Akamai Connect) SD-WAN Traffic LAN BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 40

41 SD-WAN WAAS Redirection vedge Ge0/1 WAN VPN 0 VPN 1 VPN From WAN From LAN DATA POLICY ON VSMART policy data-policy WAAS-REDIRECT vpn-list VPN-1 sequence 10 match protocol 6 action set next-hop default-action accept apply-policy site-list Branches data-policy WAAS-REDIRECT from-tunnel POLICY ON VEDGE policy access-list WAAS-REDIRECT sequence 10 match protocol 6 action set next-hop default-action accept CONTROL POLICY ON VSMART policy control-policy WAAS-EXTRANET sequence 10 match route vpn-list VPN1 action accept export-to vpn-list VPN2 sequence 20 match route vpn-list VPN2 action accept export-to vpn-list VPN1 default-action accept apply-policy site-list Branches control-policy WAAS-EXTRANET in int ge0/1 access-list WAAS-REDIRECT in BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 41

42 Demo

43 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#brkrst Cisco and/or its affiliates. All rights reserved. Cisco Public

44 Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at Cisco and/or its affiliates. All rights reserved. Cisco Public

45 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Tech Circle Meet the Engineer 1:1 meetings Related sessions BRKRST Cisco and/or its affiliates. All rights reserved. Cisco Public 45

46 Thank you

47