NET1821BU THE FUTURE OF NETWORKING AND SECURITY WITH NSX-T Bruce Davie CTO, APJ 2

Transcription

1 NET1821BU The Future of Network Virtualization with NSX-T #VMworld #NET1821BU

2 NET1821BU THE FUTURE OF NETWORKING AND SECURITY WITH NSX-T Bruce Davie CTO, APJ 2

3 DISCLAIMER This presentation may contain product features that are currently under development. This overview of new technology represents no commitment from VMware to deliver these features in any generally available product. Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind. Technical feasibility and market demand will affect final delivery. Pricing and packaging for any new technologies or features discussed or presented have not been determined. VMworld 2017 Content: Not for publication 3

4 12 HOURS UNIVERSITY COLLEGE LONDON MELBOURNE UNIVERSITY

5 INFORMATION SUPERHIGHWAY SUPER TELEPHONE NETWORK 5 SUPER VIDEO NETWORK INTERNET

6 L2 networks MPLS L3 networks

7 VPN MPLS 7

8 TWO NETWORK APPROACHES Build to meet needs of today s applications Build flexible, programmable infrastructure for future innovation 8

9 THE ONLY CONSTANT IS CHANGE New types of infrastructure VMworld 2017 New application architectures Content: Not for publication New shiny objects

10

11 NSX PROVIDES FLEXIBILITY FOR HETEROGENEITY Branch offices/edge Computing/IOT Cloud VMworld 2017 Content: Not for publication New app frameworks BARE METAL On-premises End users

12 NSX EMPOWERS MODERN APP DEVELOPMENT Renovate Build new On-demand infrastructure Service-like experience Programmatic DevOps-centric IT

13 ROADMAP INSIDE VIEW Control plane Management plane Data plane WHAT YOU CAN DO Programmatic networking & security for: Multi-cloud Application frameworks Developer cloud

14 NETWORK VIRTUALIZATION ARCHITECTURE Logically centralized control, distributed enforcement CLOUD CONSUMPTION MANAGEMENT PLANE CONTROL PLANE VMworld 2017 Content: Not for Self-service portal Cloud management API entry-point, UI publication Maps desired logical state to physical world DATA PLANE Scale-out distributed forwarding

15 MANAGEMENT, CONTROL, AND DATA PLANES Mapping state at many levels MANAGEMENT PLANE CONTROL PLANE VMworld 2017 Desired state Network topology request Request stored and acknowledged Content: Not for publication Calculate data plane state Discovered state Translated state DATA PLANE Realized state Identify data plane resources

16 INSIDE VIEW Control plane Management plane Data plane

17 CONTROL PLANE CHALLENGES MANAGEMENT PLANE CONTROL PLANE DATA PLANE Heterogeneity Scalability

18 CONTROL PLANE AND HETEROGENEITY DATA PLANE MANAGEMENT PLANE CONTROL PLANE VMworld 2017 Content: Not for publication DP 1 DP 2 DP 3 DP 4

19 CONTROL PLANE HETEROGENEITY AND SCALE DATA PLANE MANAGEMENT PLANE CONTROL PLANE VMworld 2017 Content: Not for publication DP 1 DP 2 DP 3 DP 4

20 A BETTER WAY LOCAL CONTROL PLANE MANAGEMENT PLANE CENTRAL CONTROL PLANE CLUSTER LCP 1 LCP 2 LCP 3 LCP 4 DATA PLANE DP 1 DP 2 DP 3 DP 4

21 INSIDE VIEW Control plane Management plane Data plane

22 INCREASED PRESSURE ON THE MANAGEMENT PLANE MANAGEMENT PLANE API REQUEST API REQUEST REQUIREMENTS Persistence Scale High availability IMPLEMENTATIONVMworld Distributed, shared log API REQUEST 2017 Content: Not for publication RESULTS Scalable API service

23 INDEPENDENTLY SCALABLE CONTROL, MANAGEMENT, AND PERSISTENCE MANAGEMENT PLANE CONTROL PLANE LOG NODE LOG NODE LOG NODE Desired state AKA source of truth

24 DISTRIBUTED LOG: SCALABLE SOURCE OF TRUTH MANAGEMENT PLANE VMworld 2017 Content: Not for Log 13 Log 14 DISTRIBUTED LOG Not just a place to store error messages publication IT IS: I/O bandwidth A data structure scales with disk units No single Append point of only failure Globally Immutable consistent history view of of desired state transactions Parallel reads and writes to redundant disks

25 DISTRIBUTED LOG 201 MANAGEMENT PLANE API REQUEST Log 12 API REQUEST Log 13 Get token Get token Sequencer Sequencer Layout Log 12 Log 13 Log 14 TO LEARN MORE Storage Storage

26 INSIDE VIEW Control plane Management plane Data plane

27 HETEROGENEOUS DATA PLANE DATA PLANE DP 1 DP 2 DP 3 DP 4 Edge DPDK Public cloud DP 5 DP 5

28 DPDK BENEFITS System level L3 performance (MPPS) L3FWD PERFORMANCE GENERATIONAL GAINS 80.1 IPV4 L3 Forwarding performance of 64byte packets (25 WMR) 2011 (15 SNB) 2012 (25 SNB) 2013 (25 IVB) 2014 (25 HSW) 2015 (25 BDW) Gbps Source: Intel. Video: DPDK Performance Benchmarking

29 HIGH-PERFORMANCE ARCHITECTURE Cache Multi-context appliance Flow cache

30 ROADMAP INSIDE VIEW Control plane Management plane Data plane WHAT YOU CAN DO Programmatic networking & security for: Multi-cloud Application frameworks Developer cloud

31 WHAT YOU CAN DO Developer cloud Container networking Multi-cloud HOW IT WORKS AND WHY IT MATTERS

32

33 OPENSTACK COMPONENTS Horizon (web portal) Nova (compute) vcenter vsphere Neutron (network) NSX Install, Configure and Troubleshoot CLI Tools / SDKs Cinder (block storage) Log Insight Log collection, O/S Content pack Glance (images) vcenter Datastores VVols / vsan / VMFS / NFS Heat (orchestration) vrops OpenStack mgmt pack Local DB Keystone (identity) LDAP Ceilometer (metering) Basic open source Swift (object store) 3 rd -party object storage vrb Cost visibility, governance, etc... OpenStack Components: VMware Technology Integrations: Current

34 DEVELOPER CLOUD Developer DevOps Heat, Terraform, Kubernetes, etc. Configuration templates API Puppet Chef Ansible Configuration management tools NETWORKING SECURITY NETWORKING SECURITY Provision infra using standard APIs Infrastructure as code

35 INFRASTRUCTURE AS CODE AND CONTINUOUS DEPLOYMENT DevOps Infrastructure code Commits infrastructure code to VCS Iterate Continuous Integration Server (e.g., Jenkins) Feedback from quality testing Detect change and integrate Feedback from monitoring and metrics Version Control System (e.g., Git) Development Testing / Staging / UAT Production

36 WHAT YOU CAN DO Developer cloud Container networking Multi-cloud HOW IT WORKS AND WHY IT MATTERS

37 CONTAINERS AND NETWORK SECURITY Flat container networks create opportunities for attackers Internet Port 80 Website Website Website Website Vault Vault Internal network Database Confidential information

38 ENTERPRISE NETWORKING FOR CONTAINERS NSX provides segmentation, visibility and integration Internet Port 80 Website Website Website Website Vault Internal network Vault Database Physical network infrastructure

39 KUBERNETES AND NSX COMPONENTS Network Container Plugin (NCP) Kubernetes master etcd API-Server Scheduler NS: foo K8s / OS Adapter PaaS Adapter CaaS Adapter More NSX Container Plugin NCM Infrastructure NSX/Kubernetes topology NS: bar NSX Manager API Client NSX NSX Manager

40 KUBERNETES DEMO Network, load balancing, and security configured as part of Kubernetes deployment Yelb-ui Deployment Kubernetes Yelb-appserver Redis Deployment Deployment Admin config App-driven config Logical Router Layer 3 Yelb ui Yelb appserver Redis server

41 CONTAINER NETWORKING

42 WHAT YOU CAN DO Developer cloud Container networking Multi-cloud HOW IT WORKS AND WHY IT MATTERS

43 NSX ON-PREMISES AND IN THE CLOUD NSX on-premises We give you bits You install On your servers / In your network You patch, upgrade Perpetual license (usually) NSX as a Service Just log in and use No installation Our servers / Our network We take care of patches/upgrades Pay per use Features are (mostly) the same

44 NSX CLOUD SERVICE PUBLIC CLOUD Customer VPCs Gateway VPC OVS Agent Windows AMI CLOUD GATEWAY OVS Agent Linux AMI VPC#1 VPC#2 SaaS Components CLOUD PLUGIN NSX Controller NSX Manager AWS / other cloud management portal

45 YOUR JOURNEY Start thinking differently about networking VMworld 2017 Start building a flexible infrastructure that allows innovation NSX is your foundation for the future of networking Make a difference at your company and in your future Content: Not for publication

46 At VMworld Transform Networking and Security Showcase Keynote [TS7003KU] 8/29, 12:30 p.m. - 1:30 p.m. Hands on Lab: VMware NSX-T with Kubernetes [ELW182602U] 8/29, 3:00 p.m. - 4:30 p.m. NSX-T Advanced Architecture Concepts [NET1863BU] 8/30, 10:00 a.m. - 11:00 a.m. Learn VMware Network Virtualization Blog & YouTube Channel Tech Docs & POC Guide on NSX VMTN Community Cloud services: cloud.vmware.com Connect NSX VMUG VMware{code} Slack Channel

47

48