Agenda Registration & Coffee

Size: px

Start display at page:

Download "Agenda Registration & Coffee"

Merryl Lawson
5 years ago
Views:

1 Agenda Registration & Coffee 09:45 Welcome & Overview - Paul D'Cruz Data Centre Systems Engineering Manager 10:00 Unified Fabric - Virtualising the Network and Storage Domain - Gordon Hirst DC CSE - Architecture Deployment Scenarios and Advanced Features - Virtualised Networks with Nexus and MDS - Unified Fabric/IO and Data Center Ethernet - Network support for emerging cloud architectures 10:45 Solving the Challenges of Enterprise Server and Storage Virtualization - Ian Perez-Ponce DC CSE - What s New with ware vsphere 4.0 and Cisco - ware vsphere Deployment Scenarios and Advanced Features - Designing Data Centers with Granularity - Mobility of Network, Compute, Storage & Security Properties 1

2 Solving Challenges of Enterprise Server Virtualization Ian Perez-Ponce Consulting System Engineer Data Centre Business Transformation 2

3 Expanding Role of Server Virtualization Server Consolidation And Virtualization Are #1 And #2 Spending Priorities Source: Goldman Sachs CIO Survey 10% of server workloads virtualized in 2008; forecast to be 50%-60% in next 5 years Source: Industry analyst reports Increasing Use of otion and DRS resulting in Multiplicative Increase in Complexity Source: Cisco Desktop Virtualization Gaining Traction as Tool to Address Desktop Manageability, Security and Cost Source: Goldman Sachs IT Spending Survey 3

Challenge Areas in Networking for Highly Virtualized Data Centers -level data link-layer transparency as virtual machines () become the new atomic unit in the Data Center Deterministic network

4 Challenge Areas in Networking for Highly Virtualized Data Centers -level data link-layer transparency as virtual machines () become the new atomic unit in the Data Center Deterministic network bandwidth and performance for key leveraged features in hypervisor software suites (e.g. ware s DRS, Fault Tolerance, otion, etc ) Granular storage provisioning per in both high-density and white box host environments Layer-2 domain adjacency and management within and across geographical dispersed data centers Distance (latency) limitations to Virtual Desktop Infrastructure (VDI) deployments over wide-area networks 4

5 Transparency in the Eye of the Beholder With virtualization, s have a transparent view of their resources 5

6 Transparency in the Eye of the Beholder but its difficult to correlate network and storage back to virtual machines 6

7 Transparency in the Eye of the Beholder Scaling globally depends on maintaining transparency while also providing operational consistency 7

8 VN-Link in very simple terms Virtual Network Link (VN-Link) is about: -level network granularity Mobility of network and security properties (follow the ) Policy-based configuration of interfaces (Port Profiles) VNIC VNIC Hypervisor VN-Link with Nexus 1000v Replaces Hypervisor switch with Cisco modular switch (software) VN-Link with Nexus 5000 Eliminates need for a hypervisor switch Uses Network Interfaces Virtualization VETH VETH 8

9 VN-Link Solutions Software VN-Link Cisco switch for W ESX #1 Server #2 #3 #4 Compatible with any switching VNIC platform VET N1KV VEM HLeverages Virtual Center for server admin; Cisco CLI W ESX for network admin NIC NIC N1KV VSM (Nexus 1000v) LAN May 2009 FCS Hardware VN-Link (UCS & Nexus 5000) Server Scalable, hardware based, high performance #1 #2solution #3 #4 Standards driven W approach ESX to delivering hardware based Initiator networking VNIC Combines & physical network VET operations into 1 managed node H UCS & Nexus 5000 UCS: Q Availability N5K: Q Availability (Target) 9

10 Nexus 1000v Distributed Virtual Switch (DVS) Solution Overview 10

11 Scaling Server Virtualization Networking Challenges Security & Policy Enforcement Applied at physical server not the individual Impossible to enforce policy for s in motion Operations & Management Lack of visibility, accountability, and consistency Inefficient management model and inability to effectively troubleshoot Organizational Structure Muddled ownership as server admin must configure virtual network Organizational redundancy creates compliance challenges 11

12 VN-Link Brings Level Granularity VLAN 101 otion Problems: otion may move s across physical ports policy must follow Impossible to view or apply policy to locally switched traffic Cannot correlate traffic on physical links from multiple s VN-Link: Extends network to the Consistent services Coordinated, coherent management 12

13 VN-Link With the Cisco Nexus 1000v Cisco Nexus 1000v Software Based Industry s first 3rd-party vnetwork Distributed Switch for ware vsphere Built on Cisco NX-OS Compatible with all switching platforms Maintain vcenter provisioning model unmodified for server administration; allow network administration of virtual network via familiar Cisco NX-OS CLI Nexus 1000v vsphere Nexus 1000v Policy-Based Connectivity Mobility of Network & Security Properties Non-Disruptive Operational Model 13

14 Cisco Nexus 1000v Cisco VN-Link: Virtual Network Link Policy-Based Mobility of Network & Non-Disruptive Connectivity Security Properties Operational Model Nexus 1000v VEM Nexus 1000v VEM vsphere vsphere vcenter Nexus 1000v VSM 14

15 Cisco Nexus 1000v Faster Deployment Cisco VN-Link: Virtual Network Link Policy-Based Mobility of Network & Non-Disruptive Connectivity Security Properties Operational Model Defined Policies WEB Apps HR DB DMZ Nexus 1000v VEM vsphere Nexus 1000v VEM vsphere Connection Policy Defined in the network Applied in Virtual Center Linked to UUID vcenter Nexus 1000v VSM 15

16 Cisco Nexus 1000v Richer Network Services Cisco VN-Link: Virtual Network Link Policy-Based Mobility of Network & Non-Disruptive Connectivity Security Properties Operational Model s Need to Move otion DRS SW Upgrade/Patch Hardware Failure Nexus 1000v VEM vsphere Nexus 1000v VEM vsphere VN-Link Property Mobility otion for the network Ensures security Maintains connection state vcenter Nexus 1000v VSM 16

17 Cisco Nexus 1000v Increased Operational Efficiency Cisco VN-Link: Virtual Network Link Policy-Based Mobility of Network & Non-Disruptive Connectivity Security Properties Operational Model VI Admin Benefits Maintains existing mgmt Reduces deployment time Improves scalability Reduces operational workload Enables -level visibility Nexus 1000v VEM vsphere Nexus 1000v VEM vsphere Network Admin Benefits Unifies network mgmt and ops Improves operational security Enhances network features Ensures policy persistence Enables -level visibility vcenter Nexus 1000v VSM 17

18 ware vnetwork 3 rd Party Switch CURRENT vswitch vswitch vswitch Enterprise networking vendors can provide their own implementations of the virtual switch leveraging the vnetwork switch API interfaces Enables support for 3rd party networking capabilities, including new features, monitoring and management of the virtual network The Cisco Nexus 1000v is the first 3 rd Party vnetwork Distributed Switch vnetwork vnetwork Distributed Switch vnetwork Platform Cisco Nexus rd Party Switch vnetwork Platform 18

19 Cisco Nexus 1000v Architecture Nexus 1000v VEM Nexus 1000v VEM Nexus 1000v VEM vsphere vsphere vsphere Virtual Supervisor Module (VSM) Virtual or Physical appliance running Virtual Cisco Ethernet NXOS Module (supports (VEM) HA) Performs Enables management, advanced networking monitoring, & configuration Cisco capability Nexus on the 1000v hypervisor Installation Tight Provides integration ESX & each ESXi with with ware dedicated vcenter switch port VUM & Manual Installation Collection of VEMs = 1 vnetwork Distributed VEM installed/upgraded Switch like an ESX patch vcenter Nexus 1000v VSM 19

20 Nexus 1000v Deployment Options 1. All types of servers 2. 1G & 10G NICs 3. Any type of physical switch (Cisco & other vendors) 4. Requires External Management Appliance (VSM) which can be a virtual or physical appliance 5. Requires ware vsphere 4.0 Enterprise Plus License 6. Network stats, interface state, flow stats maintained in VEM, exposed through VSM Blade Servers Rack Optimized Servers vcenter Nexus 1000v VSM 20

21 Nexus 1000v VSM Deployment Options Nexus 1000v VEM Nexus 1000v VEM vsphere vsphere Nexus 1000v VSM Virtual Appliance NX-OS running as a on a customer provided x86 server Certified to run on 3.5 and 4.0 versions of ESX & ESXi Active/Standby VSMs for HA Supports multiple VEMs per VSM Nexus 1000v VSM Physical Appliance NX-OS on a 1RU x86 server Supports up to 4 instances of the VSM Active/Standby VSMs for HA Supports up to 256 VEMs Available Q4 CY

22 Key Features of the Nexus 1000v Switching L2 Switching, 802.1Q Tagging, VLAN Segmentation, Rate Limiting (TX) IGMP Snooping, QoS Marking/Queuing Security Policy Mobility, PVLAN, ACL (L2 4 w/ Redirect), Port Security Cisco TrustSec Authentication, Admission, Access Control Provisioning Automated vswitch Config, Port Profiles, Virtual Center Integration Optimized NIC Teaming Visibility Historical otion Tracking, ERSPAN, NetFlow v.9 w/ NDE, CDP v.2 -Level Interface Statistics, Wireshark Management Virtual Center Provisioning, Cisco Network Provisioning Cisco CLI, XML API, SNMP (v.1, 2, 3) 22

23 Accelerate Server Virtualization Enable, Simplify, Scale Security & Policy Enforcement Enable -level security and policy Scale the use of otion and DRS Operations & Management Simplify management and troubleshooting with -level visibility Scale with automated server & network provisioning Organizational Structure Enable flexible collaboration with individual team autonomy Simplify and maintain existing mgmt model 23

24 Nexus 5000 with VN-Link Solution Overview 24

25 VN-Link with Network Interface Virtualization Nexus Switch with VN-Link Hardware Based Allows scalable hardware-based implementations through hardware switches Hypervisor vsphere Standards-based initiative: Cisco & ware proposal in IEEE 802 to specify Network Interface Virtualization VN-Link Combines and physical network operations into one managed node Future availability Nexus 5000 Policy-Based Connectivity Mobility of Network & Security Properties Non-Disruptive Operational Model 25

26 Cisco Hardware VN-Link Architecture Nexus 5000 with NIV #1 Server 1 #2 #3 #4 #5 #6 Server 2 #7 #8 VNIC VNIC ware SW VNTag vswitch Initiator Hypervisor HW VNTag Initiator Hypervisor Hypervisor MGMT Tool VETH Nexus 5000 VNTag Initiator HW (NIC) or SW in Hypervisor Nexus 5000 Performs Receives VN-Tagged ID and Tagging packets from VNIC Forwards initiator & VETH Placement all packet to N5K upstream VNIC defined with Maps VNTag to virtual ethernet interface VETH created at Power-on Configuration, VNIC is local inside policy, of statistics the ESX managed host centrally from Nexus 5000 VETH lives in and is managed by upstream Nexus 5000 VETH to VETH switching done in upstream Nexus VETH

27 MDS Aware Storage Networking Solution Overview 27

28 MDS 9000 Key Value Propositions 8G Infrastructure: Greater SAN Consolidation Investment protection fully backward compatible Flexibility, performance, density, and security Virtual Machines / Blade Servers Optimized SAN High availability for s and blade servers Per security, performance management, and Quality of Service Service-Oriented SAN No SAN rewire or reconfiguration required for intelligent fabric applications SME, CRR/CDP, storage virtualization, DMM N1KV_Technical_v Cisco Systems, Inc. All rights reserved. 28 Presentation_ID 2006 Cisco Systems, Inc. All rights reserved.

29 -Optimized Storage Services Enabling Large-scale Server Deployments Flex Attach: Autonomy and flexibility for server additions, moves, and changes. NPIV / NPV technologies avoid the need for reconfiguration with server changes. F-Port Port Channeling and Trunking extends VSAN benefits and increases resilience. Sales Finance R & D N1KV_Technical_v Cisco Systems, Inc. All rights reserved. 29 Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 2

30 VN-Link for Storage Networks MDS Delivers Virtual Machine Aware SANs Virtualized Servers Virtualized Servers Virtualized Servers VSAN Tier 1 VSAN Tier 2 VSAN Tier 3 Virtualized Servers MDS 9000 SAN Fabric Tier 1 Tier 2 Tier 3 s w/ NPIV 90% of s are SAN attached Fabric Scalability and Performance Resilient, high-performance fabric to support large, dense environments Performance Monitoring and Trending -granular management and troubleshooting Quality of Service (QoS) -granular policy provisioning VSANs Isolate Fault Domains Increase availability, simplify troubleshooting, improve security and compliance Mobility with Security Wire-speed encryption protects data in transit and s during migration N1KV_Technical_v Cisco Systems, Inc. All rights reserved. 30 Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential

31 Accelerating Virtual Desktop Infrastructure Deployments Solution Overview 31

ware View Virtual Desktop Infrastructure Fully functional, personalized desktops delivered across the network Each Remote desktop is hosted on virtualized servers in DC Shares physical data

32 ware View Virtual Desktop Infrastructure Fully functional, personalized desktops delivered across the network Each Remote desktop is hosted on virtualized servers in DC Shares physical data center resources for optimal resource allocation through virtualization Desktops are secure and can be backed up Allows IT to maximize utilization, lower costs, and increase reliability RDP 32

33 Packet Loss Impairs Remote Desktop Performance Throughput (Mbps) 4,510 4,010 3,510 3,010 2,510 2,010 1,510 1, % % 0.001% 0.01% 0.1% 1.0% Assuming 1250-Byte packet size, and 100ms RTT Packet Loss Probability Throughput Compromised by Packet Loss R = MSS RTT 1.2 p 0.5 R : Average Throughput MSS: Packet Size RTT: Round-Trip Time P : Packet Loss 33

34 WAN Acceleration for Desktop Virtualization WAN performance issues may inhibit deployment of VDI Cisco Wide Area Application Services accelerate RDP traffic to ensure end user experience and broaden deployment scenarios Building block for the anywhere aspect of cloud computing User Experience Data Center WAE WAE Branc h 34

Optimized VDI Solution Integrated with Cisco Application Delivery Solutions Home/ Travelling User VDM Security Servers VDM Connection Servers ESX Servers

35 Optimized VDI Solution Integrated with Cisco Application Delivery Solutions Home/ Travelling User VDM Security Servers VDM Connection Servers ESX Servers Data Center SAN-based Storage RDP/ICA/ Other Campus User RDP/ICA/ Other WAN Branch User Printer Directory Services File, Print Servers Infrastructure Services 35

36 Cisco Virtualization-Centric Networking Virtualization aware server access, storage and services layer Policy-based network management Large-scale virtual machine mobility 36

37 Network Scale Virtualization Data Center otion otion Data Center Virtualize at Cluster Scale Service Provider Virtualize at Data Center Scale Virtualize at Network Scale Data Center N1KV_Technical_v Cisco Systems, Inc. All rights reserved. 37

38 Towards Cloud Computing Service Provider Standards based virtualization at a network scale Transparent interoperability between on-premise and off-premise computing Ex. VDI and DR Enterprise and service provider use cases Virtualize at Network Scale On Premise Data Center 38

39 39

40 Agenda Coffee Break 11:45 Innovative Architecture - Cisco Unified Computing System (UCS) - William Allen DC CSE - Building Blocks of the Unified Computing Architecture - Fabric Interconnect and Fabric Extender - UCS Management - Converged Architecture 12:30 Q&A Panel - Gordon Hirst, Ian Perez-Ponce, William Allen and Paul D'Cruz In this final session we are inviting you to ask the panel any further questions you might have on any of the material covered during the briefing session. 13:00 Close & Lunch 40

Next Generation Data Centers Networks Consolidation and Virtualization

Next Generation Data Centers Networks Consolidation and Virtualization Samuel TAYLOR Directeur Technique Channel - WCA samtaylo@cisco.com 1 70 % of CIOs would increase spending on virtualization even if