Deploying Cloud Network Services Prime Network Services Controller (formerly VNMC)

Transcription

1

2 Deploying Cloud Network Services Prime Network Services Controller (formerly VNMC) Dedi Shindler - Sr. Manager Product Management Cloud System Management Technology Group Cisco

3 Agenda Trends Influencing Infrastructure Consumption Cloud Network Management Challenges Prime Network Services Controller (Prime NSC) Overview Use Case: Securing the Tenant Domain Use Case: Hybrid Cloud Service Deployment Plans Going Forward 3

4 Trends Influencing Infrastructure Consumption IaaS Virtualization SDN and Programmatic Networking 4

5 Cloud Network Management Challenges Network Virtualization New Operational Models Central Management Multi Tenancy Scaled Environments High VM Mobility Scale customer environments New e-w Traffic Architectures Service Evolves to support Demands Consolidate Management Definition Complex Dynamic service VM Creation configuration Port profile Compute/Network/Storage Configuration Lay-out network topology Different Hypervisor Networking Edge GW Various Models (FW rules, Management VPN, DHCP, NAT) Assets Segregation of Duties Load Balancers (EMS, Hypervisor and tenant services Managers, Network segmentation Orchestrators) Co-existence Env. Set-Up of multiple Organizations Self-Service Segment Enterprise Mission System Installations Critical Automation (Servers, Systems FW, LB) Assign User Privileges SP and Enterprise co-operate service management Hybrid Private/Public Programmatic Networking Resource Allocation Tenant Configuration Allocate Compute (VMs, Memory, CPU) Allocate Network Allocate Storage WAN/Core 5

6 Prime NSC Benefits Address cloud management networking challenges Network virtualization New operational models Multi-tenancy Virtual and physical services support Hybrid cloud management Multi-vendor, multi-platform, multi-service IPSe c VPN BGP ACL LB Firewall DHCP DNS IKE EIGRP Virtualization OSPF NAT Static Ecosystem integration point to northbound management & orchestration systems SDK Infrastructure to support 3 rd -party network services Increased feature customization and velocity 6

7 Prime NSC - Vision Cisco Intelligent Automation for Cloud VMware vcd BMC CLM Cisco Cloupia OpenStack CloudStack Other Single API IP Address Management Image Management Policy Management Service Configuration System Administration License Management Amazon Capacity Management Performance Management Service Chaining Config Archive VM Lifecycle Change Audit Monitoring N1KV InterCloud Cisco Prime Network Services Controller VSG (Zone- Based Firewall) ASA1000V (Edge Firewall) CSR1000V (L3 Router) Third-Party Device Rackspace Terramark vsphere HyperV KVM Xen Multi-Hypervisor 7

8 Addressing Cloud Service Deployment Designed to Address Cloud Service Deployment Models Common Model to Enable Federated Development Single Access to Virtual Services, Lowering Customers TCO API-accessible Abstraction Layer Part of Cisco Unified Cloud Management, Control point to Cisco architectures Supports Self Contained Multi- Tenant Environment 8

9 Securing the Tenant Domain

10 Securing the Tenant Intra Domain and Edge Proven Cisco security: virtualized physical and virtual consistency Collaborative security model Cisco Virtual Secure Gateway (VSG) for intra-tenant secure zones Cisco ASA 1000V for tenant edge controls Cisco Prime Network Services Controller Tenant A Cisco VSG VDC Tenant B Cisco VSG VDC vapp vapp Cisco VSG Transparent integration With Cisco Nexus 1000V Switch and Cisco vpath Scale flexibility to meet cloud demand Cisco ASA 1000V Cisco ASA 1000V Cisco VSG Multi-instance deployment for scale-out deployment across the data center Hypervisor Cisco vpath Cisco Nexus 1000V 10

11 Cisco Nexus 1000V Accelerate virtualization and multitenant cloud deployments VM VM VM VM Integrated into Vmware vsphere hypervisor Provides advanced virtual machine switching using.1q switching technology 1000V VEM vsphere vpath and VXLAN technologies Built on Cisco NX-OS Server Provides: policy based VM connection, mobile virtual machine security and network policy, and a non-disruptive operational model 1000V VSM Physical Switches 11

12 Virtual Security Gateway Virtual Firewall for Nexus 1000V Context aware Security VM context aware rules Virtual Security Gateway (VSG) Zone based Controls Dynamic, Agile Best-in-class Architecture Establish zones of trust Policies follow vmotion Efficient, Fast, Scale-out SW Prime NSC Non-Disruptive Operations Policy Based Administration Designed for Automation Security team manages security Central mgmt, scalable deployment, multi-tenancy XML API, security profiles 12

13 Cisco ASA 1000V Solution Features and Capabilities Built using Cisco ASA infrastructure IPsec VPN (site to site) NAT, DHCP Interoperability with VSG through service chaining Default gateway VXLAN gateway Static routing Stateful inspection Multi-tenant management Through Cisco Prime NSC IP audit 13

14 Hybrid Cloud Use Case

15 Nexus 1000V InterCloud Building Secure Hybrid Clouds Enterprise DC Public Cloud Tenant B Virtual Private Cloud Network Transparency Consistent L4-7 Network Services Secure Tunnel and Network Overlay Single Management Interface Customer Control Multi-Platform (Cloud, Hypervisor, Switch) Workload Mobility Secure Multi-Tenant Environment 15

16 Hybrid Cloud Use Cases VM VM VM VM VM VM Nexus 1000V Switching Firewall, Routing Tenant A Virtual Private Cloud Other Tenant VPCs Seasonal Capacity, Events Supplement/Geo-Specific Capacity Upgrade and Migration Disaster Recovery 16

17 Prime NSC Hybrid Cloud Management Enterprise DC Public Cloud Tenant B Virtual Private Cloud Build InterCloud Environment VM Operation Service Monitoring System Management Management Orchestration Construct InterCloud environment, install and configure solution components Manage day-to-day operations activities Monitor service availability and alert on service degradation Single place of operation supporting enterprise management standards Integrate with internal and external management systems 17

18

19 Operation Overview Network Administrator Network admin sets up infrastructure for hybrid cloud Server Administrator Server admin issues hybrid cloud operations Management A vcenter VM resource is moved under NSC management vcenter VM VM NSC Template Image Infrastructure Instantiating InterCloud Instances A VM that was running at Enterprise is now running at cloud on same L2 network extension Template VSM N1K VEM cvsm InterCloud Node InterCloud Switch cvem Cloud Provider VM VM Upload VM Image VM IC Driver VM IC Driver Template 19

20 Cloud Bursting Use Case Enterprise Data Center 1 2 Build Web VM image, inject InterCloud driver, and upload it to cloud Load Balancer NSC Request to bring up or tear down Web VM(s) at cloud on demand Upload the VM image to cloud as a Web Gold VM image 3 5 Cloud Data Center Image Template Bringing up more web instances at cloud InterCloud Driver Web Web Web App App Intercloud Node 4 Secure Tunnel Bring up or tear down overlay network on demand InterCloud Switch cvem Web IC Driver Web IC Driver 20

21 Managing Customer Operations Leverage control layer to deliver advanced cloud operation management Develop application vendor ecosystem APPLICATION LAYER Disaster Recovery Advanced Security Load Balancing API Performance Mgmt. IPAddress Mgmt. API Cisco as a reseller of a full stack infrastructure and management Take advantage of Cisco market footprint CONTROL LAYER INFRASTRUCTURE LAYER Prime Network Services Controller Network Services Control Data Plane Interface (e.g. OnePK) Network Device Network Device Network Device Network Device Network Device 21

22 Extensible by design Hybrid cloud management platform via cloud plug-ins Automation & Orchestration Multi-vendor, multi-platform support via SDK s ESB (JMS) Rest NBI Native hypervisor extension points Hypervisors Extension & Packaging Prime Network Services Controller Cloud Plug-In (jclouds) Cloud Providers Integration point to Cisco and 3 rd party orchestration and management systems Embedded FW (PA) External SDK Virtual and Physical Services 22

23 Key Takeaways Prime NSC Assets Advanced architecture addressing Cloud and Virtualization challenges Enables new ways to consume Infrastructure Consolidated management for virtual and physical services across private and public clouds Supports programmatic networking by exposing functionality through XML API Lightweight and Versatile addressing both Enterprise and SP environments 23

24 24

25 Complete Your Online Session Evaluation Give us your feedback and you could win fabulous prizes. Winners announced daily. Receive 20 Cisco Daily Challenge points for each session evaluation you complete. Complete your session evaluation online now through either the mobile app or internet kiosk stations. Maximize your Cisco Live experience with your free Cisco Live 365 account. Download session PDFs, view sessions on-demand and participate in live activities throughout the year. Click the Enter Cisco Live 365 button in your Cisco Live portal to log in. 25

26