Cloud Fabric High Performance & Sicherheit für das moderne Cloud-Rechenzentrum. Henning Czerny - Vice Director of Networking Solution Sales

Transcription

1 Cloud Fabric High Performance & Sicherheit für das moderne Cloud-Rechenzentrum Henning Czerny - ice Director of Networking Solution Sales

2 Industrial Digital Transformation Accelerates Enterprise Data Center Cloudification Smart finance Smart manufacturing Smart healthcare Smart transportation Smart XX Past decade Born in Cloud Over the past decade, Internet companies born in the cloud dominated the first wave of cloud adoption and created the cloud 1.0 era of agility, innovation, enjoyable experience, and cost-effectiveness. Next decade Grow with the Cloud In the next decade, more and more industries and enterprises will grow with the cloud, embracing the cloud 2.0 era with the rise of industry cloud and enabling enterprises to be major players in this era. It is expected that by 2025, all enterprise information technology solutions will have been cloudified and over 85% of enterprise applications will have been deployed on the cloud. 2

3 CloudFabric Solutions Optimized for High-Availability/Hyperscale Environments B2B B2C HPC PC Industry cloud DCI leased line obile marketing Online banking Telephone banking Artificial intelligence Ultra-simplified deployment Automation, enabling service deployment in minutes Fabric Insight Ultra-simplified O& Intelligence, enabling fault locating in minutes Hyperscale Fabric High-Availability Fabric Scale Server scale: 2k 10k 20k Ultra-simplified design Zero packet loss Low latency High specifications Feature Access bandwidth: GE 10/25 GE 100 GE odular design, enabling flexible selfservice on-demand customization High reliability High security Non-blocking 3

4 Hyperscale Fabric Featuring Large-Scale Automation and ulti-cloud Collaboration Bandwidth Burst traffic Bandwidth Burst traffic 10G Discard Discard Forwarded traffic 10G Storage Forwarding Storage Forwarding Forwarded traffic Lack of buffer causes packet loss during traffic bursts. t Large buffer prevents packet loss caused by traffic bursts. t Clos architecture, cell switching 24 GB deep buffer 1152*100GE per line card interfaces 1:1 convergence ratio, non-blocking 4 GB deep buffer The industry's highest-performing switch provides ultra-large-scale non-blocking access for 50,000+ servers. 4

5 Hyperscale Fabric Featuring Large-Scale Automation and ulti-cloud Collaboration AS IS TO BE Four pairs of optical fibers are required for 100GE interfaces. One pair of optical fibers is required for 100GE interfaces. 100GE Connection The industry's first 100GE two-fiber interconnection, 75% fewer fibers. The industry's highest-performing switch provides ultra-large-scale non-blocking access for 50,000+ servers. 5

6 Hyperscale Fabric Featuring Large-Scale Automation and ulti-cloud Collaboration Sep Due to the large network scale, manual CLI On-demand orchestration configuration is time-consuming and inefficient. Service deployment within minutes Service provisioning takes several weeks. The SDN controller implements service deployment within minutes. The industry's first 100GE two-fiber interconnection, 75% fewer fibers switches The industry's highest-performing switch provides ultra-large-scale non-blocking access for 50,000+ servers. 6

7 Hyperscale Fabric Featuring Large-Scale Automation and ulti-cloud Collaboration Cloud anagement Platform The open SDN architecture achieves unified resource scheduling and automatic service deployment, reducing OPEX by 80%. Public cloud On-demand orchestration Service deployment within minutes Inter-DC multi-cloud collaborative access including public and private clouds Private cloud The SDN controller implements service deployment within minutes. The industry's first 100GE two-fiber interconnection, 75% fewer fibers. P Container ultiple access modes: P,, and Dock container The industry's highest-performing switch provides ultra-large-scale non-blocking access for 50,000+ servers. 7

8 Hyperscale Fabric Benefits: Automatic Deployment of ulti-cloud Networks, Facilitating Quick Development of Internet Services Application layer ToC ToB Gaming Instant messaging ideo PC Industry cloud DCI leased line Tenant benefits Cloud platform layer Open API OTT benefits IT resource provisioning cloud management platform Service provisioning efficiency period O& efficiency TCO reduction ore revenue from new ToB Short TT Network connection layer DC 1 DC 2 services Container Physical machine Container Physical machine Non-blocking network Automatic deployment ulti-cloud collaboration 8

9 Hyperscale Fabric Success Story: Rapid Construction of 20,000-Server Cluster Network, Improving Service Provisioning Speed by 42 Times A large Internet service provider in China Quickly establish differentiated competitiveness based on self-developed cloud platform. Seek network partners to support their service strategy visions. 3-year continuous joint innovation 700,000 ultra-large-scale servers 200% annual growth rate Differentiated values of the public cloud platform 42-fold Service provisioning speed 96% Lower TCO Speeding up B2B cloud service provisioning New capability: The duration required for provisioning 1,000 bare-metal servers is reduced from seven days in the original manual mode to four hours. New service: The provisioning period of cloud and leased line services in one-stop mode is reduced from months to minutes. Reducing TCO for tenants The construction cost is reduced by 96%, from CNY 710,000 for self-construction to CNY 27,800 for the business startup package. One PC: 15 s, firewall, and 50 bit/s egress bandwidth Traditional services Public cloud Gaming The business scale increases significantly. ore than 10,000 servers are required to build a gaming server cluster. Bare-metal servers need to be provisioned for tenant services such as live streaming and gaming. Complete PC capabilities are required for multicloud collaboration. High-density 10G/40G Cluster consisting of 20,000 servers Cloud architecture The network overlay connects to the cloud platform to implement complete PC capabilities and bare-metal server provisioning

10 High-Availability Fabric : a High-Reliability and High-Security Intelligent O& Solution Network-level high reliability Duration for detecting a link fault through Hardware BFD reduced from 50 ms to 3.3 ms, ensuring zero service interruptions upon link switchover Independent -LAG control planes that work in active-active backup mode, ensuring zero service interruptions upon device upgrade icrosegmentation Being upgraded aster Peer Link Slave -LAG Eth-Trunk Application-level high security Secure application isolation from the network segment level to the level based on the microsegmentation feature of network devices, enabling precise on-demand security control AS IS: subnet-level communication and isolation TO-BE: -level communication and isolation based on microsegmentation 10

11 High-Availability Fabric : Understanding Network Situations from the Application Perspective Using Fabric Insight, Helping Locate Faults Within inutes PC ipad Service presentation layer utual visibility between applications and networks, facilitating minute-level fault locating Intelligent drawing of the application map and real-time network policy assessment. Automatic association of the faulty link upon application exceptions, enabling fault locating within minutes. Collector Analyzer Data analysis layer Fabric Insight Precise playback of historical faults and retrieval of ten billion data records within seconds Retrieval of ten billion flow data records within seconds and capability of processing 1 million packets per second. ulti-dimensional network visibility. Actual network quality assessment and proactive risk prediction Inband telemetry, assessing network SLA based on real service flows on the entire network. Support for identification and analysis of abnormal flows on the network. web app app db 11 Data center network

12 High-Availability Fabric Benefits: Zero Service Interruptions, Enabling l Service Provisioning Anytime and Anywhere Application layer obile banking Online banking Operation management Risk control User experience Cloud platform layer Open API Enterprise benefits PC/DNS/EIP/NAT Self service Quick provisioning of Uninterrupted services Data protection Open interface innovative services Internal security isolation Network connection layer Spine FW PN IPS A Intelligent O& Security resource pool Leaf Container Physical machine High reliability High security Intelligent O& 12

13 Scheduling of computing and storage resources Scheduling of computing and storage resources High Availability Fabric Success Story: Building a Flexible and Secure Network Based on SDN and icrosegmentation A financial institution Core hub for providing bank card services in China Total transactions of CNY 72.9 trillion in 2016 ore than 6 billion cards issued, covering over 160 countries Challenges No isolation between s in the same subnet Implementation of security policies through network configuration, resulting in error-prone configuration if new security policies are added without old ones being deleted anual network configuration, requiring more than one week for service deployment Building a flexible and secure network based on SDN and microsegmentation Customer benefits Network resource scheduling Customization security: microsegmentation customization to implement security isolation between s in various modes. Fine-grained isolation Isolation configuration in various modes (such as name, OS, AC address, and discrete IP address) based on microsegmentation Secure decoupling Decoupling of networks and security, eliminating Open interconnection: open Agile Controller architecture for connecting to the ware and OpenStack, enabling unified resource scheduling configuration errors Cloud-network integration Service provisioning period cut from weeks to minutes 13

14 CloudFabric Solution and Products CloudFabric Solution CloudEngine Product Portfolio CE12800/CE12800E Series CE8860/CE7850 Series CE6800/CE5800 Series 3 times of industry average performance, supporting 10G/25G/40G/100G server evolution Full virtualization capabilities (S,CSS/iStack/SF,XLAN+BGP-EPN) to build network vswitch Server vswitch Server vswitch docker docker Server AS resource pools within and across DCs Programmability on 3 planes (chip, system, network) to support fast service innovation 14

15 World's Fastest Data Center Firewalls USG9520 USG9580 USG9560 Performance Tested and certified by USA NSS Labs Security efficiency Stability and reliability Easy management and configuration TCO "NSS is happy to see Huawei proactively seeking to subject its security platforms to independent evaluation by industry 3rd parties. Huawei's USG9580 data center firewall is currently the fastest firewall that we have tested. We believe that security professionals, and anyone considering Huawei's solutions, will be very interested in reviewing these results." ikram Phatak CEO of NSS Labs Inc 15

16 Huawei Data Center Network Solution Serves 2,800+ Enterprise Data Centers Worldwide Highest market share in China in 2016 Highest growth rate in the global data center switch market for four consecutive years 20,000+ CE12800 series switches are sold worldwide, serving 2,800+ data centers in 120+ countries Huawei is positioned as a Challenger in Gartner's agic Quadrant for data center networking in Europe Asia-Pacific, the iddle East, and Latin America China UK SCC U. of Newcastle London University Northumberland County government Italy INFN PS Bank TI Norway ERY Thailand Thailand Customs Hong Kong APT Satellite Australia ICITA Switzerland Abraxas WWZ Germany Koch edia Russia Yandex Russian Railways Russia Central Bank NIIAA Philippines EWB Turkey ULAKBİ Brazil RNP 16

17 THANK YOU Copyright 2015 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice.