New Cloud Automation Strategies for Infrastructure as a Service and Beyond

Transcription

1

2 New Cloud Automation Strategies for Infrastructure as a Service and Beyond BRKSPG

3 Cisco enables a world of many clouds connecting people and organizations within a cloud, between clouds, and beyond the clouds to the end user. Cisco CloudVerse

4 Cloud Defined IT resources and services that are abstracted from the underlying infrastructure provided on-demand and at scale in a multi-tenant environment Essential Characteristics On-Demand Self Service Measured Service Broad Network Access Rapid Elasticity Resource Pooling Service Models Software as a Service (SaaS) Platform as a Service (PaaS) Infrastucture as a Service (IaaS) Deployment Models Public Private Hybrid Community 4

5 Enterprise IaaS Drivers Private Cloud On-demand self-service Chargeability & Metering Agility / Speed of response Public Cloud Low-Cost Compute as a Service Storage as a Service Other IT Services 5

6 Benefits TCO and Speed Average TCO -37% Cisco IT Cloud Journey -27% Speed of delivery 6-8 Weeks IT Maint / Innovation 70%/30% Average TCO Speed of Delivery 2-3 Weeks IT Maint / Innovation 60%/40% Average TCO Speed of Delivery 15 Minutes IT Maint / Innovation 40%/60% Legacy Computer Platform 100% Physical Virtualization Legacy Computer Platform 46% Physical : 54% Virtual Unified Computing Platform 25% Physical : 75% Virtual 100% Automated Unified Infrastructure and Automation CITEIS (Cisco IT Elastic Infrastructure Services) 6

7 Service Providers IaaS Drivers Accelerated new service innovation and delivery Service Model Driven capabilities for standardizing and managing XaaS offerings Rapid provisioning & re-use of Network, Compute and Storage Self-service portals enabling customer driven experience 7

8 The Automation Threshold Business Drivers Inefficiency Tolerance Zone Automation Threshold App Testing Pre-production Production Dev/Test R&D Demand Driven Web Farms Portals Infrastructure Services DR/BC Critical Apps By Function By Department By Application Type Automation Requirement Service Culture Metering/Billing Service Catalog 3 rd -Party Integration ITSM Workflow CMDB Simple Application Service Sophisticated Assurance Resource Provisioning Orchestration Security Compliance Acceptable SLAs SP Services Infrastructure Transition Stages 8

9 Use Cases for Cloud

10 Public Cloud Control in the SP domain, via Portal, APIs, Service Catalogs Many service options above the simplest Compute as a Service Multi-tier Application Multi-Site Datacenter services Multi-tenant services on shared infrastructure Network services for additional differentiation Public and Private Access with secure segregation Embedded WaaS, Nam, IDS, etc. 10

11 Private Cloud Control often in a single Enterprise tenant (e.g. engineering) Embedded portal per cloud environment, not always catalog driven Lower demand for Network service integration, historically, single tenant Often used to recover from initial public cloud deployments or avoid them due to internal policy 11

12 Cloud Use Cases for Managed Services Provider Infrastructure Offerings MSP Differentiation Public CaaS vcloud Cert MSP VALUE Hybrid CaaS - Burst Private CaaS Network Value Multi-Service IaaS Private App Hosting Private App + DR Multi-Site CaaS Hybrid CaaS - DR 12

13 Self Integrated or Turnkey Solutions? Customer Relevance Products Solutions & Business Systems Models Architectural Plays Technology Integration Time To Market Pre-validated, Pre-integrated Customer Business Priorities Customised IT Self Build (>2 years?) Cisco AS (6 months?) 13

14 Cisco s Cloud Strategy Essential Infrastructure for Building Clouds Solutions for Deploying Cloud Services Innovation to Accelerate Adoption of Cloud Build/Operate Private/Public Cloud Systems Deploy fully-tested, best-of-breed cloud services Secure access and user collaboration 14

15 Today s Orchestrated Cloud

16 Cisco Cloud Management Solutions High Scale, Multi-tenant Highly Complex Environments Established Market Position Today World Class Cloud Portal & Self Service Integration of apps for Private Cloud / Large Enterprises Today Multi-Vendor stack API configuration Modular Components integrated with existing stacks Today Others like OpenStack Leveraging Open source & partner assets Trend CLM CIAC CISCO COMMON TECHNOLOGY Cisco Network Services Manager SP / VMDC Enterprise / Commercial Customer Choice Open Source mix 16

17 Key Orchestration Components Portal/API(s) Policy/Rules/Workflow Engine Domain Managers (also Policy/Rules/Workflow based) Integration APIs between Domains 17

18 Cloud Orchestration Stack Overview User/Admin Portal System API Billing Integration Cloud Mgmt. Service Catalog Federated Resource DB Service Assurance Manager Help Desk CRM Integration CMDB Integration Virtual Mgmt. Physical Mgmt. Object Integration and Orchestration Layer Compute API Network API Storage API Compute Network Storage Service Assurance Integration Physical Infrastructure Element Management Compute Network Storage SA API 18

19 Cloud Orchestration Stack Overview (CIAC) User/Admin Portal System API Billing Integration Cloud Mgmt. Service Catalog Federated Resource DB Service Assurance Manager Help Desk CRM Integration CMDB Integration Virtual Mgmt. Physical Mgmt. Object Integration and Orchestration Layer Compute API Network API Storage API Compute Network Storage SA Integration Physical Infrastructure Element Management Compute Network Storage SA API 20

20 Cloud Orchestration Stack Overview (CIAC) User/Admin Portal System API Billing Integration Cloud Mgmt. Service Catalog Federated Resource DB Service Assurance Manager Help Desk CRM Integration CMDBIntegration Virtual Mgmt. Physical Mgmt. Object Integration and Orchestration Layer Compute API Network API Storage API Compute Network Storage SA Integration Physical Infrastructure Element Management Compute Network Storage SA API 22

21 Cisco + BMC Complete Solution Cisco OEM BMC CLM Software Operate private and public clouds Self-service request portal Automated fulfillment Optional approval process Full-stack, automated provisioning UCS, Nexus, hypervisor, OS, software Pre-integrated management tools BMC Cloud Lifecycle Manager BladeLogic Server Automation Service Request Manager Remedy Change Management Service Desk BladeLogic Network Automation Storage Manager (EMC, NetApp, ) Atrium Orchestrator Hypervisor Manager (SCVMM, vcenter, ) 24

22 Many Additional Ecosystem Options Portal and Service Catalogs Portal Accounting and billing SLA mgmt Service catalog Service Orchestration Middleware Configuration mgmt database Orchestrated config workflows Service desk and workflow mgmt Event mgmt and correlation Platform Virtualization Abstraction Physical and logical services models Domain specific resource mgmt Domain specific reservation mgmt Domain specific configuration mgmt RESTful based API Domain specific capacity mgmt 25

23 Cisco DC System Architecture Framework Example Ref Arch Orchestration CIAC CO-BMC Ionix VMware Cloupia dcpod Data Center POD Integrated Computing Stacks Vblock FlexPod Other offers Networking & Services Access Aggregation Core LAN, SAN, BigData, HFT: Physical and Virtual Data Center Interconnect Application Collaboration Web Infra Business Processing 26

24 Container Based IaaS

25 Efficiency and Simplicity Containerization defines standardization Allows catalog driven choices Works at all levels of cloud deployment Intermediate step to future all policy driven clouds 28

26 Foundation: Integrated Compute Stacks Add Capacity Via Fully Integrated Building Blocks Network, Compute and Storage Resources Pre- Integrated into Pods Each Pod is discovered by the system, integrated into the resource pools, and assigned workloads as needed. E.g. VCE vblock Nexus NAS Nexus NAS UCS SAN UCS SAN ICS Pod 1 ICS Pod n 29

27 Built for Multi-Tenancy and Automation Protect the Infrastructure and Isolate the Tenants Fully segmented environment for the customer Abstraction of complexities Service Provider MPLS Backbone Self-provisioning and automated process to help ensure agility Reduced need for intergroup coordination of technologies Removal of manual resource use documentation and tracking Shorter service deployment time Physical Topology 30

28 Built for Multi-Tenancy and Automation Protect the Infrastructure and Isolate the Tenants Fully segmented environment for the customer Abstraction of complexities Customer 1 Service Provider MPLS Backbone Self-provisioning and automated process to help ensure agility Reduced need for intergroup coordination of technologies Removal of manual resource use documentation and tracking Shorter service deployment time Physical Topology 31

29 Built for Multi-Tenancy and Automation Protect the Infrastructure and Isolate the Tenants Fully segmented environment for the customer Abstraction of complexities Customer 1 Service Provider MPLS Backbone Customer 2 Self-provisioning and automated process to help ensure agility Reduced need for intergroup coordination of technologies Removal of manual resource use documentation and tracking Shorter service deployment time Physical Topology 32

30 Prepackaged Services as Service Containers* Bronze Load Balancing 1 VLAN Silver Multiple VLANs SLB and SSL Offload System Configuration Platinum Multiple VLANs VPN Offload Firewall SLB and SSL Offload System Configuration Virtual Firewall and Private VLANs Virtual Firewall and Private VLANs Virtual Firewall and Private VLANs Shared VMFS and No Data Protection Dedicated VMFS and DP Through Snapshots Dedicated VMFS, 100% DP, and Cloning *examples only. 33

31 Si Si WAN/P E Core Physical PODs Si Si WAN Si Si Aggregation Services Sub- Aggregation Collapsed Aggregation One-arm Services Sub- Aggregation Access Access VMDC 2.0 Large Pod VMDC 2.1 dcpod 34

32 Logical Model Components L2 L3 Used to Create 35

33 4 Logical Models Current Generation Bronze Silver Gold Palladium 36

34 Palladium Container Si Si WAN Core-Aggregation and Aggregation devices collapsed Collapsed Aggregation One-arm Services Sub- Aggregation Nexus-5K for Sub-Aggregation Default blueprint includes both a public Zone and a private Zone along with a FW ruleset to segregate the two domains. Each Zone can have SLB and/or FW services. There is also an Management Zone. Access Up to Three Access VLANs in private and Three Access VLANs in public domain. 37

35 Possible Multi-site Container Client Client Admin Mgmt Client Client Admin Mgmt DCI Link

36 Containers are static Targeted at one set of sizes fits all No bespoke services Often limited flexability within the container models What can we do? 39

37 Let s change the model

38 Policy Model changes the Container Policy further changes the game. No longer dealing with a specific logical path way Policy models make more sense with newer Software Defined Network services (e.g. Cisco VSG path based firewall) Easier to apply non ACL based system rules based on a Policy concept 41

39 Policy Model Future I-Z1{ } security: 80 scale: least@80:vip_ip Z1 I any Z1 tcp 80 allow deny all vip_ip: tcp 80 least 42

40 Policy Model Future I-Z1{ } I-Z2 { } security: 80 scale: least@80:vip_ip security: none scale: none Z1 Z2 I any Z1 tcp 80 allow any Z2 allow all deny all vip_ip: tcp 80 least 43

41 Policy Model Future I-Z1{ } I-Z2 { } Z1-Z3 { } security: 80 scale: least@80:vip_ip security: none scale: none security: 22 scale: none Z1 Z2 Z3 I any Z1 tcp 80 allow any Z2 allow all deny all vip_ip: tcp 80 least Z1 Z3 tcp 22 allow deny all 44

42 Network Services Manager

43 Cisco Network Services Manager Automates and virtualizes infrastructure services using abstracted models and policies that define and control the characteristics and behavior of the cloud Increases efficiency and reduces the cost of delivering virtualized computing and storage Provides dynamic policies for more Specific Control across operational Domains and vendor devices Scales well in highly fluid cloud environments Abstracted Cloud Operational Model Consumables Cloud Management Tools Data Center (Computing and Storage Resources) Abstracted Business Model Cisco Network Services Manager Abstracted Service and Topology Model Network Access and Security Services 46

44 Cisco Network Services Manager Abstracted Operational Model NB API Abstracted Business Model Cisco Network Services Manager Engine Abstracted Services and Topology Model Cisco Network Services Manager Controller Cisco Network Services Manager Controller JMS Transport Cisco Network Services Manager Controller Compute Network Storage Compute Network Storage Compute Network Storage Pod/Block Pod/Block Pod/Block 47

45 Service Use Cases Using Network Containers Sample Computing Customer and storage Use Case resources attached to a routable VLAN Capability to partition and zone virtual machines and access within their containers Accessible from a VPN connections (hybrid cloud) NC Topology: VPN with Network Container Device Roles Router and PE Distribution Layer 2 Aggregation Services Virtual machine is deployed outside Cisco Network Services Manager Layer 2 Aggregation Access This use case supports creation of a protected private zone. The customer requires that the only way to reach this zone is through a private VPN (MPLS, SSL, and IPsec). To build this solution, Cisco Network Services Manager will build both the private zone and the network container within it. 48

46 Network Containers - Examples 1. Remote access MPLS 2. Remote access Internet 3. Network Container - Public Routable 9. Add one-armed load balancer 10.Public Access with Service VM 11.Public Access two tiered with Firewall 4. Network Container - Unrouted 5. Add tenant unprotected private zone 6. Add tenant protected private zone 7. Add new Zone to existing Firewall 8. Add new Zone with new Firewall 12.Public Access two tiered with Firewall and Load Balancer 13.Public Access two tiered with Firewall and Load Balancer (NAT) 14.Public Access with Service VM and Protected Zone 49

47 Network Container Models Tenant Creation Basic Enhanced Network Container Large Network Container Firewall Service Virtual Machine with Basic Network Container Multi-Tiered Network Containers Behind Firewall 50

48 API Driven Modular Cloud

49 Our industry is changing Customer value is moving up into software and web services Virtualization and internet scale is changing data center architecture Software-defined networking is evolving Our Cloud Computing strategy is evolving along with the industry ITSM Services Offerings are changing to keep up 52

50 Today s Architectural Battle - Applications Web 2.0 Approach Enterprise Approach Scale-out Architecture Design for Failure Information-centric Commodity systems Open Source Software Innovation Driven from OSS Vertical scaling HA failover model Transactional Application specific Infrastructure Commercial Software 53

51 Current IaaS has Challenges Developer API Only provides basic Network Connectivity. Compute Service (VMs, Memory, Local Disk) Storage Services (Block, Massive Key-value store) User and System Admin Servers Disks Accounts Basic Network Connectivity Difficult to create N-tier apps. Dependent on cloud system software vendors to express custom value (or heavy application customization Limited ability for applications to take advantage of network services. 54

52 OpenStack OpenStack is open source software that allows any company to build their own public or private cloud. Sits above the hypervisor and is hypervisor agnostic Xen, KVM, Vmware ESX, Hyper-V Think of it as: software that powers Amazon s EC2+S3. Dell Bundles Installer Stability is improving over time (still has Citrix some Distro announced way to July 2010 go) 25 members NASA, Rackspace Intel, Citrix April members Cisco, Citrix, Arista, Nicira + 14 others propose unified NaaS Jan members Nebula appliance Piston OpenStack Distro HP committed AT&T committed 55

53 OpenStack Overview User/Admin Portal System API Billing Integration Cloud Mgmt. Service Catalog Federated Resource DB Service Assurance Manager Help Desk CRM Integration CMDB Integration Virtual Mgmt. Physical Mgmt. Object Integration and Orchestration Layer Compute API Network API Storage API Compute Network Storage SA Integration Physical Infrastructure Element Management Compute Network Storage SA API 56

54 OpenStack Compute Key Features Asynchronous eventually consistent communication REST-based API Horizontally and massively scalable Hypervisor agnostic: support for Xen,XenServer, Hyper-V, KVM, UML and ESX Hardware agnostic: standard hardware, RAID not required 57

55 OpenStack Object Storage Key Features REST-based API Data distributed evenly throughout system Scalable to multiple petabytes, billions of objects No central database Account/Container/Object structure (not file system, no nesting) plus Replication (N copies of accounts, containers, objects) Hardware agnostic: standard hardware, RAID not required 58

56 OSS in Action: Merger of Multiple Proposals NetworkService NetworkService Rackspace/Nicira Citrix/Rackspace/Ni cira NetworkServicePOC NTT/Midokura NetworkContainers Cisco NaaS Core Design Intel Unified Plan 59

57 Open Source with Vendor-supplied plug-ins Quantum API Quantum Service Quantum Plug-in API Cisco Cloud Networking Plug-In API Extensions Cisco NSM Cisco Infrastructure Products Nexus 1k/7k Unified Computing System (via UCS Manager) Routing portfolio (e.g. ASR, CRS) 60

58 Modular Integration with OpenStack* Cisco Intelligent Automation / Cisco Cloud Portal Nova Compute Service Swift Storage Service Glance Image Service OpenStack Distribution Quantum Network Service Donabe Container Service Cisco NSM Cisco Infrastructure Products Unified Fabric Unified Network Services Unified Computing * Not Committed, illustration only 61

59 Conclusions

60 New Cloud Models Create Possibilities Enterprise and Service Providers are leveraging the value of Cloud Automation needs some level of consistency, driving Container based Cloud models A shift from ITSM to API driven cloud is underway (driven by the needs of Application Development trends) Containers support this shift, but need to move to Policy models to maintain flexibility Modular components accelerate the ability to address further development shifts 63

61 Complete Your Online Session Evaluation Give us your feedback and you could win fabulous prizes. Winners announced daily. Receive 20 Passport points for each session evaluation you complete. Complete your session evaluation online now (open a browser through our wireless network to access our portal) or visit one of the Internet stations throughout the Convention Center. Don t forget to activate your Cisco Live Virtual account for access to all session material, communities, and on-demand and live activities throughout the year. Activate your account at the Cisco booth in the World of Solutions or visit 64

62 Final Thoughts Get hands-on experience with the Walk-in Labs located in World of Solutions, booth 1042 Come see demos of many key solutions and products in the main Cisco booth 2924 Visit after the event for updated PDFs, ondemand session videos, networking, and more! Follow Cisco Live! using social media: Facebook: Twitter: LinkedIn Group: 65

63