Building Infrastructure for Private Clouds Cloud InterOp 2014"

Transcription

1 Building Infrastructure for Private Clouds Cloud InterOp 2014" Paul Savill Senior Vice President Product Management, Core Network Services Level 3 Communications

2 Key Network Strategy/ Design Considerations" Applications: External/ Internal, Criticality, IOPS and Latency Sensitivity" Bandwidth:" Units, Growth & Predictability" Data and Security: PII, PCI, Govt/ Industry Regs, Corp Policies" End-points: Public/ Private, Local/ Global" 2

3 Cloud Connectivity Network Considerations/ Alternatives" There is no one size fits all solution Flexibility Good Better Best Security Control Reach Availability Performance Scale Cost Public Internet VPN Optical Transport Fiber/ Equip 3

4 Use Case: BCDR" The Old Way: Physical based on core locations" Global VPN connecting HQ and branch offices Dedicated network connecting primary data center Premise-based Internet firewall Physical redundant data center California" London" Public Internet" Regional/ Backup" Enterprise VPN" Primary" Public Internet" Arizona/ Texas" 4

5 Use Case: BCDR" The New Way: Less reliance on physical infrastructure, more geographically relevant" Global VPN connecting HQ and branch offices Dedicated network connecting primary data center and critical cloud resources Public Internet for web use and back-up only Network-based Internet firewall Regional cloud back-up sites with private network connectivity California" London" -- US West --" Branch Office" Branch Office" -- London --" Cloud Service" Cloud Service" Public Internet" Regional/ Backup Data Center" Headquarters" Enterprise VPN" Public Internet" Primary Data Center" Public Internet" Cloud Service" -- US South--" Enterprise VPN" Arizona/ Texas" 5

6 Disaster Recovery-as-a-Service (DRaaS)" The production environment is within the enterprise s data center; however, a cloud service provider is used as the recovery site and replication target 10G Transport connectivity between Enterprise Data Center and CSP Diverse laterals into buildings Geo-diverse 10G WAN links between Enterprise Data Center and CSP No network spurs or collapsed rings Physical and electronic diversity endto-end Dual gateway design provides even greater network redundancy Buried, terrestrial network with few fiber cuts Multiple fiber conduits % Availability SLA

7 In-Cloud BCDR" CSP PE#1 CSP PE#2 Production applications have been moved to the cloud (IaaS or PaaS), and are protected with full disaster recovery capabilities to another geographical site Distributed Cloud Connectivity Architecture Fully meshed MPLS IP VPN with geo-diverse CSP Data Centers part of the same enterprise VPN instance Diverse, redundant connections into CSP with traffic load-sharing for optimal bandwidth use Direct connectivity between geo-diverse CSP Data Centers across Carrier s MPLS backbone for bidirectional synchronization BGP enabled regionalized routing for steady state optimal performance Rapid convergence of enterprise sites to secondary CSP Data Center during primary CSP Data Center failures Usage based billing CSP Data Center US West Primary CSP Connection (10G) Carrier PE (POP #1)) Carrier MPLS Backbone Carrier MPLS Backbone Enterprise IP VPN VRF Secondary CSP Connection (10G) Carrier PE (POP #2) CSP Data Center US East 7

8 Use Case: BCDR" Solution Summary: Private Network Infrastructure for Private Cloud BCDR" Security" Multi-layered security to safeguard network and IT infrastructure beginning with end-to-end control of a private network physically isolated from the public Internet " Control" Visibility and control to ensure optimal performance through capacity provisioning, troubleshooting and maintenance especially during high-pressure situations " Availability" Resilient convergence-architecture where data can failover rapidly and/or synchronize bi-directionally while minimizing data loss during failures Performance" Deterministic latency, jitter and packet loss where the upper bounds are known and fixed to ensure that heartbeat communication, data synchronization and other network communication are reliably communicated Scalability" The ability to facilitate rapid capacity augments to accommodate increased traffic in the face of transitioning workloads 8