NET1846. Introduction to NSX. Milin Desai, VMware, Inc Kausum Kumar, VMware, Inc

NET1846 Introduction to NSX Milin Desai, VMware, Inc Kausum Kumar, VMware, Inc

Disclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitment from VMware to deliver these features in any generally available product. Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind. Technical feasibility and market demand will affect final delivery. Pricing and packaging for any new technologies or features discussed or presented have not been determined. CONFIDENTIAL 2

Agenda 1 Intro to NSX 2 NSX Momentum 3 NSX Use Cases 4 What s New in NSX 2014 5 NSX Operations 6 In closing CONFIDENTIAL 3

Agenda 1 Intro to NSX 2 NSX Momentum 3 NSX Use Cases 4 What s New in NSX 2014 5 NSX Operations 6 In closing CONFIDENTIAL 4

The Anatomy of the Most Agile and Efficient Data Centers is SDDC Google / Facebook / Amazon Data Centers Custom Application Software / Hardware Abstraction Custom Platform Software / Hardware Abstraction Any x86 Any Storage Any IP network CONFIDENTIAL 5

The Choice for New IT for All Applications Google / Facebook / Amazon Data Centers Custom Application Software / Hardware Abstraction Custom Platform Software / Hardware Abstraction Software Defined Data Center (SDDC) Any Application SDDC Platform With NSX Any x86 Any x86 Any Storage Any Storage Any IP network Any IP network CONFIDENTIAL 6

Provides A Faithful Reproduction of Network & Security Services in Software Switching Routing Load Balancing Connectivity to Physical Networks Management APIs, UI Policies, Groups, Tags Firewalling VPN Data Security Activity Monitoring CONFIDENTIAL 7

Enables Dynamic creation of complex application topologies in minutes Network and Security Virtualization with NSX Software Hardware CONFIDENTIAL 8

NSX Components Cloud Consumption Management Plane NSX Manager Self Service Portal vcloud Automation Center, OpenStack, Custom CMS Single configuration portal REST API entry-point Control Plane NSX Controller Manages Logical networks Control-Plane Protocol Separation of Control and Data Plane Data Plane Distributed Services NSX Edge High Performance Data Plane Scale-out Distributed Forwarding Model Logical Switch Distributed Logical Router Firewall ESXi Hypervisor Kernel Modules CONFIDENTIAL 9

NSX in a 3-Tier App Deployment NSX Manager NSX Controller Cluster vcenter Hypervisor Hypervisor Host 1 Management Cluster Host 2 Web App Web App Web DB Hypervisor Hypervisor Hypervisor Hypervisor Hypervisor Host 3 Host 4 Host 5 Host 6 Host 7 Compute Clusters Edge Cluster CONFIDENTIAL 10

Agenda 1 Intro to NSX 2 NSX Momentum 3 NSX Use Cases 4 What s New in NSX 2014 5 NSX Operations 6 In closing CONFIDENTIAL 11

VMware NSX Training & Certification: Making SDE Real in 2014 NET 1214 Training Certified Network Virtualization Expert Certified Network Virtualization Professional Certification Career Path Certifications & Training Programs CONFIDENTIAL 12

NSX Training and Certification Portfolio Training Courses (www.vmware.com/go/nsxtraining) VMware NSX Install, Configure, Manage VMware NSX Fast Track for Internetworking Experts (coming) VMware NSX Design and Deploy (coming) Certifications (www.vmware.com/certification) VMware Certified Professional Network Virtualization (VCP-NV) VMware Certified Implementation Expert Network Virtualization (VCIX-NV) VMware Certified Design Expert Network Virtualization (VCDX-NV) CONFIDENTIAL 13

Designing with NSX NET 1589 NET 2318 NSX Partner Whitepaper NSX Partner Reference Design SDDC Validated Guides NSX Design Guides NSX Hardening Guide Reference Designs and Technical Papers on the NSX Portal: http://www.vmware.com/products/nsx/resources.html Reference Designs & Technical Papers on VMware Communities: https://communities.vmware.com/docs CONFIDENTIAL 14

New Service Categories and Partners NSX Partner Extensions Physical-to-Virtual Services Operations and Visibility Application Delivery Services Security Services NET 2225 CONFIDENTIAL 15

New Service Categories and Partners GA Q32014 NSX Partner Extensions Physical-to-Virtual Services Operations and Visibility Application Delivery Services Security Services NET 2225 CONFIDENTIAL 16

VMware NSX Momentum: Over 150 Customers top investment banks enterprises & service providers CONFIDENTIAL 17

Agenda 1 Intro to NSX 2 NSX Momentum 3 NSX Use Cases 4 What s New in NSX 2014 5 NSX Operations 6 In closing CONFIDENTIAL 18

VMware NSX Use Cases Self-Service IT Dev X Data Center Automation Public Clouds Acquisition A Dev A Test X Examples DevOps Cloud On-boarding M&A Examples Micro-segmentation of App Simplifying Compute Silos DMZ Deployments Examples XaaS Clouds Vertical Clouds Key Capabilities Application specific networking Flexible IP Address Mgmt Simplified consumption Key Capabilities Programmatic Consumption Full featured stack Visibility and ops Key Capabilities Multi-tenant Deployment Programmatic L2, L3, Security Overlapping IP Addressing Any Hypervisor, Any CMP CONFIDENTIAL 19

Consumer Experience vs. Corporate Experience CONFIDENTIAL 20

Enterprise Business Leaders Want their IT to be like Amazon New IT Hybrid or No IT Outsourced CONFIDENTIAL 21

Today s app, PAAS, Containers ---- I want it all NOW Multi-Tier App, Multiple Networks Multi-Tier App, Single Flat Network WEB WEB APP DATABASE APP DATABASE CONFIDENTIAL 22

NSX Integrates with Cloud Automation Systems to Deliver Applications with Network and Security in Minutes MGMT 1969 Consumption Any NET 2379 CONFIDENTIAL 23

Self Service IT journey End user drops apps in pre-created instances End user instantiates dynamic topologies End user drives any topology Cloud Consumer Provider Provider delivers guard rails Provider Provider delivers Pre-Created instances Provider delivers Templates for Dynamic Instantiation CONFIDENTIAL 24

Problem: Data Center Network Security Perimeter-centric network security has proven insufficient, and micro-segmentation is operationally infeasible SEC 1959-S Internet Internet Little or no lateral controls inside perimeter Insufficient Operationally Infeasible CONFIDENTIAL 26

NSX: Enabling a Needed Control Point in the Datacenter for Security SEC 1746 An NSX platform is made up of distributed elements embedded in each hypervisor, enabling each VM/app to have its own security policy Security closest to the applications and aligned with application lifecycle. CONFIDENTIAL 27

Security Partner Integrations SEC 1958 Partner Ecosystem Next-generation IPS Malware Protection NET 2225 NSX is the platform for integrating advanced security services. Granular protection of individual VM workloads with customizable policy definitions Automation of advanced malware interception Unified management for physical and virtual sensors Data Center security with agentless anti-malware and guest network threat protection Real-time, dynamic threat protection and response for workloads moving between hosts and virtual data centers Vulnerability Management Automatic vulnerability risk assessment Data Center wide real- time risk visibility Auto segmentation of risky assets Vulnerability prioritization for effective remediation Next-Generation Firewall Multiple threat prevention disciplines including firewall, IPS, and antimalware Safe application enablement with continuous content inspection for all threats Granular user-based controls for apps, content, users, File and Malware Protection Single virtual appliance provides agentless: Anti-malware with URL filtering Vulnerability and software scanning Detection of file changes Intrusion Detection & Prevention CONFIDENTIAL 28

NSX Micro-Segmentation Journey Deployed Applications on Physical Networks Apply NSX Security Full network and security virtualization New Deployments/ Deployed applications CONFIDENTIAL 29

Demo

Agenda 1 Intro to NSX 2 NSX Momentum 3 NSX Use Cases 4 What s New in NSX 2014 5 NSX Operations 6 In closing CONFIDENTIAL 32

NSX The Network Virtualization Platform: What s New Data Plane Services Operations Consumption NSX Edge Active-Active with Scale-Out (ECMP) Open Virtual Switch Flow optimization, multi-threading, Hyper-V (alpha) Physical Device Integration CONFIDENTIAL 33

NSX The Network Virtualization Platform: What s New Data Plane Services Operations Consumption Distributed Firewall Operations Improvements Multi-Site & Hybrid Cloud Enablement Layer 2 VPN, Active-Active DC, SRM Validation Firewall Ecosystem Enablement LBaaS UDP support, ecosystem enablement DDI DHCP Relay CONFIDENTIAL 34

NSX The Network Virtualization Platform: What s New Consumption Data Plane Services Operations Operations Guides & Best Practices Integration with Existing Tools Riverbed, Gigamon, NetScout, EMC Smarts Analytics VMware vcenter Ops, Log Insight Firewall Operations Tufin, Algosec New NSX Partners & Service Categories Physical-to-Virtual Services Operations & Visibility Application Delivery Services Security Services CONFIDENTIAL 35

NSX The Network Virtualization Platform: What s New Consumption vcloud Automation Center More topologies and on demand use cases OpenStack Juno Control plane scale & Docker integration Data Plane Services Operations CONFIDENTIAL 36

NSX The Network Virtualization Platform: What s New Consumption VMware vcloud Automation Center OpenStack Juno Operations Operations Guides & Best Practices Integrations with existing tools Analytics, Firewall Ops New NSX Partners & Service Categories Partner Integration Services Distributed Firewall Operations LBaaS: UDP support DDI: DHCP relay Multi-site and hybrid enablement Data Plane Continue advancements of Open Virtual Switch NSX Edge: A-A with scale-out Physical device integration CONFIDENTIAL 37

Agenda 1 Intro to NSX 2 NSX Momentum 3 NSX Use Cases 4 What s New in NSX 2014 5 NSX Operations 6 In closing CONFIDENTIAL 38

Operationalizing NSX

NSX Operations Beyond Packet Visibility NET 1966 Native NSX Ops for the Cloud Admins Flow monitoring Server access monitoring Tunnel healthcheck SDDC Operator Enable Advanced Analytics Enable Existing Tools for the Network Operator SPAN/RSPAN Netflow/IPFIX LLDP Syslog Integration Plug into Existing Network Monitoring Systems CONFIDENTIAL 40

Demo

Integrating with Physical

NSX with physical workloads x86-based bridge Physical Workloads VXLAN VLAN Leverages x86 server HW VTEP Physical Workloads VXLAN VLAN Highest density but requires specific hardware CONFIDENTIAL 45

NSX with physical workloads x86 based bridging Ecosystem with OVSDB Native NSX support for containers CONFIDENTIAL 46

NSX Performance

NSX Performance delivered by a Distributed, Scale-out Architecture 20 15 10 Send throughput in Gbps 5 0 Send Throughput in Gbps 64 512 1500 32k 64k TCP Message Size 20 15 10 5 0 Logical Switching Firewalling 64 512 1500 32k 64k TCP Messge Size Send Throughput in Gbps 20 15 10 5 0 TCP Send throughput in Gbps 10 5 0 Logical Routing 64 512 1500 32k 64k TCP Message Size Bridging 64 512 1500 32k 64k TCP Message Size NET 1883 CONFIDENTIAL 48

Agenda 1 Intro to NSX 2 NSX Momentum 3 NSX Use Cases 4 What s New in NSX 2014 5 NSX Operations 6 In closing CONFIDENTIAL 49

NSX The Network Virtualization Platform Consumption How an end user consumes NSX services via a Cloud Management Platform. The operator interacts Any with the system through UI or API. Operations Partner extensions NSX operator uses tools (built-in and 3 rd party) for troubleshooting, visibility vcops Software partner extensions Management, Control & Data plane integration of 3 rd party services Hardware partner extensions Partner Integration Services NSX logical services and 3 rd party extensions for networking and security (ex. Logical switch, Logical router, Firewall, Load Balancer, VPN, DDI) L2 Switch L3 Router Firewall Load Balancer VPN DDI Data Plane vsphere NSX Edge 3 rd Party GW KVM Provides workload connectivity & services processing (ex. hypervisors, physical switches and appliances) XenServer Hyper-V CONFIDENTIAL 50

SDDC Approach with NSX Enables Choice and Flexibility Today s Application < Any Application > PAAS Containers... 2-Tier / 3-Tier < Any Network > Leaf / Spine Build Your Own Converged Systems < Any Infrastructure > Hyper- Converged Systems... CONFIDENTIAL

Thank You

What s Next Play Learn Deploy VMware NSX Hands-on Labs labs.hol.vmware.com VMware Booth #1229 3 NSX Demo Stations Explore, Engage, Evolve virtualizeyournetwork.com Network Virtualization Blog blogs.vmware.com/networkvirtualization NSX Product Page vmware.com/go/nsx NSX Training & Certification www.vmware.com/go/nvtraining NSX Technical Resources Reference Designs vmware.com/products/nsx/resources VMware NSX YouTube Channel youtube.com/user/vmwarensx VMware NSX Community communities.vmware.com/community/vmtn/nsx CONFIDENTIAL 53

Business Solution NET1214 NSX Certification the Next Step in your Networking Career NET1745 The Case for Network Virtualization: Customer Case Study NET1786 The Business Case for Network Virtualization NET2293 Bridging Enterprise Networks to Hybrid Cloud Using NSX Hands-on Labs SDC-1402 vsphere Distributed Switch from A to Z SDC-1403 Introduction to VMware NSX SDC-1420 OpenStack with VMware vsphere and NSX SDC-1423 vcloud Suite Basic Networking SDC-1424 VMware NSX and SDDC SDC-1425 VMware NSX Advanced CONFIDENTIAL 54

Technical Track - Networking NET1846 Introduction to NSX NET1743 VMware NSX A Technical Deep Dive NET1957 NFV for Telco Infrastructure NET1468 A Tale of Two Perspectives: IT Operations with VMware NSX NET1586 Advanced Network Services with NSX NET1560 The NSX Guide to Horizon View NET1883 NSX Performance Overview NET1588 Load Balancer as a Service, using NSX or Partner Solutions NET1401 vsphere Distributed Switch Best Practices for NSX NET2318 Scale-Out NSX Deployments: With VMware-powered SDDC NET1581 Reference Design for SDDC with NSX for Multi-Hypervisors NET2379 Dynamically Configuring Application Specific Network Services for vcac &NSX NET2225 NSX Platform: Enabling 3 rd Party Network & Security Solutions CONFIDENTIAL 55

Advanced Technical Track - Networking NET1949 VMware NSX for Docker, Containers & More NET1589 Reference Design for SDDC with NSX & vsphere NET1583 NSX for vsphere Logical Routing Deep Dive NET1974 Multi-Site Data Center Solutions with VMware NSX NET1674 Advanced Topics & Future Directions in Network Virtualization with NSX NET1966 Operational Best Practices for VMware NSX NET1592 Under the Hood: Network Virtualization with OpenStack Neutron & VMware NSX Group Discussions - Networking NET3441-GD vsphere Distributed Switch NET3442-GD vcac and NSX NET3443-GD NSX Routing Design Best Practices NET3445-GD NSX Multi Site Deployments NET3444-GD NSX Network Services CONFIDENTIAL 56

Technical Track - Security SEC1196 Who Can You Trust? Strategies & Designs for Implementing Zero-Trust Model Leveraging NSX SEC2238 Security & Micro-Segmentation for the SDDC SEC1959-S The Goldilocks Zone for Security SEC1958 Automating Security Policy Enforcement with VMware NSX SEC1698 Optimize Security with Context & Isolation using NSX Guest Introspection SEC2567 Unleashing Collaborative Security with VMware NSX Advanced Defense for Advanced Threats Advanced Technical Track - Security SEC2421 VMware NSX Security Operations Best Practices SEC1746 NSX Distributed Firewall Deep Dive Group Discussions - Security SEC3446-GD Security & Micro-segmentation SEC3449-GD Security Policy Automation using NSX Service Composer SEC3448-GD NSX Platform Extensibility SEC3447-GD Compliance Reference Architecture CONFIDENTIAL 57

Technical Track Management MGT1833 How to Perform Troubleshooting and Root Cause Analysis Using Log Insight MGT1878 Deep Dive into How vcenter Operations Simplifies NSX Operations MGT1969 vcloud Automation Center and NSX Integration Technical Deep Dive CONFIDENTIAL 58

Fill out a survey Every completed survey is entered into a drawing for a $25 VMware company store gift certificate

NET1846 Introduction to NSX Milin Desai, VMware, Inc