主題 :Cisco Data Tetration Solution - 思科大數據維運解決方案 公司名稱 :Cisco Systems 主講人 : 大中華區數據中心事業部 首席技術顧問錢小山
Tetration 1 2 3 4 Addition Multiplication Exponentiation Tetration a + n = a + 1 + 1 +... + 1 n a x n = a + a +... + a n a n = a x a x... x a n a = a a n a.. a n X X X X X X X X X X X X X X X 2 2 2 = 4 2 2 2 = 16 2 2 2 = 65536 2 Infinity 9 77 9 9 9 = 81 9 9 = 1.966x1077 9 (1.966x10 ) = Infinity 10 10 10 10 = 100 10 10 = 1x10 100 Infinity
It s a Hybrid IT World 81% Evaluating or Using Public Cloud 73% Have a Hybrid Cloud Strategy 84% Will Use Multiple Clouds Source: Source: IDC InfoBrief, sponsored by Cisco, Cloud Going Mainstream. All Are Trying, Some Are Benefiting; Few Are Maximizing Value. September 2016
LoB requirements Closing the Gap Cloud Applications Cloud Gap Between what cloud applications require Traditional Applications IT capabilities People Processes Tools and what IT is capable of reliably and confidently supporting today. Time
Cisco Digital Network Architecture Network-enabled Applications Cloud Service Management Principles Open APIs Developers Environment Automation Abstraction and Policy Control from Core to Edge Policy Orchestration Open and Programmable Standards-Based Virtualization Analytics Network Data, Contextual Insights Physical and Virtual Infrastructure App Hosting Cloud-enabled Software-delivered Insights and Experiences Automation and Assurance Security and Compliance
What if you could actually look at every data packet that has ever traversed the Data Center
大數據維運 (FCAPS) 的三大需求 Continous & Always-On On Demand Checking Health and Compliance 持續? 無數據遺失? 專家系統?
Cisco Tetration Analytics Pervasive Sensor Framework Provides correlation of data sources across entire application infrastructure Enables identification of point events and provides insight into overall systems behavior Monitors end-to-end lifecycle of application connectivity
Datacenter/Cloud Wide Traffic Flow Visibility Detail information about the flow Information about Consumer Provider and type of traffic
Traditional Model : Siloed Architecture Configuration, Accounting, Performance, Security Fault, Analytics Tools Data Collection Network Production Network ParStream CSA Nexus 3000 Nexus 3100 Nexus 3500 Nexus 9300 Nexus 9500 + Cisco Nexus Data Broker Software SPAN or Tapping On-demand Data Collecting Analyze Data
New Model : Operational Big Data & Analytics Configuration, Accounting, Performance, Security Fault, Analytics Tools Data Collection Network Production Network 大數據維運專家系統 Nexus 3000 Nexus 3100 Nexus 3500 Nexus 9300 Nexus 9500 + Cisco Nexus Data Broker Software Cisco Tetration Analytics Platform Real-time Data Collecting Under 1 Second Real-time Data Analytics Forensics: Every Packet, Every Flow, Every Speed Application Insight Policy Simulation and Impact Assessment Automated Whitelist Policy Generation Policy Compliance and Auditability
Cisco Tetration Analytics Architecture Data Collection Analytics Engine Visualization and Reporting Host Sensors Tetration Telemetry Web GUI Network Sensors Cisco Nexus 92160YC-X Cisco Nexus 93180YC-EX Cisco Tetration Analytics Platform REST API Third-Party Metadata Sources Configuration Data Push Events
Cisco Tetration Analytics Forensics: Every Packet, Every Flow, Every Speed Application Insight Policy Simulation and Impact Assessment Automated Whitelist Policy Generation Policy Compliance and Auditability
Data Replay & Forensics Replay flow details like a DVR Information mapped across 25 different dimensions Thick lines indicate common flows Faint lines indicate uncommon flows
Application Group Discovery (ADM) BM BM Cisco Nexus 9000 Series Network-only sensors, host-only sensors, or both (preferred) Bare-metal,, & switch telemetry Application Group M BM BM BM Brownfield Bare-metal & telemetry Cisco Tetration Analytics Platform BM BM Bare metal and BM BM BM On-premises and cloud workloads (AWS) telemetry (AMI ) Unsupervised machine learning Behavior analysis BM BM
White List Recommendation Application Discovery Web Tier App Tier DB Tier Storage Storage Whitelist Policy Recommendation (Available in JSON, XML, and YAML) Policy Enforcement (Future Roadmap)
Real-Time and Historical Data Policy Simulating BM BM BM Cisco Tetration Analytics Platform Validating policy impact assessment in real time Simulating policy changes over historic traffic View traffic outliers for quick intelligence Audit becomes a function of continuous machine learning
Compliance Testing BM BM BM BM Cisco Tetration Analytics Platform Identify policy deviations in real-time Review and update whitelist policy with one click Policy lifecycle management
Interact with SDN Controller UCS Tetration Analytics App Policy APIC UCS Application Policy Recommendation Data Real Time Network Policy Import Policy using ACI Toolkit Automatic creation of EPGs and Contracts Cisco Nexus 9000 Series
Interact with Cloud Orchestrator Tetration Analytics 10101101 01010011 10101010 10001011 App Policy Cloud Center App Level Policy Enforcement / Visibility Data Real Time App Policy Self-documenting Network Real time detection & closed loop automation Nexus 9K Amazon Web Services Microsoft Azure Google Cloud
Use Case : SDN-Based Data Analytic Services 图 应 Cisco Nexus Data Broker Analytics Engine Cisco Tetration Analytics Platform 络换 Cisco Nexus) Data from SPAN port 络 Public Internet Unidirectional optical tap OpenFlow
What if you could actually look at every data packet that has ever traversed the WAN network network without sampling?
constantly learning, adapting, protecting
Cisco DNA Center - A Closed loop automation Network Assurance on DNA Center Automation (APIC-EM) Telemetry, alerts, violations Network inventory, topology, and configuration Analytics (Network Data Platform (NDP)) Network and telemetry configuration Streaming telemetry & network data
What if you want to extract the data for further processing or take some actionable insight from the network?
What Is Cisco Kinetic? A Streamline IoT Operatios Platform
Empowering the Edge Compute Inside the Network Data Center / Cloud IoT Applications Management Business Applications Analytic Systems Billing Microservices Edge / Fog Processing Optimized hardware footprint No need for separate compute machinery Integrated security Edge / Fog Processing Empowered edge processing Reduced latency & bandwidth cost
Cisco Kinetic How Does It Work? Zero Touch Deployment Predictive Maintenance Technician Toolkit Machine Analytics New Service Creation 1 Gateway Power On 9 2 Field Tech App App App App App App App 01010 01010 101010101 010101010 101010101 Cisco Data Connect 3 Scanning / Claiming 4 Call Home / Register 5 Gateway Provisioning 6 01010101010 4 5 3 6 Edge / Fog App Download 7 Connect to Devices / Sensors 8 Container 1 SIM Gateway 7 8 Data Gathering, Processing, API to Applications 9 Cisco or 3 rd Party Applications
Cisco Kinetic Services for the IoT Network Data Distribution Routing By Source By Content By Rules By Policy IoT Services Gateway Management (covered in earlier slides) Remote Access Application Management Data Routing Fog Computing Fabric IP Network Distributed Computing Built into the Network, Served by the Cloud
Next Steps Learn more about ASAP Data Center www.cisco.com/go/asap Learn more about DNA www.cisco.com/go/dna
Q & A
提醒填寫本場議程問卷! 利用電子票卡進行線上填寫並請保留完成後的 QRcode 畫面, 至該場次入口服務處兌換問卷禮, 謝謝! Thank You.