思科ACI解決方案與應(yīng)用場景

1、思科ACI解決方案與應(yīng)用ACI架構(gòu)和Nexus 9000交換機AGENDA業(yè)界發(fā)展趨勢ACI及Nexus 9000介紹解決了什么問題，帶來哪些好處78%Network is even more critical to delivering applications than a year ago*網(wǎng)絡(luò)是所有應(yīng)用的信息 “BROKER” 應(yīng)用總是在改變類型大數(shù)據(jù)，分布式，移動使用方式 云化 公有云，私有云，混合云交付 任意地點，任何時間，任何設(shè)備* Cisco Global IT Impact Survey5 YEARS 3 YEARS更快的服務(wù)器更新周期 3 YRS更快的網(wǎng)絡(luò)更新周期 5 YR

2、S數(shù)據(jù)中心發(fā)展的驅(qū)動力10GE板載網(wǎng)卡, 虛機密度, 大數(shù)據(jù)Upto 12 Cores per Socket *210G LOM/FlexLoM Shipping *4 新的服務(wù)器平臺帶來更高I/O吞吐需求大數(shù)據(jù)增加?xùn)|西向數(shù)據(jù)流量DATA CENTER IP TRAFFIC GROWTH25% CAGR (2012-2017)*3*1 IDC Worldwide Virtual Machine 2013-2017 Forecast *3 Cisco Global Cloud Index: Forecast (2012-2017)HYPERVISORVMVMVMVMVMVM虛機密度驅(qū)動更高I/O

3、性能Avg.11 VMs/ Linux Server*1*4/t5/Coffee-Coaching-HP-and-Microsoft/HP-FlexibleLOM-for-Gen8/ba-p/108515 *2 Intel Xeon E5 Spec 新一代數(shù)據(jù)中心云計算架構(gòu)發(fā)展方向傳統(tǒng)以硬件為中心的網(wǎng)絡(luò)架構(gòu)傳統(tǒng)概念的軟件定義的網(wǎng)絡(luò)（傳統(tǒng)SDN）以用戶應(yīng)用為中心過度依賴硬件易于形成資源豎井缺乏靈活性，資源利用率低軟硬件割裂硬件效率和性能下降應(yīng)用對資源的控制不透明，管理和排錯難度大摒棄軟硬之爭回歸以用戶應(yīng)用為中心調(diào)度資源充分發(fā)揮軟件和硬件的雙重優(yōu)勢：高效發(fā)揮硬件性能，提供應(yīng)用可視化自動化的基礎(chǔ)架構(gòu)

4、思科的一點陳年舊事 M.P.L.S的故事 體制內(nèi)創(chuàng)業(yè) spin inSoni Jiandani1993200220082013Cat 6500MDS9000NEXUS2/5K, UCSN9K/ACI開放的API集中化策略模型開源應(yīng)用策略控制器APIC策略模型ACI_50% SIMPLER CODE BASE FUTURE PROOF UPGRADABLE TO ACIPROGRAMMABILITY AND AUTOMATIONNETWORK VIRTUALIZATION SUPPORTRESILIENCY: IN SERVICE PATCHING, UPGRADE, FAST RESTARTA

5、CI 以應(yīng)用為中心的互聯(lián)架構(gòu)NEXUS 9500 和 9300軟件、硬件、和系統(tǒng)設(shè)計上的全面創(chuàng)新PricePower EfficiencyProgrammabilityPort DensityPERFORMANCE優(yōu)化的 NX-OS操作系統(tǒng)Nexus 9500業(yè)界領(lǐng)先的合作伙伴應(yīng)用 vs. 網(wǎng)絡(luò)兩種語言應(yīng)用語言?網(wǎng)絡(luò)語言VLANIP AddressSubnetsFirewalls Quality of Service Load BalancerAccess ListsApplication Tier Policy and DependenciesSecurity RequirementsSer

6、vice Level AgreementApplication PerformanceComplianceGeo DependenciesTenants“Let my app servers talk to my web servers.”“Figure out where app lives in physical net”“Trunk VLAN 112 to switch 22.”“Add route.”“Plumb ports 7-12”“Configure ACL”“Apply QoS”Repeat every time app moves or needs more capacity

7、ACI Policy Aligned with ApplicationsTraditional Policy Aligned with .?靈活性： 在任意地方任意網(wǎng)絡(luò)架構(gòu)下部署您的應(yīng)用ACI Application-Centric InfrastructureADCappdbf/wADCWEBAPICConnectivity PolicySecurity PoliciesQoS Bandwidth Reservation AvailabilityStorage and computeApplication L4-L7 ServicesSLAQoSSecurityLoadBalancing應(yīng)用

8、網(wǎng)絡(luò)配置文件可擴展的腳本語言模型HYPERVISORHYPERVISORHYPERVISORSystems Telemetry應(yīng)用快速部署，同時保證擴展性，安全性和應(yīng)用可見性物理工作負(fù)載和虛擬工作負(fù)載環(huán)境下一致的可視性Tenant HEALTH SCORELATENCYVISIBILITYVMsPhysicalApplication Delivery ControllerFirewallMicrosecond(s)3352Packet Drops0Systems TelemetryApplication HEALTH SCORELATENCYVISIBILITYVMsPhysicalAppli

9、cation Delivery ControllerFirewallMicrosecond(s)5168Packet Drops25物理網(wǎng)絡(luò)L4L7服務(wù)多數(shù)據(jù)中心雙活和云服務(wù)計算資源存儲虛擬機以及虛擬網(wǎng)絡(luò)Based on common network load and link failure scenariosACI應(yīng)用場景 更好的性能優(yōu)化和負(fù)載均衡對于網(wǎng)絡(luò)擁塞的控制60%60%90%網(wǎng)絡(luò)方面的創(chuàng)新動態(tài)負(fù)載均衡動態(tài)的包有限調(diào)度大數(shù)據(jù)分析應(yīng)用數(shù)據(jù)加快30%網(wǎng)絡(luò)端口利用率集中的安全控制和審計功能通過應(yīng)用程序接口動態(tài)導(dǎo)入安全策略)服務(wù)部署的自動化研發(fā)部門法律部門銷售部門人事財務(wù)ACI應(yīng)用場景 更靈

10、活完善的安全管控既能互相隔離，又不影響性能和擴展將網(wǎng)絡(luò)轉(zhuǎn)發(fā)和安全策略分離開來Open APIsPolicyEngine動態(tài)的企業(yè)安全策略APIC市場部門APPLICATION NETWORK PROFILEACI助力云自動化混合云單點管理端到端應(yīng)用自動化和生命周期管理計算、網(wǎng)絡(luò)、存儲的自動部署融合的基礎(chǔ)架構(gòu)APICL4-7 服務(wù)計算存儲虛擬化ACI 策略驅(qū)動設(shè)計預(yù)演測試采購安裝配置安全策略業(yè)務(wù)交付架構(gòu)數(shù)據(jù)中心自動化 手工 vs. aci策略驅(qū)動Design itProcure itInstall itConfigure itSecure itIs it ready?Architect itAR

11、CHITECT DESIGNCOMPUTEServiceRequestSERVICESSECURITYNETWORKApplicationAvailable架構(gòu)設(shè)計業(yè)務(wù)需求應(yīng)用交付QA itNexus9000交換機 同一平臺兩種運行模式Network Ops DrivenSwitch AutomationPolicy Based Fabric Automations開放, 靈活, 可視化 可編程Future-Proof InfrastructurePer-BoxProgrammabilityCentralized Fabric ProgrammabilityNXOS w/ Enhancemen

12、tsPolicy ControlleriNXOSN9516/N9508/N9504N9396/N93128/N9372NX-OSACIAPIC15NG FabricvPCFEXVxLANPERFORMANCEPORTSPRICEPROGRAMMABILITYPOWER各方面的持續(xù)創(chuàng)新 Nexus 9000PricePower EfficiencyProgrammabilityPort DensityPERFORMANCEPRICECOST STRUCTURE for 1G to 1/10GT and 10G to 40G migrationPERFORMANCE INDUSTRY LEADIN

13、G PRICE / LINE CARD BANDWITH1.92 Tbps per slot100G readyPORT DENSITY20% HIGHER 36 Port 40 Gig Non-blocking DensityPROGRAMMABILITYJSON/XML APILinux Container for customer appsPOWER EFFICIENCYSTATE OF THE ART BACKPLANE FREE DESIGN15% greater power and cooling efficiencyMERCHANT+ ASIC APPROACHInnovatio

14、n in Cisco ASICsTrunk Cabling(100m)Patch panelJumper Cable過去，千兆服務(wù)器到交換機，交換機10G光纖上行Patch panelJumper Cable40G BiDi 光纖，讓客戶平滑過渡到10G服務(wù)器接入的時代極大的節(jié)省了重新布線的成本萬兆服務(wù)器已經(jīng)逐漸成為業(yè)界主流這要求接入交換機提供40G上行，才能保證48臺服務(wù)器足夠上行帶寬傳統(tǒng)40G要8芯多模光纖今天機房大都是6/12芯光纖到每個機柜，跑一個40G夠嗆，遑論冗余如果要跑40G，用戶需要整個機房重新布線BiDI光纖模塊，不需要重新布線，直接上40G今天，48個萬兆服務(wù)器接到交換機，

15、你需要交換機40G上行，布線成了問題思科40G BiDi 光模塊，業(yè)界唯一可以重用原有萬兆多模光纖Source: Corning OM3 Cable & Patch Panel list prices, Cisco 40G BiDi list price, Competitors 40G SR4 list priceNexus 9000和ACI 在中國飛速增長的客戶群體ACI 全球客戶案例小結(jié)：未來的方向數(shù)據(jù)中心和云基礎(chǔ)架構(gòu)，不管是物理還是虛擬，都不再需要手工配置，也不用軟件定義或編程，而是以應(yīng)用為中心，的策略驅(qū)動思科引領(lǐng)數(shù)據(jù)中心的未來VM-FabricIntegrationOpenNetwo

16、rking200920142008Unified FabricLANSANFabricComputingNetworkComputeStorageAccessApplicationCentric InfrastructureNetworkAppsPolicyThe Next Wave#1 in DC Networking#1/2 in Unified Computing#1 IT InfrastructureInterCloudIoEProcessPeopleThingsData投資保護將ACI擴展到現(xiàn)有的基礎(chǔ)架構(gòu)中Extend ACI Model on existing IP network

17、s, L4-7 Services, HypervisorsExtended ACI POLICYACIFabricPROFILEExisting Nexus networksHypervisors VMsBare MetalAVSBare MetalHypervisor VMsAVSMulti-Hypervisor-Ready FabricIntegrated gateway for VLAN, VxLAN, NVGRE networks from virtual to physicalNormalization for NVGRE, VXLAN, and VLAN networksCusto

18、mer not restricted by a choice of hypervisorFabric is ready for multi-hypervisor Hypervisor IntegrationNetwork AdminApplication AdminPHYSICALSERVERVLANVXLANVLANNVGREVLANVXLANVLANESXHyper-VKVMHypervisor ManagementACI FabricAPICAPICApplication AwarenessApplication-Level VisibilityActions:No new hosts or VMsEvacuate hypervisorsRe-balance clustersPetStore EventPetStore DevLeaf 1 and 2Spine 1 3Atomic countersPetStore ProdLeaf 2 and 3Spine 1 2Atomic countersPetStore QALeaf 3 and 4Spine 2 3Atomic counter