More Related Content
Similar to Presentation deploying cloud based services (20)
More from xKinAnx (20)
Recently uploaded (20)
Presentation deploying cloud based services
- 1. Deploying Cloud BasedDeploying Cloud Based ServicesServices Colin Li lli@ icolli@cisco.com Consulting Solution Architect Asia Pac CTO office Cisco Confidential 1© 2010 Cisco and/or its affiliates. All rights reserved.
- 2. 1. What are the top applications or workloads that you see customers moving (or consider moving) to a cloud ?customers moving (or consider moving) to a cloud ? a) Virtual Desktop b) Development and/or Test Environments c) Disaster recovery environment) y d) All of the above 2 What are the top concerns for your customers to move to a2. What are the top concerns for your customers to move to a cloud? a) Economic Benefits Unclear (e.g. TCO) b) Security Concernsb) Security Concerns c) Loss of Control d) Application Migration © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2
- 3. Cloud Defined IT resources and services that are abstracted from the underlying infrastructure provided “on Essential Rapid ElasticityMeasured Service IT resources and services that are abstracted from the underlying infrastructure provided on- demand” and “at scale” in a multi-tenant environment Essential Characteristics On-Demand Self Service Broad Network Access Resource Pooling p y Service Models Software as a Service (SaaS) Platform as a Service (PaaS) Infrastucture as a Service (IaaS)Service (SaaS) Service (PaaS) Service (IaaS) Public Private Hybrid Community Deployment Models © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3
- 4. Cisco IaaS Cloud Services – VMDC 2.0 Solution Architecture – A Systems Approach App 1 Application Software Virtual Machine VSwitch Access Services Core/Agg. Peering IP-NGN Backbone Storage & SAN Compute AppApp y pp Internet Subscriber “A” Application 1 Subscriber “B” Application 1 App OS App OS App OS App OS App OS App OS App OS App OS App OS App OS App OS App OS AppApp Subscriber “A” Application 2 App 1 App 2 App OS App OS App OS App OS App OS App OS IP-NGN Partners Subscriber “B” Application 2 App 2 10G Ethernet App OS App OS App OS App OS App OS App OS 10G FCoE 4G FC 1G Ethernet VM to vSwitch vSwitch to HW App to HW / VM ACE FW App OS App OS App OS App OS App OS App OS Subscriber “C” Application 2 App 2 Cisco Confidential 4© 2010 Cisco and/or its affiliates. All rights reserved. 7600 CRS ASR9k Nexus 7000Cat 6500 VSS as Services Chassis) Nexus 5000Rack Servers ) Salaak 1.0 ) UCS ( Salaak 1.1 ) Nexus 1000v SAN Switches ( Salaak ( 1.0 ) MDS ( Salaak 1.1) Consolidated Storage VMWare Vspehere 4 ESX 4 Cisco and Third-Party Applications L2, L3 MPLS Internet
- 5. On-Demand Consumption • Auto provisioning of all virtual machine attributes through converged infrastructure management • Virtualization aware network/storage/computeConsumption • Virtualization‐aware network/storage/compute automation enabled by Nexus, MDS and UCS • Flexible design to enable different classes of service for Multi-Tenant Architecture different tenants • Traffic isolation via dynamic provisioning of VLANs, VRFs ACLs and Virtual Data Centers C it • Proven Data Center of the Future and Next Generation N t ki l bilit VRFs, ACLs, and Virtual Data Centers Capacity At Scale Networking scalability • Add Capacity to the System as a Whole, NOT Individually, Service‐By‐Service © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5 Differentiation Begins With Great Infrastructure ….
- 6. LAN SAN LAN Attributes no longer tied to physical hardware Not just identity Seamless server mobility Server Name: LS-A UUID 56 4dcd3f 59 5b 61 Seamless server mobility Within interconnect domain Dynamic Provisioning Chassis-1/Blade-5 UUID: 56 4dcd3f 59 5b 61… MAC : 08:00:69:02:01:FC WWN: 5080020000075740 Boot Order: SAN, LAN y g Complete infrastructure repurposing Integrated with 3rd part tools © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6 Chassis-9/Blade-2
- 7. Virtualized Network Layer‐3 virtualization with VRFsLayer 3 virtualization with VRFs Layer‐2 virtualization with vlans, other encaps Service virtualization with virtual contexts VM‐level granularity & advanced networking ffeatures Virtualization aware compute fabric Network adapter virtualization VSANs Web Data base App base nNICs mHBAs VIC Cisco Confidential 7© 2010 Cisco and/or its affiliates. All rights reserved. 2 x 10G ports
- 8. Network Container: Abstracts the Service Path Network Container: Abstracts the Service Path Touchpoints: per-tenant variables/logical boundaries (IP Address blocks, VLANS, VRFs, VDCs) & virtual services (security vFWs or LB contexts) Customer Red Customer Green Customer Blue IP/NGN Backbone CE Branch or Campus network P E ( y ) BGP L3 or L2 VPN Access CRS BGP Each tenant contained in a unique VRF N7k Core N7kN7k Vlan/vrf maps to unique Virtual FW/load‐balancer AggVRFAggVRF DSN VSS Pair DSN VSS Pair FW Outer VLANFW Outer VLAN FW Inner VLAN, ACE Outside VLANFW Inner VLAN, ACE Outside VLAN BGP L2 L3 Tenant VRF maps to unique N7k Acc VRF N7k Acc VRF Static Cisco Confidential 8© 2010 Cisco and/or its affiliates. All rights reserved. VLANVLAN per application tierper application tier Web Data base App Web Data base App Web Data base App Tenant VRF maps to unique vlansVM VLANs (N1k) VM VLANs (N1k)
- 9. Add Capacity For System Not Single ServiceAdd Capacity For System, Not Single Service umed Service 1 Available Capacity acityCons Service 2Available Capacity Capa Service 4 Service 3 Ti Service 4 Added infrastructure isTime + infrastructure is dynamically discovered, and comes online to meet any required © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9 + demand.
- 10. On-Demand Consumption • Auto provisioning of all virtual machine attributes through converged infrastructure management • Virtualization‐aware network/storage/computep Virtualization aware network/storage/compute automation enabled by Nexus, MDS and UCS • Flexible design to enable different classes of service Multi-Tenant Architecture for different tenants • Traffic isolation via dynamic provisioning of VLANs, VRFs, ACLs, and Virtual Data Centers Capacity • Proven Data Center of the Future and Next Generation Networking scalabilityCapacity At Scale Networking scalability • Add Capacity to the System as a Whole, NOT Individually, Service‐By‐Service © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10 Differentiation Begins With Great Infrastructure ….
- 11. MultiMulti‐‐Tenancy Path Tenancy Path IsolationIsolation Each tenant is logically isolated from the others using VRF as a container Dedicated logical instances of vrf,vlan,fw,SLB etc .. for each tenant to provide security , privacy and policy control VRF Blue VRF Purple Customer = Customer = VRFVRF provide security , privacy and policy control © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11
- 12. Large Medium Small Service Class Details 3 Workload Types g VM per core 1:1 ov 8 VMs per server 2:1 ov 16 VMs per server 4:1 ov 32 VMs per server Differentiated QoS Network Gold: 40% BW Reservation, CoS 5 Silver: 30% BW Reservation, CoS 2 Bronze: 20% BW Res., CoS 0 yp QoS, Network Svcs. 5 FW, SLB, SSL Offload CoS 2 SLB, SSL Offload CoS 0 Backup Retention Length – 1m,6m,1y Retention Length ‐– 1m,6m,1y Retention Length ‐– 1m,6m,1y D P i Cl Mi (l l i ) S Vi l (l l i )Data Protection Clone ‐ Mirror copy (local site )‐ SNAP copies every 4 hr; 36 hr retention Snap ‐ Virtual copy (local site) SNAP copies every 8 hr; 36 hr retention none Disaster Recovery Remote replication SRDF Remote replication SRDF none Recovery SRDF SRDF Large Medium Small 3 Different storage & RAM sizes g Storage (GB) 300 150 50 RAM (GB) 16 8 4 Storage Growth 50 50 50 RAM sizes © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12 Storage Growth Increments(GB) 50 50 50
- 13. Pre-packaged NW Services as Containers Multiple VLANs Multiple VLANs Silver Gold Bronze Multiple VLANs Multiple VLANs VPN Offload Firewall VPN Offload Firewall LB, 1 VLAN System Configs System Configs SLB & SSL offload Virtual FW + pVLANs Virtual FW + pVLANs Virtual FW + pVLANs © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13 Shared VMFS, No Data Protection Dedicated VMFS, DP via Snapshots Dedicated VMFS, 100% DP, Cloning
- 14. Network Services Automation Logical Topology Step 1: Create Network Container Service Provider • Self Provisioning • Once complex and manual process are automated Customer 2Customer 1 Step Optional: Load Balancer Customer 1 MPLS Backbone• Provides the customer with a fully segmented environment • Elimination of administrative errors through service automation Load Balancer Pool Create web appdb Step 2 & 3: •Bulk VM create •Individual VM create • Removal of manual resource usage documentation and tracking • Reduction in service deployment time L i l T l Step 1: Create Network Container • Minimizing the intergroup coordination of technologies • Abstraction of complexities from the user Logical Topology Step Optional: Load Balancer Pool Create Customer 2 web appdb © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14 Step 2 & 3: •Bulk VM create •Individual VM createPhysical Topology
- 15. Common Physical Infrastructure ServiceCommon Physical Infrastructure R t Network Infrastructure Service Management Software Routers Data Center Network Manager Cisco Fabric Compute Manager Orchestration User Portal & Virtualized Resources Virtualized Resources Storage Manager Engine Service Catalog Compute Network Storage Compute Network Storage Virtualization Manager © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15 Cisco + Partners (e.g. VCE) BMC Pod Pod Manager
- 16. Pods = Physically assigned Resources Network Containers Virtually and securely isolated by tenant Zones – Contain Customized policyisolated by tenant within a Pod Unique Benefit: Logical Multi‐tenancy ‐ Customized policy‐ based workloads Unique Benefit: CLM policy drivenMulti tenancy allows creation of one‐to‐many zones CLM policy driven “placement” makes decision on best resource placement. UCS Manager Cisco Cloud © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16 UCS Manager for the Unified Computing System Cisco Switching Platforms Cloud Lifecycle Management BMC CLM configures and places services within Network Containers and Zones
- 17. Full Stack Provisioning (hardware to business application) © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17 Full Stack Provisioning (hardware to business application) from Days to Minutes
- 18. BMC CLM 1.01 System Test Results • Average 10-15 minutes to config containers E2E • Automation of over 200 command lines per container • 10 requests in queue at same time Provisioning: Average 15-20 minutes. Bronze3 - Start - End: 5:20:19 PM - 5:38:56 PM Bronze2 - Start - End: 5:20:11 PM - 5:36:45 PM • Injected physical and logical error conditions • Troubleshooting with trace capabilities • 90% HA coverage, improve in next release WedDeepika - Start - End: 5:19:50 PM - 5:49:23 PM WedBronze1 - Start - End: 5:19:49 PM - 5:34:19 PM WedDeepika2 - Start - End: 5:19:44 PM - 5:51:19 PM WedBronze4 - Start - End: 5:19:40 PM - 5:32:08 PM WedDeepika3:- Start - End: 5:19:38 PM - 5:47:09 PM W dG ld3 St t E d 5 21 12 PM 5 55 11 PM • De-provisioning and resource reclamation • Base product, production quality WedGold3 - Start - End: 5:21:12 PM - 5:55:11 PM WedGold2 - Start - End: 5:22:20 PM - 5:44:01 PM WedGold1 - Start - End: 5:21:32 PM - 5:46:18 PM © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18
- 19. A t i i i f ll i t l hi tt ib t On-Demand Consumption • Auto provisioning of all virtual machine attributes through converged infrastructure management • Virtualization‐aware network/storage/compute automation enabled by Nexus, MDS and UCS M lti T t • Flexible design to enable different classes of service for different tenantsMulti-Tenant Architecture different tenants • Traffic isolation via dynamic provisioning of VLANs, VRFs, ACLs, and Virtual Data Centers Capacity • Proven Data Center of the Future and Next Generation Networking scalabilityCapacity At Scale g y • Add Capacity to the System as a Whole, NOT Individually, Service‐By‐Service © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19 Differentiation Begins With Great Infrastructure ….
- 20. Foundation: Pre-Integrated Systems POD is a building block, comprising compute , storage and network resources. ••Scalable repeatable and homogeneousScalable repeatable and homogeneous••Scalable, repeatable and homogeneous Scalable, repeatable and homogeneous constructconstruct ••Each Pod is discovered by the system, integrated Each Pod is discovered by the system, integrated into the resource pools, and assigned workloads into the resource pools, and assigned workloads as needed. as needed. NASNAS NASNAS SANSAN SANSAN UCS61xxUCS61xx UCS61xxUCS61xx © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20 Base PODBase POD POD nPOD n . . . . . . . .
- 21. POD CombinationsPOD Combinations 2 sizes and Each with 2 combinations LargeLarge CompactCompact 512 servers512 servers 10 GE ith 64 servers64 servers 0 G i h10 GE with SAN & NAS 10 GE with SAN & NAS 1 GE with SAN & NAS 1 GE with SAN & NAS © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21 SAN & NAS SAN & NAS
- 22. Compact POD sizing 64 server POD Characteristics 2 UCS clusters, each of 32 blades 64 x B200 Blade server @ 96GB RAM NASNAS AccessAccess Nexus 5020Nexus 5020 512 Cores 512 Gold VMs 1vCore per VM (1:1) ov 1024 SilverVMs 0.50vCore per VM (2:1) ov 2048 Bronze VMs 0 25vCore per VM(4:1) ov SANSAN UCS61xxUCS61xx 2048 Bronze VMs 0.25vCore per VM(4:1) ov 5-9 VMs/VLAN 64 servers Combination of all 3 workload types in a POD No of Cores No of VMs Large, 20% 102 102 ( 1:1 ov) Medium, 30% 154 308 (2:1 ov) Small, 50% 256 1024(4:1 ov) © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22 1434Total VMs
- 23. Phase 2 Architecture Principles Minimum of 64 servers , 4,096 VMs ……. Theoretical maximum of 384 servers, 24,572 VMs Core/AggregationCore/Aggregation Nexus 7010Nexus 7010 NASNASNASNAS AccessAccess AccessAccess SANSAN UCS61xxUCS61xx SANSAN UCS61xxUCS61xx Nexus 5020Nexus 5020 Nexus 5020Nexus 5020 . . . . . . . . SANSAN POD 6POD 6 SANSAN POD 1POD 164 server 4 096 VMs 64 server 24 572 VMs © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23 POD 6POD 6POD 1POD 164 server,4,096 VMs 64 server,24,572 VMs Maximum scalability is dependent on the Core/aggmac‐address limit of 128K
- 24. Large POD sizing 512 server POD CharacteristicsNASNAS 8x8-chassis UCS systems (Vblock Type 2 Max) 8 blades/ESX cluster 512 x B200 Blade server @ 96GB RAM 4 096 Cores NASNAS 4,096 Cores 816 Large VMs1vCore per VM (1:1) ov 2,464 Med. VMs0.50vCore per VM (2:1) ov 8,192 Sm. VMs0.25vCore per VM(4:1) ov SANSAN UCS61xxUCS61xx ( ) 5-9 VMs/VLAN in lab (1/8th of a pod in lab) 500-1000 tenants = 12-23 VMs/VLAN Combination of all 3 workload types in a POD POD 1POD 1512 servers No of Cores No of VMs Large, 20% 816 816( 1:1 ov) yp Medium, 30% 1,232 2,464(2:1 ov) Small, 50% 2,048 8,192(4:1 ov) © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 24 11,472Total VMs
- 25. Phase 2 Architecture Principles Minimum of 512 servers ……. Theoretical Maximum of 3,672 servers,98,304 VMVMs CoreCore Nexus 7010Nexus 7010 NASNASNASNAS Access/AggregationAccess/Aggregation Nexus 7018Nexus 7018 Access/AggregationAccess/Aggregation Nexus 7018Nexus 7018 . . . . . . . . SANSAN UCS61xxUCS61xx SANSAN UCS61xxUCS61xx © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25 POD 6POD 6POD 1POD 1512 server, 16,384VMs 512 server, 16,384VMs Maximum scalability is a function of Core port density: 7018 would allow for further L2 scale.
- 26. 1. What are the most important Cloud features for your organization ?organization ? a) Cloud Management /Orchestration b) Scalability c) On demand / Elasticity) y d) All of the above 2 What do you believe are the main benefits of an Integrated2. What do you believe are the main benefits of an Integrated Solution – VMDC 2.0 a) Reduce Integration Cost b) See before You buyb) See before You buy c) Single point of Responsibility d) All of Above © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26
- 27. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 27
- 28. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 28
- 29. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 29
- 30. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30
- 31. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31
- 32. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 32
- 33. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 33
- 34. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 34
- 35. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 35
- 36. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 36
- 37. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 37
- 38. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 38
- 39. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 39
- 40. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 40
- 41. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 41
- 42. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 42
- 43. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 43
- 44. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 44
- 45. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 45
- 46. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 46
- 47. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 47
- 48. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 48
- 49. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 49
- 50. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 50
- 51. Enterprise IT Capability App OS App OS App App OS App OS App OS App OS App OS App OS App OS App OS App OSApplication Application Virtual Data Center Virtual Data Center Cloud OS Cloud OS OSOSOS OS OS Network Transport Virtualization (VPN) Network Services (Security, Performance, Monitoring) Application Security Services Application Security Services Enterprise Network Cloud Service Provider Network Service Provider IP-NGN Network ProviderProvider Cisco is the only systems vendor with value-add solutions for the entire cloud computing infrastructure ecosystem. © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 51 p g y