思科ACI解决方案与应用场景

1、思科ACI解决方案与应用ACI架构和Nexus 9000交换机AGENDA业界发展趋势ACI及Nexus 9000介绍解决了什么问题，带来哪些好处78%Network is even more critical to delivering applications than a year ago*网络是所有应用的信息 “BROKER” 应用总是在改变类型大数据，分布式，移动使用方式 云化 公有云，私有云，混合云交付 任意地点，任何时间，任何设备* Cisco Global IT Impact Survey5 YEARS 3 YEARS更快的服务器更新周期 3 YRS更快的网络更新周期 5 YR

2、S数据中心发展的驱动力10GE板载网卡, 虚机密度, 大数据Upto 12 Cores per Socket *210G LOM/FlexLoM Shipping *4 新的服务器平台带来更高I/O吞吐需求大数据增加东西向数据流量DATA CENTER IP TRAFFIC GROWTH25% CAGR (2012-2017)*3*1 IDC Worldwide Virtual Machine 2013-2017 Forecast *3 Cisco Global Cloud Index: Forecast (2012-2017)HYPERVISORVMVMVMVMVMVM虚机密度驱动更高I/O

3、性能Avg.11 VMs/ Linux Server*1*4/t5/Coffee-Coaching-HP-and-Microsoft/HP-FlexibleLOM-for-Gen8/ba-p/108515 *2 Intel Xeon E5 Spec 新一代数据中心云计算架构发展方向传统以硬件为中心的网络架构传统概念的软件定义的网络（传统SDN）以用户应用为中心过度依赖硬件易于形成资源竖井缺乏灵活性，资源利用率低软硬件割裂硬件效率和性能下降应用对资源的控制不透明，管理和排错难度大摒弃软硬之争回归以用户应用为中心调度资源充分发挥软件和硬件的双重优势：高效发挥硬件性能，提供应用可视化自动化的基础架构

4、思科的一点陈年旧事 M.P.L.S的故事 体制内创业 spin inSoni Jiandani1993200220082013Cat 6500MDS9000NEXUS2/5K, UCSN9K/ACI开放的API集中化策略模型开源应用策略控制器APIC策略模型ACI_50% SIMPLER CODE BASE FUTURE PROOF UPGRADABLE TO ACIPROGRAMMABILITY AND AUTOMATIONNETWORK VIRTUALIZATION SUPPORTRESILIENCY: IN SERVICE PATCHING, UPGRADE, FAST RESTARTA

5、CI 以应用为中心的互联架构NEXUS 9500 和 9300软件、硬件、和系统设计上的全面创新PricePower EfficiencyProgrammabilityPort DensityPERFORMANCE优化的 NX-OS操作系统Nexus 9500业界领先的合作伙伴应用 vs. 网络两种语言应用语言?网络语言VLANIP AddressSubnetsFirewalls Quality of Service Load BalancerAccess ListsApplication Tier Policy and DependenciesSecurity RequirementsSer

6、vice Level AgreementApplication PerformanceComplianceGeo DependenciesTenants“Let my app servers talk to my web servers.”“Figure out where app lives in physical net”“Trunk VLAN 112 to switch 22.”“Add route.”“Plumb ports 7-12”“Configure ACL”“Apply QoS”Repeat every time app moves or needs more capacity

7、ACI Policy Aligned with ApplicationsTraditional Policy Aligned with .?灵活性： 在任意地方任意网络架构下部署您的应用ACI Application-Centric InfrastructureADCappdbf/wADCWEBAPICConnectivity PolicySecurity PoliciesQoS Bandwidth Reservation AvailabilityStorage and computeApplication L4-L7 ServicesSLAQoSSecurityLoadBalancing应用

8、网络配置文件可扩展的脚本语言模型HYPERVISORHYPERVISORHYPERVISORSystems Telemetry应用快速部署，同时保证扩展性，安全性和应用可见性物理工作负载和虚拟工作负载环境下一致的可视性Tenant HEALTH SCORELATENCYVISIBILITYVMsPhysicalApplication Delivery ControllerFirewallMicrosecond(s)3352Packet Drops0Systems TelemetryApplication HEALTH SCORELATENCYVISIBILITYVMsPhysicalAppli

9、cation Delivery ControllerFirewallMicrosecond(s)5168Packet Drops25物理网络L4L7服务多数据中心双活和云服务计算资源存储虚拟机以及虚拟网络Based on common network load and link failure scenariosACI应用场景 更好的性能优化和负载均衡对于网络拥塞的控制60%60%90%网络方面的创新动态负载均衡动态的包有限调度大数据分析应用数据加快30%网络端口利用率集中的安全控制和审计功能通过应用程序接口动态导入安全策略)服务部署的自动化研发部门法律部门销售部门人事财务ACI应用场景 更灵

10、活完善的安全管控既能互相隔离，又不影响性能和扩展将网络转发和安全策略分离开来Open APIsPolicyEngine动态的企业安全策略APIC市场部门APPLICATION NETWORK PROFILEACI助力云自动化混合云单点管理端到端应用自动化和生命周期管理计算、网络、存储的自动部署融合的基础架构APICL4-7 服务计算存储虚拟化ACI 策略驱动设计预演测试采购安装配置安全策略业务交付架构数据中心自动化 手工 vs. aci策略驱动Design itProcure itInstall itConfigure itSecure itIs it ready?Architect itAR

11、CHITECT DESIGNCOMPUTEServiceRequestSERVICESSECURITYNETWORKApplicationAvailable架构设计业务需求应用交付QA itNexus9000交换机 同一平台两种运行模式Network Ops DrivenSwitch AutomationPolicy Based Fabric Automations开放, 灵活, 可视化 可编程Future-Proof InfrastructurePer-BoxProgrammabilityCentralized Fabric ProgrammabilityNXOS w/ Enhancemen

12、tsPolicy ControlleriNXOSN9516/N9508/N9504N9396/N93128/N9372NX-OSACIAPIC15NG FabricvPCFEXVxLANPERFORMANCEPORTSPRICEPROGRAMMABILITYPOWER各方面的持续创新 Nexus 9000PricePower EfficiencyProgrammabilityPort DensityPERFORMANCEPRICECOST STRUCTURE for 1G to 1/10GT and 10G to 40G migrationPERFORMANCE INDUSTRY LEADIN

13、G PRICE / LINE CARD BANDWITH1.92 Tbps per slot100G readyPORT DENSITY20% HIGHER 36 Port 40 Gig Non-blocking DensityPROGRAMMABILITYJSON/XML APILinux Container for customer appsPOWER EFFICIENCYSTATE OF THE ART BACKPLANE FREE DESIGN15% greater power and cooling efficiencyMERCHANT+ ASIC APPROACHInnovatio

14、n in Cisco ASICsTrunk Cabling(100m)Patch panelJumper Cable过去，千兆服务器到交换机，交换机10G光纤上行Patch panelJumper Cable40G BiDi 光纤，让客户平滑过渡到10G服务器接入的时代极大的节省了重新布线的成本万兆服务器已经逐渐成为业界主流这要求接入交换机提供40G上行，才能保证48台服务器足够上行带宽传统40G要8芯多模光纤今天机房大都是6/12芯光纤到每个机柜，跑一个40G够呛，遑论冗余如果要跑40G，用户需要整个机房重新布线BiDI光纤模块，不需要重新布线，直接上40G今天，48个万兆服务器接到交换机，

15、你需要交换机40G上行，布线成了问题思科40G BiDi 光模块，业界唯一可以重用原有万兆多模光纤Source: Corning OM3 Cable & Patch Panel list prices, Cisco 40G BiDi list price, Competitors 40G SR4 list priceNexus 9000和ACI 在中国飞速增长的客户群体ACI 全球客户案例小结：未来的方向数据中心和云基础架构，不管是物理还是虚拟，都不再需要手工配置，也不用软件定义或编程，而是以应用为中心，的策略驱动思科引领数据中心的未来VM-FabricIntegrationOpenNetwo

16、rking200920142008Unified FabricLANSANFabricComputingNetworkComputeStorageAccessApplicationCentric InfrastructureNetworkAppsPolicyThe Next Wave#1 in DC Networking#1/2 in Unified Computing#1 IT InfrastructureInterCloudIoEProcessPeopleThingsData投资保护将ACI扩展到现有的基础架构中Extend ACI Model on existing IP network

17、s, L4-7 Services, HypervisorsExtended ACI POLICYACIFabricPROFILEExisting Nexus networksHypervisors VMsBare MetalAVSBare MetalHypervisor VMsAVSMulti-Hypervisor-Ready FabricIntegrated gateway for VLAN, VxLAN, NVGRE networks from virtual to physicalNormalization for NVGRE, VXLAN, and VLAN networksCusto

18、mer not restricted by a choice of hypervisorFabric is ready for multi-hypervisor Hypervisor IntegrationNetwork AdminApplication AdminPHYSICALSERVERVLANVXLANVLANNVGREVLANVXLANVLANESXHyper-VKVMHypervisor ManagementACI FabricAPICAPICApplication AwarenessApplication-Level VisibilityActions:No new hosts or VMsEvacuate hypervisorsRe-balance clustersPetStore EventPetStore DevLeaf 1 and 2Spine 1 3Atomic countersPetStore ProdLeaf 2 and 3Spine 1 2Atomic countersPetStore QALeaf 3 and 4Spine 2 3Atomic counter