思科ACI解决方案与应用

1、思科ACI架构和Nexus 9000交换机介绍AGENDA业界发展趋势ACI及Nexus 9000介绍解决了什么问题，带来哪些好处5 YEARS 3 YEARS更快的服务器更新周期 3 YRS更快的网络更新周期 5 YRS数据中心发展的驱动力10GE板载网卡, 虚机密度, 大数据Upto 12 Cores per Socket *210G LOM/FlexLoM Shipping *4 新的服务器平台带来更高I/O吞吐需求大数据增加东西数据流量DATA CENTER IP TRAFFIC GROWTH25% CAGR (2012-2017)*3*1 IDC Worldwide Virtual

2、Machine 2013-2017 Forecast *3 Cisco Global Cloud Index: Forecast (2012-2017)HYPERVISORVMVMVMVMVMVM虚机密度驱动更高I/O性能Avg.11 VMs/ Linux Server*1*4/t5/Coffee-Coaching-HP-and-Microsoft/HP-FlexibleLOM-for-Gen8/ba-p/108515 *2 Intel Xeon E5 Spec 新一代数据中心云计算架构发展方向传统以硬件为中心的网络架构传统概念的软件定义的网络（传统SDN）以用户应用为中心过度依赖硬件易于形成

3、资源竖井缺乏灵活性，资源利用率低软硬件割裂硬件效率和性能下降应用对资源的控制不透明，管理和排错难度大摒弃软硬之争回归以用户应用为中心调度资源充分发挥软件和硬件的双重优势：高效发挥硬件性能，提供应用可视化自动化的基础架构思科的一点陈年旧事 M.P.L.S.的故事 体制内创业Soni Jiandani1993200220082013$94,500,000$2,500,000,000 $678,000,000$850,000,000Cat 6500MDS9000NEXUS2/5K, UCSN9K/ACI开放的API集中化策略模型开源应用策略控制器APIC策略模型ACI_50% SIMPLER COD

4、E BASE FUTURE PROOF UPGRADABLE TO ACIPROGRAMMABILITY AND AUTOMATIONNETWORK VIRTUALIZATION SUPPORTRESILIENCY: IN SERVICE PATCHING, UPGRADE, FAST RESTARTACI 以应用为中心的互联架构NEXUS 9500 和 9300软件、硬件、和系统设计上的全面创新PricePower EfficiencyProgrammabilityPort DensityPERFORMANCE优化的 NX-OS操作系统Nexus 9500业界领先的合作伙伴灵活性： 在任意地

5、方任意网络架构下部署您的应用ACI Application-Centric InfrastructureADCappdbf/wADCWEBAPICConnectivity PolicySecurity PoliciesQoS Bandwidth Reservation AvailabilityStorage and computeApplication L4-L7 ServicesSLAQoSSecurityLoadBalancing应用网络配置文件可扩展的脚本语言模型HYPERVISORHYPERVISORHYPERVISORSystems Telemetry应用快速部署，同时保证扩展性，安

6、全性和应用可见性让物理网络和虚拟化环境相结合Tenant HEALTH SCORELATENCYVISIBILITYVMsPhysicalApplication Delivery ControllerFirewallMicrosecond(s)3352Packet Drops0Systems TelemetryApplication HEALTH SCORELATENCYVISIBILITYVMsPhysicalApplication Delivery ControllerFirewallMicrosecond(s)5168Packet Drops25物理网络L4L7服务多数据中心双活和云服务

7、计算资源存储虚拟机以及虚拟网络Based on common network load and link failure scenariosACI应用场景 更好的性能优化和负载均衡对于网络拥塞的控制60%60%90%网络方面的创新动态负载均衡动态的包有限调度大数据分析应用数据加快30%网络端口利用率集中的安全控制和审计功能通过应用程序接口动态导入安全策略)服务部署的自动化研发部门法律部门销售部门人事财务ACI应用场景 更灵活完善的安全管控既能互相隔离，又不影响性能和扩展将网络转发和安全策略分离开来Open APIsPolicyEngine动态的企业安全策略APIC市场部门APPLICATION

8、 NETWORK PROFILE数据中心自动化 手工 vs. aci策略驱动Design itProcure itInstall itConfigure itSecure itIs it ready?Architect itDesign itIs QAdIs procuredIs installedIs configuredIs securedIt is readyArchitect itACI Policy DrivenARCHITECT DESIGNCOMPUTEServiceRequestSERVICESSECURITYNETWORKApplicationAvailable架构设计业务需

9、求应用交付QA itNexus9000交换机 同一平台两种运行模式Network Ops DrivenSwitch AutomationPolicy Based Fabric Automations开放, 灵活, 可视化 可编程Future-Proof InfrastructurePer-BoxProgrammabilityCentralized Fabric ProgrammabilityNXOS w/ EnhancementsPolicy ControlleriNXOSN9516/N9508/N9504N9396/N93128/N9372NX-OSACIAPIC12NG FabricvPC

10、FEXVxLANPERFORMANCEPORTSPRICEPROGRAMMABILITYPOWER各方面的持续创新 Nexus 9000PricePower EfficiencyProgrammabilityPort DensityPERFORMANCEPRICECOST STRUCTURE for 1G to 1/10GT and 10G to 40G migrationPERFORMANCE INDUSTRY LEADING PRICE / LINE CARD BANDWITH1.92 Tbps per slot100G readyPORT DENSITY20% HIGHER 36 Por

11、t 40 Gig Non-blocking DensityPROGRAMMABILITYJSON/XML APILinux Container for customer appsPOWER EFFICIENCYSTATE OF THE ART BACKPLANE FREE DESIGN15% greater power and cooling efficiencyMERCHANT+ ASIC APPROACHInnovation in Cisco ASICsTrunk Cabling(100m)Patch panelJumper Cable过去，千兆服务器到交换机，交换机10G光纤上行Patc

12、h panelJumper Cable40G BiDi 光纤，让客户平滑过渡到10G服务器接入的时代极大的节省了重新布线的成本万兆服务器已经逐渐成为业界主流这要求接入交换机提供40G上行，才能保证48台服务器足够上行带宽传统40G要8芯多模光纤今天机房大都是6/12芯光纤到每个机柜，跑一个40G够呛，遑论冗余如果要跑40G，用户需要整个机房重新布线BiDI光纤模块，不需要重新布线，直接上40G今天，48个万兆服务器接到交换机，你需要交换机40G上行，布线成了问题思科40G BiDi 光模块，业界唯一可以重用原有万兆多模光纤Source: Corning OM3 Cable & Patch Pa

13、nel list prices, Cisco 40G BiDi list price, Competitors 40G SR4 list priceNexus 9000和ACI 在中国飞速增长的客户群体ACI 全球客户案例小结：未来的方向数据中心和云基础架构，不管是物理还是虚拟，都不再需要手工配置，也不用软件定义或编程，而是以应用为中心，的策略驱动投资保护将ACI扩展到现有的基础架构中Extend ACI Model on existing IP networks, L4-7 Services, HypervisorsExtended ACI POLICYACIFabricPROFILEExi

14、sting Nexus networksHypervisors VMsBare MetalAVSBare MetalHypervisor VMsAVSMulti-Hypervisor-Ready FabricIntegrated gateway for VLAN, VxLAN, NVGRE networks from virtual to physicalNormalization for NVGRE, VXLAN, and VLAN networksCustomer not restricted by a choice of hypervisorFabric is ready for mul

15、ti-hypervisor Hypervisor IntegrationNetwork AdminApplication AdminPHYSICALSERVERVLANVXLANVLANNVGREVLANVXLANVLANESXHyper-VKVMHypervisor ManagementACI FabricAPICAPICApplication AwarenessApplication-Level VisibilityActions:No new hosts or VMsEvacuate hypervisorsRe-balance clustersPetStore EventPetStore DevLeaf 1 and 2Spine 1 3Atomic countersPetStore ProdLeaf 2 and 3Spine 1 2Atomic countersPetStore QALeaf 3 and 4Spine 2 3Atomic counters VXLANPer-Hop VisibilityPhysical and Virtual as