Synthesis & Cisco ACI integration -...

Post on 12-Apr-2018

237 views 1 download

Transcript of Synthesis & Cisco ACI integration -...

Jack Niesen - FSE

Synthesis & Cisco ACI integration

© F5 Networks, Inc 2

Mobility

SDDC/Cloud

Advanced threats

Internet ofThings

“Software defined”everything

HTTP is the new TCP

© F5 Networks, Inc 3

Deliver the most secure, fast,and reliable applications to anyone

anywhere at any time.

F5 MISSION

© F5 Networks, Inc 4

The Evolution of F5

• Security• Mobility/LTE• Domain Name Services

• Hypervisor/Cloud ubiquity• Multi-tenancy, all-active • Identity access management

• Traffic management• Optimization• Acceleration

1

2

3

© F5 Networks, Inc 5

Agile

Development

Application Environment

Rapid deployment─network and operations velocity

Speed, customer-driven, and quality of app development

© F5 Networks, Inc 6

Cloud and

DevOps

Cloud SLA and controlprivate network agility

Accelerate time to market

Application Environment

Agile

Development

Rapid deployment─network and operations velocity

Speed, customer-driven, and quality of app development

© F5 Networks, Inc 7

SDN and

Private Cloud

Software defined data centers

Cloud and

DevOps

Application Environment

Cloud SLA and controlprivate network agility

Accelerate time to market

Agile

Development

Rapid deployment─network and operations velocity

Speed, customer-driven, and quality of app development

Failed to Address:Failed to Address:Failed to Address:Failed to Address:

L4L4L4L4––––7 device sprawl and 7 device sprawl and 7 device sprawl and 7 device sprawl and application awarenessapplication awarenessapplication awarenessapplication awareness

© F5 Networks, Inc 8

F5 VISION

Applicationswithout constraints

The Time Is Right

SDN and

Private Cloud

Software Defined Data Centers

Cloud and

DevOps

Cloud SLA and controlprivate network agility

Accelerate time to market

Agile

Development

Rapid deployment─network and operations velocity

Speed, customer-driven, and quality of app development

Failed to Address:Failed to Address:Failed to Address:Failed to Address:

L4L4L4L4––––7 device sprawl and 7 device sprawl and 7 device sprawl and 7 device sprawl and application awarenessapplication awarenessapplication awarenessapplication awareness

© F5 Networks, Inc 9© F5 Networks, Inc. 9

© F5 Networks, Inc 10

Software Defined Application Services Software Defined Application Services Software Defined Application Services Software Defined Application Services 4

The Evolution of F5

Application Delivery ControllerApplication Delivery ControllerApplication Delivery ControllerApplication Delivery Controller1

Broadened Application ServicesBroadened Application ServicesBroadened Application ServicesBroadened Application Services2

Cloud ReadyCloud ReadyCloud ReadyCloud Ready3

© F5 Networks, Inc. 10

“Leave No Application Behind”

© F5 Networks, Inc 12

Software Defined Application Services Elements

HighHighHighHigh----Performance Performance Performance Performance Services Fabric

Simplified Simplified Simplified Simplified Business Models

© F5 Networks, Inc 13

Synthesis Elements

High Performance High Performance High Performance High Performance Services Fabric

High-Performance Services Fabric

Network [Physical • Overlay • SDN]

Virtual Edition Chassis Appliance

Data Plane

Programmability

Control Plane Management Plane

© F5 Networks, Inc 15

Synthesis Elements

Fabric Connectors Fabric Connectors Fabric Connectors Fabric Connectors

Module ConnectorsModule ConnectorsModule ConnectorsModule Connectors

Cloud ConnectorsCloud ConnectorsCloud ConnectorsCloud Connectors

Orchestration Orchestration Orchestration Orchestration ConnectorsConnectorsConnectorsConnectors

Intelligent Services Orchestration

BIGBIGBIGBIG----IQIQIQIQ

Public CloudHybrid Cloud

BIG BIG BIG BIG ---- IQIQIQIQ

Centralized Management Platform

BIG-IP

BIG-IP

Data Center

© F5 Networks, Inc 18

Synthesis Elements

Simplified Simplified Simplified Simplified Business Models

Good | Better | Best

Flexibility

Flexibility

Flexibility

Flexibility

Make it easierMake it easierMake it easierMake it easier to adopt to adopt to adopt to adopt

advanced F5 functionalityadvanced F5 functionalityadvanced F5 functionalityadvanced F5 functionality

Sim

plicity

Sim

plicity

Sim

plicity

Sim

plicity

Consolidate into fewer Consolidate into fewer Consolidate into fewer Consolidate into fewer

common configurationscommon configurationscommon configurationscommon configurations

Best Value

Best Value

Best Value

Best Value

Save Save Save Save when purchasing when purchasing when purchasing when purchasing

bundlesbundlesbundlesbundlesGood Better Best

VE Price VE Price VE Price VE Price ComparisonComparisonComparisonComparison

Bought As Bundle Bought As Components

Good Better Best

ApplianceApplianceApplianceApplianceComparison Comparison Comparison Comparison

BIG-IP Local Traffic Manager � � �

BIG-IP Global Traffic Manager � �

Application Acceleration Manager � �

BIG-IP Advanced Firewall Manager � �

SDN Service � �

Advanced Routing � �

BIG-IP Access Policy Manager �

BIG-IP Application Security Manager �

ReferenceArchitecturesSolving Customer Issues

© F5 Networks, Inc 21

Reference ArchitecturesDevice, Network, Applications

Bill of Materials • Solution diagram(s)

• Architecture diagram(s)

• Product map diagram(s)

• Customer deck

• RA video overview

• White paper(s)

• Placemat leave-behind

© F5 Networks, Inc.

DDoS

Protection

S/Gi Network

Simplification

Security for

Service Providers

Application

Services

Migration to

Cloud DevOps

Secure

Mobility

LTE

Roaming

Intelligent

DNS Scale

Cloud

Federation

Cloud

Bursting

Synthesis Integration with Cisco Insieme ACI

© F5 Networks, Inc 23

Cisco Insieme Networks

© F5 Networks, Inc 24

What is “Application Centric Infrastructure”

© F5 Networks, Inc 25

ACI design philosophy

Details of Integration

© F5 Networks, Inc 27

F5 SDAS and Cisco ACI

Network Fabric

Fabric Mgmt.

Spine Spine

Leaf Leaf Leaf Leaf Leaf

App Servers

Router ADC DatabaseDDoSProtectionInternet

• Cisco/Insieme provides a L2 Fabric built on a

Spine&Leaf CLOS architecture and a

management/orchestration system to connect

services.

• Company provides applications and services.

• Cisco/Insieme provides “link layer” connectivity.

• F5 SDAS provides Stateful L4-7 Intelligence and Traffic Mgmt.

?

F5 SDAS

Intelligent L4-7 Services & Traffic Management

Where does F5 products fit in ACI solution?

APIC

BIG IQBIG-IP on

Leaf Nodes

Have 40G

InterfacesBIG IP VE in

Virtualized Domain

Policy Mgmt

© F5 Networks, Inc 29

Cisco Application Centric Infrastructure

APICAPICAPICAPIC

Physical Networking

Compute Multi DC WAN and Cloud

L4–L7Services

Storage

Integrated

WAN Edge

Hypervisors and Virtual Networking

Nexus 9500

Nexus 9300 and 9500

Nexus 2K

Nexus 7K

© F5 Networks, Inc 30

ACI and F5 BIG-IP: SOLUTION OVERVIEW

ACI LEVERAGES APIC TO ORCHESTRATE THE CONNECTIVITY AT A PORT LEVEL, MEANING L2 ADDRESS AND BROADCAST DOMAINS MANAGEMENT

ACI works with F5 BIG-IP to provide L4-L7 network services inside the fabric

© F5 Networks, Inc 31

Cisco APIC: Application Policy Infrastructure Controller

Dashboard

© F5 Networks, Inc 32

APICAPICAPICAPIC

How do you stitch multi vendor services in APIC:Service Insertion – automated and programmatic

© F5 Networks, Inc 33

Inventory in APIC

© F5 Networks, Inc 34

End point groups in Cisco APIC

End point

contract

© F5 Networks, Inc 35

Benefits of a joint Cisco ACI-F5 Synthesis solution

IMPROVED SERVICE VELOCITYIMPROVED SERVICE VELOCITYIMPROVED SERVICE VELOCITYIMPROVED SERVICE VELOCITY

REDUCED COSTS

.

PRESERVE EXISTING INVESTMENTS

Solutions for an Application Solutions for an Application Solutions for an Application Solutions for an Application World.World.World.World.