Post on 12-May-2018
Winning with Cisco IWAN
Johnny Mehl Manager of Channel Technical Operations
© 2015 Riverbed Technology. All rights reserved. 2
Agenda
1
2
3
4
5
How Riverbed views Cisco IWAN
What’s new in RiOS 9.1
Opportunities for Presidio
Forward looking
Summary
© 2015 Riverbed Technology. All rights reserved. 3
97
26,000 customers
98 91
97% of the Fortune 100
98% of the Forbes Global 100
91% of Forbes Global 500
95% of our customers are also Cisco customers!
© 2015 Riverbed Technology. All rights reserved. 4
Coexistence with Cisco is nothing new…
§ Co-existed since 2004
© 2015 Riverbed Technology. All rights reserved. 5
.. although we do fight…
© 2015 Riverbed Technology. All rights reserved. 6
How Riverbed views Cisco IWAN
© 2015 Riverbed Technology. All rights reserved. 7
IWAN makes it easier/cheaper to order Cisco products.
Noticeable improvements with
PfRv3 but otherwise, the technology is more of the same.
© 2015 Riverbed Technology. All rights reserved. 8
Pillars of IWAN
© 2015 Riverbed Technology. All rights reserved. 9
Mapping Cisco Technologies
Cisco Technologies Riverbed Technologies
DMVPN Secure Transport
PfRv3 Path Selection
QoS/NBAR2 QoS/AFE
Cisco AVC SteelCentral Network Performance Monitoring
Cisco WAAS SteelHead
N/A SteelCentral Application Performance Monitoring
N/A SteelFusion
© 2015 Riverbed Technology. All rights reserved. 10
Cisco vs Riverbed
IWAN Profile Technologies Riverbed Products Base • DMVPN
• QoS • PfRv3
SteelHead (WAN opt.) SteelCentral (Visibility) SteelFusion (Converged Infra.)
Advanced • DMVPN • QoS • PfRv3 • Cisco AVC
SteelHead SteelCentral SteelFusion
Advanced with WAAS • DMVPN • QoS • PfRv3 • Cisco AVC • WAAS
SteelHead SaaS SteelCentral SteelFusion
© 2015 Riverbed Technology. All rights reserved. 11
§ Problems: – End-user performance is not guaranteed. PfRv3 does nothing to reduce
bandwidth or mitigate latency – Lack of visibility into both the application layer and network layer
§ Value proposition: – SteelHead provides WAN opt. while SteelCentral provides both application
and networking monitoring capabilities on top of IWAN Base profile
IWAN Base profile
© 2015 Riverbed Technology. All rights reserved. 12
§ Problems: – End-user performance is not guaranteed. PfRv3 does nothing to reduce
bandwidth or mitigate latency – Lack of visibility into the applications. Cisco AVC only provides network-
based performance metrics leading to “blind spots” in the network.
§ Value proposition: – SteelHead provides WAN opt. while SteelCentral provides complete network
and application visibilities.
IWAN Advanced Profile
© 2015 Riverbed Technology. All rights reserved. 13
Java App Server
OS TCP/IP Stack VMware
Apache App
LAN
Complete, End-to-End Transaction Visibility
.NET Worker Process
IIS Web Server OS TCP/IP Stack
Web
Client Browser
WAN
BEGIN
Request Payload Network/Bandwidth/Latency
Queuing
Code Processing
Network/Bandwidth/Latency
Hypervisor Oversubscription
Queuing
Code Processing
Remote Calls Web Service, DB etc.
Packets
Metrics
Code Instrumentation
Code Instrumentation
Packets
Metrics
Packets
EUE Response Payload Network/Bandwidth/Latency
Code Processing
Network/Bandwidth/Latency
Code Processing
END Page Render Time
Riv
erbe
d Pe
rfor
man
ce M
anag
emen
t
© 2015 Riverbed Technology. All rights reserved. 14
§ Problems: – WAAS has fallen ridiculously behind in terms of application acceleration – WAAS solves some enterprise application performance problems, but what
about SaaS apps? – What can Cisco AVC do for SaaS apps?
§ Value proposition: – SteelHead can replace WAAS and work with IWAN – SteelHead SaaS provides optimization and visibility into SaaS applications.
IWAN Advanced with WAAS
© 2015 Riverbed Technology. All rights reserved. 15
Cisco is ridiculously far behind in developing WAAS
2010 2011 2012 2013 2014 2015
Encrypted MAPI L7 Optimization
Outlook Anywhere L7 Optimization
MS announced that Exchange ‘13 will no longer support MAPI
Oops! Encrypted MAPI L7 Optimization after no
support announced by MS
Here is an example…
Future Proofing SteelHead: We ship with IPv6 BW optimization and IPv6 L7 optimization
Outlook Anywhere L7 Optimization
MS announced MAPI/HTTP protocol to replace Outlook
Anywhere
© 2015 Riverbed Technology. All rights reserved. 16
§ Quantify end-user experience of your optimized web and SaaS applications § Quickly identify web apps, pages, objects, sites, and users with high response times § Break down HTTP response times into network vs. application delays for specific pages, objects, and applications
Monitoring SaaS application
riverbed.my.salesforce.com…6640000000TnGa&ic=1 200 [salesforce: riverbed] Search Results
Page load time
Named page families provide simple,
meaningful names to web transactions/URLs
Waterfall chart showing object load
times with optimization coverage
(in orange)
© 2015 Riverbed Technology. All rights reserved. 17
Biggest challenge with IWAN …
© 2015 Riverbed Technology. All rights reserved. 18
§ Configure DMVPN Hub Router (8 procedures) § Configure Firewall/DMZ switch (5 procedures) § Configure remote-site DMVPN Router (9 procedures) § Configure PfR Hub Master Controller (3 procedures) § Configure PfR for Hub (5 procedures) § Configure PfR for Remote Site locations (4 procedures)
Setting up IWAN: Minimal Work
175 steps! 102 pages!
671 commands/
entries!!!
© 2015 Riverbed Technology. All rights reserved. 19
What’s new in RiOS 9.1
© 2015 Riverbed Technology. All rights reserved. 20
Present day challenges of the branch in an Hybrid Enterprise
© 2015 Riverbed Technology. All rights reserved. 21
Branch IT: Trends and Requirements
Internet Edge is moving closer to the branch
Branch Office Data Center Cloud
Cloud/SaaS
Transition to Cloud/SaaS from Data Center
Nearly half of all employees work in branch offices 50%
Branch offices represent roughly half of IT budget 50% 2/3 Branch Traffic
will be video
Source: Lippis Consulting
© 2015 Riverbed Technology. All rights reserved. 22
Branch IT: Challenges
Improve End User Experience
Users want instant response
HD quality Rich Media
Manage New Traffic
Increased use of video
Recreation (YouTube) mixed
with business traffic
Control Costs
Added bandwidth
Costs of MPLS
Branch Focus creating content and traffic overload
© 2015 Riverbed Technology. All rights reserved. 23
Use-cases Across Vertical Markets
Enterprise Retail Education Hospitality
• Efficient use of WAN
with hybrid networks
• Pervasive use of
video for training and
collaboration
• Provide in-store digital
experience for shoppers
• Faster POS app
processing
• Supplement school
curriculum with rich
media (video)
• Addition of laptops and
tablets to access digital
content
• Cater to growing demand
of high BW requirements
from guest Wi-Fi
• High latency environment
on cruise ships
© 2015 Riverbed Technology. All rights reserved. 24
Target deployment models
Branch Office Data Center
Backhaul Internet Access
Direct Internet Access
MPLS WAN
§ Case #1: Internet Connec/ons backhauled through corporate data center
§ Case #2: Direct to Internet connec/ons § Internet breakout at the branch § Internet breakout from within the managed SP network
© 2015 Riverbed Technology. All rights reserved. 25
Web Proxy: What is it
SteelHead
Proxy Caching HTTPS Logging Control
© 2015 Riverbed Technology. All rights reserved. 26
Web Proxy: Key Benefits Transparent HTTP(S) proxy
Asymmetrical deployment– Only on the client side
Local connection termination
Caching: Separate from wan-opt data store
YouTube video caching
Centralized management and reporting via SCC
Co-existence with traditional wan-opt features
© 2015 Riverbed Technology. All rights reserved. 27
§ Supported on CX appliances – xx55 and xx70 § SteelHead needs to be physical inline. No PBR or WCCP virtual in-
path § Web Proxy connections are part of the same optimized TCP
connections pool as DEI. Consider while sizing.
* Support for vSH and EX platforms coming in later releases
Additional Information
© 2015 Riverbed Technology. All rights reserved. 28
Universal SaaS
© 2015 Riverbed Technology. All rights reserved. 29
Opex model — follow the user What Makes This So Special?
§ Subscription pricing per user per month (any duration 12-36 months) — $1.99
§ No incremental hardware investment
§ Service matches the user, not the appliance or the server
§ Opex consumption model eases adoption — just like SaaS
© 2015 Riverbed Technology. All rights reserved. 30
SaaS — Going Beyond
© 2015 Riverbed Technology. All rights reserved. 31
Expanding the scope of SaaS applications SteelHead for Every SaaS
Client browses to SaaS.com
On premise SteelHead intercepts Office365 Traffic and routes to Akamai cloud
Cloud SteelHead is: - Automatically created if needed - Paired with on premise SH - Certificates exchanged
Cloud SteelHead communicates with SaaS on behalf of original request
1
2
3
4
© 2015 Riverbed Technology. All rights reserved. 32
SteelHead and Box
© 2015 Riverbed Technology. All rights reserved. 33
SteelHead and ServiceNow
SteelHead and SuccessFactors
© 2015 Riverbed Technology. All rights reserved. 34
Upgrading from IOS 8.1.3 to 8.2 Optimizing Apple IOS download
CRUSHED!
© 2015 Riverbed Technology. All rights reserved. 35
Opportunities for Presidio
© 2015 Riverbed Technology. All rights reserved. 36
§ Scenario: Customer would like to utilize their MPLS + Internet links.
§ Problem: Customer is not ready for a hardware refresh to run PfRv3.
§ Solution: SteelHead’s Path Selection feature does not require any router software or hardware upgrade.
Opportunity #1
© 2015 Riverbed Technology. All rights reserved. 37
§ Scenario: Customer is moving to [SaaS vendor] and requires optimization and/or concerned about lack of visibility in the cloud.
§ Problem: Customer already has IWAN with WAAS deployed to optimize the enterprise traffic.
§ Solution: SteelHead SaaS can co-exist with WAAS and optimize
traffic to the SaaS vendors.
Opportunity #2
© 2015 Riverbed Technology. All rights reserved. 38
§ Scenario: Customer has deployed IWAN but require optimization for mobile users.
§ Problem: Cisco has no solution for optimizing mobile users. § Solution: SteelHead Mobile can co-exist with IWAN/WAAS.
Opportunity #3
© 2015 Riverbed Technology. All rights reserved. 39
§ Scenario: Customer would like to move their workload into Azure and AWS but they’re concerned about performance and visibility.
§ Problem: Cisco WAAS cannot run in Azure or AWS.
§ Solution: Cloud SteelHead is available in both Azure and AWS. SteelCentral can provide visibility into Azure and AWS.
Opportunity #4
© 2015 Riverbed Technology. All rights reserved. 40
Optimizing and monitoring public cloud
Branch Office Data Center
Cloud SteelHead
SteelHead SteelHead
SteelCentral
SteelFlow WTA data from Client Side
SteelHeads
© 2015 Riverbed Technology. All rights reserved. 41
§ Scenario: Customer uploaded the corporate training videos to their secure YouTube channel but are concerned about the bandwidth required to view them at the branch locations.
§ Problem: Cisco/Akamai Connnect cannot cache secure YouTube videos.
§ Solution: Web proxy on the SteelHead can cache the secure YouTube video. It can also cache other SSL-based content
Opportunity #5
© 2015 Riverbed Technology. All rights reserved. 42
Riverbed SteelHead vs Cisco IWAN/WAAS comparison
More application-specific optimizations Better performance for the applications you use
Mobile Software Client Effective and easy-to-administer optimization for mobile employees
IaaS/SaaS optimization and visbility Optimize and provide visibility for workloads in IaaS and SaaS
1. CIFS (SMB1) 8. HTTP 2. SMB2 9. SSL 3. CIFS Print 10. Citrix ICA 4. MAPI 2003-2010 11. MS Windows Media 5. Encrypted MAPI 12. RTSP splitting 6. Outlook Anywhere 7. NFS
• Same RiOS S/W branch + mobile • Client connects with any Steelheads already in network • Auto-detection of local Steelhead when mobile client in branch • Data store warming when client in Steelhead-equipped branch
• Cloud SteelHead available for Amazon AWS and Microsoft Azure • End-to-end optimization for multiple SaaS vendors • Visibility into both IaaS and SaaS vendors
RiOS 9.1 IWAN/WAAS 5.5.5 Updated August 2015
Disaster Recovery Meet RPO and RTO objectives more efficiently by optimizing backup and replication
Replicator Mode Discontinued
• SSD-based storage available for high throughput • Largest appliance has 4.8TB usable data store • Disk and memory-based data reduction can be mixed and matched, enabled selectively per site or traffic • SRDF-aware optimization for replicating EMC storage • Qualified by storage vendors
1. CIFS (SMB1) 2. SMB2/3 3. CIFS Print 4. Mac CIFS 5. SMB Signed CIFS 6. MS-SQL 7. MAPI 2003-2010 8. Encrypted MAPI
9. Outlook Anywhere 10. Lotus Notes 11. Enc. Lotus Notes 12. Oracle Forms 13. NFS 14. HTTP 15. SSL 16. Citrix ICA
17. FCIP 18. SRDF/A 19. UDP and IPv6 20. MS Silverlight video 21. Adobe Flash video 22. MAPI/HTTP
WAAS Mobile Discontinued
Not available
© 2015 Riverbed Technology. All rights reserved. 43
Forward looking
© 2015 Riverbed Technology. All rights reserved. 44
Container D Container E
Layer-3 Services
Container A Container B Container C
Application Identification & Classification
• Deep-packet
Inspection • SSL Cert
Management
Hybrid WAN
Path Selection
3rd Party Service
Secure Transport
Secure Transport
Network QoS
Network QoS
Layer-3 Services
Layer-3 Services
Centralized Controller
• Management & Monitoring • Zero-touch Provisioning • Application Policy Engine • App Performance Monitoring • On-premises or Cloud
Optimization Visibility Control
1. Centralized App Policies
3. SteelFlowTM Telemetry
2. Local App Policy Enforcement
Riverbed SD-WAN ü Software-defined. Business-defined.
ü Optimized & secure. Hybrid by design.
ü Complete visibility. On-premises & cloud.
ü Apps that simply work.
© 2015 Riverbed Technology. All rights reserved. 45
Project Tiger
Container D Container E
Tiger Appliance Coming 2016!
WAN_0
WAN_1
LAN
Container A Container B Container C
Riverbed SteelOSTM Runtime Environment
Application Intelligence
• Identification • Classification • SteelFlowTM
Telemetry
Path
Selection
3rd Party
Service(s)
Secure Transport
Secure Transport
Network QoS
Network QoS
Layer-3 Services
Layer-3 Services
Packet Capture
Layer-3 Services
Packet Capture
Packet Capture
§ Complete set of SD-WAN network services for application visibility & control – Application Identification & Classification, Hybrid WAN Path Selection, Secure Transport, QoS, SteelFlowTM Telemetry
§ Native routing services included. Branch router not required. – Supported as a layer-3 hop or as transparent bridge.
New modular operating platform built with containerization and service-chaining to support Riverbed-native and 3rd party services.
© 2015 Riverbed Technology. All rights reserved. 46
SteelFusion™ SteelHead™ Project Tiger
Riverbed Application Performance PlatformTM A complete branch IT solution for the software-defined enterprise.
SD-WAN Application & Network Services
Industry-leading WAN Optimization
SD-WAN Application & Network Services
Industry-leading WAN Optimization
Storage Delivery
SD-WAN Application & Network Services
Branch Type I Lower-cost, Higher-speed bandwidth
Branch Type II Higher-cost, Lower-speed bandwidth
Branch Type III Local servers, storage & backup
Server Virtualization
SteelCentralTM Controller On-premises, Cloud, RESTful APIs, 3rd Party Orchestration
Coming 2016!
© 2015 Riverbed Technology. All rights reserved. 47 © 2015 Riverbed Technology. All rights reserved. 47
Key Takeaways with 5 Arrows
IWAN can be very complex to set up. We can help.
We have coexisted with IWAN for a very long time.
Visibility/performance into SaaS providers are key concerns for customers.
Mobile users are important. Do not leave them behind.
Web proxy can help alleviate the pressure on the WAN.
Thank You
© 2015 Riverbed Technology. All rights reserved. 48