aws re:invent 2016: cloud agility and faster connectivity with at&t netbond and aws (net301)

© 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Amy Machi, AT&T Director, Product Marketing

Chris Porell, AT&T Enterprise Solution Consultant

November 30, 2016

NET 301: Cloud Agility and Faster

Connection with AT&T NetBond® and AWS

© 2016 AT&T Intellectual Property. All rights reserved. AT&T, the Globe logo, Mobilizing Your World and other marks are trademarks and service marks of AT&T Intellectual Property. All

other marks are the property of their respective owners. The information contained herein is not an offer, commitment, representation or warranty by AT&T and is subject to change.

Cloud Agility and Faster Connectivity with AT&T NetBond® and AWS

2

Amy Machi, AT&T Director, Product Marketing

Chris Porell, AT&T Enterprise Solution Consultant

AWS re:InventNovember 2016

Presentation title here—edit on Slide Master



Industry trends

SecurityMobile IOTCloud

3



other marks are the property of their respective owners. The information contained herein is not an offer, commitment, representation or warranty by AT&T and is subject to change.4

Top challenges to implement hybrid cloud

• Connectivity

• Integration

• Innovation

• Security




Need for the Network Enabled Cloud

5

Businesses seek to combine the security & performance of private cloud with the economics & flexibility of public cloud

Private Cloud• Control• Security• Performance

Public Cloud• Agility• Cost• Elasticity

Best of Both

Wants Agility…

Needs Control…

AT&T NetBond®




AT&T NetBond – Private Cloud Connectivity

UsersData

Center

CloudProvider

IP Sec Tunnelsor Private Lines

Complex solution

AT&T VPN

Users

Ecosystem of Cloud Providers

Simple solution

AT&T NetBond

AT&T VPN



other marks are the property of their respective owners. The information contained herein is not an offer, commitment, representation or warranty by AT&T and is subject to change.© 2016 AT&T Intellectual Property. All rights reserved. AT&T, the Globe logo, Mobilizing Your World and other marks are trademarks and service marks of AT&T Intellectual Property. All





Carries more than 107.7 Petabytes of data traffic on an average business day

Connects over 1 billion devices over 1 million miles of fiber

AT&T – The Network of TomorrowMPLS-based services in 197 countries99% of world’s economy

Dedicated Ethernet access in 158 countries

36 Internet Data Centers across the globe

4G LTE covers 300M AmericansInternational LTE roaming

Mobile Internet accessible in 210 countries

1.1M+ Wi-Fi hotspots in 12 countries

1M+ Remote Access pointsin 125 countries




The foundation of our cloud networking strategy is AT&T NetBond®

AT&T NetBond service point

Separated Customer Traffic

(Cloud Connections)

Security Agility Elasticity Cost

AT&T VPN

•VPC – Virtual Private Cloud

•Public (SaaS)

•GovCloudAWS Direct Connect

Facilities

IoT

AT&T Colocation

Mobile devices & remote workers

Performance




AT&T NetBond® with AWS Direct Connect

AWS Direct Connect Global Infrastructure

NetBond Enabled Region

NetBond Region Planned - future

AWS Region & Number of Availability Zones

AWS Region Coming Soon




IoT – sensor-based management and proactive response using AT&T NetBond®

AT&T NetBond service point

Separated Customer Traffic

(Cloud Connections)

Security Agility Elasticity Cost

AT&T VPN

°C

Lift

Shock

Humidity

Location

Performance




“Our value is in being able to deliver quality food items quickly... AT&T NetBond® helps us streamline backend operations by simplifying how we connect to AWS cloud services, so we focus on impressing our customers.”

Ben ShakalChief Tech Nut,

© 2016 AT&T Intellectual Property. All rights reserved. AT&T, Globe logo, Mobilizing Your World and DIRECTV are registered trademarks and service marks of AT&T Intellectual Property

and/or AT&T affiliated companies. All other marks are the property of their respective owners.13






AT&T NetBond with AWS Direct Connect

Architecture and Integration Use Cases

14





NetBond ConnectionCustomer Supplied /29 Subnet

CustomerAT&T VPN Network

.2.1

.6.5Label Switched Path

Secondary

Primary

Common Back Bone AT&T MPLS VPN

ASN 13979

Customer Edge router ASN 65100

Provider Edge router



IPE

IPE

PER

CE

172.16.0.0/24

172.16.1.0/24

10.20.10.0/29

CE

PER

The results of this /29 are as follows

Primary link IP Assignment10.20.10.1 – IPE from AT&T

10.20.10.2 – VMware Network Edge

Secondary link IP Assignment10.20.10.5 – IPE from AT&T

10.20.10.6 – VMware Network Edge

Route AS-Path 10.10.20.0/24 65300 13979 I10.20.10.0/30 13979 I10.20.10.4/30 13979 I172.16.0.0/24 I172.16.1.0/24 13979 65200 I

Route Table IaaS

Customer Network

CustomerAVPN

Network

Creating a VNC for a specific CSP

Creating a VLAN Customer environment in CSP

1 2 4 5 3

virtual private gateway

AWS Direct Connect

virtual private cloud

Amazon Web Services | Private (VPC)


© 2016 AT&T Intellectual Property. All rights reserved. AT&T, the Globe logo, Mobilizing Your World and other marks are trademarks and service marks of AT&T Intellectual Property. All other marks are the property of their respective owners. The information contained herein is not an offer, commitment, representation or warranty by AT&T and is subject to change© 2016 AT&T Intellectual Property. All rights reserved. AT&T, the Globe logo, Mobilizing Your World and other marks are trademarks and service marks of AT&T Intellectual Property. All other marks are the property of their respective owners. The information contained herein is not an offer, commitment, representation or warranty by AT&T and is subject to change

16


NetBond ConnectionIP Address assigned by AT&T

Customer AT&T VPN Network

Label Switched Path

CCBAT&T MPLS VPN

ASN 13979





PER

CE

172.16.0.0/24

172.16.1.0/24

32.66.214.144/29

CE

PER

Route AS-Path 172.16.0.0/24 I10.20.10.0/30 13979 I10.20.10.4/30 13979 I32.X.X.X/32 13979 8030 I172.16.1.0/24 13979 65200 I64.68.96.0/19 13979 8030 13445 I 66.114.160.0/20 13979 8030 13445 I

CE

AWS Direct Connect

AT&T Cloud (VPN)

Aggregated vLAN shared by all customers

.1

.2

.5

.6

AIC Platform

router

IPE

IPE

VLAN_Cisco_West10.20.10.0/29

Creatinga VLAN 5

.145

.149

32.x.x.x/32 – NAT IPAT&T Registered Public IP AddressSame on both Links

Existing NetBond Network

Connectivity

Customer Network

CustomerAVPN

Network

Creating a VNC for a specific CSP

Customer environment in CSP

1 2 4 5b 3

NAT on AIC platform

5a

All AWS Services and

SaaS providers

.150

.146

SaaS

10.20.10.0/30

10.20.10.4/30

Secondary

Primary

Amazon Web Services | Public Services





Amazon Web Services | AT&T NetBond Portal



18


Amazon Web Services | AT&T NetBond Portal



What is AT&T NetBond® with AWS Direct Connect?

19

Corporate Data Center

AWS Cloud

Virtual Private Cloud

10GPrimary/Back-up

Amazon SES Amazon Glacier

AWS Elastic Beanstalk Amazon SQS

Amazon EMR Amazon Redshift Amazon EC2

AT&T NetBond

• Hybrid Environments

• Archival & Back-up

• Big Data

Use Cases




VPC to VPC Connectivity with NetBond

20


.2.1

.6.5

Label Switched Path

Secondary

Primary





IPE

AT&T NetBond

Edge

PER

CE

172.16.0.0/24

172.16.1.0/24

CE

PER

VGWAWS Direct Connect

Site-to-Site Tunnel

Data Flows

NetBond VLAN

US-WEST-1

Subnet 1

.2.1

.6.5

Secondary

Primary

IPE

AT&T NetBond

Edge VGWAWS Direct Connect

AP-SOUTHEAST-1

Subnet 1





VPC to VPC Connectivity with NetBond

21


.2.1

.6.5

Label Switched Path

Secondary

Primary





IPE

AT&T NetBond

Edge

PER

CE

172.16.0.0/24

172.16.1.0/24

CE

PER

VGWAWS Direct Connect

Site-to-Site Tunnel

Data Flows

NetBond VLAN

US-WEST-1

Subnet 1

.2.1

.6.5

Secondary

Primary

IPE

AT&T NetBond

Edge VGWAWS Direct Connect

AP-SOUTHEAST-1

Subnet 1


Key Benefits

• Inter-VPC connectivity• Shortest-path routing between VPCs and other

AVPN sites• No tunnels required




Multiple Security Zones Within a Single VPC

22

.2.1

.5Label Switched Path

Secondary

Primary





IPE

AT&T NetBond

Edge

PER

CE

172.16.0.0/24

172.16.1.0/24

CE

PER


AWS Direct Connect

Netw

ork A

CL

Blo

ck ALL IN

/OU

T

Netw

ork A

CL

Allo

w Tu

nn

el P

orts

Netw

ork A

CL

Blo

ck ALL IN

/OU

T

Router/Firewall VNF

NI 1

NI 2

NI 3

Gateway192.168.0.10

Gateway192.168.2.10

Subnet 1

Subnet 2

19

2.1

68

.0.0

/24

19

2.1

68

.1.0

/24

19

2.1

68

.2.0

/24

Subnet 3

VPC01 - 192.168.0.0/16

Site-to-Site Tunnel

Data Flows

NetBond VLAN



192.168.1.10.6




Multiple Security Zones Within a Single VPC

23

.2.1

.5Label Switched Path

Secondary

Primary





IPE

AT&T NetBond

Edge

PER

CE

172.16.0.0/24

172.16.1.0/24

CE

PER


AWS Direct Connect

Netw

ork A

CL

Blo

ck ALL IN

/OU

T

Netw

ork A

CL

Allo

w Tu

nn

el P

orts

Netw

ork A

CL

Blo

ck ALL IN

/OU

T

Router/Firewall VNF

NI 1

NI 2

NI 3

Gateway192.168.0.10

Gateway192.168.2.10

Subnet 1

Subnet 2

19

2.1

68

.0.0

/24

19

2.1

68

.1.0

/24

19

2.1

68

.2.0

/24

Subnet 3

VPC01 - 192.168.0.0/16

Site-to-Site Tunnel

Data Flows

NetBond VLAN



192.168.1.10.6

Key Benefits

• Centralized management of advanced security policy between VPCs and other NetBonded sites

• Minimal number of site-to-site tunnels required• Added latency is negligible



24

.2.1


Secondary

Primary





IPE

AT&T NetBond

Edge

PER

CE

172.16.0.0/24

172.16.1.0/24

CE

PERVGWAWS Direct

Connect

Site-to-Site Tunnel

Data Flows

NetBond VLAN


Subnet 1

Subnet 1

Subnet 1

VPC01 - 192.168.0.0/24

VPC02 - 192.168.1.0/24

VPC03 - 192.168.2.0/24

VGW

VGW


Amazon Web Services | Private (VPC)Multiple Security Zones Multiple VPCs

BYOA



25

.2.1


Secondary

Primary





IPE

AT&T NetBond

Edge

PER

CE

172.16.0.0/24

172.16.1.0/24

CE

PERVGWAWS Direct

Connect

Site-to-Site Tunnel

Data Flows

NetBond VLAN


Subnet 1

Subnet 1

Subnet 1

VPC01 - 192.168.0.0/24

VPC02 - 192.168.1.0/24

VPC03 - 192.168.2.0/24

VGW

VGW


Amazon Web Services | Private (VPC)Multiple Security Zones Multiple VPCs

BYOA

Key Benefits

• Centralized management of advanced security policy between VPCs and other NetBonded sites

• Minimal number of site-to-site tunnels required• Added latency is negligible



26


.2.1

.6.5

Label Switched Path

Secondary

Primary



IPE

AT&T NetBond

Edge

PER

CE

172.16.0.0/24

172.16.1.0/24

CE

PER

AWS Direct Connect

Site-to-Site Tunnel

Data Flows

NetBond VLAN

US-WEST-1

.2.1

.6.5

Secondary

Primary

IPE

AT&T NetBond

Edge

CustomerAT&T IoT Mobility

Network






27


.2.1

.6.5

Label Switched Path

Secondary

Primary



IPE

AT&T NetBond

Edge

PER

CE

172.16.0.0/24

172.16.1.0/24

CE

PER

AWS Direct Connect

Site-to-Site Tunnel

Data Flows

NetBond VLAN

US-WEST-1

.2.1

.6.5

Secondary

Primary

IPE

AT&T NetBond

Edge

CustomerAT&T IoT Mobility

Network




Key Benefits

• Highly secure, end-to-end private connectivity between mobile devices and IoT platforms





AT&T NetBond

AWS Direct Connect Location (CoLo)with an AWS Partner Network (APN)

(i.e. Other Providers)

AWS Direct Connect with an AWS APN

Sub-1Gb(i.e. Other Providers)

AWS Direct Connect AWS APN or Network Carrier

1Gb or 10Gb(i.e. Other Providers)

Contract & Order DirectConnect Port

NetBond for 1M to 10G connection

(no Direct Connect required)AWS for 1G or 10G Connections only

Hosted Partner for connection less than 1G

AWS for 1G or 10G Connections only

Order CircuitPrimary Connection

In Place TodayWork required:

Data Center Cross connectIn Place by Hosted Partner

Work required:Third Party for 1G or 10G

Order Circuit Configure for Redundancy Connection

In Place TodayWork required:Data Center for second circuit

Work required:Hosted Partner for second circuit

Work required:Third Party for second circuit

Create Virtual InterfaceAutomated by NetBond

APIs

Work required:Customer Configure

(VLAN, ASN, BGP, IP, MD5)





Download Router Configuration

Automated by NetBondAPIs

Work required:Customer Download and provision

on premise Routers

Work required:Customer Download and provision

on premise Routers

Work required:Customer Download and provision on

premise Routers

Verify Virtual InterfaceAutomated by NetBond

APIsWork required:

Customer Test Connections Work required:

Customer Test Connections Work required:

Customer Test Connections

AT&T NetBond®AWS Direct Connect: High Level Contract - Provisioning /Testing Comparisons

http://docs.aws.amazon.com/directconnect/latest/UserGuide/getstarted.htmlAWS Direct Connect User Guide – 6/6/2016

http://docs.aws.amazon.com/directconnect/latest/UserGuide/getstarted.html





API’s – Delivering the Power of Network to your World

• Developers build functions into existing applications

• Enterprises dynamically manage end to end service orchestration and other capabilities

• Operations automates provisioning network resource via business process integration




• Power additional use cases

• Advance infrastructure virtualization

• Extend APIs for added real-time management and control

• Enhance portfolio with complementary offers

• Expand global footprint

Dynamic orchestration • advanced features • effortless experience • expanded reach

24

Leading innovation: solutions roadmap

© 2016 AT&T Intellectual Property. All rights reserved. AT&T, the Globe logo, Mobilizing Your World and other marks are trademarks and service marks of AT&T Intellectual Property. All other marks are the property of their respective owners. The information contained herein is not an offer, commitment, representation or warranty by AT&T and is subject to change





2016 Cloud Computing Security Excellence Award

31

Cloud Computing magazine named AT&T NetBond for most effectively leveraging cloud computing to bring new,

differentiated offerings to the market.

“Recognizing leaders in the advancement of cloud

computing, TMC and Cloud Computing magazine are proud

to announce AT&T NetBond as a recipient of the Cloud

Computing Security Excellence Award,” said Rich Tehrani,

CEO, TMC. “AT&T is being honored for their achievement in

bringing innovation and excellence to the market, while

leveraging the latest technology trends.”October 20, 2016

http://blog.tmcnet.com/blog/rich-tehrani/

http://cloud-computing.tmcnet.com/breaking-news/articles/426283-tmcs-cloud-computing-magazine-announces-2016-cloud-security.htm




Where AT&T will be – come see us! Booth #2232

Presentation Sessions:Wednesday, November 30th

Content Session Topic: Cloud Agility and Faster Connectivity with AT&T NetBond and AWS

Speakers:Amy Machi, Director AT&T NetBondChris Porell, Enterprise Solutions Consultant

Booth Information: Sands Expo Center/The Venetian Booth #2232

Thank you!

aws re:invent 2016: cloud agility and faster connectivity with at&t netbond and aws (net301)

Technology