csi 2010: cisco-virtualization and cloud computing
DESCRIPTION
Cisco's presentation at CSI 2010 Annual SummitAligning IT to Business: The Competitive Advantage of Cloud ComputingAbstract: Companies are embracing change by innovating aggressively, mastering operational efficiency, and leveraging new business opportunities. This session from Cisco looks at Cloud Computing from a business perspective as a competitive edge for business. Companies can now respond faster to rapidly changing business conditions, drive the most value out of their existing systems, and put existing and new processes in the direct control of the business -- allowing them to achieve true alignment of business and IT.Speaker: Sumit Mukhija, NATIONAL SALES MANAGER, Datacenter, India and SAARCTRANSCRIPT
Aligning IT to Business-The Competitive Advantage Aligning IT to Business-The Competitive Advantage
© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 1
Sumit Mukhija
National Sales Manager, Datacenter
Cisco, India and SAARC
The Competitive Advantage of Cloud ComputingThe Competitive Advantage of Cloud Computing
Contents
� Datacenter Evolution
�The move to the Cloud
�Phased evolution of the cloud
� Building Blocks to secure scalable Cloud
�Virtualization
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 2
�Virtualization
�Unified Fabric
�Unified Computing
�Per VM services
� Summary
Data Center Evolution Towards IT as a Service
Storage
ServersApps
Application-
Based Silos
Network
External
Cloud Services
Zones of
Virtualization
ITaaS
(aka Internal Cloud)
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 3
Storage
Standardize
Consolidate
Virtualize
Automate
Self-Service
Centralize
From silos5 to Virtualized Data Centers and
Cloud5
Phased Evolution of Cloud
Standalone Clouds Private Clouds Inter-Cloud
External, Off-Premise
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 4
� Security� SLAs
� Interoperability
Key Challenges:
� Federation� Portability� Market
Key Challenges:
Internal, On-Premise
© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID4
IT Resources and Services that
Are Abstracted from the Underlying
Infrastructure and Provided
“On Demand” and “At Scale” in a
Multitenant and Elastic Environment
Cloud Computing Definition and Components
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 5
A Style of Computing Where Massively Scalable IT-Enabled Capabilities Are Delivered “As a Service” to Multiple External Customers Using Internet Technologies
Source: Gartner “Defining and Describing an Emerging Phenomenon” June 2008
Anywhere, Anyone, Any Service
From Today’s Data Center to “Cloud”
Tiered Apps,Composite
Apps
Traditional Apps
Grid AppsApps
Cloud OS: Assigns and arranges virtualized resources dynamically for applications and workloads
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 6
CPU Storage
Virtualization
Cloud OS
CPU Storage
Virtualization
System Mgmt
Network
Extended IP Infra: The IP network with abstractions to support thecloud model (e.g. security, SLA enablement)
VirtualizationVirtualization
ExtendedIP Infra
Cloud Inhibitors – As perceived by customers
Rate the Challenges/Issues of the Cloud/On-Demand Model
Security
Performance
Availability
Hard to Integratewith In-House IT
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 7
Source: Analyst Reports
Security, Performance and Interoperability rate amongst the top 3
0% 20% 40% 60% 80% 100%
with In-House IT
Not Enough Abilityto Customize
Worried Cloud willCost More
Bringing Back In-Housewill be Difficult
Not Enough MajorSuppliers Yet
Solution to Current Cloud Barriers
Cost
Flexibility
Weakness Strength
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 8
Security
SLAs
Interoperability
NetworkPlatformNetworkPlatform
© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID8
MPLS Core
Secure Multi-TenancyThe Network Container
� VN-Link allows per-VM segmentation of traffic with full switching features
� VLANs and VRFs keep L2 / L3 customer traffic isolated
Common PhysicalInfrastructure
Logical View per Tenant
Fabric
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 99
� Virtual Device Contexts further isolate traffic and enhance operations
� Allows partitioning of data center services such as SLB, firewalling, etc.
� OTV allows seemlessextension of tenants between pods
FabricPath
Built for On-Demand
AppApp
OSOS
VLANVLAN210210
QoSQoSPriorityPriority
�Network policies assigned to each virtual machine instance
�Automatic network configuration based on policies
� Policies travel with VM instances during re-provisioing and vMotion events
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 1010
Nexus / UCS / ASA / etc.Nexus / UCS / ASA / etc.
PolicyPolicy--based VMbased VMConnectivityConnectivity
Network and SecurityNetwork and SecurityService PortabilityService Portability
Maintains WireMaintains Wire--once once Operations ModelOperations Model
Cisco VNCisco VN--Link: Virtual Network Link Link: Virtual Network Link
Nexus 1000v + Nexus 1000v + vNICvNIC Nexus 1000v + Nexus 1000v + vNICvNIC Nexus 1000v + Nexus 1000v + vNICvNIC
Secure Virtualization with Multiple Tenants and Clear Security Boundaries
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 11
Built for ScalabilityAdd Capacity For System, Not Single Service
Capacity C
onsumed
Service 1
Service 2
Service 3
Available Capacity
Available Capacity
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 12
Capacity C
onsumed
Time
Service 4
+
Added infrastructure is dynamically discovered, and comes online to meet any required demand.
Transforming Service Delivery: The Cisco Unified Service Delivery
Customer
Internal/External)
Unified Service Delivery
Data Center CommunicationSecure Virtual Experience
Information
Any Any
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 13
Data CenterVirtualized
CommunicationIP NGNSecure Virtual Experience
Collaboration
Any DeviceAny Device
Any PlaceAny Place
Any Application
Any Application
Any Compute
Any Compute
Any StorageAny
StorageAny
LocationAny
Location
Any FormAny Form
Internet
Subscriber “A”
Application 1
Subscriber “B”
Application 1
Subscriber “A”
Application 2
App 1
App 1
ApplicationSoftware
VirtualMachine
VSwitch Access Aggregation Core PeeringIP-NGN
BackboneStorage & SAN
Compute
GSS
GSLB
Cluster
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
WAAS
AXG
AVS
Unified Service DeliveryDelivery Center, Cloud Computing Services Overlay
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 14
Partners
CIMP
CIMP
Application 2
Subscriber “B”
Application 2
Cloud
Infrastructure
Management
Platform
App 2
App 2
CRS-1
7600
6500
Nexus 7000Nexus 7000
(w/ Cat 6500
as Services
Chassis)
Nexus 5000
w/ Nexus 2000
Fabric Extender
UCS, MCS 7800
(or Generic
Rack or
Blade Servers)
Nexus 1000v MDS 9000 +
Consolidated
Storage Arrays
(EMC, etc.)
VMWare
Xen
Hyper-V
CRS-1
ASR 9000
ASR 1000
7600
Cisco and
Third-Party
Applications
10G Ethernet
10G FCoE
4G FC
1G Ethernet
VM to vSwitch
vSwitch to HW
App to HW / VM
EmbeddedServices
ACE
IDS
DDoS
SSLFW
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
App
OS
IP-NGN
Transforming Information Services Building Blocks for Secure Scalable Cloud Computing
Unified Service Delivery
SecureTransportSecure
Transport
Customer
Information
Cloud ServicesCloud Services
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 15
Secure Virtual ExperienceCloud Services
SP Data CenterDC—CO—VHO
CommunicationIP NGN
Unified ComputeUnified Compute
UnifiedFabricUnifiedFabric
ApplicationFluency
ApplicationFluency
Cloud ServicesSoftware as a Service
Platform as a Service
Infrastructure as a Service
Cloud ServicesSoftware as a Service
Platform as a Service
Infrastructure as a Service
UnifiedNetwork Services
UnifiedNetwork Services
Server Virtualization
Users
NetworkVirtualization
IP / MPLS VPNs
VLANs
App
Virtualized Services (FW, LB etc)
IP / MPLS VPNs
VLANs Virtual I/O
AppAppApp App App App
� VLANs, QOS, VSANs, Zones
� Virtual Context, Virtual Firewalls,
� FCoE, VDC’s, VPC, Priority Queueing
Network Virtualization
Virtualization in the Datacenter
�Virtual Device Contexts�Virtual Firewall & Load Balancer Contexts�Unified Fabric
�VN-Link
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 16
� Resource conservation of Array ports
� Improved data mgmt. & compliance
� Server to storage I/O troubleshooting
Storage Virtualization
� Bare metal mobility between clusters
� VM mobility between clusters
� Improved capacity utilization
Server Virtualization
VSANs
StoragePool
StorageFabric
Virtual Volumes
Server Pool
OS
App
Physical Server
Virtual Machines
VSANs
VolumesPhysical
OS
App
OS
App
Hypervisor
OS
App
OS
App
OS
App
OS
App
Storage Virtualization
Server Virtualization
�Virtual SANs�Inter-VSAN Routing�Network hosted Storage Virt.
�VN-Link�NPV�Unified Fabric�Lossless 10G Ethernet
UnifiedFabricUnifiedFabric
Primary Network
I/O Virtualization with Unified Fabric(FCoE/ANSI FC-BB-5)
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 17
v
FabricFabric
Secondary Network
LegacyServer = Application
•Inefficient•Complex•High Cost
•Fragile
UnifiedServer = Resource
•Upto 30% increase in server workloads. •Wire once to connect to any device
- SAN, LAN, HPC.•Lower cost
•Agile-Any workload on Any server
VirtualizationPlatform
Industry Transformation in MotionConsolidation of all Platforms
O/S Systems Mgmt.
Virtualization Platform
HWProfiles
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 18
ComputePlatform
NetworkPlatform
Bladesx86 StorageSMP
LANSANHPCWAN
Server and Storage Compute Platform
Network Platform
Unified ComputingHarmonization Efforts Among the Platforms
VirtualizationPlatform
•Stateless Computing•Unified Fabric DCE / FCoE•Role Based Control•Extended RAM per server•High VM-Density: 1000’s of VM’s•Low-latency Hypervisor bypass
•Stateless Computing•Unified Fabric DCE / FCoE•Role Based Control•Extended RAM per server•High VM-Density: 1000’s of VM’s•Low-latency Hypervisor bypass
A Cohesive system that unites compute, network, storage access and virtualization
A Cohesive system that unites compute, network, storage access and virtualization
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 19
ComputePlatform
NetworkPlatform
UnifiedFabric
Unfied ComputingEnabling Stateless Computing
SAN LANNo Attributes tied to and Physical Resource
Not just identity
Seamless server mobility
Within interconnect domain
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 20
Chassis-1/Blade-5
Chassis-9/Blade-2
Server Name: LS-AUUID: 56 4d cd 3f 59 5b 61KMAC : 08:00:69:02:01:FCWWN: 5080020000075740Boot Order: SAN, LAN
Within interconnect domain
Dynamic Provisioning
Complete infrastructure repurposing
Integrated with 3rd part tools
From Today’s Data Center to “Cloud”
Tiered Apps,Composite
Apps
Traditional Apps
Grid AppsApps
Cloud OS: Assigns and arranges virtualized resources dynamically for applications and workloads
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 21
CPU Storage
Virtualization
Cloud OS
CPU Storage
Virtualization
System Mgmt
Network
VirtualizationVirtualization
ExtendedIP Infra
Cisco Validated Cloud Ready
Infrastructure Packages
Extended IP Infra: The IP network with abstractions to support thecloud model (e.g. security, SLA enablement)
Private Cloud Benefits for Enterprises
Compute Scaling TCO ($/Qtr/OS Instance)
$1,000
$1,500
$2,000
$2,500
$3,000
$3,500
$4,000
-39%
-32%
TCO for Physical
Average TCO
Average TCO
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 22
$0
$500
$1,000
100% Physical, LegacyCompute Platform
54% Virtual, 46% Physical,Legacy Compute Platform
59% Virtual, 41% Physical,Unified Computing Platform,
100% Automated
TCO for Virtual
Delivery Time(Incl. Process)
6–8 Weeks(Order on Demand)
2–3 Weeks(Manual Process)
15 Minutes(Self-Service)
VirtualizationUnified Computingand Automation
Source: Cisco IT NDCS, RCDN9 build-out cost tracking (state-of-the-art Tier-III DC facility), Dec 2009
Serice differentiation for SPsServices Combine To Create Varied Offerings
LB, 1 VLAN
Bronze
System Configs
Multiple VLANs
SLB & SSL offload
Multiple VLANs
SLB & SSL offload
Silver
VPN OffloadFirewall
Platinum
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 2323
Virtual FW + pVLANs
Shared VMFS, No Data Protection
Virtual FW + pVLANs
Dedicated VMFS, DP via Snapshots
System Configs
Virtual FW + pVLANs
Dedicated VMFS, 100% DP, Cloning
Next StepsK
Define
� Review current architecture
� Review business objectives
� Define end-state architecture
Your Strategy
� Consolidation
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 24
Identify
Execute
� Consolidation
� Virtualization
� Automation
Your Tactical Projects
� Incremental evolution
� IT as a service center
� Organizational alignment
Transform Your Data
Center
© 2009 Cisco Systems, Inc. All rights reserved. Cisco Confidential 25