hybrid application services for the digital era - cisco€¦ · hybrid application services for the...
TRANSCRIPT
SOLUTIONSFOR AN APPLICATION WORLD
Hybrid Application Services for the Digital Era
Oscar O. Visaya
Country Manager, Philippines
F5 Networks
F5 Agility 2015 2
1998“The Internet will change the way we
work, live, learn and play”
By John Chambers – CEO Cisco Systems
F5 Agility 2015 3
2013“Applications have become the lifeblood of our economy. They are how
business is done, how partners and suppliers interact, how employees
connect, how consumers share learn and buy.
We all truly live in an Applications Economy now”
By John Chambers – CEO Cisco
F5 Agility 2015 4
Today’s world runs on Applications
© F5 Networks, Inc 5
Applications are driving the greatest innovations in today’s business – and the greatest risks.
F5 Agility 2015 6
F5 MISSION
Deliver the most secure, fast
and reliable applications to anyone
anywhere at any time.
F5 Agility 2015 7
LAYER 2-4STATELESSSERVICES
LAYER 4-7STATEFULSERVICES
VIRTUAL AND OVERLAY NETWORKING
Organizations will realize the most benefits by operationalizing both stateless and stateful L4-L7 services.
Applications Rely on Application Services
Router Switch
ADC
SSL Firewall
Application Security
Identity and Access
DDoSProtection
Local LoadBalancing
Global Load Balancing
Application Performance
Secure Web
Gateway
Application
Proxies
Firewall
APPLICATIONS
F5 Agility 2015 8
The future is…
… a mix of web and mobile
applications deployed across
a hybrid (private, public and
SaaS) cloud environment
generating Big Data
2016 – Strategic Trends
Mobile Applications45
Private Cloud43
40 SaaS%
%
%
37 Big Data%
34 Public Cloud%
F5 Agility 2015 9
Application Segmentation Framework
ON-PREMISES
CUSTOM
STANDARD
PRIVATE CLOUD PUBLIC CLOUD
INTERNAL
End user profile
EXTERNAL
IAAS
SAASENTERPRISE
INDUSTRY SPECIFIC
– World Cup App
• IT Operational Excellence and Agility
• Run the business, Reduce Risk and meet
regulatory requirement
• App Services: SSL, HA, DR, Scale
• Increase business productivity
• Competitive advantage/Innovate/Disrupt
• App Services: App Security, App Performance,
HA, SSL, Anti-Fraud, DDOS
• Increase productivity and simplify user experience
• Eliminate Infra ( capex opex )
• App Services: Federation, SSO, IAM, Performance
• Elastic, on demand and fail fast
• Drive customer engagement
• App Services: Cloud DDOS/App Security
F5 Agility 2015 10
DEVICE NETWORK APPLICATION
Mo
bile
ap
p m
an
age
me
nt
En
dp
oin
t in
sp
ecti
on
We
b a
nti
-fra
ud
SD
N
CG
NAT
Ap
plica
tio
n d
elive
ry
fire
wa
llP
olicy
en
forc
em
en
t
Au
tho
rita
tive
DN
S
IPv6
ga
tew
ay
Lin
k lo
ad
ba
lan
cin
g
Lo
ad
ba
lan
cin
g
DN
SS
EC
DD
oS
mit
iga
tio
n
Clo
ud
bri
dgin
g
Acce
lera
tio
n
Mo
bile
op
tim
iza
tio
n
Se
cu
re r
em
ote
acce
ss
Clo
ud
id
en
tity
fe
de
rati
on
We
b a
pp
lica
tio
n f
ire
wa
ll
Lo
ad
ba
lan
cin
g
SIP
de
live
ry a
nd
se
cu
rity
VD
I
Ava
ila
bilit
y
BC
/D
R
Ca
ch
ing
Co
mp
ressio
n
Enterprise
Industry
Cloud
native
SaaS
Application Services Mapped to App Categories
F5 Agility 2015 11
We don’t have the
analytics to
understand when it
is best to deploy
apps in the cloud
and when it’s most
cost effective to
deploy in our DC
We haven’t
identified a
comprehensive
Identity and access
management policy
We are unable to
find a cloud
provider that meets
our data security
requirements
29% 29% 17%
We are unable to
have consistent
application
performance
across hybrid cloud
deployments
16%
Hybrid Architecture challenges
© F5 Networks, Inc 12
The traditional approach to security is inadequate.Blind, inflexible point solutions
© F5 Networks, Inc 13
A different approach to Application Security
APPLICATION ACCESS APPLICATION PROTECTION
Protecting your most critical business assets
© F5 Networks, Inc 14
F5 Application Services Integration with ACI
ACI Fabric
Programmability (iRules / iApps / iControl)
Data Plane Control Plane Management Plane
F5 App Services Fabric
Virtual Edition Appliance Chassis
F5 DEVICE PACKAGE FOR APIC • Preserves richness
of F5 Application Services offering.
• Existing F5 Physical and Virtual appliances, topologies integrate seamlessly with Cisco ACI
• Maintains operational best practices & offers faster provisioning of workflows
• Automated L4-L7 application service insertion
• Accelerated application deployments with scalableL4-L7 services
• Application agility & significant reduction in operating costs
© F5 Networks, Inc 15
F5 and Cisco ACI Integration – Two Models
Virtual Edition Appliance Chassis
BIG-IQ
APIC to BIG-IP Integration Model Phase 1(Shipping)
APIC to BIG-IQ Integration Model Phase 2
BIG-IP
ACI Fabric
F5
Syn
the
sis
Fa
bric
© F5 Networks, Inc 16
F5 BIG-IP and BIG-IQ Integration Models with ACI
ACI Fabric Virtual Edition Appliance Chassis
BIG-IQ Device
Package
Device Package
F5 Device Package Release 1.2 Deployment Model
BIG-IQ Integration with Cisco ACI
1
2
4a
BIG-IQ integration with APIC
1 - BIG-IP expose iApps to BIG-IQ
2 - BIG-IQ create custom device package
3 - Admin import BIG-IQ device package to APIC
4a - APIC sends iApp config to BIG-IQ -> BIG-IP
4b - APIC sends Device config to BIG-IP
BIG-IP integration with APIC
1 - Download device package from F5
2 - Admin import device package to APIC
3 - APIC sends config to BIG-IP directly
downloads.f5.com
3
32
4b
1
F5
Syn
the
sis
Fa
bric
Device Package
F5
Configuration{'state': 1, 'transaction':
0, 'ackedState': 0, 'value':
{(5, 'DestinationNetmask',
'Netmask1'): {'state': 1,
'transaction': 0,
'ackedState': 0, 'value':
'255.255.255.255'}, (5,
'DestinationPort', 'port1'):
{'state': 1, 'transaction':
0, 'ackedState': 0, 'value':
'80'
BIG-IQ Device
PackageF5 iApps
Config{'state': 1, 'transaction':
0, 'ackedState': 0, 'value':
{(5, 'DestinationNetmask',
'Netmask1'): {'state': 1,
'transaction': 0,
'ackedState': 0, 'value':
'255.255.255.255'}, (5,
'DestinationPort', 'port1'):
{'state': 1, 'transaction':
0, 'ackedState': 0, 'value':
'80'
F5 Device
Config{'state': 1, 'transaction':
0, 'ackedState': 0, 'value':
{(5, 'DestinationNetmask',
'Netmask1'): {'state': 1,
'transaction': 0,
'ackedState': 0, 'value':
'255.255.255.255'}, (5,
'DestinationPort', 'port1'):
{'state': 1, 'transaction':
0, 'ackedState': 0, 'value':
'80'
Summary
• F5 is best positioned for the Cisco ACI Platform – proven today with customers
throughout Asia and rest of the world.
• F5 helps you smoothly evolve to a Hybrid Data Center Architecture with our
Hybrid Applications Services Fabric
Oscar VISAYA <[email protected]>