the virtualized dynamic data center - cisco · 2010. 7. 5. · a new architectural approach is...

39
The Virtualized Dynamic Data Center Secure Multi-Tenancy Presented Jointly by: Cisco, NetApp and VMware 28 th January 2010

Upload: others

Post on 01-Oct-2020

1 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

The Virtualized Dynamic

Data CenterSecure Multi-Tenancy

Presented Jointly by:

Cisco, NetApp and VMware

28th January 2010

Page 2: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Validation with latest Maintain and Grow Share

NetApp & VMwareCisco Partner

Cisco Validated Design Webinar Benefits

� Validation with latest technology.

� Collaboration with Partner base for account planning.

� End-to-End Data Center Architecture.

� Validated Designs that are proven to work

� Build customer loyalty as a competitive differentiator

� Partner Enablement as a joint effort. (Less time out of field)

� Maintain and Grow Share

� Technology increases in value when it’s integrated into the customers global strategy

� Competitive Advantage

� Delivery of Open Data Center Ecosystems.

A link will be provided at the end of call to these

slides and more technical information

Page 3: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

1:00 – 1:05 Welcome and CVD Overview

1:05 – 1:15 Joint Relationship

1:15 – 1:30 Business & Partner Opportunity

Agenda

3

1:30 – 1:45 Technical Overview

1:45 – 1:50 Next Steps

1:50 – 2:00 Q&A

Page 4: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Introductions

� Bernie Trudel Data Center Technology Lead Cisco

� Gavin CohenDirector of Technology and Strategy

>>

Director of Technology and StrategyNetApp

� Tim HartmanTechnical Alliance Partners VMware

4

Page 5: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Executive Overview

Why this Relationship?

5

Page 6: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Cisco, NetApp and VMware A common approach

� Compute & network efficiency

� Multiprotocol architecture

� Simplified network

� Ethernet leadership

� Storage efficiency

� Multiprotocol architecture

� Simplified data management

� Ethernet storage leadership

VMware

Virtualization

Cisco

Unified Computing

� Virtualization leadership

� Data Center Solutions

� Desktop Solutions

� Cloud Services

NetApp

Unified Storage

� Ethernet leadership

� Virtualization optimized

� Ethernet storage leadership

� Virtualization optimized

� Cloud Services

� Virtualization management

6

Page 7: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Alliance Highlights

1st VMware GSX customer on NetApp

NetApp resells

Cisco® MDS switches

NetApp and Cisco launch FCoE

NetApp Launches Center of Excellence based on

NetApp partners with Cisco Unified Computing

NetApp, Cisco, and VMware3 leaders, 1 architecture

VMware/Cisco/NetApp

Secure Cloud CVD

VMware ESX support for iSCSI and NFS

NetApp established as reference platform

2003 2004 2005 2006 20082007 2009

based on Cisco Network platform

architecture seminars

“By implementing NetApp, Cisco, and VMware technology, we have increased our storage efficiency, introduced

greater flexibility, and reduced our total IT costs.” - Jeff Smith, Group Executive Business Technology, Suncorp

NetApp/VMwareMutual Global Partners

as reference platform

Cisco-NetApp alliance established

7

Page 8: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Secure Shared InfrastructureThree Companies, One Architecture

� Gain efficiencies of virtualization –while maintaining security

� Tested and validated architecture provides benefit to channel and customers alike:

� Lower cost of sale

� Lower support costs

VMware VMware VMware

� Lower support costs

� Faster time to market

� Greater profits

� Today’s presentation will cover business and technical aspects of this unique-in-industry solution

HR BU APP

8

Page 9: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Business Overview

9

Page 10: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Business value for channel partners

What are we providing channel partners?

1) Integrated solution “out of box” that solves customer problems faster with less risk and increases partner profits by delivering additional services

� Cisco Validated Design for Designing Secure Multi-Tenancy into Virtualized Data Centersinto Virtualized Data Centers

2) Opportunity to engage customers with new, unique offering targeted at critical problems of virtualized environments

� Solve top of mind customer problems

10

Page 11: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

� Cost Saving Options

� People

� Process

� Technology

Higher Efficiency—Big Savings

40%+ Total Cost Savings

Achieved by transforming

underlying technology and

aligning your people & process

� 3% - 7% Savings in People Efficiencies

� 10% - 12% Savings in Process Efficiencies

aligning your people & process

to new foundation

*Source: Oliver Wyman, Sep07-Apr08

11

Page 12: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Build Point Solutions

Business Need

Applications

Servers

Modular ApproachDesign and Build based on Business Requirements

Build Infrastructure Offering

Applications

Business Need

Virtualization-

Aware Network

Silo Silo Silo

Servers

Network

StorageProject-

based

Vertical

Decision

Ethernet, FC, IB

Virtualized Dynamic Infrastructure

IT Service

Holistic Decision

Aware NetworkVirtualization-Aware

Unified Fabric

ServersVirtualized

Storage

12

Page 13: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Virtual Infrastructure—Starts With Servers

Servers

� Save power, cooling ����

� Save space ����

� Improve asset utilization ����

� Provision quickly ����

� Manage copies efficiently ����

� Improve QoS ����

� Infrastructure flexibility ����

13

Page 14: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Platform FocusInfrastructure Abstraction

High

AvailabilityDistributed

Resource

SchedulervShield

ZonesvNetwork

Distributed

SwitchStorage

Infrastructure As A Service

Early Generation FocusMultiple Apps per Machine

VMotion™

SwitchStorage

VMotion

Key Benefit = Consolidation Key Benefit =

Dynamic, Flexible Infrastructure

14

Page 15: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

VMware View

VMware vSphere 4.0

Application

Management

Desktop

Management

Today’s ApplicationsFuture

Applications

VMware vSphere 4.0 –

for Secure Multi-Tenancy

Infrastructure

Management

External Cloud

Virtualization-Aware

Unified Fabric

ServersVirtualized

Storage

Internal Cloud

15

Page 16: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Virtualizing Servers & The Network

Servers Network

� Save power, cooling ���� ����

� Save space ���� ����

� Improve asset utilization ���� ����

� Provision quickly ���� ����

+

+

+

+� Provision quickly ���� ����

� Manage copies efficiently ���� ����

� Improve QoS ���� ����

� Infrastructure flexibility ���� ����

+

+

+

+

16

Page 17: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

A New Architectural Approach Is NeededTomorrow’s Data Center Can’t Be Built On Yesterday’s Technology

• The data center needs to evolve

• Both computing and networking have to change

• Management needs to be native, not an after-thought

• Virtualization is changing the focus

• Applications no longer tied to server hardware• Applications no longer tied to server hardware

• Applications are now objects moving through the network

• Cisco is leading Data Center innovation

• Cisco Unified Fabrics was the first step

• Cisco UCS is the next step

• Cisco UCS is a clean sheet approach for next

generation virtualized data centers

Page 18: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

� Save power, cooling

� Save space

� Improve asset utilization

� Provision quickly

Completing The ArchitectureStorage Elements

Server + Network + Storage

���� ���� ����

���� ���� ����

���� ���� ����

���� ���� ����

+

+

+

+

+

+

+

+� Provision quickly

� Manage copies efficiently

� Improve QoS

� Infrastructure flexibility

���� ���� ����

���� ���� ����

���� ���� ����

���� ���� ����

+

+

+

+

+

+

+

+

18

Page 19: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Rapidly Scale Servers and Storage

�Rapidly provision storage with

servers

– Respond quickly to new

opportunities

�Dynamically scale

19

– Set up new environment rapidly

– De-provision just as easily when

testing is doneNetApp

Storage Pool

NetApp

Storage Pool

Page 20: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Compounding Impact of Storage Efficiency

Unchecked Data Growth

Snapshots

ATA

RAID-DP

Thin ProvisioningThin Provisioning

Thin Cloning

Deduplication

20

Page 21: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

ChallengeSecurity and isolation of customer data

� Secure environments traditionally require dedicated resources

� Inefficient and inflexible

� Costly to deploy and manage

� Low utilization rates

HR Apps BU Apps Core Apps

� Low utilization rates

� Difficult to change

� How to gain efficiencies of virtualization – while maintaining security?

21

HR BU APP

Page 22: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Secure Shared InfrastructureThree Companies, One Architecture

Overview

� The only validated design for end-to-end secure multi-tenancy

� Data is securely isolated from virtual server, network, to storage

VMware VMware VMware

Customer Benefits

� Address end user security concerns

� Meet regulatory and compliance requirements

HR BU APP

22

requirements

� Gain economies of scale, higher utilization, and better SLAs

Partner Benefits

� Integrated solution “out of box” means less risk and faster deployments

� Enables data center transformation projects (more revenue)

� Focus on your value-add and additional services opportunities

Page 23: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Area Typical Dynamic Data Center

Servers 1000 100

Storage (TBs) 100 50

Racks 200 10

Cables/Ports 3000 300

Results you Can MeasureTypical Gains from a Virtualized Dynamic Data Center

Cables/Ports 3000 300

Networks 2 1

Provision Time Weeks Minutes

UtilizationCompute: 5-8%

Storage: 30-40%

Compute: 90% +

Storage: 75% +

StaffTactical Tasks

250 TB per FTE

Strategic Tasks

Up to 2PB per FTE

23

Page 24: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Technical Overview

Cisco Validated Design:

Secure Multi-Tenancy Architecture

Page 25: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Secure Multi-tenancy Components

NetApp SANscreen

Network

Compute

Cisco Nexus 5000

Cisco UCS 6100

Fabric Interconnect

Cisco UCS 5100

Blade Server

VMware vSphere

Cisco Nexus 1000V

VMware vShield

VMware

vSphere

VMware

vSphere

Cisco UCS

Manager

VMware vShield

Manager

VMware vCenter

NetApp

SnapManager

Compute� VMware vShield

� VMware vSphere

� Cisco Unified Computing System

Network� Cisco Nexus 1000V

� Cisco Nexus 5000

� Cisco Nexus 7000

� Cisco MDS

Storage

NetApp SANscreen

SAN

Cisco Nexus 7000

Cisco Nexus 5000

Cisco MDS

Storage NetApp MultiStore

NetApp FAS

NetApp FilerView

NetApp Provisioning Manager

NetApp Protection Manager

NetApp Operations Manager

Cisco Data Center

Network Manager

Storage� NetApp FAS

� NetApp Multistore

Management� VMware vShield Manager

� VMware vCenter

� Cisco UCS Manager

� Cisco DC Network Manager

� NetApp Operations Manager

� NetApp Provisioning Manager

� NetApp SANscreen & SnapManager

Page 26: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Documentation Usage Guideline

Designing Secure Multi-tenancy into

Virtualized Data Center

Design Guide

Cisco Validated Design (CVD)

�Solution Brief (4 pages)

�Architecture Overview (25 pages)

�CVD: Design Guide

(90 pages)

�Design Considerations

�Best Practice�Best Practice

�Bill of Material

�CVD: Deployment Guide

(100+ pages)

�Configuration

�Software Recommendation

Page 27: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Secure Multi-tenancy – Four Pillars

ssService Assurance

• Deliver consistent SLA across

Secure Separation

• Enable separation across tenants

Availability

• Build resilient architecture

Management

• Simplify managementSLA across

Compute

Network

Storage

across tenants

• Increase security and access control

architecture

High Availability

Fault Tolerance

Redundancy

management

• End-to-end manageability

Secure Multi-tenancy Architecture

Page 28: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Resilient End-to-End Architecture

Core/

Aggregation

Access

Compute

Cisco

Nexus 7000

Cisco

Nexus 5000

Cisco

UCS 6100

Fabric

Interconnect

vPC

vPC vPC

Compute

� vCenter Heartbeat

� VMware HA

� vMotion/Storage vMotion

� UCS Fabric Redundancy

Network

� vPC

� EtherChannelNexus 1000V

SAN/Storag

e

UCS 5100

Blade

Server

Cisco MDS

NetApp FAS

4x10GE

4x10GE

4x10GE

4x10GE

FC FC

10GE 10GE

Ether

Channel

Ether

ChannelFC FC

� EtherChannel

� N1KV Active/Standby VSM

� Link/Device Redundancy

Storage

� RAID-DP

� NetApp HA

� Snapshot

� SnapMirror/SnapVault

VMware

vSphere

VMware

vCenter

Page 29: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Secure Multi-tenancy – Four Pillars

ssService Assurance

• Deliver consistent SLA across

Secure Separation

• Enable separation across tenants

Availability

• Build resilient architecture

Management

• Simplify managementSLA across

Compute

Network

Storage

across tenants

• Increase security and access control

architecture

High Availability

Fault Tolerance

Redundancy

management

• End-to-end manageability

Secure Multi-tenancy Architecture

Page 30: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Secure Separation

Compute

� UCS & vSphere RBAC

� VM Security with

vShield and Nexus 1000V

� UCS Resource Pool

Separation

Network

� Access Control List

� VLAN Segmentation

� QoS - Classification

Storage

� vFiler units

� IP Spaces

� VLAN Segmentation

Page 31: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Secure Multi-tenancy – Four Pillars

ssService Assurance

• Deliver consistent SLA across

Secure Separation

• Enable separation across tenants

Availability

• Build resilient architecture

Management

• Simplify managementSLA across

Compute

Network

Storage

across tenants

• Increase security and access control

architecture

High Availability

Fault Tolerance

Redundancy

management

• End-to-end manageability

Secure Multi-tenancy Architecture

Page 32: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Service Assurance – Delivering SLA

Compute� Expandable Reservation

� Dynamic Resource Scheduler

� UCS QoS System Classes for Resource Reservation and Limit

Network� QoS - Classification

High PriorityMed Priority

Platinum

CoS

Gold

CoS

� QoS - Classification

� QoS - Queuing

� QoS - Bandwidth control

� QoS - Rate Limiting

Storage� FlexShare

� Storage Reservations

� Thin Provisioning

4 GE2 GE

Page 33: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Secure Multi-tenancy – Four Pillars

ssService Assurance

• Deliver consistent SLA across

Secure Separation

• Enable separation across tenants

Availability

• Build resilient architecture

Management

• Simplify managementSLA across

Compute

Network

Storage

across tenants

• Increase security and access control

architecture

High Availability

Fault Tolerance

Redundancy

management

• End-to-end manageability

Secure Multi-tenancy Architecture

Page 34: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

End-to-End Management

Server Layer

Network Layer

vCenter Server

vShield Manager

Unified Computing

System (UCS) Manager

SANscreen

Data Center Network Manager

Flexible NetFlow SANscreen

Storage Layer

Flexible NetFlow

Fabric Manager

Operations Manager

Provisioning and Protection Manager

SANscreen

� Service Insight

� Service Assurance

� Application Insight

� Capacity Manager

� VM Insight

Page 35: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Silos to Secure Multi-tenancy Architecture

HR Apps BU Apps Core

AppsVMware VMware VMware

Traditional

Data CentersSecure Multi-tenancy

Architecture

H

R

B

U

AP

P

HR BU APP

Page 36: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Next Steps

36

Page 37: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

A Partnership Built On Meeting Customer Needs

Customer

Technology

Integration

Executive Alignment Shared Vision

Customer

3737

CustomerValue

Product

Certification

Solutions, Services& Support

Customer Experience

Page 38: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

Next Steps for Channel Partners

� Cisco, NetApp, VMware committed to channel partner and customer success

� Data center transformation deals measured in millions of dollars given products from multiple vendors and “last mile” deployment services

� Get out in front of your customers today as joint team – we

http://www.imaginevirtuallyanything.com/� Get out in front of your customers today as joint team – we are here to help you sell more!

� Where do you go for more information?� We will push presentation to attendees today

� Visit NetApp Field Portal and secure multi-tenancy landing page� fieldportal.netapp.com, search for “secure multi-tenancy”

� Visit Cisco Communities site

38

Page 39: The Virtualized Dynamic Data Center - Cisco · 2010. 7. 5. · A New Architectural Approach Is Needed Tomorrow’s Data Center Can’t Be Built On Yesterday’s Technology •The

The Virtualized Dynamic

Data CenterSecure Multi-Tenancy

THANK YOU