cisco cloud enablement platformd2zmdbbm9feqrf.cloudfront.net/2015/eur/pdf/brkcld-2552.pdf · but...

Cisco Cloud Enablement Platform

BRKCLD-2552

Keith Weaver

Technical Solutions Architect

CCIE #2321

© 2015 Cisco and/or its affiliates. All rights reserved.BRKCLD-2552 Cisco Public

Agenda

• Introduction to Cisco Enterprise Cloud Suite

• Private Cloud Solutions

• Hybrid Cloud Solutions

• Cloud Services

• Conclusion


Delivering IT Services to Users

Customer Expectations

• App Store Model

• Transparent and Clear Status

• Automated Delivery

• Self Service

• Immediate Gratification

Today’s Reality

• Many different request points

• Difficult to track status

• Manual request fulfillment

• High Touch Model

• Slow


A New Mandate for IT

CloudDevtest

Agility

Big Data and

AnalyticsMobile

New Breed of

Applications


Automate Service Delivery

Architect Design Where

Can We

Put It?

Procure Install Configure Secure Is It

Ready?

Manual


Automate Service Delivery

Architect Design

CapacityOn-Demand

Policy-BasedProvisioning

Adaptive

From Weeks to

Minutes

Automated Self-ServiceProvisioning

Private Cloud Solutions


Customized

Flexible infrastructure

Long configuration cycles

Costly management

and maintenance

Ruthlessly standardized

Fully automated infrastructure

Unprecedented time and cost

savings

Agile

Predictable and consistent

Smaller number of scalable offers

Old IT New IT

The Changing IT Mindset


Adopting Cloud is easy…But building, managing and maintaining it is not

“We shelved the project after 6 months of effort”

“Life was easier for IT, but the business units weren’t using

it”

“Given the effort involved, we didn’t see an ROI on the

project”

“After 12 months of effort and hundreds of thousands of

dollars, the business doesn’t perceive a difference from IT”

Private Cloud Pain Points


Components of a Private Cloud Architecture

Robust Extensible

Service Catalog

Intelligent

OrchestrationSecure Multi-Cloud

• Reporting and

Analytics

• Lifecycle

Management

• Roles Based

Access Control

• Show/Chargebac

k


Simplify : Enterprise Cloud Strategy

PaaS, SaaS and Application Stacks – with Application Configuration (e.g. HEAT, Puppet, Chef)

CISCO

PRIME SERVICE

CATALOG

Stack DesignerConsumer Storefront

Application Infrastructure Containers – Compute, Network, Storage, Virtualization, L 4-7 Services

CISCO UCS

MANAGERService Profile

Hypervisor Storage

UCS Director

CISCO

PRIME SERVICE

CATALOG

ICF Director

CISCO APIC /

VACSApplication Network Profile

Compute


Cisco Enterprise Cloud Suite Components

Prime Service Catalog

• End User Storefront for IT and data center services

• HTML5 UI

Stack Designer

• Visualize application/fenced container topology

• Design application service by dropping application component in

infrastructure containers

Heat

• Model-based cloud orchestration

• Provisions infrastructure and application components by

invoking Resource Manager APIs

• Non-proprietary technology

• Template format is extensible

{

"AWSTemplateFormatVersion": "2010-09-09”,"Description" : "”,"Resources" : {"PublicNetwork" : {"Type" :

"AWS::EC2::InternetGateway”},"PubZ1" : {"Type" :

"AWS::EC2::VPC”},"PubZ1Attachment" : {"Type" : “



UCS Director

• Converged infrastructure management (compute / storage / Net)

• PSC supports Standard/Container Catalog, Service Container

Catalog, Fenced Container Template, VACS Container Catalog

and APIC Container Catalog

RabbitMQ

• AMQP Message Broker to enable asynchronous messaging

• Technology native to Openstack to enable simpler integration

Puppet Labs

• Support Puppet for application lifecycle management, starting

with provisioning. (not shipping with)



Intercloud Fabric for Business

• Hybrid cloud management

• Support VMs on AWS, Azure and InterCloud Partners

• Secure , portable , application shell

Type Designer

• Define new target types in addition to UCSD and Openstack

• Define resources that show up as palette items in Stack Designer


Application-centric cloud deploymentStack Designer defines application modelService Catalog Storefront

Based on HOT or CFN

Publish as

orderable

service

Provisioned into IaaS as

application + infrastructure

container

End user self-service VM and infrastructure container provisioning from the storefront too

Private Cloud

Hybrid Cloud

Workload Movement


Cisco Prime Services Catalog


Unified IT Storefront

Standardized Catalog of IT Services for Improved Efficiency

Web-Based End-User Self-Service Portal

Configurable Portal Pages and Portlets

Role-Based Access Control (RBAC)

Policy Governance and Approvals

Reusable Templates for Service Request Workflows

Lifecycle Management for Service Requests

Finance & Demand Management


Cisco Prime Service Catalog

• Reduce complexity of request management

– Deploy standardized service options with flexible service models

– Insulate users from change in infrastructure and back-end systems

• Apply the Service Catalog to multiple use cases

– Workplace and end user IT

– Cloud and data center infrastructure

• Best-of-breed IT Service Catalog solution


Managing IT Service RequestsDoes This Look Familiar?

Call Help Desk

Search Web

Forms

Track Down

Approvals

Check On

Status

Inefficient, Manual

Steps

Missing

Information

Need to Verify

Entitlements

Status Check

Callbacks

No Standard Process

No Visibility

into Delivery

Bottlenecks

Are SLAs Being

Met?

No Data

to Track Metrics

Multiple Entry Points to Request Services from IT

Multiple Delivery Channels and Process “Shepherding”

END USERS SERVICE DELIVERY SERVICE MANAGEMENT


END USERS SELF SERVICE PORTAL

Managing Requests for IT Services with Cisco Prime Service Catalog

Cisco Prime Service Catalog

Service Catalog

Role-Based Access Control

Easy-to-Use

Interface

Compare Standard

Options

Rich

Interactive Forms

Policy

Control and

Governance

Ordering and

Approvals

Online Status

Updates

Service Requests


Seamless Infrastructure ManagementAutomation Powered by UCS Director

L4-7 Services Virtualization

Integrated application

containers for secure

workload provisioning

Application Centric

Infrastructure configuration

Open developer kit for

ecosystem acceleration

Hadoop integration to

easily manage large

clusters

Storage

UCS Director

Nexus Product FamilyUnified Computing System

Quality

Enforce IT Best Practices

Velocity

Rapidly Deploy Applications

Simplicity

Ready for Use in Hours


Intelligent Orchestration

• Consolidate, standardize, virtualize

• For IT operations/administrators

• Delivers: IT efficiency, reduced costs

• Application + Infrastructure across wide range of business services

• Designed for End Users

• Delivers organizational speed, flexibility and agility across entire organization

Step OneInfrastructure Automation

Public

PrivateVirtual

Private

SaaS

Step TwoFull CloudAutomated Private, Public, and Hybrid


DC Edge Security

Managing VM sprawl

VM’s talking to

each other

Lack of

Security

Manually

Provisioned

Lack of

Visibility

Troubleshooting

is a nightmare

Weeks to onboard

customer/app


DC Edge Security

On-demand Secure Container

Secure AutomatedCompliant

Enterprise

AppsTransactional

Apps

Collaboration

Apps


Virtual Fabric—Nexus 1000V

Platform for Distribute FW

Zone Based FW—

Virtual Security Gateway

Edge FW—CSR 1000V

Routing—CSR 1000V

Automated Provisioning and

Orchestration—UCS Director

Virtual Application Container ServicesVACS Built on Proven Technology

Enterprise Apps

Enforced by Best in

Class ServicesBuilt on flag ship Cisco NXOS & IOS SW


What is a container?Upstream Router

1. NAT (Optional)

2. L3 Routing – EIGRP or OSPF

3. Edge FW

4. Monitoring Features

VACS – 3 Tier App Container

Zone based FW

Routing – EIGRP or OSPF or Static

VLAN 1/

VXLAN 101

Web Tier App Tier DB Tier

VSG

CSR 1000V


UCS Director ACI Integration

Tenant Management

• Dynamic vPODS

• Allocation of Physical and

Virtual resource pools

• Onboarding

• User and Groups

• Roles

Infrastructure for Application

• Templates for VM, Bare Metal, Apps

• Templates for Tenant Creation

• Self Service UCS Director

Application Profile (Blueprint)

Application Topology

Number Of Tiers

Application Resources Definition

Application Containers

Compute

Network

Storage

L/B

APP DBF/W

L/B

WEB

Resource Management• Virtualized or Physical Resource pools

• Compute, Network, Storage, L4-L7 for

Different Tiers

• Application Resource Characteristics

• Memory, CPU, Capacity

• Performance, Throughput

• Availability (HA)

UCS Director

IT Admins

APIC

Integrated L4-L7 Services

Physical & Virtual

Server Load Balancer

Hypervisors

Hypervisor Managers

APIC

NetApp Clustered ONTAP

ACI Fabric

Cisco Unified Computing System

Application Network

Policy

Application Admins


Cisco ACI Tenant on-boarding

• UCS Director defines a secure Tenant container for physical and/or virtual servers within UCS

• Using NetApp clustered Data ONTAP, UCS Director creates secure Storage Virtual Machines (SVM) for the Tenant’s server and application data

• Using the Application Policy Infrastructure Controller (APIC), UCS Director defines the secure networking required for the Tenant

NetApp clustered Data ONTAP

Cisco

UCS

Compute Resources

Tenant Container

Hybrid Cloud Solutions


Why Hybrid?

Fixed workloads Elastic workloadsChoice to build / rent across providers

Workload portability

Consistent security

DC/Private Clouds Provider CloudsEconomics

Speed

Scale

Data

Sovereignty

Security

Control


Intercloud Fabric Analogy of a Switch

Line cards Intercloud Fabric Switch

Supervisor-1

Supervisor-2

Linecard-1

Linecard-2

Linecard-N

Supervisor-1

Supervisor-2

Linecard-1

Linecard-2

Linecard-N


Cloud Services Catalog

HCS

MicrosoftSuite aaS

DRaaS

PaaS

IaaS

Meraki

Security

Analytics

vDesktop aaS

WebEx

HANA aaS

IOE aaS

Collaborationand Video

Big Dataand Analytics

Native CloudApplications

EnterpriseWorkloads

Public Clouds

InterCloud Partner Cloud Services

and Applications

Cloud

Services

Catalog

EnterprisePrivateClouds


Cisco Marketplace


On Premise and Cisco Cloud Services CatalogImport Services from Cisco Cloud Service Catalog into On-Prem IT marketplace

Prime Service Catalog Cloud Service Catalog


Cisco One Enterprise Cloud Suite


CISCO

PRIME SERVICE

CATALOG



CISCO UCS


Hypervisor Storage

UCS Director

CISCO

PRIME SERVICE

CATALOG

ICF Director

CISCO APIC /


Compute

Cisco Cloud Services


Cisco Cloud Services and Applications

Virtual

Compute

Virtual

StorageVirtual

Networking

Applic

ations

Pla

tfo

rm

Se

rvic

es

Infr

astr

uctu

re

Se

rvic

es

Database

Services

Big Data ServicesPlatform as a

Service

Cisco Apps APIs

Collaboration

Security

Video

Network Management

and Orchestration

NFV and

SP Infra

Services

SP Applications Enterprise and Public Sector Applications Managed and

Private

Cloud Services

Cisco and Partner Services Catalog

Managed Services

Enterprise Managed Services

SP Managed Services

Managed Private Cloud and Data Center

Private Cloud Services

Collaboration as a Service

MCPE as a Service

LAN as s Service

Wi-Fi as a Service

Desktop as a Service

IoE / Vertical Apps

Remote Expert

Healthcare

Cisco Media Experience

ServiceGrid

BYOD

Cisco Cloud Apps

Meraki

EnergyWise

WebEx

Cognitive Threat Analytics

Managed Threat Defense

Partner/ISV Apps

Microsoft Suite

SAP Hana

Desktop as a Service

Disaster Recovery

Cloud DVR

Videoscape Cloud

Managed CPE

EnergyWise

Hosted Collaboration Services


EnterprisePrivateClouds

Public Clouds

Cloud Services and Applications

Intercloud-ready Infrastructure

Cisco Integrated Infrastructures

+ …

Workload Portability inthe Hybrid Cloud

Cisco Intercloud Fabric

Virtualized ManagedBusiness Services

New Cisco Evolved Services Platform (ESP) components for SP

New

Cisco Intercloud Partner Ecosystem Expansion

New Cisco PoweredIntercloud Providers

New

and more…

Cisco Hybrid and as-a-Service Offers

• New Intercloud Services Bundles

• Openstack Private Cloud as a Service

New

Cloud Interconnect ExpansionNew Cisco Partnershipwith Equinix

New

Partner Clouds


HR Sales Engineering

Cloud Management AND

Self Service Catalog

LOB AgilityUnified Cloud Mgmt. VM Cost Optimization

On-demand Secure Tenants w/ end-to-end Provisioning


Future proofed Fast IT

Journey to Fast IT & the Intercloud

Phase 2 Phase 3

VDI

Phase 1

Classic Enterprise Workloads

Now Feb ‘15


Private Cloud Services Different consumption models

We can help youbuild your infrastructure,

you run it yourself

We can manage some or all of your

Infrastructure

We can deliverhighly secure

cloud-based outcomes

Consult, Build, and Support Services

Managed Services

Private CloudServices

Control High availability Data sovereignty Customization

Control Operational availability Data sovereignty Transfer operational risk Higher ROI

Rapid scalability for agility Risk transfer Service availability Data sovereignty OpEx

Customer Owned on Premise Cisco Owned on Premise


Deploy, Manage, and Consume Private Cloud

Build Services

Cisco Experts build and deploy Private Cloud infrastructure on-premise

Managed Services

Cisco experts operate, manage and support your Private Cloud 24x7 to empower Fast IT

Cisco Cloud Infrastructure

Become an Orchestrator of IT Services with Unified Cloud Management (CIAC) , award

winning Cisco UCS, and Nexus Switching to build your Private Cloud

Utility Pricing

On Your PremiseSecurity Control


Automated provisioning IaaS, VDI

Self-service Catalog

Classic and Cloud workloads

Agile infrastructure

Service features...“Ease of use” Cloud

Unified management that Prevents VM sprawl

Increased agility

Look like public cloud

Meet todays and tomorrows needs

Improved Stakeholder Experience


ITIL based Services

Strict operational SLAs

Standardized reports

eBonding of events

Service features... Fully managed Private Cloud

Minimize Operational Risk

Deliver on outcomes

Improved Service Levels

Complete visibility


S,M,L starting points

On-prem. burst capacity

Intercloud fabric

Hybrid ready

Service features... Scale & Portability

Scale only when needed

Minimized up-front investments

Workload mobility

Policy drives workload placement


Consumption based

Volume commit discounts

Flexibility to reuse your ELAs

Leverage your storage(B/R D/R)

Service features... As-a-Service Flexibility

No Capex, only Opex

Capital efficiency

Possibly more economical

Snap-in to your existing infrastructure


Openstack Private Cloud as a Service


Public Cloud

Private Managed

Cloud

Metacloud Openstack

Private Cloud aaS

Cisco

• Worldwide Leader in Cloud Building, Cloud Services and Remote Managed Services that transform how People Connect, Communicate and Collaborate

• Extensive Global Partner Network, partnering to build the Intercloud

• Trusted Advisor to Enterprises, Partners and Service Providers

Better together

• Fast

• Integrated

• Choice

Metacloud

• Provider of Private Openstack Cloud as a Service

• Track Record of Providing Private Cloud Solutions

• World-Class Engineering Talent

Choice

Visibility & Data Governance

Cost

Openstack Private Cloud as a Service


Cisco One Enterprise Cloud Suite


CISCO

PRIME SERVICE

CATALOG



CISCO UCS


Hypervisor Storage

UCS Director

CISCO

PRIME SERVICE

CATALOG

ICF Director

CISCO APIC /


Compute


Continue Your Education

• BRKCLD - 2553 Intercloud Market Place

• BRKSPG - 2466 Evolution of Virtual Networking to Application and Clouds

• BRKCLD - 2555 Network Service Orchestration of Physical and Virtual Networks

• BRKDCT - 2367 Openstack Deployment in the Enterprise

• Demos in the Cisco Campus

• Walk-in Self-Paced Labs

• Lunch time Table Topics

• Meet the Engineer 1:1 meetings

• DevNet zone relate labs and sessions


Complete Your Online Session Evaluation

• Please complete your online sessionevaluations after each session.Complete 4 session evaluations& the Overall Conference Evaluation(available from Thursday)to receive your Cisco Live T-shirt.

• All surveys can be completed viathe Cisco Live Mobile App or theCommunication Stations

Appendix A: Future Out-of-box applications


Upcoming Windows Applications

MS Sharepoint 2013 (Single tier)SharePoint is a web application platform offering a set of tools that can be used to provide intranet portals, document

and file management, collaboration, and social networks, and the platform offers many more process and workflow

capabilities.

MS SQL ClusterA Microsoft SQL Server Cluster is nothing more than a collection of two or more physical servers with identical access

to shared storage that provides the disk resources required to store the database files.

MS SQLMicrosoft SQL Server is a relational database management system developed by Microsoft. As a database, it is a

software product whose primary function is to store and retrieve data as requested by other software applications, be it

those on the same computer or those running on another computer across a network (including the Internet).



MS IIS Web ServerIIS (Internet Information Server) is a group of Internet servers (including a Web or Hypertext Transfer Protocol server and

a File Transfer Protocol server) with additional capabilities for Microsoft's Windows NT and Windows 2000 Server

operating systems.

MS IIS RewriteIIS URL Rewrite 2.0 enables Web administrators to create powerful rules to implement URLs that are easier for users to

remember and easier for search engines to find.

Microsoft .NET frameworkThe Microsoft .Net Framework is a platform that provides tools and technologies you need to build Networked Applications

as well as Distributed Web Services and Web Applications. The .Net Framework provides the necessary compile time and

run-time foundation to build and run any language that conforms to the Common Language Specification (CLS).

Windows Active DirectoryActive Directory (AD) is a directory service that Microsoft developed for Windows domain networks. Active Directory is a

centralized and standardized system that automates network management of user data, security and distributed resources

and enables interoperation with other directories.



NSClient++NSClient++ is a monitoring agent/daemon for Windows systems that works with Nagios. It is a replacement

for NSClient and NRPE_NT.

Windows File ShareMany users need to share computer files with other users on their networks or computers. File sharing can be useful

for sharing documents and other types of files.

Windows Services

We can manage windows services using this module


Upcoming Linux Applications

DockerDocker is an open-source project that automates the deployment of applications inside software containers, by

providing an additional layer of abstraction and automation of operating system–level virtualization on Linux.

Java Stack (Jboss)The JBoss applications server is a J2EE platform for developing and deploying enterprise Java applications, Web

applications and services, and portals. J2EE allows the use of standardized modular components and enables the Java

platform to handle many aspects of programming automatically

Lamp stackLAMP stack is a popular open source web platform commonly used to run dynamic web sites and servers. It includes

Linux, Apache, MySQL, and PHP/Python/Perl and is considered by many the platform of choice for development and

deployment of high performance web applications which require a solid and reliable foundation.


Upcoming Linux Applications

Oracle DBOracle Database (commonly referred to as Oracle RDBMS or simply as Oracle) is an object-relational database

management system produced and marketed by Oracle Corporation. Oracle Database is the first database designed for

enterprise grid computing, the most flexible and cost effective way to manage information and applications.

TomcatTomcat is an application server from the Apache Software Foundation that executes Java servlets and renders Web pages

that include Java Server Page coding.

MongoDB

MongoDB is a document database that provides high performance, high availability, and easy scalability. Document

Database. Documents (objects) map nicely to programming language data types. Embedded documents and arrays

reduce need for joins.

NodeJS

Node.js is an open source, cross-platform runtime environment for server-side and networking applications


Upcoming Applications

RabbitMQRabbitMQ is open source message broker software (sometimes called message-oriented middleware) that

implements the Advanced Message Queuing Protocol (AMQP).

Net- SNMPSimple Network Management Protocol (SNMP) is a popular protocol for network management. It is used for collecting

information from, and configuring, network devices, such as servers, printers, hubs, switches, and routers on an

Internet Protocol (IP) network.