copyright © 2014 juniper networks, inc. 1 building the bridge nico siebelink technical director...
TRANSCRIPT
Copyright © 2014 Juniper Networks, Inc. 1 Copyright © 2014 Juniper Networks, Inc.
BUILDING THE BRIDGE
NICO SIEBELINK
TECHNICAL DIRECTOR JUNIPER NETWORKS
TO THE FUTURE
JUNIPER TODAY : GLOBAL REACH
SUPPORTING OUR CUSTOMERS AROUND THE WORLD
• 9600+ employees
• 12,000+ partners
• 16 around-the-clock support centers
• 146 offices in 45 countries
• 5 R&D centers
• Among highest in R&D spend in industry
• Approx. 4.7B$ Annual revenue
6Domains
2CustomerSegments
EnterpriseService Provider
3Businesses
Routing Switching Security
Core Edge Access & Aggregation
Data Center WAN Campus & Branch
DISCIPLINED AND STRATEGIC FOCUS, NO DISTRACTIONS
OUR TECHNOLOGY STRATEGYSOLVE A PROBLEM ONCE : RE-USE MANY TIMES
INNOVATING ACROSS SYSTEMS, SILICON AND SOFTWARE
Silicon Systems Software NetworkArchitecture
Through high-performance network and industry innovation
Connect everything. Empower everyone.
INTENSE DEMAND FOR NETWORK INNOVATION TO REDUCE COST, PROVIDE SECURITY AND ENABLE NEW SERVICES
80%
Cloud
% of New Enterprise Apps Deployed in the
Cloud:
Mobile Internet
50B
Security
60+%
% of IT practitioners citing serious web-based
and denial of service attacks
Devices to connect on wireless
networks in 2020
MAJOR GLOBAL TRENDS
2011 2016
5.3ZB 22ZB
2.1B 3.3B
5B 14B
2011
MAJOR MARKET FORCES…THERE IS AN EXPLOSION OF DATA, USERS AND CONNECTED DEVICES
THE WORLDWIDE MIGRATION IS A REALITYData CentersClients Global High-Performance Network
Campus
Branch
Home
Mobile
ApplicationsCloud ServicesThe Network is the enabler
People
Machines
IncreasinglyMobile workforce,
contractors
THE EXISTING NETWORK CAN'T KEEP PACE IN FAST CHANGING IT WORLD
Service Provider Challenges
Service differentiation
Rapid service creation and delivery
Static versus dynamic
Managing complexity, cost and risk of scaling network infrastructure
Enterprise Challenges
Agility, responsiveness
BYOD / mobility growth
Static versus dynamic
Inability to adapt fast enough
NETWORK CHALLENGES IN REAL TERMS
Provisioning Server
Provisioning Storage
Provisioning Network
Tim
e
Pre Virtualization Post Virtualization
Manual
Static
Complex
Isolated
Network Roadblock to Cloud
PROBLEM : THE HUMAN LATENCY
Time to Service
Human latency
Manual and static :OrchestrationProvisioningDiagnosticsTroubleshootingConfigurationPolicy
X DEVICE=
Are you ready to adapt to this new model?
Software Defined Networking
AGILITY
FLEXIBILITY INTELLIGENCE
COST SAVINGS
CENTRALIZE
PROGRAMMABILITY
DEPLOY FASTER
CUSTOMIZE
AUTOMATION
DYNAMIC
SDN AND NFV
•SDN • Software Defined Networking • An evolution in network architecture• SDN provides dynamic, service connectivity overlays
•NFV • Network Function Virtualization• An evolution in equipment architecture• NFV generalizes view of network functions into re-purpose-able assets
Equipment Architecture
Network
Architecture
THE NETWORK CAN BE SIMPLE
Virtual networks
Connections
Security Policies
Connectivity Policies
Service Chaining
New way of doing things
SDNNetworking should be complicated.For Juniper. Not for you.Old way of doing things
Pre-SDN
VLANs
MAC addresses
IP addresses
Subnets
ACLs
Routing Policies
Manual Service Chaining
VRFs
Devices
Ports
OS-specifics
BENEFITS• Foundation for new services offering with increased agility and velocity• Reduced capital and operational expense via network simplification
Dynamic Service Chain Configuration
Pool of x86 Appliances
MX Router w x86 Service Card
Service chaining for NFV improve service velocity and agility
• Contrail proactively programs
virtual overlay switches &
gateways only• Services are turned up or down
Orchestrator
MX Router w x86 Appliances
ContrailSDN Controller
DATACENTER
METAFABRIC
TOP ENTERPRISE IT INITIATIVES
Source: IDC CIO Agenda Survey
APPLICATIONS ARE DRIVING IT TRANSFORMATION
CloudsVirtualization SDN
CRITICAL DATA CENTER ATTRIBUTES
• Virtualized services
• Dynamic policy
• Visibility & control
• Multi tenancy
Dynamic Security
• Dynamic network creation
• Simple to provision
Network virtualisation
“All great things are simple”
Agility & Economics
• A more agile business
• Better economics
INTRODUCING THE METAFABRIC ARCHITECTURE
VM
VM
VM
Virtual Physical
VM
VM
VM
Virtual Physical
VM
VM
VM
VM
VM
VM
Virtual Virtual
My on-premisesdata center
My hostedservice provider
My managedservice provider
My cloudservice provider
VM
VM
VM
Virtual Physical
VM
VM
VM
Virtual Physical
SIMPLE. OPEN. SMART.
Virtual Chassis Fabric
Up to 20 members
QFX5100 ONE SWITCH, ANY ARCHITECTURE
Spine-Leaf
Virtual Chassis
Up to 10 members
QFabric
Managed as a Single Switch
Layer 3 Fabric
L3 Fabric
QFX5100
… Up to 128 members
MX SERIES UNIVERSAL DC GATEWAY
VM
VM
VM
VM
VM
VM
VM
VM
VM
Contrail“New” Encaps
Bare MetalNSXBare Metal
VM
VM
VM
MX Series—one platform to connect multiple sites and clouds
Universal SDN gateway“Connecting islands”
Open, standards-based DCIEVPN, MPLS, VPLS
Seamless workload mobilityEfficient traffic forwarding
JUNOSV CONTRAIL AGILE NETWORKING
Physical Network(no changes)
Analytics
CONTRAIL CONTROLLER
ControlConfiguration
Physical Host with Hypervisor
vRouter
VM VM VM VM
Physical Host with Hypervisor
vRouter
VM VM VM VM
WAN, Internet
Gateway
Simple, open and agile Virtual network overlay
Multiple hypervisor support KVM, VMware ESXi
Developer momentum OpenContrail community
VMWARE NSX INTEGRATION
NSX L2 gateway on core switch or edge router
Programmatic VxLAN connectivity to non-virtualized data centers
Physical Data CenterConnectivity
VirtualData Center
PhysicalData Center
EX9200 or MX Series
IT or Infrastructure as a Service
NSX L2 gateway on edge router
Programmatic connectivity to tenant specific VxLAN
VirtualNetwork
MX Series
PhysicalNetwork
NSX L2 gateway on ToR switches
Programmatic VxLAN connectivity to bare metal servers
Physical Server Connectivity
BareMetalServer
VirtualNetwork
QFX5100
SMART DATACENTER SECURITY
Proven data center scale
Integration with WebApp Secure
Virtual host and perimeter security
Optimized for performance
Low-and-slow and volumetric
Signature free: stops new attacks
vGW and Firefly DDoS SecureSRX Series
Firewall WebApp Secure
Intrusion Deception stops hacking
No tuning or WebApp changes
VMVM
VM
Virtual Physical
VMVM
VM
Virtual Physical
Data Center Global Attacker Database
CAMPUS AND BRANCH
ALWAYS ONENTERPRISE
The enterprise extends far beyond the confines of the company.It’s everywhere your organization operates—all the places where the business lives: with your customers and coworkers, between machines and in manufacturing.
Your business only happens if the enterprise is always on and always running
Explosion of Smartphones and Tablets
100% attach rate with Wi-Fi
Propels Enterprise WLAN growth
MOBILITY TRENDS: IDC
Enterprise Access IS Wireless
>50% of Devices now
Growing to 70%
• IDC Report 2013
Why?
Higher density than wired
Also, M2M, printers, projectors, cameras, sensors, etc.
Wired
30%
Wireless
70%
Wireless
50%Wired
50%
2013 2016
UNIFIED COMMUNICATIONS & COLLABORATION (UC&C) APPLICATIONSMicrosoft Lync
Goal: Unify communications and collaboration:
Voice, video, chat, desktop sharing
Challenges: Increased traffic Wireless Network Requirements
Assured Quality of ExperienceHigh availability
Data Center
IP WANCloud
Internet
ON Enterprise
OPTIMIZING THE LYNC USER EXPERIENCE UC&C ON Enterprise across collapsed tiers and centralized controllers
Branch
AccessPoints
….. …..
Collapsed Aggregation/Core/WAN
Juniper EX Virtual Chassis
Reduces hundreds of manageddevices to tens
Enables configurations for moreflexible East-West traffic for UCC like Lync
Local Switching at the AP
Remote AP = no WLC at Branch or remote Campus
Move Controllers to the DC
WLC Clusters :thousands of APs can be managed as a single unit
WLC cluster
NEED FOR SIMPLIFYING OPERATIONSComplexity on the Rise
Many standalone management tools: wired, wireless, etc. Need for single-pane-of-glass tool Configuration management, monitoring,
troubleshooting
JUNOS SPACE NETWORK DIRECTORWired and Wireless Visualization - Operational simplification
Single Pane of Glass for Wired and Wireless Networks
VISUALIZE ANALYZE CONTROL
Real-Time Performance Monitoring
Complete Wired & Wireless View
Flow Monitoring
Network Director
UNIFIED ACCESSIntegrating Wired and Wireless Network Access
Goal: Converge wired and wireless networks
Reduce cost by taking away silosReduce Management complexity Maintain consistent security policesSeamless user experienceJuniper role based Unified access control
+
Private MPLS Campus Core with VPLS
or L3VPN
AN ARCHITECTURAL APPROACH
Stretch the Connectivity for a Seamless Network
Core Switch (PE)
Access Switche (CE)
MPLS
VLAN
Access Switche (CE)
Wireless Access Point Wireles
s Access Point
SITE 1
Core Switch (PE)
VLAN1
VLAN2 R&D VPN
Marketing/ Sales VPN
Finance/ Business Ops VPN
Core Switch (PE)
Access Switche (CE)
MPLS
VLAN
Access Switche (CE)
Wireless Access Point Wireless
Access Point
SITE 3
Core Switch (PE)
Core Switch (PE)
Access Switches (CE)
MPLS
VLAN
Access Switches (CE)
Wireless Access Point
Wireless Access Point
SITE 2
Core Switch (PE)
VLAN3
Juniper Networks Enterprise.Juniper switching,WLAN and networking management solutionsthat enable secure, reliable access to mission critical applications from any device anywhere in the world.
ON
THANK YOU