winning with cisco iwan -...

Winning with Cisco IWAN

Johnny Mehl Manager of Channel Technical Operations

© 2015 Riverbed Technology. All rights reserved. 2

Agenda

1

2

3

4

5

How Riverbed views Cisco IWAN

What’s new in RiOS 9.1

Opportunities for Presidio

Forward looking

Summary


97

26,000 customers

98 91

97% of the Fortune 100

98% of the Forbes Global 100

91% of Forbes Global 500

95% of our customers are also Cisco customers!


Coexistence with Cisco is nothing new…

§ Co-existed since 2004


.. although we do fight…


How Riverbed views Cisco IWAN


IWAN makes it easier/cheaper to order Cisco products.

Noticeable improvements with

PfRv3 but otherwise, the technology is more of the same.


Pillars of IWAN


Mapping Cisco Technologies

Cisco Technologies Riverbed Technologies

DMVPN Secure Transport

PfRv3 Path Selection

QoS/NBAR2 QoS/AFE

Cisco AVC SteelCentral Network Performance Monitoring

Cisco WAAS SteelHead

N/A SteelCentral Application Performance Monitoring

N/A SteelFusion


Cisco vs Riverbed

IWAN Profile Technologies Riverbed Products Base •  DMVPN

•  QoS •  PfRv3

SteelHead (WAN opt.) SteelCentral (Visibility) SteelFusion (Converged Infra.)

Advanced •  DMVPN •  QoS •  PfRv3 •  Cisco AVC

SteelHead SteelCentral SteelFusion

Advanced with WAAS •  DMVPN •  QoS •  PfRv3 •  Cisco AVC •  WAAS

SteelHead SaaS SteelCentral SteelFusion


§ Problems: – End-user performance is not guaranteed. PfRv3 does nothing to reduce

bandwidth or mitigate latency – Lack of visibility into both the application layer and network layer

§ Value proposition: – SteelHead provides WAN opt. while SteelCentral provides both application

and networking monitoring capabilities on top of IWAN Base profile

IWAN Base profile


§ Problems: – End-user performance is not guaranteed. PfRv3 does nothing to reduce

bandwidth or mitigate latency – Lack of visibility into the applications. Cisco AVC only provides network-

based performance metrics leading to “blind spots” in the network.

§ Value proposition: – SteelHead provides WAN opt. while SteelCentral provides complete network

and application visibilities.

IWAN Advanced Profile


Java App Server

OS TCP/IP Stack VMware

Apache App

LAN

Complete, End-to-End Transaction Visibility

.NET Worker Process

IIS Web Server OS TCP/IP Stack

Web

Client Browser

WAN

BEGIN

Request Payload Network/Bandwidth/Latency

Queuing

Code Processing

Network/Bandwidth/Latency

Hypervisor Oversubscription

Queuing

Code Processing

Remote Calls Web Service, DB etc.

Packets

Metrics

Code Instrumentation

Code Instrumentation

Packets

Metrics

Packets

EUE Response Payload Network/Bandwidth/Latency

Code Processing

Network/Bandwidth/Latency

Code Processing

END Page Render Time

Riv

erbe

d Pe

rfor

man

ce M

anag

emen

t


§ Problems: – WAAS has fallen ridiculously behind in terms of application acceleration – WAAS solves some enterprise application performance problems, but what

about SaaS apps? – What can Cisco AVC do for SaaS apps?

§ Value proposition: – SteelHead can replace WAAS and work with IWAN – SteelHead SaaS provides optimization and visibility into SaaS applications.

IWAN Advanced with WAAS


Cisco is ridiculously far behind in developing WAAS

2010 2011 2012 2013 2014 2015

Encrypted MAPI L7 Optimization

Outlook Anywhere L7 Optimization

MS announced that Exchange ‘13 will no longer support MAPI

Oops! Encrypted MAPI L7 Optimization after no

support announced by MS

Here is an example…

Future Proofing SteelHead: We ship with IPv6 BW optimization and IPv6 L7 optimization

Outlook Anywhere L7 Optimization

MS announced MAPI/HTTP protocol to replace Outlook

Anywhere


§  Quantify end-user experience of your optimized web and SaaS applications §  Quickly identify web apps, pages, objects, sites, and users with high response times §  Break down HTTP response times into network vs. application delays for specific pages, objects, and applications

Monitoring SaaS application

riverbed.my.salesforce.com…6640000000TnGa&ic=1 200 [salesforce: riverbed] Search Results

Page load time

Named page families provide simple,

meaningful names to web transactions/URLs

Waterfall chart showing object load

times with optimization coverage

(in orange)


Biggest challenge with IWAN …


§ Configure DMVPN Hub Router (8 procedures) § Configure Firewall/DMZ switch (5 procedures) § Configure remote-site DMVPN Router (9 procedures) § Configure PfR Hub Master Controller (3 procedures) § Configure PfR for Hub (5 procedures) § Configure PfR for Remote Site locations (4 procedures)

Setting up IWAN: Minimal Work

175 steps! 102 pages!

671 commands/

entries!!!


What’s new in RiOS 9.1


Present day challenges of the branch in an Hybrid Enterprise


Branch IT: Trends and Requirements

Internet Edge is moving closer to the branch

Branch Office Data Center Cloud

Cloud/SaaS

Transition to Cloud/SaaS from Data Center

Nearly half of all employees work in branch offices 50%

Branch offices represent roughly half of IT budget 50% 2/3 Branch Traffic

will be video

Source: Lippis Consulting


Branch IT: Challenges

Improve End User Experience

Users want instant response

HD quality Rich Media

Manage New Traffic

Increased use of video

Recreation (YouTube) mixed

with business traffic

Control Costs

Added bandwidth

Costs of MPLS

Branch Focus creating content and traffic overload


Use-cases Across Vertical Markets

Enterprise Retail Education Hospitality

• Efficient use of WAN

with hybrid networks

• Pervasive use of

video for training and

collaboration

• Provide in-store digital

experience for shoppers

• Faster POS app

processing

• Supplement school

curriculum with rich

media (video)

•  Addition of laptops and

tablets to access digital

content

• Cater to growing demand

of high BW requirements

from guest Wi-Fi

• High latency environment

on cruise ships


Target deployment models

Branch Office Data Center

Backhaul Internet Access

Direct Internet Access

MPLS WAN

§  Case #1: Internet Connec/ons backhauled through corporate data center

§  Case #2: Direct to Internet connec/ons §  Internet breakout at the branch §  Internet breakout from within the managed SP network


Web Proxy: What is it

SteelHead

Proxy Caching HTTPS Logging Control


Web Proxy: Key Benefits Transparent HTTP(S) proxy

Asymmetrical deployment– Only on the client side

Local connection termination

Caching: Separate from wan-opt data store

YouTube video caching

Centralized management and reporting via SCC

Co-existence with traditional wan-opt features


§ Supported on CX appliances – xx55 and xx70 § SteelHead needs to be physical inline. No PBR or WCCP virtual in-

path § Web Proxy connections are part of the same optimized TCP

connections pool as DEI. Consider while sizing.

* Support for vSH and EX platforms coming in later releases

Additional Information


Universal SaaS


Opex model — follow the user What Makes This So Special?

§ Subscription pricing per user per month (any duration 12-36 months) — $1.99

§ No incremental hardware investment

§ Service matches the user, not the appliance or the server

§ Opex consumption model eases adoption — just like SaaS


SaaS — Going Beyond


Expanding the scope of SaaS applications SteelHead for Every SaaS

Client browses to SaaS.com

On premise SteelHead intercepts Office365 Traffic and routes to Akamai cloud

Cloud SteelHead is: -  Automatically created if needed -  Paired with on premise SH -  Certificates exchanged

Cloud SteelHead communicates with SaaS on behalf of original request

1

2

3

4


SteelHead and Box


SteelHead and ServiceNow

SteelHead and SuccessFactors


Upgrading from IOS 8.1.3 to 8.2 Optimizing Apple IOS download

CRUSHED!


Opportunities for Presidio


§ Scenario: Customer would like to utilize their MPLS + Internet links.

§ Problem: Customer is not ready for a hardware refresh to run PfRv3.

§ Solution: SteelHead’s Path Selection feature does not require any router software or hardware upgrade.

Opportunity #1


§ Scenario: Customer is moving to [SaaS vendor] and requires optimization and/or concerned about lack of visibility in the cloud.

§ Problem: Customer already has IWAN with WAAS deployed to optimize the enterprise traffic.

§ Solution: SteelHead SaaS can co-exist with WAAS and optimize

traffic to the SaaS vendors.

Opportunity #2


§ Scenario: Customer has deployed IWAN but require optimization for mobile users.

§ Problem: Cisco has no solution for optimizing mobile users. § Solution: SteelHead Mobile can co-exist with IWAN/WAAS.

Opportunity #3


§ Scenario: Customer would like to move their workload into Azure and AWS but they’re concerned about performance and visibility.

§ Problem: Cisco WAAS cannot run in Azure or AWS.

§ Solution: Cloud SteelHead is available in both Azure and AWS. SteelCentral can provide visibility into Azure and AWS.

Opportunity #4


Optimizing and monitoring public cloud

Branch Office Data Center

Cloud SteelHead

SteelHead SteelHead

SteelCentral

SteelFlow WTA data from Client Side

SteelHeads


§ Scenario: Customer uploaded the corporate training videos to their secure YouTube channel but are concerned about the bandwidth required to view them at the branch locations.

§ Problem: Cisco/Akamai Connnect cannot cache secure YouTube videos.

§ Solution: Web proxy on the SteelHead can cache the secure YouTube video. It can also cache other SSL-based content

Opportunity #5


Riverbed SteelHead vs Cisco IWAN/WAAS comparison

More application-specific optimizations Better performance for the applications you use

Mobile Software Client Effective and easy-to-administer optimization for mobile employees

IaaS/SaaS optimization and visbility Optimize and provide visibility for workloads in IaaS and SaaS

1. CIFS (SMB1) 8. HTTP 2. SMB2 9. SSL 3. CIFS Print 10. Citrix ICA 4. MAPI 2003-2010 11. MS Windows Media 5. Encrypted MAPI 12. RTSP splitting 6. Outlook Anywhere 7. NFS

•  Same RiOS S/W branch + mobile •  Client connects with any Steelheads already in network •  Auto-detection of local Steelhead when mobile client in branch •  Data store warming when client in Steelhead-equipped branch

•  Cloud SteelHead available for Amazon AWS and Microsoft Azure •  End-to-end optimization for multiple SaaS vendors •  Visibility into both IaaS and SaaS vendors

RiOS 9.1 IWAN/WAAS 5.5.5 Updated August 2015

Disaster Recovery Meet RPO and RTO objectives more efficiently by optimizing backup and replication

Replicator Mode Discontinued

•  SSD-based storage available for high throughput •  Largest appliance has 4.8TB usable data store •  Disk and memory-based data reduction can be mixed and matched, enabled selectively per site or traffic •  SRDF-aware optimization for replicating EMC storage •  Qualified by storage vendors

1. CIFS (SMB1) 2. SMB2/3 3. CIFS Print 4. Mac CIFS 5. SMB Signed CIFS 6. MS-SQL 7. MAPI 2003-2010 8. Encrypted MAPI

9. Outlook Anywhere 10. Lotus Notes 11. Enc. Lotus Notes 12. Oracle Forms 13. NFS 14. HTTP 15. SSL 16. Citrix ICA

17. FCIP 18. SRDF/A 19. UDP and IPv6 20. MS Silverlight video 21. Adobe Flash video 22. MAPI/HTTP

WAAS Mobile Discontinued

Not available


Forward looking


Container D Container E

Layer-3 Services

Container A Container B Container C

Application Identification & Classification

•  Deep-packet

Inspection •  SSL Cert

Management

Hybrid WAN

Path Selection

3rd Party Service

Secure Transport

Secure Transport

Network QoS

Network QoS

Layer-3 Services

Layer-3 Services

Centralized Controller

•  Management & Monitoring •  Zero-touch Provisioning •  Application Policy Engine •  App Performance Monitoring •  On-premises or Cloud

Optimization Visibility Control

1. Centralized App Policies

3. SteelFlowTM Telemetry

2. Local App Policy Enforcement

Riverbed SD-WAN ü  Software-defined. Business-defined.

ü  Optimized & secure. Hybrid by design.

ü  Complete visibility. On-premises & cloud.

ü  Apps that simply work.


Project Tiger

Container D Container E

Tiger Appliance Coming 2016!

WAN_0

WAN_1

LAN

Container A Container B Container C

Riverbed SteelOSTM Runtime Environment

Application Intelligence

•  Identification •  Classification •  SteelFlowTM

Telemetry

Path

Selection

3rd Party

Service(s)

Secure Transport

Secure Transport

Network QoS

Network QoS

Layer-3 Services

Layer-3 Services

Packet Capture

Layer-3 Services

Packet Capture

Packet Capture

§  Complete set of SD-WAN network services for application visibility & control –  Application Identification & Classification, Hybrid WAN Path Selection, Secure Transport, QoS, SteelFlowTM Telemetry

§  Native routing services included. Branch router not required. –  Supported as a layer-3 hop or as transparent bridge.

New modular operating platform built with containerization and service-chaining to support Riverbed-native and 3rd party services.


SteelFusion™ SteelHead™ Project Tiger

Riverbed Application Performance PlatformTM A complete branch IT solution for the software-defined enterprise.

SD-WAN Application & Network Services

Industry-leading WAN Optimization


Industry-leading WAN Optimization

Storage Delivery


Branch Type I Lower-cost, Higher-speed bandwidth

Branch Type II Higher-cost, Lower-speed bandwidth

Branch Type III Local servers, storage & backup

Server Virtualization

SteelCentralTM Controller On-premises, Cloud, RESTful APIs, 3rd Party Orchestration

Coming 2016!

© 2015 Riverbed Technology. All rights reserved. 47 © 2015 Riverbed Technology. All rights reserved. 47

Key Takeaways with 5 Arrows

IWAN can be very complex to set up. We can help.

We have coexisted with IWAN for a very long time.

Visibility/performance into SaaS providers are key concerns for customers.

Mobile users are important. Do not leave them behind.

Web proxy can help alleviate the pressure on the WAN.

Thank You


winning with cisco iwan -...

Documents