NETWORK AS A
PROGRAMMABLE ASSET
Cloud Networking With Contrail
Michael Langdon
DIRECTOR SYSTEMS ENGINEERING,
ORCHESTRATION SYSTEMS & SDN
AGENDA
1
CHALLENGES & TRENDS
2
NETWORK FOR CLOUD ERA
3
CONTRAIL
4
USE CASES
5
CASE STUDY
6
WHY CONTRAIL?
CHALLENGES
AND TRENDS
ENTERPRISE IT CHALLENGES
Virtualized & Agile
Hardware Centric & Static

IT Transformation
to support support increasingly
dynamic operations and business
processes
BUSINESS REQUIRE
INFRASTRCTURE NEEDS
•
Agility and Automation
•
Automated/Orchestrated & Self Service
•
Statistically Multiplex Resources - Reduce timeto-market
•
Leverage Physical Infrastructure
•
Leverage Hybrid Cloud Infrastructure
•
Leverage big data for planning and optimization
•
Mobility Centric Applications
CLOUD DRIVES AGILITY
PRIVATE CLOUD
72%
Only 11% no plans to deploy
private cloud**
APPS IN THE CLOUD
PUBLIC CLOUD
$54.5B
$131B
19% CAGR*
17% CAGR*
VM
VM
VM
VM
VM
VM
VM
VM
VM
VM
VM
VM
VM
VM
VM
VM
VM
VM
Virtual
Virtual
Virtual
Physical
Virtual
My on-premises
data center
Physical
Virtual
Physical
My managed
service provider
Virtual
Physical
My hosted
service provider
*Gartner, June 2013, “Public Cloud Forecast 2011-2017, ** Gartner, Sept 2013, “Private Cloud Matures, Hybrid cloud is Next”
My cloud
service provider
NEW ENTERPRISE APPS - NEW ARCHITECTURE
Technology architectures must better support increasingly dynamic operational and business processes
SILOS
APPLICATIONS
COMPUTE
STORAGE
NETWORK
Tightly coupled
Client/server
Specialized hardware
SAN, NAS
Storage networks
Hierarchical,
Traffic 80% north-south
$$$/port
SCALE UP
SCALE OUT
Web enablement
App performance
Big data, real-time
analytics
Self-service
Virtualization,
automation
Large & dynamic
workloads,
VM mobility
SAN/NAS
Converged Network
DC fabric
$$/port
Distributed storage
(DBS, DFS, DDB)
Dynamic network,
Automation, x-domain
virtualization
NEXT GENERATION ENTERPRISE IT
ARCHITECTURE
CONFIG MANAGEMENT
APPS
(SaaS)
Self-Service Catalog,
Reference Architecture
•
•
•
•
Self-Service
Service Automation
SLA-drive, Usage Billing
Elastic, Scale-out Infra
PLATFORM
App Inventory, Configured
Containers, IDE’s
Infra Stack
(PaaS)
(OS, DBs, System
Tools, etc)
INFRASTRUCTURE
Virtualized
Resources
(IaaS)
(Compute, Storage
Network)
Tiered Service
Offerings
(Monitoring, Scheduling)
ASSET MANAGEMENT
Service Pools
(Security, DR)
Audit, Billing, Capacity,
Performance
TCO & ROI BENEFIT
OpEx
Roll out new
services faster
to grow new
topline revenue
OpEx
NMS
Platform
HW/SW
Traditional Data Center
Networking Spend
Network
Orchestration,
SW Licensing
Platform
HW/SW
DC Operator Spend w/
Cloud - SDN, Orchestration
• 95% reduction in Time-to-Revenue
• 45 to 1 day to deploy new apps
• 70% TCO reduction
• (~$14,300 to $4,500/server/yr –
app, db, compute, storage)
• Automation, Self-Service
• Automated Incident/Service Management
• Flexible Cloud Enablement
• Zero-touch Provisioning, Configuration
• Real-time diagnostics and analytics
• Virtualization, Orchestration
• Cost Optimized Hardware
• Services Balanced HW/SW
• High-density silicon
NETWORK FOR
CLOUD ERA
NETWORK WAS NOT DESIGNED FOR CLOUD
VIRTUAL COMPUTE
100%
46%
VIRTUAL COMPUTE
Rapid Growth in Virtualized
Nodes in DC
71%
PHYSICAL COMPUTE
54%
0%
Networks designed for
Physical Hosts and
Physical Services
PHYSICAL COMPUTE
29%
Time
2011
2016
CLOUD READY – NETWORK VIRTUALIZATION
TRADITIONAL NETWORKING
SCALE-OUT NETWORKING
Standalone Application
Evolving Applications
(Dedicated Resources)
(on Resource Pool)
Physical
Servers
VLAN
LB
Policies
Dynamic Virtual Network
+
Service Orchestration
VM
VM
VM
VM
VM
VM
COMPUTE POOL
LBs
VLAN
?
FW
Policies
IPS
FWs
STORAGE POOL
LB Service POOL
VLAN
SEGMENTED
NETWORKS
FW Service POOL
ACLs
Routers
Common Resource Pools (Datacenter & Beyond)
Virtual WAN
Network
WAN
WAN
External Cloud
Based Resources
Physical Switching Fabric ~ Physical Compute Servers
Pool of Resources – Sliced on Demand
Automated Networking Services Virtualized, Multi-tenanted
THE NEW NETWORK – BUILT FOR CLOUD
CONFIGURED,
MANAGED
HARDWARE
SERVICES
PRIVATE
INFRASTRUCTURE
PROPRIETARY
AUTOMATED &
ORCHESTRATED
VIRTUALIZED, ON DEMAND
SERVICES
HYBRID CLOUD
INFRASTRUCTURE
OPEN SOURCE, OPEN
STANDARDS
THE NEW NETWORK – BUILDING BLOCKS
VIRTUAL
NETWORKS
PROVIDED BY OPEN BGP VPN
TECHNOLOGIES
NETWORK AND
PACKET POLICY
NETWORK POLICY FOR
TOPOLOGY AND PACKET FOR
TRAFFIC CONTROL
VIRTUALIZED
SERVICES
GATEWAYS
NETWORK FUNCTIONS AND
SERVICES STITCHED TO
TOPOLOGY
CONNECTS VIRTUAL AND
PHYSICAL DOMAINS
CONTRAIL
CONTRAIL – VIRTUALIZED & AUTOMATED
NETWORK
AUTOMATION, ANALYTICS
CONVERGED NETWORK ORCHESTRATION
NETWORK PROGRAMMABILITY
CONTROL PLANE, MANAGEMENT PLANE
VIRTUALIZED NETWORK SERVICES
ENABLING NFV (NETWORK FUNCTION VIRTUALIZATION)
NETWORK VIRTUALIZATION (PRIVATE, HYBRID)
INTEROPERABILITY WITH PHYSICAL
NETWORK
OPENCONTRAIL COMPONENTS
2014
TODAY
Accepts and converts orchestrator
requests for VM creation, translates
requests, and assigns network
OPENCONTRAIL CONTROLLER
Configuration
Control
Analytics
Real-time analytics engine
collects, stores and analyzes
network elements
Interacts with network elements for
VM network provisioning and ensures
uptime
VM
VM
VM
VM
VM
vRouter
Physical Host
with Hypervisor
vRouter: Virtualized routing element
handles localized control plane and
forwarding plane work on the compute
node
VM
VM
VM
vRouter
Physical Network
(no changes)
Physical Host
with Hypervisor
Gateway
WAN, Internet
Gatewa: MX Series (or other router) or
EX9200 serve as gateway eliminating
need for SW gateway & improving
scale & performance
WHAT MAKES CONTRAIL UNIQUE …
1
Scale-out architecture for unlimited scalability and manageability
2
Real-time analytics for better insight and easy diagnosis
3
Programmability with REST APIs and SDN as a “complier” abstraction
4
Interoperability with multi-vendor physical infrastructure for investment protection
5
Inter-cloud orchestration for unified data center and WAN control
6
Network Function Virtualization for service agility and high availability
Simple
So You
Can Create
Open
Agile
Cloud
Enabled
Networks
USE CASES
ENTERPRISE IT CLOUD PROVIDING PAAS/IAAS/SAAS
 Dynamic Resource Allocation
 Silo’ed Resource Allocation
 Automatic Configuration
 Manual Configuration
 Dynamic Service Chains
 Static Service Chains
CURRENT IT DATACENTER
EVOLVED IT DATACENTER
Firewalls
Load-Balancer
VIRTUALIZED
VLANS
VLANS
FINANCE
FINANCE
Physical
Servers
HR
Local Hard
Drives
MARKETING
Virtual-Network based Orchestration (Compute, Storage, Apps)
HR
MARKETING
VIRTUALIZED PRIVATE & HYBRID CLOUDS
Contrail enables enterprises to adopt private or hybrid virtual cloud strategies, with
application and workload mobility.
ENTERPRISE PRIVATE CLOUD
PUBLIC CLOUD
CONTRAIL
Orchestrator
(i.e. Amazon Web Services)
SDN CONTROLLER
FINANCE
VPC
Workload Mobility
ENGINEERING
VPC
ENGINEERING
VPC
HR
VPC
BENEFITS
 Contrail enables enterprises to adopt private or hybrid virtualized clouds to increase business agility.
 Integration with Cloudscaling enables workload mobility between private and public clouds
DYNAMIC SERVICE CHAINING & INSERTION
Dynamically provision and chain physical or virtual network services, and connect virtual
networks without any downtime.
CONTRAIL
SDN CONTROLLER
Orchestrator
Dynamic Service Chain Configuration
Pool of x86 Appliances
MX Router w
x86 Service Card
MX Router w
x86 Appliances
BENEFITS
 Increased agility and velocity of network services supporting critical business processes
 Reduced capital and operational expense via network simplification
 Simplified tenant isolation for security and regulation compliance
CASE STUDY
ENTERPRISE PRIVATE CLOUD
INITIAL CHALLENGE
A recent acquisition target had to
migrate development environment
from its public cloud to internal
Juniper resources
SOLUTION
Use Contrail to enable a dynamic
private cloud that replicates preacquisition environment
IMPROVEMENTS
• Leveraged Contrail to build a
dynamic self-service cloud for a
variety of needs
• Adapts to the ever-changing needs
of software developers
• Able to reproduce flexibility of public
cloud in a secure private cloud
WHAT WE LIKE ABOUT CONTRAIL
 Contrail enables dynamic self-service cloud model—reducing IT costs while improving productivity
 Ease of integration with existing network infrastructure
 Ability to seamlessly connect network, storage and compute via orchestration tool integration
GO HERE FOR MORE…
CHECK OUT FOLLOWING FOR MORE INFO
 OpenContrail
 http://www.opencontrail.org
 Juniper SDN Portfolio
 http://www.juniper.net/us/en/products-services/sdn/
 Youtube Channel showcasing some use cases
 http://www.youtube.com/user/opencontrail