Download as PDF, PPTX
Uploaded byVMworld
VMworld 2013: Datacenter Transformation with Network Virtualization: Today and Tomorrow
The document discusses the evolution and significance of network and security virtualization in data centers, particularly through VMware's NSX platform. It highlights the challenges of traditional networking and security approaches and presents NSX as a solution that offers greater agility, efficiency, and integration across physical and virtual environments. The text emphasizes the transformative potential of NSX in improving operational efficiency and enabling greater responsiveness to business needs within software-defined data centers.
More Related Content
Similar to VMworld 2013: Datacenter Transformation with Network Virtualization: Today and Tomorrow
VMworld 2013: Datacenter Transformation with Network Virtualization: Today and Tomorrow
- 1. Datacenter Transformation withNetwork Virtualization: Today and Tomorrow Allwyn Sequeira, VMware SEC5828 #SEC5828
- 2. 2 Agenda Network &Security Virtualization – The Industry Context The Problem Statement – Various Perspectives • Application, CMP perspective • VI admin / cloud operator perspective VMware NSX Platform VMware NSX Architecture VMware NSX Use cases
- 3. 3 Enterprise Data Center Networking The IndustryContext - Three Major Forces in Networking - Separation of control, OpenFlow - X86 programmability - Centralized management Research, GOOG, Telco, Nicira - Interconnect heterogeneous compute/storage pools - COTS hybrid server/switch - L3 to the rack, scale out PODs AMZN, RAX, FB, Ebay, Nicira - SDDC: beyond servers - Net / sec virtualization - Fast / flat / fat fabrics, UCS VMW, CSCO, … N + V = NV leadership!
- 4. 4 Network Virtualization =SDN+ L2 L3 Virtual Networks L2 All the properties of SDN • Separation of control, forwarding • Software innovation • Time to market • Service extensibility With the benefits of virtualization • Agility, efficiency, mobility • Non-disruptive deployment • Decoupled from physical • Hardware independence Distributed Forwarding Manual Configuration Network virtualization will leverage the network fabric / SDN controller shift
- 5. 5 Agenda Network Virtualization– The Industry Context The Problem Statement – Various Perspectives • Application, CMP perspective • VI admin / cloud operator perspective VMware NSX Platform VMware NSX Architecture VMware NSX Use cases
- 6. 6 Enterprise Data CenterSecurity & Networking Today vSphere Users Sites Backend Services - VLANs, ACLs, Firewalls, IDS/IPS, monitoring - Server A/V Agents, guest security - App | data | identity aware security, compliance - DMZ firewall, NAT, DDI - Site and user VPNs - Web load balancers, WAF - Desktop A/V Agents - DLP, FIM, white listing DMZ Web View Way too complicated, fragmented, manual!OUCH
- 7. 7 SDDC & NSX– Enabling App-Cloud APP CLOUD VIRTUAL PHYSICAL HYPERVISOR HYPERVISOR HYPERVISOR SDDC = A better way to build clouds NSX = Solves SDDC networking & security
- 8. 8 What Applications andCloud Consumers Want… Bridge Physical L2 L3 Firewall WAN Internet Edge Apps should be completely un-aware of the underlying infrastructure That is someone else’s problem i.e. OUR problem
- 9. 9 NSX: Closing theGap Between Provider and Consumer NSX L2 CMP Bridge Physical WAN Internet Edge L3 Firewall Any Physical Infrastructure Compute, Storage & Network Hardware Independent
- 10. 10 On any networkOn any network The NSX Requirements INTERNET WAN On ramp, off ramp & edge services ESX, KVM, Xen Non-vSphere compute clusters vSphere vSphere (incl vCenter) compute clusters NSX needs to deliver: L2-L3 Network Services L4-L7 Network Services On demand, at scale OperatorsPartners Common model for provider provisioning, fault, perf, stats, logs Common model for partner service insertion LAN Physical vCloud Suites Open Stack Consumers Common consumption Model for CMPs, apps
- 11. 11 Agenda Network Virtualization– The Industry Context The Problem Statement – Various Perspectives • Application, CMP perspective • VI admin / cloud operator perspective VMware NSX Platform VMware NSX Architecture VMware NSX Use cases
- 12. 12 VMware NSX –Networking & Security Capabilities Any Application (without modification) Virtual Networks VMware NSX Network Virtualization Platform Logical L2 Any Network Hardware Any Cloud Management Platform Logical Firewall Logical Load Balancer Logical L3 Logical VPN Any Hypervisor Logical Switching– Layer 2 over Layer 3, decoupled from the physical network Logical Routing– Routing between virtual networks without exiting the software container Logical Firewall – Distributed Firewall, Kernel Integrated, High Performance Logical Load Balancer – Application Load Balancing in software Logical VPN – Site-to-Site & Remote Access VPN in software NSX API – RESTful API for integration into any Cloud Management Platform Partner Eco-System
- 13. 13 Server Virtualization CloudInfrastructure vCloud vCloud VMware’s Network & Security Virtualization Journey vSwitch Host 1 Host 2 vSwitch vSwitch vSwitch Host Y Host Z Abstract: vSwitch started the network virtualization journey Pool: NSX Switch with distributed routing & overlays extend diameter Burst: NSX Edge provides on/off ramp to/from data center Secure: NSX Firewall is the basis for security virtualization Automate: NSX Manager, APIs and CMP plugins provide integration NSX Switch NSX Switch Overlay NSX Edge NSX Firewall
- 14. 14 Agenda Network Virtualization– The Industry Context The Problem Statement – Various Perspectives • Application, CMP perspective • VI admin / cloud operator perspective VMware NSX Platform VMware NSX Architecture VMware NSX Use cases
- 15. 15 VCNS vSphere vCloud Suites Hardware andLocation Independent VMware: The Two Leading Network Virtualization Stacks VMware Open stack KVM, Xen NVP Open stack NSX
- 16. 16 Network & SecurityVirtualization – The Journey 1. Abstract Physical Virtual Abstract network & security functions 3. Automate Cloud Operations Network/Security Operations Realize operational benefits of virtualization 2. Pool Distribute and allocate to apps, on demand Virtual Physical
- 17. 17 NSX Architecture andDesign Pattern DATACONTROLMGMT CMP CLOUDPHYSICALVIRTUAL OVERLAYS Hypervisor vSwitch Hypervisor NSX Switch NSX ManagerNSX ManagerNSX Manager NSX API CMPs & apps consume logical services The REST API abstracts underlying services The Manager cluster maps services to controllers Controller cluster: Manager + agents Integrated switching, routing, firewalls in hypervisor Overlays de-couple from physical Physical: IP connectivity is the only requirement
- 18. 18 L2-L3L4-L7ControlMgmt Product Delivery Summary VMWCMP Open Stack CLOUDPHYSICALVIRTUAL OperationsPartners INTERNET WAN LAN Physical NSX Edge Edge Services Router ToR / OVSDB NSX Controller Cluster NSX ManagerNSX ManagerNSX Manager NSX API vCAC, Neutron Plugins Consumption ESX, KVM, XenvSphere NSX Firewall DFW NSX Switch VDR VDS NSX Switch OVS
- 19. 19 Introducing NSX PartnerBrocade
- 20. 20 Brocade VCS Gatewayfor NSX — Centralized © 2013 Brocade Communications Systems, Inc. Proprietary Information Easy initial deployment model—no rip and replace Brocade VDX 6740 Fixed Switch with VCS Fabric Technology • ASIC support for leading VTEP performance • Simplicity and resiliency via logical gateway with redundant switches VMware NSX Controller LEAFLEAF Spine VM VM VM VM VM VM VM VM VM VM VM VM VM VM VM VM VM VM SLB FW LEAFLEAF LEAFLEAF LEAFLEAF Spine Brocade VDX Brocade VDX Non-VXLANVXLAN
- 21. 21 Brocade VCS Gatewayfor NSX — Distributed VXLAN gateway a feature of every ToR Brocade VDX 6740 switch Maximum flexibility for placement of virtual and physical endpoints Single point of management via VMware NSX integration and Brocade VCS Logical Chassis Brocade VDX Brocade VDX VM VM VM VM VM VM VM VM VM VM VM VM Non-VXLANVXLAN VMware NSX Controller Brocade VDX Brocade VDX Brocade VDX VM VM VM VM VM VM VM VM VM VM VM VM Brocade VDX © 2013 Brocade Communications Systems, Inc. Proprietary Information
- 22. 22 Security Virtualization – TheNext Frontier
- 23. 23 Security Virtualization withNSX Firewall & Edge Apps / DB TierDMZ Users Sites Web Servers • NSX Firewall: Virtualize internal firewalls & endpoint security into the hypervisor • NSX Edge: Virtualize perimeter networking & security services (per VDC or vApp)
- 24. 24 Network & SecurityVirtualization: The App Perspective App Owner Virtualization Operations Physical Infrastructure
- 25. 25 NSX API andManager Cluster in Action
- 26. 26 Agenda Network Virtualization– The Industry Context The Problem Statement – Various Perspectives • Application, CMP perspective • VI admin / cloud operator perspective VMware NSX Platform VMware NSX Architecture VMware NSX Use cases
- 27. 27 VMware NSX –Network Virtualization VMware NSX Transforms the Operational Model of the Network • Network provisioning time reduced from days to minutes Reduce network provisioning time from days to seconds Cost Savings • Reduce opex by 80% • Increase compute asset utilization upto 90% • Reduce capex by 40-50% Operational Automation Simplified IP hardware Choice • Hypervisor: vSphere, KVM • CMP: vCAC, Openstack • Any Network Hardware • Partner Ecosystem Any hypervisor Any CMP with Partner
- 28. 28 Looking Forward: InterconnectedSDDCs • Any service, anywhere, any scale, on any hardware • Full API for implementing auto-scale distributed services • Leverage the power of virtualization for next generation network services Data Center Data Center Data Center Logical Networks & Services Consistent across multiple data centers
- 29. 29 In Summary, NSX… Transforms Networking and Security in the Software- defined Data Center Virtualizes networking and security to create efficient, agile and extensible constructs Increases operational efficiency and improves utilization Simplifies operations and enables IT agility to drive business agility and protect business critical applications Delivers the most extensible platform and broadest set of ecosystem partners START YOUR NETWORK & SECURITY VIRTUALIZATION JOURNEY TODAY!
- 30. 30 Other VMware ActivitiesRelated to This Session HOL: HOL-SDC-1302 vSphere Distributed Switch from A to Z HOL-SDC-1303 VMware NSX Network Virtualization Platform
- 31.
- 33. Datacenter Transformation withNetwork Virtualization: Today and Tomorrow allwyn sequeira, VMware SEC5828 #SEC5828