36
Jack Niesen - FSE Synthesis & Cisco ACI integration

Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

Embed Size (px)

Citation preview

Page 1: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

Jack Niesen - FSE

Synthesis & Cisco ACI integration

Page 2: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 2

Mobility

SDDC/Cloud

Advanced threats

Internet ofThings

“Software defined”everything

HTTP is the new TCP

Page 3: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 3

Deliver the most secure, fast,and reliable applications to anyone

anywhere at any time.

F5 MISSION

Page 4: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 4

The Evolution of F5

• Security• Mobility/LTE• Domain Name Services

• Hypervisor/Cloud ubiquity• Multi-tenancy, all-active • Identity access management

• Traffic management• Optimization• Acceleration

1

2

3

Page 5: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 5

Agile

Development

Application Environment

Rapid deployment─network and operations velocity

Speed, customer-driven, and quality of app development

Page 6: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 6

Cloud and

DevOps

Cloud SLA and controlprivate network agility

Accelerate time to market

Application Environment

Agile

Development

Rapid deployment─network and operations velocity

Speed, customer-driven, and quality of app development

Page 7: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 7

SDN and

Private Cloud

Software defined data centers

Cloud and

DevOps

Application Environment

Cloud SLA and controlprivate network agility

Accelerate time to market

Agile

Development

Rapid deployment─network and operations velocity

Speed, customer-driven, and quality of app development

Failed to Address:Failed to Address:Failed to Address:Failed to Address:

L4L4L4L4––––7 device sprawl and 7 device sprawl and 7 device sprawl and 7 device sprawl and application awarenessapplication awarenessapplication awarenessapplication awareness

Page 8: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 8

F5 VISION

Applicationswithout constraints

The Time Is Right

SDN and

Private Cloud

Software Defined Data Centers

Cloud and

DevOps

Cloud SLA and controlprivate network agility

Accelerate time to market

Agile

Development

Rapid deployment─network and operations velocity

Speed, customer-driven, and quality of app development

Failed to Address:Failed to Address:Failed to Address:Failed to Address:

L4L4L4L4––––7 device sprawl and 7 device sprawl and 7 device sprawl and 7 device sprawl and application awarenessapplication awarenessapplication awarenessapplication awareness

Page 9: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 9© F5 Networks, Inc. 9

Page 10: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 10

Software Defined Application Services Software Defined Application Services Software Defined Application Services Software Defined Application Services 4

The Evolution of F5

Application Delivery ControllerApplication Delivery ControllerApplication Delivery ControllerApplication Delivery Controller1

Broadened Application ServicesBroadened Application ServicesBroadened Application ServicesBroadened Application Services2

Cloud ReadyCloud ReadyCloud ReadyCloud Ready3

© F5 Networks, Inc. 10

Page 11: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

“Leave No Application Behind”

Page 12: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 12

Software Defined Application Services Elements

HighHighHighHigh----Performance Performance Performance Performance Services Fabric

Simplified Simplified Simplified Simplified Business Models

Page 13: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 13

Synthesis Elements

High Performance High Performance High Performance High Performance Services Fabric

Page 14: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

High-Performance Services Fabric

Network [Physical • Overlay • SDN]

Virtual Edition Chassis Appliance

Data Plane

Programmability

Control Plane Management Plane

Page 15: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 15

Synthesis Elements

Page 16: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

Fabric Connectors Fabric Connectors Fabric Connectors Fabric Connectors

Module ConnectorsModule ConnectorsModule ConnectorsModule Connectors

Cloud ConnectorsCloud ConnectorsCloud ConnectorsCloud Connectors

Orchestration Orchestration Orchestration Orchestration ConnectorsConnectorsConnectorsConnectors

Intelligent Services Orchestration

BIGBIGBIGBIG----IQIQIQIQ

Page 17: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

Public CloudHybrid Cloud

BIG BIG BIG BIG ---- IQIQIQIQ

Centralized Management Platform

BIG-IP

BIG-IP

Data Center

Page 18: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 18

Synthesis Elements

Simplified Simplified Simplified Simplified Business Models

Page 19: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

Good | Better | Best

Flexibility

Flexibility

Flexibility

Flexibility

Make it easierMake it easierMake it easierMake it easier to adopt to adopt to adopt to adopt

advanced F5 functionalityadvanced F5 functionalityadvanced F5 functionalityadvanced F5 functionality

Sim

plicity

Sim

plicity

Sim

plicity

Sim

plicity

Consolidate into fewer Consolidate into fewer Consolidate into fewer Consolidate into fewer

common configurationscommon configurationscommon configurationscommon configurations

Best Value

Best Value

Best Value

Best Value

Save Save Save Save when purchasing when purchasing when purchasing when purchasing

bundlesbundlesbundlesbundlesGood Better Best

VE Price VE Price VE Price VE Price ComparisonComparisonComparisonComparison

Bought As Bundle Bought As Components

Good Better Best

ApplianceApplianceApplianceApplianceComparison Comparison Comparison Comparison

BIG-IP Local Traffic Manager � � �

BIG-IP Global Traffic Manager � �

Application Acceleration Manager � �

BIG-IP Advanced Firewall Manager � �

SDN Service � �

Advanced Routing � �

BIG-IP Access Policy Manager �

BIG-IP Application Security Manager �

Page 20: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

ReferenceArchitecturesSolving Customer Issues

Page 21: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 21

Reference ArchitecturesDevice, Network, Applications

Bill of Materials • Solution diagram(s)

• Architecture diagram(s)

• Product map diagram(s)

• Customer deck

• RA video overview

• White paper(s)

• Placemat leave-behind

© F5 Networks, Inc.

DDoS

Protection

S/Gi Network

Simplification

Security for

Service Providers

Application

Services

Migration to

Cloud DevOps

Secure

Mobility

LTE

Roaming

Intelligent

DNS Scale

Cloud

Federation

Cloud

Bursting

Page 22: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

Synthesis Integration with Cisco Insieme ACI

Page 23: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 23

Cisco Insieme Networks

Page 24: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 24

What is “Application Centric Infrastructure”

Page 25: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 25

ACI design philosophy

Page 26: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

Details of Integration

Page 27: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 27

F5 SDAS and Cisco ACI

Network Fabric

Fabric Mgmt.

Spine Spine

Leaf Leaf Leaf Leaf Leaf

App Servers

Router ADC DatabaseDDoSProtectionInternet

• Cisco/Insieme provides a L2 Fabric built on a

Spine&Leaf CLOS architecture and a

management/orchestration system to connect

services.

• Company provides applications and services.

• Cisco/Insieme provides “link layer” connectivity.

• F5 SDAS provides Stateful L4-7 Intelligence and Traffic Mgmt.

?

F5 SDAS

Intelligent L4-7 Services & Traffic Management

Page 28: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

Where does F5 products fit in ACI solution?

APIC

BIG IQBIG-IP on

Leaf Nodes

Have 40G

InterfacesBIG IP VE in

Virtualized Domain

Policy Mgmt

Page 29: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 29

Cisco Application Centric Infrastructure

APICAPICAPICAPIC

Physical Networking

Compute Multi DC WAN and Cloud

L4–L7Services

Storage

Integrated

WAN Edge

Hypervisors and Virtual Networking

Nexus 9500

Nexus 9300 and 9500

Nexus 2K

Nexus 7K

Page 30: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 30

ACI and F5 BIG-IP: SOLUTION OVERVIEW

ACI LEVERAGES APIC TO ORCHESTRATE THE CONNECTIVITY AT A PORT LEVEL, MEANING L2 ADDRESS AND BROADCAST DOMAINS MANAGEMENT

ACI works with F5 BIG-IP to provide L4-L7 network services inside the fabric

Page 31: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 31

Cisco APIC: Application Policy Infrastructure Controller

Dashboard

Page 32: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 32

APICAPICAPICAPIC

How do you stitch multi vendor services in APIC:Service Insertion – automated and programmatic

Page 33: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 33

Inventory in APIC

Page 34: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 34

End point groups in Cisco APIC

End point

contract

Page 35: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

© F5 Networks, Inc 35

Benefits of a joint Cisco ACI-F5 Synthesis solution

IMPROVED SERVICE VELOCITYIMPROVED SERVICE VELOCITYIMPROVED SERVICE VELOCITYIMPROVED SERVICE VELOCITY

REDUCED COSTS

.

PRESERVE EXISTING INVESTMENTS

Page 36: Synthesis & Cisco ACI integration - Westcon-Comstorbe.security.westcon.com/documents/52456/F5_Synthesis_ACI.pdfSynthesis & Cisco ACI integration © F5 Networks, Inc 2 Mobility

Solutions for an Application Solutions for an Application Solutions for an Application Solutions for an Application World.World.World.World.