State of Cloud and Application Connectivity

First part of a presentation given at a Tigera event in New York City, March 2018

Transcript

1. © 2018 Tigera, Inc. STATE OF CLOUD AND APPLICATION CONNECTIVITY Andy Randall VP Partners & Customer Success Tigera @andrew_randall March 2018
2. © 2017 Tigera, Inc. 2 TRENDS IN ENTERPRISE CLOUD ADOPTION
3. © 2017 Tigera, Inc. EVERYONE* IS NOW USING CLOUD 3 * Well, 96% anyway Source: RightScale 2018 State of the Cloud Report
4. © 2017 Tigera, Inc. … WITH MULTI-CLOUD THE DOMINANT STRATEGY 4 Source: RightScale 2018 State of the Cloud Report
5. © 2017 Tigera, Inc. PUBLIC CLOUD IS BECOMING “CENTRAL IT”, NO LONGER “SHADOW IT” 5 Source: RightScale 2018 State of the Cloud Report
6. © 2017 Tigera, Inc. BUT SECURITY REMAINS THE #1 CONCERN 6 Source: Zetta, Cloud Adoption in 2017
7. © 2017 Tigera, Inc. … ALONG WITH MANAGING COSTS, RESOURCES / EXPERTISE AND COMPLIANCE 7
8. © 2017 Tigera, Inc. ORGANIZATIONS ARE ADDRESSING THE EXPERTISE ISSUE WITH CENTRAL CLOUD TEAMS 8
9. © 2017 Tigera, Inc. 9 ENTERPRISE APPLICATION DEVELOPMENT TRENDS
10. © 2017 Tigera, Inc. FROM MONOLITHIC APP ARCHITECTURES 10
11. © 2017 Tigera, Inc. … TO MICROSERVICES 11
12. © 2017 Tigera, Inc. MICROSERVICES NATIVE PACKAGING IS INCREASINGLY AS (DOCKER) CONTAINERS 12 Source: Nanobox
13. © 2017 Tigera, Inc. NOW YOU NEED... 13 > Service Discovery > Load Balancing > Secrets/configuration/storage management > Health checks > Auto-[scaling/restart/healing] of containers and nodes > Zero-downtime deploys
14. © 2017 Tigera, Inc. … WHICH MEANS CONTAINER ORCHESTRATION 14
15. © 2017 Tigera, Inc. 15 “today’s de facto standard container scheduling and orchestration framework” - Enterprise Management Associates, March 2018
16. © 2017 Tigera, Inc. 16 Source: CNCF
17. © 2017 Tigera, Inc. 17
18. © 2017 Tigera, Inc. TOP 6 BENEFITS OF MICROSERVICES 18 > Continuous integration / deployment (CI/CD) > Easier debugging and maintenance > Higher development productivity > Agility > Faster time to market > Improved scalability Source: Red Hat 2018 Microservices Survey Conducted by TechValidate, Nov. 2017
19. © 2017 Tigera, Inc. CI/CD 19
20. © 2017 Tigera, Inc. ELASTIC CLOUD INFRASTRUCTURE + NEW APPLICATION DEVELOPMENT AND DEPLOYMENT MODEL = CLOUD NATIVE “CLOUD NATIVE” Microservices Elastic cloud infrastructure Containers Dynamic orchestration 20
21. © 2017 Tigera, Inc. | Proprietary and Confidential IMPLICATIONS FOR CLOUD-NATIVE APPLICATION INFRASTRUCTURE 900x start time 10x workloads 25x shorter lifetime 250x churn 10x attack surface area 21
22. © 2018 Tigera, Inc. | Proprietary and Confidential 22 EVOLUTION OF APPLICATION INFRASTRUCTURE
23. © 2017 Tigera, Inc. APP CONNECTIVITY LANDSCAPE 23 VM’s Host Instances VM’s VM’s VM’s VM’s NETWORK CONNECTIVITY INFRASTRUCTURE APP CONNECTIVITY INFRASTRUCTURE
24. © 2017 Tigera, Inc. APP CONNECTIVITY LANDSCAPE 24 VM’s Host Instances NETWORK CONNECTIVITY INFRASTRUCTURE APP CONNECTIVITY INFRASTRUCTURE
25. © 2017 Tigera, Inc. APP CONNECTIVITY LANDSCAPE 25 VM’s Host Instances NETWORK CONNECTIVITY INFRASTRUCTURE APP CONNECTIVITY INFRASTRUCTURE
26. © 2017 Tigera, Inc. APP CONNECTIVITY LANDSCAPE 26 VM’s Host Instances NETWORK CONNECTIVITY INFRASTRUCTURE APP CONNECTIVITY INFRASTRUCTURE
27. © 2017 Tigera, Inc. APP CONNECTIVITY LANDSCAPE 27 VM’s Host Instances NETWORK CONNECTIVITY INFRASTRUCTURE APP CONNECTIVITY INFRASTRUCTURE
28. © 2017 Tigera, Inc. APP CONNECTIVITY LANDSCAPE 28 VM’s Host Instances NETWORK CONNECTIVITY INFRASTRUCTURE APP CONNECTIVITY INFRASTRUCTURE
29. © 2017 Tigera, Inc. APP CONNECTIVITY LANDSCAPE 29 VM’s Host Instances APP CONNECTIVITY INFRASTRUCTURE NETWORK CONNECTIVITY INFRASTRUCTURE
30. © 2018 Tigera, Inc. © 2017 Tigera, Inc. SECURE APPLICATION CONNECTIVITY M ulti-cloud and legacy Zero trust Enterprise control and com pliance O perationally sim ple Secure Application Connectivity © 2017 Tigera, Inc.
31. © 2017 Tigera, Inc. | Proprietary and Confidential © 2018 Tigera, Inc. TIGERA CNX ARCHITECTURE Containers Virtual Machines Standalone Host Host kernel Hypervisor Host kernel Distributed key/value store L3-4 policy enforcement Service mesh router Dev/Ops IT Ops Security Control plane agent RBAC & Auditing CLI GUI API Aggregated Telemetry L3-7 policies Workload and host inventory Certificate policies L3-7 Policy Rendering Certificate Management Routing IP forwarding L3/4 Policy Enforcement L5-7 Policy Enforcement Service Mesh Proxy Telemetry Generation Encryption Enterprise Directory Control Plane Management Plane Data Plane k:v k:v k:v k:v k:v Public Cloud Network Data Center Network Orchestrator