Data Center Open Architecture secondo ATS e Juniper: dalla vision alla execution

Durante l’intervento Juniper Networks e ATS SpA illustreranno le proprie strategie di Data Center Network per costruire architetture agili, elastiche, programmabili e scalabili. In una sorta di viaggio verso la realizzazione di un Cloud Data Center vedremo in quali casi utilizzare architetture Layer2 scale-out, ethernet fabric, IP fabric e IP fabric with overlay. In tema di accelerazione degli IT workflow per la realizzazione e modifica delle infrastrutture parleremo di orchestrazione ed automazione, con particolare riferimento a Software Defined Network, Network Function Virtualization e Juniper OpenContrail. Grazie alla partecipazione di un Customer Testimonial, parleremo di un caso reale di realizzazione di una infrastruttura cloud su due data center interconnessi, basato sullo standard de facto Openstack e sulle componenti Juniper OpenContrail e Virtual Chassis Fabric - Paolo Arletti e Michele DiDedda #RoadToOpsCon #OpsConPisa #OpsConMilan

Transcript

1. Copyright © 2015 Juniper Networks, Inc. 1 Data Center Open Architecture secondo ATS e Juniper: dalla Vision alla Execution Michele Di Dedda System Engineer – Juniper Networks
2. Copyright © 2015 Juniper Networks, Inc. 2 Data Center and IT Transformation Ferrari 458 4.500 cc – 570 CV Salerno – Reggio Calabria One of the most crowded motorways
3. Copyright © 2015 Juniper Networks, Inc. 3 Application Driving Design Change Social & Big Data ATTRIBUTES • Machine to machine • East-West traffic • Intra-data center REQUIREMENTS • Flatter topology • Availability and performance Virtualization ATTRIBUTES • Virtualized coexisting with bare metal REQUIREMENTS • P2V integration • Underlay visibility Cloud ATTRIBUTES • Scale-out • On-demand REQUIREMENTS • Agility • Multi-tenancy • Simple to operate, easy to scale
4. Copyright © 2015 Juniper Networks, Inc. 4 Our Journey to the Cloud
5. Copyright © 2015 Juniper Networks, Inc. 5 Your Evolutionary Journey to the Cloud Modernization of network topology Elastic, Flexible
 & On-Demand Fully automated and 
 self-provisioned cloud A Single, Open, and Smart Network Legacy IT Data Center
6. Copyright © 2015 Juniper Networks, Inc. 6 Flatter Topology Spine-Leaf 2-Tier Ñ Ñ Ñ Ñ • Leafs residing at the top of each rack • All leafs and their associated hosts are equidistant • Consistent east-to-west performance WAN Internet 3-Tier Approach
7. Copyright © 2015 Juniper Networks, Inc. 7 Introducing QFX10000 Switches Accelerate innovation OPEN Meet rapid
 and continuing data growth MOST SCALABLE Invest for today and tomorrow FUTURE PROOF FIXED & MODULAR 10GbE / 40GbE / 100GbE SPINE / CORE SWITCHES Powered by Juniper custom silicon
8. Copyright © 2015 Juniper Networks, Inc. 8 Cloud Switching Portfolio How to Fit into Spine-Leaf Solution SPINE MODULAR LEAF FIXED EX9200 QFX10000 QFX5100 QFX5100-24Q QFX10002 10 GIGABIT ETHERNET OCP NETWORKING APPLICATION INTEGRATED SWITCHING SCALE UP ARCHITECTURE Up to 480 X 100 GbE Ports GIGABIT ETHERNET EX4300 QFX5100-24Q-AA QFX-PFA-4Q NEW OCX1100 NEW NEW
9. Copyright © 2015 Juniper Networks, Inc. 9 SOFTWARE ARCHITECTURE CLI, XML, Netconf, UNIX and API Access Yocto Linux KVM KVM 3rd party applications HARDWARE ABSTRACTION LAYER EXTENSIBLE
 USER SPACE OPEN APIs CARRIER-CLASS NETWORKING CARRIER-GRADE LINUX PFE PLATFORM DATA PLANE x86 CONTROL PLANE FLASH MEMORY (UBOOT + ONIE)
10. Copyright © 2015 Juniper Networks, Inc. 10 QFX10002 FIXED SWITCHES QFX10002-72Q 2RU 5.76 Tbps • 2RU Fixed Switches: • 36 x 40G QSFP+ / 12 x 100G QSFP28 / 144 x 10G SFP+ • 72 x 40G QSFP+ / 24 x 100G QSFP28 / 288 x 10G SFP+ • Intel Quad Core Ivy Bridge 2.4Ghz CPU, 16GB SDRAM • Front-to-back airflow with 3 rear fan trays • AC & DC Power • QFX10002-72Q: 2+2 / 2+1 redundancy • QFX10002-36Q: 1+1 redundancy QFX10002-36Q QFX10002-72 Q System throughput 2.88 Tbps 5.76 Tbps 10G Density (SFP+) (breakout) 144 288 40G Density (QSFP+) 36 72 100G Density (QSFP28) 12 24
11. Copyright © 2015 Juniper Networks, Inc. 11 Coherent Data Center Fabric Architecture Q: When a bear fights a shark, who wins? A: It depends on whether the fight was on the beach or in the water. We should pick the location where we choose to invest our energy fighting. Virtual Chassis | MC-LAG Flexibility | 1GbE/ 10GbE/40GbE | ISSU | Multi-Fabric LAG | Multi-version support Layer 2 Scale-out Virtual Chassis Fabric Junos Fusion Hyper
 Scalability IP
 Fabric Ethernet Fabric Junos: One common operating system for all fabrics Business Critical IT & Private Cloud SaaS, Web Services Turn-Key | Simplicity | Performance @Scale QFabric <4,260Servers < 1,500 Servers 10,000+ <6,000 Servers Virtual Network
12. Copyright © 2015 Juniper Networks, Inc. 12 IP Fabric - Layer 3 Underlay Leaf IP Switches Spine IP Switches IP provides massive scalability and excellent multi-path Layer-2 Subnet 
 tied to rack or even server
13. Copyright © 2015 Juniper Networks, Inc. 13 BGP Routing in Underlay Massive scalability, rich policies, multi-protocol AS per router AS 65000 AS 65001 AS 65100 AS 65101 AS 65102 AS 65103 Automated Configuration with OpenClos /31 per link EBGP • BFD • Multipath • Export servers • Export loopbacks
14. Copyright © 2015 Juniper Networks, Inc. 14 Your Evolutionary Journey to the Cloud Centralization of orchestration & automation Elastic, Flexible
 & On-Demand Fully automated and 
 self-provisioned cloud A Single, Open, and Smart Network Legacy IT Data Center
15. Copyright © 2015 Juniper Networks, Inc. 15 Automation “Crushing Grapes” Orchestration “Making Wine” Automation ≠ Orchestration Speeding up “IT” Workflows at scale while eliminating errors Automation helps eliminate repeatable manual tasks through scripts or other software tools Orchestration is an extension of automation that groups automated tasks into coordinated workflows.
16. Copyright © 2015 Juniper Networks, Inc. 16 Automation Choice Common building block Switches & Routers QFX Systems [Common building block] MX Layer 2 Scale-out VCF Junos Fusion IP
 Fabric Ethernet Fabric JUNOS: one common operating system for all fabrics QFabric Virtual Network
17. Copyright © 2015 Juniper Networks, Inc. 17 Your Evolutionary Journey to the Cloud Elastic, Flexible
 & On-Demand Fully automated and 
 self-provisioned cloud A Single, Open, and Smart Network Legacy IT Data Center Collection of analytics & telemetry data
18. Copyright © 2015 Juniper Networks, Inc. Copyright © 2014 Juniper Networks, Inc. 18 ? Increased network complexity – applications view Mission critical Network Web servers Active Directory SQL VMware ESX ZDC License Server Profile Server Enterprise Apps vCenter Oracle Client SAN Switch ? ? ? ? ? ? ? ? ? What is the root cause of the service problem?
 Network? VM? AD? SQL? Storage? Profile Server? ? ? ?
19. Copyright © 2015 Juniper Networks, Inc. Copyright © 2014 Juniper Networks, Inc. 19 Traditional approach to Performance Management Silo monitoring tools and manual troubleshooting were OK in yesterdays static, physical IT environments
20. Copyright © 2015 Juniper Networks, Inc. 20 When a problem happens.. Why my application is running slow? How do I measure application performance before deployment? How do I get congestion events & latency reports? How do I effectively troubleshoot & RCA CLOUD ANALYTICS - KNOWLEDGE IS POWER
21. Copyright © 2015 Juniper Networks, Inc. 21 INSIGHT TECHNOLOGY FOR ANALYTICS
 CAPTURES MICROBURST EVENTS • Captures microburst events which exceed defined thresholds • Adjustable sampling intervals • Reports microburst events instantaneously via • CLI • Syslog • Log file (human readable format) • Streaming (Java Script Object Notification, CSV, TSV formats) Time Queue Depth or Queue Latency Buffer Utilization Monitoring And Reporting High Threshold Low Threshold Microburst
22. Copyright © 2015 Juniper Networks, Inc. 22 Analytics in a virtualized network environment Layered and correlated view Extensive troubleshooting Network path trace and flow analysis Single Pane of Visibility between Overlay and Underlay NSX-MH Tunnel end points & Statistics Logical port statistcs Overlay path tracing Track Host & VM Bandwidth utilization Overlay Underlay Cloud Analytics Engine IP Fabric Virtual Network L3 Network Director
23. Copyright © 2015 Juniper Networks, Inc. 23 VISUALIZE ANALYZE CONTROL Junos Space Network Director
 Single Pane of Glass to … VISUALIZE CONTROL ANALYZE Holistic and correlated view ▪ Data center and campus topologies ▪ Correlated overlay and underlay networks visibility ▪ Physical and virtualized connectivity Smarter and Proactive Networks ▪ Built-in collection and correlation engine ▪ Heat map and root cause analysis ▪ Network telemetry for overlay & underlay networks Lifecycle and Workflow Automation ▪ Fabric automation and management ▪ Scalable and resilient multi-site management ▪ Data center fabric management
24. 24 Network Director Bare Metal Leaf Spine Hypervisor Server VM VM VM VM VM VM VM VM VM VM VM VM VM VM VM vRouter vRouter vRouter vRouter vRouter DLE CA NDA NDA NDA NDA Cloud Analytics Engine Application-centric view of intelligent network CA CA CA • Correlate end to end network performance with application requirements • Transparency into physical and virtual layers for simpler operations • Improve co-ordination between teams for better application delivery and experience Benefits
25. Copyright © 2015 Juniper Networks, Inc. 25 Analytics and Orchestration Layer Application Path Flow Visibility & Analysis Compute Node A Compute Node B Flow Paths Red App: S1 S1 S2 S3 S4 S2 S4 Green App: S1 S3 S4 Blue App: S1 S3 S4 S2 REST Call to
 Compute Agent
26. Copyright © 2015 Juniper Networks, Inc. 26 Your Evolutionary Journey to the Cloud Elastic, Flexible
 & On-Demand Fully automated and 
 self-provisioned cloud A Single, Open, and Smart Network Legacy IT Data Center Virtualization of network & services
27. Copyright © 2015 Juniper Networks, Inc. 27 Core Layer Access Layer VLAN 1 VLAN 1 VLAN 1 VLAN 1 VLAN 2 VLAN 2 VLAN 2 • Configuration Complexity • Spanning Tree Issues • Not easy to Manage • VLAN scalability limitations Traditional Data Center Networking
28. Copyright © 2015 Juniper Networks, Inc. 28 Core Layer Access Layer VLAN 1 VLAN 1 VLAN 1 VLAN 1 VLAN 2 VLAN 2 VLAN 2 Controller • Controller as central provisioning point • Easy to manage • Still dependant on physical hardware • Action triggered passively by flows A first approach - Openflow
29. Copyright © 2015 Juniper Networks, Inc. 29 Core Layer Access Layer Controller Overcoming Openflow – Overlay and Underlay IP Fabric Control Plane Signalling Control Plane Signalling Stateless Tunnel vRouter vRouter Overlay Gateway Control Plane Signalling Stateless Tunnel VM1 VM2 VM1 VM2 Stateless Tunnel vRouter vRouter
30. Copyright © 2015 Juniper Networks, Inc. 30 Juniper SDN in the Data Center Juniper MetaFabric architecture supports an end-to-end solution for both Juniper Contrail and VMware NSX SDN deployments. Powered by two SDN technologies NSX
31. Copyright © 2015 Juniper Networks, Inc. 31 MetaFabric Journey to Cloud Modernization of network topology Centralization of orchestration & automation Elastic, Flexible
 & On-Demand Fully automated and 
 self-provisioned cloud A Single, Open, and Smart Network Legacy IT Data Center Collection of analytics & telemetry data Virtualization of network & services
32. Copyright © 2015 Juniper Networks, Inc. 32 Security for Data Center
33. 33 Bare Metal Leaf Spine Hypervisor Server VM VM VM VM VM VM VM VM VM VM VM VM VM VM VM Securing Private Cloud Security Director Virtual Director Network Director SRX FW Firefly Perimeter Firefly Perimeter Firefly Perimeter ✓ QoS Access Control Firewall policies VPN connections ✓ ✓ ✓ ✓ 1 SRX for Perimeter security 1 2 Firefly perimeter for East-West security, or Micro-perimeterization 2 • Coherent security policy control over both virtual and physical assets Benefits
34. Thank You
35. Copyright © 2015 Juniper Networks, Inc. 35 Un caso reale