Brkarc 2014
Brkarc 2014
Brkarc 2014
Branch Virtualization
The Evolving NFV Landscape
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
Agenda
• Branch Service Virtualization
Motivations
• Enterprise NFV
• SD Branch
• Enterprise Network Compute System (ENCS)
• UCS E-Series
• Open Service Containers and IOX
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 5
Cisco Webex Teams
Questions?
Use Cisco Webex Teams (formerly Cisco Spark)
to chat with the speaker after the session
How
1 Find this session in the Cisco Events Mobile App
2 Click “Join the Discussion”
3 Install Webex Teams or go directly to the team space
4 Enter messages/questions in the team space
cs.co/ciscolivebot#BRKARC-2014
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
Virtualization in the Data Center
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
Application Virtualization in the Lean Branch Office
Balancing IT Efficiency and User Experience
WAN/Internet WAN/Internet
WAN/Internet
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
Network Function Virtualization in the Branch
Enterprise Service Provider
Increase revenue by accelerating
Reduction of network elements to delivery of new and differentiated
manage & deploy services
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
Levels of Network Function Virtualization
Fully Virtualized Branch
• General Purpose X86 Compute
• Full Service Virtualization
• Best-of-Breed Service Options
Integrated Services
• ISR4K + IOX / Service Containers (KVM/LXC)
• Native ISR Services + Open NFV Flexibility
• All in One Design
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
Enterprise NFV and
SD Branch
Application Hosting Spectrum
Different models for different application needs.
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 14
Application Hosting Spectrum
Cisco Enterprise Network Function Virtualization
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
What is Software Defined Branch Architecture?
Solution Oriented Approach
Centralized Orchestration and Management
SDN Applications
Freedom of choice
Hardware platform
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
Software Defined Branch
Deploy Services on Any Platform
Virtual WAN
Virtual Router Virtual Firewall Optimization Third-Party
(ISRv,CSR,vEdge) (ASAv, NGFWv) (vWAAS) applications/VNFs
Enterprise Network
Cisco 4000 Series ISR + CSP-2100
UCS® E-Series
Compute System Cisco® UCS C-Series
(ENCS)
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
What SD Branch Can Do for You
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
Platform Built for Enterprise NFV
Branch/Campus
Colocation Center
ENCS 5000 Series for the Branch Public Cloud
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
ENCS 5000 Series - Chassis Options
ENCS 5412
ENCS 5408 12-Core
ENCS 5406 8-Core
ENCS 5104 6-Core
4-Core
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 20
ENCS 5400 Series – I/O Side
Dedicated Lights- (Optional) Internal
Integrated 16 - 64 GB 6, 8, or 12-Core
out Management Hardware RAID M.2 Storage
Power Supply DRAM Intel Xeon-D
(CIMC) Controller 64 – 400 GB
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 21
ENCS 5100 Series - I/O Side
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 22
Data Path
Control Path
High-speed Lights-out
NIC CIMC
backplane management
Switch
VLAN-aware
X86 CIMC
HW Switch NIM
POE MGMT MGMT
Dual-PHY
Cellular, T1, Dedicated management
WAN GE or
DSL, LAN, GE ports
LAN uplink
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 23
Typical ENCS 5400 CPU Allocation
• For Network VM Performance:
1 core = 1 vCPU = 1 physical core
(no hyperthreading)
Windows VM
Linux VM
• 1-core allocation for NFVIS to cover
vWAAS
NFVIS
ASAv
ISRv
performance
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 26
ENCS-W vs ENCS
ENCS-W ENCS
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
Purpose built Network Hypervisor
Enterprise NFV Infrastructure Software (NFVIS)
Network Hypervisor Zero-Touch Deployment Monitoring
Provisioning and launch of VNFs Elastic service insertion Programmable API for
Failure and recovery monitoring Multiple independent service service orchestration
Stop and restart services paths based on applications or Rest and NETCONF API
Dynamically add and remove user profiles
services
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 29
NFVIS Software Stack
Power in Software
Console/ DNA Local Device
NSO Web Portal
SSH Center
Syslog SNMP
CLI NETCONF REST HTTPS
Host
Hypervisor Layer Virtual Switch Management
Orchestration API
Linux
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
Cisco SD Branch Chain of Trust
Hypervisor (NFVIS)
Cisco Proprietary
A ENCS / UCS HW authenticity check
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Network Services from Cisco
Consistent software across physical and virtual
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 33
ISRv and CSR
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
Reference
Third party VNF Certification Resources
http://cisco.com/go/enfv
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 35
BRKRST-2112
Automated Orchestration, Management, Policy
Cisco DNA-C NFV Management
• Zero-touch deployment
• Automated orchestration of platform and VNFs
• Service chaining and licensing
• Health monitoring
• Dynamic scaling of services
• Operational SLA management
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
Design your branch WAN connections
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Build your VMs
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
SDWAN onboarding using Zero Touch
Provisioning
Cisco SD-WAN Control and Policy
Redirect Elements
PnP Server 4
Server
3
Token and Serial Number
2 vEdge-cloud
Chain
Full Registration and
1 Configuration
Assumption:
DHCP on Transport Side (ENCS mgmt) DHCP or Static IP (WAN Transport)
DNS to resolve devicehelper.cisco.com* DNS to resolve vbond fqdn
* Factory default config NFVIS
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 40
BRKARC-2112
Harnessing the power of Software
Defined Branch and SD-WAN
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 41
UCS E-Series
Cisco End-to-End Solution
UCS B-Series, C-Series and E-Series for Data Center and Branch Locations
Cisco UCS B/C Series Data Center/Cloud
Consolidate
Unified compute platform for infrastructure
Infrastructure
consolidation in the data center and large
branch offices. Offers innovative virtualization,
memory, provisioning, I/O, and management
capabilities. Centralize
Applications
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 44
Application Hosting Spectrum
Different models for different application needs.
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 45
Application Hosting Spectrum
Cisco UCS E-Series with Enterprise Network Function Virtualization
Cisco UCS E-Series with hypervisor or OS
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 46
Cisco UCS E-Series DC-class Servers
Intel Broadwell
Performance
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 47
Cisco UCS E-Series Single-Wide Blade
Compact Blade Housed in Cisco ISR G2 and 4000 Series ISR
Chassis - Cisco UCS E140S M2 and E160S M3
Configuration and
management through
Remote and CIMC/IMC SUP or UCSD
schedulable power
management
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 48
Cisco UCS E-Series Double-Wide Blade
Server Blade Housed in ISR 4000 – UCS-E140D/UCS-E160D/UCS-E180D/UCS-
E1120D
Remote and
schedulable power Out-of-band
management with super configuration and
capacitors management through
CIMC
Front-panel VGA, 2 USB 3.0, and
serial console connectors
Up to 3(4) SATA, SAS, SSD hard drives
Two SD Cards: one for the CIMC or 2 HDD and a PCIe card
and temporary storage of OS
and one for a blank virtual drive On-board hardware RAID 0, 1,
and 5 configuration options
with hot-swappable capability
Two external and two internal
GE(10GE) ports with TCP/IP Wire-free, plug-and-play modularity,
acceleration low shipping weight (7 lb / 3.2 kg)
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 49
Cisco UCS E-Series Network Compute Engine
Compact, Multipurpose Blade Housed in 4000 Series ISR -
Cisco UCS EN140N M2
Up to 8 GB RAM
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 50
Cisco UCS E-Series Servers Support Model
Hardware Support Provided by Cisco
Cisco UCS® E-Series hardware supported under host ISR SMARTnet® at no additional cost
Hypervisor and OS supported by hypervisor and OS vendor
Supported
by OS / hypervisor
vendor
Option for Cisco
hypervisor (NFVIS)
Purchased
Hypervisor separately or from
Cisco (NFVIS)
Supported
Cisco® UCS E-Series Server Module by Cisco
SMARTnet
Attached to ISR
ISR 4K
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 51
KVM Hosting on IOS-XE
Routers
ISR 4K, ASR1K, CSR1Kv
Cisco IOx
Cisco IOx is a simple yet powerful infrastructure framework allowing developers and operators to
securely onboard legacy and greenfield applications to their IoT edge infrastructure at massive scale and
creating business value from previously untapped data
IOx
• Execute container or Virtual Machine • Zero touch deployment of devices
concurrently • Centralized device and application
• Run Windows or Linux applications life-cycle management at scale
• Easily-consumable System Services • End-to-End security
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 54
Smooth workflow from developer to operator
Flexible, industry standard, purpose-built, and optimized for IoT edge
o o
App in any r r
language Custom
Custom IOx App
app in Package
(Windows app in .OVA
Docker
or Linux VM
containers
Developer based) Operator
Remote
Assets
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 55
Application Hosting Spectrum
Different models for different application needs.
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 56
Application Hosting Spectrum
Linux Containers
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 57
Application Hosting Spectrum
Cisco Developed IOX & Service Containers
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 57
Application Hosting Spectrum
Open IOX & Service Containers
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 57
IOS-XE Software Architecture
Customer and 3rd Party
IOSd Cisco Apps (WAAS, Snort)
Applications
Control Plane
KVM/LXC Virtual Ethernet
Linux OS
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 60
Cisco ISR 4400 Series Architecture
Hosted Apps live IOS
here
Control Plane (1 Data Plane (6 or 10
core) and Services cores)
Plane (3 cores)
FPGE
ISC
Multigigabit
Hosted App Fabric SM-X
KVM - Hypervisor
Service Plane
(control plane CPU) NIM
b BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 61
Cisco ISR 4300 Series Architecture
Data Plane Cores
IOS
FPGE
Hosted Apps
Multigigabit ISC
Fabric
Hosted App SM-X
KVM - Hypervisor
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 62
Cisco WAAS
Improve application performance and user experience
Virtual WAAS
• Application acceleration from
Private/Virtual Private Cloud
• VMWare ESX/ESXi and UCS
WAAS Appliance deployments
• Agile, elastic, multi-tenant deployment
• Application acceleration • vCM: common virtualized management
• Virtual blades in branch offices for physical/virtual WAAS
• Scalable platforms for range of
deployments
Hosted
App
ISR-WAAS on ISR 4K
• Integrated on platform
• Full Feature Parity
• Software on-demand provisioning
• No fork lift upgrade
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 63
IPS/IDS
Product Overview
Open source intrusion prevention system for real-time traffic analysis
Lightweight threat defense for price sensitive customers
Integrated in ISR 4K as a hosted app
IPS/IDS functionality with an IOS IPS look and feel
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 64
Positioning IPS/IDS Solution for the WAN
Regulatory/ PCI Direct Internet access to partner sites or public Full DIA
Compliance cloud (i.e. Office365, Salesforce.com)
ISR 4351
75 – 170 Mbps
ISR 4331
60 – 140 Mbps
ISR 4321
Up to 50 Mbps
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 65
Common Open KVM Use Cases
Troubleshooting VM
General purpose virtual machine with custom and open-source troubleshooting tools.
(Wireshark, Speedtest, etc.)
Network Functions
Common network functions such as Print Server, Domain Controller, File Storage, etc.
Analytics
Device Customization
Augment the capabilities of the host platform in some way. (Custom encryption,
business-based routing, specialized API interface)
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 66
Real-World Example
See: blog.thousandeyes.com/troubleshooting-cloud-services-cisco © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
CA Unified Infrastructure Management
Unified IT Monitoring Providing Broad Coverage
A unified view and architecture
to manage
your internal and external infrastructure
.
MONITOR
BIG DATA MAINFRAME
APPLICATION VIRTUALIZATION
• Predictive Analytics
• SLA Compliance
• Dashboards &
USER EXPERIENCE Reporting STORAGE
• Intelligent Alerts
CLOUD
POWER & COOLING
DATABASE SERVER
NETWORK
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 70
UIM Reference Architecture Recommended Probe
Technologies included with
UIM CORE ISR UIM OVAs:
UIM • CDM/RSP
Virtual Image DB • SNMPC
Requirements: UIM • UCS
• Relay Hub: 1 CPU – Quad Portal UIM • URL Response
Core, 8GB Memory. Primary HUB • Net Connect
Redhat/CentOS 6 or 7. • DNS Response
• Polling Robot: 1 CPU – • XenApp
Quad Core, 8GB Memory. • e2e appmon
Redhat/CentOS 6 or 7.
Location Location Location
1 2 3
ISR 4400/4300 ISR 4400/4300 ISR 4400/4300
KVM KVM KVM KVM KVM KVM
Relay Polling Relay Polling Relay Polling
Hub Robot Hub Robot Hub Robot
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 73
What do I need to add to an ISR4K system?
Memory
• Service Containers (currently) REQUIRE additional DRAM beyond the 4GB system
default
• Additional DRAM beyond 4GB will be available to a KVM application
• Example: 8GB DRAM will have 4GB available to Service Containers
• Example: 16GB DRAM will have 12GB available to Service Containers
Storage
Note: Newer ISRs ship with 8GB DRAM and often do not require more.
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 75
ISR4K Services Core Specifications
Speed Relative Compute Min Additional Min Additional Min Additional
Platform Service Cores
(GHz) Power DRAM SSD HDD
ISR4451
3 2 6P 4GB 200GB 1TB
(Gladden)
ISR4431
3 1 3P 4GB 200GB 1TB
(Gladden)
ISR4351
3 2.4 3P 4GB 50GB 1TB
(Rangeley)
ISR4331
3 2.0 2.5 P 4GB 50GB 1TB
(Rangeley)
ISR4321
1 2.4 P 4GB 50GB 1TB
(Rangeley)
UCS-E NIM 4 1.6 2.6 P N/A N/A N/A
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 76
Guest Shell Application
• Linux Shell Environment On Your Switch or Router
• Maintain IOS-XE system integrity
• Isolated User Space
• Fault Isolation
Linux
• Resource Isolation applications
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 78
Cisco Guest Shell Capabilities
Guest Shell 1.0 Guest Shell 1.0
Python 2.7 ✓ ✓
Python 3.0 ✗ ✓
RPM Install ✗ ✓
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 79
Cisco Fog Director/Cisco DNA-C: App Life Cycle
Management
App Management & Monitoring at Scale
Easy to use
•Simplified application lifecycle management
•Stand Alone UI or may be integrated into 3rd party
applications restful APIs
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Fog Director/Cisco DNA-C: Application Dashboard
Enables management of application deployment to the edge devices at scale
View of installed
Apps Resource
consumption
dashboard
Instant status of
Apps running
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 92
Cisco Fog Director/Cisco DNA-C: Application Dashboard
Drilling down on deployed applications
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 93
Hosted Application Support Model
CiscoParty
Third Support:
& Community Support:
Call TAC
TAC and they’ll
will redirect you.help you out.
Customer and 3rd
IOSd WAAS
Party Applications
Control Plane
KVM/LXC Virtual Ethernet
Linux OS
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 97
More Information
Cisco DevNet
• Online community for developers
• Direct access to Cisco Engineers and
Product Teams
• Repository of how-to guides, best
practices and sample code
• This will be the primary source for IOx &
Service Container documentation and
sample OVAs
• Due to Cisco support requirements,
VMs will generally not be posted to https://developer.cisco.com/site/iox/
Cisco.com directly.
https://developer.cisco.com/site/kvm/
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 99
IOx Sandbox: Online virtual test bed
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 100
Product Specifications Comparison
ISR 4000 Series ISR 4000 Series
ENCS 5400 Series
with Hosted App with UCS-E
Embedded IOS-XE Container for light- Dedicated x86 blade server for Shared x86 platform for Routing &
Architecture
weight applications applications hosted applications
Switch-ports 72 64 8
RAM 12 GB 128 GB 64 GB
4 TB disks +
Disk 800 GB 8 TB
400 GB SSD
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 103
Cisco Webex Teams
Questions?
Use Cisco Webex Teams (formerly Cisco Spark)
to chat with the speaker after the session
How
1 Find this session in the Cisco Events Mobile App
2 Click “Join the Discussion”
3 Install Webex Teams or go directly to the team space
4 Enter messages/questions in the team space
cs.co/ciscolivebot#BRKARC-2014
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 104
Complete your online
session survey
• Please complete your Online Session
Survey after each session
• Complete 4 Session Surveys & the Overall
Conference Survey (available from
Thursday) to receive your Cisco Live T-
shirt
• All surveys can be completed via the Cisco
Events Mobile App or the Communication
Stations
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 105
Continue Your Education
BRKARC-2014 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 106
Thank you