Presentation - Cisco Knowledge Network
Presentation - Cisco Knowledge Network
Presentation - Cisco Knowledge Network
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Architect Cloud with Confidence<br />
Results from Independent Validation of <strong>Cisco</strong> CloudVerse<br />
Satish Iyer, Products & Solns Marketing<br />
Campaign Lead, Cloud MegaTest<br />
Sunil Cherukuri, Systems Development Unit<br />
Lead Architect, Cloud MegaTest<br />
June 7, 2012<br />
© 2010 <strong>Cisco</strong> and/or its affiliates. All rights reserved.<br />
<strong>Cisco</strong> Confidential 1
Cloud<br />
Applications<br />
<strong>Cisco</strong> ®<br />
Unified<br />
Data<br />
Center<br />
<strong>Cisco</strong><br />
Cloud<br />
Intelligent<br />
<strong>Network</strong><br />
<strong>Cisco</strong> Cloud<br />
Enablement<br />
Services<br />
Enabling Cloud Applications and Services by Uniquely Combining<br />
the <strong>Cisco</strong> Unified Data Center and <strong>Cisco</strong> Cloud Intelligent <strong>Network</strong><br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 2
Comprehensive<br />
World’s first comprehensive public cloud<br />
test including data center, network and<br />
cloud business and consumer<br />
applications<br />
Independent<br />
Independent testing by Light Reading<br />
and EANTC<br />
Testing not funded by <strong>Cisco</strong><br />
Realistic<br />
Tests were developed by EANTC and<br />
Light Reading based on customer’s top<br />
concerns<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 3
6<br />
Months of planning<br />
8<br />
Weeks of on-site testing<br />
25<br />
Test suites across data center, network and<br />
applications<br />
$75<br />
Million equipment involved in test<br />
80<br />
Engineers supporting testing<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 4
Video<br />
Cloud<br />
Applications<br />
CRM<br />
Collaboration<br />
Unified<br />
Data<br />
Center<br />
Cloud<br />
Intelligent<br />
<strong>Network</strong><br />
IaaS<br />
Using Comprehensive End to End Infrastructure<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 5
• Unified Computing<br />
- <strong>Cisco</strong> Unified Computing<br />
System<br />
• Unified <strong>Network</strong><br />
- <strong>Cisco</strong> Nexus ® 7000 Series<br />
- <strong>Cisco</strong> Nexus 5000 Series<br />
- <strong>Cisco</strong> Nexus 2000 Series<br />
- <strong>Cisco</strong> Nexus 1000 Series<br />
- <strong>Cisco</strong> Virtual Services<br />
Gateway (VSG)<br />
- <strong>Cisco</strong> Catalyst ® 6500 Series<br />
- <strong>Cisco</strong> ASA 55585-X60<br />
- <strong>Cisco</strong> ACE30<br />
- <strong>Cisco</strong> MDS 9000 Family<br />
• Unified Management<br />
- <strong>Cisco</strong> UCS Manager<br />
- BMC Cloud Lifecycle<br />
Manager<br />
- <strong>Cisco</strong> <strong>Network</strong> Service<br />
Manager<br />
Video: <strong>Cisco</strong> Videoscape Media Suite;<br />
<strong>Cisco</strong> Transcode Manager, Content Delivery<br />
System (CDS), and Media Processors; and Policy<br />
and Charging Rules Function (PCRF)<br />
Collaboration: <strong>Cisco</strong> Hosted Collaboration<br />
Solution (HCS) and <strong>Cisco</strong> Jabber<br />
<strong>Cisco</strong> ®<br />
Unified<br />
Data<br />
Center<br />
CRM: Siebel<br />
Cloud<br />
Applications<br />
<strong>Cisco</strong><br />
Cloud<br />
Intelligent<br />
<strong>Network</strong><br />
Optical Transport:<br />
<strong>Cisco</strong> ONS 15454 and CRS-3<br />
• Core<br />
– <strong>Cisco</strong> CRS-3<br />
• Mobile<br />
– <strong>Cisco</strong> ASR 5000 Series<br />
• Edge<br />
– <strong>Cisco</strong> ASR 9000 Series<br />
– <strong>Cisco</strong> CDS Internet<br />
Streaming<br />
• Branch Router<br />
– <strong>Cisco</strong> ASR 1000 Series<br />
• Management<br />
– <strong>Cisco</strong> Prime <strong>Network</strong><br />
Registrar<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 6
<strong>Cisco</strong> Videoscape<br />
and Mobile<br />
Videoscape<br />
NAT64, 6RD, Dual<br />
Stack, <strong>Cisco</strong> Prime<br />
<strong>Network</strong> Registrar,<br />
<strong>Cisco</strong> <strong>Network</strong><br />
Positioning System<br />
(NPS), and Mobile<br />
PCRF<br />
Cloud<br />
Applications<br />
BMC CLM, QoS, Isolation, <strong>Cisco</strong><br />
FabricPath (and <strong>Cisco</strong> Fabric Extender<br />
Technology [FEX Technology]), LISP, <strong>Cisco</strong><br />
Data Center Virtual Machine FEX (VM-FEX),<br />
<strong>Cisco</strong> VSG, <strong>Cisco</strong> <strong>Network</strong> Services Manager<br />
(Overdrive), <strong>Cisco</strong> UCS, <strong>Cisco</strong> HCS, and<br />
Siebel<br />
<strong>Cisco</strong> ®<br />
Unified<br />
Data<br />
Center<br />
<strong>Cisco</strong> Cloud<br />
Enablement<br />
Services<br />
<strong>Cisco</strong><br />
Cloud<br />
Intelligent<br />
<strong>Network</strong><br />
<strong>Cisco</strong> <strong>Cisco</strong> ONS 100<br />
GE at 3000 km<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 7
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 8
• VMDC 2.2 based architecture – each test overlaid as tenant in<br />
multi-tenant cloud<br />
• 70+ 10G IXIA ports, 75+ VRFs/tenants, 600+ VLANs, 1500+ VMs<br />
• 80 Gbps of north-to-south (next-generation network [NGN]<br />
to cloud) traffic: 1 million clients to 50,000 servers<br />
• 300 Gbps of east to west (within data center ) traffic: switched &<br />
routed - with <strong>Cisco</strong> ® FabricPath 2-tier design – showing 15,000<br />
MAC addresses and 256 VLANs<br />
• 67 million NAT64 sessions simulated, at 80Gbps, 4 million/sec<br />
• 1 million residential gateways shown for 6rd, at 80Gbps<br />
• 40Gbps of video streaming – using <strong>Cisco</strong> CDS Internet<br />
streaming appliance, and on a <strong>Cisco</strong> ASR 9000 Series <strong>Cisco</strong><br />
Integrated Services Module (ISM)<br />
• PCRF for throttling mobile subscribers in real time<br />
• Any video format, any device, any where: iPad, Android, PC, etc.<br />
• <strong>Cisco</strong> VM-FEX in VMDirectPath performance demonstrated:<br />
– VM-FEX compared to software DVS in 4 ways:<br />
iSCSI read-write, L3 IMIX traffic, HTTP traffic, and video encoding<br />
– 20 to 30% performance improvement in throughput, CPU, and<br />
IOPS with <strong>Cisco</strong> Data Center VM-FEX DirectPath I/O<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 9
• <strong>Cisco</strong> ® VMDC: A validated reference architecture<br />
– CVD Design & Implementation Guides<br />
– Validated Orchestration tools<br />
– Reducing time to deployment<br />
– Reducing risk<br />
– Increasing flexibility<br />
– Improving operational efficiency<br />
• A flexible, modular and scalable architecture that<br />
combines integrated computing stacks, unified data<br />
center, and data center interconnects into an endto-end<br />
architecture – Blueprint for Cloud<br />
• One-cloud solution for any layer infrastructure,<br />
platform, and software as a service [IaaS, PaaS,<br />
and SaaS]) and any deployment<br />
(Private, Public, or Hybrid Cloud)<br />
Design the Cloud with Confidence<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 10
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 11
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 12
Cloud<br />
Applications<br />
Orchestration<br />
BMC CLM<br />
NW Abstraction<br />
<strong>Cisco</strong> NSM<br />
<strong>Cisco</strong> ®<br />
Unified<br />
Data<br />
Center<br />
<strong>Cisco</strong><br />
Cloud<br />
Intelligent<br />
<strong>Network</strong><br />
Manageability<br />
Unified Management<br />
<strong>Cisco</strong> UCS Manager<br />
WorkLoad Mobility<br />
LISP<br />
Unified Data Center<br />
Performance<br />
Data Center Bandwidth<br />
<strong>Cisco</strong> Fabric Path<br />
App Performance<br />
<strong>Cisco</strong> VM-FEX<br />
Security<br />
Multi-Tenancy<br />
Tenant Isolation<br />
Virtual Machine<br />
Security<br />
<strong>Cisco</strong> VSG<br />
Tiered Services<br />
QoS and SLA’s<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 13
Demonstrate criticality of orchestration in complex<br />
multi-tenant Cloud environments<br />
Tenant & VM Orchestr.<br />
• Provision one tenant<br />
(VDC)<br />
• Provision one VM<br />
• Provision five tenants,<br />
simultaneously - 1 Gold,<br />
1 Silver , 3 Bronze<br />
• Provision 50 Win2008<br />
VMs simultaneously -<br />
10 VMs per tenant<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 14
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 15
Tenants and VMs provisioned through a single portal,<br />
within 1 hr.<br />
Results:<br />
• 5 simultaneous tenants provisioned end-end within 60 min<br />
• Orch touch points: VLANs, VRFs, BGP on ASR9k, N7k, C6500<br />
vFW on ASA, vSLB on ACE, VLANs on N1k<br />
• 50 simultaneous VMs (across 5 tenants) provisioned and functional in 60 min<br />
Benefits:<br />
• Single Cloud Orchestration suite for <strong>Network</strong> container and VM provisioning<br />
• Secure <strong>Network</strong> Containers for abstracting physical and virtual network<br />
infrastructure and network services through blueprints and templates<br />
• True E-E cloud service provisioning<br />
• Faster on-boarding of tenants and VMs (Days vs minutes)<br />
• Service Velocity & OpEx savings with Portal based automated Provisioning<br />
• Orchestration enables selling Cloud infrastructure.<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 16
Unified management enables Stateless Computing<br />
Service Profile Tests<br />
• Preconfigure service<br />
templates and profiles<br />
• Measure:<br />
- Blade failure and<br />
restoration with<br />
stateless computing<br />
- New installation of 8<br />
blades<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 17
Configuration Methods Service Profile Physical Blade<br />
• Manual<br />
• Automatic<br />
• Default<br />
Identity<br />
(MAC Address,<br />
WWN, Etc.)<br />
Behavior<br />
(Firmware, QoS,<br />
Etc.)<br />
Other<br />
(vNICs, vHBAs,<br />
Etc.)<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 18
Simplified management and stateless computing benefits<br />
Virtualization<br />
Results:<br />
• 595 seconds to replace and restore a failed <strong>Cisco</strong> UCS blade<br />
• 704 seconds to insert a new <strong>Cisco</strong> UCS chassis with 8 <strong>Cisco</strong> UCS blades<br />
provisioned, SAN-booted, connected into the core SAN and LAN networks,<br />
and associated with a service profile through <strong>Cisco</strong> UCS Manager<br />
Benefits:<br />
• Unified management solution compared to 6 or 7 products for<br />
competition<br />
• Single pane for LAN and SAN management<br />
• UCSM programs more details into SP, less tasks after blade is booted<br />
• Stateless computing for reduced service downtime<br />
• Stateless computing allows blades to be added with no recabling or reconfig.<br />
• Time to insert 1 blade compared to 8 blades: no significant difference; scalable<br />
• Enables automation through service-profile-based provisioning<br />
• OpEx savings and reduced time to repair - greatly reduced MTTR<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 19
Workload mobility across geographic data centers with no changes<br />
to virtual machines<br />
Path optimization<br />
across data centers<br />
• Move virtual machine<br />
from DC-1 to DC-2 and<br />
check client’s session<br />
• No need for client or<br />
web server IP address<br />
reconfiguration.<br />
• Locator ID Separation<br />
Protocol (LISP) sends<br />
client traffic directly to<br />
DC-2<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 20
Moves Without LAN Extension<br />
Moves With LAN Extension<br />
LISP Site<br />
xTR<br />
Non-LISP<br />
Site<br />
LISP Site<br />
xTR<br />
Mapping DB<br />
Internet or<br />
Shared WAN<br />
DR Location<br />
or Cloud<br />
Provider DC<br />
IP <strong>Network</strong><br />
Mapping DB<br />
LAN Extension<br />
LISP-VM (xTR)<br />
West-DC<br />
East-DC<br />
LISP-VM (xTR)<br />
West-DC<br />
East-DC<br />
IP Mobility Across Subnets<br />
Routing for Extended Subnets<br />
• Disaster Recovery (DR)<br />
• Active-Active Data Centers (DCs)<br />
• Cloud Bursting<br />
• Distributed Clusters<br />
Application Members in One Location<br />
Application Members Distributed<br />
(Broadcasts across sites)<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 21
Automatic service restoration and path optimization during<br />
workload mobility across cloud<br />
Results:<br />
• This was a demonstration; no performance or scale metrics<br />
• Used VMware vCloud Director for offline migration of virtual machines<br />
across data centers<br />
• After virtual machine was moved to DC-2, it kept original IP addressing<br />
• Client was able to access virtual machine with no changes or disruption<br />
• LISP sent traffic directly to DC-2<br />
Benefits:<br />
• Enables building geographically distributed data centers<br />
• More Agile work-load portability while preserving IP address<br />
• No changes in routing or IP addressing - overlay technology<br />
• Direct Path - path optimization across NGN core<br />
• Established connections maintained across move (VMware vMotion)<br />
• No routing reconvergence, no DNS updates and transparent to the hosts<br />
• Global Scalability - enables cloud bursting<br />
• IPv4 and IPv6 Support<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 22
Scale the data center infrastructure, while providing any-to-any<br />
connectivity<br />
<strong>Cisco</strong> ® FabricPath<br />
performance<br />
• 16x ECMP<br />
• High throughput<br />
• Convergence<br />
time<br />
• Latency<br />
• MAC address<br />
scalability<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 23
Multi-Domain – Silos<br />
<strong>Cisco</strong> ® FabricPath: Any Application Anywhere!<br />
Fabric<br />
Subnet X Subnet Y Subnet Z<br />
Silo 1 Silo 2 Silo 3<br />
Subnet X<br />
Subnet Y<br />
Subnet Z<br />
• <strong>Cisco</strong> FabricPath provides a fabric that looks like a switch =><br />
No silos, workload mobility and maximum flexibility<br />
• Any VLAN anywhere<br />
• Eliminates Spanning Tree, and is loop free<br />
• IS-IS control plane supports up to 16x multipathing<br />
• Forwarding based on <strong>Cisco</strong> FabricPath header<br />
• Conversational MAC address learning<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 24
High scalability within data center pod’s, with 16x multi-pathing<br />
Results:<br />
• 16x multipathing between source and destination – 160 Gbps each way<br />
• 292 Gbps of N-S and E-W traffic<br />
• 256 VLANs and 15,000 MAC addresses in topology<br />
• Efficient hashing between available links<br />
•
How to provide better performance to virtual machine workloads<br />
Compare <strong>Cisco</strong> ®<br />
VM-FEX<br />
performance with<br />
DVS performance<br />
• <strong>Cisco</strong> virtual interface<br />
card (VIC): <strong>Cisco</strong><br />
UCS ® M81KR VIC<br />
• SAN I/O operations<br />
per second (IOPS)<br />
• CPU<br />
• Throughput<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 26
Features on N1000:<br />
L2 Sec, QoS, NetFlow,<br />
vPath etc.<br />
Higher Performance<br />
with VMFex DirectPath<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 27
More IOPS, higher throughput, and less CPU use with <strong>Cisco</strong> ® VIC<br />
hardware virtualization and <strong>Cisco</strong> VM-FEX VMDirectPath, while<br />
preserving VM Mobility<br />
Results:<br />
• <strong>Cisco</strong> VIC used for <strong>Cisco</strong> Nexus ® 1000V DVS and <strong>Cisco</strong> VM-FEX modes<br />
• UDP traffic: 9.78 Gbps throughput with <strong>Cisco</strong> Data Center VM-FEX compared to<br />
8.38 Gbps with DVS<br />
– 54% CPU use for <strong>Cisco</strong> VM-FEX compared to 92% CPU use for DVS<br />
• TCP traffic: 9.38 Gbps throughput with <strong>Cisco</strong> Data Center VM-FEX compared to 7.38<br />
Gbps with DVS<br />
– 36% CPU use for <strong>Cisco</strong> VM-FEX compared to 76% CPU use for DVS<br />
• iSCSI traffic: 70 Mbps, 140 IOPS and 30.7 ms response time with <strong>Cisco</strong> VM-FEX<br />
53.5 Mbps, 106 IOPS, 41 ms response time with DVS,<br />
– 36% CPU use for <strong>Cisco</strong> VM-FEX compared to 60% CPU for DVS<br />
Benefits:<br />
• Consolidates network management, collapses physical and virtual networks<br />
• Virtual machine networking managed through <strong>Cisco</strong> UCS Manager<br />
• Higher performance with virtual machine DirectPath<br />
• Industry’s first independently validated virtual switching options<br />
with performance characteristics<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 28
How can firewall rules be enforced on virtual servers?<br />
How does virtual machine migration affect security?<br />
<strong>Cisco</strong>® VSG security<br />
through <strong>Cisco</strong> Nexus ®<br />
1000V Series port<br />
profiles<br />
• Policy based on<br />
network<br />
attributes<br />
• Policy based virtual<br />
machine attributes<br />
• VMware vMotion<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 29
<strong>Cisco</strong> ® VNMC<br />
VM<br />
VM<br />
VM<br />
VM<br />
VM<br />
VM<br />
VM<br />
VM VM VM<br />
VM VM VM<br />
VM VM VM<br />
VM VM VM<br />
4<br />
<strong>Cisco</strong> Nexus ® 1000V<br />
Distributed Virtual Switch<br />
vPath<br />
Decision<br />
Caching<br />
3<br />
<strong>Cisco</strong><br />
VSG<br />
1 Initial Packet 2<br />
Flow<br />
Flow Access Control<br />
(policy evaluation)<br />
Log and Audit<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 30
Security in the virtual space, including during virtual<br />
machine mobility<br />
Results:<br />
• 100% security for north-south and east-west traffic flows for emulated<br />
three-tier web server (presentation, application, and database)<br />
• No loss for allowed traffic, and 100% loss for disallowed traffic<br />
• IP- and port-based and virtual machine-name-based security policies verified<br />
• No loss of security when VMware vMotion is implemented<br />
Benefits:<br />
• Transparent insertion of <strong>Cisco</strong> ® VSG into the virtual environment<br />
• Built into the <strong>Cisco</strong> Nexus ® 1000V vPath: fast path acceleration<br />
• Adoption of cloud services is not feasible without addressing security<br />
• Virtual machine-aware security policies; tie in with VMware vCenter<br />
• Inter-VLAN and intra-VLAN security (multitier and single-tier applications)<br />
• Policy follows virtual machine (port-profile)<br />
• Multitier security across physical and virtual layers using VLANs, VRF, <strong>Cisco</strong> VSG, and<br />
virtual firewall<br />
• Policy-based security for multi-tenancy and mobility<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 31
• Please take a moment to answer the Poll questions in the<br />
Webex Poll window.<br />
Question-1:<br />
Are you interested in the <strong>Cisco</strong> VMDC reference<br />
architecture for your your Cloud deployments?<br />
a) As is, with minor changes<br />
b) With some customization<br />
c) Not at all<br />
Question-2:<br />
What orchestration tools are you planning to use?<br />
a) BMC CLM<br />
b) <strong>Cisco</strong> IAC / NSM<br />
c) Third Party<br />
d) Home-grown<br />
Question-3:<br />
Which of the following do you foresee as being useful for<br />
your Cloud deployments? (multiple choice)<br />
a) Fabric Path<br />
b) LISP<br />
c) Virtual Services (VSG, vASA, CSR)<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 32
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 33
Cloud<br />
Applications<br />
Carrier-Grade<br />
NAT64 on<br />
<strong>Cisco</strong> CRS<br />
Carrier-Grade<br />
6rd on <strong>Cisco</strong> CRS<br />
<strong>Cisco</strong> ®<br />
Unified<br />
Data<br />
Center<br />
<strong>Cisco</strong><br />
Cloud<br />
Intelligent<br />
<strong>Network</strong><br />
IPv6<br />
Transition<br />
Dual Stack<br />
DHCPv6 with<br />
<strong>Cisco</strong> Prime<br />
<strong>Network</strong> Registrar<br />
Cloud Intelligent<br />
<strong>Network</strong><br />
Cloud<br />
<strong>Network</strong>ing<br />
<strong>Network</strong><br />
Positioning<br />
System<br />
Mobility and<br />
Long-Haul<br />
Transport<br />
100 GE Optics<br />
over 3000 km with<br />
<strong>Cisco</strong> ONS<br />
Mobility PCRF with<br />
<strong>Cisco</strong> ASR5000<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 34
How can IPv4 cloud support IPv6 users?<br />
NAT64 performance with<br />
4 <strong>Cisco</strong> ® Carrier-Grade<br />
Services Engine<br />
(CGSE) blades on <strong>Cisco</strong><br />
Carrier Routing System<br />
(CRS)<br />
•<br />
Max throughput<br />
• Max number of<br />
concurrent translations<br />
• Max session setup rate<br />
IPv6 Clients<br />
(Cable and Access)<br />
IPv6 Servers<br />
(Cloud)<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 35
DNS64<br />
IPv6 destination prefix<br />
(For Example: 3301:db8::/32)<br />
IPv6<br />
Subscribers<br />
Interface<br />
VLAN<br />
AppSVI<br />
<strong>Cisco</strong> ®<br />
CGSE<br />
AppSVI<br />
Interface<br />
VLAN<br />
VLAN<br />
IPv4<br />
Cloud<br />
IPv4 map pool<br />
52.52.52.0/24<br />
3001:DB8:E0E:E03::<br />
3301:DB8:B0B:B02::<br />
UDP port 3000, 3000<br />
Payload<br />
52.52.52.187<br />
11.11.11.2<br />
UDP port 10546, 3000<br />
Payload<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 36
Enables IPv4 Cloud to support IPv6 users through<br />
translations, at Scale<br />
Results:<br />
• 67 million concurrent stateful IPv6-to-IPv4 translations<br />
• 67 million simulated users (1000 IPv6 clients using 65,000 ports each to<br />
access 1000 IPv6 servers)<br />
• 4 million simultaneous NAT64 translations per second<br />
• 78.4 Gbps throughput with no drops<br />
Benefits:<br />
• Access (cable and broadband network gateway [BNG]) subscriber networks that<br />
use IPv6 can access IPv4 Cloud<br />
• Enables millions of transactions at the right place in the network - at access<br />
edge or at cloud edge<br />
• Single platform (<strong>Cisco</strong> ® CRS) supports massive scalability (1.5 to 3 times<br />
competition’s)<br />
• No need to deploy new hardware in the Cloud for IPv6 translation<br />
• Evolutionary transition to IPv6 - simple and scalable<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 37
How to handle traditional IPv4 transit networks<br />
IPv6 Rapid Deployment<br />
(6rd) performance with<br />
4 <strong>Cisco</strong> ® CGSE blades<br />
on <strong>Cisco</strong> CRS<br />
IPv6 Clients<br />
(Cable and Access)<br />
• High throughput<br />
• 1 million residential<br />
subscribers<br />
• No Drop Rate<br />
IPv6 Servers<br />
(Cloud)<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 38
Destination (Border Relay [BR]) 100.1.1.1 -> AppSVI4<br />
Destination 6rd IPv6 Prefix -> AppSVI6<br />
RG/CPE<br />
IPv6<br />
Subscribers 6rd<br />
SP IPv4<br />
N/W<br />
Interface<br />
VLAN<br />
RG/CPE<br />
facing<br />
LC<br />
AppSVI<br />
<strong>Cisco</strong> ®<br />
CGSE<br />
6RD<br />
BR<br />
AppSVI<br />
Native<br />
IPv6<br />
facing<br />
LC<br />
Interface<br />
VLAN<br />
IPv6<br />
Cloud<br />
0/1/CPU0<br />
0/0/CPU0<br />
0/1/CPU0<br />
• Residential gateway (RG)- and native-facing interfaces can be on the same line card as shown<br />
• An IPv4 switch virtual interface (SVI) carries IPv4 packets to <strong>Cisco</strong> CGSE for decapsulation through a<br />
static route; they are then passed to native IPv6 through the IPv6 SVI<br />
• An IPv6 SVI carries IPv6 packets to <strong>Cisco</strong> CGSE for encapsulation through a static route; they are<br />
then passed to the IPv4 network through the IPv4 SVI<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 39
Enables IPv6 Cloud to serve IPv6 users through IPv4<br />
transit networks, via tunneling at scale<br />
Results:<br />
• 20 million flows with 1 million 6rd tunnels (1 million residential gateways<br />
accessing 20,000 IPv6 servers in cloud)<br />
• 79.6 Gbps Internet mix (IMIX) throughput with no loss<br />
Benefits:<br />
• IPv6 users can access IPv6 cloud through IPv4 transit networks<br />
• Massive transaction scalability at the right place in the network using<br />
tunnel encapsulation across traditional networks<br />
• Single platform (<strong>Cisco</strong> ® CRS) can support massive scalability<br />
• No need to deploy new hardware in the cloud for IPv6 translation<br />
• Ease the transition to IPv6 for cloud applications and consumers with<br />
no disruption<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 40
Can network help to locate the best cloud resources?<br />
<strong>Cisco</strong> ® NPS<br />
• Video servers in 2 data<br />
centers<br />
• Portal-based video client<br />
• <strong>Cisco</strong> NPS on <strong>Cisco</strong> CRS-3<br />
• <strong>Cisco</strong> NPS client and <strong>Cisco</strong><br />
Performance Routing (PfR)<br />
on<br />
<strong>Cisco</strong> ASR 1000 Series<br />
• Client asks NPS to locate<br />
best service<br />
– Proximity based<br />
– <strong>Network</strong>-quality based<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 41
<strong>Cisco</strong> ®<br />
NPS User<br />
<strong>Cisco</strong> NPS User 1<br />
Sends Service<br />
Request<br />
User Not Using<br />
<strong>Cisco</strong> NPS<br />
CPE<br />
Non NPS User accessing<br />
the video service<br />
Choppy video due to<br />
Impairments in path<br />
Based on <strong>Cisco</strong> NPS Algorithm, Ranked<br />
List Is Returned, and DC-1 Is First on<br />
the List<br />
Traffic<br />
Impairment<br />
IP NGN<br />
Good quality Video<br />
Cloud <strong>Cisco</strong> NPS<br />
Capability<br />
Published<br />
UCS<br />
<strong>Cisco</strong> CRS P2<br />
<strong>Cisco</strong> CRS P1<br />
IPSLA Probes<br />
DC1<br />
Capability<br />
Published<br />
UCS<br />
DC2<br />
<strong>Cisco</strong> ASR 1000 Series PE<br />
QFP <strong>Cisco</strong> PfR<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 42
Adaptive cloud services: Served from the best location, based<br />
on programmable factors—innovate and accelerate cloud services<br />
Results:<br />
• This was a demonstration, so no performance or scaling results<br />
• <strong>Cisco</strong> ® NPS demonstrated to choose best data center location based on<br />
network quality<br />
– Latency and jitter measurements through IPSLA and <strong>Cisco</strong> PfR<br />
• <strong>Cisco</strong> NPS demonstrated to choose best location based on data center resources<br />
– CPU/Memory measurements on Video servers in the DCs<br />
Benefits:<br />
• Proximity-based service routing and placement in real time for cloud services<br />
• <strong>Cisco</strong> NPS exposes real-time network intelligence to facilitate optimal services<br />
• Auto-determination of best resource and path using <strong>Cisco</strong> NPS: proximity,<br />
performance, and cost<br />
• NGN and network still relevant for cloud: enables better, more optimized services<br />
• Enables service providers to differentiate from over-the-top cloud providers<br />
• Programmable API can tie into portals, orchestration, and applications<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 43
• Please take a moment to answer the Poll questions in the<br />
Webex Poll window.<br />
Question-1:<br />
What are your plans to deploy IPv6 in the DC or for Cloud<br />
services?<br />
a) Immediately<br />
b) 1-2 years<br />
c) 3+ years<br />
Question-2:<br />
What IPv6 transition mechanisms are currently of most<br />
interest to you?<br />
a) Native IPv6<br />
b) IPv6 Rapid Deployment<br />
c) NAT64<br />
Question-3:<br />
Do you see value in <strong>Network</strong> Positioning System for Cloud<br />
services?<br />
a) Absolutely<br />
b) Somewhat<br />
c) No<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 44
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 45
Cloud<br />
Applications<br />
Video Transcoding with<br />
<strong>Cisco</strong> Transcode<br />
Manager<br />
Multi-format<br />
Video Delivery with<br />
<strong>Cisco</strong> Transcode<br />
Manager<br />
<strong>Cisco</strong> ®<br />
Unified<br />
Data<br />
Center<br />
<strong>Cisco</strong> Cloud<br />
Intelligent<br />
<strong>Network</strong><br />
Cloud<br />
Applications<br />
<strong>Cisco</strong><br />
Videoscape<br />
<strong>Cisco</strong> Videoscape<br />
Managemen witht<br />
<strong>Cisco</strong> Videoscape<br />
Media Suite<br />
VoD Redundancy with<br />
<strong>Cisco</strong> Transcode<br />
Manager<br />
ABR Scalability with<br />
<strong>Cisco</strong> CDS<br />
Internet Streaming<br />
Live Streaming<br />
Redundancy with<br />
<strong>Cisco</strong> Media<br />
Processor<br />
Mobile Video with<br />
<strong>Cisco</strong> ASR 5000<br />
Series and <strong>Cisco</strong> Content<br />
Adaptation Engine<br />
Business<br />
Applications<br />
Collaboration with<br />
<strong>Cisco</strong> Hosted<br />
Collaboration System<br />
Siebel CRM<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 46
Entitlement<br />
CDS Service/Proximity Routing<br />
Managed VOD<br />
Linear/Live TV<br />
MediaSuite<br />
Unified CMS<br />
Unified Content Workflow<br />
<strong>Cisco</strong><br />
Media<br />
Processor<br />
<strong>Cisco</strong><br />
Transcode<br />
Manager<br />
Workflow<br />
Control<br />
Origin<br />
Servers<br />
DRM<br />
Packaging<br />
Video<br />
Web<br />
Portal<br />
Core/Access<br />
Routing and<br />
Caching Tiers<br />
CDE<br />
Appliance<br />
Edge<br />
Routing &<br />
Caching<br />
Tier<br />
ASR9K<br />
with ISM<br />
Cable,<br />
xDSL,<br />
FTTH<br />
Ixia client<br />
simulator,<br />
PC/Mac,<br />
Gaming<br />
console,<br />
Smartphone,<br />
Tablet<br />
Videoscape Home<br />
On the Go<br />
Unmanaged/<br />
OTT content<br />
Content<br />
Adaptation<br />
Engine<br />
CDS Tier<br />
Data Center<br />
ASR5K<br />
Mobile<br />
Video GW<br />
3G/4G<br />
/ WiFi<br />
Smartphone/<br />
Tablet<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 47
Any Content to Any Device, Anywhere, at Scale<br />
Simultaneous Multiple<br />
Streaming Formats.<br />
• <strong>Cisco</strong> Transcode Manager<br />
ingested and transcoded<br />
content into Origin Server<br />
• ABR streams using HLS, SSF,<br />
Flash, WMV formats<br />
• Streaming from CDE 250<br />
appliance, and ISM module on<br />
ASR9000<br />
• 12,000 Video clients<br />
• Upshift, Downshift on the fly<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 48
Single platform for caching and delivering content in<br />
different formats to various screens/devices<br />
Results:<br />
• Verified <strong>Cisco</strong> CDS-IS application can cache & deliver content in the ABR<br />
formats such as Apple HLS & Microsoft SSF, but also on prevalent Flash,<br />
Windows Media formats<br />
• Up/Down shifted video quality by varying bitrates and resolution<br />
• CDS-IS application verified on standalone CDS appliances, and also on the<br />
router blades (ISM module on ASR9k)<br />
Benefits:<br />
• Single platform that can support diverse content formats, enables<br />
delivery of content to a wide range of devices (Tablets, Smartphones,<br />
PC/Mac, etc)<br />
• Enables unified operations and easier troubleshooting/problem isolation<br />
• Conserves valuable network/bandwidth resources due to content<br />
caching<br />
• Capex/Opex savings due to unified hardware/software & caching, and<br />
additional savings when ISM module is used on ASR9k<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 49
A single CDS-IS server can deliver 40 Gbps of Video content,<br />
that can be linearly scaled to millions of streams/subscribers<br />
Results:<br />
• 39.5 Gbps of Video content in ABR format (HLS) from a single CDE-250-<br />
2S6 (2RU) server running CDS-IS application<br />
• 12,000 simultaneous HLS VoD streams, avg 3 Mbps per stream<br />
• Half the 12000 streams cached on CDE, half fetched from Origin server<br />
Benefits:<br />
• Higher scalability enables fewer servers to provide Video services to a<br />
large number of subscribers<br />
• Linear scaling of delivery infrastructure – easily add servers if streaming<br />
requirements increase without requiring any changes to existing equipment<br />
• Significant Capex/Open savings due to fewer number of servers and rack<br />
space required<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 50
Optimize video bit rates and pace the amount of video sent to mobile<br />
clients.<br />
Supporting Video for<br />
devices on the go<br />
• ASR5000 as S-GW, P-GW<br />
and MME<br />
• CAE running on UCS<br />
• Optimization for Mobile<br />
• Pacing of Video<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 51
3G/4G<br />
Known,<br />
Managed<br />
Content<br />
MediaSuite<br />
Managed<br />
ABR Content<br />
ASR5K<br />
Unknown<br />
Video Sources<br />
(Internet OTT)<br />
Content<br />
Adaptation<br />
Engine<br />
DPI<br />
HTTP<br />
Optimization<br />
Mobile<br />
Client<br />
Multi-tier<br />
CDN<br />
Video<br />
Optimization<br />
Traffic<br />
Steering<br />
Mobile Video GW<br />
(GGSN or PDN-GW)<br />
- Video Traffic Steering (DPI) – Steer only video traffic into video solution to reduce load<br />
- Profile Mgt (Policy) – Select optimal video content based on device, user policy and<br />
network<br />
- Video Pacing – Reduce unwatched video downloads<br />
- Real-time Transrating – Reduce video bandwidth in real-time by removing frames on<br />
<strong>Cisco</strong> CAE<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 52
Optimizations such as Video Pacing and Realtime Transrating<br />
enables better Video performance for mobile devices<br />
Results:<br />
• Rich DPI capabilities on ASR5k Mobile Video Gateway to identify Video flows<br />
• Verified Video Transrating capabilities on CAE that provides a<br />
better Quality of Experience for Mobile users – Optimizing <strong>Network</strong> BW<br />
• Verified ASR5000 support for Pacing of Video content for mobile devices –<br />
Saving Bandwidth<br />
Benefits:<br />
• Video Pacing conserves server and network resources leading to lower<br />
Capex/Opex expenses, while improving customer satisfaction<br />
• Transrating of Video content on <strong>Cisco</strong> CAE provides a better viewing<br />
experience based on device type and network congestion<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 53
Cloud<br />
Applications<br />
<strong>Cisco</strong> ®<br />
Unified<br />
Data<br />
Center<br />
<strong>Cisco</strong><br />
Cloud<br />
Intelligent<br />
<strong>Network</strong><br />
<strong>Cisco</strong> Cloud<br />
Enablement<br />
Services<br />
Architect Cloud with Confidence<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 54
• Independent Quantitative validation<br />
of <strong>Cisco</strong> ® cloud Infrastructure<br />
– Data center<br />
– NGN<br />
– Consumer and business applications<br />
• For more information and followups:<br />
– Reach out to your <strong>Cisco</strong> account<br />
managers, SE’s<br />
– Visit<br />
http://www.cisco.com/go/cloudmegatest<br />
C97-705867-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. <strong>Cisco</strong> Confidential 55
Thank you.