Watch on-demand here https://info.avinetworks.com/webinars/load-balancer-upgrade-disruptions Upgrading load balancers has always been time-consuming. Maintenance windows need to be carefully planned weeks in advance to minimize impact to operations. What if you could schedule non-disruptive, per-tenant patches without requiring the entire load balancing fabric to upgrade? In this webinar, we will talk about separate control and data plane updates, and pointed partial service engine (SE) upgrades / patches enabled by software-defined architectures. This is impossible with hardware appliances that have to upgrade as a whole. The following use cases will be covered: - Sandbox upgrades with functional validation prior to 100% rollout - Partial upgrades on the SE group level without impacting others - CI/CD pipeline with self-service and canary upgrades

1. Confidential │ ©2019 VMware, Inc.
Eliminate Load Balancer
Upgrade Disruptions
Avi Tech Corner: Episode 10
Matt Karnowski
Product Line Manager
Avi Networks, Now part of VMware
Lei Yang
Sr. Manager, Product Marketing

2. Confidential │ ©2019 VMware, Inc.
Agenda
2
Current Challenges with Upgrades
Avi Architecture
Flexible Upgrades
Use Cases
Demo
Q&A

3. Confidential │ ©2019 VMware, Inc. 3
Current Challenges
Everybody needs to get onto the bus!
Upgrade ALL
Validate ALL
Rollback ALL
Need to boil the ocean
for a simple fix for a
single application
Nightmare to coordinate
and cancellation is
common
All or Nothing
No Targeted
Upgrades
Approval
& Scheduling

4. Confidential │ ©2019 VMware, Inc. 4
Segmentation
Per-tenant
Per-app
Per-SE group
Smaller scale & isolated impact
Faster resolution or rollback
The New World
What if you could redesign?
Granular Upgrades Selective Upgrades Simplified Upgrades
Control Plane
Data Plane
IMPOSSIBLE with legacy appliances to have flexible
upgrades!
1. Tightly coupled control plane and data plane “in a box”
2. Active / standby pair – complex upgrade procedures
3. No segmentation

5. Confidential │ ©2019 VMware, Inc. 5
BARE METAL VIRTUALIZED CONTAINERSON PREMISES PUBLIC CLOUDVIRTUALIZED CONTAINERS
Modern, Scalable, Multi-Cloud Architecture
CONTROLLER
SERVICE
ENGINE
SEPARATE CONTROL
& DATA PLANE
ELASTICITY
INTELLIGENCE AUTOMATIONMULTI-CLOUD

6. Confidential │ ©2019 VMware, Inc. 6
Service Engine Group (SE Group) - logical grouping of Service Engines based upon
cloud environment, resource sizing and HA model. (data plane)
• Application / Product Offering
• Tenant
• Prod / Preprod / Dev
• Environment (AWS, VMware etc)
• Blue / Green
Designing Data Plane Separation
Segmentation

7. Confidential │ ©2019 VMware, Inc. 7
Separated control plane upgrades from data plane upgrades; allows for granular,
pointed upgrades to the desired assets only excluding all others from “change”.
• Upgrade Control Plane independent from Data Plane
• Upgrade individual SE Groups (segmentation)
What it is
Avi Flexible Upgrades

8. Confidential │ ©2019 VMware, Inc. 8
Appliance-based model
- control / data plane tightly coupled
- why is that a bad idea?
Controller Based Architecture
- If failure happens, on a smaller scale and faster as it’s more granular (quicker resolution and
faster rollback)
- new features (eg. Upgrade controller with the features, push to only the selected SEs associated
with that apps)
- fix bugs (eg. You can upgrade the controller without impacting the data plane at all – non-
disruptive, headless operations, no failover needed)
Architecturally Dependent
“What if” Does Exist

9. Confidential │ ©2019 VMware, Inc. 9
Use Cases
Se group X Se group Y
Se group Z
Tenant 1 Tenant 2
V 1
V 1 V 1
V 1
V 2
V 2
V 2
• Sandbox Upgrades
– Upgrade an Se group, validate prior to upgrade remaining
• Introduce new features or patches only for the Apps that need
them
– Meet application demands without impact to others
• Canary Upgrades
– Continue/rollback upgrades based upon analytics engine data
• Flexible Upgrade scheduling
• Self Service Upgrades
• Sandbox Upgrades
– Upgrade an Se group, validate prior to upgrade remaining
• Introduce new features or patches only for the Apps that
need them
– Meet application demands without impact to others
• Canary Upgrades
– Continue/rollback upgrades based upon analytics engine data
• Flexible Upgrade scheduling
• Self Service Upgrades
• Sandbox Upgrades
– Upgrade an Se group, validate prior to upgrade remaining
• Introduce new features or patches only for the Apps that need
them
– Meet application demands without impact to others
• Canary Upgrades
– Continue/rollback upgrades based upon analytics engine data
• Flexible Upgrade scheduling
• Self Service Upgrades

10. 10Confidential │ ©2019 VMware, Inc.
Demo
Upgrading an individual
SE-Group
Default-Group
VIRTUALIZED CONTAINERS
CONTROLLER
SERVICE ENGINE GROUP
seg-prod
VIRTUALIZED CONTAINERS
SERVICE ENGINE GROUP

11. Confidential │ ©2019 VMware, Inc. 11
See You at VMworld (Aug 25-29)
Avi Networks
BOOTH # 2027
VMware
Demo Pod
Tom Gillis' Keynote
Avi Sessions
• McAfee @ Modern Load Balancing
101 [CNET3671BU]
• USAA @ Consistent Load Balancing for
Multi-Cloud Environments
[CNET3674BU]
• Deep Automation and Self-service for
Application Delivery [CNET3672BU]
• Analytics-driven Application Security and
Web Application Firewall [SAI3673BU]
Multiple NSX & EUC Sessions
• NSX-T Deep Dive: Load Balancing
[CNET1356BU]
• Extend Your Network and Security to AWS,
Azure, and IBM Cloud [CNET1582BU]
• The Latest and Greatest with VMware Blast
Extreme [ADV1581BU]
• Unified Access Gateway: Securing Virtual
Desktop and App Access [ADV1798BU]

12. Confidential │ ©2019 VMware, Inc.
Thank You