© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA
Enable the Cloud for Everyone, Everywhere
DevOps Webinar
Dec 2020
Pranav Dharwadkar
VP Products
@pranavdh01
Jakub Pavlik
Director Engineering
@JakubPav
Deliver your App Anywhere …
Publicly or Privately
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 2
Developers Adopting New Approaches to Deliver New Services Faster
HYBRID / MULTI-CLOUD
MICROSERVICES
HYBRID CLOUD
MONOLITHIC
SW RELEASE CONTINUOUS
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 3
Delivering an App Stuck in an Operational Nightmare of Multiple Point Products and Service Tickets
NETWORK / IT DEVOPS
Router Network
Firewall
Front
Loadbalancer
Front-Door
DDOS
App
Firewall
Ingress
Controller
App Mgmt -
K8s / VM
User
DEVELOPER
Overflow of
Support Tickets
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 4
...Negating all the Efficiencies Gained by Adopting Modern App Approaches
DEVELOPERNETWORK / IT DEVOPS
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 5
Let’s take an example...How long typically does it take to deliver an app publicly?
Router Network
Firewall
Front
Loadbalancer
Front-Door
DDOS
App
Firewall
Ingress
Controller
App Mgmt -
K8s / VM
User
1
~ 2
days
4 2
~ 2-3
days
5
~1-2
weeks
3
~ 1-2
weeks
~ 1-2
weeks
~ 1-2
weeks
~ 2-3
weeks
67
~ 7-12
weeks
Total
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 6
Let’s take an example...How long typically does it take to deliver an app privately?
Router Network
Firewall
Front
Loadbalancer
VPN App
Firewall
Ingress
Controller
App Mgmt -
K8s / VM
Private
Link
1
~ 2
days
4 2
~ 2-3
days
5
~1-2
weeks
3
~ 1-2
weeks
~ 1-2
weeks
~ 1-2
weeks
~ 1-2
weeks
67
~ 9-15
weeks
Total8
~ 3-4
weeks
Internet
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 7
A New Approach is required for Modern Apps - Distributed Cloud Services
Distributed Cloud ApproachProblems with current products
Integrated StackMultiple Point Products
Distributed Fleet Operations approach -
Control Plane based mgmt
Appliance mgmt model -
Each instance managed individually
SaaS based Operations with full lifecycle mgmtOperationally complex, manual upgrades
Single observability portalMultiple panes of glass
Deployable in thousands of clusters across
premise, cloud, network & edge
Large size not fit for deploying in
multiple locations
API GW
APP FW
Loadbalancer
Firewall
Networking
DDOS
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 8
Delivering a Modern App, Publicly, using Distributed Cloud approach
Users
Discover
apps
1
2
2
Control Plane to distribute
app reachability and app
health
3
Advertise app publicly
on anycast VIP
4
Distribute Specific Cloud Services
closer to the user (e.g., DDOS, FW,
SSL offload, LB, WAF)
1
3
4
5
5
Persistent connection
to origin endpoint
Control Plane
Data Plane
Global Network with
multiple POP Sites
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 9
Delivering a Modern App, Privately, using Distributed Cloud approach
Discover
apps
1
2
2
Control Plane to distribute
app reachability and app
health
3
Advertise app privately
on specific sites
4
Distribute Cloud Services at
specific sites (e.g., LB, WAF)
1
4
5
5
Completely private data
plane across sites, not
exposed to internet
Control Plane
Data Plane
3
Global Network Private
Connectivity to DC &
Clouds in all regions
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 10
Operational Benefit of Distributed Cloud Approach - Customer case study
Current
Approach
Distributed
Cloud Approach
Deliver new services faster 3 new services / yr
11 new services /
yr ~$7M/yr
Reduced Operational
Expense from a Consistent
operational model
25
(15 QA+10-Devops)
5
(2 QA+3 Devops) ~$5M /yr
Reduced operational
expense from faster
troubleshooting,
self-service, one-click
deployment
~300 mins /
incident
~15mins /
incident ~$1M/yr
Business
Value
NETWORK / IT
DEVOPS
~ 7-12
weeks
~ hours
- days
Source: Case Study done using West Coast based Tech Company on their recent adoption of cloud agnostic approach
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA
Enable the Cloud for Everyone, Everywhere
Demonstration
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA
Redis
Service
Mysql DB
Wordpress topology in Private DC Vanilla Kubernetes cluster
cluster-xxx
Wordpress
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 13
It took 8 weeks to configure 7 different point products
Router Network
Firewall
Front
Loadbalancer
Front-Door
DDOS
App
Firewall
Ingress
Controller
App Mgmt -
K8s / VM
User
1
~ 2
days
4 2
~ 2-3
days
5
~ 1-2
weeks
3
~ 1-2
weeks
~ 1-2
weeks
~ 1-2
weeks
~ 2-3
weeks
67
~ 7-12
weeks
Total
Router Fortigate F5 (or Nginx)CloudFlare PAN or Nginx
or Fortigate
Nginx ESXI/
KVM
Rancher/
Kubeadm
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 14
Distributed Cloud approach only took me 5 minutes to advertise app publicly
Users
Discover
apps
1
2
2
Control Plane to distribute
app reachability and app
health
3
Advertise app publicly on
anycast VIP
4
SSL Offload, WAF configured
on N/W Edge
1
3
4
Control Plane
Data Plane
Global Network with
multiple POP Sites
~ 5
mins
~ 5
mins
~ 5
mins
~ 15
mins
~ 0
secs
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 15
And troubleshooting is nightmare because of 7 disjointed mgmt portals
Router Network
Firewall
Front
Loadbalancer
Front-Door
DDOS
App
Firewall
Ingress
Controller
App Mgmt -
K8s / VM
User
1
~ 15-30
mins
4 2
~ 15-30
mins
5
~30 - 60
mins
3
~ 30-60
mins
~ 30-60
mins
~ 30-60
mins
~ 30-60
mins
67
~ 3-6
hours
Total
Router Fortigate F5 (or Nginx)CloudFlare PAN or Nginx
or Fortigate
Nginx ESXI/
KVM
Rancher/
Kubeadm
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 16
Troubleshooting was quick because of integrated single pane of glass with alerts & integrations
Users
App
Discovery
1
2
4
Troubleshooting for network firewall,
WAF, Loadbalancing
1
3
4
Global Network with
multiple POP Sites
~ 5
mins
~ 5-10
mins
5
Latency Troubleshooting
to Origin Endpoint
~ 5-10
mins
~ 15-25
mins
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 17
Distributed Cloud approach only took me 15 minutes to advertise app privately
Discover
apps
1
2
3
Advertise app privately
on specific sites
4
Distribute Cloud Services at specific
sites (e.g., LB, WAF)
1
4
5
Control Plane
Data Plane
3
Global Network with
multiple POP Sites
~ 5
mins
~ 5
mins
~ 5
mins
~ 15
mins
2
Control Plane to distribute
app reachability and app
health
~ 0
secs
© 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA
Enable the Cloud for Everyone, Everywhere
Q&A

Deliver your App Anywhere … Publicly or Privately

  • 1.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA Enable the Cloud for Everyone, Everywhere DevOps Webinar Dec 2020 Pranav Dharwadkar VP Products @pranavdh01 Jakub Pavlik Director Engineering @JakubPav Deliver your App Anywhere … Publicly or Privately
  • 2.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 2 Developers Adopting New Approaches to Deliver New Services Faster HYBRID / MULTI-CLOUD MICROSERVICES HYBRID CLOUD MONOLITHIC SW RELEASE CONTINUOUS
  • 3.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 3 Delivering an App Stuck in an Operational Nightmare of Multiple Point Products and Service Tickets NETWORK / IT DEVOPS Router Network Firewall Front Loadbalancer Front-Door DDOS App Firewall Ingress Controller App Mgmt - K8s / VM User DEVELOPER Overflow of Support Tickets
  • 4.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 4 ...Negating all the Efficiencies Gained by Adopting Modern App Approaches DEVELOPERNETWORK / IT DEVOPS
  • 5.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 5 Let’s take an example...How long typically does it take to deliver an app publicly? Router Network Firewall Front Loadbalancer Front-Door DDOS App Firewall Ingress Controller App Mgmt - K8s / VM User 1 ~ 2 days 4 2 ~ 2-3 days 5 ~1-2 weeks 3 ~ 1-2 weeks ~ 1-2 weeks ~ 1-2 weeks ~ 2-3 weeks 67 ~ 7-12 weeks Total
  • 6.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 6 Let’s take an example...How long typically does it take to deliver an app privately? Router Network Firewall Front Loadbalancer VPN App Firewall Ingress Controller App Mgmt - K8s / VM Private Link 1 ~ 2 days 4 2 ~ 2-3 days 5 ~1-2 weeks 3 ~ 1-2 weeks ~ 1-2 weeks ~ 1-2 weeks ~ 1-2 weeks 67 ~ 9-15 weeks Total8 ~ 3-4 weeks Internet
  • 7.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 7 A New Approach is required for Modern Apps - Distributed Cloud Services Distributed Cloud ApproachProblems with current products Integrated StackMultiple Point Products Distributed Fleet Operations approach - Control Plane based mgmt Appliance mgmt model - Each instance managed individually SaaS based Operations with full lifecycle mgmtOperationally complex, manual upgrades Single observability portalMultiple panes of glass Deployable in thousands of clusters across premise, cloud, network & edge Large size not fit for deploying in multiple locations API GW APP FW Loadbalancer Firewall Networking DDOS
  • 8.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 8 Delivering a Modern App, Publicly, using Distributed Cloud approach Users Discover apps 1 2 2 Control Plane to distribute app reachability and app health 3 Advertise app publicly on anycast VIP 4 Distribute Specific Cloud Services closer to the user (e.g., DDOS, FW, SSL offload, LB, WAF) 1 3 4 5 5 Persistent connection to origin endpoint Control Plane Data Plane Global Network with multiple POP Sites
  • 9.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 9 Delivering a Modern App, Privately, using Distributed Cloud approach Discover apps 1 2 2 Control Plane to distribute app reachability and app health 3 Advertise app privately on specific sites 4 Distribute Cloud Services at specific sites (e.g., LB, WAF) 1 4 5 5 Completely private data plane across sites, not exposed to internet Control Plane Data Plane 3 Global Network Private Connectivity to DC & Clouds in all regions
  • 10.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 10 Operational Benefit of Distributed Cloud Approach - Customer case study Current Approach Distributed Cloud Approach Deliver new services faster 3 new services / yr 11 new services / yr ~$7M/yr Reduced Operational Expense from a Consistent operational model 25 (15 QA+10-Devops) 5 (2 QA+3 Devops) ~$5M /yr Reduced operational expense from faster troubleshooting, self-service, one-click deployment ~300 mins / incident ~15mins / incident ~$1M/yr Business Value NETWORK / IT DEVOPS ~ 7-12 weeks ~ hours - days Source: Case Study done using West Coast based Tech Company on their recent adoption of cloud agnostic approach
  • 11.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA Enable the Cloud for Everyone, Everywhere Demonstration
  • 12.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA Redis Service Mysql DB Wordpress topology in Private DC Vanilla Kubernetes cluster cluster-xxx Wordpress
  • 13.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 13 It took 8 weeks to configure 7 different point products Router Network Firewall Front Loadbalancer Front-Door DDOS App Firewall Ingress Controller App Mgmt - K8s / VM User 1 ~ 2 days 4 2 ~ 2-3 days 5 ~ 1-2 weeks 3 ~ 1-2 weeks ~ 1-2 weeks ~ 1-2 weeks ~ 2-3 weeks 67 ~ 7-12 weeks Total Router Fortigate F5 (or Nginx)CloudFlare PAN or Nginx or Fortigate Nginx ESXI/ KVM Rancher/ Kubeadm
  • 14.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 14 Distributed Cloud approach only took me 5 minutes to advertise app publicly Users Discover apps 1 2 2 Control Plane to distribute app reachability and app health 3 Advertise app publicly on anycast VIP 4 SSL Offload, WAF configured on N/W Edge 1 3 4 Control Plane Data Plane Global Network with multiple POP Sites ~ 5 mins ~ 5 mins ~ 5 mins ~ 15 mins ~ 0 secs
  • 15.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 15 And troubleshooting is nightmare because of 7 disjointed mgmt portals Router Network Firewall Front Loadbalancer Front-Door DDOS App Firewall Ingress Controller App Mgmt - K8s / VM User 1 ~ 15-30 mins 4 2 ~ 15-30 mins 5 ~30 - 60 mins 3 ~ 30-60 mins ~ 30-60 mins ~ 30-60 mins ~ 30-60 mins 67 ~ 3-6 hours Total Router Fortigate F5 (or Nginx)CloudFlare PAN or Nginx or Fortigate Nginx ESXI/ KVM Rancher/ Kubeadm
  • 16.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 16 Troubleshooting was quick because of integrated single pane of glass with alerts & integrations Users App Discovery 1 2 4 Troubleshooting for network firewall, WAF, Loadbalancing 1 3 4 Global Network with multiple POP Sites ~ 5 mins ~ 5-10 mins 5 Latency Troubleshooting to Origin Endpoint ~ 5-10 mins ~ 15-25 mins
  • 17.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 17 Distributed Cloud approach only took me 15 minutes to advertise app privately Discover apps 1 2 3 Advertise app privately on specific sites 4 Distribute Cloud Services at specific sites (e.g., LB, WAF) 1 4 5 Control Plane Data Plane 3 Global Network with multiple POP Sites ~ 5 mins ~ 5 mins ~ 5 mins ~ 15 mins 2 Control Plane to distribute app reachability and app health ~ 0 secs
  • 18.
    © 2019 VolterraInc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA Enable the Cloud for Everyone, Everywhere Q&A