Unlocking the Cloud Operating Model: Networking in Multi-Cloud

1. © 2018 HashiCorp 1
Consul
Cloud Networking Automation

2. About HashiCorp
Leading Cloud Infrastructure Automation
Founded
2012
Employees
600
Funding
174M
Our software stack enables the provisioning, securing, connecting
and running of apps and the infrastructure to support them.
We unlock the cloud operating model for every business and
enable their digital transformation strategies to succeed.

3. From 2018 Cost of a Data Breach Study: Global Overview from
IBM Security and Ponemon Institute*
https://zkresearch.com/research/2017-application-delivery-cont
roller-study/

4. Networking in a datacenter was easy...
● Monolithic applications with long-lived IPs
● Well defined north-south traffic path
● Traditional perimeter based network security
But what happens when you move to clouds and have
modular applications and services with dynamic IPs?

5. The effects of digital transformation

6. Reimagining the stack
The implications of the Cloud Operating Model
Run
Development
Dedicated
Infrastructure
Scheduled across the fleet
Connect
Networking
Host-based
Static IP
Service-based
Dynamic IP
Secure
Security
High trust
IP-based
Low trust
Identity-based
Provision
Operations
Dedicated servers
Homogeneous
Capacity on-demand
Heterogeneous
STATIC DYNAMIC

7. The Cloud Landscape
In search of a common model across multi-cloud environments
Run
Development
Connect
Networking
Secure
Security
Provision
Operations
DEDICATED
PRIVATE
CLOUD
vSphere
Hardware
IP:
Hardware
vCenter
vSphere
Various
Hardware
Identity:
AD/LDAP
Terraform
EKS / ECS
Lambda
CloudMap/
AppMesh
Identity:
AWS IAM
Cloud
Formation
AKS / ACS
Azure Functions
Proprietary
Identity:
Azure AD
Resource
Manager
GKE Cloud
Functions
Proprietary
Identity:
GCP IAM
Cloud
Deployment
Manager
AWS AZURE GCP

8. The Shift from Static to Dynamic Networking
● Modular services with dynamic IPs, running on bare metals, VMs, containers...
● 85% of volume from complex east-west traffic*
● No clear network perimeters

9. Consul
Provides a foundation of cloud network automation using a central service
registry for service based networking
50k+
Used at scale with
50k+ agents
1M+
Monthly D/Ls
Service registry & health monitoring to provide a
real-time directory of all services with their health status
Network middleware automation with service
discovery for dynamic reconfiguration as services scale
up, down or move
Zero trust network with service mesh to secure
service-to-service traffic with identity-based security
policies and encrypted traffic with Mutual-TLS
Trusted by:

10. © 2018 HashiCorp
Service-Based
Networking
10
● Allow networking operations to
decouple from IP addresses
● Automated networking and security
based on logical services
● Services can be discovered,
connected and secured with service
name as identity.

12. © 2018 HashiCorp
ORGANIZATIONAL COMPLEXITY
Consul
Adoption
Customers adopts Consul
following a maturity model that
allows them to realize value
immediately, run in production
safely and scale confidently
Adoption
OSS Enterprise
Production
Scale
Advance
12
Secrets, identity,
and policy management
Collaboration & Operations
Secrets, identity,
and policy management
Global Visibility, Routing & Scale
Service Registry & Health Monitoring
Network Middleware Automation
Zero Trust Network with Service Mesh
Governance & Policies
(Coming Soon)

13. © 2018 HashiCorpUSING CONSUL IN DYNAMIC INFRASTRUCTURE 13
Service
Registry and
Health
Monitoring
● Improved resiliency with visibility into running
services and their health status.

14. © 2018 HashiCorpUSING CONSUL IN DYNAMIC INFRASTRUCTURE 14
Network
Middleware
Automation
● Improved productivity by automating the
networking operation with existing networking
infrastructure
● Reduced cost by eliminating the need for
east-west network middleware

15. © 2018 HashiCorp 15
Zero Trust Network
with Service Mesh
● Reduced Risk with consistent end-to-end security
enforced to services across a heterogeneous
environment
USING CONSUL IN DYNAMIC INFRASTRUCTURE

16. © 2018 HashiCorpCONSUL ECOSYSTEM
Single Control
Plane for cloud
networks
● Automate and control the data plane with central
service registry
● Unified support across heterogeneous
environment
● Simplified operation with single workflow

17. © 2018 HashiCorpCONSUL ECOSYSTEM
Broad
Ecosystem
OSS and Enterprise Integrations

18. © 2018 HashiCorpOPEN SOURCE AND ENTERPRISE
Consul
Packages
Consul Enterprise adds
operations, governance, and
scalability features for teams
and organizations
18
ORGANIZATIONAL COMPLEXITY

19. A Common Cloud Operating Model
App
App
Run
Provision
Connect
Secure
Compliance&Governance