Cisco Connect Vancouver 2017 - So you want to go to the cloud! Simplifying cloud adoption with Cisco UCS!

1. © 2016 Cisco and/or its affiliates. All rights reserved. 1
Cisco
Connect
Simplifying Cloud
Adoption with Cisco
Ronnie Scott
16-Nov-2017

2. 2© 2016 Cisco and/or its affiliates. All rights reserved.
The World of Many Clouds

3. © 2016 Cisco and/or its affiliates. All rights reserved. 3
The World of Many Clouds
Private Cloud
SDN Controller
Automation / Orchestration
Data Center 1
Leaf Leaf Leaf
Spine Spine Spine Spine
Border Border
Data Center 2
Spine Spine Spine Spine
Leaf Leaf Leaf Border Border
Data Center Interconnect

4. © 2016 Cisco and/or its affiliates. All rights reserved. 5
Presentation ID
Cloud computing is a model for enabling ubiquitous,
convenient, on-demand network access to a shared pool of
configurable computing resources (e.g., networks, servers,
storage, applications, and services) that can be rapidly
provisioned and released with minimal management effort or
service provider interaction.
NIST Cloud Computing Definition

5. © 2016 Cisco and/or its affiliates. All rights reserved. 6
Presentation ID
Cloud computing is a model for enabling ubiquitous,
convenient, on-demand network access to a shared pool of
configurable computing resources (e.g., networks, servers,
storage, applications, and services) that can be rapidly
provisioned and released with minimal management effort or
service provider interaction.
NIST Cloud Computing Definition

6. © 2016 Cisco and/or its affiliates. All rights reserved. 7
Presentation ID
Cloud computing is a model for enabling ubiquitous,
convenient, on-demand network access to a shared pool of
configurable computing resources (e.g., networks, servers,
storage, applications, and services) that can be rapidly
provisioned and released with minimal management effort or
service provider interaction.
NIST Cloud Computing Definition

7. © 2016 Cisco and/or its affiliates. All rights reserved. 8
Presentation ID
Cloud computing is a model for enabling ubiquitous,
convenient, on-demand network access to a shared pool of
configurable computing resources (e.g., networks, servers,
storage, applications, and services) that can be rapidly
provisioned and released with minimal management effort or
service provider interaction.
NIST Cloud Computing Definition

8. © 2016 Cisco and/or its affiliates. All rights reserved. 9
Presentation ID
Cloud computing is a model for enabling ubiquitous,
convenient, on-demand network access to a (e.g., networks,
servers, storage, applications, anshared pool of configurable
computing resourcesd services) that can be rapidly
provisioned and released with minimal management effort or
service provider interaction.
NIST Cloud Computing Definition

9. © 2016 Cisco and/or its affiliates. All rights reserved. 10
Presentation ID
Cloud computing is a model for enabling ubiquitous,
convenient, on-demand network access to a shared pool of
configurable computing resources (e.g., networks, servers,
storage, applications, and services) that can be rapidly
provisioned and released with minimal management effort or
service provider interaction.
NIST Cloud Computing Definition

10. © 2016 Cisco and/or its affiliates. All rights reserved. 11
Presentation ID
Cloud computing is a model for enabling ubiquitous,
convenient, on-demand network access to a shared pool of
configurable computing resources (e.g., networks, servers,
storage, applications, and services) that can be rapidly
provisioned and released with minimal management effort or
service provider interaction.
NIST Cloud Computing Definition

11. © 2016 Cisco and/or its affiliates. All rights reserved. 12
The Cost Benefits
HW/SW Costs
Licencing
Costs
Maintenance
Costs
Environmental
Costs
Support Costs

12. © 2016 Cisco and/or its affiliates. All rights reserved. 1313Presentation ID
Low Utilization Costs Money
0
2
4
6
8
10
12
5 10 15 20 25 30 35 40 45 50
Public
Private
Legacy

13. © 2016 Cisco and/or its affiliates. All rights reserved. 1414Presentation ID
So Do Value-Added Cloud Services
0
2
4
6
8
10
12
14
16
5 10 15 20 25 30 35 40 45 50
Public
Private
Legacy
Redundant
Gauranteed

14. © 2016 Cisco and/or its affiliates. All rights reserved. 1515Presentation ID
Reduced Complexity = Increased Return
SaaS
• No Infrastructure
• No Management
• No Helpdesk
• Universal Access

15. © 2016 Cisco and/or its affiliates. All rights reserved. 1616Presentation ID
Reduced Complexity = Reduced Control
SaaS
• Who Owns Your Data?
• What Customization Is Available?
• How Much Help Is Their Helpdesk?
• What Security Do They Offer?
• Can You Repatriate Data?
• What Is Their SLA?

16. © 2016 Cisco and/or its affiliates. All rights reserved. 1717Presentation ID
Account Sprawl
ITFinance
HR
Procurement
Sales
Manufacturing

17. © 2016 Cisco and/or its affiliates. All rights reserved. 1818Presentation ID
Utilise Existing Resources
• Idle Resources Are Cheaper Than Any
Cloud

18. 19© 2016 Cisco and/or its affiliates. All rights reserved.
Building the Private Cloud

19. © 2016 Cisco and/or its affiliates. All rights reserved. 21
Presentation ID
Build The Foundation
Private Cloud
Element ManagerData Center 1
Leaf Leaf Leaf
Spine Spine Spine Spine
Border Border
Data Center 2
Spine Spine Spine Spine
Leaf Leaf Leaf Border Border
Data Center Interconnect

20. © 2016 Cisco and/or its affiliates. All rights reserved. 22
“How do I automate and orchestrate the network?”

21. © 2016 Cisco and/or its affiliates. All rights reserved. 23
Automation

22. © 2016 Cisco and/or its affiliates. All rights reserved. 24
Orchestration

23. © 2016 Cisco and/or its affiliates. All rights reserved. 27
Subject Matter Experts
Define Policies
1
UCS: Embedded Automation
Integrated, Policy-Based Infrastructure Management
Policies Create
Service Profile Templates
Clone Templates to
Create Service Profiles
Associate Service Profiles
to Configure Hardware
Uplink port configuration,
VLAN, VSAN, QoS, and
EtherChannels
Server port configuration
including LAN and SAN settings
Network interface card (NIC)
configuration: MAC address,
VLAN, and QoS settings;
host bus adapter HBA configuration:
worldwide names (WWNs), VSANs,
and bandwidth constraints;
and firmware revisions
Unique user ID (UUID),
firmware revisions,
and RAID controller settings
Service profile assigned to server,
chassis slot, or pool
Uplink port configuration, VLAN,
VSAN, QoS, and EtherChannels
Server port configuration including
LAN and SAN settings
Network interface card (NIC)
configuration: MAC address,
VLAN, and QoS settings;
host bus adapter HBA configuration:
worldwide names (WWNs), VSANs,
and bandwidth constraints;
and firmware revisions
Unique user ID (UUID),
firmware revisions,
and RAID controller settings
Service profile assigned to server,
chassis slot, or pool
Uplink port configuration, VLAN,
VSAN, QoS, and EtherChannels
Server port configuration including
LAN and SAN settings
Network interface card (NIC)
configuration: MAC address,
VLAN, and QoS settings;
host bus adapter HBA configuration:
worldwide names (WWNs), VSANs,
and bandwidth constraints;
and firmware revisions
Unique user ID (UUID),
firmware revisions,
and RAID controller settings
Service profile assigned to server,
chassis slot, or pool
Uplink port configuration, VLAN,
VSAN, QoS, and EtherChannels
Server port configuration including
LAN and SAN settings
Network interface card (NIC)
configuration: MAC address,
VLAN, and QoS settings;
host bus adapter HBA configuration:
worldwide names (WWNs), VSANs,
and bandwidth constraints;
and firmware revisions
Unique user ID (UUID),
firmware revisions,
and RAID controller settings
Service profile assigned to server,
chassis slot, or pool
Uplink port configuration, VLAN,
VSAN, QoS, and EtherChannels
Server port configuration including
LAN and SAN settings
Network interface card (NIC)
configuration: MAC address,
VLAN, and QoS settings;
host bus adapter HBA configuration:
worldwide names (WWNs), VSANs,
and bandwidth constraints;
and firmware revisions
Unique user ID (UUID),
firmware revisions,
and RAID controller settings
Service profile assigned to server,
chassis slot, or pool
2 3 4
Network
SME
Server
SME
Storage
SME

24. © 2016 Cisco and/or its affiliates. All rights reserved. 29
APIC
Software Defined Networks –ACI
ADC
APP DBF/W
ADC
WEB
HYPERVISORHYPERVISOR HYPERVISOR

25. © 2016 Cisco and/or its affiliates. All rights reserved. 3030
Automate and Orchestrate - UCS Director
Policy-Driven
Provisioning
VMsComputeNetwork Storage
Tenant
B
Tenant
C
Tenant
A
Virtualized and Bare-Metal
Physical Compute
B CA
Network and Services
VM VM Bare
Metal
BRKPCA-2020

26. © 2016 Cisco and/or its affiliates. All rights reserved. 31
Private Cloud
Element ManagerSDN Controller
Automation / Orchestration
Deliver a Cloud Experience
Data Center 1
Leaf Leaf Leaf
Spine Spine Spine Spine
Border Border
Data Center 2
Spine Spine Spine Spine
Leaf Leaf Leaf Border Border
Data Center Interconnect

27. © 2016 Cisco and/or its affiliates. All rights reserved. 32
TCP: *,443
C
C
C
Provisioning
Automation
Self-Service
Catalog
Application-Centric Infrastructure
Self-Describing Packaging Manageability Fault-Tolerant Self-Optimizing
Application Developers Cloud Orchestration DC Resources
Automation
Packs
C
C
C
C
C
DEPLOYCLICKMODEL
WEB APP

28. 33© 2016 Cisco and/or its affiliates. All rights reserved.
Consuming the "Right" Cloud

29. © 2016 Cisco and/or its affiliates. All rights reserved. 34
Cost Security DRAvailabilityTimeliness
Scalability Performance RepatriationComplianceSupport
Defining Application Priorities

30. 35© 2016 Cisco and/or its affiliates. All rights reserved.
Cisco's Cloud Tools

31. © 2016 Cisco and/or its affiliates. All rights reserved. 3636Presentation ID
Defining Application Linkages
• Application Team Knowledge
• Network Analysis
Tetration
• Cloud Management Tools
Cisco Cloud Center

32. © 2016 Cisco and/or its affiliates. All rights reserved. 3737Presentation ID
Define Network Relationships

33. © 2016 Cisco and/or its affiliates. All rights reserved. 38
Security
Dependencies
Application
Service Offering
Service
Service Category
(Service Owner)
Create Application Dependency Map – Tetration
Use Cisco
Tetration Analytics™
outcome to generate
white-list policies

34. © 2016 Cisco and/or its affiliates. All rights reserved. 39
Infrastructure-Centric
Cloud-Specific
workflows and Scripts
Labor /Services
Intensive
Unique
Script /
Workflow
Application-Centric
Cloud-Agnostic
Low TCO
Unique
Script /
Workflow
Unique
Script /
Workflow
Script-Based Application Profile-Based
Create Application Profiles – CloudCenter

35. © 2016 Cisco and/or its affiliates. All rights reserved. 40
Create Application Profiles – CloudCenter
Data
Center
DEPLOY
MANAGE
MODEL
Public
Cloud
Private
Cloud
One Integrated
Platform
Lifecycle
Management
New and Existing
Applications

36. © 2016 Cisco and/or its affiliates. All rights reserved. 41
Reduce to to value
to provision VM or Application
Enable governance on policies and
sharing across business units
Control application development
costs across SDLC
Cisco Services for CloudCenter
CloudCenter
Deployment
Configure
CloudCenter
Model Application
Profile
Analyze
Environment
Readiness
Configure
Governance
& Policy
Deploy and
Validate

37. © 2016 Cisco and/or its affiliates. All rights reserved. 42
Cloud Based Network Function Virtualization
• CSR 1000v
• ASAv
• NGFWv
• Meraki vMX100
• ACI Anywhere

38. 43© 2016 Cisco and/or its affiliates. All rights reserved.
Performance Validation

39. © 2016 Cisco and/or its affiliates. All rights reserved. 44
www
User Applications Code Infrastructure
AppDynamics: End-to-End Application Intelligence
AppDynamics
Fast Time To Value
Automated map and correlation
Unified Visibility
EUM, APM, Infrastructure
Contextual & Actionable
Business Transactions

40. © 2016 Cisco and/or its affiliates. All rights reserved. 45
AppDynamics: Highly Correlated Data Model
The Business Transaction Enables Unifying and Strategic Context
“Before AppDynamics, we
were paramedics, but with
AppDynamics we are brain
surgeons.”
Server
User
Session
Network
Database
App
Code
Business Transaction
Business
Metrics
INFRA
Infrastructure
Visibility
EUM
End User
Monitoring
APM
Application
Performance
Management

41. © 2016 Cisco and/or its affiliates. All rights reserved. 46
Cisco Workload Optimization
Manager
Automated Decision Engine determines
workload placement and scaling by matching
resource demands to available supply.
• Deploys in <20 minutes
• Performance analysis in 1 hour
• Full demand profile in 72 hours

42. © 2016 Cisco and/or its affiliates. All rights reserved. 47
Automatable Upsizing
Continuous VM resource monitor
Add CPU or Memory to running VM
– no reboot or downtime required
Targeted Rightsizing
Track historical VM resource utilization
Reduce CPU or Memory allocated to a VM
– during maintenance downtime
Fundamental Capabilities: Scaling

43. © 2016 Cisco and/or its affiliates. All rights reserved. 48
Data Center
Moves workloads, assures
performance, increases density
Placements abide by business or
license constraints.
Cloud
Placement in public cloud based on best
cost, while assuring performance.
Placements abide by business, license, or
data sovereignty constraints.
Fundamental Capabilities: Placement
✔
$

44. Use Cases
Data Center
Modernization
Data Center
Optimization
Hybrid Cloud
Optimization
$

45. © 2016 Cisco and/or its affiliates. All rights reserved. 51
Cisco Cloud Security
Umbrella
Secure Internet Gateway
Secure access to the internet
wherever users go, even off VPN
Cloudlock
Cloud Access Security Broker
Secure users, data, and apps
across SaaS, PaaS, and IaaS
Users Data Apps
SAAS / PAAS / IAAS
Umbrella Investigate
Threat intelligence
View relationships between malware,
domains, and IPs across the internet

46. 56© 2016 Cisco and/or its affiliates. All rights reserved.
Conclusion

47. © 2016 Cisco and/or its affiliates. All rights reserved. 5757Presentation ID
Understand Your Customer Expectations
• Simplified User Portals
• Rapid Delivery Times
• Cost Effective Infrastructure
• Strong Security
• Flexible Access Models

48. © 2016 Cisco and/or its affiliates. All rights reserved. 58
Private Cloud
Element ManagerSDN Controller
Automation / Orchestration
Become More Cloudy
Data Center 1
Leaf Leaf Leaf
Spine Spine Spine Spine
Border Border
Data Center 2
Spine Spine Spine Spine
Leaf Leaf Leaf Border Border
Data Center Interconnect

49. © 2016 Cisco and/or its affiliates. All rights reserved. 59
Leverage All Available Resources
Private Cloud
SDN Controller
Automation / Orchestration
Data Center 1
Leaf Leaf Leaf
Spine Spine Spine Spine
Border Border
Data Center 2
Spine Spine Spine Spine
Leaf Leaf Leaf Border Border
Data Center Interconnect
Private Cloud
SDN Controller
Automation / Orchestration
Data Center 1
Leaf Leaf Leaf
Spine Spine Spine Spine
Border Border
Data Center 2
Spine Spine Spine Spine
Leaf Leaf Leaf Border Border
Data Center Interconnect
Private Cloud
SDN Controller
Automation / Orchestration
Data Center 1
Leaf Leaf Leaf
Spine Spine Spine Spine
Border Border
Data Center 2
Spine Spine Spine Spine
Leaf Leaf Leaf Border Border
Data Center Interconnect

50. © 2016 Cisco and/or its affiliates. All rights reserved. 60
Put Security Everywhere

51. Thank you.