End to End Application Visibility and Troubleshooting Across the Virtual Cloud Network and NSX Portfolio

NETSCOUT ASI
for Visibility & Troubleshooting
into Applications in NSX-T
VMworld 2019
Marcos Hernandez, Chief Technologist - Networking and Security, VMware
Ray Krug, Solutions Architect, NETSCOUT

COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 2
Agenda
• Business Agility with NSX-T
• Smart ‘Visibility Without Borders’ from NETSCOUT
• NETSCOUT Partner Service Deployment in NSX-T
• nGeniusONE Troubleshooting Workflow in the VMware NSX Data Center
• Smart Visibility in the Multi Cloud

Who is NETSCOUT?
Financials
Global EnterprisesOnline Healthcare Systems
Service Providers
Solving the toughest problems for the Largest IP Networks in the World

Business Agility
Question:
“Where’s your Data Center?”
CIO - Answer:
“My data center? It’s everywhere
and anywhere I need to place
compute, network and storage
capacity to enable my business”

What Keeps the IT Team up at Night?
Coping with Business Agility
“How can I quickly
troubleshoot issues of
applications in production?”
“How do I engineer traffic
in my data center(s) / to
the cloud?”
“How are my Apps
Communicating?”
“How can I feed my security
tools?”
“What’s going on in my
multicloud environment
with constant change?”
“Why is my application
performance suffering?”
Making sure the customer experience and business agility does not suffer
DevSecOps

Smart Application Troubleshooting and Monitoring
Question:
“Where’s your Performance and
Security Visibility to keep your
business applications running?”
CIO - Answer:
“It needs to be everywhere and
anywhere I need to place compute,
network and storage capacity to
enable my business”
SOLUTION: NETSCOUT’s Visibility Without Borders

A New Approach to Continuous Monitoring in Multi-Cloud
based on NETSCOUT Smart Data.
VMware
Cloud
AWS
Smart Visibility
VMware NSX
Data Center

Software Centric
Designed for Both Physical and Virtual Environments
1
2
Common Situational Awareness
Consistent Views for DevSecOps
Open API & Data Formats
Kafka, REST, JSON, AVRO, CSV
Cloud Visibility (N/S/E/W)
VMware NSX Data Center, VMware Cloud, AWS, Azure,
GCP, Oracle etc..
4
What is Smart Data?
Smart Visibility into Network, Applications, Dependencies, and Security
Deep Packet Inspection
Performance and
Security KPIs
Packet
Data
3
Smart Data

Smart Data – ASI Metrics
• Rich Multi-Dimensional Meta-Data
– KPI, Session, Packet
• Advanced Metrics
– Application Response Time
– Application Success, Failure
– Application Errors
– Network Response Time
– Per protocol, per Message Type (i.e. URL)
– Voice and Video QoE Metrics
• Security Metrics
– Weak Security Practices (Ciphers, Protocols)
– Threat Analysis
– Behavior Analysis
Smart Data
Smart Application Troubleshooting and Monitoring

Using Smart Data
DashboardGridReportingService MonitorDependency MapLink MonitorTraffic DiscoveryMachine LearningCertificate MonitorAlertingPacket ForensicsSecurity
Smart Data

Packet Data is universally available...
Physical or Virtual (N/S/E/W)
Packet
Data
Smart Data
• VMware NSX Data Center
– NSX-T Service Insertion
• Public Cloud
– vTAP (Azure)
– Amazon VPC traffic mirroring
• Flexible Deployments
– Cloud Native
– VMs, Containers & Pods
Packet Data is UltraHD

COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 12COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC.
vSTREAM / NSX-T Integration
Smart Visibility in the
VMware NSX Data Center

1 Register NETSCOUT Partner Service
With VMware NSX Manager
1. Partner Service Registration to NSX-T
VMware NSX Manager nGeniusONE
ESXi
T1
DFW
T0
ESXi
T1
DFW
T0

1 Register NETSCOUT Partner Service
With VMware NSX Manager
1. Partner Service Registration to NSX-T
ESXi
T1
DFW
T0
ESXi
T1
DFW
T0

2. Deploy Partner Service / Service Insertion
2 Deploy NETSCOUT Partner Service
vSTREAM Service Virtual Machines
(Host or Cluster)
Overlay Transport Zone
vSTREAM Service Segment
ESXi
T1
DFW
T0
ESXi
T1
DFW
T0

vSTREAM Service Deployment
vSTREAM SVM
vSTREAM SVM
- Host mode - Deployed with vCenter into each host in the NSX-T cluster
- Deployment specification maps to the vSTREAM ovf
vSTREAM SVM
- eth0 management network
- eth1 monitoring interface (service segment)

vSTREAM Service Deployment
Service Instances
vSTREAM service virtual machine automatically deployed in each ESXi Host

3. Define NSX-T Network Introspection (E-W), Service chain and Policy
Service
Chain
Policy
Rules
Service
Profile
Network Introspection (E-W)
• Service Profile
• Service Chain
• Policy Rules
3
Service
Chain
Policy
Rules
Service
Profile
ESXi
T1
DFW
T0
ESXi
T1
DFW
T0
vSTREAM
TAG
vSTREAM
TAG

NSX-T Network Introspection (E-W)
Service Profile and Chains
vSTREAM in the
Service Chain
vSTREAM_SP
Service Profile
vSTREAM Service Segment forwarding to vSTREAM_SP

NSX-T Network Introspection (E-W) - Rules
VMs with tag vSTREAM
Action is to “Redirect” traffic to the vSTREAM Service Chain

4. Application Troubleshooting and Monitoring using nGeniusONE
VMware NSX Manager
Smart
Data
nGeniusONE
Service
Chain
Policy
Rules
Service
Profile
Network Introspection (E-W)
• Service Profile
• Service Chain
• Policy Rules
3
Service
Chain
Policy
Rules
Service
Profile
ESXi
T1
DFW
T0
ESXi
T1
DFW
T0

Agentless
Deployment
• vSTREAM SVM runs independently from the application VMs
• Analytics computed close to the data source
• No need to ship packets across the network
Seamless Application
Visibility Management
• Automated Service Insertion
• Automated Application Visibility
• Using NSX-T introspection (E-W) policies
Simple
Deployment Model
• Automated Orchestration using vCenter
• Enter NSX Manager credentials, and install in a few simple clicks
Certified
VMware Ready
• VMware NETSCOUT Partnership
• End to End Application Troubleshooting in the Cloud
• ESX, NSX-V, NSX-T, AWS
Key Benefits
Implementing NETSCOUT vSTREAM as Partner Service

nGeniusONE In ACTION
Troubleshooting Workflow in the

NSX-T
Segmented
Network with
Zero Trust
Model
Web web2 web3web1 web4
DNS1 AD-2 AD-3
Shared
Services NAS
Application Stock
Manager
Offer
Manager
Stock
Manager
Database
SqlDB OraDB
Users
HTTP (8061)HTTP/REST (8060)
LDAP2(389)DNS(53)NFS(2206)
MySQL (3306) Oracle (1514)
Demo Application Architecture
Deployed over
2 ESXi Hosts
in NSX-T
Cluster

NSX-T Distributed Firewall controls application flow

NSX-T Group vSTREAM
Virtual Machines
tagged with ‘vSTREAM’
for E-W monitoring...

NETSCOUT Smart Data Application Flow Discovery
App
Web
Database
NFS
Active
Directory
Users
DNS
Smart Data and
Smart Analytics
ESXi Host
Awareness

Application Assurance in a Micro-Segmented
NSX-T Deployment
Application
Micro-Service “Stock
Manager” with
Failures

ASI Metrics for Service Tiers
Transaction Application Response vs Network Response vs Errors
Application
Response
Time
Network
Response
Time
Application
Errors
App Tier
Oracle
Database
Tier
Slow App Response
Slow
Network Response

Service Monitor - Investigate Performance Issue
Performance of Each VM in Application Tier
Virtual Machine
“stockm1”
Running on
Host ESXi-240
Virtual Machine
“stockm1” Much
Slower Than
“stockm2”

Session Analysis
Application Detail (API/Error etc)
Application Details
Session Ladder
Diagrams

Detailed Packet
Analysis providing
evidence to
Dev Teams
Packet Decode – Forensic Evidence

Automated Machine Learning, Analysis and Alerting
nGeniusONE already has pinpointed the issue…

NETSCOUT Visibility in the Multi Cloud

Azure VPN
Gateway
vSTREAM ‘lights up’ the Multi-cloud
Azure / AWS / Oracle / Google / IBM Softlayer / VMware Cloud on AWS
IPSec
Gateway
VPN
Gateway
VPN
Gateway
VPN
Gateway
VPN
Gateway
MicroServices
App
Inventory App
Corporate
Data Center
Active
Directory
DNS
DB-CorpnGeniusONE
Global
Packet
fwd GRE
to corp
Registration App
Packet fwd
udp to corp
MicroServices
App
MicroServices
App
MicroServices
App

Visibility Without Borders
The Multi-Cloud Data Center

Smart Application Troubleshooting and Monitoring in NSX-T
Summary

Smart Application Troubleshooting and Monitoring in NSX-T
Consistent visibility in Hybrid Data Center
Physical and virtual continuity
Automated Agentless Deployment in NSX-T
Orchestration delivered through NSX Manager and vCenter
Visibility controlled by NSX-T Security Policies
Using NSX-T groups based VM tag
Migrate to the VMware NSX Data Center with Confidence

Thank You.
www.netscout.com
Ray Krug
Solutions Architect
ray.krug@netscout.com

End to End Application Visibility and Troubleshooting Across the Virtual Cloud Network and NSX Portfolio

More Related Content

What's hot

Similar to End to End Application Visibility and Troubleshooting Across the Virtual Cloud Network and NSX Portfolio

More from NETSCOUT

Recently uploaded

End to End Application Visibility and Troubleshooting Across the Virtual Cloud Network and NSX Portfolio