This document summarizes A10 Networks' dynamic L4-7 application networking solutions for OpenStack cloud data centers. It introduces A10's portfolio including application delivery controllers, carrier-grade NAT, and network perimeter security. It describes challenges with legacy static L4-L7 services and how A10's dynamic service chaining addresses demands for agility, scale, and reduced total cost of ownership. Key aspects of A10's cloud services architecture are discussed, including high performance appliances, virtual appliances, pay-as-you-go licensing, OpenStack integration using an LBaaS driver, and how this approach provides scale, reduced TCO, and agility for cloud providers and their tenants.

1. 1
Customer Driven Innovation
1
Dynamic L4-7 Services for OpenStack Cloud
Data Centers
May 2014

2. 2
A10 Networks Portfolio Overview
Dedicated
Network
Managed
Hosting
Cloud IaaS
IT Delivery Models
Application Networking Platform
 Performance
 Scalability
 Extensibility
 Flexibility
 Security
CGN TPS
ADC
ACOS Platform
Product Lines
 ADC – Application Acceleration & Security
 CGN – Service Provider Networking
 TPS – Network Perimeter DDoS Security

3. 3
A10 Corporate Introduction
54.7M
$91.5M
$120M
$142M
2010 2011 2012 2013
1,000+
2,000+
3,000+
Q4' 11 Q4' 12 Today
CUSTOMER GROWTH
COMPANY GROWTH
Headquarters in San Jose
650 Employees
Offices in 23 countries
Customers in 65 countries

4. 4
Challenges with Legacy L4-L7 Services
• Static
• Inflexible
• Manually Provisioned
• Dynamic Service Provisioning
• Automation and Scalability
• Operational Agility
Challenges
Demands
DDoS
WAF
QoS
SLB

5. 5
NOW: Dynamic Services
Application Service Evolution: Dynamic L4-L7 Services
BEFORE: Isolated Services
On Demand Consumption
Multi-tenant
Scale out Architecture
POLICY
DRIVEN
INFRASTRUCTURE
…
IPS
IDS
FW SLB
Dynamic L4-L7 Services
…
.

6. 6
IaaS Cloud DC needs: Any Server, Any Network, Any Time
Virtualized Shared Infrastructure
Physical Compute + L2/3 Network Infrastructure
SDN Network Fabric
Compute Network Storage
Dynamic L4-L7 Service Chaining
Cloud
Orchestration
Platform
SDN Controller
Cloud
Tenants

7. 7
What is Dynamic Service Chaining?
Services
Application
Gateway OS
Platform
ACOS
A10 Thunder/AX/VHA or vThunder
VMWare, Xen, KVM, Hyper-V, Oracle VM, EC2 (IaaS)
Coke
ADC
Security
App 1
Pepsi
ADC
IPv6
App 2
Tenant N
WanOp
VPN
App N
…..

8. 8
Dynamic L4-L7 Services Design Requirements
Agility Scale Reduced TCO
• Agile Service Delivery
– Simplified consumption
model
• Programmability
– Scale consistently across
governance domains
– Integration with SDN and
Cloud Orchestration
platforms
• Application Delivery at
Scale
– Multi-tenancy
– Linearly scale
performance
• Consistent Services
– Enforce SLAs
– Ensure Compliance and
Security in a shared
infrastructure environment
• Metered Consumption
– Consume and pay per
business requirements
• Simplified management
– Automation
– Efficient Resources

9. 9
Introducing aCloud Services Architecture
New product form factors and licensing models to
address new IT consumption models
• High Performance Appliances
• Virtualized & Hybrid Appliances
• Pay-as-You-Go Licensing Support
• SDN Integration
• Cloud Orchestration Integration

10. 10
High Performance Appliances

11. 11
ACOS Flexible Form Factors for all IT Consumption Models
Dedicated Data
Centers
Managed Hosting,
SP
Cloud IaaS, SP
Common
Features &
Admin Across
Form Factors
vThunder
Virtual Appliance
Thunder Series
Application Delivery Partitions
Pay-as-You-Go Licensing
Thunder HVAvThunder
Virtual Appliance
vThunder
Virtual Appliance
aVCS - Virtual
Chassis System
Thunder Series
Rent (RBM) Utility (UBM)

12. 12
ACOS Platform: Scaling Application Networking with Moore’s Law
Extremely Efficient Network Pre-Processing*:
 Hardware-Assisted L2-4 Pre-Processing
 Optimized Hardware-Assisted Flow Distribution
 Hardware-Assisted Security Functions Performed
* Hardware Assist Features Available on Most Thunder Appliances
Highly Scalable Application-Layer Processing:
 Scalable Symmetric Multi-Processing
 Unique Shared Memory Architecture
 Linear Growth in Scale via Parallel Processing
Low-Value Services:
Forwarding, Segmentation
High-Values Services:
Optimization, Availability, Security
Application
OSI Reference Model
Presentation
Session
Transport
Network
Data Link
Physical
MAC: f4:f9:51:f0:d5:9d
IP: 192.168.1.1
MAC: f4:f9:51:f0:d5:9d
IP: 192.168.1.1
Shared Memory Architecture
1 2 3 N
Flexible Traffic Accelerator
Switching and Routing

13. 13
ACOS Platform: High Performance Application Networking
Shared Memory Architecture
1 2 3 N
Flexible Traffic Accelerator
Switching and Routing
Efficient &
Accurate Memory
Architecture
64-Bit Multi-Core
Optimized
Optimized
Flow Distribution
Application
Acceleration
Application
Security
Application
Availability

14. 14
Licensing Models

15. 15
Other vThunder Appliances and Flexible Billing Options
vThunder Pay-as-You-Go Licensing
 Elastic & adaptive
 “Pay-as-you-Go” metering
 Automated licensing
 For IaaS providers only
License per Month
Rent (RBM) Utility (UBM)
License per Byte
vThunder for AWS
 10 Mbps to 1 Gbps licensing
 1 click provisioning of 64-bit Amazon
Machine Image (AMI)
 EC2 or VPC environments
 No feature limitations; licensed by
bandwidth
 BYOL perpetual license or hourly based
license

16. 16
OpenStack Integration

17. 17
aCloud Service Architecture: OpenStack Integration
Compute NetworkingStorage
Nova NeutronCinder
Openstack Cloud APIs
Horizon Dashboard
A10 ACOS Appliances
Physical, HVA and Virtual
Client Application
A10
LBaaS Driver
REST API

18. 18
aCloud Service Architecture: OpenStack Integration
Driver 1
Driver 2LBaaS
Agent
Driver 1
Driver 2
A10 LBaaS Driver
LBaaS Neutron Advanced Service Plugin
AsynchronousMessage Queue
LBaaS Neutron
Extension
Rest API
SynchronousCore API
NOVA
(Compute)
CINDER
(Block Storage)
Neutron
REST
SWIFT
(Object Storage)
Client
Application
Horizon
(Dashboard)
REST
REST
Glance
(ImageService)
Keystone
(Authentication)

19. 19
aCloud Services Architecture
aCloud
Pay-As-You-Go
LLM
aCloud
Pay-As-You-Go
GLM
aGalaxy
Policy
Mgmt
Thunder-HVA
Hybrid Appliances
Thunder Series
Physical Appliances
SDN Fabric
vThunder Virtual Appliances
VXLAN
SSL-Offload
DDoS
SLB
Content Optimiz.
WAF
NVGRE
SLB
SSL-Offload
Content Opt.
WAF

20. 20
aCloud Services Value Proposition
SCALE
• Support Operational needs for
multi-tenancy & virtualization
• Drive L4-7 Service Chaining to
Tenant/ Workload
• Consistent Services to enforce
SLA, Compliance and Security
REDUCED
TCO
• Enable Pay-as-You-Go IaaS
for End Users
• Reduced Manual Change
Management Tasks for IT
• Efficient resource utilization
AGILITY
• Support Rapid Response to
Internal / External Needs
• Automated System
Provisioning via Cloud/SDN
• Programmability to ensure
consistent scale across
domains

21. 2121
Thank You
www.a10networks.com