OpenStack Summit - Hong Kong 2013

1. Lew Tucker
VP and CTO, Cloud Computing
November 4, 2013
@lewtucker

2. © 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
2

3. Self-service, on-demand
deployment, driven by
automation and APIs
Elastic scaling to meet demand—
scale up, and scale down
Easiest and fastest way
to develop and deploy
applications
Abstracted resources that hide
the complexity of lower-level
implementations
Portability for applications
across common platforms
Most cost-effective use
of infrastructure
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
3

4. APP
APP
APP
APP
OS
OS
OS
OS
APPLICATIONS
APP
APP
APP
APP
OS
OS
OS
OS
Many systems to learn, high complexity, high cost
requires involvement of multiple groups
Infrastructure
Physical Servers
Storage Systems
Networks
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
4

5. APP
APP
APP
APP
OS
OS
OS
OS
APPLICATIONS
APP
APP
APP
APP
OS
OS
OS
OS
OpenStack Cloud Platform
Infrastructure
Physical Servers
Storage Systems
Networks
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
5

6. From Simple Provisioning to Orchestration
APP
APP
APP
APP
OS
OS
OS
OS
APPLICATIONS
APP
APP
APP
APP
OS
OS
OS
OS
OpenStack Cloud Services
Nova
Compute Service
Swift
Storage Service
Neutron
Network Service
Glance
Image Service
Keystone
Identity Service
Horizon
User Portal
Ceilometer
Metering Service
Heat
Orchestration
Elastic
Load Balancing
Infrastructure Delivered as a Service
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
6

7. APP
APP
APP
APP
OS
OS
OS
OS
APPLICATIONS
APP
APP
APP
APP
OS
OS
OS
OS
OpenStack Cloud Services
IN INCUBATION
Deployment (TripleO)
Bare Metal (Ironic)
Hadoop (Savannah)
Relational Databases (Trove)
Messaging (Marconi)
Infrastructure Delivered as a Service
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
7

8. Nova
Compute
Swift
Storage
Covers compute, storage, and networking
NEUTRON
NETWORKING
Used to build public or private clouds
Each service driven by community projects
with contributions from many companies
Easier for innovation through addition of new services
Small number of core services;
Larger number of associated services
© 2013 Cisco and/or its affiliates. All rights reserved.
Glance
Image
Horizon
Web Interface
Keystone
Security
Heat
Orchestration
Cisco Confidential
8

9. Cloud computing?
WEB DEVELOPER
SYSTEM ADMIN
Build on OpenStack Services for faster
development and elasticity of infrastructure
and network-based management services
Deploy Services on Virtual Machines (VMs)
or Physical Servers Using Cloud Services API
Use Massively Scalable
Object Storage Service for State
Elastically Scale Application Both Up and Down
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
9

10. On-premise private cloud for enterprise
businesses looking to treat infrastructure as a
set of scalable services
Major consumer-facing internet services
Ecommerce
Media companies
Mobile networks
New Network-function virtualization
(LB/FW/VPN)
Big Data analytics with optimized networking
Management of bare-metal provisioning using
cloud-like API
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
10

11. OpenStack The Operating
System for the Data Center
User App-2
Cisco
Application
User
App-3
User App-1
OpenStack Compute Service
OpenStack Storage Service
OpenStack Network Service
Cisco ONE Physical and Virtual
Service Provider or Enterprise: becoming the platform of choice
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
11

12. OpenStack Is
“Too Big To Fail”
in Service Providers
Initial Traction
OpenStack Is
The large, integrated tech companies
(IBM,HP, etc.) are betting with
In three short years, the open source
OpenStack to deliver Infrastructure as a
OpenStack initiative has reached
Service economics inline Amazon’s
broad-based industry support towards
AWS. There are also a number of
an ambitious goal of providing a
Web/Internet companies
complete cloud-based infrastructure
using OpenStack to underlie their nextoffering. At this point, while there still
is risk of fragmentation…Our takeaway gen apps. Enterprise traction is
scant, with most waiting for stability of
is that support is too broad (nearly 200
tech companies) and there is simply too technology, something that has
happened with portions of OpenStack
much momentum behind OpenStack
(compute, object storage) but not all.
development for the base case to not
We expect enterprises that will look for
be at least moderate success.
hybrid cloud scenarios (private/public)
will be early adopters.
a Viable Alternative
Amazon’s AWS owns the public cloud
and we expect that while OpenStack
can offer some of these benefits, AWS
is and will likely be more mature and
have greater scale than OpenStack
competition for some time. Innovation
around OpenStack puts VMware’s
vCloud initiative in perspective and in
our view, VMware is substantially
behind. Microsoft’s Azure is more
mature than OpenStack…but doesn’t
have a comparable ecosystem and
less mindshare around next-gen
applications that demand cloud-based
infrastructure.
Source: CitiBank report on OpenStacks, July 2013
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
12

13. How is the Growth of the Internet
Effecting Data Centers?
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
13

14. Data Center Traffic Triples from 2012 to 2017
25% CAGR 2012–2017
9.0
7.7 ZB
8.0
Zettabytes / Year
7.0
6.4 ZB
6.0
5.2 ZB
5.0
4.2 ZB
4.0
3.0
3.3 ZB
2.6 ZB
2.0
1.0
0.0
2012
© 2013 Cisco and/or its affiliates. All rights reserved.
2013
2014
2015
2016
2017
Cisco Confidential
14

15. Nearly Two-thirds of all Workloads Will Be Cloud-based by 2017
18% CAGR 2012–2017
200
Cloud Data Center (30% CAGR)
Installed Workloads in Millions
180
Traditional Data Center (6% CAGR)
160
63%
140
120
100
51%
80
60
40
39%
37%
49%
61%
20
0
2012
© 2013 Cisco and/or its affiliates. All rights reserved.
2013
2014
2015
2016
2017
Cisco Confidential
15

16. Sounds counter intuitive, but most Data Center Events/Content Stays Within the Data Center
A
Within Data Center (76%)
Storage, production and
development
data, authentication
Data Centerto-User
17%
B
Data Centerto-Data Center
7%
Data Center-to- Data Center (7%)
Replication, interdatabase links
Within
Data Center
76%
C
Data Center-to-User (17%)
Web, email, internal
VoD, WebEx, et al.
© 2012 Cisco and/or its affiliates. All rights reserved.
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Cisco Public
Confidential
16
16

17. WAN Edge/DCI
Core
Aggregation/
Access
Services
Compute
Storage
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
17

18. Spine
..
Scale Out Core
..
Leaf
Servers
Edge Routers
VPNs/Public Internet
vSwitch
VM
VM
Virtual
Access
Layer
Spline-leaf fabrics for
Any-to-any path
Scale-out design
Extending to VMs
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
18

19. Spine
..
Scale Out Core
..
Leaf
Servers
Edge Routers
VPNs/Public Internet
vSwitch
VM
© 2013 Cisco and/or its affiliates. All rights reserved.
VM
VM
Virtual
Access
Layer
vSwitch
VM
VM
VM
Cisco Confidential
19

20. AT&T, BT, DT, Orange, Telecom
Italia, Telefonica, Telstra, Verizon...
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
20

21. I’m a Cloud.
I don’t need you!
But couldn’t I
help! (sigh)
Current Cloud Computing model is great
for application development, self-service,
and automation—but it’s missing real
application-driven infrastructure.
We need a better way
for two-way communication
between apps and infrastructure.
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
21

22. • Compute service (EC2): virtual machines
Launch instance (image, memory size, disk)
Suspend, clone, migrate
App Svr
OS
VM
• Storage service (S3, EBS): virtual disks
Store object
Create/attach block
• Networking
OpenStack Networking Service (now called Neutron)
• Unique to OpenStack
What to do here???
• Simple abstractions
• Create/delete abstraction to make it easy for
What’s the right isolated private networks
• Attach VM to network resource
developers?
• Networking services:
•
•
App Svr
App Svr
OS
OS
VM
?
VM
Neutron
Routing, IP-address management
Service attachment
Source: OpenStack Design Summit, April 2011
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
22

23. For Common API, Rapid Innovation, and Vendor Differentiation
Network Service (Neutron) API
API Extensions
Network Service
Network abstraction definition and management
No actual implementation of abstraction
Plug-In API
Vendor/User Plug-In
Implementation of abstractions
Virtual or physical
Extended APIs
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Plug-Ins
NX-OS (VLANs), Linux Bridge
OVS+GRE, XVLAN
Nexus 1000v (VLAN, VXLAN, OVS)
Cisco ONE Controller
Cisco Confidential
23

24. Cisco Developed Visual Designer
Interface for Networks and Containers
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
24

25. © 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
25

26. Cloud Provider Network-Centric Services
Customer’s Application
Virtual
WAAS
Virtual
Firewall
App
OS
VM
Virtual
VPN
App
OS
VM
Database
OS
VM
REST
API
Platform
APIs
Cisco One Platform Kit (onePK)
on ISR G2, ASR 1K
App-Management Services
API
VPN
API
Video Services
API
API
Firewall
Other Services
API
App/Service Catalog
Location
Monitoring
API
API
WAAS
API
Service Assurance
Analytics
API
Load Balancer
Bridges the virtual and physical layers
© 2013 Cisco and/or its affiliates. All rights reserved.
API
API
OpenStack Cloud Platform
•
Classic Networking Services
Network
Service
Identity Management
Compute
Service
Networks
API
Servers
a
Controllers
and Agents
Cisco ONE Controller SW
OpenFlow Agents
Mobility
Storage
Service
Disks
User and
System
Admin
Virtual
Overlays
VXLAN Gateway, OpenStack,
Service Chaining
CSR 1KV
Cisco Confidential
26

27. © 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
27

28. Apps no longer run on a single VM
Multiple sets of VM’s acting together to deliver
a resilient, scalable service
Effective Orchestration needs:
•
Templates for launching VM’s
•
Public
Internet
Monitoring, load balancing
•
MyNewApp.com
Policies for adding to networks and for autoscaling
Result: an easier, less error-prone way to deploy a resilient, scalable service
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
28

29. OpenStack Heat, based on AWS Cloud Formation, for
managing entire lifecycle of multiple VM applications
Template-driven application orchestration engine
Is compatible with AWS Cloud Formation templates
Enables text-file storage with application code
in source repositories
Describes application resources and relationships
Provides API consistent with other OpenStack processes
Resources include
Servers, floating IP addresses, volumes,
security groups, scaling groups
Easy extensibility
Designed to provide auto-scaling for apps
Integrated with Ceilometer
Works well with other configuration management tools
(Puppet, Chef)
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
29

30. Applications running in production still have a lot elements to configure and manage
Isn’t there a better way?
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
30

31. © 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
31

32. Public
Internet
Want to connect web servers to public Internet, while blocking
outside access to application and database servers
App Server
Web Server
VM
VM
Database
VM
Web Server
App Server
VM
VM
Database
Web Server
VM
Memory Cache
VM
VM
Web Tier
Load Balance Across
Web Servers
© 2013 Cisco and/or its affiliates. All rights reserved.
App-Server Tier
Database Tier
Protect VM’s with
Security Group rules
Cisco Confidential
32

33. Public
Internet
App Svr
Web Svr
VM
VM
DataBase
VM
Web Svr
App Svr
VM
VM
DataBase
Web Svr
VM
MemCache
VM
VM
Web Tier
Security Group “Web”
© 2013 Cisco and/or its affiliates. All rights reserved.
App Server Tier
Database Tier
Security Group “AppSvr”
Security Group “DB”
Cisco Confidential
33

34. Public
Internet
Web Tier
Database Tier
App Server Tier
Web Svr
App Svr
VM
VM
DataBase
VM
Web Svr
Policy
VM
App Svr
Policy
VM
Policy
DataBase
Web Svr
MemCache
VM
VM
Performance
Security
Scalability
Availability
Performance
Security
Scalability
Availability
Consistency
Repeatability
VM
Performance
Security
Scalability
Availability
Application Centric Infrastructure
(physical or virtual)
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
34

35. Contributors: Cisco, IBM, Juniper, Red
Hat, Nuage, Plexxi….
© 2013 Cisco and/or its affiliates. All rights reserved.
Cisco Confidential
35

36. At both the Application and Infrastructure Layers (both physical and virtual)
App
Template
Application Orchestration
Describes what the components
are, how they are connected,
and how they elastically scale
Resource Provisioning
Virtual/Physical
APIs
Heat
APIs
APIs
Nova
Swift/Glance
APIs
Neutron
Network Orchestration
(ACLs, QoS, Load Balancing,
Service Chaining, etc.)
© 2013 Cisco and/or its affiliates. All rights reserved.
APIs
Network Controller
(Cisco Application-Centric Infrastructure)
Cisco Confidential
36

37. Onward to Icehouse!
Thank you.
@lewtucker