Skrzyżowanie datacenter z chmurą II. Jak utrzymać spójność konfiguracji i bezpieczeństwa w środowisku mieszanym

1. JAROSŁAW ZIELIŃSKI
Senior System Architect, VMware vExpert 2019

3. https://github.com/vjzielinski
https://www.instagram.com/vjzielinski
https://www.facebook.com/vjzielinski
https://www.linkedin.com/in/vjzielinski
https://twitter.com/vjzielinski

4. PopoludniewSieci.pl

5. Business and IT – Finding the Right Balance
Business Wants To IT Needs To
Roll out new applications to market
faster
Control costs and increase efficiency
Provide choice and respond quickly
Ensure security and compliance
Respond quickly to new customer
demands
Innovate with new technology to
beat competitors

6. PRIVATE CLOUD PUBLIC CLOUD
Need to Modernize, But No One Solution Solves Everything
Cost optimized for data intensive apps
Enterprise IT governance
Data locality and control
Ideal solution for the edge
Flexible, low upfront commitment
Agile and easily scalable
Built for new class of apps
Fully managed and automated
+

7. Hybrid Cloud is the Preferred Enterprise Strategy
4%71%21% Private Cloud Only
Hybrid
Public Cloud Only
Source: RightScale 2018 State of the Cloud Report

8. Any Cloud
Any Device
Any Application
Traditional Apps Cloud-Native Apps SaaS Apps
VMware Vision
Modernize
Data Centers
Integrate
Public
Clouds
Transform
Networking
and Security
Empower
Digital
Workspaces
Edge Computing
Telecommunications
Cloud
Hybrid Clouds
Public Clouds

9. Virtual Cloud Networking Vision
The network of the future is software-defined
The VMware vision of the virtual cloud network includes the following technologies:
NSX-V Data Center
NSX-T Data Center
VMware NSX® SD-WAN by VeloCloud™
VMware NSX Cloud™
Pivotal Container Service include NSX-T
VMware vRealize® Network Insight™
VMware AppDefense™
VMware NSX® Hybrid Connect
Edge Computing
Telecommunications
Cloud
Hybrid Clouds
Public Clouds

10. Data Center Vision

11. AWS
Customer Remote Network
Remote
ServersAWS Direct Connect
location
Availability Zone 1
Availability Zone 2
10.0.1.0/24
10.0.0.0/24
AWS Direct
Connect
Client Client
Customer WAN

12. Availability Zone 1
Availability Zone 2
10.0.1.0/24
10.0.0.0/24
VPN
connection 1
Tunnel 1
Tunnel 2
Router 2
Router 1
VPN
gateway
VPN
connection 2
Customer
gateway
Customer Remote Network
Client Client
Remote
servers

13. Simplified WAN
Management
Assured Application
Performance
Managed On-Ramp
to the Cloud
SD-WAN
Branch
Edges
Cloud
Gateways
SaaS / IaaS
Zero-touch deployments, simplified
operations, one-click service insertion
Direct cloud access with performance,
reliability and security
Data Center
Edges
Transport-independent performance
for the most demanding apps,
leverages economical bandwidth
NSX SD-WAN Overlay
Private and MPLS 3G and 4G LTE
Internet Broadband
NSX SD-WAN is a logical overlay network that provides bandwidth expansion and direct optimal
access to enterprise and cloud applications and data.

14. SD-WAN Dynamic Multipath Optimization (DMPO)
DMPO
Branch Sites
SaaS
Primary Path
Secondary Path
NSX SD-WAN Edge
Internet
Enterprise Data CenterBranch Service ProviderNSX SD-WAN Orchestrator
NSX SD-WAN Gateway

15. Overlay Flow Control
Route Learning: Enterprise Architecture
NSX SD-WAN
Orchestrator
OSPF Enterprise
DC-West
Enterprise
DC-East
NSX SD-WAN Hub Edge
NSX SD-WAN Hub Edge
NSX SD-WAN Controller
Network routes learnt through standard routing
Visibility and control simplified with an enterprise-wide
consolidation of route information
Silver Site
Single L2/
L3 Switch
Legacy Site
MPLS with
VPN Backup
Bronze Site
Single/
Dual Internet
NSX SD-WAN Edge
NSX SD-WAN Edge
OSPF
Overlay Flow Control
Subnet Preferred Exit Route Type
172.30.0.024 DC-EAST OSPF-OE2
172.30.0.0/24 DC-WEST OSPF-O

20. pyvmomi

21. Troposphere

22. RFC6241 - Network Configuration Protocol (NETCONF)
Cisco - Cisco DevNet
HPE - pyhpecw7
Nokia - nctools
Junos - PyEZ