Avatar

ACI goes beyond SDN to help customers deliver business outcomes and not just network device programmability.  That’s part of the reason over 175 customers signed up to trial the APIC during the hardware beta.  Now Cisco ACI will start shipping to Data Centers worldwide on July 31! (See Soni’s blog)

From when we first announced the Vision for an Application Centric Infrastructure at Cisco Live Orlando in 2013, it’s been extremely exciting to see customers and ecosystem partners support this new operational model for centrally configuring, automating and operating network and security infrastructure.

The application model for abstracting network infrastructure requirements and policies really does address the operational needs of the infrastructure and application teams.  That was by design, as Insieme’s engineering team worked with the leading cloud infrastructure customers of the world and our Cisco IT organization to incorporate their operational and application needs.  In fact, IDC published a powerful report to confirm the ACI related 3 year OpEx savings forecast at Cisco’s IT Elastic Infrastructure Services (CITEIS), one of the largest data center environments in the world.  Read the IDC Business Value Brief on Cisco ACI to learn more.

With the production APIC, customers can now begin running production applications on ACI.  For insights into why our customers are deploying ACI, we spoke with the leaders of two world-class IT companies that are aggressively rolling out ACI within their own corporate IT.

Symantec IT is an early adopter of ACI and Sean Doherty (VP of Alliances Offerings, Symantec) spoke recently with Shashi Kiran (Senior Director, Cisco) about automating their IT infrastructure with ACI.  About the Symantec IT environment,  Sean said, “Some applications have been through the Physical to Virtual cycle and others are placed on clouds. We are looking to move those into a more modern agile environment. The ACI is providing the infrastructure to build out that new environment…”.  Sean added that ACI helps in significantly accelerating the detection and remediation of security issues with business critical applications.  Check out this YouTube video interview for the full story.

Symantec Doherty NetApp KiddSymantec DohertySymantec Doherty

Representing another user adopting ACI, NetApp’s CTO Jay Kidd spoke recently about the ACI project in their global development lab.  He said this is a large scale deployment covering 2300 racks of equipment wired end-to-end with 40G capacity with Nexus 9000.  Talking about the lab, Jay stated, “One of the beauties of the (Nexus) 9K is the ability to gracefully transition and combine 10Gig and 40Gig together in the same infrastructure. Then with ACI, being able to build up these profiles for the applications or the test scenarios for those applications, store them, provision them dynamically. Anything we can do to make it easier for our developers to use this DevOps private cloud, we think will speed up the time to market and ACI is big part of that”.  The Lab can spin up thousands of Virtual Machines per hour with an aggregate capacity of running well in excess of a million VMs at a given time.  You can  listen to Jay’s eloquent explanation on YouTube here.

NetApp Kidd

Our Cisco sales teams have a great way to help Cisco customers to begin their own ACI deployments with the new ACI Starter Bundles.   An ACI Starter Bundle (Fig 1) has everything you need to create an ACI POD including a resilient cluster of three APICs, two fixed or modular spine switches, eight 40G optics, and two or four leaf switches depending on which of the four bundles are selected.

Figure 1  ACI Starter Bundles include an APIC Cluster with 3 APICs and 8 40G AOC optics

  • #1 Two Fixed Spine Switches, Four Leaf Switches with 192 Ports
  • #2 Two Fixed Spine Switches, Four Leaf Switches with 384 Ports
  • #3 Two Modular Spine Switches, Two Leaf Switches with 96 Ports
  • #4 Two Modular Spine Switches, Two Leaf Switches with 192 Ports

Cisco customers can use ACI Starter Bundles 1 or 2 as policy appliance for flexible/ granular network virtualization and secure isolation in conjunction with their existing base of Nexus 2000 to Nexus 7000 (Fig. 2)

Figure 2 ACI Starter Bundles #1 or #2

Slide1

ACI Starter Bundles #1 or #2 can also be used to scale out a UCS converged infrastructure solution such NetApp FlexPod and VCE VBlock. (Fig. 3)

Figure 3 Scale out UCS Converged Infrastructure Solutions

Slide1

ACI Starter Bundles #3 or #4 can be used as a starting point to scale out private clouds with secure multi-tenancy since they are based upon the more expandable modular chassis. (Fig. 4)

Figure 4

Slide1

When used in conjunction with the just released Application Virtual Switch, AVS, the APIC provides centralized policy based control and automation for any application composed of any number of server tiers containing any number of virtual or physical servers.  These ACI starter bundles enable customers to begin ACI deployments for testing or production operations.  The simple fixed price licensing for a set of leaf ports, 48 or 96, means there is no penalty for running lots of VMs per server vs. bare metal servers. (Fig 5) Customers can predict the cost of running their software defined network infrastructure.

Figure 5 No per VM Tax with ACI licensing

Servers

Contact your Cisco account manager to learn how the cost of an ACI POD is less than the cost of  those dedicated x86 hardware gateways required with leading pure software overlay approaches.  ACI delivers more scale, security, and performance at a fixed predictable cost with documented TCO benefits.

Many of our ecosystem partners announced at Cisco Live that they would be shipping their ACI Device Packages when Cisco’s APIC enters FCS.  The following joint solutions have passed rigorous interoperability testing conducted jointly by the vendor’s and Cisco’s engineering teams in our own ACI testing lab.   These partners demonstrate ACI’s open ecosystem for service integration, investment protection for existing ADC networks, and the benefits of a centralized control point for L2-L3 network and L4-L7 service policy coordination and automation.

  • Cisco ASA security and Cisco ACI solution:   Customers can now deploy Cisco ACI with Cisco ASA and its ACI Device Package to provide automated, policy-based security provisioning, management, and security policy updates, for firewall, intrusion prevention,  and more.
  • Citrix NetScaler and Cisco ACI joint solution:  Customers can use the APIC to coordinate the Citrix NetScaler’s ADC unique application insights for optimized service delivery with ACI’s network automation and obtain end-to-end telemetry and visibility for service-aware applications and tenants.
  • Embrane and Cisco ACI joint solution:  With the APIC and Embrane’s ACI Device Package, ESM automates the deployment and lifecycle management of Embrane’s network virtual services as well as those from Cisco ASA, Sourcefire, and Citrix.
  • F5 Synthesis and Cisco ACI joint solution: Customers can accelerate application deployment by automating insertion of SSL offload and L4-L7 SLB services using F5’s ACI Device Package and the Cisco APIC.

We are publishing interviews with the analysts, the leading practitioners that are hands on with ACI in August in an exciting ACI special edition of Unleashing IT.   I’ll share the link for you here in a few weeks.

Today, we had some great news to share on Data Center and Cloud  Networks.  The Cisco ACI solution portfolio was orderable on July 1 and starts shipping July 31.  This includes the four ACI starter bundles detailed above.  For details on today’s exciting new Nexus switches announcement,  please visit this blog – Nexus Flexibility Eases Transitions.

Links for more information

The Future of Networking, Available Today

8/15 Demo Friday: Watch Cisco ACI Enable Fast IT

IDC: Optimizing the Datacenter Network for Improved Scalability, Orchestration, and Automation

An Application-Centric Infrastructure Will Enable Business Agility

ESG: Accelerating Transformation with an Application-centric Approach

Cisco Application Centric Infrastructure and Cisco Nexus Switching: Delivering Investment Protection

 



Authors

Harry Petty

Director

Data Center and Cloud Marketing

Avatar

Financial Services firms are being challenged and forced to change the way that their applications, information, content, compute, storage, and network resources are deployed and consumed. It is a multi-dimensional issue that is forcing financial services firms to change of how IT is delivered. They are beginning to look for ways to stretch their data centers, as they often need more compute and storage capacity than their own facilities provide, especially during those peak high-demand times. The move is toward the service delivery of IT through cloud computing, a dynamic and service-oriented delivery paradigm that organizes and allocates IT-enabled services to meet business demand as needed.

Challenges With Financial Services IT Delivery

Data centers are costly to build and operate, but there are times when you need more resources. Cisco’s InterCloud solution lets banks create a hybrid cloud to extend their data center and cloud capacity when needed. Through InterCloud, banks can store more data and have more computing power, operating just as if it were in an on-premises data center. InterCloud could also be used to augment current big data and risk/analytics environments that banks have deployed in recent years. In many cases, additional compute capacity is needed only for a short time in order to run certain risk models or to provide additional reporting for regulatory requirements. Continue reading “Banking in the InterCloud: Delivering Additional Computing and Storage”



Authors

Tom Caddoo

Practice Architect

Banking, Americas Business Transformation

Avatar

The Internet of Everything (IoE) is becoming more real than ever, particularly in education. As we begin to see this massive transformation taking place, schools for both K-12 and higher education are utilizing Cisco networks to run applications and pilot projects that benefit both the students and the faculty.  We expect to see more and more of these examples in education, specifically, as schools, colleges, and universities find new and different ways to leverage these technologies.

Schools and colleges have proven that initiatives around Bring Your own Device (BYOD) and Connected Learning are part of the bigger picture when connecting people, process, data and things. But what may not immediately come to mind is that IoE can drive energy efficiency for colleges.

On Tuesday, July 22, journalists and analysts heard from Chicago-based leaders in local government, public safety and education about the impact of IoE in public sector during Cisco’s two-day IoE and Innovation event held in the Windy City. Continue reading “IoE Can Be Key to More Energy Efficient Colleges”



Authors

Renee Patton

Former Global Director of Education and Healthcare

Global Industry Solutions Group

Avatar

This blog was co-authored by Kevin Brooks, Alex Chiu, Joel Esler, Martin LeeEmmanuel Tacheau, Andrew Tsonchev, and Craig Williams.  

On the 21st of July, 2014, Cisco TRAC became aware that the website dwnews.com was serving malicious Adobe Flash content. This site is a Chinese language news website covering events in East Asia from a US base. The site is extremely popular, rated by Alexa’s global traffic ranking as the 1759th most visited website worldwide, and the 28th most visited in South Korea. In addition the news site also receives a substantial number of visitors from Japan, the United States and China.

This malware campaign does not appear to be tightly targeted. Twenty-seven companies across eight verticals have been affected:

Banking & Finance
Energy, Oil, and Gas
Engineering & Construction
Insurance
Legal
Manufacturing
Pharmaceutical & Chemical
Retail & Wholesale

This is indicative of the campaign acting as a drive-by attack targeting anyone attempting to view one of the affected sites.

Attack Progression

Continue reading “Far East Targeted by Drive by Download Attack”



Authors

Jaeson Schultz

Technical Leader

Cisco Talos Security Intelligence & Research

Avatar

The situation that many IT people find themselves in today is dripping with irony. They’ve deployed so many innovations over the years to address so many business challenges, that now most of their time is dedicated to simply keeping their systems running. Without incremental resources during these lean budget times, their new innovation cycles decline in direct proportion to their past innovations.

Given the current budget realities, how can IT break out of this innovation trap?

Continue reading “Three Steps for IT to Deliver Better Business Results”



Authors

Marlowe Fenne

No Longer with Cisco

Avatar

(This is part 5 of a 7-part series sharing insights from Cisco partners about the Future of Cloud.)

“A lot of things go into building out a cloud practice that most people don’t realize until they get into it.  Because we have been a systems integrator, we know the on-premises environment very well.  That gives us an advantage over some cloud providers who may be more like service providers.  They just don’t understand the integration piece. ”

This was just one of the insights Chris Ludwig, SVP GTM Cloud and Hosted Solutions from NWN Corporation, shared with me at Cisco Live!  NWN is a provider of Cisco Powered cloud and managed services.  Their first service offering, hosted collaboration, has created substantial pull-through for the later IaaS services they have added.

Integration is an important part of a successful migration to cloud, according to Ludwig. Cisco has a whole ecosystem that has built applications to integrate with on-premises equipment.  When moving to cloud, all of these integrations still have to work.  “That was something we did a lot of research on, to make sure that all of the third party companies that we work with on-premises are going to work in the cloud.”

For NWN, the value of the Cisco partner ecosystem cannot be underestimated.  Regarding which partners to work with, Ludwig said, “We certainly look to Cisco for guidance.  We don’t want to pick a partner and then find out something doesn’t work right.

“It’s very helpful knowing that if they’re part of the ecosystem, we know that they are going to be a good partner.  That they are going to be around.  That they know how to work with the Cisco team and technology.”

You can also learn more about how providers are addressing the need for enterprise class services in the latest edition of Unleashing IT.



Authors

Xander Uyleman

Senior Manager

Global Partner Marketing

Avatar

Cisco’s EnergyOps team is tasked with reducing energy consumption and increasing energy efficiency at our offices, labs, and data centers worldwide. Cisco’s labs are our largest consumer of energy and although we are putting a lot of effort into improving the efficiency of those environments, we’re finding great success in taking a more holistic approach that includes implementing efficiency opportunities within all of our building support systems such as HVAC (heating, ventilation, and air conditioning), building controls, and lighting.

For example, in January 2014 we engaged in such a holistic energy efficiency effort at a number of our Shanghai facilities, which included three primary areas of improvement:

  • Computer room air conditioning (CRAC) unit retrofits
  • Software upgrades for cooling equipment
  • Lighting upgrades for offices

In just 3 months, 5 buildings at our Shanghai location underwent energy efficiency upgrades in these areas that will generate approximately US$145,000 in savings per year.

Continue reading “Cisco Takes Holistic Approach to Reducing Energy Use and Costs”



Authors

Andy Smith

Global Sustainability Manager

Cisco Workplace Resources (WPR)

Avatar

Customers gain great value from server virtualization in the form of virtual machines (VM) and more recently Linux Containers /Dockers in data centers, clouds and branches.  By some estimates, more than 60 % of the workloads are virtualized although less than 16% of the physical servers (IDC) are virtualized (running a hypervisor).  From a networking perspective, the hypervisor virtual switch on these virtualized servers plays a critical component in all current and future data center, cloud, and branch designs and solutions

As we count down to the annual VMworld conference and reflect on the introduction of the Cisco Nexus 1000V in vSphere 4.0 six years ago, we can feel proud of what we have achieved. We have to congratulate VMware for their partnership and success in opening vSphere networking to third party vendors. It was beneficial for our joint customers, and for both companies. VMware and Cisco could be considered visionaries in this sense. Recognizing this success, the industry has followed.

Similarly we praise Microsoft as well, for having also provided an open environment for third-party virtual switches within Hyper-V, which has continued gaining market share recently.  Cisco and Microsoft (along with other industry players) are leading the industry with the latest collaboration on submitting the OpFlex control protocol to the IETF. Microsoft’s intention to enable OpFlex support in their native Hyper-V virtual switch enables standards-based interaction with the virtual switches.  Another win for customers and the industry.

In KVM and Xen environments, many organizations have looked at Open vSwitch (OVS) as an open source alternative. There is an interest in having richer networking than the standard Linux Bridge provides, or using OVS as a component for implementing SDN-based solutions like network virtualization. We think that there is an appetite for OVS on other hypervisors as well.  Cisco is also committed to contributing and improving these open source efforts.  We are active contributors in the Open Virtual Switch project and diligently working to open source our OpFlex control protocol implementation for OVS in the OpenDaylight consortium.

To recap on the thoughts from above, Table 1 provides a quick glance at the options for virtual networking from multiple vendors as of today:

Table 1:  Hypervisors and Choices in Virtual Switches

Hypervisor

Native vSwitch

3-party or OpenSource  vSwitch

vSphere

•Standard vSwitch
•Distributed Virtual Switch
•Cisco Application Virtual Switch
•IBM DVS 5000V
•HP Virtual Switch 5900V

Hyper-V

Native Hyper-v Switching
•NEC
•Broadcom

KVM

Linux Bridge(some distributions include OVS natively)
•OVS

XEN

OVS – open source project with multiple contributions from different vendors and individuals
•OVS

 

As an IT Professional, whether you are running workloads on Red Hat KVM, Microsoft Hyper-V or VMware vSphere, it is difficult to imagine not having a choice of virtual networking. For many customers, this choice still means using the hypervisor’s native vSwitch.  For others, it is about having an open source alternative, like OVS. And in many other cases, having the option of selecting an Enterprise-grade virtual switch has been key to increasing deployments of virtualization, since it enables consistent policies and network operations between virtual machines and bare metal workloads.

As can be seen in the table above, Cisco Nexus 1000V continues to be the industry’s only multi-hypervisor virtual switching solution that delivers enterprise class functionality and features across vSphere, Hyper-V and KVM. Currently, over 10,000 customers have selected this option with Cisco Nexus 1000V in either vSphere, Hyper-V, or KVM (or a combination of them).

Cisco is fully committed to the Nexus 1000V for vSphere, Hyper-V and KVM and also the Application Virtual Switch (AVS) for Application Centric Infrastructure (ACI), in addition to our open source contributions to OVS.  Cisco has a large R&D investment in virtual switching, with a lot of talented engineers dedicated to this area, inclusive of those working on open-source contributions.

Nexus 1000V 3.0 release for vSphere is slated for August 2014 (general availability). This release addresses scale requirements of our increasing customer base, as well as an easy installation tool in the form of Cisco Virtual Switch Update Manager.   The Cisco AVS for vSphere will bring the ACI policy framework to virtual servers.  With ACI, customers will for the first time benefit from a true end-to-end virtual + physical infrastructure being managed holistically to provide visibility and optimal performance for heterogeneous hypervisors and workloads (virtual or physical).  These innovations and choices are enabled by the availability of open choices in virtual switching within hypervisors.

As we look forward to VMworld next month, we are excited to continue the collaborative work with platform vendors VMware, Microsoft, Red Hat, Canonical, and the open source community to maintain and continue development of openness and choice for our customers.  We are fully committed to this vision at Cisco.

Acknowledgement:  Juan Lage (@juanlage) contributed to this blog.



Authors

Balaji Sivasubramanian

Director, Product Management

UCS