Last week I had the opportunity to attend the Gartner Data Center conference in London. I attended 3 different sessions on SDN-related topics. Here are some of my observations from what was a very good conference. Also, since the Gartner Data Center conference runs this week (w/c 1 December 2014) in the US, if you are going, here are some questions to think about when you attend the SDN sessions.
(1) What does “lack of visibility” in Virtual Overlays really mean?
(2) In multi-layer SDN, will SDN be cheaper than our current networking approach?
(3) Are Vendors Guilty of Using NFV for SDN “Washing”?
(4) If OpenStack is part of your SDN solution, can you help us on OpenStack?
(5) What is the best hardware server platform for NFV/virtualised workloads?
(6) How exactly does SDN deliver better network management?
I’ll cover a few questions today and some tomorrow.
In the past, we have pointed out that configuring network services and security policies into an application network has traditionally been the most complex, tedious and time-consuming aspect of deploying new applications. For a data center or cloud provider to stand up applications in minutes and not days, easily configuring the right service nodes (e.g. a load balancer or firewall), with the right application and security policies, to support the specific workload requirements, independent of location in the network is a clear obstacle that has to be overcome.
Let’s say, for example, you have a world-beating best-in-class firewall positioned in some rack of your data center. You also have two workloads that need to be separated according to security policies implemented on this firewall on other servers a few hops away. The network and security teams have traditionally had a few challenges to address:
If traffic from workload1 to workload2 needs to go through a firewall, how do you route traffic properly, considering the workloads don’t themselves have visibility to the specifics of the firewalls they need to work with. Traffic routing of this nature can be implemented in the network through the use of VLAN’s and policy-based routing techniques, but this is not scalable to hundreds or thousands of applications, is tedious to manage, limits workload mobility, and makes the whole infrastructure more error-prone and brittle.
The physical location of the firewall or network service largely determines the topology of the network, and have historically restricted where workloads could be placed. But modern data center and cloud networks need to be able to provide required services and policies independent of where the workloads are placed, on this rack or that, on-premises or in the cloud.
Whereas physical firewalls might have been incorporated into an application network through VLAN stitching, there are a number of other protocols and techniques that generally have to be used with other network services to include them in an application deployment, such as Source NAT for application delivery controllers, or WCCP for WAN optimization. The complexity of configuring services for a single application deployment thus increases measurably.
To address many questions about mobility, I am delighted to share with you our point-of-view through our “Cisco SPotlight Series,” an ongoing course of videos in which we answer questions and provide commentary on many hot topics in the service provider industry.
In this latest video, I reveal what mobile operators and their customers, including enterprises and end-users, can expect in 2015 as mobile Internet networks are increasingly becoming virtualized, and virtualization is increasingly becoming networked. Read More »
In the previous blog, we covered details about Cisco AVC enhancements with AireOS 7.6 that allow you to classify various collaboration applications such as Cisco Jabber™, Cisco WebEx®, Microsoft Office 365, Microsoft Lync, and Microsoft Skype. Many customers have deployed voice-over-WLAN in mission-critical environments. The goal in this blog is to walk you through the collaboration specific enhancements implemented since then, that enable customers to get a great experience when supporting Microsoft Lync over Cisco WLAN.
The above picture shows the timeline for various AVC, policy and Lync enhancements. The crucial updates since AireOS 7.6 are: