Cisco Blogs


Cisco Blog > Data Center

Interop 2015 : ITD is Best of Interop finalist

 

ITD (Intelligent Traffic Director) has been selected in Top 3 finalists in the Best of Interop 2015 Data Center category. ITD Delivers:

  • $2 Billion TAM disruptive technology: This technology innovation disrupts today’s $2 Billion TAM for load-balancers, redirection and clustering solutions
  • 100x Scale improvement: The high-end load-balancers today can handle about 200Gbps traffic. ITD can load-balance 20Tbps traffic.
  • 1000x cost-savings for customers: A 40Gbps L4 load-balancer costs about $200k to customers. ITD provides multi-Tbps load-balancing for a fraction of the price.
  • Zero Latency: ITD performs load-balancing, redirection, NAT and access control, all in one-clock cycle in hardware, hence it introduces zero latency.
  • 10x OPEX savings : Order of magnitude reduction in configuration, and ease of deployment
  • Overall CAPEX savings : Wiring, Power, Rackspace and Cost savings
  • 70+ customers interested in deploying within 1 month of shipping.
  • 10x High availability : N + M redundancy, health-monitoring and automatic failure handling
  • $15 Billion install-base can be leveraged: The technology has humongous market capture potential. It works on existing hardware. $15 Billion install-base of Nexus switches is able to use this technology.
  • 30+ patentable ideas: ITD has unprecedented innovations.

Cisco ITD (Intelligent Traffic Director) is a hardware based multi-Tbps Layer 4 load balancing, traffic steering and clustering solution on Nexus 9K/7K/6K/5K series of switches. It supports IP-stickiness, resiliency, NAT, (EFT), VIP, health monitoring, sophisticated failure handling policies, N+M redundancy, IPv4, IPv6, VRF, weighted load-balancing, bi-directional flow-coherency, and IPSLA probes including DNS. There is no service module or external appliance needed.

BOI15_Finalist_stacked_728x90

ITD has a lot of different types of use-cases. Some of these are:

  1. Create a multi-Tbps Firewall
  2. Create a multi-Tbps Video-cache
  3. Firewall/IPS/IDS/WAF load-balancing.
  4. Web Server load-balancing
  5. Application server load-balancing
  6. Replace WCCP. Redirect and Load-balancing traffic to Web-cache, WAAS, WAE
  7. Traffic steering to VDS/video-cache/Professional Media Network devices
  8. Load-balance to Hadoop/Big-data cluster.
  9. load-balancing to mobile equipment
  10. Load-balancing to Layer 7 load-balancers
  11. Replace legacy features such as ECMP, port-channel, PBR, etc

Recording of the presentation

 

Tags: , , , , , , , , , , , , , , , , , , , , ,

Cisco ITD is Best of Interop 2015 Finalist

Transforming Cisco switches into highly scalable zero latency load balancers! Cisco Intelligent Traffic Director (ITD) does exactly that and much more!

Cisco ITD  has been selected as Best of Interop 2015 finalist in the Data Center Category. Finalists were chosen from nine categories including Data Center, Mobility, SDN and Cloud Technologies.

BOI15_Finalist_728x90-550x68
Cisco Intelligent Traffic Director (ITD)  is an innovative solution to bridge the performance gap between a multi-terabit switch and gigabit servers and appliances. It is a hardware based multi-terabit layer 4 load-balancing, traffic steering and clustering solution on the Nexus 9K,7K,6K,5K series of switches. Customers do not have to buy any new hardware. It works on all the existing hardware, linecards and supervisors.

Here are some of the quotes from customers, account teams, industry analysts and architects:
“Great milestone Samar Sharma, Mouli Vytla, Rajendra Kumar Thirumurthi  and team! We are very grateful for the work you guys did with pioneering and driving this new solution!”

ITD  helped us scale to 1Tbps of cache traffic in single Nexus 7700 ”

“This feature seems almost too good to be true! I am very excited about it.”

“Customers really enjoyed the time and the subject. They said it was the best presentation of the week at Cisco Live”

“Turns out we likely have a far superior solution in ITD  that we can bring to the table.  One of our web space principles is ‘state is the enemy of scale’ and ITD aligns very well with this mentality without sacrificing too much flexibility or control. It is still early in our conversations but we are confident that ITD will play a strategic role for scaling services”

Click  to find out more! You can also visit Cisco Interop Booth at Interop Las Vegas to find out about Cisco ITD Solution!

Tags: , , , , , , , , , , , , , , , , ,

ITD: Load Balancing, Traffic Steering & Clustering using Nexus 5k/6k/7k

best

Data traffic has grown dramatically in the recent years, leading to increased deployment of network service appliances and servers in enterprise, data center, and cloud environments. To address the corresponding business needs, network switch and router architecture has evolved to support multi-terabit capacity. However, service appliance and server capacity remained limited to a few gigabits, far below switch capacity.

Cisco Intelligent Traffic Director (ITD) is an innovative solution to bridge the performance gap between a multi-terabit switch and gigabit servers and appliances. It is an hardware based multi-terabit layer 4 load-balancing, traffic steering and clustering solution on the Nexus 7000 and 7700 series of switches.

Read More »

Tags: , , , , , , , , , , , , , , ,

Scaling Application Security with ITD

Ready to scale your enterprise beyond limits?  How about slashing a whole layer of datacenter infrastructure, saving piles of cash in the process?  Or perhaps you’re interested in simplifying your enterprise while adding features, or trying to speed things up without spending money.  Sound too good to be true?  Well, thanks to a new technology from Cisco, you can have your cake and eat it, too.

Cisco Intelligent Traffic Director (ITD) is poised to disrupt data center load balancing. Combined with best-in-class products, such as Imperva SecureSphere, organizations can deploy and manage massively scalable applications securely with unprecedented ease and cost effectiveness.

What is ITD?

Cisco recently released a new feature, Intelligent Traffic Director (ITD) for the Nexus 7k switches that promises to be a disrupting force in the world of load balancing.  There has been an exponential growth in data traffic in the recent years leading to a growth in the deployment of network service appliances in enterprise, datacenter and cloud environments. To address the corresponding business needs, network switch and router architecture has evolved to support multi-terabit capacity. However, service appliance capacity remained limited to few gigabits, an order of magnitude far below switch capacity.

Cisco Intelligent Traffic Director (ITD) is an innovative solution that tries to bridge performance gap between the switch and service appliance(s). It allows customers to deploy service appliance(s) from any vendor with no network or topology changes. With a few simple configuration steps on a Cisco Nexus 7000 / 7700 series switch, customers can create a service appliance cluster and deploy multiple appliance(s) to scale service capacity with ease. The servers or appliance(s) do not have to be directly connected to the Nexus switch.

Application Security
Gartner published a paper called Web Application Firewalls are Worth the Investment for Enterprises in Feb, 2014 that makes the case that “Firewalls and intrusion prevention systems don’t provide sufficient protections for most public-facing websites or internal business-critical and custom Web applications.” Gartner advises enterprises to use a Web Application Firewall (WAF) to protect critical external and internal applications from attacks and threats.

Like other service appliances, a WAF appliance benefits from ITD’s ability to manage large scale traffic loads. Imperva SecureSphere WAF works with ITD, and the combination provides highly scalable application security.

I mention SecureSphere because Imperva was positioned as the only Leader in the Gartner 2014 Magic Quadrant for Web Application Firewalls. Some key capabilities of the SecureSphere WAF are:

  • Block attacks with laser precision
    Accuracy is critical with application security. If you have false positives, you block customers; if you have false negatives, you let the bad guys in.
  • World-renowned application security research
    Security is constantly evolving. To get ahead and stay ahead in the continuous fight against threats, Imperva has a dedicated security research team, the Application Defense Center (ADC), which provides regular signature and policy updates, and up-to-date threat intelligence for Imperva SecureSphere.
  • Shut down malicious sources and bots
    Imperva’s ThreatRadar Reputation Services help detect bad actors using IP reputation feeds of known malicious sources, anonymizing services, phishing URLs, TOR (“The Onion Router”), as well as IP geolocation data.
  • Stop application DDOS and business logic attacks
    Business logic attacks include things like posting comment spam in forums and message boards, scraping web content, and disabling access to your website. All of this can reduce competitive edge, frustrate customers, and damage reputation.
  • Instantly patch website vulnerabilities
    It takes organizations an average of 6 months to patch an application vulnerability once it’s discovered. SecureSphere integrates with vulnerability scanners to virtually patch applications. This allows businesses to stay protected, and fix the vulnerability on their own timeline, thus reducing the window of exposure and the associated costs.
  • Gain forensics insights with customizable reports
    Graphical reports enable organizations to quickly analyze security threats and meet compliance requirements.
  • Speed up deployment without risk
    SecureSphere protects applications without impacting performance and without requiring extensive network changes. It offers flexible inline, non-inline, and proxy deployment options that meet organizations’ diverse requirements. SecureSphere’s Fail-Open capabilities combined with unique, transparent bridge mode saves time and labor with drop-in deployment that requires no changes to existing applications or network devices, and delivers multi-Gigabit throughput while maintaining sub-millisecond latency.

Scaling Application Security

Using ITD in VIP Mode to load balance provides a fast and economical way for organizations to provide highly scalable and available infrastructure.  By leveraging ITD, an enterprise can deploy a single IP address (the VIP), which is then load balanced across many SecureSphere WAFs, with each one protecting the back-end webservers. This is done right from the 7K – There’s no need for an external load balancer in the middle.

Why is this better than other Load Balancers?

By combining Cisco ITD and SecureSphere’s advanced capabilities to monitor and secure HTTP traffic, several key advantages are apparent:

  • Eliminates the need for external load balancers, freeing up large amounts of budget and resources
  • You get the advantages of a proxy-type load balancer (1 single VIP represents many webservers), but still get ‘fail-open’ bridges on WAFs
  • ITD proxies traffic without interfering with the TCP Source IP Address , allowing SecureSphere to leverage the source IP, User and Session details for blocking and alerting.
  • To work with SecureSphere, ITD requires no modification to HTTP Headers (e.g., X-Forwarded-For), which can break applications and slow down traffic

What does this mean for the future of high performance WAF deployments?

By teaming up the Cisco Nexus 7K with SecureSphere WAFs, organizations can cost effectively deploy scalable, high-availability  WAF farms to handle large amounts of traffic to webservers.  As the web traffic increases, WAFs can be seamlessly added to the pool to scale up with the enterprise. Since every port on the 7K can be used as a load balancer this provides the potential to scale up to multi-terabits of throughput to a SecureSphere WAF cluster.

In conclusion, ITD and SecureSphere provides simple, cheap, fast, scalable, and reliable security infrastructure. Sort of like having your cake, with icing, and cherries on top – and eating it, too.

Feedback or Query: For feedback, query or EFT/PoC/demo please email: ask-itd@external.cisco.com

ITD White paper:  At a glance

Configuration Guide: Config guide

 

Tags: , , , , , , ,

Best Practices for Application Delivery in Virtualized Networks – Part II

As we start off this New Year, how about including a resolution to improve application delivery? In Best Practices for Application Delivery in Virtualized Networks – Part I , we covered key application delivery challenges that have come up due to the complexities of managing the many types of applications that enterprises use today, and further complicated by data center consolidation and virtualization. We then covered some best practices, courtesy of Dr. Jim Metzler’s 2011 Application Service Delivery Handbook, which recommended taking a lifecycle approach to planning and managing application performance.

A key step to the lifecycle approach is to implement network and application optimization tools, such as WAN Optimization solutions and Application Delivery Controllers, including server load balancers. Of course, these solutions are not new to the market and already address many of the needs that exist with delivering enterprise applications in virtualized data centers – namely, the need to ensure network reliability, availability and security for users accessing these applications. In this post, we will discuss a recent study by IDC, where IT decision makers across Europe and the US spoke out about their strategies for using server load balancers to deal with emerging challenges.



.                                                                                                                                                                                                                                                                                              What important attributes do you look for in your server load balancers?

Read More »

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,