思科Nexus9000-ACI产品和技术最新进展发布

ACIUpdate&OpenNX-OSCiscoINSBUMaxYang观看同期在线研讨会：=9082&ad_id=bdc131&KeyCode=test©2015Ciscoand/oritsaffiliates.Allrightsreserved.英特尔、英特尔标识、至强和XeonInside是英特尔公司在美国和其他国家的商标。ServiceProducersEPG“Users”EPG“Files”LeafNodesSpineNodesEPG“Internet”AVSServiceConsumersACINomenclature思科ACI技术采用英特尔®至强™处理器©2015Ciscoand/oritsaffiliates.Allrightsreserved.英特尔、英特尔标识、至强和XeonInside是英特尔公司在美国和其他国家的商标。CentralizedPointofManagement,AutomationandPolicyEnforcementPOLICY:ApplicationcentricnetworkpolicySECURE:SecurityandperformanceatscaleVISIBILITY:System-widevisibility,telemetryandhealthOPENNESS:OpenNorthboundandSouthboundEXTENSIBLE:Hypervisors,L4-7servicesintegration/chainingINTEGRATEDOVERLAY(Physical/Virtual)思科ACI技术采用英特尔®至强™处理器©2015Ciscoand/oritsaffiliates.Allrightsreserved.英特尔、英特尔标识、至强和XeonInside是英特尔公司在美国和其他国家的商标。SecureMulti-Tenancy—BusinessUnitsandApplications•Idealforthecompanysplit•Policyautomationfollowsapplications,notphysicallocation•Re-useablebutseparateIPaddressspaceSheilaJordan,CIO思科ACI技术采用英特尔®至强™处理器©2015Ciscoand/oritsaffiliates.Allrightsreserved.英特尔、英特尔标识、至强和XeonInside是英特尔公司在美国和其他国家的商标。CiscoACI:TheMostCompleteSDNSolutionACIComplements,Enhancesand/orReplacesAnyOtherSDNOfferingACIFullSDNApproachProgrammableFabricVirtualizedApplicationsBareMetalApplicationsOROptionalSoftwareOverlay思科ACI技术采用英特尔®至强™处理器ExtendingACItoMultiplePODs,Sites&PolicyZones©2015Ciscoand/oritsaffiliates.Allrightsreserved.英特尔、英特尔标识、至强和XeonInside是英特尔公司在美国和其他国家的商标。StretchedACIFabricDCSite1DCSite2ACIFabric•Singlefabricstretchedtotwosites•OneAPICcluster.Onemanagementandconfigurationpoint•DistributedanycastGWonallleafswitchesvCenterServerTransitleafTransitleaf思科ACI技术采用英特尔®至强™处理器©2015Ciscoand/oritsaffiliates.Allrightsreserved.英特尔、英特尔标识、至强和XeonInside是英特尔公司在美国和其他国家的商标。SupportedDistancesandInterconnectionTechnologiesDarkFiberTransceiversCableDistanceQSFP-40G-LR410kmQSFP-40GE-LR410kmQSFP-40GLR4L2kmQSFP-40G-ER430kmin1.0(4h)orearlier40kmin1.1andlater(planned)ForallthesetransceiversthecabletypeisSMFDCSite1DCSite2APICAPICAPICACIFabricvCenterServerTransitleafTransitleaf思科ACI技术采用英特尔®至强™处理器©2015Ciscoand/oritsaffiliates.Allrightsreserved.英特尔、英特尔标识、至强和XeonInside是英特尔公司在美国和其他国家的商标。10msRTTSupportedDistancesandInterconnectionTechnologiesDWDM•DWDMsystemprovidesconnectivitybetweentwosites.•SRwithMTP-LCbreakoutcablebetweenACInodeandDWDMsystem•1.0(3f)releaseorlater,Max10msRTTbetweensites•Undernormalconditions10msallowsustosupporttwoDCsupto150KMsapartDCSite1DCSite2APICAPICNodeID1NodeID2NodeID3APICDWDMDWDMQSFP-40G-SR4MTP-LCbreakoutcable40G40G40G40G40G40G思科ACI技术采用英特尔®至强™处理器©2015Ciscoand/oritsaffiliates.Allrightsreserved.英特尔、英特尔标识、至强和XeonInside是英特尔公司在美国和其他国家的商标。SupportedDistancesandInterconnectionTechnologiesEthernetoverMPLS(EoMPLS)•PortmodeEoMPLSusedtostretchtheACIfabricoverlongdistance.•DCInterconnectlinkscouldbe10G(minimum)orhigherwith40GfacingtheLeafs/Spines•DWDMorDarkFiberprovidesconnectivitybetweentwosites.•1.0(3f)releaseorlater,Max10msRTTbetweensites.•Undernormalconditions10msallowsustosupporttwoDCsupto800KMsapart.•OtherportsontheRouterusedforconnectingtotheWANviaL3Out10msRTT800KM/500milesDCSite1DCSite2APICAPICNodeID1NodeID2NodeID3APICQSFP-40G-SR440G40G40G10G/40G/100G10G/40G/100G40GEoMPLSPseudowireWAN思科ACI技术采用英特尔®至强™处理器ACI–AScalableSecurityArchitecturefortheNEXTGENDataCenter©2015Ciscoand/oritsaffiliates.Allrightsreserved.英特尔、英特尔标识、至强和XeonInside是英特尔公司在美国和其他国家的商标。RightSecurityArchitectureforDataCenter?VIRTUALIZATIONCENTRICNoPhysicalSupportLimitedVisibilityManagementComplexityAPPLICATIONCENTRICAnyworkloadandanyplaceFullVisibilityAutomatedPERIMETERCENTRICManualandComplexError-ProneStaticTopologyLimitedPlaces思科ACI技术采用英特尔®至强™处理器©2015Ciscoand/oritsaffiliates.Allrightsreserved.英特尔、英特尔标识、至强和XeonInside是英特尔公司在美国和其他国家的商标。TRUSTBASEDONLOCATION(TraditionalDCSwitch)Servers2and3cancommunicateunlessblacklisted1423NocommunicationallowedbetweenServers2and3unlessthereisawhitelistpolicyZEROTRUSTARCHITECTURE(Nexus9KwithACI)EPG1“WEB”EPG2“APP”1234ACIWhitelistPolicysupports“ZeroTrust”Model思科ACI技术采用英特尔®至强™处理器©2015Ciscoand/oritsaffiliates.Allrightsreserved.英特尔、英特尔标识、至强和XeonInside是英特尔公司在美国和其他国家的商标。ACIEnablesFlexibleSecurityModelsforSecuringEast/WestTrafficServicesGraphandEmbeddedDistributedFirewallACIFabricwithEmbeddedFirewallFirewallatEachLeafswitchServers(PhysicalorVirtual)ACIFABRICWITHEMBEDDEDFIREWALLFIREWALLPOOLVIAACISERVICEGRAPHPoolofFirewalls(physicalorvirtual,locationindependent)DatacenterAccess/AggregationNetworkPolicyenforcedonsteeredtrafficviaACIServiceGraphSizingatscaleenabledviapoolandACIdynamicredirectionPolicyboundtonetworkconstructs(e.g.:TCPports)StatelessFirewallattachedtoeveryserverportLineratepolicyenforcementPolicyfollowsworkloadsACIServicesGraphACIFabricwithServiceChaining思科ACI技术采用英特尔®至强™处理器©2015Ciscoand/oritsaffiliates.Allrightsreserved.英特尔、英特尔标识、至强和XeonInside是英特尔公司在美国和其他国家的商标。TheChallenge:SecuringEast/WestTrafficInsideDatacenterInfectedWebserver1LackofEast/WestsecuritybetweenseveralapplicationsenablesattackstospreadlaterallyMicro