TECH 5 - Beyond WAN Acceleration: Using Riverbed For More .

Transcription

TECH 5 - Beyond WAN Acceleration:Using Riverbed for more than justWAN accelerationDavid S. Michel – CIO: Burr & Forman LLPSean M. Power – Manager – IT Security and Infrastructure:L hLathrop&GGage LLPSteven R. Smoot, Ph.D. – VP of Technical OperationsRiverbed

Agenda What does Riverbed do in your Network? Branch Office Box Solution– Riverbed Services Platform - RSP– Steelhead Mobile Controller - SMC End to End Visibilityy and Performance Monitoringg– Cascade Summaryy Q/A

Imagine if You Could .Cut consolidation time by 50% with no performance hit3Avoid WAN bandwidth upgrades for 3 yearsYEARSImprove worker productivity globallyDrive more than 400% ROI in 6-9 months457%3

For 7800 Customers, theAnswer Is RiverbedSSavedd 5M iinsoftware costs 6.5M 65M savedd ini1 year 60M in5 yearsSSavingi 20M/yr 20M/via faster valuechaincollaborationAchieveAhia 6 mopayback andsave 20M“With Riverbed, remote users regularlygy access centralized data withoutexperiencing 45 minute wait times. Users are less frustrated and more productive,while IT costs have been lowered”-- Nat Thomas, Technical Director, CSX4

Riverbed is the IT PerformanceCompanyUnderstandThe Total PerformancePictureSPOTLIGHT CURRENTPERFORMANCE PAIN &POTENTIALOptimizeConsolidateThe ROI from Network,Storage, App, and CloudInvestmentsTo the data center andwithin the branchACCELERATE APPS,CUT BANDWIDTH COSTS,ENHANCE BCDR,IMPROVE STAFFPRODUCTIVITYSIMPLIFY CONSOLIDATION /VIRTUALIZATION ANDENABLE LOCAL-LIKEPERFORMANCE

Riverbed’s Complete Familyof Performance ProductsSteelheadAppliances & VirtualSteelhead*BRANCH OFFICECascadePRIVATE DATA CENTERPRIVATE CLOUDWANSteelhead MobileMOBILE WORKERSCloud Steelhead*PUBLIC CLOUDSECONDARY DATA CENTER

Riverbed’s Cloud DirectionCloud Services ProviderorBackupsD t CenterDataC tWANWANBack up or Archive to the Cloud

What is RSP? VMware Virtualization running on theSteelhead – VM Server 2 SupportS pport for 5 VM instances Steelhead is always in-path, but RSP providesfflexibleconfigurationsfffor differentffdata fflowscenarios (VNI’s – virtual network interfaces) RSP is a separate service running in ownmemory space – traffic and optimizationalways preserved

Use Cases for RSP Branch Services– DC, AD, File and Print, BranchCache– Consolidated core network services - Infoblox Security– IDS/IPS,/– Firewall (e.g. Checkpoint, Forefront),– Web Filtering (e.g. Websense)

IT Consolidation INSIDEthe branchBranch OfficeTodayServerConsolidation toData CenterADADDNS/ DHCPDNS/ DHCPPRINT SERVERPRINT SERVERFIREWALLMAIL SERVERFIREWALLAD,DNS/DHCPFILE SERVERSFIREWALLMAILSERVERFILERSPRINT SERVERFILERSSTORAGEWAN OPTIMIZATIONSTORAGEFILE SERVERSFurtherConsolidation atBranch OfficeAD, DNS/DHCPFIREWALLANY VIRTUALIZED SERVICE

Use Cases for RSP Enterprise Video– Efficient video streaming– Live video splitting at the edge– Content prepositioning– AutomatedA tt d redirectiondi ti forf theth user– Support for Flash and Windows Media– Polycom,P lQQumuanddWWindowsdMMediad

Use Cases for RSP Networking & Management– Routing – Vyatta– Riverbed Virtual Editions Steelhead Mobile Controller - SMC VE, Cascade Sensor VE– Satellite communication – SCPS– OPNET

RSP - Screenshot

RSP Networking In-band packages– LANAN VNIN forf LANAN to WAN dataflowd fl– WAN VNI for WAN to LAN dataflow– Virtual In-Path packages DNAT (IP, Port, IP & Port) – Proxy based solutions likeSAP/ADOW Mirror – Span port for network monitoring– Management VNIVNI’ss – primary/aux ports Out-of-band packages e.g.e g Windows ServerSer er

RSP Networking Example VNI for Cascade Sensor - VE

RSP Networking

Summary of Dataflow rulesPackageSolutionVNI IntegrationInteraction withOpt trafficWindows / InfobloxBranch ServicesMgmt / AuxNoneWebsenseURL FilteringVirtual InpathAll traffic copied to thepackageCheckpoint, McAfeeFirewall Enterprise,Microsoft TMGVPN and FirewallLAN/WAN BridgingOptimizable trafficredirected to packagePolycom, Qumu,AccordentMedia ServicesVirtual InpathRedirected topackage with Layer 3NATOpnet Ace Live,Riverbed CascadeNetwork MonitoringLAN/WAN BridgingSpan portVyattaRoutingVirtual InpathLayer 2 switch

RSP - Technical Considerations VM creation in VMserver, Workstation and P2VVirtual machine versions 4, 6, 7Check 32Bit/64Bit support per appliance model depending on what VMyou want to run– Desktop Models – 250, 500 3232-bitbit– 1U and Above – 64-bit For production critical RSP packages– recommend RAID kit for SH for the 1U models No thin provisioningMust install VMware toolsNo USB or CD/DVD support Memory supportedsupported, disc space supportedRiOS 6.0 and above – more RAM supportedCheck resources that appliance needs

Steelhead Mobile Software based implementation of Steelheadtechnology for your end-points GiveGi e youro r laptops and PC’s their ownSteelhead for optimization when workingremotely

Three Challenges For Mobile allenges!Is the stentconnectioncosts,andvolumes: a task?Lotsapplicationsona overwhelmedbandwidthLatencythroughputkillerg ”penvironmentp y isagainstgthe p

Making Acceleration Easy –For All Mobile UsersConcurrent licensing model A ‘pool’ of licenses for use by all mobileworkers Estimated 1 license per every 3 to 5 mobileworkers Other vendors do licensing per user 87 cost estimate per mobile userser (1:4(1 4 model)Pricing Steelhead Mobile Controller: 12,995(includes 30 licenses) 3 500 Steelhead Mobile Licenses: Starts at 3,500for 10Easy to manage Deploy to all laptops – pay only for what youneed Cluster Steelhead Mobile Controllers asneeded

Steelhead Mobile Solution –The 3 ComponentsSteelhead Mobile ControllerSteelhead Mobile Software Deployed on a laptop or desktop Deployed in the data centerPC Runs in ‘invisible’ or ‘visible’ mode Handles all licensing, detailedreporting, packaging & Reduces bandwidth needs Optimizes protocol inefficienciespolicies Windows 2000 SP4: XP SP3 (32 Supports up to 2,000bit versions only), Vista SP1 (32 bitconcurrent active Mobileversions only) Celeron 450MHz CPUclients Minimum 250 MB hard drive Clusters for scale(configurable up to 20 GB) Minimum one Steelhead 256 MB RAMMobile Controller required 1U rack mountable serverSteelhead Appliancepp Deployed in datacenter Any model4 requiredi d RiOS 4.x Communicates directlywith Steelhead Mobile

Two Deployment OptionsSMC-VE SMCSMC-VE,PRIMARY DATA CENTERBRANCH OFFICE Steelhead Mobile ControllerVirtual EditionEnterprise grade accelerationfor SMB or smaller strategicmobile deploymentsVirtual package deployed in theRiverbed Services Platform onSteelhead Appliance 5,995 with 10 concurrentlicensesSupports up to 100 concurrentactive Mobile clients WAN MOBILE WORKERS Steelhead Mobile ControllerApplianceDesigned for largedeployments and rapidlygrowing organizationsStandalone appliance deployedin the data center. 12,995 with 30 concurrentlicensesSupports up to 4,000concurrent active Mobile clientsClusters for scale

Steelhead Mobile - BenefitsHTTP & HTTPS Optimization Improved performance for all HTTP(S)HTTP Accelerationapplications Same approachppto HTTP(S)( ) optimizationpas RiOS 6.0 pprovides a completepsolution for web application acceleration for branch office and mobile workersBranch Warming “WarmWarm “performanceperformance regardless of location Sharing data references between mobile and branch officeworkers improves acceleration for the entire organizationBranch Office (LAN)Expanded Support for Next Generation Operating Systems & Platforms 64-Bit Systems: Optimization for memory and data intensiveapplications WindowsW d7:7 CConsistent performancefforf allll off Microsoft'sMf'modern OS’s

Use Cases forSteelhead MobilePandemic Planning Tools for mobility need to be inplace Business processes essential Most large customers do someform of planning Federal Telework MandateGGreenIT InitiativesI iti ti Consolidation efforts saveenergy, staff, equipment SHM saves cost of additionalappliances Real estate costsBackup Optimization Cost-effective Steelheadbackup mechanism Only active when Steelhead isnottDesktop Virtualization Integration into virtualizationtools Accelerate full virtualizationtools Accelerate Applicationvirtualization tools Thinstall, softricity, kidaro, ACE

Steelhead MobileReal World Performance Laptopp p offline for 1 week, mailbox not synchedy– Outlook 2003 After full synchronization – 52% reduction of MAPI traffic

Steelhead MobileReal World Performance New OST file (e(e.g.g OST file corruption) Mailbox – 1.14 GB Time ffor ffull caching over 15MbM DSL, 50mslatency Æ 29 minutes Æ 5Mb/s 72% bandwidth reduction Æ 1031 MB(LAN)/292 MB (WAN)

Steelhead MobileReal World Performance

Technical Considerations Windows and Mac support Careful with Out of path support dependingwhere serverser er side SH is Datastore size – larger data store translates tomore RAMAM Processor considerations Images did not have sysprep or ghostwalker –new SID needed

Cascade End to End layer 4 - 7 visibility and performancemonitoring– Which applications at which sites still require acceleration?– What performance level is each of your users experiencingnow?– AreA criticall metrics suchh as throughputhh& llatency wherehthehbusiness needs them to be?– Are specific applications or users slowing down yournetwork?– Tunneled applications

Cascade VisibilityManage ApplicationP fPerformance Monitor application delivery on thenetwork Minimize impact of service outages Resolve issues proactivelyStreamline WANOptimizationp Plan for WAN optimization, quickly identifybest candidate sites for optimization AssessAiimpactt off WAN optimizationti i tideployment and quantify benefitsEnsure SuccessfulConsolidation Reduce costs and risks of IT consolidation Accelerate application discovery anddependency mapping

Cascade: a different way tolook at your networkBehavioral Analytics Learns typical network and application behavior patterns andalerts you to meaningful changes A cost-effective way to monitor your applicationsNetwork Drill-DownEnd-to-EndDependencyMappingRiverbed SteelheadFluency Drill down to network performance metrics per application, host,user, and much more Business-centric view of your infrastructure, with extendedtroubleshooting capabilities Identifies application, server and client dependencies withoutagents Helps you understand the impact of change on applicationdelivery Analyze application performance across optimized andnon-optimized sites Unified, plug-and-play WAN optimization reporting

Cascade Deployment Topology

Cascade Analytics End-user experience metrics feed into the Cascade behavioral model Normal behavior is automatically learned – no configuration isnecessary If users experienceislowlperformance,falarmlconditionditi iis ttriggeredid

Use Cascade to drill down &Example: problem relateddiscover problem sourcesto high WAN utilizationL t’ fifindd theLet’sth applicationli tiLet’ss find the serverLetWhich user is responsible?We found it’s John Smith

The Cascade product lineNOCCascadeProfiler &GatewayData CenterCascadeSensorWeb TierApp TierCascadeSSensor-VEVEDB TierDNSADNTPProfilerSensor Centralizedreporting & analysis Behavioral analytics Collects data fromsensors & gateways Sized based on flowper minute capacity Layer 7 applicationclassification End-user experience Performance metrics Collects traffic fromSPAN ports or taps Deployed in data centerGatewaySensor-VE Collects flow data from selectedsources Supports all flow types Deploy w/profiler or regionally End-user experience Performance metrics Loads as RSP package Deployed in branch

Cascade competitive overviewCascadeBlueCoatAutomatedu o a ed aanalyticsa y cs based oonlearned normal behavior9Click and pivot, drill-down interfacefor all metrics9Dynamic, end to end, client-serverdependency maps9End-user experience metrics andmonitoring9Layer-7 application fingerprinting99Security & Compliance999Single vendor, tightly integratedsolution with automatic P k t capturePackett andd analysisl iNetFlow reporting, all sourcesNetQoS(Cisco)99999999999999

Cascade – Use Case MTTTR – reduction in mean time to troubleresolution Network warning Replay Massive retention of traffic analytics With CascadeCd– Identified 2 network misconfigurations applicationppavailabilityy reportingpg and alertingg new host alerts automated vulnerability scans– Server consolidation reporting.

Q/ATHANK YOU

TECH 5 - Beyond WAN Acceleration: Using Riverbed for more than just WAN acceleration David S. Michel – CIO: Burr & Forman LLP Sean M. Power – Manager – IT Security and Infrastructure: L h & G LLPLathrop & Gage LLP Steven R. Smoot, Ph.D. – VP of Technical Operations Riverbed. Agenda What does Riverbed do in your Network? Branch Office Box Solution – Riverbed Services Platform .