Cisco ACE Replacement Cisco & Citrix Networking

Transcription

Cisco ACE replacementCisco & Citrix NetworkingSimeon Bosshard, Systems EngineerCitrix Systems International GmbH06.11.2014

Cisco and Citrix work together to enable SDNand data center transformation 2014 Citrix

NetScaler 1000VCisco OEMVirtual NetScalerNexus 1000vvPath Virtual NetworkOverlayVMDC CVDVSA 1.0Nexus 7000RISE IntegrationVMDC CVDDCI 1.0Mobile Workspaces CVD1.0FlexPodCisco, Citrix NetAppPrime Network Services 2014 CitrixOpen DaylightNexus 9000ACI APICVCE VblockCisco, Citrix, EMC

Typical Deployments Sized1 - 16 Gbps (64 Gbps Max)GSS-4492R – Global Server Load Balancing 20k DNS RPSCSS & ACE4710ACE-4710 / ACE-30Single Tenant 1 or 2 VC’s: Production & Staging/Test 2-4 SSL Vservers Single Role for AdministrationMultiple Tenants 5 VC’s 10 SSL Vservers (2 per context) RBAC (Basic Roles)ACE-30 ServiceModule & MultiChassis 2014 CitrixService Providers 100 VC’s RBAC (Extensive Roles, Per VC AAA) Server Load BalancingApplication Optimization &Application SecurityVirtual Context SupportMultimedia & Voice SupportPay as you grow Throughputlicense upgrades (SSL, VC’s,Compression)Support for Cisco Catalyst 6500& 7600

Cisco ACE / CSS / CSM to NetScalerCisco ModelThroughputCitrix NetScalerACE 47100.5 – 4 GbpsMPX {5550, 5650, 8005}ACE 30 SM4, 8, 16 GbpsMPX {8005, 8015, 11515}CSS 11501S-C1.8 GbpsMPX 5550CSS 115036 GbpsMPX 5650CSS 1150612 GbpsMPX 11515Cisco CSM4 GbpsMPX 8005Cisco GSS – All NetScaler MPX Enterprise & PlatinumEach NetScaler MPX/SDX model matches or beatsequivalent Cisco ADC platforms for price & performance 2014 Citrix

Cisco ACE/CSS/CSM and Recommended NetScaler ADCsCisco ModelThroughputCitrix NetScalerThroughputACE 47100.5 GbpsMPX 55500.5 GbpsACE 47101 GbpsMPX 56505 GbpsCSS 11501S-C1.8 GbpsMPX 80055 GbpsACE 47102 GbpsMPX 80055 GbpsACE 47104 GbpsMPX 80055 GbpsACE 30 SM4 GbpsMPX 80055 GbpsCisco CSM4 GbpsMPX 80055 GbpsCSS 115036 GbpsMPX 801515 GbpsACE 30 SM8 GbpsMPX 1151515 GbpsCSS 1150612 GbpsMPX 1152020 GbpsACE 30 SM16 GbpsMPX 1153030 GbpsFor Cisco GSS (Global Site Selector) - any NetScaler MPX appliance supporting NetScaler Global Server Load Balancing (GSLB)capabilities – Enterprise or Platinum Edition 2014 Citrix

Citrix NetScaler 1000V – ADC from Cisco Virtual NetScaler ADC Available as Cisco software Sold and supported by CiscoSold andsupported byCisco 2014 Citrix ADC for Nexus 1000V VirtualizedData Center

Citrix NetScaler 1000V – Platform OptionsCitrix NetScaler 1000V on ESXi (e.g. UCS)ᵒ Up to 4 Gbps throughputᵒ Works on any commodity serverCitrix NetScaler 1000V on Nexus 1110-Xᵒ Nexus 1110-X – Cloud Services Platform (CSP)ᵒ Platform for multiple Virtualized Network Servicesᵒ NetScaler SW Nexus HW Cisco ADCHW SSL for NetScaler 1000V on Nexus 1110-X** Roadmap Q3 2014, subject to change 2014 CitrixNetScaler1000V

Nexus1000VIntegrationusing vPath 2014 CitrixNexus 1000vvPath VirtualNetwork Overlay Virtual Network Overlay through Service Chaining

NetScaler 1000V in the Nexus 1000V VirtualizedData CenterTenant ACisco VirtualSecurityGatewayASA r 1000VvWAASZone AZone BNexus 1000V Distributed Virtual SwitchvPathVXLANMulti-Hypervisor (VMware, Microsoft*, RedHat*, Citrix*)Nexus 1000VvWAASASA 1000VVSGCSR 1000V(Cloud Router) Distributed switch WAN optimization Edge firewall, VPN VM-level controls WAN L3 gateway NX-OS consistency Application traffic Protocol Inspection Zone-based FW Routing and VPN NetScaler1000VCitrix NetScaler ApplicationDelivery Controller Citrix NetScaler Web AppFirewall 2014 Citrix

vPath Service Chaining – Virtual NetworkOverlay Policy based traffic steering through virtualized network Cisco Nexus 1000VCisco vPathDistributed Virtual Switch321vPath EncapsulationLogical packet flow 2014 CitrixCitrix NetScaler

VMDC CVDVSA 1.0VMDC CVDDCI 1.0CiscoValidatedDesigns 2014 Citrix Virtualized Multiservice Data Center (VMDC)

Cisco VMDC: Virtual Multi Service Data Center CVDs incorporating NetScalerVMDC Virtual Services Architecture (VSA) 1.0ᵒ Logical topology optimized for higher tenancyᵒ Incorporates NetScaler VPX & NetScaler 1000vVMDC Data Center Infrastructure (DCI) 1.0ᵒ Virtual private cloud tenant containers in shared datacenterᵒ Incorporates NetScaler SDX Available on www.cisco.com/go/vmdcCitrix NetScaler is ADC for VMDC CVDs 2014 Citrix

Cisco PrimeNetworkServicesController 2014 CitrixPrime NetworkServices NetScaler Integration via OpenStack

Cisco Prime Network Services Controller Able to configure NetScaler using Openstack APIs 2014 Citrix

Cisco Prime Network Services ControllerPrime NSC is able to configure and manage NetScalerᵒ Uses Openstack APIs to configure/manage NetScalerᵒ Virtual NetScaler instance creation from Prime controller using Openstackᵒ Platforms: NetScaler VPX and NetScaler 1000V Hypervisor: KVMNetScaler 1000V is part of Cisco Cloud Service - Cisco Intercloudᵒ Cisco Cloud Services builds / manages clouds for service provider customersᵒ bal-intercloud/ 2014 Citrix

Cisco RISEN7KIntegrationwith CitrixNetScaler 2014 CitrixNexus 7000RISE Integration Data Center Automation

Data Center Switching and L4-L7 ADC ServicesL4-L7 ADC services haven’t kept up with L2-3switching speedsᵒ Switching speeds are Terabit / secᵒ ADC speeds are Gigabit / secRules out inline ADC deploymentsOne-arm NetScaler deployments are typicalᵒ 70-80% of deployments are one-arm 2014 Citrix

Service Integration Challenges within DataCentersService ModulesAppliancesRISE-enabled appliancesRISE provides best ofboth worlds!RISETightly embedded withswitch backplaneSlot is expensivePerformance bottleneckScaling is difficult 2014 CitrixPreserves slot spaceNo performancebottleneckStatic conns, No switch intelligenceScaling is difficultOperational efficiencySimplified manageabilityPerformance advantageMutual switch intelligencebenefitsMulti-vendor ecosystemScalable and flexible

Cisco Remote Integrated Service Engine (RISE) Logical integration of a NetScaler with Nexus 7000 and 7700 platformsLogical RISE TopologyCon t r o l P l a nePhysical Topology 2014 Citrix

Auto-Discovery/Bootstrap of NetScaler by N7K Reduces Steps to InstallDirectly Attached NS to Nexus7000 Line Card PortsVirtual Slot ID assignedData & Control Channels Established1. Create port-channelAuto discovery & bootstrap2. Set up trunk vlans1/11/21/31/4NetScalerAppliance 2014 CitrixFour Simple Steps toGetting Connected5/15/26/16/23. Create rise service toget an assigned slotallow vlan 10, 21, 32-35Nexus70004. Interconnect theNetScaler with theN7k

RISE Automated Policy Based Routing Optimized traffic flows in the data center Traffic flows are directed to theNetScaler APBR Rules redirect return traffic toNetScaler Benefits No need for Source-NAT1. Client VIPInternet2. Client VIP3. Client Server6. Server Client7. VIP Client No manual PBR configuration needed Preserves Client IP Visibility withoutthe operation cost of Traditional PolicyBased Routing 2014 Citrix8. VIP Client5. Server ClientAPBRrules4. Client Server

RISE Automated Routing Updates* Integrated Routing using RISE Route updates are communicated over the RISEcontrol channelAutomated RoutingUpdates Allows NetScaler ADC to advertise (add or delete)the VIPs to Nexus 7000 dynamically based onoperational status of VIPs Routing protocols on Nexus 7000 can redistributeVIP routes to rest of the network* Roadmap Q3 2014, subject to change 2014 CitrixInternetRHI Pushes VIP Availability intoNexus Routing Layer

Netscaler Appears as Virtual Service Module N7k SUP recognizes NetScaler as a RISE service module.switch# show service rise ersion---------------- ----------- ------------- --------- --------- ---------------tme-riseRISEN/A332activeNetScaler NS10.5 N7K SUP can attach a RISE module and access NetScaler CLI via SSH from N7K Access to NetScaler CLI from N7k‘attach rise slot X’‘attach rise name ABC’ 2014 Citrixto ssh to appliance/vm

NetScaler Monitoring in Nexus DCNM 2014 Citrix

HW, Versions, and License RequirementsPlatformsᵒ Nexus 7000 Series Switches – M-Series and F-Series Modulesᵒ NetScaler MPX, SDX, VPX. Also NetScaler 1000V from Ciscoᵒ Cisco Prime NAM has added RISE support in version 6.02Versionsᵒ Nexus NX-OS 6.2.8ᵒ NetScaler 10.1e Build 124, 10.5 and laterLicensesᵒ Nexus Enhanced Layer 2ᵒ NetScaler Enterprise Edition, Platinum Edition 2014 Citrix

Nexus 9000ACI APICCisco ACI 2014 Citrix Application-Centric Networking (SDN)

ACI – driving business transformationAPPLICATIONSBYODMOBILECOMMON POLICYDECOUPLE APPLICATION & POLICY FROM IP INFRASTRUCTURECIOIP NETWORKBUSINESS DECISIONSTimeSLA 2014 CitrixGovernanceAuditCost

Application centric infrastructureNexus 9500APICNexus 9300 and 9500PhysicalNetworkingHypervisorsand i DCWAN and CloudNexus 7KNexus 2K 2014 CitrixIntegratedWAN Edge

APIC - Application Policy InfrastructureControllerCisco APIC is single point of automation and fabric element managementᵒ Common policy, management and operations interfaceᵒ Application control and automation over both physical and virtual networkingcomponentsNetScaler integrates with Cisco APIC for L4-L7 ADC 2014 Citrix

APIC DEVICE PACKAGE FOR NETSCALER Full NetScaler Feature Set 2014 Citrix

Service Graphs – Drag and Drop ConfigurationEase 2014 Citrix

Q&A

Jun 11, 2014 · Cisco ACE replacement Cisco & Citrix Networking Simeon Bosshard, Systems Engineer Citrix Systems International GmbH 06.11.2014