Next Generation Data Center Networks Technology and Market Review & Trends Anatoly Koushnir, CTO , June 2011 Comm-IT

1. Next Generation
Data Center Networks
Technology and Market
Review & Trends
Anatoly Koushnir, CTO
June 2011
Comm-IT 2011 - All Rights Reserved 1

2. ‫‪Comm-IT‬‬
‫מומחים להקמת פרויקטי תקשורת, ‪ IT‬ותוכנה מתקדמים‬
‫ומורכבים:‬
‫ה‬
‫ד‬
‫ר‬
‫כ‬
‫ה‬
‫מ‬
‫ד‬
‫י‬
‫ה‬
‫‪Comm-IT 2011 - All Rights Reserved‬‬ ‫3‬

3. Among Our Customers:

4. ‫‪Comm-IT & DC‬‬
‫• תכנון והקמה של פרויקטי ‪:DC & DRP‬‬
‫מעבר‬
‫– כ-001 מומחים בתחומי טכנולוגיה שונים‬
‫טרום אכלוס‬ ‫תשתיות תומכות (בינוי, קירור וכו')‬ ‫•‬
‫תקשורת, שו"ב ואבטחת מידע‬ ‫•‬
‫ניהול פרויקט‬
‫תכנון מעבר‬ ‫מחשוב ואחסון‬ ‫•‬
‫תקשורת ומחשוב‬ ‫אבטחה פיזית‬ ‫•‬
‫פיתוח תוכנה וממשקים‬ ‫•‬
‫תשתית‬
‫– נסיון מוכח בארץ ובחו"ל‬
‫ייזום‬ ‫– שילוב ידע הנדסי עם יכולות ‪Hands on‬‬
‫‪Comm-IT 2011 - All Rights Reserved‬‬ ‫5‬

5. Why Data Centers Networks?
Source: Gartner
The hottest stuff
Comm-IT 2011 - All Rights Reserved 6

6. ‫‪Data Center Requirements‬‬
‫ניצול אופטימאלי של‬ ‫פריסה ויישום מהירים‬ ‫שרידות גבוה‬
‫בדיקות ומדידות‬
‫חומרה הקיימת‬ ‫של אפליקציות חדשות‬ ‫מאוד‬
‫של ה- ‪SLA‬‬
‫‪Data center‬‬
‫דרישות של חשמל‬ ‫הפשטת ניהול של‬ ‫התמודדות עם אתגרים‬ ‫רחבי פס גבוהים יותר,‬
‫וקירור‬ ‫שרתים וציוד רשת‬ ‫של אבטחת מידע‬ ‫השהיה נמוכה יותר‬
‫| 1102.70.50‬ ‫7 | שקף‬

7. Traditional DC Network
• Separated networks (LAN, SAN)
• Hierarchical networks
• Physical modules
– LAN, SAN, FW, LB…
• Complicated service introduction
– IP-based (L3 devices,IP-rules, etc)
– Difficult geo-extendibility
– Limited flexiblity
• Main DC equipment vendors in Israel
– LAN : Nortel, Cisco, Avaya, Juniper, HP…
– SAN/NAS : NetApp, EMC…
– LB: Radware, Cisco, Nortel…
– FW: Checkpoint, Juniper,Cisco..
Comm-IT 2011 - All Rights Reserved 8

8. NG DC Motivation
• DC Consolidation
• DC Automation App/Server
• DC Flexibility Virtualization
NG DC = VDC
• Green DC Storage
• DC I/O Unification Virtualization
• DC Resiliency (DRP)
• DC Application Delivery Network & Services
• DC Security Virtualization
Comm-IT 2011 - All Rights Reserved 9

9. NG DC Triggers & Drivers
Main Triggers: Main Drivers:
• Enterprise M&A • 10G Support Growth
• Massive Virtualization • Network Virtualization
• “Cloudization”
• New DC Expanding DC
• DRP
Comm-IT 2011 - All Rights Reserved 10

10. What is most important?
Source: InformationWeek
Comm-IT 2011 - All Rights Reserved 11

11. NG DC Challenges
• What do we want?
– TB-ready, unified, flexible, secured, reliable and geo-
extendable infrastructure
– Unified LAN & SAN
– Single point of management (even in geo-spread DC-es)
– Logical (Virtual) move & change of DC entities
• What are the enemies of NG DC?
– Insufficient backplane of traditional switches
– Unreliable & slow Ethernet
– Spanning Tree
– L3 segmentation (DC, WAN) Radia Perlman
Comm-IT 2011 - All Rights Reserved 12

12. NG DC Standards
• Bandwidth
– IEEE 802.3ae/ak/an – 10G Ethernet
– IEEE 802.3ba - 40G/100G Ethernet
• SAN & LAN Unification
– FCoE (INCITST11FC-BB-5)
– iSCSI
• Reliable Ethernet:
– DCB (Data Center Bridging)/ CEE (Converged Enhanced Ethernet)
• 802.1QbbPFC (Priority-based Flow Control)
• 802.1QazETS (Enhanced Transmission Selection)
• 802.1QuaCN (Congestion Notification)
• DCBX (DCB Capability Exchange) – similar to LLDP
• Anti-STP:
– IEEE 802.1aq/SPB (Shortest-path bridging)
– IETF TRILL (Transparent interconnection a lot of links)
• Interoperability
– IEEE 802.1Qbg EVB (Ethernet Virtual Bridging) – VM Switch interop
– IEEE 802.1Qbh BPE (Bridge Port Extension) – Port Extenders interop
– Inter-Fabric protocol in process (TBD – based on ICCP ?)
– MLAG (TBD - based on 802.3AX-2008)
Comm-IT 2011 - All Rights Reserved 13

13. What wrong with L3 in DC?
Moving VM is night-mare )IP/DG/VLAN/QOS/Policy… change(
R R R R R R
SF1 SF2 …
SF3 now move itSF4
to
L3 L3
L3
other L3
DC site DRP L3
BB1 R R
BB2
What if you have … and ADC??
also Classic FW?
WAN Module
Comm-IT 2011 - All Rights Reserved 14

14. Solution – Flat L2 DC Core
• But…
– Now I have a lot of STP loops and broadcasts !!!
– What about security and application delivery??
L2 L2
L2
L2 L2
R R
WAN Module
Comm-IT 2011 - All Rights Reserved 15

15. Anti-STP: TRILL vs SPB
• TRILL
– IETF
– Based on IS-IS
– L3 Protocol
– Requires h/w change
– More reliable
• SPB
– IEEE Radia Perlman
– Based on IS-IS 16
– SPBV & SPBM
– L2 Protocol
– No h/w change
Comm-IT 2011 - All Rights Reserved 16
Source: NIL

16. What about the rest?
Virtual SwFWADC
L2 High-Speed, non-STP, Unified Fabric
L2
L2
L2 L2
R R
Physical SwFWADC
WAN Module
Comm-IT 2011 - All Rights Reserved 17

17. NG DC FW
• IP-based rules -> Application & User based rules
Comm-IT 2011 - All Rights Reserved 18

18. NG DC FW & ADC
• Virtualization & Integration with VmWare
Cisco VSG Juniper vGW
Radware ADC-VX
Comm-IT 2011 - All Rights Reserved 19

19. NG DC with DRP
Virtual SwFWADC Virtual SwFWADC
L2 High-Speed, non-STP, Unified Fabric
L2 L2 High-Speed, non-STP, Unified Fabric
L2
L2
L2 L2
L2
L2 L2
R R Redudnant L2 Pipe R R
Physical SwFWADC Physical SwFWADC
DRP WAN Module WAN Module Main
Remote
Comm-IT 2011 - All Rights Reserved 20

20. NG DC Network Components
Network SAN Services
Fabric Core Switch
Core FW Core ADC
Fabric Agg. Switch
Fabric Access Module
Servers
BC Switch
HBA Card Virtual FW
Virtual Switch Virtual ADC
Common Management & Orchestration with VM Servers
Comm-IT 2011 - All Rights Reserved 21

21. NG DC Network Vendors
FW:
LAN:
ADC:
Source: Gartner
Comm-IT 2011 - All Rights Reserved 22

22. NG DC Vendors
Network SAN Services
Fabric Core Switch
Core FW Core ADC
Fabric Agg. Switch
Fabric Access Module
Servers
BC Switch
HBA Card Virtual FW
Virtual Switch Virtual ADC
Many Vendors – Low interoperability !!!
Comm-IT 2011 - All Rights Reserved 23

23. NG DC Open
• ONF – Open Networking Foundation
– New approach – SDN (Software Defined
Networking)
Comm-IT 2011 - All Rights Reserved Source: Extreme Networks 24

24. NG DC Management
• Every vendor manages it’s own equipment
– it’s not enough!!!
• End-to-end multi-vendor, multi-disciplinary
solutions -> in process , not existing yet
NMS
DCIM
vCenter
Companies lack cohesive management strategy for data center infrastructure
Comm-IT 2011 - All Rights Reserved 25

25. ‫?‪NG DC in Israel‬‬
‫• ארגונים גדולים החלו בתהליך מעבר ל ‪)In-house Outsource ( Private cloud‬‬
‫והקמת אתרי ‪ DC‬חדשים:‬
‫צה"ל וגופים בטחוניים‬ ‫–‬
‫בנקים‬ ‫–‬
‫קופות חולים‬ ‫–‬
‫חברות ביטוח‬ ‫–‬
‫חברת חשמל‬ ‫–‬
‫משרדי ממשלה‬ ‫–‬
‫חברות מסחריות בינלאומיות‬ ‫–‬
‫ספקי שירות ‪HostingCloud‬‬ ‫•‬
‫– ‪Triple C‬‬
‫– בזק‬
‫– 1-‪Med‬‬
‫‪Comm-IT 2011 - All Rights Reserved‬‬ ‫72‬

26. ‫‪Open Questions and Challenges‬‬
‫‪ SPB‬נגד ‪ – TRILL‬על מה זה משפיע והאם זה חשוב למקים ‪? DC‬‬ ‫•‬
‫האם לעבור ל‪ FCoE‬או להישאר ב‪ FC‬ואו ‪?iSCSI‬‬ ‫•‬
‫האם ניתן להקים ‪ NG DC Network Multi-vendor‬בפועל?‬ ‫•‬
‫‪ – Virtual DC‬עוד כמה שנים להשלמה אמיתית?‬ ‫•‬
‫שילוב רשת מסורתית עם ‪ ,NG DC‬אפשרי?‬ ‫•‬
‫האם יש מחיר אבטחתי לפתרון וירטואלי?‬ ‫•‬
‫האם חברות ‪ Private Cloud‬בשיטת ‪ OS‬יכולות להבטיח ביצועים כמו בפתרון‬ ‫•‬
‫‪? )Prons/Cons( In-house‬‬
‫השטחת רשת – מוכנים? איך עושים בשלבים ?‬ ‫•‬
‫• עוד?‬
‫‪Comm-IT 2011 - All Rights Reserved‬‬ ‫82‬

27. Challenges Q&A
‫כן‬ • ‫השטחת רשת‬ •
‫כן‬ • TOR ‫מעבר לתצורת‬ •
‫תלוי‬ • FCOE •
‫כן‬ • CEE/DCB •
‫תלוי‬ • Virtual Switch •
VSW‫אם משתמשים ב‬ • Virtual FW •
‫לא משנה‬ • SPB/TRILL •
‫כן‬ • ‫הפשטת ניהול‬ •
Comm-IT 2011 - All Rights Reserved 29

28. For Further 20 Hamagshimim St.
Information PO Box 7794
Contact: Petach Tikva 49348
Israel
www.comm-it.com
Tel: +972 (3) 9222751
Fax: +972 (3) 9222907