dynamic l4-7 services for openstack cloud data centers
DESCRIPTION
A10 Networks (NYSE: ATEN), a technology leader in application networking, presented “Dynamic L4-7 Services for OpenStack Cloud Data Centers” at the OpenStack Summit, May 14, Georgia World Congress Center in Atlanta.TRANSCRIPT
1
Customer Driven Innovation
1
Dynamic L4-7 Services for OpenStack Cloud Data Centers
May 2014
2
A10 Networks Portfolio Overview
Dedicated
Network
Managed
Hosting Cloud IaaS
IT Delivery Models
Application Networking Platform
Performance
Scalability
Extensibility
Flexibility
Security
CGN TPS
ADC
ACOS Platform
Product Lines
ADC – Application Acceleration & Security
CGN – Service Provider Networking
TPS – Network Perimeter DDoS Security
3
A10 Corporate Introduction
54.7M
$91.5M
$120M
$142M
2010 2011 2012 2013
1,000+
2,000+
3,000+
Q4' 11 Q4' 12 Today
CUSTOMER GROWTH
COMPANY GROWTH
Headquarters in San Jose
650 Employees Offices in 23 countries Customers in 65 countries
4
Challenges with Legacy L4-L7 Services
• Static
• Inflexible
• Manually Provisioned
• Dynamic Service Provisioning
• Automation and Scalability
• Operational Agility
Challenges
Demands
DDoS
WAF
QoS
SLB
5
NOW: Dynamic Services
Application Service Evolution: Dynamic L4-L7 Services
BEFORE: Isolated Services
On Demand Consumption Multi-tenant Scale out Architecture
POLICY
DRIVEN
INFRASTRUCTURE
…
IPS
IDS FW SLB
Dynamic L4-L7 Services
…
.
6
IaaS Cloud DC needs: Any Server, Any Network, Any Time
Virtualized Shared Infrastructure
Physical Compute + L2/3 Network Infrastructure
SDN Network Fabric
Compute Network Storage
Dynamic L4-L7 Service Chaining
Cloud
Orchestration
Platform
SDN Controller
Cloud
Tenants
7
What is Dynamic Service Chaining?
Services
Application Gateway OS
Platform
ACOS
A10 Thunder/AX/VHA or vThunder
VMWare, Xen, KVM, Hyper-V, Oracle VM, EC2 (IaaS)
Coke
ADC
Security
App 1
Pepsi
ADC
IPv6
App 2
Tenant N
WanOp
VPN
App N
…..
8
Dynamic L4-L7 Services Design Requirements
Agility Scale Reduced TCO
• Agile Service Delivery
– Simplified consumption model
• Programmability
– Scale consistently across governance domains
– Integration with SDN and Cloud Orchestration platforms
• Application Delivery at Scale
– Multi-tenancy
– Linearly scale performance
• Consistent Services
– Enforce SLAs
– Ensure Compliance and Security in a shared infrastructure environment
• Metered Consumption
– Consume and pay per business requirements
• Simplified management
– Automation
– Efficient Resources
9
Introducing aCloud Services Architecture
New product form factors and licensing models to
address new IT consumption models
• High Performance Appliances
• Virtualized & Hybrid Appliances
• Pay-as-You-Go Licensing Support
• SDN Integration
• Cloud Orchestration Integration
10
High Performance Appliances
11
ACOS Flexible Form Factors for all IT Consumption Models
Dedicated Data
Centers
Managed Hosting,
SP
Cloud IaaS, SP
Common
Features &
Admin Across
Form Factors
vThunder
Virtual Appliance
Thunder Series
Application Delivery Partitions
Pay-as-You-Go Licensing
Thunder HVA vThunder
Virtual Appliance
vThunder
Virtual Appliance
aVCS - Virtual
Chassis System
Thunder Series
Rent (RBM) Utility (UBM)
12
ACOS Platform: Scaling Application Networking with Moore’s Law
Extremely Efficient Network Pre-Processing*:
Hardware-Assisted L2-4 Pre-Processing
Optimized Hardware-Assisted Flow Distribution
Hardware-Assisted Security Functions Performed
* Hardware Assist Features Available on Most Thunder Appliances
Highly Scalable Application-Layer Processing:
Scalable Symmetric Multi-Processing
Unique Shared Memory Architecture
Linear Growth in Scale via Parallel Processing
Low-Value Services:
Forwarding, Segmentation
High-Values Services:
Optimization, Availability, Security
Application
OSI Reference Model
Presentation
Session
Transport
Network
Data Link
Physical
MAC: f4:f9:51:f0:d5:9d
IP: 192.168.1.1
MAC: f4:f9:51:f0:d5:9d
IP: 192.168.1.1
Shared Memory Architecture
1 2 3 N
Flexible Traffic Accelerator
Switching and Routing
13
ACOS Platform: High Performance Application Networking
Shared Memory Architecture
1 2 3 N
Flexible Traffic Accelerator
Switching and Routing
Efficient &
Accurate Memory
Architecture
64-Bit Multi-Core
Optimized
Optimized
Flow Distribution
Application
Acceleration
Application
Security
Application
Availability
14
Licensing Models
15
Other vThunder Appliances and Flexible Billing Options
vThunder Pay-as-You-Go Licensing
Elastic & adaptive
“Pay-as-you-Go” metering
Automated licensing
For IaaS providers only
License per Month
Rent (RBM) Utility (UBM)
License per Byte
vThunder for AWS
10 Mbps to 1 Gbps licensing
1 click provisioning of 64-bit Amazon
Machine Image (AMI)
EC2 or VPC environments
No feature limitations; licensed by
bandwidth
BYOL perpetual license or hourly based
license
16
OpenStack Integration
17
aCloud Service Architecture: OpenStack Integration
Compute Networking Storage
Nova Neutron Cinder
Openstack Cloud APIs
Horizon Dashboard
A10 ACOS Appliances
Physical, HVA and Virtual
Client Application
A10 LBaaS Driver
REST API
18
aCloud Service Architecture: OpenStack Integration
Driver 1
Driver 2 LBaaS
Agent
Driver 1 Driver 2 A10 LBaaS Driver
LBaaS Neutron Advanced Service Plugin
Asynchronous Message Queue
LBaaS Neutron
Extension Rest API
Synchronous Core API
NOVA
(Compute)
CINDER
(Block Storage) Neutron
REST
SWIFT
(Object Storage)
Client
Application Horizon
(Dashboard)
REST REST
Gla
nce
(Ima
ge
Se
rvic
e)
Ke
ysto
ne
(Au
the
ntic
atio
n)
19
aCloud Services Architecture
aCloud
Pay-As-You-Go
LLM
aCloud
Pay-As-You-Go
GLM
aGalaxy
Policy
Mgmt
Thunder-HVA
Hybrid Appliances
Thunder Series
Physical Appliances
SDN Fabric
vThunder Virtual Appliances
VXLAN
SSL-Offload
DDoS
SLB
Content Optimiz. WAF
NVGRE
SLB
SSL-Offload
Content Opt.
WAF
20
aCloud Services Value Proposition
SCALE
• Support Operational needs for
multi-tenancy & virtualization
• Drive L4-7 Service Chaining to
Tenant/ Workload
• Consistent Services to enforce
SLA, Compliance and Security
REDUCED TCO
• Enable Pay-as-You-Go IaaS
for End Users
• Reduced Manual Change
Management Tasks for IT
• Efficient resource utilization
AGILITY
• Support Rapid Response to
Internal / External Needs
• Automated System
Provisioning via Cloud/SDN
• Programmability to ensure
consistent scale across
domains
21 21
Thank You
www.a10networks.com