소프트웨어 기반 라우터 Network Infrastructure with the Agility of an Application.

Slides:



Advertisements
Similar presentations
Elastic Provisioning In Virtual Private Clouds
Advertisements

Software Defined Networking in Apache CloudStack
Cloud computing is used to describe a variety of computing concepts that involve a large number of computers connected through a real-time communication.
Windows IT Pro magazine Datacenter solution with lower infrastructure costs and OPEX savings from increased operational efficiencies. Datacenter.
Ed Duguid with subject: MACE Cloud
Agenda Product Overview Hardware Interfaces Software Features
Architecting and Building a Secure and Compliant Virtual Infrastructure and Private Cloud Rob Randell, CISSP, CCSK Principal Systems Engineer – Security.
© 2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1 High-performance Gigabit Ethernet ports rapidly transfer large files supporting.
VMware vCloud Director and how it works David Hill, vExpert 2012, VCP, VCAP-DCD Senior Solutions Architect.
Cisco Confidential 1 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco SB Summit Praha, Jan Křístek Tomáš Chott.
System Center 2012 R2 Overview
Integration of PAP site 17 th July 10. Requirements of PAP SITE  Bandwidth drop  Router  RJ45 cables  Switch  Gateway  Nodes  Ups  9urack.
The Case for Enterprise Ready Virtual Private Clouds Timothy Wood, Alexandre Gerber *, K.K. Ramakrishnan *, Jacobus van der Merwe *, and Prashant Shenoy.
Take your CMS to the cloud to lighten the load Brett Pollak Campus Web Office UC San Diego.
© 2010 VMware Inc. All rights reserved Confidential VMware Security Briefing Dan Watson, Senior Systems Engineer, VMware VMUG, Edinburgh, Feb 24, 2011.
Rackspace Hybrid Cloud and Brocade vRouter OpenStack Summit Hong Kong.
Application Centric Infrastructure
© Copyright 2014 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Software Defined Networking.
SDN in Openstack - A real-life implementation Leo Wong.
“It’s going to take a month to get a proof of concept going.” “I know VMM, but don’t know how it works with SPF and the Portal” “I know Azure, but.
Highly Available Central Services An Intelligent Router Approach Thomas Finnern Thorsten Witt DESY/IT.
This work is supported by the National Science Foundation under Grant Number DUE Any opinions, findings and conclusions or recommendations expressed.
© 2008 AT&T Intellectual Property. All rights reserved. CloudNet: Where VPNs Meet Cloud Computing Flexibly and Dynamically Timothy Wood Kobus van der Merwe,
Jennifer Rexford Princeton University MW 11:00am-12:20pm Data-Center Traffic Management COS 597E: Software Defined Networking.
1 © 2001, Cisco Systems, Inc. All rights reserved. Session Number Presentation_ID Cisco Easy VPN Solutions Applications and Implementation with Cisco IOS.
Mr. Mark Welton.  Three-tiered Architecture  Collapsed core – no distribution  Collapsed core – no distribution or access.
Microsoft delivers a complete datacenter solution with Windows Server 2012 R2 out-of-the-box Cloud OS Development Management Identity Virtualization.
Network+ Guide to Networks 6 th Edition Chapter 10 Virtual Networks and Remote Access.
Course 201 – Administration, Content Inspection and SSL VPN
Data Center Network Redesign using SDN
Network+ Guide to Networks 6 th Edition Chapter 10 Virtual Networks and Remote Access.
Extreme Networks Confidential and Proprietary. © 2010 Extreme Networks Inc. All rights reserved.
VPN for Sales Nokia FireWall-1 Products Complete Integrated Solution including: –CheckPoint FireWall-1 enterprise security suite –Interfaces installed.
Barracuda Load Balancer Server Availability and Scalability.
Networking in the cloud: An SDN primer Ben Cherian Chief Strategy Midokura.
1 October 20-24, 2014 Georgian Technical University PhD Zaza Tsiramua Head of computer network management center of GTU South-Caucasus Grid.
Cooperative Education – Networking Spring 2010 Network Team Saigon Institute of Technology.
Cloud Computing & Amazon Web Services – EC2 Arpita Patel Software Engineer.
© 2014 VMware Inc. All rights reserved. Palo Alto Networks VM-Series for VMware vCloud ® Air TM Next-Generation Security for Hybrid Clouds Palo Alto Networks.
MDC417 Follow me on Working as Practice Manager for Insight, he is a subject matter expert in cloud, virtualization and management.
608D CloudStack 3.0 Omer Palo Readiness Specialist, WW Tech Support Readiness May 8, 2012.
Cloud Scale Performance & Diagnosability Comprehensive SDN Core Infrastructure Enhancements vRSS Remote Live Monitoring NIC Teaming Hyper-V Network.
CON Software-Defined Networking in a Hybrid, Open Data Center Krishna Srinivasan Senior Principal Product Strategy Manager Oracle Virtual Networking.
© 2015 BROCADE COMMUNICATIONS SYSTEMS, INC THAT’S THE ANSWER WHAT’S THE QUESTION? Software Defined Networking Dan DeBacker Principal.
Cooperative Education – Networking Fall 2009 Network Team Saigon Institute of Technology.
1 © 2003, Cisco Systems, Inc. All rights reserved. CISCO CONFIDENTIAL Advancing the Carrier IP/MPLS Edge Routing Technology Group Cisco Systems, Inc. April.
Microsoft Virtual Academy. System Center 2012 Virtual Machine Manager SQL Server Windows Server Manages Microsoft Hyper-V Server 2008 R2 Windows Server.
Benefits For hoster or private cloud: Multi-tenant gateway reduces cost Enhanced Reliability with Clustering Works Seamlessly with Hyper-V network.
Introduction to CloudStack Networking Geoff Higginbottom CTO ShapeBlue
CEG 2400 FALL 2012 Chapter 10 Virtual Networks and Remote Access 1.
Going Hybrid – part 1 Moving to Hybrid Cloud with Windows Azure Virtual Machines & System Center 2012 R2.
Introduction to Avaya’s SDN Architecture February 2015.
Brocade Software Defined Networking Muhammad Durrani Principle Engineer July, 2013.
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Embrace the Future of.
©2010 Check Point Software Technologies Ltd. | [Unrestricted] For everyone Endpoint Security VPN R75 (SecureClient Next Generation)
Deploying Highly Available SQL Server in Windows Azure A Presentation and Demonstration by Microsoft Cluster MVP David Bermingham.
© 2011 VMware Inc. All rights reserved VMware – Cloud Security Solutions.
NSA 240 Overview For End Users. 2 New Challenges To Solve  Threats Are Increasing  Web 2.0 & SaaS  Impacts to servers, users & networks  Threats go.
Network Security Solution. 2 Security Gateway Switch Network Security Products  Multi-Homing  VPN/Firewall  SPI Firewall  Anti-Virus  Anti-Spam 
Mobile equipment for vacuum control
Chapter 6: Securing the Cloud
Network Security Solution
StratusLab Final Periodic Review
StratusLab Final Periodic Review
1.
Elastic Provisioning In Virtual Private Clouds
GGF15 – Grids and Network Virtualization
Network+ Guide to Networks 6th Edition
Presentation transcript:

소프트웨어 기반 라우터 Network Infrastructure with the Agility of an Application

2 AGENDA 소개 고객 기술 및 비지니스 Vyatta 란 고객 Use Case Competitive Advantage Vyatta Appliance

3 Vyatta 는 무엇인가 ? Mission: 기업 및 클라우드 아키텍쳐의 현대화 Vyatta 는 소프트웨어 기반 손루션으로써 가상화 네트워크와 클라우드 인프라 구축 할 수 있습니다.

4 Vyatta Usage: Evolution NETWORK OS 가상화 데이터센터물리적 인프라 PRIVATE / PUBLIC CLOUDS AGILITY ROUTING SECURITY 2006 년 2009 년 2010 년 2011 년 2012 년

5 Industry Leadership Vyatta 판매 성장 World Class Team Investors

6 Why Vyatta ? > 실제 네트워크 환경에서 가상화 환경으로의 간단한 이전 >Utility Pricing > 오픈소스로써 템플릿 기반의 개발도구를 지원, 주문형 네트워크 구축 가능 >Vyatta 는 IP 기반 네트워크 솔루션으로 편리한 네트워크 환경 구축가능

7 가상화 장단점. + Business Gains Networking Pains  Reduced CapEx  Reduced OpEx  Increased Agility  Responsiveness  VM Sprawl/Stall  Traffic “tromboning”  Lack of server isolation  Increased CapEx /OpEx

8 Networking Pain Keeping Up With Virtualization Application Density Infrastructure Agility Multi- Tenancy Time-To-Deploy CapEx ITGoals Developer Velocity N-Tier Deployments

9 Traditional Approaches Miss the Real Issue Decreased Efficiency Increased Costs Increased Complexity

10 Scale Up & Down Server Leverage 소프트웨어 기반 네트워킹은 소프트웨어의 유연성 및 경제와 네트워크를 제공 소프트웨어 기반 네트워크의 가치 Quickly Deploy & Change Users Speed

11 Vyatta 네트워크 운영체제 Download CLOUD COMPUTING Router, Firewall, VPN, + Granular Control of VM’s Hypervisor Independence Auto-Provisioning Elastic Networking Remote Management NETWORK EDGE Router, Firewall, VPN, + DSL thru 10Gbps Edge Unbeatable Price/Performance Scalability System Availability Platform Independence NETWORK OS Network Admin System Admin Security Admin Virtualized Bare Metal

12 Vyatta 모델 Vyatta DNAVyatta IP Command-Line InterfaceGraphical User Interface VYATTA DATA MODEL VyattaGuard Web Filter FWVPNNATRouting URL Filter QoSWAN LBIPv6 Multi-Platform Virtualization Drivers Remote Access API Delivered over 40 software releases REMOTE API Controls 100% of functions Distance-agnostic Add, change & move VMs Interfaces to provisioning systems Interfaces to orchestration systems

13 Routing Security Threat Protection System Management High Availability Platforms IPv4/IPv6 – BGP, OSPF, RIP, STATIC, POLICY IPv4/IPv6 - STATEFUL FIREWALL, IPSEC VPN, SSL OPENVPN TRAFFIC FILTERING, URL FILTERING, TRAFFIC SEGMENTATION FAMILIAR CLI, WEB GUI, CONFIG SCRIPTS, REST API STATEFUL FAILOVER, CONFIG REPLICATION, CLUSTERING, VRRP Intel x86, VMware, XenServer, Redhat KVM, Riverbed RSP IP Services DHCP, NAT, DNS, VLAN, SSH, TELNET, SNMP Vyatta 기능 NETWORK OS - HIGHLIGHTS

14 Server 일반적 네트워크 시스템 A1 A2 B1 C1 C2 C3 B2 일반적 데이터 센터 : 모든 서버 간 트래픽이 물리적 라우터 및 방화벽을 통해 전송. 일반적 데이터 센터 : 모든 서버 간 트래픽이 물리적 라우터 및 방화벽을 통해 전송.

15 Virtualized server Hypervisor vSwitch Virtualized server Hypervisor vSwitch Virtualized server Hypervisor vSwitch 일반적 가상화 네트워크 환경 A1 C1 B1 A2C3 B2C2 가상화 네트워크 : 보안 정책의 세분화를 위해 모든 트래픽은 물리적 디바이스 통과.. 가상화 네트워크 : 보안 정책의 세분화를 위해 모든 트래픽은 물리적 디바이스 통과..

16 Virtualized server Hypervisor vSwitch Vyatta Solution Virtualized server Hypervisor vSwitch Virtualized server Hypervisor vSwitch A1C1 A2 C3 B2 B1C2 vyatta 로 다음 작업 수행 가능 : 효율적 트래픽 관리 소프트웨어의 유연성 전갱 가능 vyatta 로 다음 작업 수행 가능 : 효율적 트래픽 관리 소프트웨어의 유연성 전갱 가능

17 Virtualized server Hypervisor vSwitch Vyatta Virtual Network Contains Traffic Virtualized server Hypervisor vSwitch Virtualized server Hypervisor vSwitch A1 C1B1A2C3 B2 C2 With Vyatta: 가상 환경에서 다중 계층 네트워크를 구축하는 모두 내부 및 간 하이퍼 바이저 트래픽 관리 가능 With Vyatta: 가상 환경에서 다중 계층 네트워크를 구축하는 모두 내부 및 간 하이퍼 바이저 트래픽 관리 가능

18 Use Cases 예 Cloud Bridging with Vyatta Data Center to Multiple VPC with Vyatta Vyatta with Cloud Service Providers

19 현재의 가상화 데이터 센터 (VDC)

20 VDC Distributed Traffic Isolation

21 Per tenant network services Per tenant network topology Per tenant network administration Multi-tier network architecture in software VDC Router Isolation

22 Use Case 예 Virtual Networking Data Center to Multiple VPC Vyatta in the Cloud

23 Simple and secure VM migration to and from the cloud provider or VDCS Provides n+1 VDC/cloud expansion Provides migration strategy for: Demand spikes DR/BCP plan Phased application moves Secure Layer 2 Cloud Bridging

24 Use Cases 예 Virtual Networking Cloud Bridging Data Center to Multiple VPC Vyatta in the Cloud

25 INTERNET Limit of 10 IPsec VPN connections per VPN gateway (using Amazon gateway) No control over Amazon side of the VPN tunnel No VPC-to-VPC VPN mechanism Vyatta in the Cloud – Ex: Amazon

26 Key IPSEC/SSL VPN Cloud Bridge NAT + Firewall Vyatta in the Cloud – Ex: Amazon No limit to # of VPN tunnels Securely connect into multiple VPCs from a single Create full VPN mesh between multiple VPCs Securely bridge cloud to cloud or datacenter to cloud

27 Use Cases 예 Virtual Networking Cloud Bridging Vyatta in the Cloud

28 Key Vyatta virtual machine installed on hypervisor in datacenterVyatta virtual machine installed on hypervisor in datacenter Full mesh VPN between multiple VPCs and datacenterFull mesh VPN between multiple VPCs and datacenter IPSEC/SSL VPN PING Datacenter to Multiple VPC – VPN Mesh

29  Vyatta 는가상화 및 클라우드 환경을위한 소프트웨어 기반 네트워킹의 선두 업체 백만 이상의 다운로드 기록 세계적으로 1000 이상의 고객 확보 Top tier cloud & Fortune 500 customers 글로벌 유통체제  차세대 응용 프로그램 독립적 플랫폼 최적화된 가상화 ROI 를 위한 라이센스 운영비용 절감 Open API Why Vyatta?

30 Competitive Advantage Vyatta Cisco VSG Juniper vGW VShield App VShield Edge Check Point Fortinet Fortigate VM L2 Bridge / Switch  True L3 Routing     IPsec VPN / OpenVPN    Stateful Firewall  Usage-Based Pricing   Open Restful API    Amazon Integration     Application Firewall     Policy Based Routing    Central Mng.   IPv6  11 

31 Vyatta Appliance Specification Model 600Model 1600Model 2600Model 3500 Layer 3 Forwarding250,000pps600,000 PPS *1,400,000 PPS *2,000,000 PPS * VPN Forwarding150Mbps400 Mbps500 Mbps700 Mbps Max VPN Sessions Onboard I/O(Ports)6x 10/100/10001 x 100/100, 6x 10/100/10008x 10/100/10004x 10/100/1000 Ethernet Expansion Up to 4 additional 10/100/1000 up to 8 additional 10/100/1000 (2 x 4 ) up to 16 additional 10/100/1000 or up to 8 x 10GbE Serial Expansion Up to 4 port T1/E1 & Synchronous Serial V.35,X.21 Up to 2 x 4 port T1/E1 & Synchronous Serial V.35,X.21 1,2,4 port T1/E1 and Synchronous Serial V.35,X.21 Console1 x RJ45 2, 4, 6 port RJ45 2, 4, 6 port SFP Ethernet 4-port 1000BASE-T 2-port & 1000BASE-SX 4 port 1Gbe SFP+ 4-port 1000BASE-T 2-port 1000BASE-SX 4 port 1GbE SFP+ 4 port 10Gbe SFP+ 6 port 10Gbe SFP+ WAN 1-port, 2-port & 4 port T1/E1 Memory512MB 800 MHz DDR21GB 800 MHz DDR22 GB 1333 MHz DDR3 2GB expandable to 192GB

THANK YOU!