Enabling IT as a Service – Cloud Management and Orchestration

37
© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1 Cisco Confidential 1 © 2011 Cisco and/or its affiliates. All rights reserved. Enabling ITaaS Cloud Management and Orchestration Rodrigo Flores, CTO, Intelligent Automation Cloud Software Management Technology Group Cisco March 2013

Transcript of Enabling IT as a Service – Cloud Management and Orchestration

Page 1: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1Cisco Confidential 1© 2011 Cisco and/or its affiliates. All rights reserved.

Enabling ITaaS Cloud Management and Orchestration

Rodrigo Flores, CTO, Intelligent Automation

Cloud Software Management Technology Group

Cisco

March 2013

Page 2: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2

About Me

CTO, Enterprise Architect, Intelligent Automation SoftwareFounder and CTO of newScale (Acquired by Cisco)Author, “Defining IT Success through the Service Catalog”Workflow and BPM technology and patents

Twitter: @RFFloresBlog: www.servicecatalogs.com

Page 3: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3

Our Cloud Journey• Challenges and Drivers

• CITEIS IaaS: Our Private Cloud

Offerings

Infrastructure TCO

• CITEIS PaaS

Vision & Strategy

Infra and PaaS TCO

• OpenStack

• InterCloud

• Lessons Learned

• 300 Locations• 165 Countries• 37 Cisco Datacenters• 334,000 sq. ft. of

datacenter space• 35.6MW UPS power to

raised floors• 64,000 employees• 80% servers virtualized

in new data centers, 71% overall

Page 4: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4

Business DriversIncreasing Pressures Drive Innovation in Cisco Data Centers

BusinessDemands

• Cisco strategy/market adjacencies

• Productivity• Global availability• Regulation (SOX)• SLA metrics

Cisco: First andBest Customer

• Cisco UCS accelerator• Product development

feedback• Employee experience• ITaaS/new business

models• Growth enablement

OperationalChallenges

• Asset utilization• Power and cooling • Business agility/

provisioning• Time to capacity

CLOUD INFRASTRUCTUREFaster Time to Capacity

Page 5: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5

Legacy Management

Slow, Complex, Brittle, Expensive

Legacy IT

Cloud Management Fast, Simple, Flexible, Cost-Effective

Broad Network Access

ResourcePooling

Rapid Elasticity

Measured Service

On-Demand

Self Service

Network

Compute

Storage

IT-as-a-Service

Page 6: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6

I got 99 problems, but the tech ain’t one

Page 7: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7

The New Operating Model

Lifecycle Management

Physical, Virtual, and CloudOrdering

and TrackingService Profiles,

Network Containers,Service Definitions

Approvals and Policy-Based

Controls

IT GovernanceArchitecture and IT Operations

IT Consumers

Existing IT Management

Systems

ProcessOrchestration and

Automated Provisioning

Rapid Auto-Scaling

Policy-based Self Healing

Page 8: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8

Automated Self-Service ProvisioningFrom Complexity to Simplicity and Automation

AutomatedSelf-ServiceOn-Demand

Architect It

Design It Where Can We Put It?

Procure It

Install It Configure It

Secure It Is It Ready?

Manual

Service-OrientedSelf-Service;

Automated Provisioning

Elasticity (Capacity-on-

Demand)

FROM 8 WEEKS TO 5 MINUTES

Page 9: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9

CITEIS Gen2Cisco IT Elastic Infrastructure Services

Page 10: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10

Cloud Services Stack – Taxonomy CITEIS – Cisco IT Elastic Infrastructure Services

CloudDeliveryModels

SaaSSoftware as a Service

SalesForce CRM, WebEx, SurveyMonkey, …

PaaSPlatform as a Service

Total application hosting, development, testing, and deployment environment

IaaSInfrastructure as a Service

Compute, storage, networking

Data Center as a Service

Data center facilities, power, coolingDCaaS

CIT

EIS

Page 11: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11

VMWare ESX/ESXiNetwork Virtualization

PaaS•Web Server•Application Server•Database Server•Integration Services

Logical SegmentationControl, Security and Fault Isolation

CITEIS – Journey to the Infrastructure Services Cloud

*OVF = Open Virtualization Format

Cisco Nexus

Cisco UCS x86

Virtualization Automation Self-service Multi-tenancy ElasticityUnified

Infrastructure

Cisco IT Elastic Infrastructure Service (CITEIS)

Cisco Intelligent Automation for Cloud

Image RepositoryService Catalog

Show/chargebackChange Management

OVF OVA

Cisco InterCloud Hybrid

Page 12: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12

Solution Components

DC Resources

Cisco UCS

Internal Management System

Address Mgmt—Host Mgmt

RemedyIncident Mgmt—Change Mgmt

Storage Automation

NetApp Data ONTAP-7

Resource Managers

AutomationPacks

CITEISAutomation

Packs

Cisco Process Orchestrator

Cisco Cloud Portal

Cisco Intelligent Automation for Cloud

Provisioning - IntegrationSelf-Service—

Service Catalog

Image ManagementPaaS

Automation/Library

Network Automation

VNMC, N1KvCITEIS OpenStack API Server

Cloud Manager

Finance

Oracle ERP

Page 13: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13

CITEIS Gen2 OfferingsSubscription Models

Value-Add Offerings

• Enhanced infrastructure services available for additional charges

• Complements CITEIS VDC subscriptions only

CITEIS Express forIndividual Cloud-based

Services

• Ideal for sandbox and POC

• Minimal SLAs and support provided; best effort

• Maximum 90 day lease and two VMs at any given time

CITEIS Virtual Data Centers Pre-Defined

Resource Pools with Bundled Services

• Virtual resources reserved & guaranteed

• Tenants allocate & manage resources based on specific needs

• Minimum one (1) quarter subscription commitment required

Page 14: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14

CITEIS VDCs Customized Based on Tenant Needs

Tenant owner “pieces together” virtual infrastructure resources to build VDC-based on “building blocks”

CITEIS Gen2 OfferingsVirtual Data Center Offering

Tenant VDC

Storage Allocation

• Automated provisioning

• Self service

• Currently NAS

Support Option

• Managed

• Self-managed

• Internal

• DMZ

Service Type

• Virtual CPU (GHz)

• Virtual memory

• Segmented VLAN

Virtual Resources

CITEIS VDCs are Elastic

Virtual infrastructure resources can be added or deleted

Driven Through Service Catalog

Orders placed on a self-service basis

Page 15: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15

CITEIS VDCClient Solution

Tenant VDC

Value-adds

Tenant VDC

Value-addsMINIMINI MEDIUM LARGE

Tenant VDC

Value-Adds

MEDIUM MEDIUM

JUMBO

Current Capacity—tenant can increase by adding additional building blocks

Tenant X Tenant Y Tenant…

Page 16: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16

CITEIS TCO and Provisioning TimesAgility, Cost Benefits, Productivity

$4000

$3000

$2000

$1000

0

2

4

6

8

Co

mp

ute

TC

O

($/Q

tr/O

S i

nst

an

ce)

De

live

ry T

ime

(we

eks

)

(100% physical)

6-8 weeks

LEGACY

(50% virtualized)

2-3 weeks

LEGACY

(75% virtualized)

3 -5 days E2E

LEGACY

(95% virtualized)

15 minutes

TARGET

Virtualization Unified Computing Cloud

TCOdown37% TCO

down27% TCO

down27%

Page 17: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17

Platform as a Service

Page 18: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18

What do the clients want from the infrastructure providers?

SaaS

PaaS

IaaS

Client #1 (requires IaaS services only)

“Give me the VMs and Storage and I’ll manage everything above the OS”

Infrastructure Resources

(e.g. VDC, VM, Storage)

Client #2(requires IaaS & PaaS

services)

“My needs are mixed. I’ll take all the goodies I can get, and build the ones that I can’t”

IaaS Services(some bundled,

some not)

PaaS Services

Client #3(requires PaaS services only)

“Give me all the standard goodies, and leave me just to manage my application”

Application Middleware

(e.g. Appserver, Database, …)

Infrastructure Resources

(not ordered directly by client)

Page 19: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19

PaaS End-State Vision and Strategy

IT

Any Client

Non-IT

IaaS

Many Services

PaaS

Component

Composite

Location

Many Attributes

Lifecycle

Configuration

Action

Any IaaS Provider

GIS

Engineering

Self- Managed

External Cloud

Vision: Any entitled client can consume* any PaaS service, runnable on any platform.

* to build, test, deploy, and run applications

Page 20: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20

Service Offering Mapping to Catalog Entries

IaaS

Application Server

Database Server

Integration Services

Misc. Services

Create

Delete

Modify

Self Serve Admin

Analytics*

X =

VDC

VM

Storage

CCIX

Weblogic

Tomcat/RoR

SQL

NoSQL

Big Data

Srv Assur

Config mgmt

State mgmt

MMX

WSG

ESB

Page 21: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21

Manual

Scripted

Automated

BundledIntegrated

Is it ready?

Architect it

Design it

Procure it

Install it

Configure it

Secure it

QA it

Architect itDesign it

Is procuredIs installed

Is configuredIs secured

Is QA’d IT IS READY!

Self Service

Elastic

Rapid

Service Transformation Through PaaS

We are here

Page 22: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22

TCO Environment Components

Demonstrate how Cisco IT/GIS has leveraged technology and process related opportunities to reduce TCO for a typical IT application

Infrastructure and Platform Requirements for a Typical Mid-Size Application• 24 Servers (Bare Metal and Virtual Machines)• 6 TB Storage (Combination of SAN and NAS)• 5 DB Schemas, 10 JVMs, Weblogic, MMX, BPIM, WSG,

Apache, OBIEE• 2 Fast Track and 1 Non-fast Track Bundles• Process improvements in provisioning infrastructure and

platform over the years are considered

OBJECTIVE

APPROACH

Page 23: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23

Data Center Transformation –Infrastructure TCO Over the Years

Source: Cisco IT GIS–September 2012

Q4 CY11 Q4 CY12 Q2 CY13Circa 2009(Legacy)

$0

$25,000

$50,000

$75,000

$100,000

$75,826

$41,438

$31,598 $24,894

TCO ($ Per Qtr) Virtualization Rate (%) Virt. Rate (%)

25%

50%

75%

100%

0%

E2E Prov. (Days)

15

30

45

60

0

E2E = 45 days

E2E = 17 daysE2E = 5 days

CITEIS/Compute = 15 mins. Fully Self Provisioned

5%

70%

85% Virtualization95%

TC

O (

$/Q

tr.)

Legacy Bare Metals based Data Center

Focus• UCS Adoption• All Virtualization on UCS

Focus• Workflow automation• PaaS Enablement• Storage Optimization

Focus • Process Transformation• Infrastructure/

Platform Optimization

-45%

-24%-21%

Page 24: Enabling IT as a Service – Cloud Management and Orchestration

© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 24

Everything as a Self Service

Operating Model

IaaS

PaaS

Virtual Machine

ServiceCatalog

NetworkDMZ

Multi-tenancy

Web ServicesDatabase

AdditionalSecurity

Web Server

JVM

FutureState

Multi-DC Hybrid

OS ConfigPolicy-based

Security

Mission-Critical (Gen2)

Self ServicevAppliance

Standards-onlyLifecycle Agnostic

Tiered SLA

Transparent mobilityLocation Agnostic

Elastic scalingStorage

SaaSService External

Sales Force

WebEx

UC/Video Google AppsE2OPEN

Box

QuadWebEx Social

Jabber

Productivity ToolsVirtualized Office Suite

RSS

WorkforceTools

Big Data (Log Analytics)

Scale out Analytics

Internal

Business Intelligence (OBIEE)

DB SecurityWSG

Web Content Hosting

* Yellow indicates services in production

Portal Server

DBaaS Lightweight App Environment (LAE) Data Replication

ERP

BPIM

OpenStack

VMware

Puppet Nexus 1000v

Post OS Provisioning

OpenFlow

Nova API

QuantumVirtual Security Gateway

Virtual Network Management Console

Page 25: Enabling IT as a Service – Cloud Management and Orchestration

© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25

Software NetworkDevices

Content Management

Telepresence & Video

Conferencing

Video - Live & On-Demand

Web Conferencing

WebEx Social

Instant Messaging

Email & Calendaring

Web Applications & Accounts

WebEx SocialApps

MobileApps

DesktopSoftware

PartnerConnection (Extranet)

Home & RemoteAccess

CorporateNetwork

IP Phones & Voice

Smartphones & Tablets

Printers

Laptops &Desktops

Strategic Innovation &

Product Validation

Database Hosting & ERP

Datacenter Computing

Datacenter Network

CITEIS Application & Web Services

Devices CollaborationSoftware &

Apps NetworkIT Infrastructure & Platform Services

IT Service Taxonomy

Page 26: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26

OpenStack

Page 27: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 27

OpenStack and CITEIS• Multi-Hypervisor and

management stack

• Provides vendor diversity

• Unified API through Cisco Intelligent Automation for Cloud

• Standardized automation packs manage solution

• Transparent to end-users

Source: Enterprise Strategy Group, 2012

Page 28: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 28

Cisco OpenStack and QuantumCisco Edition of OpenStack is a

packaged and tested version of the Folsom release (on GitHub)

Cisco Edition of OpenStack• Automated deployment• High availability• Monitoring• Cisco enabled networking

KVMKVM

Nexus 1000VNexus 1000V

Virtual Services

vWAAS

VSG

ASA 1KV

N1KV Quantum Plug-in

OpenStackOpenStack

KVMKVMKVMKVM

Cisco

Beta: Q2 CY13FCS: Q3 CY13

Nexus Plug-in for Quantum

• VXLAN 1.5 Support

• VXLAN-to-VLAN Gateway

• Openstack Quantum Plug-in

• Linux Support (for hypervisor SW)

• Highly Scalable• 16K-32K ports, 256-512 servers, 300+

veth/server• 4K Active VLANs, 8K-16K Active VXLANs

• REST API

Page 29: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 29

Why? We Host and Manage SaaS Applications

29

Millions of Meetings

For 10s of Millions of Users

Totaling Billions of Minutes

each month

7x24x365

New! Webex Files

Cisco Social

WebEx

Jabber

Page 30: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30

InterCloud / Hybrid Cloud

Page 31: Enabling IT as a Service – Cloud Management and Orchestration

© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31

Evolution of CITEIS

Fabric Based

Cloud

ComputeCompute Storage Storage Services Services

L2,

L3

Fabric

Cloud

Policy-based ProvisioningScale Physical & Virtual/Cloud

DC-wide/Cross-DC VM Mobility

Distributed

Manual ProvisioningLimited ScalingRack-wide VM

Mobility

Application Driven

ComputeCompute Storage Storage Services Services

L2,

L3

Programmable Provisionable

MonitoringApps

ProvisioningApps

NetworkingApps

End-UserApps

Integrated Fabric and CloudWorld of Many Clouds

Service-centric ProvisioningFlexible – Anywhere/timeCross-Cloud VM Mobility

Page 32: Enabling IT as a Service – Cloud Management and Orchestration

© 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 32

Evolution of CITEIS

Application Driven

ComputeCompute Storage Storage Services Services

L2,

L3

Programmable Provisionable

Monitoring Apps Provisioning Apps Networking Apps End-User Apps

Integrated Fabric and CloudWorld of Many Clouds

Service-centric ProvisioningFlexible – Anywhere/timeCross-Cloud VM Mobility

Page 33: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 33

Provider CloudEnterprise Cloud

InterCloud: Public/Private Hybrid A Simplified, Seamless Extension of the Data Center to Public Cloud

CITEIS Cloud Services – Unified User Experience

VNMC InterCloud – Automated Management

Nexus 1000V InterCloud – Virtual Switch for Hybrid Cloud

VNMC InterCloud

Cloud API Interface

Internet

Tenant VPC

InterCloud Switch (VM)

VMVM VM

VSG CSR1KV

InterCloud Node (VM)

Nexus 1000V

InterCloud

vCenter

ESX Host

VM VM

N1KV/vSwitch

Open Stack

CITEIS

Page 34: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 34Cisco Confidential 34© 2011 Cisco and/or its affiliates. All rights reserved.

Lessons Learned

Page 35: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 35

Successful Customers Patterns• Building a “real” cloud involves the following success factors

Well articulated corporate strategy with phases (crawl, walk, run) Engage existing automation teams for skills Well-defined, achievable service definitions that are automatable, volume Platform that does not lock into a specific hypervisor or cloud API A team that is trained (with specific roles) on the solution so that they can extend it in

combination with the vendor’s services organization Get into production ASAP to drive value and organizational learning Union of OOB

features and specific configurations for your environment. Articulated strategy for integrating with certain existing/deployed IT assets, and using the

new "Cloud" as a way to shed IT baggage Recognition that the CMP is extensible to other areas in the IT strategy and that partner

products may be necessary as well Have a suite / framework so you can maintain in the long term. And use external

resources Need clear articulation of career paths once you start removing “button pushers.” design,

operations, not implementation Focus on process outcomes, not process activities. Or end up with innefficient

processes

Page 36: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 36

CITEIS Experience• 10 people, plus 10 virtual partners

1 project, 1 program, director, enterprise architect (part time), 3 CIAC developers, 2 IT architects

Virtual SME’s as needed for platform

Runs cloud, workload and estore

Moved scheduling automation team to cloud team

• SurprisesNot using something off the shelf. Gen1 was all homegrown scripts, Different SME's wrote them

Ended up with sprawl, difficult to maintain

Gen2 used commercial CIAC. Standard tools with standard support and docs makes the system maintainable

Not engaging with the large ops team created resistance, lost time

Page 37: Enabling IT as a Service – Cloud Management and Orchestration

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 37

Thank you.