Managing a Widely Distributed Network

www.wildpackets.com© WildPackets, Inc.

Show us your tweets!Use today’s webinar hashtag:

#wp_NetworkAnalysiswith any questions, comments, or feedback.

Follow us @wildpackets

Jay BotelhoDirector of Product [email protected] me @jaybotelho

Managing a Widely Distributed Network

© WildPackets, Inc.#wp_NetworkAnalysis 2

About This Webex …

• All callers are on mute‒ If you have problems, please let us know via the Chat window

• There will be Q&A at the end‒ Feel free to type a question at any time

• Slides and recording will be available:‒ Via a follow-up email


Agenda

• Goals and Challenges

• Monitoring Application Performance

• Network Analysis Architecture in a Distributed World

• Using Network Analysis for Application Performance Monitoring

• Industry-leading WildPackets Solution


Distributed Network Monitoring Goals and Challenges


By the Numbers

• 64% of organizations reported that managing network performance has become more complex over last 12 months

• Organizations are losing on average $72,000 per minute of unplanned network downtime

• 48% of organizations reported that, on average, they spend more than 60 minutes on repairing performance issues - per incident


Better align IT with business strategies/goals

Improve utilization of existing IT resources

Reduce cost of managing IT

Improve flexibility of IT infrastructure

Increase amount of IT resources available for investing in innovation and new services

31%

38%

48%

49%

59%

Key Strategic Goals for CIOs


Key Capabilities Organizations Are Looking to Deploy

Ability to monitor VM-to-VM communications

Single platform for managing network performance and security

Access to network performance data based on job role and level of responsibility

Ability to monitor impact of routing changes on network traffic activity

End-to-end visibility into application transactions

Ability to analyze and report performance issues at 10Gbps line rate

24%

27%

30%

30%

34%

39%


Key Challenges for Network Performance Management

Inability to identify potential performance issues when designing the network

Difficulty determining next steps to take when a problem is detected

Oversubscribed network monitoring tools

Lack of visibility into the business impact of network performance

Lack of visibility into application performance

Inability to identify root cause of performance problems in a timely manner

29%

29%

35%

36%

41%

46%


Summary and Key Takeaways

• Network is becoming more of a strategic asset

• Traditional tools are not as effective in managing high speed networks

• Proactive management of network performance results in measurable business benefits

• Organizations are looking to improve their ability for managing performance of VoIP and other real-time applications

• Quality of user experience is becoming a key metric for monitoring network performance


Monitoring Application Performance


It’s All About The UserApplication Response Time – The time it takes an

application to respond to a specific user request, measured from the user’s perspective

3 Performance Levels of User Satisfaction


A Bit More Precisely …Application Response Time =

Network Response Time + Transaction Response Time


Network Response Time

• Network Response Time (R): Time between a user’s action and the network’s response to that action

• Payload: Information content in bytes

• Bandwidth: Minimal link speed between client and server

• AppTurns: Number of interactions needed between the client and server to provide a response to the user

• Round Trip Response Time (RTT): Propagation time for data between the client and server

Network Response Time (R) ~(payload/bandwidth) + [AppTurns*RTT]

Adapted from Peter Sevcik and Rebecca Wetzel of NetForecast


Other Network Response Time Considerations

• NRT is dynamic, never a constant

• DNS response time is a common source of performance issues

• Proxy servers – TCP connection is not end-to-end to the server

• Multi-tier designs – network latency between each tier


Transaction Response Time

• Server Response Time (SRT): Processing time required by the server

• Client Response Time (CRT): Processing time required by the client

Transaction Response Time (TRT) ~Server Response Time (SRT) + Client Response Time (CRT)

Adapted from Peter Sevcik and Rebecca Wetzel of NetForecast


Transaction Response Time Factors• Server Latency: Time for the server to process a

request - memory, disk system, CPU, and usage dependent

• Application Latency: Time for the application itself to process the request – mostly software design dependent

• Database Latency: Database design factors that contribute to overall processing time – eg. fragmentation, indexing, etc.

• Browser/Workstation Latency: The client side of the equation

• Protocol Usage: Some protocols outperform others


It’s All About The User

Application Response Time ~ (payload/bandwidth) + [AppTurns*RTT] + SRT + CRT

3 Performance Levels of User Satisfaction


Getting It All In One Place

PayloadTurns

~ RTT

~ SRT, CRT

Application Response Time ~ (payload/bandwidth) + [AppTurns*RTT] + SRT + CRT


Network Analysis Architecture in a Distributed World


Where to Capture

• On the Network

• On the vSwitch

• On a Virtual Tap

• On the VM Guest


A Solution for Every Network


vSwitch Span Port


Virtual Tap Infrastructure

Distributed vSwitch (shared across VM hosts)

Virtual Tap


Capturing on VM Guest


The Challenges

• Store every single packet with no packet loss

• Provide critical network health statistics in real-time

• Generate comprehensive analytics for in-depth post-capture analysis and data retrieval

• Ensure packet access for deep packet inspection and complete troubleshooting

• And do it all FAST like the network itself

Importance: Packet-based PM tools remain only truly effective approach to definitive monitoring and definitive troubleshooting –

Jim Frey, Enterprise Management Associates, Inc.


10G Network Data Capture


10G Network Data Storage

• 1Gbps steady-state traffic assuming no storage overhead:7.68 GB/min460 GB/hr11 TB/day2.9 days in a 32TB appliance

• 10Gbps:76.8GB/min4.6 TB/hr110 TB/day7.0 hours in a 32TB appliance


Different Approaches, Different Results

• Client side‒ Closest to what the user sees‒ Difficult to troubleshoot delays‒ Requires monitoring equipment at all remote sites + centralized

monitoring – expensive

• Server-side‒ RTT harder to determine‒ Consolidation of monitoring equipment‒ Better able to assess server response time


Multi-Segment Analysis (MSA)

Compare simultaneous data from end to end‒ A single point only tells you flow health‒ Multiple points measure link quality


The WildPackets Solution

• Intelligent, dynamic load-balancing, filtering and time-stamping of highly-utilized network traffic

‒ To capture and store every single packet‒ To eliminate capturing unnecessary traffic‒ To provide high precision time-stamping for accurate latency

measurement and time synchronization

• Gather high-level, flow-based statistics‒ To monitor the network health‒ To narrow down post-capture analysis criteria

• Make packets readily and quickly available‒ To provide in-depth troubleshooting and deep packet inspection

• Aggregate and display the load-balanced traffic in a single view ‒ To make it trivial for the user to monitor, analyze, and troubleshoot

demanding networks


Using Network Analysis for Application Performance

Monitoring


The Network Or The Application?

Possible Issues on the Network

Possible Issues with the Application


Expert Analysis Leads The Way

Network may be at fault

System or Application is at fault


What To Look For

• Primary events are anything related to “slow”‒ Depending on what events we see, we will know who is at fault

• Typical application events:‒ HTTP slow response time‒ Oracle slow response time‒ Inefficient client

• Typical network events:‒ TCP SLOW segment recovery‒ Slow retransmissions‒ Slow acknowledgements‒ Low throughput


Visual Expert Provides ProofTwo requests for data, two quick TCP Acks, but then a long delay

before the server sends the requested data

Requests and Acks

Then the Data gets returned much later

ACK fast = Network fast

Data slow = System slow


Industry-Leading WildPackets Solution


Omnipliance – A Solution for Every Network

Powerful Precise Affordable

The new family of WildPackets Network Analysis and Recorder appliances gives IT

organizations powerful and precise analysis of high-speed networks in an affordable solution

with half the hardware footprint of rival offerings


Omnipliance Is …Powerful

‒ Fastest network recorder in its class - Up to 20Gbps of real-world traffic‒ Up to 128 TB of storage‒ Simultaneous real-time analysis and comprehensive Forensic Search

Precise‒ Captures complete network traffic, so you can analyze everything, not just

samples or high-level statistics‒ Doesn’t drop packets or sacrifice accuracy for speed‒ Supports rich, detailed analysis, including VoIP and video-over-IP traffic

Affordable‒ Delivers outstanding price/performance (lower price; half the rack space)‒ Allows mix of 1G/10G/40G interfaces without buying extra appliances‒ Solutions start at $16,995


Omnipliance Product Line

• Omnipliance TL: NOC or Data Center, 10G/40G, up to 128 TB with OmniStorage

• Omnipliance MX: Corporate Campus, 1G/10G, up to 32 TB• Omnipliance CX: Branch Offices, 1G, up to 32 TB


Omnipliance TLIndustry Leading Network Analysis and Recorder Appliance

• Sets a new standard in capture-to-disk speeds‒ 20Gbps sustained capture to disk rate with zero packet drop

• Best price/performance Network Analysis Appliance in the market

‒ 25Gbps with only one Omnipliance TL and one OmniStorage‒ Consuming less rack space, less cooling, less electrical power

• Most flexible network interface offering‒ 1G/10G/40G interfaces supported in a

single unit eliminates additional unit requirement

• Most accurate real-time analytics− Packet-based processing and analysis vs.

inaccurate sample-based calculations


• Omnipliance TL with OmniAdapter 40G has a capture-to-disk rate of 25.33Gbps with no loss in storing the data

• Omnipliance TL with OmniAdapter 10G has a capture-to-disk rate of 20.94Gbps with no packet loss

• Capture-to-disk rate per 10G port of 10.47Gbps is the highest observed to date in testing of network analysis and recording appliances

Faster Capture = More Complete Data


Distributed Analysis Collaboration or Independent Control

OmniEngine

OmniEngine

OmniEngine

OmniEngine


WildPackets Omnipliance Advantages

• Fastest write to disk with no packet loss

• Best price/performance

• Most flexibility with 1G/10G/40G Interface mix and match

• Newest technology

• Best UI

• Most accurate, packet-based analytics and statistics

• Fastest real-time analysis and capture to disk

• Rich, detailed analysis, including VoIP and video


More Power in a Smaller Footprint‒ Captures traffic up to 25Gbps of real-world traffic‒ Scales up to 128 TB of storage‒ Requires half the rack space and power of competitive solutions

Greater Precision ‒ Captures network traffic with no data loss, so you can analyze

everything, not just samples or high-level statistics‒ Accurate metrics‒ Rich analytics help pinpoint and characterize anomalies ‒ Enterprise-wide solution makes forensic analysis available at every

location

Better Price/Performance‒ Superior power and precision at a price significantly lower than other

network forensics products.

The WildPackets Advantage


Q&A

Show us your tweets!Use today’s webinar hashtag:

#wp_NetworkAnalysiswith any questions, comments, or feedback.

Follow us @wildpackets

Follow us on SlideShare!Check out today’s slides on SlideShare

www.slideshare.net/wildpackets


Thank You!

WildPackets, Inc.1340 Treat Boulevard, Suite 500Walnut Creek, CA 94597(925) 937-3200

Managing a Widely Distributed Network

Software

Transcript of Managing a Widely Distributed Network