Upload
others
View
1
Download
0
Embed Size (px)
Citation preview
Consuming Cloud Provider SD-WAN Services
Satish Katpally & Rachana Srivastava
PMM, CPSBU; PM, NSBU
BRE3038BU
VMworld 2018 Content: Not for publication or distribution
Disclaimer
2©2018 VMware, Inc.
This presentation may contain product features orfunctionality that are currently under development.
This overview of new technology represents no commitment from VMware to deliver these features in any generally available product.
Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind.
Technical feasibility and market demand will affect final delivery.
Pricing and packaging for any new features/functionality/technology discussed or presented, have not been determined.
VMworld 2018 Content: Not for publication or distribution
Agenda
1 Cloud Services Trends
2 What is SD-WAN
3 Why Enterprises & Cloud Providers should care about SD-WAN
4 NSX SD-WAN by VeloCloud Addressing these trends and opportunities
5 Use Cases & Customer Case Studies
6 Call to Action
7 Q&A
Confidential
VMworld 2018 Content: Not for publication or distribution
Cloud Budgets are moving beyond infrastructure
Source: IDC Cloud & AI Adoption Survey January 2018
VMworld 2018 Content: Not for publication or distribution
Managed Services for Multi-Cloud
Source: IDC Cloud & AI Adoption Survey January 2018
VMworld 2018 Content: Not for publication or distribution
New Professional Services for Multi-Cloud
Source: IDC Cloud & AI Adoption Survey January 2018
VMworld 2018 Content: Not for publication or distribution
©2018 VMware, Inc.
What is SD-WAN
VMworld 2018 Content: Not for publication or distribution
8©2018 VMware, Inc.
Control
Visibility
Cost
Security
Plan-Driven
Long Cycle Times
IaaS/PaaSAWSGCP
SaaSSalesforce.com
Office365
Dropbox
LEASED LINES
LEASED LINES
BRANCH
BRANCH
DATA CENTER
BRANCH
BRANCH
BRANCH
BRANCH
DATA CENTER
BRANCHDATA CENTER
DR SITE
DATA CENTER
BRANCH
BRANCH
• 50-80% Backhaul• 50% -> Hybrid WAN• Lifting & Shifting to Cloud
Loss of Control
Lack of Visibility
Security Challenges
SLAs Not Met
Hybrid Cloud Complexity
Unpredictable
Performance
Network Bottleneck
Control
Visibility
Cost
Security
Plan-Driven
Long Cycle Times
Enterprise WAN is Getting Increasingly Complex
VMworld 2018 Content: Not for publication or distribution
Workload Migration Affects WAN
Cloud Provider Data CentersCustomer Data Center
Internet• Hosted Apps/SaaS• Managed Services (DRaaS)• Security Services (FW, Micro-Seg
Customer Branches
Simplified WAN Management
Managed Cloud On-Ramp
Assured Application Performance
MPLS
LTE
BB Ethernet
VMworld 2018 Content: Not for publication or distribution
Retail Store ExampleWAN is the bottleneck
Cloud services reducing visibility, control and security
Internet lacks reliability, performance and quality
Retail stores demandfor 10X+ bandwidth
Traditional wide area networking is expensive
Corporate IT lacks staffin retail branch stores
Lean store demands less equipment and less complexity
4G-LTE
Private—MPLS
Internet - DSL, Cable, Fibre
Digital signageGuest internetMobile checkout
Virtual assistantVirtual desktopsMobile kiosks
StoreUnified CommsRetail CRM Retail POS network
Signage serversRetail databases
Corp data centre
Presence appsLoyalty appsCouponing apps
Internet
VMworld 2018 Content: Not for publication or distribution
Customer WAN Challenges affecting Cloud Migration
WAN Complexity
App Performance
Multi-cloud On-ramp Slower Multi-Cloud Adoption
Lower Satisfaction
Higher Cloud Costs
VMworld 2018 Content: Not for publication or distribution
12©2018 VMware, Inc.
SD-WAN - Key Differentiators
Simplified WAN Management
Assured Application Performance
Managed On-ramp to the Cloud
Branch Edges
SaaS / IaaS
Zero-touch deployments, simplified operations
Direct multi-cloud deployment with managed access
Datacenter Edges
Transport independent performance for apps
SD-WAN OverlayPrivate /MPLS 3G/4G LTE
Internet Broadband
Orchestrator
Cloud Gateways
VMworld 2018 Content: Not for publication or distribution
13©2018 VMware, Inc.
Why Enterprises should considerSD-WAN Managed Services fromCloud Providers
VMworld 2018 Content: Not for publication or distribution
Managed WAN Service Opportunities from Cloud Service Providers
Managed WAN Services
App/SaaS Performance Services
Simplified Cloud Access
Managed Edge/Branch
VMworld 2018 Content: Not for publication or distribution
NSX SD-WAN Benefits for Cloud Provider Customers
Reduce Service Costs
Enable Digital Transformation
Deliver Simplified Services
• Benefit from SD-WAN – avoid circuit lease cross region – eg: UCaaS
• Device consolidation with multiple VNFs
• Augment MPLS or broadband with SD-WAN services
• Offer secure and reliable cloud-based services – eg: hybrid cloud, DRaaS
• Zero-touch provisioning and self-service operations
• Deliver on-demand, application aware SD-WAN services with simplified management
VMworld 2018 Content: Not for publication or distribution
Benefits of consuming SD-WAN Services from Cloud Service Providers
New Managed WAN Services Multi-Cloud Onramp
Reduced Multi-cloud costs
Faster Value of New Products
Increased Business Agility
Self Service WAN
Cloud VPN (L2/L3)
App FW & Web Security
App Performance Monitoring
PCI Compliant WAN Investment ProtectionVMworld 2018 Content: Not for publication or distribution
17©2018 VMware, Inc.
NSX SD-WAN by VeloCloudAddressing these trends and opportunities
VMworld 2018 Content: Not for publication or distribution
18©2018 VMware, Inc.
BRANCH
BRANCH
BRANCH
BRANCH
BRANCH
BRANCH
BRANCH
BRANCH
TELCO/NFV
TELCO/NFV
EDGE/IOT
TELCO/NFV
BRANCH
BRANCH
EDGE/IOT
EDGE/IOT
The Virtual Cloud NetworkConnect and Protect your BusinessVMworld 2018 Content: Not for publication or distribution
19©2018 VMware, Inc.
Identity
Apps and Data
Policy ScalabilityAnalytics and Insights
Secure Connectivity Availability
Users
Private Data Centers
VMs, Containers, Microservices
Branch Offices
Public Clouds
Telco Networks
Things
Virtual Cloud NetworkingConnect & Protectany workload across any environment
Built-in
Automated
Programmable
Application Centric
VMworld 2018 Content: Not for publication or distribution
20©2018 VMware, Inc.
NETWORKING AND SECURITY MANAGEMENT AND AUTOMATION
vRealize AutomationEnd-to-end workload automation
Network InsightNetwork discovery and insights
Cloud-Based Management Workflow Automation Blueprints / Templates Insights / Discovery Visibility
NETWORK AND SECURITY VIRTUALIZATION
AppDefenseModern application
security
NSX SD-WANby VeloCloud
WAN connectivity services
NSX Hybrid ConnectData center and cloud
workload migration
NSX Data CenterNetworking and
security for data center workloads
NSX CloudNetworking and
security for Public Cloud workloads
Security Integration Extensibility Automation Elasticity
VMware NSX PortfolioThe Foundation of the Virtual Cloud Network
VMworld 2018 Content: Not for publication or distribution
21©2018 VMware, Inc.
Virtual Cloud Networking for VCPP
VCN + VCPP
Delivering Managed Services Across Clouds
VMware Cloud on AWS
Hosted Cloud
VMware Cloud Provider Partner
Managed Services
Security Compliance DR Backup Migration Operations VisibilityConnectivity Storage Extension
VMware Cloud Provider Platform
VMworld 2018 Content: Not for publication or distribution
22©2018 VMware, Inc.
Introducing NSX SD-WAN by VeloCloudNSX SD-WAN by VeloCloud
Integration with NSX Data Center and NSX Cloud
Assured Application Performance Across
the Network
Simplified Activation and Automated Connectivity
End-to-End Segmentation from Data Center to Branch
NSX SD-WAN Edge
NSX SD-WANGateways
NSX SD-WANGateways
NSX SD-WAN Edge
NSX Data center
Branch100s to 1000s
NSX SD-WAN Gateways in IBM Cloud, AWS, Azure, etc.
NSX Cloud
Cloud Apps
Data Center Apps
VMworld 2018 Content: Not for publication or distribution
23©2018 VMware, Inc.
Solution Components
Virtual Edge
Flexibility in deployment
• Purpose-built hardware• Virtual Edge for cloud or white box• Services platform for VNF
For branch, datacenter &
cloud
NSX SD-WAN Edge
Multi-tenant cloud-based management, configuration, and monitoring portal
NSX SD-WAN Orchestrator and Controllers
VMware or SP hosted, and
on-premises at enterprise
Business policy
abstractionAPIs
Enables fast deployment, zero-touch operations
Optimized cloud on-ramp to the
doorstep of SaaS / IaaS
Strategic world-wide locations,
top-tier network PoPs
NSX SD-WAN Gateways
Fully managed and operated by VMware and SPs
Multi-tenant
VMworld 2018 Content: Not for publication or distribution
24©2018 VMware, Inc.
Monitoring, Management, and Analytics: NSX SD-WAN OrchestratorA single pane of glass for your entire SD-WAN solution
A fully multi-tenant solution offering:
Zero-touch provisioning of new sites and branches
Simple configuration and policy management
On-going visibility and agile troubleshooting
VMworld 2018 Content: Not for publication or distribution
25©2018 VMware, Inc.
Global Gateways
99.99% Reliability SLA
440+Gateways
63Orchestrators
30Regions
VMworld 2018 Content: Not for publication or distribution
26©2018 VMware, Inc. CONFIDENTIAL
NSX Branch to Data center Service Platforms
Micro to Small Branch Small to Midsized Branch Large Branch/Data Center
NSX SD-WAN Edge by VeloCloud
No local appsCloud or integrated security
NSX SD-WAN Edge Services Platform
No local appsOne networking VNF e.g. NGFW
Edge VNF SecurityURL/content filteringIDS/IPS
VMware NSX
Roadmap
NSX with NSX SD-WAN VNF
Local appsMany VMs including network services
NSX / vSAN
Ap
p X
IoT
GW
File
Ana
lytic
s
NG
FW
SD-W
AN
CPE
VMworld 2018 Content: Not for publication or distribution
NSX SD-WAN by VeloCloud: Partner Eco System
3rd-Party Firewall VNF on Edge
Virtual Ready (V) EdgesVMworld 2018 Content: Not for publication or distribution
28©2018 VMware, Inc.
NSX SD-WAN Use Cases
VMworld 2018 Content: Not for publication or distribution
29©2018 VMware, Inc.
Managed SD-WAN Services
Branch Site with NSX SD-WAN Edge by VeloCloud
NSX SD-WAN Gateway by VeloCloud withEmbedded ControllerPublic Internet
Legacy EnterpriseData Center
SD-WAN Enterprise Data Centerwith NSX SD-WAN Edge by VeloCloud Cluster
ProviderEdge
ProviderEdge
Internet
SAAS
Private—MPLS
PrivateCircuit
NSX SD-WAN Orchestrator by VeloCloud
Hub-less design for legacy data centers
Hosted gateways for SD-WAN to SaaS/IaaS
Hub for SD-WAN to data center including private links
VMworld 2018 Content: Not for publication or distribution
Customer Branches
Direct Connect
Internet
Telco Partner Deployment
Customer Data Center
Direct Connect
NSX SD-WAN for Direct On-Ramps to Hyperscalers
Complex Multi WAN Link Management
Multiple Connections for Multiple Providers
Increased WAN Costs for App Performance
VMworld 2018 Content: Not for publication or distribution
Customer Branches
Internet
NSX SD-WAN by VeloCloud Deployment
Customer Data Center
Virtual NSX SD-WAN
EdgeNSX SD-WAN
Edge
NSX SD-WAN On-ramp as an alternative to DirectConnect/ExpressRoute
Simplified Single SourceWAN Management
One Connection for Multiple Providers
Lower On-ramp WAN CostsVMworld 2018 Content: Not for publication or distribution
Managed Edge IPSec Connectivity
Poor Application Performance
IPSec VPN Connections to Cloud Provider
Enterprise Customer Data CenterEnterprise Customer Branches
Cloud Provider Data Centers
Complex Mesh IPSec Tunnel Configuration & Management
Increased WAN Costs for App Performance
VMworld 2018 Content: Not for publication or distribution
NSX SD-WAN Automation of Edge IPSec Connectivity
Simplified IPSec Tunnel Configuration & Management
Lower WAN CostsWith simple topology
SDWAN
SDWAN
SDWAN SDWAN
SDWAN
NSX SD-WAN Edge Gateway
Enterprise Customer Data CenterEnterprise Customer Branches
Cloud Provider Data Centers
NSX SD-WAN Edge Appliance
Assured Application Performance
VMworld 2018 Content: Not for publication or distribution
34©2018 VMware, Inc.
NSX SD-WAN by VeloCloudCustomer Case Studies
VMworld 2018 Content: Not for publication or distribution
Clothing Retailer: Brooks Brothers
Known for exclusive customer experience relies on in-store online shopping and simplified management
• Network outages resulted in lost sales • Legacy infrastructure inhibited the roll-out of in-store online ordering application
Before Cloud-Delivered SD-WAN
• Continuous uptime results in higher sales
• Removal of traffic backhaul resulted in seamless app performance
• High-bandwidth availability supports in-store online browsing
With Cloud-Delivered SD-WAN
• Increased revenue from expanded services and consistent uptime
Competitive Advantage Outcome
Cloud
IoT
Wireless
Oldest clothing retailer in the US; outfitted 40 American
Presidents!
500 Global Locations
VMworld 2018 Content: Not for publication or distribution
36©2018 VMware, Inc.
Large Mining Company: Anonymous
Azure Shift70+ Locations
Required large amounts of bandwidth to transmit terabyte-sized files
• Existing bandwidth maximized; but slow/not optimized
• Lack efficient access to Azure cloud application system
Before Cloud-Delivered SD-WAN
• Transmit terabyte-sized files while supporting UC• Bandwidth increased 2X to 4X
• Reduced deployment time from months to days• Centralized network visibility; control; management
With Cloud-Delivered SD-WAN
• Comprehensive and extensive data on geological landscape and mineral composition
Competitive Advantage Outcome
UC
Cloud
TB–sized files
50,000 Employees
LargeMining
Company
VMworld 2018 Content: Not for publication or distribution
37©2018 VMware, Inc.
NSX SD-WAN by VeloCloudDeployment Options & Business Models
VMworld 2018 Content: Not for publication or distribution
NSX SD-WAN by VeloCloud Business Models – Two Options
• OPEX MODEL NSX SD-WAN operates cloud service on behalf of VARs, MSPs, CSPs, and SPs.
• NSX SD-WAN operates & manages the cloud infrastructure
• Edge CPE are drop-shipped to end-customer, or can be stocked
• Flexible Billing
VELOCLOUD, now part of VMware OPERATED
CLOUD PROVIDER OPERATED
• CAPEX MODEL Service provider purchases Edge CPE & SW license for gateways & management
• Service provider operates & manages the cloud infrastructure
• Edge CPE logistics are handled by service provider Capex
• Annual or Monthly Billing for SW Licenses
O P E R A T E DP O W E R E D
VMworld 2018 Content: Not for publication or distribution
NSX SD-WAN Flexible Deployment Stages Of Management
Over-the-Top
Stage I
VeloCloud
OrchestratorGateways
EdgeSupport
SP
None
Benefits• Quick Deployment
• Fast Time to Market• Enable Team Prior to Full Deployment
Note: Edge provided as a CAPEX or OPEX model
Hybrid
Stage II
VeloCloud
Orchestrator
SP
GatewaysEdge
Support*
Full
Stage III
VeloCloud
None
SP
OrchestratorGateways
EdgeSupport
Benefits• VeloCloud Management of Network
• Easy Transition to Stage II
* To manage Gateways and Edges Benefits• Full Service Integration
• True Differentiation Capabilities• Reduced CostVMworld 2018 Content: Not for publication or distribution
40©2018 VMware, Inc.
Call to Action
VMworld 2018 Content: Not for publication or distribution
41©2018 VMware, Inc.
Join the NSX VMUG Communityvmug.com/nsxConnect with your Peerscommunities.vmware.com
Embrace the NSX Mindsetnsxmindset.comFind NSX Resourcesvmware.com/go/networkingRead the Network Virtualization Blogblogs.vmware.com/networkvirtualization
Where to get started
Attend the Networking and Security SessionsShowcases, breakouts, quick talks & group discussions
Visit the VMware BoothProduct overviews, use-case demos
Visit Technical Partner BoothsIntegration demos – Infrastructure, security, operations, visibility, and more
Meet the ExpertsJoin our experts in an intimate roundtable discussion
Free Hands-on Labslabs.hol.vmware.com
Virtual Cloud Network Guided Demovcndemo.com
VMware Education - Training and Certificationvmware.com/go/nsxtraining
Free NSX Training on Courseravmware.com/go/coursera
Engage and Learn Experience
Try Take
VMworld 2018 Content: Not for publication or distribution
Call to Action: Getting Started with NSX SD-WAN by VeloCloud
3Explore a PoC with Managed SD-WAN
Services
1Come see the NSX
SD-WAN Demo in the HybridCloud Demo
Station
2
42
Start a conversation about SD-WAN with your Cloud Provider
VMworld 2018 Content: Not for publication or distribution
43©2018 VMware, Inc.43
Q&A
VMworld 2018 Content: Not for publication or distribution
VMworld 2018 Content: Not for publication or distribution
VMworld 2018 Content: Not for publication or distribution