F5云計(jì)算解決方案

1、F5云計(jì)算解決方案我們?yōu)槭裁葱枰?需求 持續(xù)增長(zhǎng)的接入設(shè)備彈性 應(yīng)用和服務(wù)移動(dòng)性創(chuàng)新不斷增長(zhǎng)的服務(wù)和管理部署需求經(jīng)濟(jì)清晰的成本計(jì)算方法云的世界正在發(fā)生些什么?Expectation that Hybrid Clouds will be core Infrastructure within 5 YearsGartner 報(bào)告未來五年的全球公有云市場(chǎng), 超過四分之三 (76%)的調(diào)查對(duì)象準(zhǔn)備使用混合云作為他們?cè)茟?zhàn)略的核心，超過了單純使用私有云和公有云.在阻礙云計(jì)算使用的因素回應(yīng)中, 大多數(shù)調(diào)查對(duì)象 (55%)在接下來的2-3年期待混合云或者多家云計(jì)算服務(wù)商混合來應(yīng)對(duì)現(xiàn)在的云體系.20132012

2、42%47%76%The futureF5 是云計(jì)算中必不可少的組成快速可擴(kuò)展軟件定義可編程虛擬設(shè)備安全高可用網(wǎng)絡(luò)多樣化智能編排F5BIG-IQ全球16大云計(jì)算服務(wù)商有15家采用了F5解決方案 Top 16 Cloud Providers1. Rackspace2. Microsoft Azure3. Amazon AWS4. GoGrid5. IBM6. AT&T7. Savvis8. Terremark9. NaviSite10. Sunguard11. CSC12. Opsource13. Media Temple14. Softlayer15. Layered Technologies

3、16. Quality Technology Services全球云計(jì)算合作伙伴幫助客戶實(shí)現(xiàn)應(yīng)用向云平臺(tái)的平滑過渡數(shù)據(jù)中心到私有云的平滑過渡方案數(shù)據(jù)中心到公有云的應(yīng)用流量爆發(fā)遷移方案數(shù)據(jù)中心到混合云的應(yīng)用流量智能云間調(diào)度方案F5中國(guó)的云策略構(gòu)筑業(yè)界領(lǐng)先的、可落地的云生態(tài)系統(tǒng)與Cisco、VMware實(shí)現(xiàn)快速交付云解決方案構(gòu)筑開發(fā)API接口，實(shí)現(xiàn)Restful支持支持開源、開放平臺(tái)本地云合作伙伴CISCOVMwareHuaweiF5 與公有云F5 與亞馬遜AWS云服務(wù)F5的參考構(gòu)架RA可以在亞馬遜AWS云服務(wù)上無縫靈活部署F5提供了多種靈活的云服務(wù)收費(fèi)方式以幫助客戶應(yīng)對(duì)云爆發(fā)所產(chǎn)生的周期性基礎(chǔ)設(shè)

4、施限制F5 的四到七層應(yīng)用交付功能現(xiàn)已在亞馬遜AWS云服務(wù)平臺(tái)上實(shí)現(xiàn)部署（包括廣域網(wǎng)流量管理，用戶接入管理和應(yīng)用安全解決方案）獨(dú)有的BIG-IQ可以實(shí)現(xiàn)在亞馬遜AWS云平臺(tái)上授權(quán)、智能部署F5的BIG-IPF5 RAs 與 AWS云服務(wù) F5 在AWS 云整合部署圖VEGOODBETTERBESTSimplified Business ModelsOn-Premises InfrastructureBIG-IP Global Traffic Manager BIG-IP Local Traffic Manager BIG-IQ Cloud Virtual EditionBIG-IP Platf

5、ormDevelopmentTeamBIG-IP PlatformBIG-IQ Cloud Virtual EditionCloud Management and OrchestrationApplication ServicesApplication ServicesDNS ServicesBIG-IP Virtual EditionAmazon AWS CloudDeveloperDeveloperDeveloperUserBeta UserTester GTM LTM LTMProduction/StagingDevelopment/TestingGTMLTMBIG-IQOrchestr

6、atorCode Repository數(shù)據(jù)中心的處理能力N+1 數(shù)據(jù)中心數(shù)據(jù)中心流量按需擴(kuò)展數(shù)據(jù)中心簡(jiǎn)化構(gòu)架數(shù)據(jù)中心可以按需擴(kuò)充處理能力.在數(shù)據(jù)中心和共有云上保持應(yīng)用的統(tǒng)一性和安全性.保證突發(fā)流量平滑過渡到公有云日常訪問流量高峰時(shí)訪問流量特殊時(shí)刻訪問流量或突發(fā)異常訪問流量AWS公有云AWS marketplace https:/marketplaceIn the search section type in F5 BIG-IP or F5 BIG-IQ the list of available AMIs will displayYou will need to create a VPC be

7、fore deploying BIG-IP. For additional assistance please consult the F5 AWS best practices guide. http:/kb/en-us/products/big-ip_ltm/manuals/product/bigip-ve-setup-amazon-ec2-11-4-0.htmlF5的BIG-IP軟件可以在AWS市場(chǎng) Marketplace自由下載BIG-IP/BIG-IQ 在AWS上實(shí)現(xiàn)部署F5在AWS全球提供BYOL和按時(shí)付費(fèi)兩種方式F5在AWS中國(guó)暫時(shí)只提供BYOL方式從2014年4月起F5就在AW

8、S全球提供BIG-IP全功能的v11.5軟件支持在AWS上F5提供GBB三種版本和三種流量性能平臺(tái) (25mbps, 200mbps, and 1gbps)以便用戶靈活選用F5 在AWS中國(guó)提供全系列軟件功能*Available at AWSBYOLWhat it isStandard VE license, and labLicenses are portable between: discrete, pool customers DC and CloudsHow it WorksHow Customer buys: VE license from F5 or ChannelWho owns

9、 the License: CustomerPricing: F5 pricing and discountsSupport: Same support as any other VEWhat is AvailableKey BenefitsCustomers can deploy version 11.3 and beyond of BIG-IPMore cost effective for long term use (more than 1-2 year)25M200M1GGoodBetterBestBig-IPBig-IQ*GOODBETTERBEST MODULES/SERVICES

10、BIG-IP Local Traffic ManagerBIG-IP Global Traffic ManagerBIG-IP App. Acceleration ManagerBIG-IP Advanced Firewall ManagerSDN ServicesAdvanced RoutingBIG-IP Access Policy ManagerBIG-IP App. Security Manager客戶可以在AWS 中國(guó)便捷的啟動(dòng)F5虛擬機(jī)F5 為AWS中國(guó)定制了AMI鏡像使得客戶能夠方便的部署虛擬機(jī)F5配合AWS中國(guó)為客戶的電子商務(wù)提供完整的應(yīng)用安全解決方案F5是首家在AWS中國(guó)上實(shí)

11、現(xiàn)應(yīng)用交付功能的廠商，也是客戶的首選應(yīng)用安全產(chǎn)品F5與AWS中國(guó)聯(lián)合方案的客戶價(jià)值F5提供的系統(tǒng)優(yōu)勢(shì)提供業(yè)界第一的WAF應(yīng)用防火墻方案唯一在AWS中國(guó)上部署應(yīng)用交付全系列的廠商與AWS構(gòu)架師配合，幫助客戶遷移現(xiàn)有應(yīng)用到AWS上幫助全球客戶采用F5全局負(fù)載均衡方案實(shí)現(xiàn)在AWS全球各個(gè)中心調(diào)度流量AWS提供的系統(tǒng)優(yōu)勢(shì)提供用戶完整流量監(jiān)控提供業(yè)界第一公有云全范圍服務(wù)支持F5等應(yīng)用交付廠商的虛擬化EC2 API幫助實(shí)施應(yīng)用遷移和自動(dòng)轉(zhuǎn)換F5與AWS中國(guó)強(qiáng)強(qiáng)合作，能夠?yàn)榭蛻籼峁┩暾膽?yīng)用安全解決方案配合F5的ADN 解決方案，用戶可以靈活便捷平滑的遷移現(xiàn)有數(shù)據(jù)中心應(yīng)用到AWS共有云上F5與Microso

12、ft Azure云服務(wù)F5在Microsoft Azure 市場(chǎng)提供BYOL全功能BIG-IPBring Your Own License (BYOL)What it isStandard VE license: DiscreteLicense is owned by customer and purchased from F5Licenses are portable between customers DC and Azure cloud How it WorksHow to buy/deploy: Customer purchases a VE license from F5 and d

13、eploys to AzureWho owns the License: CustomerSupport: Same support as for any other VEWhat will be AvailableBIG-IP VE Offerings:Good | Better |BestStandalone Modules 30 day 200M Best Free Trial - Lab Throughput25M200M1GLABF5 Solutions for MicrosoftCustom ApplicationsBIG-IP IN AzureUse Casesand DemoH

14、NV Gateway ServicesHyper V Network Virtualization Enhanced by F5Microsoft Cloud Services PlatformF5與Microsoft協(xié)同提供客戶應(yīng)用方案WEST USEAST USAuthentication TrafficGSLBASMF5-Azure混合云的應(yīng)用場(chǎng)景數(shù)據(jù)中心和公有云多活部署，GSLB，業(yè)務(wù)流自動(dòng)切換無論應(yīng)用部署在哪里，都有能夠?qū)崿F(xiàn)統(tǒng)一的安全策略（例如單點(diǎn)登錄，應(yīng)用防火墻）數(shù)據(jù)中心與公有云之間通過IPSec VPN互聯(lián) IPSec VPNIPSec VPNF5 與私有云F5與Cisco AC

15、I的合作F5 BIG-IP / BIG-IQ 與ACI的協(xié)同工作ACI FabricVirtual EditionApplianceChassis BIG-IQ Device PackageDevice PackageF5 Device Package Release 1.2 Deployment ModelBIG-IQBIG-IQ Integration with Cisco ACI 124aBIG-IQ和APIC集成1 - BIG-IP expose iApps to BIG-IQ2 - BIG-IQ create custom device package3 - Admin import

16、 BIG-IQ device package to APIC4a - APIC sends iApp config to BIG-IQ - BIG-IP4b - APIC sends Device config to BIG-IPBIG-IP 和APIC集成1 - Download device package from F52 - Admin import device package to APIC3 - APIC sends config to BIG-IP directly3324b1F5 Synthesis FabricDevice PackageF5 Configurationst

17、ate: 1, transaction: 0, ackedState: 0, value: (5, DestinationNetmask, Netmask1): state: 1, transaction: 0, ackedState: 0, value: 55, (5, DestinationPort, port1): state: 1, transaction: 0, ackedState: 0, value: 80BIG-IQ Device PackageF5 iApps Configstate: 1, transaction: 0, ackedState: 0, value: (5,

18、DestinationNetmask, Netmask1): state: 1, transaction: 0, ackedState: 0, value: 55, (5, DestinationPort, port1): state: 1, transaction: 0, ackedState: 0, value: 80F5 Device Configstate: 1, transaction: 0, ackedState: 0, value: (5, DestinationNetmask, Netmask1): state: 1, transaction: 0, ackedState: 0

19、, value: 55, (5, DestinationPort, port1): state: 1, transaction: 0, ackedState: 0, value: 80如何在ACI中實(shí)現(xiàn)F5的iApp應(yīng)用部署? BIG-IQ!BIG-IQ provides a way to deploy iApps in ACI environmentBIG-IQ + APIC 整合流程: Make ConnectorUsing BIG-IQ Connector, making a new connector using Cisco APIC as cloud provider typeBIG

20、-IQ + APIC 整合流程: Import Customized BIG-IQ Device PackageAPIC Admin User can import the device package; and create a logical device cluster using this device package containing new iApps function service functionF5與VMWare的合作SDDC 構(gòu)架Application OrchestratorNetworkOrchestratorInfrastructureOrchestratorS

21、witchRouterPackets: L2-3FirewallL4 Load BalancingPackets: L4ArchitectData PlaneControl PlaneApplicationsTrafficManagementApp.SecurityApp.OptimizationMessages: L7Application LayerNVGREVXLANPackets: L2-4STATEFULSTATELESSGatewayDNSServicesVMware NSX 和F5 聯(lián)合解決方案Any Application(without modification)Virtua

22、l NetworksVMware NSX Network Virtualization PlatformLogical L2Any Network HardwareAny Cloud Management PlatformLogicalFirewallLogicalLoad BalancerLogical L3LogicalVPNAny HypervisorLogicalLoad BalancerVirtual IP: Member pool: , ADN template: Web Gold概述NSX integrates with F5 BIG-IQ and BIG-IPsF5 Admin

23、 defined iApps get published to NSX Manager as ADN service templatesBIG-IPs VEs get automatically deployed, licensed and configuredUser can instantiate and consume F5 iApps from NSX UI or API 優(yōu)勢(shì)Compatible with all NSX featuresCompatible with all F5 BIG-IQ and BIG-IP featuresSeamless support for virt

24、ual networks and traditional networking with VLANsSupport for any CMP including vCACFamiliar workflows for all teams (in NSX , and in F5 BIG-IQ)Supports virtual and physical form factor of F5 appliances F5 ADN 作為NSX的一種服務(wù)Big-IQ registers with NSX Manager and uploads iApps.The F5 services shows on NSX

25、 Manager Services catalog聯(lián)合部署及下發(fā)樣例F5與OpenStack重點(diǎn)F5 是OpenStack Foundation的正式贊助企業(yè)通過對(duì)Openstack云平臺(tái)的直接技術(shù)支持和技術(shù)交流，F(xiàn)5幫助使客戶在公有云和私有云方案中獲得更多靈活選擇F5是Openstack平臺(tái)的官方認(rèn)證贊助商，專注于4-7層應(yīng)用交付解決方案的標(biāo)準(zhǔn)制定和未來開發(fā)OpenStack and F5Openstack LBaaS 基本功能VIPsList, Retrieve, Create, Update, RemovePoolsList, Retrieve, Create, Update, Remo

26、vePool MembersList, Retrieve, Bulk Create, Update, RemoveHealth MonitorsPING, TCP, HTTP or HTTPSAssociate and Dissociate monitors from poolStatisticsLB MethodsOpenStack NeutronNeutron Controlled Network FabricSoftware Overlay TunnelingOpen SourceFast InnovationCompute NodeiptablesOVSCompute Nodeipta

27、blesOVSNetwork NodeiptablesDHCPRDHCPOVSnetnsBIG-IQ Controlled Application FabricOver the Cloud VE Device Onboarding with NovaUnder the Cloud VxLAN Tunnel SupportMAC-in-GRE Tunnel SupportLBaaSL4 L7 StatefulL2 L3 StatelessOpen Source NetworkingFusionManagerNeutronNOVAFusionSphereF5LTM/AFM/APMVE & Plat

28、formNetconfOpenFlowCLIOpenStack Plug-in1RESTFUL APICNAEVSUVPOVS AgentF5與Huawei CloudBIG-IQ Device2Openstack plug-in for LBaaSBIG-IQ as VE License Server and LTM device managerHuawei AgileController use iControlREST for other Module AD-N functionHuawei FusionManager add F5 service catalog to the serv

29、ice portalAgileController3iControlREST4LBaaS / FWaaS /WAaaS/SSL / GSLBaaS / TCPOppF5 與Huawei Cloud 基于Openstack解決方案云數(shù)據(jù)中心多租戶的vLB 方案F5云的參考架構(gòu) 參考架構(gòu) - 云遷移、云爆發(fā)、云支撐VEGOODBETTERBESTSimplified Business ModelsOn-Premises InfrastructureBIG-IP Global Traffic Manager BIG-IP Local Traffic Manager BIG-IQ Cloud Virt

30、ual EditionBIG-IP PlatformDevelopmentTeamBIG-IP PlatformBIG-IQ Cloud Virtual EditionCloud Management and OrchestrationApplication ServicesApplication ServicesDNS ServicesBIG-IP Virtual EditionAzure/AWS CloudDeveloperDeveloperDeveloperUserBeta UserTester GTM LTM LTMProduction/StagingDevelopment/TestingGTMLTMBIG-IQOrchestratorCode RepositorySaaS ProvidersOff