Exposiscion de productos de comunicaciones

Data Center Application Services
BRKAPP-2022
Hernan Vukovic hvukovic@cisco.com

Agenda
 Data Center Application Services
–Application High Availability •GSS, ACE –Application Optimization •ACE, WAAS/vWAAS –Application Security

•ASA, IronPort, ACE

 Applications Focus
–Exchange 2007/2010 –SAP Netweaver

 Management Components
 Additional Configuration Items

Presentation_ID© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

3

Data Center Application Services

Presentation_ID

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

4

Agenda
 Data Center Application Services
–Application High Availability •GSS, ACE –Application Optimization •ACE, WAAS/vWAAS –Application Security

•ASA,IronPort, ACE

 Applications Focus
–Exchange 2007/2010 –SAP Netweaver

 Management Components
 Additional Configuration Items

Presentation_ID

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

5

Global Site Selector Operation
Nameserver.ciscojax.com www.sharepoint.ciscojax.com “NS” Record 10.0.10.90 “NS” Record 10.0.10.141

www.sharepoint.ciscojax.com(Secondary Site) VIP=10.2.86.93
Which VIP ?

GSS-Secondary 10.0.10.90
Who’s Least loaded ?
Mesh Link

P-DNS2 16.1.1.1

Select Answer 10.2.86.92 Respond

GSS-Primary 10.0.10.141

DNS query www.sharepoint.ciscojax.com A” Record 10.2.86.92

User
Presentation_ID © 2010 Cisco and/or its affiliates. All rights reserved.

VIP=10.2.86.92 www.sharepoint.ciscojax.com (Primary Site)
CiscoConfidential

6

Global Site Selector

 Improves availability and resiliency of DNS infrastructure with high performance and self protecting DDOS software
 Offloads and optimizes DNS processing and selects the best site based on:
– Intelligent load balancing algorithms and “clauses” – Proximity to user request – Data center and server loads, availability and health – Persistence toprevent lost session information

 A-record responder, works in concert with existing full DNS deployments  Security conscious features:
– DDOS Mitigation Software – Client to GSS and GSS to GSS communication encrypted – Private DNS code base

 Supports all DNS-compatible devices  Can be deployed with or without Application Delivery Controllers

Presentation_ID

© 2010 Cisco and/or itsaffiliates. All rights reserved.

Cisco Confidential

7

Global Site Selector Basic Configuration Sequence

Rule: SharePoint
Source Address List: Any Domain List: SharePoint

Source Address List - Any 0.0.0.0 – 255.255.255.255

5

Domain List SharePoint sharepoint.ciscojax.com AnswerGroup SharePoint Answer-1 (ACE1) Answer-1(ACE2)

4
Answer-1(ACE1) VIP-A 10.2.86.92

2

BalanceClause 1: AnswerGroup: SharePoint Balance Method: Ordered List

2a 1
Answer-1(ACE2) VIP-A 10.2.86.93

6

3

Shared Keepalive Type kal-ap 10.2.86.92 | 10.2.86.93

Presentation_ID

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

8

Application Control Engine
 Infrastructure simplicity in a single hardware platform, ACE integrates
–Applicationdelivery
–Server offload –Data center security features

ACE 4710 ACE Module

 ACE is a Cisco Catalyst® 6500 service module, which comes in three throughput licenses: 4Gbps, 8Gbps, and 16Gbps

 ACE Appliance 4710 is a 1-ru appliance with 4xGbE uplinks in four throughput licenses: 500kbps, 1Gbps, 2Gbps, 4Gbps
 It delivers application infrastructure control, with features like virtualpartitions and native role-based administration(RBA)

SAP

Exchange

SharePoint

Presentation_ID

© 2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

9

Design Considerations
One Armed Load Balancer not inline

For Your Reference

Allows direct server access Requires Source NAT Routed Mode Easy to deploy Requires at least two IP subnets Servers in...