云模型下的广域网优化CiscoVirtualWAAS.PPT

The third pillar of the secure borderless network architecture is the secure, virtualized data center. ENTER Many customers have migrated important data center applications onto virtual machine images. This made it easy to move apps between the head office DC, the Disaster Recovery site, and cloud-based providers. So virtualization has already enabled a kind of mobility for the data center. Cisco is at the forefront of virtualization technology. Our latest firewalls have virtual contexts, so they act as multiple firewalls with their own interfaces and rule sets. ENTER In this first diagram you can see that three applications are hosted on three servers, in three networks, plugged into three virtual contexts on our firewall. ENTERThat’s not too complicated, but what happens if you want to host the three apps on one big VMware server, in the center of the second diagram? Security gets tough without a patch panel, and that’s where Cisco’s Service Insertion Architecture comes in. ENTER It uses Service Chaining to tunnel packets from the Nexus switch, in the brown box, to the ASA firewall below. The SIA-enabled firewall can then differentiate between the virtual applications, and enforce the right policies. ENTER But Cisco is taking virtualization a step further. In the third diagram the security enforcement engines are virtualized, and running on the same hypervisor that hosts the application VMs. The server’s Intel processor has optimized queues that accelerate the handling of our service chaining tags, which dramatically increases Cisco’s security scanning throughput. We’ve not only virtualized the patch panel, but we’ve allowed customers to run firewalls, IPS, email and web security scanners as Nexus-based services. Customers can have the benefits of virtualization without sacrificing traditional security. And there is complete topological freedom, to handle rapidly changing requirements in the data center. * Transcript: So, drilling into specif