Cisco Sona
- 1. SONA: ENTERPRISE ARCHITECTURE FOR A REAL-TIME WORLD William Ruh, Senior Director Cisco Systems
- 2. Today’s Business Imperative: Real-Time Interactions Fast Faster Real-Time PRODUCTION TRANSACTIONS INTERACTIONS
- 3. The Real-Time Supply Chain Production Transactions Interactions Monitoring local operations Limited visibility , monthly planning cycle Just-in-time inventory management Real-time to sense, decide and respond Web-based collaboration across value chain Fast Faster Real-Time
- 4. Business Need Reduce transportation costs, spoilage from changed orders Installed GPS-enabled logistics system to link delivery trucks and control center Impact Re-route dynamically based on up-to-the-minute customer needs Improved customer satisfaction and increased revenue by 15% Projected $100 million reduction in operating expenses Supply Chain Interactions Cemex Optimized Cement Delivery
- 5. Industry Inflection Points Historically Drive New Architectures Source: Gartner, Cisco NETWORK OF NETWORKS Pervasive, open networks enable client-server to extend beyond corporate boundaries (TCP/IP) INTERNET SERVICE ORIENTED New Network Architecture The network and applications work together as an integrated system (messages) INTELLIGENT INFORMATION NETWORK PACKET NETWORKS CLIENT-SERVER Demand for networks to connect multivendor devices (packets) Integrated system for terminal to mainframe connectivity (VTAM) PROPRIETARY NETWORK MAINFRAME We Are At A New Inflection Point
- 6. Addressing a Market in Transition Dramatic growth in number of applications in the enterprise (from 50 to 500) Transition from monolithic apps to SOA (not 500 apps, but 2,500 “application services”) Exponential growth in application message traffic Message Traffic Integration Costs Growth in number, cost, and complexity of systems to enable application integration and security “ Conga line” of appliances, new 1RU, 2RU devices Management headache, high operations/ people costs
- 7. Network = Most Scalable Platform Since the Microprocessor Services Services Enterprise Commercial Service Providers Home Voice Data Video Mobility
- 8. Cisco’s 3–5 Year Technology Vision: The Intelligent Information Network Time Network Intelligence The Intelligent Movement of Data / Voice / Video Across a System of Networks INTEGRATED TRANSPORT INTEGRATED SERVICES Virtualized Resources and Services INTEGRATED APPLICATIONS Network-Enabled Applications PHASE 1 PHASE 2 PHASE 3
- 9. Cisco’s Technology Strategy Three Components – No Compromises Intelligent Information Network Resilient design Integrated security and management Adaptive system functionality Programmable ASICs Distributed architecture Endpoint-to-endpoint performance Future-proof architecture Investment protection Integrated technologies FASTER LASTING SMARTER Global Systems Approach
- 10. Faster Custom silicon as advanced as recognized industry players # Transistors (Million) Feature Size/ # Metal Layers Chip Size (mm2) Chip 42 25 37.5 29 50 91 56 97 0.18 /6M 0.18 /6M 0.18 /6M 0.15 /7M 0.18 /6M 0.18 /6M 0.13 /7M 0.18 /6M 217 300 128 210 243 180 334 350 Pentium4 Itanium Athlon Ultra-III PPE FFE Metro NT3
- 11. Networked Resources Come In Fixed Packages Memory Processing Storage I/O Networked Infrastructure Component
- 12. Duplicated, Isolated, Wasted Resources Multiple Components Under-utilized Capacity Memory Processing Storage I/O
- 13. Virtualization Allows You to Treat Your Networking Resources as Shared Pools Memory Processing Storage I/O Memory Processing Storage I/O
- 14. Resources Can Be Brought Together On Demand Memory Processing Storage I/O
- 15. Virtualization Lets You Overcome Physical Boundaries and Eliminate Waste Virtual Networked Infrastructure Consolidated, policy-based management Simpler alignment of IT resources to business requirements Memory Processing Storage I/O
- 16. Virtualizing the Data Center Processor Virtualization Storage Virtualization File Virtualization Network Virtualization Service Virtualization Virtualization Virtual “Backplane” Between All Resources Utility Network Processor Pool Networking Pool Storage Pool INTELLIGENT SAN SWITCHING Replication NAS Volume Mgmt. Backup Assist INTELLIGENT ETHERNET SWITCHING FW IDS SSL VPN SLB Blade Servers DB Servers Web,E-mail Servers INTELLIGENT SERVER SWITCHING
- 17. AON: Network Speaking the Language of Applications APPLICATIONS PACKET NETWORKING Business Applications Application Infrastructure APPLICATION-ORIENTED NETWORK Packet Network ERP WEB MFG FIN CRM SCM INTELLIGENT NETWORKING
- 18. Network operations on application messages: Log Route Transform Validate Notify Enabling Real-Time Application Monitoring Through the Network POLICY-BASED APPLICATION ORIENTED NETWORKING Application messaging read by the network ABC Co $25,000 Urgent 2 days Customer Order Order Entry Finance Normal Approval Exception Approval Shipment Billing 1011010 1011010 1011010 1011010 1011010 1011010 1011010 1011010 PURCHASE ORDER
- 19. Cisco AON Core Capabilities Business Event Visibility Application-level Security Intelligent Messaging Reliable messaging Content based routing Transformation Protocol switching Message distribution Message load balance Authentication Authorization Encryption/Decryption Data integrity/ non-repudiation Digital signatures Centralized PKI mgt. Event capture, filtering Logging for audit Automatic notification Policy controlled Feed to dashboards Link to Network events Hardware Acceleration (SSL, Crypto, XML) Message level Caching and Compression High Availability, Failover, Load Balancing Application Optimization Extensibility ADK (for custom adapters) SDK (for custom bladelets) AON Technology Partners
- 20. Application Security Gateway Use Case: Cisco IT (cisco.com) Secure, integrated entry point for all Cisco online B2B orders Lower cost: one box Multiple application-level security functions Log Validate messages Authenticate/Authorize Manage digital certificates/ keys Verify digital signatures SSL sessions based on application ID AON
- 21. CPG Supplier #1 RFID Tag Read CPG Supplier #2 RFID Tag Read WMS Filtering and Aggregating RFID Messages at the Edge for Retail Co., Medical Products Co. AON in ISR AON in Cat6K, 7600 TAG TAG TAG TAG TAG TAG TAG TAG TAG TAG TAG TAG Event aggregation Message logging Content-based routing Message copy Digital Signature Logging Partner Integration Application Level Event (ALE) Filtering Message-level Security Reliable Messaging Reader Virtualization and Management
- 22. AON: Shared SOA Infrastructure Services addressing Deployment Challenges PACKET NETWORK SERVICE PROVIDERS SERVICE CONSUMERS Business Processes Mobile Apps Portals Dashboards APPLICATIONS Operational Benefits Hardware Acceleration, Pervasive Location, Availability, Manageability BEA SAP IBM MS Oracle Sun Shared SOA Infrastructure Services (Messaging, Logging Transformation, Security, Protocol Bridging, Reliable Delivery, Rules-based Routing, Monitoring SLAs, Events) Mainframe .NET Java Packaged Apps Pervasive, Universally Shared, Reusable Utilities in the Network APPLICATION- ORIENTED NETWORK Policy Controls Flexible, Real-time, Distributed Enforcement
- 23. Logging, Auditing Translation/ Protocol Switching Message Transformation WSDL Filtering Rules-based, Content-based Routing Reliable Delivery Monitoring Caching Load-balancing and Failover AON as Web Services Intermediary Browser-based Apps (J2EE) Trading Applications HR Applications Business Process Engine Branch Office SOAP-Compliant Client Apps (VB) External Web Services Customer Apps Back Office SOAP-Compliant Client Apps (VB, J2EE) Web Service Interfaces
- 24. AON as XML/ Web Services Security Gateway 2. Service Provider JAVA/Apache AXIS 1.1 Client Service Provider SOAP .NET Endpoint AON Certificate Generation/ Import 2. Decrypt SOAP Request Message data field, Log and Sign message body Encrypt SOAP Response message data field SOAP/HTTP SOAP/HTTP 1. Validate part of SOAP Request Message against its XSD schema 1. Service Provider SOAP Client Schema Validation XSD schema validation (partial document) on incoming SOAP request message identified by XPath expression Forward valid SOAP request message to endpoint, discard invalid messages Encryption/ Decryption WSS standard field-level encryption/ decryption Interoperates with SOAP/ Apache AXIS 1.1 client implementation of WSS Digital Signatures of SOAP request message body Logging of meta-data about the SOAP request message 3. Encrypt SOAP Response Message data field
- 25. Implementing IIN….Enterprise Cisco Service-Oriented Network Architecture Server Storage Clients Application Services Infrastructure Services Devices Application Layer Interactive Services Layer Networked Infrastructure Layer Places In the Network Security Mobility Storage Voice & Collaboration Compute Identity Business Applications Collaboration Applications PLM HCM Procurement SCM ERP CRM Instant Messaging IPCC IP Phone Video Delivery Meeting Place Unified Messaging Campus Branch Data Centre Enterprise Edge WAN/ MAN Tele- worker Middleware and Application Platforms Cisco Offerings
- 26. Interactive Services Layer Customer Value and Cisco Differentiation APPLICATION SERVICES Application Delivery & Optimization Application-Oriented Networking Intelligent message routing (translation, transformation, reliable delivery) , SOA support Application-to-application security Application message/ business event visibility and responsiveness Application Velocity System Wide Area Application Services Content Services Switch/ Content Services Module Application Control Engine SECURITY SERVICES App security VPN / SSL Virtual firewalls Anti-X DDoS NAC HTTP inspection MOBILITY SERVICES Indoor Outdoor Metro area Location based roaming Voice STORAGE SERVICES VSAN & IVR Data replication Remote backup Tape acceleration Point in time copy continuous data protection IDENTITY SERVICES 802.1X RADIUS ACLs COMPUTE SERVICES RDMA Server virtualization I/O virtualization VOICE SERVICES IPT E911 Presence Services INTERACTIVE SERVICES LAYER INFRASTRUCTURE SERVICES Identity Services Compute Services Voice & Collaboration Services Storage Services Mobility Services Security Services Adaptive Mngmnt Services
- 27. The Challenge… Main office Branch office mySAP Business Suite
- 28. Cisco and SAP Join Forces ERP WEB MFG FIN CRM SCM SSL Intelligent Packet Network Application Oriented Network Enterprise Services Architecture Business Processes Accessible Through Enterprise Services AON ESA
- 29. Remote Management of Subsidiaries/Branches mySAP AON Management Console Start-up/Shut down Checking status Master data update Intercompany process Network Subsidiary: Nairobi Headquarters AON AON
- 30. Remote Management of Subsidiaries/Branches Subsidiary: Nairobi Headquarters mySAP Cluster AON Management Console Network AON AON Send Invoice Transformation, Protocol translation, digital signing, encryption Decrypt, & Authenticate Content Based Route to Fastest Server Process Order
- 31. Cisco SONA Accelerates the Network's Role in Transforming Business Processes On Demand, Adaptive Enterprise, etc. Disruptive Technologies (e.g. RFID, Infiniband) Virtualization, GRID Computing SOA SONA
- 32. Key Takeaways The network is the only common, single element that connects and enables all components of the IT infrastructure Only Cisco offers a comprehensive network infrastructure and intelligent networking services Cisco SONA enables businesses to benefit from the “network multiplier” effect Optimizing business processes and applications Cisco lifecycle services, proven enterprise architectures and experience across industries can help you meet your business imperatives in real-time Convergence and Integration Virtualization Automation
Editor's Notes
- #27: Paul & team to supply scripting