The Fat Pipe - All Packet Pushers Pods

Today the Datanauts explore the mysterious worlds of consulting and VARs, and the focus areas for customers who engage with these groups.

Our guests are Jason Nash, Field CTO at Rubrik; and Josh Coen, a cloud architect at Sirius Computer Solutions.

We’ll discuss what Nash and Coen hear from customers about data center transformation, including hybrid and multi-cloud, and whether enterprise data centers are beginning to shrink.

We also talk about the value of certifications for VARs and consultants and which certs carry weight with customers and partners (for education and for deal reg). And finally, we look at the technologies and topics  driving conversations around consulting and technical investments.

Show Links:

@TheJasonNash – Twitter

VCDX – VMware Premier Partner Level Requirement? – VCDX133.com

In this briefing, Netscout talked to me about how they are unifying visibility fabrics inside of an IT team, so that both network operations and security operations can monitor the network with common tools.

This is a big deal according to Netscout because secops folks tend to build out their own toolchains to get the functionality they desire, whereas on the Netscout platform, secops folks can share some tools with others in IT while still having their needs met.

Click in the player above to hear my overview of the briefing.

For More Information

* Netscout nGenius PFS5000 product page

* Netscout Unifies Visibility For Network And Security Ops (official press release)

I do a quick walk through of VMware’s official release notes for NSX 6.4. Click in the player above to listen to this short round up of what stuck out to me the most.

 

 

For More Information

VMware NSX 6.4 Release Notes

The final presentation from Networking Field Day 17 was unique: Mellanox, Ixia, and Cumulus shared the presentation slot to talk about their individual merits as well as how they work together.

Mellanox

Mellanox builds Ethernet and storage switches for a variety of use cases. The company touted its custom silicon as a differentiator, as well as the fact that you can run Mellanox using its own network OS, or load a variety of third-party NOSs (hint: Cumulus is one of them).

After a brief tour through its Ethernet product line, Mellanox made the case for a Clos/leaf-spine configuration as the ideal design for a data center network, and EVPN VXLAN as the ideal fabric for that design.

Ixia

Next up, Ixia presented on its flagship IxNetwork testing suite and how it can be used to validate the performance, scalability, and efficiency of a data center network.

The company followed with a demonstration of a test of a data center network built from Mellanox switches running the Cumulus NOS and using a VXLAN fabric.

Cumulus Networks

Last but not least, Cumulus presented on its Cumulus Linux network OS and how it works on whitebox switches. Cumulus touted the advantages of a Linux core, including the ability to manage the software using common tools such as Puppet and Chef.

For those not conversant with Linux, Cumulus also shared details about its Network Command Line Utility (NCLU), a CLI that network operators will find familiar.

The presentation also demonstrated some of the capabilities of Cumulus NetQ, a telemetry system that collects state information from NetQ agents running on Cumulus and other Linux OSs, bare metal hosts, and VMs, and then sends that state information to a database that engineers can query.

Using NetQ, engineers can validate network state, test configuration changes in a virtual lab, and diagnose problems.

Cisco Systems presented at Networking Field Day 17. Three broad themes emerged from the presentations: intent, automation, and telemetry.

The session began with a presentation on Cisco’s goals for the user experience and design of the company’s forthcoming intent-based products. While the discussion didn’t have much technical detail, it did demonstrated how the design of a UI needs to align with the goals of an intent-based system, including how intent is expressed, how it’s simulated and executed, and how the results are reported back to the user.

This session also generated some bracing conversation about the notion of “gamification” in a UI.

Automation

Cisco walked delegates through two demonstrations of security automation. The first was on using SD-Access to minimize the work of firewall management by pushing centralized configurations from DNA Center.

The second demonstration showed how to use Cisco ISE and TrustSec to automatically enforce security and policy controls on client devices.

Cisco also provided a deep dive into how it’s leveraging Linux, open source tools, and DevOps principles to make its IOS-XR routing platform better suited to Web-scale environments.

One way it’s doing this is by allowing third-party apps to run directly on the router. It’s also exposing APIs to make the platform more programmable, and enabling the use of tools such as Ansible, Puppet, and Chef.

Telemetry

Sticking with IOS-XR, Cisco provided a detailed demonstration of the telemetry data that can be pulled from the platform. Telemetry is key to improve visibility for operations and performance. Telemetry will also be a critical component of an intent-based system for modeling network state in real time and verifying the result of changes.

Field Area Networking

One presentation that didn’t fit neatly into the themes described above, but did have a high cool factor, was on Field Area Networking; that is, wireless mesh networks of industrial sensors and devices. Cisco is building wireless gear directly into industrial sensors for industries such as public utilities, shipping, and mining.

VMware presented at Networking Field Day 17. The presentation covered several topics, including an update on VeloCloud, NSX-T features, and a dive into the latest version of vSphere.

The Business Fabric

VMware began with a presentation from Pere Monclus, VP and CTO of the Network and Security business unit. He outlined VMware’s overarching vision to be the “business fabric” for the cloud age: that is, extending an NSX-based overlay from the data center to public cloud services such as AWS and Azure.

The company also intends to extend that fabric to the branch, thanks to VMware’s acquisition of SD-WAN vendor VeloCloud. There’s still a long way to go to integrate VeloCloud into NSX, but it seems clear that’s VMware’s goal.

Speaking of VeloCloud, delegates saw updates to that platform, including a new SD-WAN service for PCI compliance, the ability to segment different types of traffic at the branch, and other advances.

NSX-T

VMware also touted NSX-T for cloud-native environments, including an NSX container plug-in that integrates with Kubernetes and CloudFoundry.

The goal is to enable infrastructure teams to enforce networking and security policies within virutalized and container environments while letting the application developers do their thing.

NSX For vSphere 6.4

VMware provided a deep dive into the latest release of vSphere and its integration with NSX, including advances to its firewall capabilities. NSX could already function as an L4 stateful firewall; it’s now moved up the stack to L7, with the ability to recognize and enforce policies on approximately 50 common applications.

Audio Note:

If this podcast sounds like we recorded it in an empty hotel gym, that’s because we did. Network Field Day moves fast, so we had to take the first free room we could get.

Modern infrastructure design and operations demand that IT professionals have some familiarity with technologies or disciplines outside their individual specialties.

This demand has sparked the notion of the “full stack engineer”: that is, someone with deep knowledge in one or two areas who is also competent at every layer of the infrastructure, including the network, storage, applications, and security.

But can you actually go “full stack” or is this more of an aspiration? We tackle this question and grapple with the full-stack concept and what it means for enterprise IT on today’s Datanauts show.

Our guest is Tom Vachon, Principal Cloud Architect at an institution of higher learning and self-described “cloud graybeard.”

We construct a working definition of the full stack engineer, look at how the notion of “full stack” applies to the cloud, and discuss the operational implications of building a full stack environment in an IT organization.

Tom blogs at StayClassyInternet. You can also follow him on Twitter.

For more on full stack engineering, check out Scott Lowe’s Full Stack Journey podcast.

Show Links

A Decade Of Innovation – James Hamilton

StayClassyInternet – Tom Vachon

Welcome to Packet Pushers. In today’s sponsored show, we are talking with WhiteSpider with some stories from the field.

We’re joined by smart engineers implementing real technology, and we’ll get in the trenches to discuss customer deployments of Cisco ACI and SD-Access.

Joining us today are Jonathan Perrozzi, Head of Architecture, WhiteSpider; Phil Lees, CTO at WhiteSpider; and Max Ardica, Principal Engineer from Cisco.

The podcast takes a detailed look at real-world customer experiences of deploying ACI, exploding the myth that ACI is complex. We also examine how ACI is transforming IT operations in these organizations. The podcast also looks at how Cisco’s SD-Access takes ACI constructs and applies them to the campus network.

For more information, head on over to www.whitespider.eu/packetpushers

Juniper Networks came back for a second day at Network Field Day 17. This time around the company focused on:

* An Appformix demo showing analytics and visibility – a topic that we say is critical to the future network strategy

* Contrail diverging from OpenContrail to embrace public clouds, hybrid clouds, and Kubernetes. It aims to be a single platform to unify all network orchestration (with some companies pursuing multiple controllers)

* Contrail as the configuration engine, AppFormix as the analytics and automation layer

* Adopting P4 across its fleet as a general abstraction for forwarding packets

* Open/R on its current control plane inside devices (and contrail vRouter)

Juniper outlined its idea of how network automation will evolve:

* Day 0:  Human-Driven Automation

* Day 1:  Event-Driven Automation

* Day N: Machine-Driven Automation

Juniper also demonstrated PeerBot – a Contrail application for automating BPG configuration across dozens of routers for IXP environments. PeerBot:

* Dramatically simplifies BGP configuration

* Targets a narrow market, but this makes it useful. A general-purpose solution might struggle to be useful to specific people

* Is just one of a handful of bots that Juniper has announced. The company plans to build more bots this year

Extreme Networks presented at Network Field Day 17 and focused on automation via StackStorm and Workflow Composer.

Extreme also discussed its ability to run a VM and applications on certain SLX models.

StackStorm Is Unique Because…

* A vendor is delivering this and supporting it

* A moderately competent network engineer will be able to do something useful with this

* The workflow helps you do something reliable

* Mean time to pay rise is drastically reduced

* Effort to achieve pay rise is reduced

Workflow Composer

Workflow Composer builds on Stackstorm to provide cross domain automation changes the way you operate the network.

It speeding up the operations lifecycle, reducing the time spent on deployment, troubleshooting, and implementation so you can focus on remediation. The vendor can help with these three; only you can handle the last part.

Check out the NFD videos to see Workflow Composer demos.

VM On A Switch

* Redirect a 10G interface to VM running on the switch

* Isolated from the control plane

Workflow Composer And VM Demo

* Using the VM on a switch

* Slack integration for ChatOps

* Capture packets on multiple switches

* Upload PCAP to cloushark and then link appears in the Slack