A Look Back at 2014 and Innovation at Juniper Networks

As the year comes to an end it’s always interesting to look back at the changes in the industry and the progress that we made as a company in the last year. There were many trends that emerged or took further hold of the industry in 2014. Let’s take a look at them and see how Juniper delivered innovation in these areas. Cloud computing and the need for on-demand resources was a big one. The open source movement is continuing to grow in the cloud space and OpenStack and CloudStack are gaining momentum. The Dev/Ops movement and the need for automation of IT resources was another big trend in the news. We saw Dev/Ops extend to networking equipment like the top of rack switch, when it had previously been mainly for server configuration. Overlay networks took hold in 2014 with the likes of Juniper’s Contrail and VMware’s NSX gaining momentum. New network fabric architectures were introduced like IPClos that is popular with the MSDC’s or Massively Scalable Data Center Operators and Spine and Leaf architectures that offer simplified deployment and management. The rise of the Open Compute Project and its move to include networking was a bit of a surprise for me. There is certainly something going on there.

Openstack/Cloudstack Integration
Cloud computing is transforming the way business is done today. It’s not hard to see why when you consider all the benefits that the cloud promises such as flexibility, business agility and economies of scale. As you look into the underlying layers of compute, storage and network, there is complexity in managing such an infrastructure in a dynamic environment. Organizations that are building clouds need a platform to automate the deployment of infrastructure. In addition to offerings from commercial vendors this type of software stack is being developed by the user community of open source organizations. In the interests of being open and offering our customers choices Juniper announced support for OpenStack back in 2013. We continued this momentum by announcing support for CloudStack in 2014. For more on CloudStack see, CloudStack and Juniper’s MetaFabric, Enabling Private and Public Cloud.

Automation Integration with Puppet, Chef and Ansible
Juniper has always been about being open. We serve a diverse set of customers with different use cases who like to use different tool sets. Back in 2013 we announced support for Puppet. We kept up this momentum by later announcing support for Chef and then for Ansible in 2014. There are sysadmin using Puppet or Chef to manipulate infrastructure as code. Because we are open, we’ve productize the capability to work with these tools into both our hardware and software solutions. Ultimately this gives our customers greater flexibility, without having to do a costly rip and replace of their infrastructure, in choosing which automation tools to use. Of course Juniper has had on the box automation as a part of JUNOS for many years. For more on automation see, Automation with Chef, Puppet and Ansible.

Connecting Islands of Resources in an SDN Data Center

Application Agility is Critical
Organizations are rolling out new applications that they use to drive the business. These applications are virtualized. They are increasingly distributed, dynamic and they can span locations. They connect employees, customers and the supply chain. They make employees more productive, help customers to engage with the business and facilitate better inventory management. They also provide timely business intelligence.  This means revenue to the organization. Time to deploy is critical. Organizations need to be agile when it comes to deploying new applications.

The problem is that the network is an obstacle. Due to the complexity of configuring the network speed of deployment is an issue. There are so many things that need to be configured. You need to configure route mapping, port mapping, VLAN mapping, QOS, NAT, ACLs and the list goes on.  The networking side hasn’t changed since it was invented decades ago. It takes weeks to configure the network connections that are needed when you deploy an application.

Organizations have been using server virtualization for years to overcome the limitations of physical server virtualization. When you have to deploy a physical server it could take weeks from the time you first knew you needed it until it was up and running. Now provisioning virtual servers only takes minutes. With virtualized servers we realized agility and resilience and improved physical server utilization. We need the same type of benefits for the network. You can’t let the network get in the way when you need to move fast and gain the advantages of new applications. Organizations are looking for ways to provision the network work quickly.

Network Functions Virtualization is Changing How Services are Delivered

As Service Providers are faced with increased competition from Over the Top Providers they are seeking new markets to enter. However, as they look to create and launch new services they must grapple with the growing number and complexity of hardware devices in their networks. This creates challenges due to the time it takes to certify equipment and with staffing and training of skilled operators for many devices. It also creates cost pressure with the need for more space and power at a time when these resources are becoming ever more expensive. Making upfront capital outlays for equipment in anticipation of revenue that ramps up over time can stress budgets. As a result Service Providers are looking to change how network services are deployed and some are finding Network Functions Virtualization (NFV) as the answer to their problems.

Defining Network Functions Virtualization Services
Network Functions Virtualization is transforming how network operators architect networks by enabling the consolidation of network services onto industry standard servers, which can be located in Data Centers, on Network Nodes or at the user premises. NFV involves delivering network functions as software that can run as virtualized instances and that can be deployed at locations in the network as required, without the need to install equipment for each new service. Network Functions Virtualization is applicable to any network function in both mobile and fixed networks. Network Functions Virtualization is complementary to Software Defined Networking (SDN) but not dependant on it. Virtual appliances might be configured using SDN capabilities and they might be connected via overlay network tunnels in clusters based on an application or based on the needs of an organization.

Securing Virtualization in the Cloud-Ready Data Center

With the rapid growth in the adoption of server virtualization new requirements for securing the data center have emerged. Today’s data center contains a combination of physical servers and virtual servers. With the advent of distributed applications traffic often travels between virtual servers and might not be seen by physical security devices. This means that security solutions for both environments are needed. As organizations increasingly implement cloud computing security for the virtualized environment is as integral a component as traditional firewalls have been in physical networks.

Juniper's Integrated Portfolio Delivers a Solution
With a long history of building security products Juniper Networks understands the security requirements of the new data center, and Juniper’s solutions are designed to address these changing needs. The physical security portfolio includes the Juniper Networks SRX3000 and SRX5000 line of services gateways, and the Juniper Networks STRM Series Security Threat Response Managers. These physical devices are integrated with the Juniper Networks vGW Virtual Gateway software firewall that integrates with the VMware vCenter and the VMware ESXi server infrastructure.

Fundamental to virtual data center and cloud security is the control of access to virtual machines (VMs) and the applications running on them, for the specific business purposes sanctioned by the organization. At its foundation, the vGW is a hypervisor-based, VM safe certified, stateful virtual firewall that inspects all packets to and from VMs, blocking all unapproved connections. Administrators can enforce stateful virtual firewall policies for individual VMs, logical groups of VMs, or all VMs. Global, group, and single VM rules ensure easy creation of “trust zones” with strong control over high value VMs, while enabling enterprises to take full advantage of many virtualization benefits. vGW integration with the STRM and SRX Series provides a complete solution for the mixed physical and virtualized workloads.

Getting on the Path to SDN with Juniper Networks

A number of IT trends—including the consumerization of IT, cloud computing, and social media— present significant opportunities for businesses to improve productivity. Before adopting these technologies, however, organizations try to fully understand the impact they will have on the underlying infrastructure and, more specifically, the network environment, since it is a critical enabler for all of these services. As a result organizations are looking to innovation in the network to meet their business needs.

Trends Impacting the Network
As organizations continue to innovate and expand their virtualized environments beyond the simple benefits of consolidation to a more agile infrastructure, they have begun to build out private clouds. These agile IT environments enable business managers to rapidly turn up new services to meet unexpected demand or requirements. However, this abstraction layer can create blind spots in the infrastructure and make meeting compliance requirements difficult.

Social media applications present another challenge as the explosion in the number of network-connected devices opens up avenues to new applications and collaboration tools. Well known applications such as Facebook, YouTube, and Twitter often blur the lines between business and personal usage and video create demands on the network. The question is how to ensure performance, while protecting data ensuring privacy.

Making the Case for Long Distance Virtual Machine Mobility

With VMWorld coming up I’m reminded of a top of mind subject, virtual machine mobility. The reason for moving virtual machines is to better allocate server resources and maintain application performance. It’s a useful technology that works great in the data center. We also hear a lot about the need to move virtual machines across the WAN, live, without losing sessions. This is known as Long Distance vMotion or generically as long distance live migration. This might sound like a good idea, but it gets a bit complicated when you think outside the data center walls and across the WAN. It creates complexity in the network, as maintaining sessions requires keeping the same IP address and MAC address after the move.  There are many proposed use cases for it, but is it such a good idea?

Limitations of Live Migration
Long distance live migration over the WAN has limitations due to latency and bandwidth requirements and the complexity of extending layer 2 which is required to maintain the same MAC address. Issues include the potential for traffic coming first to the original data center where the gateway is, and then looping to the new data center where the VM has moved.  Traffic can also loop back over the WAN to reach the storage that stayed behind. There are also bandwidth requirements to handle the large scale movement, as well as issues with storage pooling and storage replication as well as the complexity of implementing the L2 bridging architecture. If we are going to deal with all of this complexity of moving virtual machines over the WAN there had better be a good reason to do it. But is there? Here is a look at the various use cases for long live migration that I have found.

The Myth of the Broadcast Domain Apocalypse

There is a train of thought that is popular with some network vendors and long time network engineers that there is a compelling need to “orchestrate” the physical network and the visualized-networking world.  This is expressed as a desire to ensure that VLANs are synchronized between the physical network switches and the virtual switches on the visualization hosts.

The Orchestrated VLAN Model
VMware has a concept of a “backing VLAN”. This simply put means that traffic belonging to a portgroup uses a configured transport VLAN when it traverses the physical network.  For example, if a group of VMs belong to a portgroup “backed” by a VLAN, that VLAN must be “allowed” on the trunk ports connecting all of the physical ESX hosts that are hosting any of those VMs.

In addition to this, it is argued that the trunk ports to ESX hosts that do not host a VM belonging to that portgroup should not “allow” the presence of the VLAN that backs that portgroup.  It is suggested that the reason for this requirement is that the unbridled propagation of VLANs will cause the ESX host to process broadcast packets it does not need to, with potentially dire consequences.

Why Network Latency Matters for Virtualized Applications

My colleague Russell Skingsley has an interesting take on the effects of latency on virtualized application performance. The purpose of virtualization is to optimize resource utilization. As Russell pointed out it isn’t just an academic conversation. For the cloud hosting provider it’s about revenue maximization. Network latency has a direct impact on virtualized application performance and therefore revenue for the service provider. Your choice of network infrastructure will impact your business, but it can be difficult to see how investing in high performance networking solutions will improve your business. I will try to connect the dots.

Don't Sell it Just Once
It’s a service provider axiom that you don’t want to waste your valuable assets by selling them to a single customer, even at a premium. Take dark fiber for instance, every SP has come to learn that selling a fiber to a single customer will never bring scalable revenues. Making the move to adding DWDM to the service mix allows you to scale up the number of customers and is an improvement over selling dark fiber, but is limited by the number of lamdas that can fit in the spectrum on a single fiber. The scaling is linear. A similar situation exists for shared cloud computing resources.

My 2011 Update and Thoughts on What’s Coming in 2012

An Eventful Year with Many Changes
It’s been an eventful year for me and I thought an update was in order. On the work front there have been a lot of changes. I joined Juniper Networks in November. I’m focused on technical marketing for data center and cloud. This is a return for me as I was at Juniper before moving to Cisco in 2007. It’s interesting how the world turns, and I’m excited to be back.

When I was interviewing at Juniper I was asked what attracted me to the jobs that I had. Of course there are many things, but being a techie what stands out for me is working on market leading products and I’ve been fortunate to have worked on some firsts. At Lucent it was the Portmaster (formerly Livingston), the first digital remote access server. At Redback it was the SMS (Subscriber Management System), the first broadband aggregation platform. At Entone it was a suite of products for IPTV that preceded FIOS and UVerse. When I first went to Juniper in 2005 it was the Peribit WX, the first WAN Optimization devices. At Cisco I got into cloud computing and marketed data center solutions including virtualized network services that ran on the UCS compute platform. At VCE I marketing the first pre-engineered converged infrastructure platform for private cloud computing.

So the question is what brought me to Juniper? Working at a company that continues to innovate in the networking space was a big draw. The opportunity to be on a newly formed team that is focused on critical areas of the network and to be the lead for data center and cloud computing was important. My role in technical marketing is to bridge the gap between the capabilities of the networking equipment and the value delivered to the business in terms of application performance and availability. I believe that the network design is critical to delivering a superior user experience and enabling applications architected for the cloud. As I looked at how applications are becoming more complex and more highly distributed I saw how Juniper’s innovative QFabric switching platform was ideally suited to meet the requirements of this trend in application architecture. So the short answer is the opportunity to market data center solutions based on QFabric.

Here are a few areas of interest that I expect to be writing about in the coming months.

The VCE Vblock FastPath Desktop Virtualization Platform

Organizations face increasing costs and security concerns created by the quantity and diversity of devices accessing the network, but they must still respond to the growing needs of the business. Now organizations can rapidly deploy a more secure, cost effective and flexible desktop environment using the Vblock FastPath Desktop Virtualization Platform. See this video to learn how the you can deploy virtual desktops faster.

The Vblock FastPath Desktop Virtualization Platform is a purpose-built solution that helps IT organizations to automate desktop and application management by enabling rapid deployment, reducing costs and improving security through centralization of the desktop environment.

Backstory: I wrote the script for this video and worked with the producer to get it completed. It was done for the launch of the FastPath solution for which I was the marketing manager.

Solving The Desktop Virtualization Challenge With Vblock FastPath

The Desktop Challenge
The traditional workplace experience used to be working at the office on a PC. Now, the workplace could be the office, the home, or any public location. Now we have more than PC's. Work tools also include tablets and smart phones. Network users could be anywhere, on any kind of device, and they'll need access to all forms of rich media like real time interactive video as well as voice. As a result of these changes organizations are faced with growing security concerns around access to applications and control over corporate data.

Virtualization has been used extensively over the last decade to consolidate servers, improve resource utilization, reduce power consumption, lower costs, and streamline server management. Many of the same issues around cost, complexity, and energy efficiency impact desktop users and IT administrators. Conventional desktop computing approaches are evolving to address an increasing number of regulatory requirements such as Sarbanes-Oxley, and HIPAA. We all know that data breeches are a major concern for corporations. Organizations are trying to protect data, and to simplify desktop management , while meeting the needs of users who demand greater mobility, more devices, and increased flexibility.

As a result of these challenges with desktop management organizations are looking for ways to deploy a more secure, cost effective and flexible desktop environment using Virtual Desktop Infrastructure. With VDI organizations can centrally manage desktop images, ensuring a uniform experience for users no matter what platform they are using or where they are locates. With VDI company wide security posture is improved by keeping critical information in the corporate data center, not on the PC. Costs are reduced through centralized desktop management.

The Vblock Trusted Multi-Tenancy Model for Cloud Services

Cloud computing offers many economic and environmental advantages to service providers. The ability to deliver infrastructure services to multiple internal or external consumers is a core component of cloud computing. With shared virtual converged infrastructure and best-of-class network, compute, storage, virtualization, and security technologies from Cisco, EMC,and VMware, the Vblock platform presents new opportunities for service providers to deliver secure dedicated services to multiple tenants. In this video you will learn how Vblock Trusted Multi-Tenancy (TMT) from VCE enables service providers to address the key concerns of tenants in the multi-tenant environment – confidentiality, security, compliance, service levels, availability, data protection, and management control.



Backstory: I wrote the script for this Flash video and worked with the producer to get it created.

The Vblock Solution For Cisco Unified Communications

To succeed in today’s fast paced, global economy, businesses must be able to communicate and collaborate. This requires access to a range of voice, video, and messaging communication tools. While the essence of communication is to break down barriers, organizations today must contend with the barriers imposed by increasingly complex communications environments.

The VCE solution enables rapid deployment of Cisco® Unified Communications applications on Vblock™ Infrastructure Platforms to provide an integrated hardware and software solution that connects people, information, and teams, helping to enable comprehensive and effective collaborative experiences.

Watch the video “Cisco UC ‘As-A-Service’ Offers on Vblock Platform” which provides an overview of the solution, and what customers can expect and then read more to get the details on the solution.




Read more to get the details on the solution.

The Vblock Solution for Cisco Hosted Collaboration

The Market Challenge
Hosted Collaboration is a growing opportunity for Service Providers to expand their portfolio and meet customer needs. Cisco provides Unified Communications applications using the Cisco Hosted Collaboration Solution (HCS) that enables service providers to deliver a range of services from IP telephony and voicemail to WebEx® conferencing. One of the biggest challenges facing service providers is getting services to market and meeting time to revenue goals. Revenue opportunities are missed when time is lost reviewing product specifications, testing configurations and determining the appropriate scale for a particular application.

The Vblock Advantage
The Vblock™ Infrastructure Platforms solution for Hosted Collaboration makes Cisco® Unified Communications and Collaboration applications and capabilities available in a hosted environment. Vblock™ platforms provide standardized units of best-of-breed IT infrastructure that can be managed as a single entity and easily scaled as a cohesive, multi-tenant system. With the Vblock solution service providers can bring hosted collaboration service to market rapidly and meet their time to revenue goals.

Video: Cisco HCS "As-A-Service" Offers on Vblock Platform

The Role of the Platform in Cloud Service Delivery

The Service Provider Challenge
To differentiate their cloud services and attract customers service providers need to offer service-level agreements (SLAs) to their enterprise customers for whom performance, security, and availability are paramount. To do this they need a converged infrastructure platform that allows them to address the concerns and challenges of their enterprise customers who might be reluctant to move their data center operations and applications to the cloud.

The Cloud Service Opportunity
The emergence of the cloud delivery model has created an opportunity for service providers to develop new services that meet the changing needs of their customers for consuming applications that support their business processes. To succeed in this evolving marketplace, service providers must offer added value when competing with established Over-the-Top (OTT) providers. The key to delivering a compelling service is to build it on a converged compute platform that is optimized for the cloud and uses its capabilities to offer SLAs that meet the needs of potential customers for assurances of application performance and availability. These SLAs can reassure customers that their applications are hosted on optimized platforms and delivered from reliable data centers, so that they will be consistently available, which is a motivator to enter in to longer-term contracts for organizations that are considering moving to the cloud-computing environment.

The Need for Service Assurance
In today’s business environment, service assurance has become more than a luxury for organizations that want to migrate to the cloud. Service assurance has become the primary differentiator that organizations are looking for when seeking support for delivery of their business-critical applications. With increasing concerns over service interruptions and the availability of workloads, companies might be reluctant to move their business-critical applications to the cloud or to move to Software as a Service (SaaS) applications without the backing of comprehensive SLAs that set high standards for service delivery and hold the service provider accountable for service outages. OTT providers have built their service on commodity platforms using their own set of tools for service creation. Their primary concern has been to keep costs down so that they can serve a broad public market, and quality of service guarantees have been an after though or are not available at all.

The Role of Layer 4-7 Services in Scaling Applications for the Cloud

The Cloud Challenge
Cloud computing is increasing demands on applications and the application-delivery infrastructure must change to meet the challenge. Virtualization does not solve the problems with applications scaling, in fact it adds complexity. Infrastructure alone does not solve the challenge either. You don’t want to oversubscribe or just add capacity on demand. The infrastructure needs to respond to user demand based on business value and maintain a favorable cost structure. This means that you need intelligent load processing to manage scale, especially given the evolution of applications, which now make numerous backend function calls, which create more traffic than at the front end.

The Need for Scale
Cloud-computing applications are characterized by stateful access, with differentiated service levels, charged to the end user using the pay-per-use pricing model. Implicit in this model is the assumption that a cloud application is always on. Scaling the cloud delivery model to an Internet scale (millions of users) is a challenge that next-generation Layer 4–7 infrastructure needs to overcome. Scaling a cloud application involves scaling three mechanisms: location (mobility), replication, and load balancing. Virtualization was an early catalyst for cloud computing because it substantially lowered the cost of replication and mobility of a prepackaged application. It does not, however, solve the load-balancing problem. Load balancing involves scaling the address, name space, transport, session, identity, and business logic of the application. Clustering enables scaling of application business logic but leaves the rest of the problem to a proxy infrastructure.

Getting Beyond Stateless
Traditional data center proxy infrastructure (Layer 4–7) is stateless and focuses on transport-level session and content management. The state management in these proxies is limited to cookies that hold bare-minimum identity of the application server. Further, this state is not shared across a network overlay of proxies to enable an application for multi–data center applications or to distribute the processing to edges. For example, a load balancer does not a play any role in user customization in a data center application such as encryption of private data in the response. Not having this function in the proxy infrastructure means the data center has to incur a higher cost of development of the core application and is not able to use existing proxy infrastructure to deploy this function.

Cloud Services are a Bright Option for the Enterprise

The Cloud Opportunity
With Cisco Partner Summit happening in New Orleans this week there has been a lot of important news with the announcement of the Cloud Partner Program that enables and encourages Cisco Partners to develop and deliver cloud services being at the top of the list. You can follow the action on the Cisco Channels Facebook page. This announcement might have you wondering what the size of the market for cloud services is and what Enterprise organizations are thinking as they consider the move to services from the cloud.

At Cisco we had these same questions as we were making investment decisions in the systems and solutions that enable organizations to build a cloud service delivery architecture. As a result the Cisco® Internet Business Solutions Group (IBSG) conducted research that included interviews with enterprise IT decisions makers and key subject matter experts. The study showed that enterprises across many sectors are seriously considering cloud computing. Based on direct feedback from enterprise decision makers, Cisco IBSG estimates that close to 12 percent of enterprise workloads will run in the cloud by the end of 2013 and that this will yield a market for public-cloud services of approximately US$43 billion. Organizations have a few things to consider as they make this migration to the cloud.

To Cloud or Not To Cloud
The primary reason for the enterprise to adopt cloud services is to reduce costs and increase agility. The decision to migrate to the cloud hinges the how access to critical applications will be impacted and what the benefits are for running applications in the cloud when weighted against the constraints. Many factors come into account such as workload variability, the need for agility, and application functionality when run in the cloud. The applications that are most suitable for delivery from the cloud are workloads with variable or unpredictable resource requirements. For example workloads that are seasonal, such as tax season, or public-facing applications such as online sales. Since these applications must be provisioned for peak loads there is a major cost advantage to utilizing on-demand infrastructure to run them. Applications that require quick setup, such as sales-and-marketing campaigns, and application development are prime candidates to move to the cloud as well.

The Benefits of a Virtualized Approach to Advanced-Level Network Services

Advanced-Level Services
Advanced-level network services are a necessity for a scalable virtualized data center and a key to cloud service delivery. These services provide application acceleration and server load balancing to improve user productivity, and ensure optimal resource utilization, and they monitor quality of service. They also provide security services that can isolate applications and resources in logical zones in virtualized data centers and cloud environments to ensure regulatory compliance and reduce risk of data breaches.

Deploying Services
While enterprises have been adopting server virtualization and cloud computing in order to realize the benefits of reduced server sprawl, reduced operating costs, and greater levels of application availability, they are doing so while struggling with inflexibility in the underlying network. Deploying advanced-level network services in a virtualized data center environment is challenging. It has been done using dedicated hardware in static network topologies. This does not provide the flexibility to support virtualized workloads, and as a result organizations are challenged to support on-demand virtual machine (VM) provisioning, workload mobility, and public or private cloud deployments. This limits organizations' ability to efficiently deploy new applications, increases operational costs, and acts as a roadblock to adoption of virtualization and cloud computing.

The Solution
While enterprises have been adopting server virtualization and cloud computing in order to realize the benefits of reduced server sprawl, reduced operating costs, and greater levels of application availability, they are doing so while struggling with inflexibility in the underlying network.The solution is to implement virtualized advanced-level network services that run as software on a compete platform. Such virtualized services can provide the same features and functionality as appliances, but in a more scalable, unified, and cost-effective manner. A complete solution needs to provide visibility and support for the virtual applications and allow for application mobility and on-demand capacity expansion. IT organizations have been pushed in to taking a piecemeal approach to adding these services by cobbling together solutions using point-products, and deploying physical appliances in each data center. This is because a virtualized network services solution that implements services in a standardized, holistic way has not been available.

Addressing the Need for Cloud Service Assurance

The Enterprise Goal
Enterprises are continually striving to reduce their IT costs and optimize utilization of their compute resources. The demand for compute, storage and networking resources to support business applications can be difficult to predict, leading to risks of overbuilding or underestimation of demand. As a result Enterprises are looking to adopt cloud services that are available on-demand, and are flexible and scalable to meet their IT service needs in a predictable and cost effective manner.

The Service Provider Advantage
Communications service providers are in a unique position to meet the needs of the Enterprise for service assurance as they develop cloud services. With considerable experience in managing data centers, and with an IP NGN MPLS network spanning from their data centers to enterprise locations around the globe, as well as having back office systems, including billing and support, communications service providers have what it takes for success in the cloud services market. Given the critical role of both the data center and the network in application delivery the development of cloud-based services represents an opportunity for the communications service provider to work with the enterprise to help them overcome their challenges for delivery of business critical applications throughout the organization, while meeting their business goals to contain costs, protect data assets, and ensure employee productivity.

Leverage The Network
Too meet these challenges and deliver reliable cloud-services communications service providers can leverage their IP NGN MPLS network and data center assets and apply their considerable expertise and experience to deliver service level agreements that align with the business processes of the enterprise, so that the enterprise can adopt cloud services with confidence, knowing that their applications will have the performance and security that they need as they are delivered over the WAN.

Enabling the Network Service Layer for Virtualized and Cloud Infrastructure

The Need for Virtualization
In their quest to reduce administrative and hardware costs and to increase the availability of server resources IT administrators are embracing server virtualization to the point that it has become a fundamental data center technology. Server virtualization makes it possible for IT administrators to move virtual server instances, and the applications that run on them, from one physical machine to another as needed, and have to them running at the new location within moments. This mobility allows IT administrators to optimize server utilization or to take advantage of idle compute resources as well as to recover from server failures almost instantly.

Workload Availability
The mobility of virtual servers is what makes server virtualization so appealing. This mobility not only enables movement of virtual machines from one server to another within the same data center, it also enables movement of virtual machines from one data center to another. Mobility of virtual machines between data centers is critical as it enables IT administrators to make use of available resources in another data center and to recover from data center outages, maintaining availability to applications and business services seamlessly.

The Network Can Help
In the data center application performance, availability and security is enhanced by a number of network services such as server load balancing, WAN Optimization and firewalls, which have been delivered by physical appliances. As IT administrators take advantage of the benefits of server mobility that is enabled by server virtualization they seek to have the same mobility available in the network services that benefit those virtual servers and their applications. While it’s possible to have the same network services appliances running in all data centers the challenge is with configuring them to recognize the specific virtual server instances that have been moved between data centers.