Designing Networks and Services for the Cloud   Delivering business-grade cloud applications and services   A rapid, easy-to-understand approach to delivering a secure, resilient, easy-to-manage, SLA-driven cloud experience   Designing Networks and Services for the Cloud helps you understand the design and architecture of networks and network services that enable the delivery of business-grade cloud services.  Drawing on more than 40 years of experience in network and cloud design, validation, and deployment, the authors demonstrate how networks spanning from the Enterprise branch/HQ and the service provider Next-Generation Networks (NGN) to the data center fabric play a key role in addressing the primary inhibitors to cloud adoption–security, performance, and management complexity.   The authors first review how virtualized infrastructure lays the foundation for the delivery of cloud services before delving into a primer on clouds, including the management of cloud services. Next, they explore key factors that inhibit enterprises from moving their core workloads to the cloud, and how advanced networks and network services can help businesses migrate to the cloud with confidence.   You’ll find an in-depth look at data center networks, including virtualization-aware networks, virtual network services, and service overlays. The elements of security in this virtual, fluid environment are discussed, along with techniques for optimizing and accelerating the service delivery. The book dives deeply into cloud-aware service provider NGNs and their role in flexibly connecting distributed cloud resources, ensuring the security of provider and tenant resources, and enabling the optimal placement of cloud services.   The role of Enterprise networks as a critical control point for securely and cost-effectively connecting to high-performance cloud services is explored in detail before various parts of the network finally come together in the definition and delivery of end-to-end cloud SLAs. At the end of the journey, you preview the exciting future of clouds and network services, along with the major upcoming trends.   If you are a technical professional or manager who must design, implement, or operate cloud or NGN solutions in enterprise or service-provider environments, this guide will be an indispensable resource.   *  Understand how virtualized data-center infrastructure lays the groundwork for cloud-based services *  Move from distributed virtualization to “IT-as-a-service” via automated self-service portals *  Classify cloud services and deployment models, and understand the actors in the cloud ecosystem *  Review the elements, requirements, challenges, and opportunities associated with network services in the cloud *  Optimize data centers via network segmentation, virtualization-aware networks, virtual network services, and service overlays *  Systematically secure cloud services *  Optimize service and application performance *  Plan and implement NGN infrastructure to support and accelerate cloud services *  Successfully connect enterprises to the cloud *  Define and deliver on end-to-end cloud SLAs *  Preview the future of cloud and network services    

Table of Contents:
Introduction xix Part I Building Blocks for Offering Network Services in the Cloud Chapter 1 Virtualization 1 Virtualization Basics 1 One to Many 2 Many to One 2 Virtualization: A Brief History 3 Server Virtualization 3 Drivers for Server Virtualization 4 Approaches to Server Virtualization 5 Components of Server Virtualization 6  CPU Virtualization 6  Memory Virtualization 7  I/O Virtualization 8 Benefits and Risks of Server Virtualization 11 Network Virtualization 12 Drivers for Network Virtualization 12 Logical Segmentation: One to Many 14  Path Isolation 14  Access Control 17  Sharing Network Services 17 Network Consolidation: Many to One 18  Software Defined Networking 19 Virtualization-Aware Networks 20 Benefits and Risks of Network Virtualization 21 Storage Virtualization 22 Drivers for Storage Virtualization 22 How Storage Virtualization Works 22 Common Implementations of Storage Virtualization 23  Array-Based Storage Virtualization 23  Network-Based Storage Virtualization 23 Benefits and Risks of Storage Virtualization 24 Summary 25 Review Questions 25 References 26 Chapter 2 Arrival of the Cloud 29 Phases of Virtualization 29 Virtualization Enables the Cloud 31 What Exactly Is Cloud Computing? 32 A Little History 34 Trends Driving the Growth of Cloud Computing 35 Impact of the Cloud 37 Spur Innovation and Entrepreneurship Globally 38 Collect and Analyze Big Data 39 Cloud Challenges 41 Security 41 Compliance 42 SLA: Reliability and Performance 42 Interoperability 43 Summary 44 Review Questions 45 References 45 Chapter 3 Cloud Taxonomy and Service Management 47 Cloud Service Models 47 Software-as-a-Service 48  SaaS Stack 49 PaaS 50  PaaS Components 52 IaaS 53  IaaS Components 54 Comparing IaaS, PaaS, and SaaS 55  Scope and Control 55  Evolution 56 Deployment Models for the Cloud 56 Public Cloud 57 Private Cloud 57 Hybrid Cloud 57 Community Clouds 59 Open Clouds: Toward the True Intercloud 59 Cloud Actors 60 Cloud Service Management and Orchestration 62 Service Orchestration 63 Summary 64 Review Questions 64 References 65 Chapter 4 Networks and Services in the Cloud 67 The CIO’s Dilemma 67 Increasing Relevance of the Network 69 World of Many Clouds 70 An Even Larger Cloud 70 Growth of Cloud Data Traffic 71 Monetization 73 Service Catalog 73 Network Services à la Carte 74  OpenStack Quantum 75 Network Containers 77  Cisco Network Services Manager 78 Evolution of Network Services for the Cloud 80 Automation 80 Virtualization Awareness and Multitenancy 80 Location Independence 81 Quick Guide to the Rest of This Book 82 Part II: Inside the Data Center Networks 82 Part III: Inside the SP Next Generation Network (WAN) 82 Part IV: Putting It All Together–Cloud Services Delivered 83 Summary 83 Review Questions 84 References 84 Part II Inside the Data Center Networks Chapter 5 Role of the Network Infrastructure in a Virtualized Environment 85 Trends Influencing the Data Center 86 Case 1: Acquisition of a Community Bank 86  Virtualization 87  Cloud Enablement 88  Power and Cooling Considerations 88  Return on Investment 89  Economy of Scale 90 Case 2: Service Provider Enabling New Services and Content to Its Customers 91  Virtualization 92  Cloud Enablement 92  Power and Cooling Considerations 93  Return on Investment 93  Economy of Scale 94 Case 3: Public Utility Companies Offering Smart Technologies to Address Power and Energy Requirements in a More Reliable, Economic, and Sustainable Manner 97  Virtualization 97  Cloud Enablement 98  Return on Investment 98  Economy of Scale 99 Case 4: High-Performance Computing and Low-Latency Applications 99  Virtualization 100  Cloud Enablement 101  Power and Cooling Considerations 101  Economy of Scale 101 Summary of the Use Cases 102 Network Segmentation in the Data Center 102 Multitenancy 106 Network Containers 107 Virtualization-Aware Network 108 Virtual Switching 108 Network Policy 110 VM Mobility 110 Virtual Network Services 111 Fabric Intelligence for Virtual Services 111 Service Overlay 112 Summary 113 Review Questions 113 Reference 114 Chapter 6 Securing and Optimizing Cloud Services 115 Motivations to Design Secure Multitenant Networks 118 HTTP Tunneling 119 Web Proxy/Caching 121 Design Considerations for Securing Multitenant Data Centers 124 Threat: Identity Theft 124 Solution: PCI DSS Compliance 125  Operational Challenges 128  Penalties 129  How the Cloud Model Can Help 129 Information Confidentiality 129  Operational Challenges 132  Penalties 132  How the Cloud Model Can Help 132 How Virtual Security Is Enabled: Solutions and Architectures-Based Approach 134 Traditional Security Approaches as Applied in Virtual Environment 134  Security Containers: Contexts and Zones 134  Segmentation and Access Control Lists 134  Secured Access 135  Application Security 135 Virtual Appliance Approach 135  Cisco ASA1000v Tenant Edge Security Solution 136  Cisco Virtual Secure Gateway 138 Deployment Considerations 138 Summary 141 Review Questions 141 References 142 Chapter 7 Application Performance Optimization 143 Application Architectures in the Cloud 144 Three-Tier App Architecture in the Virtualized World 146 Provisioning and Management 148 Application Performance in the Cloud 148 Drivers for the Transition from Physical to Virtual Network Services 153 Virtualization Awareness 153 Agility, Elasticity 153 Multitenancy 154 Virtualized Application Delivery Solutions 154  WAN Acceleration 154  Server Load Balancing 157 Summary 157 Review Questions 158 Part III Inside the SP Next Generation Network (WAN) Chapter 8 IP NGN Infrastructure That Supports Cloud Services 159 IP NGNs Evolve in Line with the Cloud 160 Role of DCI Technologies in Delivering Cloud Services 162 Key Use Cases Enabled by DCI in the Cloud 162 Workload Mobility in the Cloud 165 Data Center Interconnect Requirements for the Cloud 166 DCI Solutions to Build Virtualized and Distributed Cloud Data Centers 167 Transport Option 1: Layer 2 over Dark Fiber 168 Transport Option 2: Layer 2 over MPLS 173 Transport Option 3: Layer 2 over IP 176 Ingress and Egress Route Path Optimization 178 Summary 182 Review Questions 183 References 184 Chapter 9 Securing Cloud Transport and Edge Using NGN Technologies 187 Security Challenges in the Cloud 187 Key Requirements to Secure the Cloud 188 NGN Solutions to Secure the Cloud 189 Providing Secure Access to the Cloud 190  Internet Protocol Security 192  Transport Layer Security Protocol 200  Datagram Transport Layer Security Protocol 201  Clientless Versus Full Tunnel 201 Securing the Cloud Edge 202 Multitenant Traffic Separation 206 Summary 209 Review Questions 210 References 210 Chapter 10 Optimizing and Accelerating Cloud Services 213 Enhancing Performance of Cloud Applications and Services 213 Role of IP NGN in Optimizing Cloud Applications and Services 213 How Cloud Services Are Placed Today 215 Network Positioning System 215 Cloud Service Placement at an Optimal Location 216 NPS Solution Components 219 NPS Operation 221 Serving Cloud-Based Applications from an Optimal Location 222 Application Layer Traffic Optimization 223 Dynamic Extension of Customer VPNs 224 Accelerating Cloud Services 224 Key Benefits of the Cisco WAAS Solution 225 Summary 228 Review Questions 229 References 229 Part IV Putting It All Together: Cloud Services Delivered Chapter 11 Connecting Enterprises to the Cloud 231 Cloud Aware Enterprise Networks 233 How Enterprises Connect to the Cloud 235 Enterprise Managed Cloud Connector Deployment 235 Cloud Provider—Managed Cloud Connector Deployment 235 Examples of Cloud Connectors 236  Cloud Web Security Connector 236  Webex Cloud Connected Audio 237  Ctera Cloud Storage Connector 238  Cisco Asigra Cloud Connector 240 Future Cloud Connector Concepts 241  Cloud Broker Connector 241  Federated Identity Connector 243  SAML 244  OAuth 245  Cisco Ping Identity Connector 246 Cisco Extensible Cloud Connector Solutions 247 Summary 247 Review Questions 248 References 249 Chapter 12 End-to-End Cloud SLAs 251 Defining and Monitoring SLAs 252 Network Service Provider 253 Colocation Service 255 Application Hosting Service Provider 256 SLA Targets and Penalties 257 SLA Assurance and Methodology 258 SLA Management Framework 260 SLA in a Cloud Environment 262 Complexity of Cloud SLA 262 Service Level Metrics 263  Cloud Service Level Metrics 263  Network Container Level Metrics 264  Component Level Metrics 266  Location/Scope for the End-to-End Measurements 266 Guaranteed SLA 267 End-to-End SLAs 270 Summary 271 Review Questions 272 References 272 Chapter 13 Peeking into the Future 273 Future Clouds 274 The Intercloud 274  Internet Analogy 275  Intercloud Use Case 276  Deeper Dive into the Intercloud Vision 277  Intercloud Challenges and the Role of Networks 278 Internet of Things 280  A Bigger Cloud 281  IoT Use Cases 281  Sensor Networks and IP 285  IoT Challenges: Networks to the Rescue 286 Network Evolution Continues 288 Software-Defined Networking 288  Hybrid Approach 289  Challenges 289 Application-Network Interactions 290 Summary 293 Review Questions 293 References 294 Appendix A Answers to Review Questions 295     9781587142949   TOC   4/23/2013