Cisco WAN Optimization

Wide Area Application Services

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1
 Disruptive Trends Drive New Needs
Datacenter Transformation New Applications/Services Remote Access Evolution

 Virtualization  Rich Media, Video  Increased mobile users

 Private/Public Clouds  Any-any collaboration  ‘Low-footprint’ branches
 Software-as-a-Service  Virtual Desktops  Partner access

Customers
Home Office/
/ Partners
Coffee Shop
New IT and WAN
Optimization
xAAS - Cloud Requirements

DR Site Branch Office

DC Apps & Data Guest Users Campus

Branch Office

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2
Application Delivery Challenges

• Applications perform well

in LAN Round Trip Time ~ 0 ms

High bandwidth
Low latency Client LAN Server
Reliability Switch

• Applications perform
poorly in WAN
Round Trip Time ~ 10’s – 100’s ms
Already congested
Low bandwidth
Latency Client
LAN
WAN LAN Server
Switch
switch
Packet Loss

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3
 WAAS Solution Benefits & Elements
Enhance User Productivity Minimize Branch IT Costs
 Branch IT consolidation
 Application acceleration
 WAN bandwidth optimization
Confident Migration to
Increase Agility and Flexibility
Cloud
 Public and Private Cloud  Best mix of centralized and
Acceleration distributed IT

Software Solutions
 WAAS for Cisco ISR G2 Services-Ready Engine
 WAAS Express: IOS Integrated WAN Optimization
ISR G2 Platforms
 vWAAS: Virtualized WAAS
Virtual WAAS WAAS Express Services-Ready
 WAAS Mobile Software Engine

Full appliance portfolio

 Virtual blade support for branches
 Scalable data center platforms Branch Appliance
supporting Virtual Blades Data Center Appliance

Dedicated router modules

Dedicated Router Module ISR Platforms

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4
 Cisco WAAS: WAN optimization solution
vWAAS Server
Virtual Private WAE VMs
Cloud
Nexus 1000v vPATH

WAAS VMware
VMware ESXi
ESXi Server
Server

Branch Office Express

Nexus 1000v VSM UCS /x86 Server

FC SAN
WAAS
Service
Branch Office Module
WAN Data Center or
WAAS
Private Cloud Appliances

WAAS
Appliance
Branch Office Internet
Server VMs

VMware
VMware ESXi
ESXi
vWAAS
Appliances
VPN
WAAS
Appliance

Domestic
WAAS Mobile Mobile User WAAS Mobile
Server Software
Regional Office International Over VPN
VPN
Mobile User

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5
 Cisco WAAS: Comprehensive Portfolio
WAAS Appliance Virtual WAAS
• Scalable platforms for large data center • App acceleration from Private Cloud
• Virtual blades in branch offices • App acceleration from Virtual Private Cloud
• VMWare ESX/ESXi and UCS deployments
• Agile, elastic, multi-tenant deployment
• vCM: common virtualized management for
physical/virtual WAAS

vWAAS
WAE
Nexus 1000v vPATH
VMware
VMware ESXi
ESXi Server
Server

UCS /x86 Server

WAAS Express WAAS Mobile WAAS Service Ready Engine

• ISR G2 • Mobile users • ISR G2
• Small footprint, Cost-effective • No appliance/branch router access • On-demand (SRE)
• On-demand IOS-based • Bidirectional compression
• Investment protection
• Bandwidth optimization • Application-specific acceleration
• Simplified CLI • Flow optimization
• Inline IOS features (Security, QoS) • Public cloud (no appliance
available)

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6
Cisco WAAS Modular Architecture
Platform Management and Services

Virtual Virtual
CIFS MAPI HTTP SSL Video NFS
AO AO AO AO AO AO WoW Blade Blade VMware Config.
#2 #3 User Mgt.
Space Sys.
vmTools (CMS)
TCP Proxy with Scheduler Optimizer (SO) Embedded
DRE, LZ, TFO virtualization
e &
Cisco WAAS Operating System n c AS
a
li WA
Policy Engine, Filter-Bypass, Egress Method, Directed Mode, p
Auto-Discovery (+drivers) Ap tual
vir
 Multiple, Independent Processes

 Fault Isolation and Containment

TCP Flow
Management

Data Redundancy
Compression (LZ) Optimizations S
Elimination (DRE)
AA ss
Unified

(TFO)
W re
p
Policy Engine & TCP Proxy Ex
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7
Advanced Compression

Solutions
Benefits
 Data Redundancy Elimination (DRE)
• Application-agnostic compression
 Persistent LZ compression • Up to 100:1 compression

• Session-based compression
• Up to an additional 10:1 compression
even after DRE

WAN
LZ LZ

DRE DRE
Synchronized
Compression
History

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8
 WAAS TFO Solution
cwnd Standard TCP
1. Bandwidth Starvation
2. Inefficient packet loss Response
3. Suboptimum Bandwidth usage

Slow Start Congestion Avoidance Time (RTT)

Bandwidth
Utilization WAAS TFO
1. Shorter/Better Slow Start
2. Bandwidth Scalability Leverages
Available Bandwidth
Cisco
WAAS TFO 3. Better Performance in case of High
Packet Loss
Standard
TCP Time (RTT)
• Improved WAN BW utilization & app throughput
• End-nodes isolated from unruly WAN conditions
• LAN like TCP behavior due to TCP Proxy

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9
Application-Specific Optimization (AO)
Application & Protocol Awareness
• Minimize chatter
• Safe caching
• Scheduled File preposition
Licensed developed and validated
Intelligent Server Offload with application vendors
• Caching and optimizations

Transparent integration
Intelligent Server Offload
• CIFS, NFS, MAPI, Video, HTTP, SSL, Windows
printing

Remote Office Data Center

WAN

• Object Cache Verification

• Security and Control
• WAN Optimization
• Server Safely Offloaded
• Fewer Servers Needed
• LAN-like Performance • Power/Cooling Savings
• WAN Bandwidth Savings

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10
Simple Transparent In-path Deployment
Remote
 Plug-and-Play Office

• No network changes
• Mechanical fail-to-wire

 Scalability and High Availability

• Up to 2
• Redundant network paths & asymmetry
• Load-sharing and fail-over

 Transparent Integration
• Transparency and auto discovery
• 802.1q VLAN trunking
• All WAE appliances
• Interception access list
WAN

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11
Network-Integrated Off-path Interception
Transparent integration and automatic discovery Scalable Data Center Integration
Application Control Engine
• Appliance & Catalyst 6500 series
Remote module
Office • 1Gbps to 64Gbps of BW throughput
• 4M concurrent TCP connections
• Cluster 100s of WAEs
WCCPv2
• Active/active clustering
• Automatic load-balancing
Client WAN
• Load redistribution
• Fail-over
• Fail-through operation
• Near-linear scalability & performance

Policy Based Routing

• Cisco WAE as a next-hop router
• Active/passive clustering

WAN
Data Center

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12
 Seamless, Transparent and Secure
Integration
 Compliance with critical network services such us
• Quality of Service (QoS)
• Network Management
• Application Performance Cisco Wide Area Application Services
Application Optimizers
• Security Advanced Compression

• Optimized Routing Transport Optimization

 Disk Encryption
WAN
• Mitigate concern of data theft
• Standards-Based Strong
Encryption (FIPS 140-2 level 2,
256-bit AES)
SrcIP 1.1.1.1 SrcPort 1434 Optimized
DstIP 2.2.2.2 DstPort 80 Data

SrcIP 1.1.1.1 SrcPort 1434

Application Data
DstIP 2.2.2.2 DstPort 80

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13
 Secure WAN Optimization from Cisco
WAAS integrates seamlessly and transparently into
network security, visibility, and control functions

Ingress Egress
Security, Intercept Security,
Route
LAN Control, and and Control, and WAN
Selection
Visibility Optimize Visibility

Intercept
Security Routing Security
- Stateful Inspection - Inline - Static - Stateful Inspection
- Firewall Policies - WCCP - Dynamic - Firewall Policies
- Signature Matching - Optimized - Link Encryption
- IOS packet flow
Control Control
- Classification Optimize - Shaping
- Drop or Mark - Specific Application
Acceleration Visibility
- Policing
- Compression - NetFlow
Visibility - Flow Optimization
- NetFlow
Secure
- Disk Encryption
- Firewall Compliance

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14
Cisco WAAS Express
IOS based Integrated WAN Optimization solution
WAAS EXPRESS Client
• Small-footprint
• Cost-effective software solution
• Transparent integration into ISR G2
• Native Cisco IOS® Software capabilities
Branch
• Increases remote user productivity
• Reduces WAN bandwidth costs
WAAS
• Interoperates with existing Cisco WAAS infrastructure – investment protection
EXPRESS

Optimization Management
• L4 TCP Optimization • Simplified CLI WAN
o TFO • Central management
• Compression
o PLZ Compression CM
• DRE Data
o Uses maximum router DRAM Center
Network Integration Packaging & Licensing
• Compatible with WAAS head ends • All technology package
• Inline IOS features o Security, UC, IP Base, ...
o IOS security and QoS • Enforced using a license key
• Mix of devices o Cisco IOS licensing WAE
o Appliances, network module, ... o 60 day trial license
o CM registration with valid license
o CM allows user cofig with valid
license Servers

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15
 Cisco vWAAS Provides Flexible Cloud
Deployment Options 1 Private Cloud

• Traditional WAN Edge Deployment at

Branch and DC
WAN or
Internet  Gradual migration from Physical to
VMware
VMware ESXi
ESXi Server
Server
Virtual
 Multi-tenancy support
UCS /x86 Server
WCCP

Private Cloud, Virtual Private Cloud,

Cat6K/N7K
VMware
VMware ESXi
ESXi
2 & Public Cloud
 Re-direction using vPath @VM level
 Elastic provisioning
Nexus 2K/5K  Multi-tenancy support

Nexus 1000V vPATH

VMware
VMware ESXi
ESXi Server
Server
Nexus 1000V vPATH
VMware
VMware ESXi
ESXi Server
Server

UCS Compute/ UCS Compute/

Physical servers Virtualized Servers UCS /x86 Server

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16
Cisco vWAAS Accelerates Cloud Deployment
Accelerate cloud-bursting, workload mobility, virtualized deployment
Virtual Private
Clouds Private Cloud

Enterprise B Enterprise A Enterprise A

WAAS

WAN

Challenges
Challenges Cisco WAAS Benefits
 Access to Virtual Branch Office  Accelerate to VPC and
Private Cloud other clouds
 Workload mobility  Elastic multi-tenancy
Mobile
 Scale-out Users WAAS  Policy based
orchestration lowers
opex

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17
 vWAAS vPATH Interception (based on Nexus 1000V)

Web App
• Policy based Interception vWAAS Server 1 Server

port-profile configured in Nexus 1000v

• Bidirectional Interception

• Pass-through traffic automatic bypass Nexus 1000V vPATH

VMware ESXi Server

Cisco UCS x86 Server

Nexus 1000v VSM vCenter Server

On-Demand Virtual machine Fault Tolerant Multi-tenancy with

Application based
Orchestration and mobility persistent flexible
interception
Elasticity awareness performance deployment

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18
 Cisco WAAS Mobile Networking:
Deployment Topology
Data Center Cisco WAAS Data Center
Mobile
Server
Cisco WAAS
Intranet Mobile Server

App Servers &

Storage
App Servers
Remote &
Access Storage
VPN

Mobile users
connect through Small Office
VPN aggregation Internet
point to multiple
Cisco WAAS Mobile Cisco WAAS
Cisco WAAS Mobile Clients
Servers Mobile Client Workers in small offices
may connect to multiple
Cisco WAAS Mobile
Servers

Simultaneously accelerate traffic to applications hosted in multiple data centers

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19
Cisco WAAS Central Manager
Usability and scalability
• Monitoring, and reporting
• (up to 2000 nodes)
• Device grouping
• Device and system alarms
• SNMP and syslog integration
• Platforms
WAAS appliances, WAAS Modules, WAAS Express, vWAAS
• SOA-ready Monitoring
Standard XML Web Service (SOAP)
Integration with external reporting and monitoring portals

High Availability
• Active/standby

• Automatic failover

• Primary CM to standby CMs Config replication

Security
• HTTPS GUI and intra-device communication

• RBAC support

• Integrated IOS-like CLI accessible via SSH

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20
Enterprise Performance Monitoring
Integration
Without Flow Export Flow Export Agent
No optimization Agent (Inaccurate) Enabled (Accurate)
• Transparent Integration
Packet header preservation
Enables visibility to end-nodes

• Flow Export Agent

Transmit accurate connection data to monitoring
systems
Eliminates WOC distortion of TCP RTT analysis

• Central Manager API Optimization Enabled

Single view of Application Performance
Management and Optimization

Cisco NAM

WAN

TCP Flow Export Agent

Remote Office
WAAS CM
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21
Thank you.