Posts

Showing posts from April, 2016

Cisco ACI and OpenStack Integration: RedHat vs Mirantis

Image
Note: This post requires basic knowledge of Cisco ACI architecture and ACI logical elements, as well as understanding of what OpenStack is, what the OpenStack elements (Projects) do, and the principles of what OVS and Neutron are and how they work. If you wish to get more information about these technologies, check out the Cisco ACI  and OpenStack Section within the "SNArchs.COM Blog Map".

Let's get one thing clear about OpenStack before we even start:
“OpenStack is a collection of open source technologies delivering a massively scalable cloud operating system” openstack.org.Open source and open APIs allows the customer to avoid being locked in to a single vendor.One thing to have in mind is that OpenStack is made for the applications specifically made for the Cloud, you should not even consider moving all your Virtual Loads to the OpenStack.Everyone who got a bit deeper into the concept of a Private Cloud and OpenStack, how they operate and the basic use cases, understan…

Cisco ACI Service Graph (L4-7), ADC: F5 vs NetScaler

Image
Note: This post requires basic knowledge of Cisco ACI architecture and ACI logical elements, as well as understanding of what ADC is, and the basic principles of Load Balancing and SSL. If you wish to get more information about these technologies, check out the Cisco ACI Section within the "SNArchs.COM Blog Map".

I will not go all "Security is super important" on you, I assume that if you are reading this post - you already know that. Let's just skip that part then, and go directly to the facts we have so far:

ACI does not permit the flows we do not explicitly allow. ACI is therefore a stateless FW itself.ACI Filters allow the basic L3-L4 FW rules. All additional L4-L7 "features" can be deployed in a form of a Service Graph.Service Graph is directly attached to a Contract between 2 EPGs (End Point Groups).Cisco ACI integrates with all the big L4-7 Services vendors using the "Device Package". A Device Package is a plugin that is deployed direc…