1 ™ Getting to the bigger truth. Enterprise Strategy Group | Review ESG Lab with vEOS Router Arista Any Cloud Platform CloudVision and Cloud Solutions for Hybrid Tony Palmer Author: September 2017 IT Validation Analyst Date: , Senior Abstract Cloud platform based on This ESG Lab Review documents hands Arista Any on testing of the - Virtual Extensible Operating and CloudVision , focusing on how Ar ista delivers the same EOS operational and management System Router (vEOS Router) capabilities found in data center networks in a hybrid cloud network environment. This review will also show how Arista has cloud m extended the automation and orchestration capabilities to enable anagement and integration based on its “Any” and Any Cloud . five A principles of a vailability, a gility, a utomation, a nalytics , The Challenges - premises In a recent ESG survey, 74% of respondents that are using or want to use both public cloud resources and on ic equipment simultaneously to support their organization’s IT needs stated that it is very important or critical for their publ cloud service providers to use the same cloud infrastructure technologies as those used in their organization’s internal 1 Additionally, organizations have noted performance, organizational complexity, and the cloud, as seen in Figure 1. private lack of appropriate tools for enabling a hybrid cloud environment as among the challenges that they face when moving 2 virtual resources and data between private and public cloud resources. . Using the Same Technologies Across Private and Public Cloud Infrastructure Resources Figure 1 How important is it that your organization’s current or potential cloud service provider(s) use the same cloud infrastructure technologies as those used in your organization’s internal private cloud/virtualized data 1% Don't know , Not at all important , 16% Critical , 2% , Not very important 6% Somewhat important , 17% 58% , Very important Source: Enterprise Strategy Group, 2017 a hybrid cloud in the enterprise is no trivial task. Lacking common platforms for IT professionals recognize that employing extensibility, common operational models, visibility across all workloads, and secure provisioning across public and private resources make multi - cloud integration difficult . To address these challenges, organizations must use a common software - defined architecture and management system to interconnect and orchestrate IT resources. The resulting hybrid cloud architecture must provide the requisite flexibility, agility, scalab ility, reliability, programmability, and performance, regardless of any workload. 1 Source: ESG Research Report, The Cloud Computing Spectrum, from Private to Hybrid , March 2016 . 2 Ibid. and is distributed under license from ESG. This ESG Lab Review was commissioned by Arista © 2017 by The Enterprise Strategy G roup, Inc. All Rights Reserved.
2 Lab Review Arista Any Cloud Platform with vEOS Router and CloudVision for Hybrid Cloud Solutions 2 : Any Cloud Platform: Arista vEOS Router and CloudVision for Hybrid Cloud The ting software platforms to exis Recognizing the challenges to enable a hybrid cloud environment, Arista is leveraging its two enable their vision of Uni Cloud Networking. These solutions allow customers to leverage the mature Arista data versal center architecture to integrate resources in the cloud or at branch locations under a common software architecture. The - and hypervisor - agnostic v irtual network device, allowing a customer to deploy it within an vEOS Router is a cloud remote office. Because Arista designed EOS from the ground up using the enterprise data center, a public cloud, or a nciples of the cloud, the vEOS R e same EOS capabilities seamlessly across its IT pri outer enables customers to leverage th infrastructure, regardless of where the vEOS Router is deployed. This virtual router provides the same consistent operations, workflow automation, and high availability as EOS across Arista’s switching and r outing portfolio. vEOS customers can create a hybrid cloud environment using public cloud resources such as Amazon Web Services (AWS), - V, and Microsoft Azure, Google Cloud Platform, and Oracle Public Cloud, and leverage VMware ESXi, Microsoft Hyper - based Virtual Machine (KVM) hypervisors. Currently, vEOS supports almost all server size instances, specifically those Kernel that support single root I/O virtualization (SR - IOV). At the data center, organizations can deploy head - end tunnel Arista termination using thei - high r choice of software on industry standard servers or hardware - based termination with density data center switch platforms . Arista has also extended the capabilities of CloudVision so that customers can manage all physical and virtual resources within their hybrid cloud environments. CloudVision enables multi - cloud provisioning, workflow automation, and workload orchestration across both public and private cloud resources. As with EOS for the enterprise private cloud, the cloud - agnostic platform offers the benefits of a single database for aggregating and accessing state and configuration of virtual resources installed in public clouds. CloudVision provides that single point of control to enable workload automation and orchestration, and state an d topology monitoring and visibility. . Figure 2 Cloud based on Arista Any vEOS and Arista CloudVision for Hybrid Cloud S olutions Arista CloudVision provides a consolidated view of an organization’s cloud infrastructure and provides the foundation for pplication delivery controllers stateful next - generation firewalls, security monitoring tools, and a automating integration of Segmentation Service . - without dependency on propriet ary packet headers or protocols using CloudVisi on Macro by The Enterprise Strategy Group, Inc. All Rights Reserved. © 2017
3 Lab Review Arista Any Cloud Platform with vEOS Router and CloudVision for Hybrid Cloud Solutions 3 : Customers who have already used CloudVision’s interface can now perform the same tasks and view the same device and network metrics with both physical and virtual network devices. To differentiate its solution from traditiona l hybrid cloud uses management solutions, same operational models regardless of whether you are managing devices within the Arista the private or public cloud, or a branch/remote office, essentially removing the need for disparate any data center, manageme s . nt platform real time and historic network state telemetry for all devices - physical and virtual — it Because CloudVision enables both — IT professionals to view at both the device and network levels at any point in time from a single interface enables N o lo nger . do organizations need to examine the entire network on a device by - device basis or depend upon polling mechanisms that - in a timely manner . - time data to better identify the root may not reveal network issues IT professionals can leverage real network issues, thus reducing time to resolution. Additionally, Arista provides application programming interfaces causes of (APIs) so that customers can develop custom analytics and visualizations leveraging the data CloudVision collects. CloudVision for many use cases, including: Current Arista customers employ the vEOS Router and Enabling s • c onnectivity between private and public cloud s in an enterprise hybrid cloud. ecure loud gions or zones within and across re roviders • Interconnecting v irtual private clouds (VPCs) — i.e., multiple c service p via transit VPCs. a vendor - agnostic common platform for provisioning and m anagement of network resources. • Leveraging Obtaining r • - time streaming statistics with workstream analytics for sites, connecti ons and infrastructure within the eal hybrid cloud. Validating vEOS Router Throughput and Failover Performance ESG Lab tested Arista’s vEOS R outer to validate both performance and the ability to deliver virtually uninterrupted 3 operations during a simulated unp between VPCs and using a transit VPC . Figure lanned outage shows the test configuration. One vEOS router w as deployed in one AWS availability zone, while one was deployed in an AWS transit center or transit so zone. An availability zone (AZ) is an isolated group of data centers within a geographic region. Each region within AWS is al geographically isolated from one another and contains multiple AZs. An AWS customer can deploy multiple application instances across AZs to reduce application latency and protect against unplanned outages. Figure 3 . Test Bed Configuration Maximum Throughput A transit zone (TZ) provides connections between AZs of different regions, as well as direct connections to the public Internet and AWS partners. the vEOS router in the AZ was connected to the vEOS router in the TZ. A n U buntu server was connected to vEOS router ( 10.2.118.11 ) in the AZ, and configured to simulate traffic from 62 different VPCs while a the separate server was connected to the vEOS router ( 10.3.111.11 ) in the simulated data center . ESG Lab first evaluated the results of a test to demonstra te the throughput that can be achieved with a vEOS router in AWS . multiple , a network testing tool that can create TCP and UDP data streams and measure link throughput, TCP Using iPerf by The Enterprise Strategy Group, Inc. All Rights Reserved. © 2017
4 : and CloudVision for Hybrid Cloud Solutions 4 Lab Review Arista Any Cloud Platform with vEOS Router 112 s we originated between server 10. 2. traffic stream 17.11 and server 10. 3 . re . 11 . In this test, the vEOS t ransit r outer 1 terminated 62 tunnels simulating 62 edge routers with an MTU of 1394. This traffic travel ed across the link s connecting the Traffic edge r u ter, the transit router, and the data center. o was generated for a period of 5 minutes. Figure 4 shows th e results of the test. Throughput of Link Connecting Two vEOS Routers Bidirectional state Figure 4 . Maximum Steady - Throughput 4.74 2.5 0 1 1.5 5 0.5 3 3.5 4 4.5 2 Gb/sec The test revealed that traffic reached a steady state of 2.15Gb/sec from the edge router to the data center and 2.59 Gb/sec in total Gb/sec . from the data center to the edge router, 4.74 maintains that high availability is built into its solution , with the ability to directly call AWS APIs Arista ’s Any Cloud offering AZ to determine the an a failover between two routers in ing tested this claim, ESG Lab built into vEOS routers. observ each vEOS router is configured with packet loss if an unplanned outage occurred. Within the VPC depicted in Figure 5 , routes to the servers in the AZ and to the servers in the TZ. High Availability Test Bed Configuration . 5 Figure ESG Lab also observed how the traffic would be distributed with multiple workloads. Using iPerf, another traffic stream was generated from Server 10.3.41.44 and sent via the same link connecting z1 vEOS1 and tz - vEOS1. With both workload - by The Enterprise Strategy Group, Inc. All Rights Reserved. © 2017
5 : and CloudVision for Hybrid Cloud Solutions 5 Lab Review Arista Any Cloud Platform with vEOS Router , each server consumed half of the 1.23 Gb/sec of total bandwidth, showing that the router will balance simulations running the total workload between servers. ESG Lab used iPerf to generate a 1.23 Gb/sec TCP stream between server 10.3.41.29 and server 10.2.41.22 acr oss Finally, - vEOS1. Router z1 - vEOS1 was then rebooted via the AWS EC2 management console. Traffic immediately failed router z1 over to router z2 - vEOS1 while z1 - vEOS1 rebooted. Figure 6 shows the second - by - second log of traffic received by server 10.2.41.29. The complete failover of traffic to Router z2 vEOS1 during the reboot of Router z1 - vEOS1 took just a few - seconds . It’s important to note that even while this disruption was minimal, Arista has since implemented Bidirectional Forwarding Detection (BFD) in vEOS. ESG Lab has confirmed that Arista has customers running vEOS in production that can fail over without any traffic disruption. - vEOS1 to z2 vEOS1 During Reboot Figure 6 . Failover of Traffic from z1 - Why This Matters As IT professionals embrace the use of hybrid clouds, recent ESG research reveals that they are concerned about 3 network performance. IT professionals must be able to operate and manage virtual resources in places maintaining overall outside of the enterprise data center in the same way they are able to in their physical network devices. ESG Lab validated that organizations can achie - state throughput of more than 4.7 Gb/sec between vEOS Routers ve a steady deployed in an AWS cloud environment, which is sufficient to support most cloud applications and large - scale balance t deployments . We also verified the vEOS Router’s ability to load - across two routers he traffic automatically . Finally, we saw that during a planned failover between vEOS Routers, there was minimal disruption . While before traffic resumed tests, we observed minimal disruption in these Arista has now implemented the BFD p rotocol and eliminated disruption during failovers, thus ensuring even high er network availability while maintaining overall high network performance. 3 March . 2016 Source: ESG Research Report, The Cloud Computing Spectrum, from Private to Hybrid , by The Enterprise Strategy Group, Inc. All Rights Reserved. © 2017
6 6 and CloudVision for Hybrid Cloud Solutions Arista Any Cloud Platform with vEOS Router Lab Review : Managing Physical and Virtual Network Resources Traditional hybrid cloud solutions are often built from multiple disparate physical and virtual assets and lack a single point of management for orchestration and visibility. ESG Lab proceeded to evaluate how CloudVision provides a single point of management, while leveraging it to e and manage the vEOS Router via its GUI. We also reviewed how streaming configur and telemetry data are viewed and used to address issues commonly faced in network management. Figure 6 shows the CloudVision interface. Figure 7 . Arista Clou dVision GUI ESG Lab first walked through the steps to add and configure a new vEOS Router to the existing network. Using the CloudVision GUI, we clicked on Network Provisioning in the upper left - hand corner to reveal the present network configuration (shown in Figure 7). Figure 8 . Existing Network Configuration as Shown in CloudVision in Figure 8 show the progression of steps: Adding a new vEOS Router involved the following steps. Screenshots by The Enterprise Strategy Group, Inc. All Rights Reserved. © 2017
7 and CloudVision for Hybrid Cloud Solutions Arista Any Cloud Platform with vEOS Router 7 Lab Review : • Click on Inventory from the home screen. • Click on + in the upper right - hand corner. . Add Type IP address in the Search box, then click • 9 . Steps to Add New vEOS Router to Network Figure Figure 9 shows that the device has been added, yet still needs to be configured. Configuring the device requires right - Manage clicking on the new device and selecting - Configlet . Figure 10 . Applying a Configlet to a New Network Device The Configlet command allows a network administrator to configure multiple devices using a configuration of an existing network device. Rather than typing multiple instructions via command line interface (CLI), CloudVision reduces device configuration time by using an existing configuration (or Configlet) on an existing device and applying it to new devices via a by The Enterprise Strategy Group, Inc. All Rights Reserved. © 2017
8 : and CloudVision for Hybrid Cloud Solutions 8 Lab Review Arista Any Cloud Platform with vEOS Router few mouse clicks. Of course, to ensure that only authorized changes are applied, an administrator must approve adding or reconfiguring network dev ices. Lab also observe ESG metrics, and devices from the CloudVision interface to verify the d how to monitor network events, breadth and depth of analytics Arista offers to its customers. Unlike hybrid cloud solutions that offer traditional and disparate - of - band monitoring systems , CloudVision collects the state of each network element in real polling and out time, creating a holistic and current view of the hybrid cloud environment. This becomes more critical to customers as their hybrid clouds experience larger data volumes, requiring IT professionals to ensure availability and security at any given of the hybrid cloud from the shows, CloudVision offers views multiple perspectives of events, devices, moment . As Figure 11 etrics. The Events view provides logs on events that occurred on all network devices. The Devices View provides and m - and environmental conditions. The Metrics View allows historical and real time data on system resources, hardware usage, a user to review cumulative counts from a device and interface perspective across devices, eliminating the need to call up individual counters via CLI. 11 . Events, Devices , Figure and Metrics Views in CloudVision These real - time and historical views within CloudVision integrate the state streaming and telemetry data so that IT professionals have a comprehensive view of both the device and the network. Users can manage both physical and virtual es resources, regardless of location, via the CloudVision portal. Also, all views allow users to see the state of both the devic and the network in snapshot and live mode. ESG Lab also viewed the capabilities of CloudT racer, a tool that provides real - time reachability monitoring between private and public clouds via telemetry tracers . Specifically, IT professionals can assure in real time that all points interconnected with in the hybrid cloud environment — remote sites, V PCs within multiple cloud service providers, enterprise datacenters — are accessible. CloudTracer enables IT to trace connectivity issues quickly and identify root causes quickly, thus helping to acer GUI. from the CloudTr decrease resolution time and increase availability. In Figure 12 , we see a sample view by The Enterprise Strategy Group, Inc. All Rights Reserved. © 2017
9 : and CloudVision for Hybrid Cloud Solutions 9 Arista Any Cloud Platform with vEOS Router Lab Review Figure 12 . Connectivity View in CloudTracer In CloudTracer, IT can view HTTP response time, jitter, latency and packet loss of connections between various devices or hosts in the hybrid cloud. ESG Lab viewed HTTP response time for connections between five availability zones and two vEOS Clo udTracer will indicate if response time is severe enough to warrant further investigation via color coding. IT can Routers. in real time at the bottom of the screen to uncover any trends. CloudTracer also enable s the HTTP response time also view user to view histor ical data, associated raw data and other metrics pertaining to a specific device or host, as displayed for - cs veos - 2 in Figure 12 . Why This Matters Organizations state that the use of a common platform for orchestrating and managing IT resources in a hybrid cloud 4 Not only does a common platform make it easier for them, according to ESG research. environment is very important to m to manage the overall enterprise IT network, but it also reduces overall the TCO ) . No longer do total cost of ownership ( organizations need to invest in separate management platforms whether their IT resources lie in their enterprise data center, public clou d, or branch offices. This also leads to lower training costs, lower management costs, and greater IT TCO. operational efficiency in managing the network and troubleshooting issues, which all lead to an overall lower portal provides IT professionals a user - friendly interface that enables more efficient ESG Lab validated that the CloudVision management of the hybrid cloud environment. Adding a new network device required only a few mouse clicks. We also saw how an Arista Configlet can be used to shorten the time for configuring a new network device. ESG Lab saw how the state streaming and telemetry data collected by CloudVision are integrated into comprehensive views of the network and its devices, both physical and virtual. We saw how CloudVision allows view - time modes to s in historical, current, and real better facilitate monitoring and troubleshooting activities. Finally, ESG Lab verified that CloudTracer allows the user to monitor the health and availability of connections amongst the elements that make up the customer’s enterprise hybrid cloud. 4 2016. , March Source: ESG Research Report, The Cloud Computing Spectrum, from Private to Hybrid by The Enterprise Strategy Group, Inc. All Rights Reserved. © 2017
10 10 CloudVision for Hybrid Cloud Solutions and Lab Review : Arista Any Cloud Platform with vEOS Router The Bigger Truth While organizations are embracing the use of hybrid clouds, they continue to be challenged by managing and orchestrating ild and manage a hybrid cloud environment resources to extract the most value. Common technologies and platforms to bu can help organizations “do more with less.” IT simply does not have the time or resources to learn new technologies or and private cloud resources invest in additional solutions for operating a hybrid cloud. A solution that integrates public easily will enable IT organizations to provide the business with an agile, robust hybrid cloud environment. Recognizing that need for simplicity in network resource integration and management, Arista offers the vEOS Router for extending the network beyond the enterprise data center and the additional capabilities of CloudVision to manage both private and public cloud resources through one portal. Both serve to ease customers into adopting hybrid clouds by agnostic orchestration, real - vendor , which employs a single code base, en EOS platform g Arista’s prov employin - time visibility and telemetry, and consistent programmability via APIs. For those who already use Arista in their enterprise data w technologies using familiar tools and techniques. Arista’s robust, common platform centers, this enables integration of ne makes implementation, orchestration, and management of hybrid cloud networks easy to achieve. ESG Lab validated that the vEOS Router can achieve a steady - state throughput of 1.23 Gb/sec in an AWS cloud environment. We validated 1.23 Gb/sec throughput and saw multiple workloads balanced evenly across two routers. tion to Failover, failback, and router boot time after a simulated outage were all fast and smooth, with minimal interrup service. These results show that the vEOS Router can maintain high levels of network performance even when deployed in the public cloud. ESG also reviewed the current capabilities of CloudVision to manage both physical and virtual resources. We saw that adding and configuring new virtual devices requires just a few clicks of the mouse as opposed to the effort of typing in multiple complex commands via CLI. We also saw how state streaming and telemetry data were integrated into comprehensive views fr om a network event, device, and metrics perspective. These views allow the user to gain a global understanding of the hybrid cloud environment, eliminating the need for coordinating disparate management systems. Arista continues to address the challenges o f implementing and managing a network environment, as the vEOS Router and extended capabilities of CloudVision allow organizations to fully realize the benefit of hybrid cloud networking. If your organization is looking to achieve faster time ater operational efficiency, and ultimately a lower TCO from its value, gre to hybrid cloud environment, it would be smart to take a close look at Arista’s vEOS platform and CloudVision. All trademark names are property of their respective companies. Information contained in this publication has been obtained by sources The Enterprise Strategy Group (ESG) considers to be by The Enterprise Strategy Group, Inc. Any reliable but is not warranted by ESG. This publication may contain opinions of ESG, which are subject to change. This publica tion is copyrighted copy format, electronically, or otherwise to persons not authorized to receive it, without the express consent - reproduction or redistribution of this publication, in whole or in part, whether in hard prise Strategy Group, Inc., is in violation of U.S. copyright law and will be subject to an action for civil damages and, if applicable, criminal prosecution. Should you have any questions, of The Enter please contact ESG Client Relations at 508.482.0188. The goal of ESG Lab reports is to educate IT professionals about data center technology products for companies of all types and sizes. ES G Lab reports are not meant to replace the evaluation process that should be conducted before making purchasing decisions, but rath er to provide insight into these emerging technologies. Our objective is to go over some of the more valuable - feature/functions of products, show how they can be used to solve real customer problems and identify any areas needing impro vement. ESG Lab's exp ert third party perspective is based on our on testing as well as on interviews with customers who use these products in production environments. own hands - Group, Inc. All Rights Reserved. by The Enterprise Strategy 7 © 201 P.508.482.0188 - [email protected] www.esg global.com global.com - © 2017 by The Enterprise Strategy Group, Inc. All Rights Reserved.
APD Issued 2017-1.5 Manual Policy 7/20/2017 Austin Police Department Policy Manual CHIEF'S MESSAGE I am proud to present the newest edition of the Austin Police Department Policy Manual. The Policy Ma...More info »