Deliver your App Anywhere … Publicly or Privately
0 likes261 views
The document discusses the challenges faced in app delivery due to the operational complexities of using multiple point products, leading to slow service delivery times. It presents a distributed cloud approach as a solution to enhance operational efficiency, allowing for faster app deployment and reduced operational expenses. A case study illustrates significant improvements in service delivery speed and cost reduction with the adoption of this new approach.
Deliver your App Anywhere … Publicly or Privately
- 1. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA Enable the Cloud for Everyone, Everywhere DevOps Webinar Dec 2020 Pranav Dharwadkar VP Products @pranavdh01 Jakub Pavlik Director Engineering @JakubPav Deliver your App Anywhere … Publicly or Privately
- 2. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 2 Developers Adopting New Approaches to Deliver New Services Faster HYBRID / MULTI-CLOUD MICROSERVICES HYBRID CLOUD MONOLITHIC SW RELEASE CONTINUOUS
- 3. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 3 Delivering an App Stuck in an Operational Nightmare of Multiple Point Products and Service Tickets NETWORK / IT DEVOPS Router Network Firewall Front Loadbalancer Front-Door DDOS App Firewall Ingress Controller App Mgmt - K8s / VM User DEVELOPER Overflow of Support Tickets
- 4. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 4 ...Negating all the Efficiencies Gained by Adopting Modern App Approaches DEVELOPERNETWORK / IT DEVOPS
- 5. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 5 Let’s take an example...How long typically does it take to deliver an app publicly? Router Network Firewall Front Loadbalancer Front-Door DDOS App Firewall Ingress Controller App Mgmt - K8s / VM User 1 ~ 2 days 4 2 ~ 2-3 days 5 ~1-2 weeks 3 ~ 1-2 weeks ~ 1-2 weeks ~ 1-2 weeks ~ 2-3 weeks 67 ~ 7-12 weeks Total
- 6. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 6 Let’s take an example...How long typically does it take to deliver an app privately? Router Network Firewall Front Loadbalancer VPN App Firewall Ingress Controller App Mgmt - K8s / VM Private Link 1 ~ 2 days 4 2 ~ 2-3 days 5 ~1-2 weeks 3 ~ 1-2 weeks ~ 1-2 weeks ~ 1-2 weeks ~ 1-2 weeks 67 ~ 9-15 weeks Total8 ~ 3-4 weeks Internet
- 7. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 7 A New Approach is required for Modern Apps - Distributed Cloud Services Distributed Cloud ApproachProblems with current products Integrated StackMultiple Point Products Distributed Fleet Operations approach - Control Plane based mgmt Appliance mgmt model - Each instance managed individually SaaS based Operations with full lifecycle mgmtOperationally complex, manual upgrades Single observability portalMultiple panes of glass Deployable in thousands of clusters across premise, cloud, network & edge Large size not fit for deploying in multiple locations API GW APP FW Loadbalancer Firewall Networking DDOS
- 8. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 8 Delivering a Modern App, Publicly, using Distributed Cloud approach Users Discover apps 1 2 2 Control Plane to distribute app reachability and app health 3 Advertise app publicly on anycast VIP 4 Distribute Specific Cloud Services closer to the user (e.g., DDOS, FW, SSL offload, LB, WAF) 1 3 4 5 5 Persistent connection to origin endpoint Control Plane Data Plane Global Network with multiple POP Sites
- 9. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 9 Delivering a Modern App, Privately, using Distributed Cloud approach Discover apps 1 2 2 Control Plane to distribute app reachability and app health 3 Advertise app privately on specific sites 4 Distribute Cloud Services at specific sites (e.g., LB, WAF) 1 4 5 5 Completely private data plane across sites, not exposed to internet Control Plane Data Plane 3 Global Network Private Connectivity to DC & Clouds in all regions
- 10. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 10 Operational Benefit of Distributed Cloud Approach - Customer case study Current Approach Distributed Cloud Approach Deliver new services faster 3 new services / yr 11 new services / yr ~$7M/yr Reduced Operational Expense from a Consistent operational model 25 (15 QA+10-Devops) 5 (2 QA+3 Devops) ~$5M /yr Reduced operational expense from faster troubleshooting, self-service, one-click deployment ~300 mins / incident ~15mins / incident ~$1M/yr Business Value NETWORK / IT DEVOPS ~ 7-12 weeks ~ hours - days Source: Case Study done using West Coast based Tech Company on their recent adoption of cloud agnostic approach
- 11. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA Enable the Cloud for Everyone, Everywhere Demonstration
- 12. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA Redis Service Mysql DB Wordpress topology in Private DC Vanilla Kubernetes cluster cluster-xxx Wordpress
- 13. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 13 It took 8 weeks to configure 7 different point products Router Network Firewall Front Loadbalancer Front-Door DDOS App Firewall Ingress Controller App Mgmt - K8s / VM User 1 ~ 2 days 4 2 ~ 2-3 days 5 ~ 1-2 weeks 3 ~ 1-2 weeks ~ 1-2 weeks ~ 1-2 weeks ~ 2-3 weeks 67 ~ 7-12 weeks Total Router Fortigate F5 (or Nginx)CloudFlare PAN or Nginx or Fortigate Nginx ESXI/ KVM Rancher/ Kubeadm
- 14. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 14 Distributed Cloud approach only took me 5 minutes to advertise app publicly Users Discover apps 1 2 2 Control Plane to distribute app reachability and app health 3 Advertise app publicly on anycast VIP 4 SSL Offload, WAF configured on N/W Edge 1 3 4 Control Plane Data Plane Global Network with multiple POP Sites ~ 5 mins ~ 5 mins ~ 5 mins ~ 15 mins ~ 0 secs
- 15. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 15 And troubleshooting is nightmare because of 7 disjointed mgmt portals Router Network Firewall Front Loadbalancer Front-Door DDOS App Firewall Ingress Controller App Mgmt - K8s / VM User 1 ~ 15-30 mins 4 2 ~ 15-30 mins 5 ~30 - 60 mins 3 ~ 30-60 mins ~ 30-60 mins ~ 30-60 mins ~ 30-60 mins 67 ~ 3-6 hours Total Router Fortigate F5 (or Nginx)CloudFlare PAN or Nginx or Fortigate Nginx ESXI/ KVM Rancher/ Kubeadm
- 16. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 16 Troubleshooting was quick because of integrated single pane of glass with alerts & integrations Users App Discovery 1 2 4 Troubleshooting for network firewall, WAF, Loadbalancing 1 3 4 Global Network with multiple POP Sites ~ 5 mins ~ 5-10 mins 5 Latency Troubleshooting to Origin Endpoint ~ 5-10 mins ~ 15-25 mins
- 17. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 17 Distributed Cloud approach only took me 15 minutes to advertise app privately Discover apps 1 2 3 Advertise app privately on specific sites 4 Distribute Cloud Services at specific sites (e.g., LB, WAF) 1 4 5 Control Plane Data Plane 3 Global Network with multiple POP Sites ~ 5 mins ~ 5 mins ~ 5 mins ~ 15 mins 2 Control Plane to distribute app reachability and app health ~ 0 secs
- 18. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA Enable the Cloud for Everyone, Everywhere Q&A