IOS XE : Enabling the Digital Network Architecture Muhammad A Imam BRKARC-3300 Cisco Spark Questions? Use Cisco Spark to chat with the speaker after the session How 1. Find this session in the Cisco Live Mobile App 2. Click “Join the Discussion” 3. Install Spark or go directly to the space 4. Enter messages/questions in the space Cisco Spark spaces will be cs.co/ciscolivebot#BRKCRS-3300 available until July 3, 2017. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public The goal of this session is to give you an understanding of what IOS-XE 16.x is, why would you care and how it works. BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 4 Agenda • Cisco IOS and its Evolution • The Vision of IOS XE • IOS XE Architecture • Benefits of the New Architecture • Wrap up & Summary Muhammad currently works as a Sr. Manager Technical Marketing for Data Center & Enterprise Muhammad A Imam Switching Group. Muhammad joined Cisco in Sr. Manager Technical Marketing 2008 and has around 15 years of experience in the networking industry. Currently he leads a CCIE#27739 team of Catalyst Products TMEs. He is one of the first TMEs to work on Catalyst 3850/3650 and has worked on all Catalyst Switching products over the years. He also contributes to Enterprise Network designs and Next Generation Platform Architectures. In the past he has held roles in Development, Test and Support of different products ranging from Routers, Switches, Firewalls, etc. @m_a_imam Muhammad holds a Masters degree in Electrical & Computer Engineering. He also maintains a [email protected] CCIE #27739 in Routing and Switching. BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 6 Historical View of Cisco IOS NX-OS 2008 IOS-XR 2004 12.2SX 12.2SE IOS 1986 12.2S 12.2SR 12.2SG IOS 9.x 10.x… 11.x... 12.x IOS XE Operating IOS XE IOS 15.x IOS XE Denali System IOS 9.x BinOS M&T Release NOVA 16.1 LAN Switching, 6.0 3.x 3.x Cat3850 Remote Access, WAN Switching ASR1000, ISR Cisco’s Cat3850 Cisco was Shipped First Cat4K born AGS Router ASR1000 1984 1986 1993 2007 2009 2010 2015 Timeline unevenly distributed BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 7 Historical View of Networks BYOD, Video, Cloud Connect multiple Networks Internet Era BYOD, Video, Cloud Digitization LAN Switching, Routers & Switches Cat3850 Remote Access, WAN Switching ASR1000, ISR Cisco’s Cat3850 Cisco was Shipped First Cat4K born AGS Router ASR1000 1984 1986 1993 2007 2009 2010 2015 Timeline unevenly distributed BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 8 Introduction to DNA Network Requirements for the Digital Organization Insights & Automation Security & Actions & Assurance Compliance Drive Business Speed, Simplicity Real-time & Dynamic Innovations and Visibility Threat Defense Cisco Digital Network Architecture (DNA) © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Digital Network Architecture – What’s New Network-enabled applications Cloud Service Management DNAPolicy |Center Orchestration OpenAPIC APIs -| EM,Developers ISE, environment NDP Automation Identity Analytics Intent Network Policy Identity Access Policy Network Data Insights SD-Access & Assurance Open & Programmable | Standards-based Infrastructure Physical & Virtual | Network Function Virtualization | App Hosting Secure | CloudCAT9K-enabled | Software-delivered © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public The Vision of IOS-XE Denali Forward Vision – IOS XE Denali 16.x.y Manageability Prime Infra. APIC-EM WebUI CLI, SNMP, RESTConf, NETConf Operating System Unified Software Stack (IOS-XE 16) Platform ASICs/CPU Switches Wireless Routers One OS Across Enterprise Platforms BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 13 One OS Network • Enables rapid deployment of new Administrator solutions • Simplified Network administration • Similar CLI • Ease of scripting • Software lifecycle management • Faster learning curve! CLI, SNMP BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 14 Open IOS XE Architecture Open IOS-XE IOS IOS XE 3.7.x(SE) Open IOS XE 16.5.1 IOS IOSd Hosted Apps IOSd Hosted Apps IOS Sub WCM SystemsIOS Sub LXC* LXC* Features IOSd Blob SystemsIOS Sub Features Components Components Systems Wireshark LXC* Wireshark Common CommonCommon InfrastructureInfrastructure / / HAHA Infrastructure / HA Management ManagementManagement Interface Interface Interface IOS-XE ModuleModule DriversDrivers Module Drivers DB KernelKernel Kernel Same Binary Image Across all Catalyst 9K Family BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 17 Open IOS XE – Key Architectural Enhancements IOS XE Denali 16.5.1 IOSd Hosted Apps IOS Sub Systems IOS Sub SystemsIOS Sub LXC* LXC* IOSd Blob SystemsIOS Sub Systems LXC* Wireshark IOS XE Database Common Infrastructure / HA (Crimson Database) Management Interface IOS-XE Module Drivers DB LXCs Support Kernel BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 18 Open IOS XE – IOS Sub Systems BGP IOS Sub Systems IOSd Blob IOS Sub Systems OSPF IOS Sub Systems MPLS, etc Failure of one of the Sub Systems Keeps Rest of the System intact IOS-XE DB IOS Sub Systems Enhances IOS Resiliency BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 19 IOS XE – IOS-XE 16.x (Illustrative View) Session FMAN- Manager RP Wireless HA Controller FMAN-FP Consolidate d Logging IOS Sub IOS Stack Manager Systems (3K) Internal IPC IOS Sub IOS Licensing Systems IOS Sub IOS Services Systems Features PD Comet Crimson DB External Libraries/ SMAN Transports ServiceServices Utilities Platform UADP (TCP/SCTP/ s ASIC Chassi Drivers UDP) Services Drivers Chassiss Blob Low Level APIs ManageFS r Process FrameworkAvailability PacketLSMPI, Delivery LFTS Service FED Manager IOSd Kernel © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 20 Open IOS XE – DB Link STP OSPF Logs State State State Link MST Logs State State IOS-XE DB BGP Tunnel State State The DB contains the Operational and Configurational States BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 21 Open IOS XE – DB Higher Application UP Time IOSd Sub Systems IOS-XE DB Config & Operational Quicker Recovery States Decoupling Code & Data protects the Operational & Configurational States Better Convergence BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 22 Distributed Database – Lets take an example… Processes (Code) States (Data) BGP EtherChannel Netflow Crimson DB Multicast ??? Data & Code Separation BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 23 Open IOS XE – DB Link STP OSPF Logs State State State Link MST Logs State State Data Models BGP Tunnel State State Open IOS XE enables Programmability & Data Models BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 24 IOS-XE Database – Enabling Programmability APP1 APP2 APP3 APP4 Model Driven APIs XML JSON GPB netconf Restconf gRPC Yang Models Crimson Interface Open Apps Crimson DB App Hosting Environment Control Plane Linux Kernel Data Plane BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 25 Open IOS XE – Containers IOS XE Denali 16.5.1 IOSd Hosted Apps LXC* LXC* LXC* Wireshark Common Infrastructure / HA Management Interface IOS-XE Module Drivers DB Kernel Decoupled Execution Space BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 26 Benefits of Modern Architecture RAFA (Run Any Feature Anywhere) RAFA (Run Any Feature Anywhere) • Feature Velocity Across Platforms • No Need to touch Platform Independent Pieces of Software MPLS • Platform Dependent Piece of software need to be done AVC BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 29 NAT/PAT on Catalyst 9500 Static ALGs ( FTP, TFTP, ICMP) NAT in Hardware Up to 8K flow 14K Scale Dynamic (3/5-tuple) INSIDE OUTSIDE A X A B C X Y Z B Y C Z BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 30 MPLS on Catalyst 3850/9K POS Medical Device Network Other Network Doctor Staff Line of business – BU segmentation Payment Card Industry Hospital Network INTERNET Bring-Your-Own-Device (BYOD) Mergers and Acquisitions Multi-Tenancy BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 31 AVC on Catalyst 3850/9K • Filter Monitoring Over Ingress/Egress interfaces and direction • Identify Top Talkers • Monitor Data over 2, 24 or 48 hours • Monitor percentage Bandwidth usage BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 32 Model Driven Programmability Model-Driven Programmability Stack Apps App1 App2 App3 Model-Driven APIs APIs YANG Development Kit (YDK) Protocol NETCONF RESTCONF gRPC Encoding XML JSON Transport SSH HTTP YANG Models (native, open, common) Models Data Model Database BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 34 Cisco Device (YANG) Model Types (Open) Common (Cisco) Common (Cisco) Native Model Model Model • Industry definition • Cisco definition • Cisco definition • Compliant with standard • Common across 2 or • Unique to a single Cisco (IETF, ITU, etc.) definition more Cisco operating operating system systems • Compliant with customer definition (ie OpenConfig) Example: Example: Example: ietf-diffserv-policy.yang cisco-vxlan.yang Cisco-IOS-XR-ipv4-bgp- (IETF Diffserv data model) (IOS-XE/NX-OS VxLAN data model) cfg.yang (IOS-XR BGP data model) BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 35 NETCONF protocol stack CONTENT XML (based on YANG) OPERATIONS GET, EDIT-CONFIG, ETC MESSAGES RPC SECURE TRANSPORT SSH BRKCRS-3300 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 36 Options for accessing NETCONF YANGExplorer YANG Developer Kit (YDK) Cisco-developed GUI tool Access data models using for exploring data models, off-box Python scripts.