Two incredible engineers: Shane Corban from Cisco and Carl Caum from Puppet Labs came together to be our guest experts for this workshop. See the demos in the replay at bit.ly/1lJQm3A
Open NX-OS provides an extensible, open and programmable network operating system across Nexus 3K/9K platforms. It features enhanced infrastructure layers including open package/application integration using RPM/YUM, an open Linux architecture with kernel networking stack, and an open NX-API REST interface using model-based APIs for automation.
This document discusses OpenShift v3 and how it can help organizations accelerate development at DevOps speed. It provides an overview of Kubernetes and OpenShift's technical architecture, how OpenShift enables continuous delivery and faster cycle times from idea to production. It also summarizes benefits for developers, integrations, administration capabilities, and the OpenShift product roadmap.
This document discusses testing Kubernetes and OpenShift at scale. It describes installing large clusters of 1000+ nodes, using scalability test tools like the Kubernetes performance test repo and OpenShift SVT repo to load clusters and generate traffic. Sample results show loading clusters with thousands of pods and projects, and peaks in master node resource usage when loading and deleting hundreds of pods simultaneously.
Openstack is one of the largest OSS projects today with hundreds of commits flowing in daily. This high rate of change requires an advanced CI infrastructure. The purpose of the talk is to provide an overview of this infrastructure, explaining the role of each tool and the pipelines along which changes have to travel before they find their way into the approved Openstack codebase.
This document provides a summary of the status of embedded Linux. It discusses recent Linux kernel versions from 4.7 to the upcoming 4.12, highlighting new features. It also covers technology areas like boot time, device tree, graphics, file systems, and security. Several ongoing Linux Foundation projects are mentioned like Long Term Support Initiative, Fuego test framework, and the eLinux wiki. Finally, it lists upcoming conferences and trade associations working on embedded Linux. The document aims to give a quick overview of the current state of embedded Linux topics and projects.
This document discusses the role of SDN controllers in OpenStack. It provides background on SDN controllers and OpenStack. SDN controllers can be integrated with OpenStack via the Neutron module to manage network flows and enable programmability. Several SDN controllers that integrate with Neutron are discussed, including OpenDaylight, OpenContrail, and ONOS. The document outlines how these controllers plug into Neutron and their current status in OpenStack. It provides guidance on how new SDN controllers can join OpenStack.
OpsWay Universal Infrastructure provides Docker containerization solutions for Magento and PHP frameworks to upgrade production excellence. It builds infrastructure on modern DevOps stacks like Docker and Rancher for optimized workloads and scaling. The solution involves dockerizing projects, setting up Docker infrastructure with tools like Rancher and Kubernetes for clustering, and integrating production tools for monitoring, load balancing, CI/CD, alerting and backups. Customers benefit from high availability, easy changes and additions, auto-scaling, zero downtime deployments, security, performance and developer friendliness.
Unikernel User Summit 2015: Getting started in unikernels using the rump kernelThe Linux Foundation
Justin Cormack's presentation at the Unikernel User Summit at Texas Linux Fest 2015. He discusses the basic principles and techniques for using Rump Kernels to power POSIXy workloads in a small, fast, and secure package.
Возможности интерпретатора Python в NX-OSCisco Russia
The document discusses a webinar presented by Cisco TAC Engineer Anton Tugai about the capabilities of the Python interpreter in NX-OS. Some key points:
- Tugai gave a presentation on trends in Cisco SDN and current solutions.
- The webinar covered an introduction to Python, how Python is integrated into NX-OS, examples, and a demonstration.
- Native Python interpreter is available on Nexus switches starting from certain software versions, allowing Python scripts to run directly on the switch and execute CLI commands.
Presentation given at the 2017 LinuxCon China
Unikernel is a novel software technology that links an application with OS in the form of a library and packages them into a specialized image that facilitates direct deployment on a hypervisor. Comparing to the traditional VM or the recent containers, Unikernels are smaller, more secure and efficient, making them ideal for cloud environments. There are already lots of open source projects like OSv, Rumprun and so on. But why these existing unikernels have yet to gain large popularity broadly? We think Unikernels are facing three major challenges: 1. Compatibility with existing applications; 2. Lack of production support (e.g. monitoring, debugging, logging); 3. Lack of compelling use case. In this presentation, we will review our investigations and exploration of if-how we can convert Linux as Unikernel to eliminate these significant shortcomings, plus some explorations of coordinating and cooperating with hypervisor.
OpenShift in your own backyard - DevConf CZ 2021Freddy Rolland
OpenShift in your own backyard
Installing OpenShift on your servers with Assisted Installer
OpenShift Container Platform is an open source enterprise-ready Kubernetes container platform.
There are multiple ways to use OpenShift, including in cloud provider environments such as Amazon Web Services, Google Cloud Platform or Microsoft Azure or on your own infrastructure like RHV, Openstack or Bare Metal.
Installing on bare metal servers or virtual machines can sometimes be hard. Having the ability to easily install OpenShift in your data center helps increase the productivity of the IT and Development teams.
The Assisted Installer is a SaaS solution that introduces a new way to deploy a new OpenShift cluster on bare metal basically by only booting the nodes that will be part of the cluster, with an ISO generated by a service hosted in cloud.redhat.com. The service will orchestrate the needed steps based on the user parameters and report about the installation progress. All that without the need of an additional bootstrap node.
In this session, we will explain about the Assisted Service flows and what are the network and hardware requirements, and the needed inputs from the user. We will discuss all the customizations available to the user, and about the possibility of running the Assisted Installer in a disconnected environment. Finally, we will do a demonstration showing how all come together to a running OpenShift cluster in your own backyard.
Try the Assisted Installer here:
https://cloud.redhat.com/openshift/assisted-installer/clusters
Presentation given at the 2017 LinuxCon China
With the booming of Container technology, it brings obvious advantages for cloud: simple and faster deployment, portability and lightweight cost. But the networking challenges are significant. Users need to restructure their network and support container deployment with current cloud framework, like container and VMs.
In this presentation, we will introduce new container networking solution, which provides one management framework to work with different network componenets through Open/friendly modelling mechnism. iCAN can simplify network deployment and management with most orchestration systems and a variety of data plane components, and design extendsible architect to define and validate Service Level Agreement(SLA) for cloud native applications, which is important factor for enterprise to deliver successful and stable service via containers.
A brief description of a software architecture based on golang micro services.
The keynote was shown during the Golangit meetup @ Codemotion Rome 2015 event on March 27th 2015.
MidoNet is an open source network operating system that provides software-defined networking and network virtualization capabilities. It features distributed logical switching, routing, firewalling, load balancing and tunneling using protocols like GRE and VXLAN. MidoNet integrates with OpenStack Neutron and has a REST API for configuration and management. It uses a distributed architecture with agents on each host controlling the Open vSwitch datapath and communicating with a central database for topology and configuration information. The MidoNet community is active on Slack, mailing lists, code reviews and documentation to support the project.
During the OpenStack Tokyo Summit we provided an overview on how Workday started the production deployment with a very robust and efficient CI/CD process that it explained here.
This document discusses deploying WSO2 middleware on Kubernetes. It provides an overview of Kubernetes architecture and components, and how various Kubernetes features like pods, replication controllers, services, and overlay networking are used. It also describes WSO2 Docker images, Carbon reference architectures for Kubernetes, and the deployment workflow. Monitoring of Kubernetes cluster health using tools like cAdvisor, Heapster, Grafana and InfluxDB is also covered briefly.
OpenStack Neutron: What's New In Kilo and a Look Toward Libertymestery
The document summarizes features of OpenStack Neutron networking in the Kilo and Liberty releases. Key points include: Neutron's mission to provide network abstraction; its history starting as Quantum; growth in deployments and rankings; new drivers, plugins, and advanced services in Kilo; plugin decomposition efforts; testing improvements; and new features planned for Liberty like QoS, LBaaS v2, and work on networking for containers and NFV. Looking ahead, the document discusses address scopes, routed networks, BGP announcements, service function chaining, and the OVN virtual networking project.
Load Balancing Applications on Kubernetes with NGINXAine Long
Slides from Michael Pleshavkov - Platform Integration Engineer, NGINX about HTTP load balancing on Kubernetes with NGINX. You will learn how to configure load balancing for a web application using a Kubernetes Ingress resource and how to deploy and use NGINX Ingress controller.
How to Integrate Kubernetes in OpenStack Meng-Ze Lee
The document discusses various open source projects for integrating Kubernetes and containers into OpenStack including:
- Kolla provides production-ready containers and deployment tools for operating OpenStack clouds using Kubernetes in a scalable and reliable way.
- Magnum allows deploying and managing container orchestration engines like Docker Swarm, Mesos and Kubernetes on OpenStack.
- Zun is an OpenStack service for managing containers on OpenStack using projects like Docker and Kuryr.
- Kuryr-Kubernetes provides networking between Kubernetes and OpenStack Neutron.
OVN is an open source virtual network solution for Open vSwitch that provides logical L2 and L3 networking, including logical switches, routers, security groups, and multiple tunneling protocols. It is designed to scale to thousands of hypervisors and VMs, improve performance over existing plugins, and integrate with OpenStack and other cloud management systems through its databases and daemons. OVN aims to become the default virtual network solution in OpenStack Neutron by replacing the existing OVS plugin.
This document summarizes discussions from the PTG-Denver meeting. It outlines the agenda which included an introduction to PTG, highlighting discussion topics, recapping accomplishments in the Pike release, and plans for ongoing work in the Queens release. Key topics discussed were skip-release upgrades, API-SIG, and accomplishments across various OpenStack projects including Neutron, Cinder, Nova, Ironic, Glance, and Kolla from Pike and planned work for Queens.
This document discusses using Chef and Vagrant to build cloud computing infrastructure. It introduces infrastructure as code and configuration tools like Chef for automating infrastructure provisioning and configuration. It outlines the workflow for setting up Chef including installing prerequisites, configuring a Chef server, uploading cookbooks, and using tools like Vagrant and knife plugins to test recipes locally and deploy to clouds.
Presentation delivered at LinuxCon China 2017.
Zephyr is an upstream open source project for places where Linux is too big to fit. This talk will overview the progress we've made in the first year towards the projects goals around incorporating best of breed technologies into the code base, and building up the community to support multiple architectures and development environments. We will share our roadmap, plans and the challenges ahead of the us and give an overview of the major technical challenges we want to tackle in 2017.
In any Cloud Native architecture there’s a seemingly endless stream of events that happen at each layer. These events can be used to detect abnormal activity and possible security incidents, as well as providing an audit trail of activity.
In this talk we’ll cover how we extended Falco to ingest events beyond just host system calls, such as Kubernetes audit events or even application level events. We will also show how to create Falco rules to detect behaviors in these new event streams. We show how we implemented Kubernetes audit events in Falco, and how to configure the event stream.
Configuration Management Tools on NX-OSCisco DevNet
A session in the DevNet Zone at Cisco Live, Berlin. On Cisco Nexus devices, configuration is performed using command-line interfaces (CLIs) that run only on the device. Configuration Management Tools allow you to automate the network devices configuration in the same way sysadmin have automated the server configuration. These tools include Puppet, Chef and Ansible. We will be introducing the concept of each of them, agent vs agent-less and demoing some use cases.
We will also describe some of the technology enablers like NX-API REST that allows you to enable configurations that would require issuing many CLI commands by combining configuration actions in relatively few HTTP/HTTPS operations."
Unikernel User Summit 2015: Getting started in unikernels using the rump kernelThe Linux Foundation
Justin Cormack's presentation at the Unikernel User Summit at Texas Linux Fest 2015. He discusses the basic principles and techniques for using Rump Kernels to power POSIXy workloads in a small, fast, and secure package.
Возможности интерпретатора Python в NX-OSCisco Russia
The document discusses a webinar presented by Cisco TAC Engineer Anton Tugai about the capabilities of the Python interpreter in NX-OS. Some key points:
- Tugai gave a presentation on trends in Cisco SDN and current solutions.
- The webinar covered an introduction to Python, how Python is integrated into NX-OS, examples, and a demonstration.
- Native Python interpreter is available on Nexus switches starting from certain software versions, allowing Python scripts to run directly on the switch and execute CLI commands.
Presentation given at the 2017 LinuxCon China
Unikernel is a novel software technology that links an application with OS in the form of a library and packages them into a specialized image that facilitates direct deployment on a hypervisor. Comparing to the traditional VM or the recent containers, Unikernels are smaller, more secure and efficient, making them ideal for cloud environments. There are already lots of open source projects like OSv, Rumprun and so on. But why these existing unikernels have yet to gain large popularity broadly? We think Unikernels are facing three major challenges: 1. Compatibility with existing applications; 2. Lack of production support (e.g. monitoring, debugging, logging); 3. Lack of compelling use case. In this presentation, we will review our investigations and exploration of if-how we can convert Linux as Unikernel to eliminate these significant shortcomings, plus some explorations of coordinating and cooperating with hypervisor.
OpenShift in your own backyard - DevConf CZ 2021Freddy Rolland
OpenShift in your own backyard
Installing OpenShift on your servers with Assisted Installer
OpenShift Container Platform is an open source enterprise-ready Kubernetes container platform.
There are multiple ways to use OpenShift, including in cloud provider environments such as Amazon Web Services, Google Cloud Platform or Microsoft Azure or on your own infrastructure like RHV, Openstack or Bare Metal.
Installing on bare metal servers or virtual machines can sometimes be hard. Having the ability to easily install OpenShift in your data center helps increase the productivity of the IT and Development teams.
The Assisted Installer is a SaaS solution that introduces a new way to deploy a new OpenShift cluster on bare metal basically by only booting the nodes that will be part of the cluster, with an ISO generated by a service hosted in cloud.redhat.com. The service will orchestrate the needed steps based on the user parameters and report about the installation progress. All that without the need of an additional bootstrap node.
In this session, we will explain about the Assisted Service flows and what are the network and hardware requirements, and the needed inputs from the user. We will discuss all the customizations available to the user, and about the possibility of running the Assisted Installer in a disconnected environment. Finally, we will do a demonstration showing how all come together to a running OpenShift cluster in your own backyard.
Try the Assisted Installer here:
https://cloud.redhat.com/openshift/assisted-installer/clusters
Presentation given at the 2017 LinuxCon China
With the booming of Container technology, it brings obvious advantages for cloud: simple and faster deployment, portability and lightweight cost. But the networking challenges are significant. Users need to restructure their network and support container deployment with current cloud framework, like container and VMs.
In this presentation, we will introduce new container networking solution, which provides one management framework to work with different network componenets through Open/friendly modelling mechnism. iCAN can simplify network deployment and management with most orchestration systems and a variety of data plane components, and design extendsible architect to define and validate Service Level Agreement(SLA) for cloud native applications, which is important factor for enterprise to deliver successful and stable service via containers.
A brief description of a software architecture based on golang micro services.
The keynote was shown during the Golangit meetup @ Codemotion Rome 2015 event on March 27th 2015.
MidoNet is an open source network operating system that provides software-defined networking and network virtualization capabilities. It features distributed logical switching, routing, firewalling, load balancing and tunneling using protocols like GRE and VXLAN. MidoNet integrates with OpenStack Neutron and has a REST API for configuration and management. It uses a distributed architecture with agents on each host controlling the Open vSwitch datapath and communicating with a central database for topology and configuration information. The MidoNet community is active on Slack, mailing lists, code reviews and documentation to support the project.
During the OpenStack Tokyo Summit we provided an overview on how Workday started the production deployment with a very robust and efficient CI/CD process that it explained here.
This document discusses deploying WSO2 middleware on Kubernetes. It provides an overview of Kubernetes architecture and components, and how various Kubernetes features like pods, replication controllers, services, and overlay networking are used. It also describes WSO2 Docker images, Carbon reference architectures for Kubernetes, and the deployment workflow. Monitoring of Kubernetes cluster health using tools like cAdvisor, Heapster, Grafana and InfluxDB is also covered briefly.
OpenStack Neutron: What's New In Kilo and a Look Toward Libertymestery
The document summarizes features of OpenStack Neutron networking in the Kilo and Liberty releases. Key points include: Neutron's mission to provide network abstraction; its history starting as Quantum; growth in deployments and rankings; new drivers, plugins, and advanced services in Kilo; plugin decomposition efforts; testing improvements; and new features planned for Liberty like QoS, LBaaS v2, and work on networking for containers and NFV. Looking ahead, the document discusses address scopes, routed networks, BGP announcements, service function chaining, and the OVN virtual networking project.
Load Balancing Applications on Kubernetes with NGINXAine Long
Slides from Michael Pleshavkov - Platform Integration Engineer, NGINX about HTTP load balancing on Kubernetes with NGINX. You will learn how to configure load balancing for a web application using a Kubernetes Ingress resource and how to deploy and use NGINX Ingress controller.
How to Integrate Kubernetes in OpenStack Meng-Ze Lee
The document discusses various open source projects for integrating Kubernetes and containers into OpenStack including:
- Kolla provides production-ready containers and deployment tools for operating OpenStack clouds using Kubernetes in a scalable and reliable way.
- Magnum allows deploying and managing container orchestration engines like Docker Swarm, Mesos and Kubernetes on OpenStack.
- Zun is an OpenStack service for managing containers on OpenStack using projects like Docker and Kuryr.
- Kuryr-Kubernetes provides networking between Kubernetes and OpenStack Neutron.
OVN is an open source virtual network solution for Open vSwitch that provides logical L2 and L3 networking, including logical switches, routers, security groups, and multiple tunneling protocols. It is designed to scale to thousands of hypervisors and VMs, improve performance over existing plugins, and integrate with OpenStack and other cloud management systems through its databases and daemons. OVN aims to become the default virtual network solution in OpenStack Neutron by replacing the existing OVS plugin.
This document summarizes discussions from the PTG-Denver meeting. It outlines the agenda which included an introduction to PTG, highlighting discussion topics, recapping accomplishments in the Pike release, and plans for ongoing work in the Queens release. Key topics discussed were skip-release upgrades, API-SIG, and accomplishments across various OpenStack projects including Neutron, Cinder, Nova, Ironic, Glance, and Kolla from Pike and planned work for Queens.
This document discusses using Chef and Vagrant to build cloud computing infrastructure. It introduces infrastructure as code and configuration tools like Chef for automating infrastructure provisioning and configuration. It outlines the workflow for setting up Chef including installing prerequisites, configuring a Chef server, uploading cookbooks, and using tools like Vagrant and knife plugins to test recipes locally and deploy to clouds.
Presentation delivered at LinuxCon China 2017.
Zephyr is an upstream open source project for places where Linux is too big to fit. This talk will overview the progress we've made in the first year towards the projects goals around incorporating best of breed technologies into the code base, and building up the community to support multiple architectures and development environments. We will share our roadmap, plans and the challenges ahead of the us and give an overview of the major technical challenges we want to tackle in 2017.
In any Cloud Native architecture there’s a seemingly endless stream of events that happen at each layer. These events can be used to detect abnormal activity and possible security incidents, as well as providing an audit trail of activity.
In this talk we’ll cover how we extended Falco to ingest events beyond just host system calls, such as Kubernetes audit events or even application level events. We will also show how to create Falco rules to detect behaviors in these new event streams. We show how we implemented Kubernetes audit events in Falco, and how to configure the event stream.
Configuration Management Tools on NX-OSCisco DevNet
A session in the DevNet Zone at Cisco Live, Berlin. On Cisco Nexus devices, configuration is performed using command-line interfaces (CLIs) that run only on the device. Configuration Management Tools allow you to automate the network devices configuration in the same way sysadmin have automated the server configuration. These tools include Puppet, Chef and Ansible. We will be introducing the concept of each of them, agent vs agent-less and demoing some use cases.
We will also describe some of the technology enablers like NX-API REST that allows you to enable configurations that would require issuing many CLI commands by combining configuration actions in relatively few HTTP/HTTPS operations."
Automation in Network Lifecycle Management - Bay Area Juniper MeetupJorge Bonilla
Automation can help organizations across the network lifecycle by simplifying operations, increasing control, standardizing processes, and reducing costs and remediation times. Juniper offers various automation building blocks like Network Director, Security Director, and open source tools. Case studies showed how automation helped provision thousands of devices for a restaurant chain faster and deploy port migrations between routers for an ISP more efficiently with less errors.
This document discusses configuring Cisco devices using Puppet and Chef automation tools. It provides an overview of:
- The benefits of automated configuration vs manual configuration such as reliability, auditing, and drift correction.
- How Puppet and Chef work by maintaining configuration state in code and transitioning systems from current to desired state in an idempotent way.
- Key components of Puppet like the Puppet master, catalogs, and Puppet agents. And key components of Chef like the Chef server, cookbooks, recipes, and Chef clients.
- Cisco's One-PK which provides an API and SDK for developing applications to control and configure Cisco devices, and how Puppet and Chef agents are
Exploring the Final Frontier of Data Center Orchestration: Network Elements -...Puppet
The document discusses network element automation using Puppet. It provides context on the challenges of manual network configuration including lack of agility, reliability issues from errors, and time spent on basic tasks. Puppet can automate network elements similar to how it automates servers, reducing errors and improving speed/productivity. The Cisco Nexus platform and NXAPI enable programmatic access for automation using Puppet through technologies like onePK and LXC containers running on the switch.
Foreman-and-Puppet-for-Openstack-Audo-Deploymentyating yang
The document discusses Foreman and Puppet for deploying OpenStack. It provides an introduction to Foreman and Puppet, and describes how they can be used together to automatically deploy and configure OpenStack on bare metal servers. The Foreman server acts as a Puppet master and PXE server, installing Ubuntu 14.04 on the bare metal nodes and configuring them using Puppet modules for OpenStack components. It outlines the network requirements and provides an example Puppet manifest for configuring OpenStack networks, services, and nodes.
Did you know that Ansible can automate network resources? Do you need a primer on getting started with Ansible to help automate your network resources? If so, this session is for you. This demo-based session walks through the configurations, templates, and processes of how to go from zero to a full, working configuration. We will also discuss how to maintain and update the environment. This simple walkthrough of the configurations, templates, and processes will start your journey to network automation.
This document discusses Juniper's automation tools and capabilities. It provides an overview of Juniper's automation offerings, including tools for build (provisioning), configure (configuration), and collect (monitoring) phases. Example use cases for enterprise IT and cloud automation are also presented. Competitive advantages over Cisco and Arista are highlighted, such as Juniper providing a common set of automation tools across all its products and rich off-box functionality using Python libraries.
- The document discusses Cisco's strategy around OpenStack and cloud computing. It outlines Cisco's role as an OpenStack Foundation board member and their focus on networking, compute, and dashboard services.
- Cisco provides the Cisco OpenStack Installer to help customers easily deploy an OpenStack cloud. The installer automates the installation process and includes tools to manage and monitor the cloud.
- The document also discusses Cisco's networking plugins and drivers for OpenStack, including plugins for Nexus switches that enable dynamic provisioning and management of VLANs.
Immediate download DevOps for networking boost your organization's growth by ...kapuilakna
Download DevOps for networking boost your organization's growth by incorporating networking in the DevOps culture Armstrong instantly post-payment at https://textbookfull.com/product/devops-for-networking-boost-your-organizations-growth-by-incorporating-networking-in-the-devops-culture-armstrong. Additional textbooks and ebooks available in https://textbookfull.com Get PDF of full chapter.
This document discusses automation from physical infrastructure to network security and DevOps using Ansible. It begins with an introduction and overview, then discusses:
- How Ansible can automate tasks across multiple platforms including cloud, Windows, virtualization, containers, network devices and more using its extensive module library.
- Examples of using Ansible playbooks to automate tasks like deploying applications, managing configurations, continuous delivery, security and compliance on servers, infrastructure, applications and other IT components.
- How Ansible's automation engine works using concepts like playbooks, modules, plugins, inventories to declaratively define the desired state and automate repetitive tasks.
3 Years of Puppet at Cisco: The Secrets to Our Success - PuppetConf 2013Puppet
"3 Years of Puppet at Cisco: The Secrets to Our Success" by Keith Chambers and Ryan Uber, Cisco WebEx.
Presentation Overview: WebEx Social (WxS) is an enterprise social networking product by Cisco. Customers can subscribe to WxS as a cloud service or they can purchase a license and run WxS on-premise. Puppet is at the core of our technology stack that includes MongoDB, Solr, RabbitMQ, memcached, ZooKeeper, Nagios, and Graphite. We love Puppet. We pioneered embedding Puppet in Cisco products 3 years ago and have been tireless advocates ever since. We have learned valuable technology/process/culture lessons and developed reusable patterns for: - Scaling to thousands hosts with Puppet - Ensuring host upgrades are 100% reliable - Avoiding Puppet codebase spaghetti - Detecting and eliminating system drift at scale - Creating a culture of shared responsibility through architecture design.
Speaker Bio: Keith Chambers,Technical Leader, Cisco
Keith Chambers is the platform architect for the WebEx Social product at Cisco. He joined Cisco in 2000 and is based out of Seattle Washington. In his current role, Keith leads the engineering team responsible for deploying and operating WebEx Social. Prior to joining the WebEx Social team, Keith worked in Cisco's Unified Communication Business Unit and Technical Assistance Center. Keith was instrumental in the successful virtualization of Cisco's entire Unified Communications portfolio and spoke at VMworld 2009 on the topic of "virtualizing real-time applications". VMware presented Keith with their prestigious vExpert award in 2009. Outside of Cisco, Keith is a house deejay and producer. He enjoys traveling the world and spending time with his family, friends, and beautiful wife Jackie.
Automating with NX-OS: Let's Get Started!Cisco DevNet
A session in the DevNet Zone at Cisco Live, Berlin. Cisco's flagship data center platform, the Nexus series of switches, has a variety of programming protocols to offer. This session will provide participants with an overview and code examples on various protocols: * NX-API * XMPP * Netconf
Switch as a Server - PuppetConf 2014 - Leslie CarrCumulus Networks
Leslie Carr is an operations engineer at Cumulus Networks, which develops Cumulus Linux, a Debian-based network operating system that allows network switches to be managed like servers. Cumulus Linux uses ONIE to boot and install the OS image over the network in a manner similar to how a server OS is installed using PXE. It supports zero-touch provisioning (ZTP) using scripts to automate configuration of networking services like Puppet. Ifupdown2 is Cumulus Linux's network interface manager that handles dependencies and allows incremental configuration changes with minimal disruption.
Complete Download DevOps for networking boost your organization's growth by i...raiyaalaiaya
Get DevOps for networking boost your organization's growth by incorporating networking in the DevOps culture Armstrong instantly by making a payment at https://textbookfull.com/product/devops-for-networking-boost-your-organizations-growth-by-incorporating-networking-in-the-devops-culture-armstrong. Discover additional textbooks and ebooks in https://textbookfull.com Download full PDF chapter.
This document provides an introduction and overview of Ansible automation from physical to NetSecDevOps. It discusses how Ansible provides simple yet powerful agentless deployment of applications and management of configurations. It is human-readable automation that allows entire teams to use and contribute. Ansible has cross-platform support without agents and uses OpenSSH, WinRM, APIs or Netconf. More than 1650 modules are included to automate tasks across clouds, virtualization, containers, networks, notifications and more. Playbooks ensure perfect application description and version control. Dynamic inventories capture servers regardless of infrastructure. Ansible allows automation from development to operations.
Network Automation With Ansible 1st Edition by Jason Edelman ISBNvildanammr
Network Automation With Ansible 1st Edition by Jason Edelman ISBN
Network Automation With Ansible 1st Edition by Jason Edelman ISBN
Network Automation With Ansible 1st Edition by Jason Edelman ISBN
Considerations for Operating an OpenStack CloudAll Things Open
All Things Open 2014 - Day 2
Thursday, October 23rd, 2014
Mark Voelker
Technical Leader with Cisco
Cloud/OpenStack
Considerations for Operating an OpenStack Cloud
Cumulus Linux supports great networking, what’s next? Matt Peterson (@dorkmatt) our resident expert from the office of the CTO shares his previous experience, his views on devops, and how Cumulus Networks makes it easier to manage networks with ONIE, ZTP and no CLI! “Devops is a lifestyle, shared responsibility”. With Linux as the networks OS, “it’s all just one apt-get away!”
Automating Software Development Life Cycle - A DevOps ApproachAkshaya Mahapatra
The document discusses DevOps and provides an overview of the key concepts. It describes how DevOps aims to bring development, operations, and business teams together through automating processes, continuous monitoring, and breaking down silos between teams. The document then covers various DevOps tools and technologies like version control systems, build tools, configuration management, virtualization, and continuous integration/deployment practices.
Enterprise-Grade Trust: Collaboration Without CompromiseRobb Boyd
In today’s agile work environment, customers need to collaborate in real time with partners, vendors, and customers, and they want the best collaboration tools possible. At the same time, they’re cognisant of potential accidental or intentional misuse of data and malicious attacks – and the ramifications they can have for their company’s finances and reputation.
Cisco provides best-in-class collaboration tools with true end-to-end encryption that enable secure cross-company collaboration. Find out more about the six considerations for collaboration security and the new Cisco Webex Extended Security Pack – which provides a full-functionality Cisco Cloudlock cloud access security broker for Webex Teams with native Webex anti-malware capabilities powered by Cisco Talos ClamAV.
Resources:
TechWiseTV: http://cs.co/9009DzrjN
TechWiseTV Workshop - Q&A - Cisco Catalyst 9600: Deep Dive and Design Conside...Robb Boyd
Cisco Catalyst 9600 Series Switches are the next-generation purpose-built 40/100G modular core/aggregation platform, providing resiliency at scale with the industry’s most comprehensive security while allowing the business to grow at a low total operational cost.
The Cisco Catalyst 9606R is a 6-slot 8RU chassis ready to support a wired switching capacity of up to 25.6 Tbps, with up to 6.4 Tbps of bandwidth per slot. Some salient features of the Cisco Catalyst 9606R chassis are:
- Supports a nonblocking 40/100G Quad Small Form-Factor Pluggable (QSFP+, QSFP28) line card
- Supports a line-rate 1/10/25G SFP and Enhanced SFP (SFP, SFP+, SFP28) line card
- Optimized for the enterprise with efficient side-to-side airflow
- Front accessibility for all removable components, such as the supervisor, line cards, power supply, and fan tray
- Dual accessible fan tray for easy removal
- Embedded RFID tag for easy asset tracking
TechWiseTV Workshop: Cisco Catalyst 9600: Deep Dive and Design ConsiderationsRobb Boyd
Cisco Catalyst 9600 Series Switches are the next-generation purpose-built 40/100G modular core/aggregation platform, providing resiliency at scale with the industry’s most comprehensive security while allowing the business to grow at a low total operational cost.
The Cisco Catalyst 9606R is a 6-slot 8RU chassis ready to support a wired switching capacity of up to 25.6 Tbps, with up to 6.4 Tbps of bandwidth per slot. Some salient features of the Cisco Catalyst 9606R chassis are:
- Supports a nonblocking 40/100G Quad Small Form-Factor Pluggable (QSFP+, QSFP28) line card
- Supports a line-rate 1/10/25G SFP and Enhanced SFP (SFP, SFP+, SFP28) line card
- Optimized for the enterprise with efficient side-to-side airflow
- Front accessibility for all removable components, such as the supervisor, line cards, power supply, and fan tray
- Dual accessible fan tray for easy removal
- Embedded RFID tag for easy asset tracking
Resources:
TechWiseTV: http://cs.co/9009DzrjN
With users expecting an immersive experience, and with IoT becoming the new mobile, we are more dependent on Wi-Fi than ever before. The Cisco Catalyst 9100 Access Points, powered by Wi-Fi 6 (802.11ax) technology and supporting Cisco’s intent-based networking architecture, are ready for the growing user expectations, IoT devices, and next-generation cloud-driven applications. Cisco’s first Wi-Fi 6 access point can handle the increased mobile traffic as well as support IoT at scale. It has superior RF innovations and will expand wireless access with intelligence to provide a secure, reliable, high-quality wireless experience for all networks.
TechWiseTV Workshop - Q&A - Application Hosting on the Cisco Catalyst 9000 Sw...Robb Boyd
The document summarizes questions asked during a TechWiseTV workshop on application hosting on the Cisco Catalyst 9000 switching family. It provides answers to two questions: 1) Docker Hub software comes from various submitters so users must evaluate security based on labels and open source reviews. 2) Double app hosting is not supported on the Cisco Catalyst 9200 Series and is only available starting from the Cisco Catalyst 9300 Series.
With users expecting an immersive experience, and with IoT becoming the new mobile, we are more dependent on Wi-Fi than ever before. The Cisco Catalyst 9100 Access Points, powered by Wi-Fi 6 (802.11ax) technology and supporting Cisco’s intent-based networking architecture, are ready for the growing user expectations, IoT devices, and next-generation cloud-driven applications. Cisco’s first Wi-Fi 6 access point can handle the increased mobile traffic as well as support IoT at scale. It has superior RF innovations and will expand wireless access with intelligence to provide a secure, reliable, high-quality wireless experience for all networks.
Resources:
Watch the related TechWiseTV episode: http://cs.co/9006ELWE6
TechWiseTV: http://cs.co/9009DzrjN
TechWiseTV Workshop: Application Hosting on Catalyst 9000 Series SwitchesRobb Boyd
Watch the REPLAY right now: http://bit.ly/2YoLbt3
Enterprise networks are now dealing with massive volumes of data, with a critical need to collect and analyze this data to respond faster and deliver insightful context. Traditional approaches, in which data is processed in remote servers, will no longer work. Data can burden the network unless some context is known. Edge computing can greatly reduce the data sent to the cloud or a remote server. Collecting and analyzing the data at the edge and making decisions locally rather than in centralized servers significantly reduces the latency and bandwidth of the network.
Powered by an x86 CPU, the application hosting solution on the Cisco Catalyst 9000 switching family provides the intelligence required at the edge. Native Docker engine support on the switches will enable users to build and bring their own applications without additional packaging. Cisco DNA Center will provide consistent workflows to manage the entire application lifecycle across multiple Cisco Catalyst 9000 switches through the App Hosting dashboard.
Resources:
Watch the related TechWiseTV episode: http://cs.co/9001EIbih
TechWiseTV: http://cs.co/9009DzrjN
The document is a Q&A session on Cisco's SD-WAN security capabilities. Questions covered include how SD-WAN handles network access control, quality of service, central management software, integration with other Cisco products, differences compared to dedicated firewalls, hardware options for different site sizes, scalability, routing protocols supported, intrusion protection, and centralized management of security policies.
Technical Overview of Cisco Catalyst 9200 Series SwitchesRobb Boyd
TechWiseTV's Cisco Container Platform live workshop took place on July 18th.
For the first time in the industry, a single family of fixed, stackable, and modular switches are running on the same IOS-XE operating system along with a common ASIC.
Cisco’s Catalyst 9200 rounds out the lower end of its incredible Catalyst 9000 family of switches. The 9200 is designed for small, medium, and branch deployments, providing greater modularity, redundancy, and stackability than the Catalyst 2960 it replaces.
Register now.
The document discusses Cisco's Container Platform and provides the following key points:
1. Cisco's Container Platform provides a turnkey solution for production-grade Kubernetes container environments that is easy to acquire, deploy and manage on hybrid cloud infrastructures.
2. It features native Kubernetes integration that is 100% upstream compatible, integrated networking, management and security capabilities, and support for AI/ML workloads.
3. The platform architecture includes hardware from Cisco (UCS servers, Nexus switches), virtualization software (VMware, HyperFlex), and container-specific software like Kubernetes, Istio and Prometheus for orchestration, networking and monitoring of container workloads.
TechWiseTV Workshop: Improving Performance and Agility with Cisco HyperFlexRobb Boyd
Find out how organizations like yours are deriving business value from the HyperFlex HCI solution. Join us for a deep dive and Q&A at the TechWiseTV workshop.
TechWiseTV Hyperflex 4.0 Episode: http://cs.co/9009EW2Td
Today’s multicloud WAN environment is not only complicated–it can expose your business to an ever–expanding threat landscape. Learn how to provide consistent security across clouds, branches, and users. http://bit.ly/2DWBBX8
TechWiseTV Workshop: Cisco Catalyst 9800 Series Wireless ControllerRobb Boyd
This document discusses Cisco's Catalyst 9800 Wireless Controller. It introduces the Catalyst 9800 series, which includes the C9800-40 and C9800-80 appliances. The C9800-80 can support up to 6,000 access points and 64,000 clients, while the C9800-40 can support up to 2,000 access points and 32,000 clients. The document also discusses the Cisco Catalyst 9800 Wireless Controller for Cloud and for Switch, which embed the wireless capabilities on switches. It highlights features like seamless software updates, high availability, and support for technologies like SD-Access, ETA, and wireless assurance.
Protect Kubernetes Environments with Cisco Stealthwatch CloudRobb Boyd
Jeff Moncrief discusses how Stealthwatch Cloud provides visibility, threat identification, and network compliance for Kubernetes environments. Stealthwatch is deployed as a POD application on each node to create network telemetry of all POD to POD traffic and report it to Stealthwatch Cloud, giving complete visibility into traffic in the Kubernetes cluster. The solution deploys as a Pod and integrates with the node-level network layer to provide visibility, baselining, and anomaly detection into container and pod communications.
Incredible Compute Density: Cisco DNA Center Platform: Digging Deeper with APIsRobb Boyd
Learn more on getting hands-on with Cisco DNA Center Platform APIs. Join us as we go over the brand new DNA Center Platform and show you how to start integrating and developing your own applications on DNA Center. The possibilities are endless!
Watch the replay: http://cs.co/9000DCie4
In today’s digital economy, getting ahead means crunching a lot of data. That’s why businesses of all sizes and industries are investing in high-performance computing. However, the last thing IT needs is another tech silo to manage.
Fortunately, the new Cisco UCS C4200 Series chassis and C125 M5 server node help you scale out compute-intensive workloads with ease—with the network fabric you already have. This TechWiseTV Workshop will get you up to speed fast.
Resources:
Watch the related TechWiseTV episode: http://cs.co/9006DAVPC
TechWiseTV: http://cs.co/9009DzrjN
Watch the replay: http://cs.co/9000DCie4
In today’s digital economy, getting ahead means crunching a lot of data. That’s why businesses of all sizes and industries are investing in high-performance computing. However, the last thing IT needs is another tech silo to manage.
Fortunately, the new Cisco UCS C4200 Series chassis and C125 M5 server node help you scale out compute-intensive workloads with ease—with the network fabric you already have. This TechWiseTV Workshop will get you up to speed fast.
Resources:
Watch the related TechWiseTV episode: http://cs.co/9006DAVPC
TechWiseTV: http://cs.co/9009DzrjN
This document discusses Cisco's new Flexible Consumption Model (FCM) for software licensing. FCM aims to provide more flexibility and lower costs by allowing customers to pay for software licenses as needed rather than requiring large upfront investments. Key aspects of FCM include pay-as-you-grow licensing, global pooling of licenses, and investment protection through software portability. FCM is supported on Cisco's core routing platforms like the ASR 9000 and will provide benefits like reduced total cost of ownership through more efficient license usage and alignment of network growth with demand.
TechWiseTV Workshop: Q&A Cisco Hybrid Cloud Platform for Google CloudRobb Boyd
Cisco and Google Cloud experts join TechWiseTV to demonstrate how you can use the Cisco Hybrid Cloud Platform for Google Cloud as a DevOps platform that works consistently across data center and public cloud environments. You’ll learn how to take advantage of containers, microservices, public cloud toolsets, and other modern cloud development innovations while having the flexibility to deploy your applications wherever they run best.
With integrated connectivity, security, management, and control, your applications will operate consistently from prem to cloud and back again.
Resources:
Watch the replay: http://cs.co/9007DawLd
TechWiseTV: http://cs.co/9009DzrjN
"AI in the browser: predicting user actions in real time with TensorflowJS", ...Fwdays
With AI becoming increasingly present in our everyday lives, the latest advancements in the field now make it easier than ever to integrate it into our software projects. In this session, we’ll explore how machine learning models can be embedded directly into front-end applications. We'll walk through practical examples, including running basic models such as linear regression and random forest classifiers, all within the browser environment.
Once we grasp the fundamentals of running ML models on the client side, we’ll dive into real-world use cases for web applications—ranging from real-time data classification and interpolation to object tracking in the browser. We'll also introduce a novel approach: dynamically optimizing web applications by predicting user behavior in real time using a machine learning model. This opens the door to smarter, more adaptive user experiences and can significantly improve both performance and engagement.
In addition to the technical insights, we’ll also touch on best practices, potential challenges, and the tools that make browser-based machine learning development more accessible. Whether you're a developer looking to experiment with ML or someone aiming to bring more intelligence into your web apps, this session will offer practical takeaways and inspiration for your next project.
Marko.js - Unsung Hero of Scalable Web Frameworks (DevDays 2025)Eugene Fidelin
Marko.js is an open-source JavaScript framework created by eBay back in 2014. It offers super-efficient server-side rendering, making it ideal for big e-commerce sites and other multi-page apps where speed and SEO really matter. After over 10 years of development, Marko has some standout features that make it an interesting choice. In this talk, I’ll dive into these unique features and showcase some of Marko's innovative solutions. You might not use Marko.js at your company, but there’s still a lot you can learn from it to bring to your next project.
New Ways to Reduce Database Costs with ScyllaDBScyllaDB
How ScyllaDB’s latest capabilities can reduce your infrastructure costs
ScyllaDB has been obsessed with price-performance from day 1. Our core database is architected with low-level engineering optimizations that squeeze every ounce of power from the underlying infrastructure. And we just completed a multi-year effort to introduce a set of new capabilities for additional savings.
Join this webinar to learn about these new capabilities: the underlying challenges we wanted to address, the workloads that will benefit most from each, and how to get started. We’ll cover ways to:
- Avoid overprovisioning with “just-in-time” scaling
- Safely operate at up to ~90% storage utilization
- Cut network costs with new compression strategies and file-based streaming
We’ll also highlight a “hidden gem” capability that lets you safely balance multiple workloads in a single cluster. To conclude, we will share the efficiency-focused capabilities on our short-term and long-term roadmaps.
Adtran’s new Ensemble Cloudlet vRouter solution gives service providers a smarter way to replace aging edge routers. With virtual routing, cloud-hosted management and optional design services, the platform makes it easy to deliver high-performance Layer 3 services at lower cost. Discover how this turnkey, subscription-based solution accelerates deployment, supports hosted VNFs and helps boost enterprise ARPU.
AI Emotional Actors: “When Machines Learn to Feel and Perform"AkashKumar809858
Welcome to the era of AI Emotional Actors.
The entertainment landscape is undergoing a seismic transformation. What started as motion capture and CGI enhancements has evolved into a full-blown revolution: synthetic beings not only perform but express, emote, and adapt in real time.
For reading further follow this link -
https://akash97.gumroad.com/l/meioex
Offshore IT Support: Balancing In-House and Offshore Help Desk Techniciansjohn823664
In today's always-on digital environment, businesses must deliver seamless IT support across time zones, devices, and departments. This SlideShare explores how companies can strategically combine in-house expertise with offshore talent to build a high-performing, cost-efficient help desk operation.
From the benefits and challenges of offshore support to practical models for integrating global teams, this presentation offers insights, real-world examples, and key metrics for success. Whether you're scaling a startup or optimizing enterprise support, discover how to balance cost, quality, and responsiveness with a hybrid IT support strategy.
Perfect for IT managers, operations leads, and business owners considering global help desk solutions.
Unlock your organization’s full potential with the 2025 Digital Adoption Blueprint. Discover proven strategies to streamline software onboarding, boost productivity, and drive enterprise-wide digital transformation.
State-Dependent Conformal Perception Bounds for Neuro-Symbolic Verification o...Ivan Ruchkin
A poster presented by Thomas Waite and Radoslav Ivanov at the 2nd International Conference on Neuro-symbolic Systems (NeuS) in May 2025.
Paper: https://arxiv.org/abs/2502.21308
Abstract: It remains a challenge to provide safety guarantees for autonomous systems with neural perception and control. A typical approach obtains symbolic bounds on perception error (e.g., using conformal prediction) and performs verification under these bounds. However, these bounds can lead to drastic conservatism in the resulting end-to-end safety guarantee. This paper proposes an approach to synthesize symbolic perception error bounds that serve as an optimal interface between perception performance and control verification. The key idea is to consider our error bounds to be heteroskedastic with respect to the system's state -- not time like in previous approaches. These bounds can be obtained with two gradient-free optimization algorithms. We demonstrate that our bounds lead to tighter safety guarantees than the state-of-the-art in a case study on a mountain car.
Protecting Your Sensitive Data with Microsoft Purview - IRMS 2025Nikki Chapple
Session | Protecting Your Sensitive Data with Microsoft Purview: Practical Information Protection and DLP Strategies
Presenter | Nikki Chapple (MVP| Principal Cloud Architect CloudWay) & Ryan John Murphy (Microsoft)
Event | IRMS Conference 2025
Format | Birmingham UK
Date | 18-20 May 2025
In this closing keynote session from the IRMS Conference 2025, Nikki Chapple and Ryan John Murphy deliver a compelling and practical guide to data protection, compliance, and information governance using Microsoft Purview. As organizations generate over 2 billion pieces of content daily in Microsoft 365, the need for robust data classification, sensitivity labeling, and Data Loss Prevention (DLP) has never been more urgent.
This session addresses the growing challenge of managing unstructured data, with 73% of sensitive content remaining undiscovered and unclassified. Using a mountaineering metaphor, the speakers introduce the “Secure by Default” blueprint—a four-phase maturity model designed to help organizations scale their data security journey with confidence, clarity, and control.
🔐 Key Topics and Microsoft 365 Security Features Covered:
Microsoft Purview Information Protection and DLP
Sensitivity labels, auto-labeling, and adaptive protection
Data discovery, classification, and content labeling
DLP for both labeled and unlabeled content
SharePoint Advanced Management for workspace governance
Microsoft 365 compliance center best practices
Real-world case study: reducing 42 sensitivity labels to 4 parent labels
Empowering users through training, change management, and adoption strategies
🧭 The Secure by Default Path – Microsoft Purview Maturity Model:
Foundational – Apply default sensitivity labels at content creation; train users to manage exceptions; implement DLP for labeled content.
Managed – Focus on crown jewel data; use client-side auto-labeling; apply DLP to unlabeled content; enable adaptive protection.
Optimized – Auto-label historical content; simulate and test policies; use advanced classifiers to identify sensitive data at scale.
Strategic – Conduct operational reviews; identify new labeling scenarios; implement workspace governance using SharePoint Advanced Management.
🎒 Top Takeaways for Information Management Professionals:
Start secure. Stay protected. Expand with purpose.
Simplify your sensitivity label taxonomy for better adoption.
Train your users—they are your first line of defense.
Don’t wait for perfection—start small and iterate fast.
Align your data protection strategy with business goals and regulatory requirements.
💡 Who Should Watch This Presentation?
This session is ideal for compliance officers, IT administrators, records managers, data protection officers (DPOs), security architects, and Microsoft 365 governance leads. Whether you're in the public sector, financial services, healthcare, or education.
🔗 Read the blog: https://nikkichapple.com/irms-conference-2025/
Protecting Your Sensitive Data with Microsoft Purview - IRMS 2025Nikki Chapple
TechWiseTV Workshop: Open NX-OS and Devops with Puppet Labs
1. TECHNOLOGY YOU CAN USE, FROM GEEKS YOU CAN TRUST!
Robb Boyd @robbboyd techwisetv.com
2. TechWiseTV Workshop -Accelerate
Your IT Tasks with Open NX-OS
Shane Corban Product Manager Cisco
Carl Caum Technical Marketing Puppet
December 10th 2015
3. • Open NX-OS Introduction & Level Set
• Open NX-OS Linux Architecture & Capabilities
• Open NX-OS Devops Tool Integration
• Open NX-OS Programmability Options
Agenda
4. What problem are we trying to solve?
“I can spin up servers in minutes with my Configuration Management
Tool workflows, why does it take orders of magnitude more to spin
up and affect change on my Network Elements?”
IT Organizations adopting DevOps processes and tools deploy 30x
more frequently with 200x shorter lead times; they have 60x fewer
failures and recover 168x faster.
7. • Open NX-OS Introduction & Level Set
• Open NX-OS Linux Architecture & Capabilities
• Open NX-OS Devops Tool Integration
• Open NX-OS Programmability Options
Agenda
8. Off the shelf Applications without modifications
Leverage ability to install third party packages
in Secure Guestshell or natively in NX-OS kernel
• Install all third party applications
(Puppet/Chef, Splunk/Nagios/Ganglia) as RPMs
Daemon managed via standard
Linux interfaces
Built-in support for YUM package
manager
Patching and upgrade using standard
rpm/yum workflows
• NX-OS processes(BGP) can be
upgraded/patched via “yum update”
Open NX-OS Linux Based Architecture
C app with
standard Linux
constructs
Open Embedded
64 bit Build
Environment
RPM
Upload
Linux Daemon
Linux Kernel
Raw Socket
Netdevs
Libpcap
init.d
Monitoring
server
ASIC
Target Switch
Package as RPM
Build Server
Cisco/Local
Repository
RPM Local
Repository
9. Kernel (cgroup, LSM)
NX-OS root file system
Native
Linux
Processes
Native
Linux
Processes
Bash Bash
Native
Linux
Processes
Native
Linux
Processes
Native
Linux
Processes
Guest root file system
Pkg-1.rpm Pkg-2.rpm
Pkg-2.rpm Pkg-3.rpm
Ns=globalNs=global Ns=guestshell Ns=guestshell Ns=guestshellNs=global Ns=guestshell
Native Shell, RPM +
Containers
• Secure common distribution CentOS7 environment in which customer may install their own custom
applications
• Use “guestshell resize” command to restrict CPU/memory/rootfs resources available to Guest
Shell
Open NX-OS: Third Party Application Integration
Secure Guest Shell
Pkg-4.rpm
10. • Open NX-OS Introduction & Level Set
• Open NX-OS Linux Architecture & Capabilities
• Open NX-OS Devops Tool Integration
• Open NX-OS Programmability Options
Agenda
11. https://opennxos.cisco.com
Built on Flexible and Modular Linux
Shipped
Q3CY15
Reduce OPEX and Enable Rapid Application Deployment using DevOps Model
OPEN
NXOS
KEY BENEFITS
Reduced maintenance windows, higher availability
enabled by non-disruptive RPM-based live patching and
process restart
Choice of DevOps automation and monitoring tools,
enabling rapid application deployment and enhanced
visibility
Integrate natively and securely using common DevOps
configuration management tools – Chef/Puppet/Ansible
Enable greater network visibility using industry standard
analytics tools – Splunk/Ganglia/Nagios
Flexibility to integrate off-the-shelf and custom
applications using the Linux SDK
12. Automating Device Operational Lifecycle
Day 0
Install
Day 1
Configure
& Operate
Day 2
Optimize
Day N
Upgrade
GOAL:
Get a device/s into an
operational state?
CHALLENGE:
“I can bring up a server in
5 minutes, but a switch takes
2 days…”
GOAL:
Get the network into an
operational state?
CHALLENGE:
Automation of configuration
for servers and applications
is relatively easy how can my
network be as easy?
GOAL:
Continuously upgrade
features within my network,
incrementally and safely?
CHALLENGE:
I can dynamically patch Linux
with automated tools; why
can’t I do the same with my
network devices?
GOAL:
Add dynamic services, optimize
behavior and trouble shooting?
(Includes information from
applications and the network
correlated).
CHALLENGE:
My compute and application
platforms are open and
extensible why is my network
not?
Ignite &
POAP/PXE
Ansible,
Puppet and Chef
NX-API REST
Ansible
Puppet and Chef
and
Guestshell
Modular NxOS
Patachablity,
ISSU
Puppet/Chef/Ansible
NX-API REST ensure
model compliance
Guestshell,
Splunk/Nagios
13. https://github.com/datacenter/ignite
Enabling Day Zero Provisioning with Open Source Tools
PXE/iPXE
Automate day zero provisioning with open source,
standards-based tools
Provides GUI for topology and configuration
design packaged as an OVA, support for KVM or
VMware
Acts as an image and configuration template store
for POAP
Use python script extensions for third party
application installation and post boot
customizations
Operational Choice: Supported across Nexus 3K
& 9K, bootstrap NX-OS using existing compute
PXE/iPXE servers for switching infrastructure
Shipped
Q3CY15
Simplify Operations, Eliminate Provisioning Errors, Reduce Cost with
OPEN
NXOS
14. Puppet/Chef Master Server
Native Linux Service
/etc/init.d/puppet.d & chef.d
NX-OS
Cisco Puppet/Chef Agent
NX-APICisco Puppet/Chef
Module(Incl Utility
GEMs)
Linux Software
Repository
Server
Yum/RPM install
puppet/chef.rpm
• Support for Puppet, Chef and Ansible
• Cisco Puppet Agent RPM/software package posted
to Puppet forge and Open Sourced to Github
• Install Cisco Puppet Module on Puppet Master
• Yum install Puppet Agent rpm on switches
• Switch Agent periodically will poll Puppet/Chef
Master for updated catalog/cookbooks and attempt
to converge switch to desired state
CM Agent Based Tool Architecture –
Chef/Puppet
15. Type/Provider Roadmap:
VXLAN EVPN – Q1CY16
Virtual Port Channel – Q2CY16
Segment Routing – Q3CY16
Open NX-OS Puppet/Chef
Cisco Chef & Puppet Agent Types/Provider Support
Chef/Puppet Agent Types/Providers
cisco_vtp
cisco_tacacs_server
cisco_tacacs_server_host
cisco_snmp_server
cisco_snmp_community
cisco_snmp_group
cisco_ospf
cisco_ospf_vrf
cisco_vlan
cisco_bgp
cisco_bgp_vrf
cisco_interface
cisco_interface_ospf
cisco_interface_vlan
• Agents RPM installed natively on switch, using agent RPM or
within isolated guestshell environment
• Supported Agent Types/Providers for Camden
• Cisco Network Element Chef/Puppet module code published on
Git and Forge/Supermarket
• Agent is extensible beyond what we support by default by
using the utility classes OR:
• Agent is also extensible by embedding CLI using
cisco_command_config resource construct
18. • Deliver value to business
faster, more reliably
• Meet compliance & audit
requirements
• Adopt & mature DevOps
practices & supporting
technologies
• Adopt new technology while
supporting & sun-setting old
• Too much fire fighting
• Scripting & manual
processes aren’t cutting it
• Provisioning systems & apps
is manual, costly
• Unexpected configuration
changes
• Difficult to keep up with
demands from the business
Common Challenges. Critical Initiatives.
19. Our software
automates the provisioning,
configuration &
ongoing management
of your network & the applications,
services & software running on them.
22. Where To Start
Infrastructure as Code
Version
Control
Configuration
Management
Peer Review
Collaboration IterationFast Feedback Visibility
Continuous
Delivery
Automated
Testing &
Deployments
23. How we help:
• Apply DevOps practices to networking
• Manage the network just like compute
• Unify change insight & management for all
infrastructure at all levels of the application stack
A Unified Platform for Your Infrastructure
Network
Compute
24. • Use Case 1.1: Automatically deploying
configuration based on roles
• Use Case 1.2: Understanding change as it occurs
on the network
Demo 1 – Automating Open NX-OS with Puppet
25. • All CM tools enforce model compliance and eliminate
configuration drift
• All CM tools provide audit logging of change
• All CM tools support concept of no-op runs
Configuration Managements Tools
Agent v/s Agent-less Architecture
• Agent based CM are “pull based”
• Agent on managed device connects
with master for config information
periodically
• Changes made on master are pulled
down and executed
• Operations are Idempotent
• Puppet and Chef are agent based
• Agent-less CM are “push based”
• CM scripts are run on the master
• Scripts connect to the managed
device and execute the tasks
• No timer, control lies with the master
• Operations are Idempotent
• Ansible is agent-less
26. Ansible Enterprise
Automation
Simple. Agentless. Powerful.
Control. Security. Delegation.
/Uses OpenSSH & NX-
API
/No extra code to manage
/Ready for cloud-scale
/Uses YAML for playbooks
/No special coding skills
needed
/Fast learning curve
/Tasks in playbooks executed
in order
/App deployment
/Orchestration
/Configuration
management
/Eliminates Config Drift
/Role-Based Access Control
/Delegation of
credentials/keys
/Audit trail for automation
/Centralized job runs
/Job scheduling
/Automation dashboard
/Push-button job execution
/Portal mode for delegation
/REST API for integration
Ansible
Open Source
Ansible
Tower
Ansible 2.0 Release with
Tower in Q1CY16
includes complete
support for Nexus
platforms
28. Open NX-OS Virtual Nexus 9000
• Use with Beaker/KitchenCI for
ongoing application integration testing
• Test more often and catch errors early
and often prior to live deployment
• Integrated support for Vmware
Fusion, ESX 5.1/5.5 and
KVM(QCOW2), VMDK(Virtual Box)
• Available under controlled availability
– email [email protected] with
CCO ids for access
• Targeting Public Release CY16 of
v9K, with ViRL integration
• Feature Parity 7.0(3)I2(2)
v9k Test Fabric
CI Tools
29. • Use Case 2.1: Provisioning new tenant workloads
for the network takes an exhorbitant amount of
time manually, use Ansible and Open NX-OS to
reduce this from days to mins
Demo 2 – Open NX-OS Ansible Demo
30. • Open NX-OS Introduction & Level Set
• Open NX-OS Linux Architecture & Capabilities
• Open NX-OS Devops Tool Integration
• Open NX-OS Programmability Options
Agenda
31. https://opennxos.cisco.com
Customized Automation with NX-API REST
Shipped
Q3CY15
Shorten Network Deployment Times, Reduce Human Error, Build Flexible, Responsive
Automation Architecture
OPEN
NXOS
KEY BENEFITS
Model Based – Provides a scalable, object model based
architecture for custom automation tool development
Secure - Access to all network objects is authenticated,
encrypted and authorized with AAA (Tacacs+, Radius)
Change Based Notifications - NX-API REST
applications can subscribe to events from network
objects without redundant polling, providing:
Application performance benefits
Application processing time reduction
NX-API contains a modeled representation of critical NX-
OS features in a tree based hierarchical model
Objects are modified and queried using HTTP REST API
calls
System
Router-ID
PeersEth1/1
Eth1/2..
ARP Entries
Physical BGP
Object Store
• class
• dn: distinguished name(url)
• statistics
• Properties(xml/json)
• object prop1
• object prop2
…
MIT
ARP
Publisher
Subscribe
Any Updates –
BGP Object
Push Notification
– BGP Peer Down!
32. What are we trying to solve with NX-API REST?
Limitation with CLI Modeled Automation:
Screen Scraping:
• With NX-API REST and the object model you send objects in XML/JSON not
CLI’s to the switch, and receive objects back from the switch, removing the need
for manipulation of strings in automation tools.
Centralized Database:
• Direct access to our centralized database(object store), resulting in automation
tool performance improvements, no more need to go through CLI software layers
Sequencing:
• With NX-API REST there is less need to be aware of command sequencing when
configuring something (conf t ; router bgp ; neighbor…)
• Want to remove or update something? Re-do potentially have to redo the whole
CLI sequence with a “no” to the last command and re-configuration, so you need
to build this intelligence into your automation.
33. Referencing an Object in NX-API REST:
Distinguished Name
Globally unique identifier for an object in the database
For example:
Adding a peer address to BGP default domain:
DN: sys/bgp/inst/dom-default/peer-[192.168.0.2]
Viewing a physical ethernet interface’s port capabilities:
DN: sys/phys-[eth1/1]/phys/portcap
Object Definition or naming rule will be posted to http://developer.cisco.com
System
BgpEntity BgpInstance BgpDomain BgpPeer
BgpLocalASN
BgpPeerAf
BgpPeerEntry
L1PhysIf
ethpmPhysIf ethpmPortCap
L1Load
L1StormControl
34. How do I utilize it?
• To configure or update something: push an new object
to the switch via the HTTP POST REST API call
• To check status of something: read the relevant object
using HTTP GET REST API call
• To monitor something:
• Subscribe to an object for events related to that particular object
• The switch will send you a push notification when this object
changes
35. • Use Case 3.1:Automation the provisioning of a BGP based
programmable fabric utilizing our NX-API REST object
model. Reduce time to fabric deployment from days to
mins.
Demo 3 – Open NX-OS NX-API REST Demo
36. Open-NXOS Reference Links
Software Link
Chef Agent (Supermarket)
Chef Cookbook
http://supermarket.chef.io
https://github.com/cisco/cisco-network-chef-cookbook
NX-API REST Model https://opennxos.cisco.com/public/api/nxapi-rest/
Puppet Agent (Puppetforge)
Puppet Module
http://forge.puppetlabs.com
https://github.com/cisco/cisco-network-puppet-module
Native 3rd Party Agent Repository
(Cisco Repository)
http://developer.cisco.com/opennxos
Nexus 3/9K GiT Repository (Scripting
Examples, etc)
http://github.com/datacenter/nexus9000
Ignite Open Source Toolkit
NX Toolkit
https://github.com/datacenter/ignite
https://github.com/datacenter/nxtoolkit
SDK for developing native application
RPMs
www.yocto.org
38. Thank You for Attending
For TechWiseTV episodes, TechWiseTV Workshops, Fundamentals and
Networking 101’s visit http://www.Cisco.com/go/TechWiseTV.com.
https://www.facebook.com/techwise
https://twitter.com/techwisetv
Editor's Notes
#6: This slide should state the level & Learning Objective the audience should be at:
Today we are here to understand the Messaging, Positioning and gain the ability to Differentiate …
Or
Today we are here to Design, Deploy, Competitively position within product X, (or) Solution X …
#11: Guestshell easier to use, no need to build a distro, yum install from centos repository into your guestshell..
For most part just works, running with less access than the host.
We’re not in same linux network namespace as the host, so we can do monitor stuff with netdevices ports, run ethtool monitor stats, parameters, etc, but we cannot change stuff from within guestshell.
We turned off ability to change interface parameters, mtu, addresses, etc..anything that changing networking within guestshell, no network admin capabilities from a linux networking perspective..do host conf t, eth4/1 shut..system call to nxos essentially.
Run bash or run guestshell…
From guestshell, can’t shut down interfaces…
Lot of stuff you can’t do in Linux that you can do in NXOS..WNL Chef/Puppet native on switch or CentOS distro within guestshell
9504-B# guestshell resize ?
cpu Resize the system CPU share allocated to guest shell
memory Resize the system memory allocated to guest shell
rootfs Resize the guest shell root filesystem to a larger value
Apps within guestshell run in default vrf, if for example you wanted an application ro run in a different vrf, you could run linux chvrf within the guestshell to switch to it to run the application.
#16: User installs & configures the agents on Cisco switches. Our goal is to automate this step using ISV specific tool (Chef Provisioner) or home grown tool (for Puppet).
Download agent RPM from ISV site
Install agent RPM on switch
Configure agent to talk to the proper server/master
User installs the Cisco Cookbook/Puppet Module (along with Cisco utility GEMs) on the Server/Master
User creates a recipe or defines a manifest using the resources available in the cookbook/module.
If agent is configured to run periodically, it will obtain download the cookbook/catalogue and attempt to converge the network element to the desired state.
#19: Puppet Labs exists to reduce the timeline: from the moment you have new technology, to the moment it’s in the hands of your users delivering value. That new technology comes in a few different flavors. First, new applications. Maybe you’re deploying a new application that your team built, tested and is ready to deliver to the business. It might be a new application you bought from a vendor and you’re preparing to roll out to users. Second, new infrastructure. For example, maybe you’re deploying an OpenStack environment or spinning up a new greenfield project in AWS. Third, updates to existing services. Maybe your adding a new set of capabilities to an application the business already relies on. And lastly, configuration updates. Maybe there have been key configuration settings that have drifted from the state they should be in and you need to bring those systems back into compliance. In any case, we help reduce the timeline of getting that update out to your users, and help you do so with the reliability, predictability and repeatability you demand.
What’s interesting though, is that each customer has different timelines at play. When I talk to Wal-Mart, out of the 40+k nodes they manage with Puppet, about 11k of them are on SLES 11, and they are trying to move another 6k from SLES 10 to SLES 11. Puppet helps them reliably reduce that timeline. At a very different looking user like Spotify, the notion of SLES is nearly laughable. We talk to them about how they are managing a sophisticated containerized environment. But as different as the technologies are, the common thread is that both organizations are cycling out older technology and cycling in newer tech and updates – and Puppet helps them do that.
#20: As we work with organizations to accelerate the delivery of value to the business, we see a common set of challenges and critical initiatives organizations use Puppet Enterprise to help address.
[read through key challenges and initiatives that you’ve discovered they are trying to address].
Does this list make sense? Any that shouldn’t be on the list for you? Any that stick out? Any that aren’t on it but should be? [Use this line of questioning to tease out team dynamics and concerns that you should be aware of as you pursue the deal.]
#21: Our software helps you automate the configuration and ongoing management of your machines and the software running on them, so you spend less time fighting fires and more time deploying great software.
We help you make rapid, repeatable changes and automatically enforce the consistency of systems and devices–across physical and virtual machines, on prem or in the cloud.
#22: Key points. [The minimum points that a rep/SE should make. However, this is a good time to dig into details or have the SE lead a whiteboard discussion about our approach if you know this is an area of interest].
Our declarative, model-driven approach where you focus on defining the desired state of infrastructure, services and apps rather than the programmatic steps it takes to get there.
Once you’ve modeled your infrastructure/apps, we make it possible to test your code to see what happens when you deploy that app update, etc.
We also automate the deployment of that desired state to the infrastructure, and continually enforce that your infrastructure matches your desired state. When it doesn’t we let you know so you can remediate ASAP.
This approach is model once, use everywhere. Once you model your infrastructure and your applications, you can deploy those changes to dev, to test, to staging, to production. It’s the same set of Puppet code that defines your desired state and we make that state so across your deployment tiers – there is no need to rewrite a new set of runbooks to programatically account for all the differences across environments.
And all along the way, you get reports, so whether you want full traceability and insight through your environment or you need to meet audit requirements, you have the data you need about the state of your environments at your fingertips.
#23: Key points. [The minimum points that a rep/SE should make. However, this is a good time to dig into details or have the SE lead a whiteboard discussion about our approach if you know this is an area of interest].
Provisioning is too often a slow process filled with manual steps. You should automate more than just the configuration management of your infrastructure or the orchestration of your apps, and extend automation to go across the entire lifecycle: from initial provisioning of infrastructure through decommissioning.
Over the last few releases we added new provisioning capabilities making it easy to provision
Bare metal and the OSs and hypervisors on those servers
Virtualized environments like spinning up VMs with vSphere
Public cloud infrastructure in AWS and Azure
And Docker, both the Docker engine as well as Docker containers.
#24: The best place to start is by managing your infrastructure as code. Our take is that infrastructure as code is a prerequisite for any DevOps or DevOps-like practice. When you treat your infrastructure as code it’s easy to share that code, collaborate around it, put it in a version control system, do peer reviews (rather than the big CAB meetings), unit testing, automate your deployments and more.
After that, automating your configuration management and version control give you the biggest bang for your buck, meaning that you can make substantial gains toward the speed and reliability benefits we talked about earlier.
Since managing your infrastructure as code is such a critical piece of a DevOps practice, let’s spend some time digging into what you should consider as you manage your infrastructure as code.
#30: CI TOOLS: Jenkins, CircleCI, TravisCI
CM TOOLS: Chef/Puppet/Ansible/SALTSTACK – we have a minion in our repo
CL TEST SIMULATION: Beaker, v9k, VIRL, Kitchen CI, Docker, Vagrant, VMWARE, etc
CD Tools: Github, Bitbucket
Platforms: Cloud, Openstack RH Orchectrator, etc..
#32: Devops and Tooling Process Flow for Customer who has enabled devops processes and tools through out their infrastructure
First some terms:
Github – code repository
GitLab is a web-based Git repository manager with wiki and issue tracking features. GitLab offers hosted accounts similar to GitHub, but also allows its software to be used on third-party servers. It is available as an Omnibus package.
Bitbucket is the Git solution for professional teams
Continuous Integration Tools
Jenkins monitors the code repository for changes/notifications or updates, which trigger a build when they are detected.
It calls an integration testing like beaker once build completes like puppet beaker to kick off a test run on the v9k staging fabric
#37: Sequencing, this also effects your productivity and level of complexity you need to build into your automation design as you need to follow specific sequences of commands to execute something on the switch, as CLI needs commands in a specific order or will return an error. Same issue when you need to update something, need to no the specific previous command and redo with new values, very restrictive approach
String Manipulation: With an industry standard based REST API’s if automation and network teams are separate teams, automation teams will understand REST API’s and manipulating REST API’s,
#39: Maintainable from customers perspective as the object definition will not change/
Ops team that does potentially automation within access URL and an object, automation teams may not have networking expertise, but understand automation and programming constructs, makes it easier to teams to co-operate to automate. The automation teams understand industry standard restful based API’s, and will understand how to create, update or delete an object or its attributes using REST.
REST is industry standard for APIs..
#42: HOW DO WE FURTHER ENABLE YOU TO MOVE TO DEVOPS WITH TOOLING INTEGRATION
WHAT PIECES ARE MISSING TO ENABLE YOU TO TRANSITION TO THIS MODEL?