
3
Reference Architecture | Dynamic L4-L7 Service Insertion with Cisco ACI and A10 Thunder ADC
Executive Summary
Traditional data center infrastructures are inflexible, difficult to change and don’t scale well, making it hard to
meet today’s demanding data center needs in a cost-effective manner. Teams that build and manage data
center infrastructure traditionally operate in their own silos, with no common operational model between
application, network and security. As a result, new application rollout takes anywhere between a few weeks
to months of effort often due to poor coordination between the different teams managing data center
infrastructure.
One way to solve this problem is by making use of programmable application services to build new data center
infrastructure, which will deliver consistent policy enforcement across all applications in a timely manner. Cisco
Application Centric Infrastructure (ACI), together with A10 Networks® Thunder® ADC line of Application Delivery
Controllers, allows organizations to respond rapidly to business demands by enabling automatic provisioning
of dynamic L4-L7 application networking and security services. This integrated solution delivers automated
policy enforcement for business applications in an application-centric, programmable approach by combining
applications, networking, security and the underlying infrastructure.
Document Scope
The purpose of this reference architecture is to serve as a design guide for the dynamic L4-L7 service insertion
solution architecture for A10 Thunder ADC L4-L7 services with Cisco ACI. This joint solution consists of Cisco
Nexus 9000 switches, Cisco Application Policy Infrastructure Controller (APIC), and A10 Thunder ADC physical
and virtual appliances. This reference architecture explains how to auto provision and deploy A10 Thunder ADC
devices in a Cisco ACI design using Cisco APIC with the A10 device package. Examples of A10 Thunder ADC L4-
L7 services deployment using Cisco APIC GUI and XML post scripts are also included in this document.
Audience
Cloud, networking and data center architects who are responsible for planning, designing and implementing
network architecture for modern data centers are the primary target audience for this document. The
document should also be useful to system engineers and professional services specialists who are responsible
for deploying and managing public or private cloud data center infrastructure built using Cisco ACI. Readers
should have some degree of familiarity with Cisco ACI and A10 Thunder ADC.
Business Challenge
Traditional data center infrastructures are inflexible and don’t scale well beyond a certain point. This makes
it difficult to meet business agility and scaling needs in a cost-effectively manner. Applications, network and
security teams who build and manage data center infrastructure traditionally operate in their respective
silos, which means that there is no common operational model between them. Provisioning applications
and addressing their changing network services needs are time-consuming and require significant process
overhead. Manual service provisioning creates operational challenges to scale up and quickly deploy resources
for a broad range of applications while ensuring application availability, performance and security. As a result,
the ability of data center administrators to react quickly to business demands is constrained.
Business agility comes from application agility – the ability to roll out and provision new applications in hours
instead of days, weeks and months. Rolling out new applications typically requires orchestration of multiple
resources at the compute, network and storage services level in a coordinated fashion inside the Infrastructure-
as-a-Service (IaaS) layer and/or orchestration of applications being hosted in the cloud.
Cloud IaaS delivers vastly greater business agility, service provisioning times and economics. However, Cloud
IaaS requires that the underlying infrastructure is automated and scalable to build an on-demand delivery
model providing dynamic and consistent services in a shared, multi-tenant environment. To build this model,
it is important to put applications, networking, security and the underlying infrastructure in a common
operational model that is optimized at solving business problems. This application-centric model should
include application networking services with other data center infrastructure to deliver dynamic L4-L7 services
and automated policy enforcement.
Comentários a estes Manuais