Kubernetes is taking off and being rapidly adopted both on-premises and in the AWS Cloud. Today, enterprises are struggling to build, deploy, and manage production-ready environments at scale. The Cisco Hybrid Solution for Kubernetes on AWS makes it easy for customers to run production-grade Kubernetes on-premises. This is achieved by configuring on-premises Kubernetes environments to be consistent with Amazon Elastic Container Service for Kubernetes (Amazon EKS) and by combining Cisco's networking, security, management, and monitoring software with the world-class cloud services of AWS. This enables customers to focus on building and using applications instead of being constrained by where they run.

2. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Production-Ready Environments
for Kubernetes
Kip Compton
Senior Vice President
Cloud Platform &
Solutions
Cisco
C O N 3 0 7 - S
Dr. Lars Dannecker
Development Expert
& Big Data Architect
SAP
Jeremy Oakey
Director
Product Management
Cisco

5. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Hybrid complexity
90% 14%
Have taken steps
toward hybrid
Have an optimized
cloud strategy
1. Source: IDC CloudView, May, 2018, n=5,740 worldwide respondents, unweighted
2. Source: IDC CloudView, May, 2018, n=5,740 worldwide heavy cloud-using respondents, unweighted

6. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Public cloud
Two different worlds…
On-premises
environment
New app
development
Agility, microservices,
speed and scale
Shared responsibility model
Application
modernization
Governance,
investment protection
Security

7. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Public cloudOn-premises
environment
Containers and Kubernetes bring them closer…
Scalability
Speed
Portability

8. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
...but increasing complexity...
New app
development
Agility, microservices,
speed and scale
Application
modernization
Security, compliance
and governance,
investment protection
“to scale applications”
“to develop fast across
multiple environments”
“to manage infrastructure for
both old and new applications”
“to be compliant in a
highly regulated industry”
“to use different dev tools
in different environments”
“to secure everything
in public cloud”
Public cloud
New app
development
Agility, microservices,
speed and scale
Shared responsibility model
On-premises
environment
Application
modernization
Governance,
investment protection
Security

9. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
…and impacting your business
Public cloudOn-premises
environment
Accelerate innovation using
one integrated solution
Worry less about
infrastructure and focus on
development
Reduce IT complexity and
costs
Easily leverage public cloud
services
Manage your applications’
lifecycle anywhere

10. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Extensible Hybrid
Existing
Applications
Production
Grade
APP
Bare
Metal
APP
VM
Deploy
Secure
Connect
Monitor
Public cloudOn- premises
environment
Cisco Hybrid Solution for Kubernetes on AWS
Secure and production-grade to accelerate innovation

11. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
On-premises
environment
Management
Security
Monitoring
Networking
Consistent, Production-grade
environment
Identity
Cisco Hybrid Solution for Kubernetes on AWS

12. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Hybrid Solution for Kubernetes on AWS
On-premises
environment
Cisco Nexus9K / ACI
Cisco HyperFlex / UCS
VPC
EC2 / EBS
Elastic Container Registry
Identity and Access
Management (IAM)
Cisco CloudCenter
Stealthwatch Cloud
AppDynamics
Optional Mandatory
Cisco CSR1000v
Cisco Container
Platform
Amazon EKS
Legend:
Consistent, Production-grade
environment

13. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Solution differentiators
First hybrid solution for
Kubernetes on AWS
Consistent identity and
authentication
Any Apps = Kubernetes +
existing
Cisco enterprise-class
support

14. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Benefits for teams
Developers
Accelerate
development of
new applications
IT Ops
Production-grade
solution with
enterprise-class
support
Security team
Visibility and
control across the
hybrid environment
without slowing
innovation

15. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Key Solution Functionalities
Unified and Secure Networking
Proactive Security
Secure Provisioning of
Microservices / Applications
One control pane to spin up
Kubernetes clusters
Real-time performance analytics
Networking/Policy Enforcement of
Containerized Applications

17. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Enterprise data landscapes growing increasingly
complex
MISSING LINK
Between Big Data and Enterprise Data.
Data is kept in silos across the
enterprise.
COMPLEXITY
of combining cloud and on-premise.
High effort to productize complex
data scenarios across hybrid data
landscape
GOVERNANCE
Lack of security and visibility.
Who changed the data? What was
changed? Who is accessing it?
Why so slow?
Need better
dashboards
What’s the
quality?I need
more apps!
Where’s my
new data?
LANDSCAPE CHALLENGES
Cloud Storage
EDW
Data Mart
Data Lake
Outside PartnersR&D Manufacturing Sales & Marketing
Enterprise Apps
ERP, CRM, HR
BI and
Visualization
Mobile Apps Cloud Apps
Master Data
Management
EDW
Cross-departmentdisconnect
Data Lake
Data Lake
Data Mart
Data MartCloud Storage
EDW
Data Mart
Data Lake
Data Mart
Cloud Storage
Business
IT
? ? ? ?
Cross-departmentdisconnect
Cross-departmentdisconnect

18. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Data integration strategy for the intelligent enterprise
Business
Apps
Business
Services
IoT Machine Learning
SAP Data Hub
Metadata Management
Analytics / BW …
Orchestration
Processing & Pipelines
Integration & Ingestion
Data-driven applications
SAP HANA
HANA /
Vora
integration
SAP Applications External and distributed data sources
Cloud Data
Integration
API
ABAP
Integration
Connectors
(open & native
protocols)
Amazon S3
EMR / HDFS
Amazon
Redshift/DynamoDB
3rd party apps
Active MQ, Kinesis
Public Clouds
SCI for process
integration
SAP Event Bus
SAP API
Business Hub
REST APIs
Workflow
BW Process
Chains
DS Jobs HANA
Flowgraphs
Distributed Data Lake (In-Memory, Disk, S3)
In-Memory Disk Cluster Object StoreData Set API
SAP Analytics Cloud
Amazon Machine
Learning
Amazon Analytics

19. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Why should I even think about hybrid cloud?
Customer Data Center
Business-Critical Enterprise Data
SAP ERP S/4 HANA
BW/4
HANA
Machine Learning
IoT/Stream Processing
Cloud Storage
Advanced Analytics
?
?
?
?

20. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Challenge 1: deployment and operations
Customer Data Center
ERP Data
SAP Data Hub
ConnectivityDB Engines MetadataData Pipelines Discovery
Customer
Data
Sales
Data
Kubernetes
Cloud Services
Analytics
Cloud
Storage
Machine
Learning
IoT
Streaming
Data Bases
Kubernetes
SAP Data Hub

21. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Challenge 1: deployment and operations
Customer Data Center
ERP Data
SAP Data Hub
ConnectivityDB Engines MetadataData Pipelines Discovery
Customer
Data
Sales
Data
Kubernetes
Cloud Services
Analytics
Cloud
Storage
Machine
Learning
IoT
Streaming
Data Bases
SAP Data Hub
Fully managed cloud-
service
What flavor to install?
How to manage?
Who supports?

22. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Challenge 2: connectivity
Customer Data Center
ERP Data
SAP Data Hub
ConnectivityDB Engines MetadataData Pipelines Discovery
Customer
Data
Sales
Data
Kubernetes
Cloud Services
Analytics
Cloud
Storage
Machine
Learning
IoT
Streaming
Data Bases
SAP Data Hub
?

23. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Challenge 3: missing user management integration
Customer Data Center
ERP Data
SAP Data Hub
ConnectivityDB Engines MetadataData Pipelines Discovery
Customer
Data
Sales
Data
Kubernetes
Cloud Services
Analytics
Cloud
Storage
Machine
Learning
IoT
Streaming
Data Bases
SAP Data Hub
User Access &
Authorization
User Access
&
Autorisatio
n
Credentials 1Credentials 2

24. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Join forces – tackle challenges
Hybrid Cloud
On-Premise Container Platform

25. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Join forces – tackle challenges
Enterprise-ready
Hybrid-Cloud
Data Processing

26. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Providing enterprise-ready hybrid cloud data
processing
Customer Data Center
ERP Data
SAP Data Hub
ConnectivityDB Engines MetadataData Pipelines Discovery
Customer
Data
Sales
Data
Kubernetes
Cloud Services
Analytics
Cloud
Storage
Machine
Learning
IoT
Streaming
Data Bases
SAP Data Hub

27. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Providing enterprise-ready hybrid cloud data
processing
CSR Connection
Customer Data Center
SAP Data Hub
ConnectivityDB Engines MetadataData Pipelines Discovery
Cloud Services
Analytics
Cloud
Storage
Machine
Learning
IoT
Streaming
Data Bases
SAP Data Hub
Install, Integrate, Manage
Cisco Hyperflex 3.0
User Access &
Authorization
Integrated User Management
Cisco Container Platform
Cluster Management
Cisco Container Platform
Storage
Cisco HyperFlex FlexDriver
Networking
Cisco ACI | Contiv
Object Store
Load Balancers
Kubernetes

28. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Providing enterprise-ready hybrid cloud data
processing
Customer Data Center
Cloud Services
Analytics
Cloud
Storage
Machine
Learning
IoT
Streaming
Data Bases
CSR Connection
Install, Integrate, Manage
Cisco Hyperflex 3.0
User Access &
Authorization
Cisco Container Platform
Cluster Management
Cisco Container Platform
Storage
Cisco HyperFlex FlexDriver
Networking
Cisco ACI | Contiv
Object Store
Load Balancers
Kubernetes
Integrated User Management
ConnectivityDB Engines MetadataData Pipelines Discovery
Orchestrate
Integrate
Ingest
Exchange
SAP Data Hub

30. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Hybrid cloud deployment

31. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Create EKS clusters from Cisco Container Platform
Define AWS as your
infrastructure provider
Add basic info about your
Amazon EKS cluster
Configure EKS worker
nodes information

32. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Enabling IAM authorization for on-prem VMware clusters
Select VMware Infrastructure
Provider
Select IAM Auth

33. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Capabilities
Integrated
AWS IAM
Authorization
Management of
EKS clusters
and nodes
Integrated
Amazon Elastic
Container
Registry (ECR)
Integrated
cluster
monitoring
 Common user/role
to authenticate to
clusters both in
cloud and on-prem
 Leverage already
existing IAM
including users,
roles, service
accounts, SSO
 Enables identical
RBAC definitions to
be applied to any
cluster
 Deploy both on-
premises and
Amazon EKS
worker nodes
 Common OS
 VPC configuration
as require
 Secure, single
repository for all
container images
 via a Prometheus
and EFK stack
(ElasticSearch/
FluentD/Kibana)

34. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Demo Case: Application point of view
Kinesis
S3 Storage
Amazon
Redshift
EMR / HDFS
DynamoDB
BW/4 HANA
S/4
ERP
HANA
IBP
Cisco Container Platform
CSR
Connection
SAP Data Hub
SAP Data Hub
read
stream
filter
join
query
DB
read
file
join aggregate
transform
query
DB filter
AWS
Connector
Operators
ABAP
Integration
BW Workflow
Cloud
Integration API
HANA
Integration

35. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

36. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
SAP Data Hub
SAP Data Hub
On-premises
Public clouds
Cisco
Container
Platform UI
Elastic
Container
Registry
AWS
Identity and
Access
Management
(IAM)
Enabling modern hybrid cloud data processing
SAP Data Hub with Cisco Container Platform and Amazon EKS
Kubernetes Clusters Launch Integrated, common
authentication
Same RBAC policies across
both environments
1
1
Credentials
1
2
Cisco CSR1000v
Secure Data Transport3
4
4

37. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Learn more
See demos in the Cisco booth #407
 Hybrid Solution for Kubernetes on AWS
 Container Platform
 CloudCenter
 Stealthwatch Cloud
 CSR 1000v
 SD WAN
 ACI Anywhere
Visit the AppDynamics booth #810

38. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Meet with Cisco
Visit booth #407 and ask us
how to schedule an onsite
session with one of our
subject matter experts

39. Thank you!
© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

40. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.