Developers are increasingly adopting a microservices approach for their apps in order to gain rapid iteration capabilities required for delivering new services faster. However, delivering the App still requires multiple steps such as allocation of virtual IPs, provisioning the front load balancer, configuring firewall rules, configuring a public domain, and DDOS. At present, each of these steps requires coordination across multiple teams with multiple iterations per team. The time efficiencies gained by adopting microservices and cloud-native technologies is negated due to the time taken to deliver the App. In this session, Pranav Dharwadkar, VP of products at Volterra, and Jakub Pavlik, director of engineering, will help you understand these challenges and introduce a distributed proxy architecture that can alleviate the challenges across different cloud environments. This webinar will include a live demo using a distributed proxy architecture to advertise an App publicly and privately. In this webinar, you will learn: The steps required to deliver an App using the current approaches How a distributed proxy architecture can be used to deliver the app publicly and privately The operational benefits of a distributed proxy architecture for delivering new services

1. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA
Enable the Cloud for Everyone, Everywhere
DevOps Webinar
Dec 2020
Pranav Dharwadkar
VP Products
@pranavdh01
Jakub Pavlik
Director Engineering
@JakubPav
Deliver your App Anywhere …
Publicly or Privately

2. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 2
Developers Adopting New Approaches to Deliver New Services Faster
HYBRID / MULTI-CLOUD
MICROSERVICES
HYBRID CLOUD
MONOLITHIC
SW RELEASE CONTINUOUS

3. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 3
Delivering an App Stuck in an Operational Nightmare of Multiple Point Products and Service Tickets
NETWORK / IT DEVOPS
Router Network
Firewall
Front
Loadbalancer
Front-Door
DDOS
App
Firewall
Ingress
Controller
App Mgmt -
K8s / VM
User
DEVELOPER
Overflow of
Support Tickets

4. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 4
...Negating all the Efficiencies Gained by Adopting Modern App Approaches
DEVELOPERNETWORK / IT DEVOPS

5. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 5
Let’s take an example...How long typically does it take to deliver an app publicly?
Router Network
Firewall
Front
Loadbalancer
Front-Door
DDOS
App
Firewall
Ingress
Controller
App Mgmt -
K8s / VM
User
1
~ 2
days
4 2
~ 2-3
days
5
~1-2
weeks
3
~ 1-2
weeks
~ 1-2
weeks
~ 1-2
weeks
~ 2-3
weeks
67
~ 7-12
weeks
Total

6. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 6
Let’s take an example...How long typically does it take to deliver an app privately?
Router Network
Firewall
Front
Loadbalancer
VPN App
Firewall
Ingress
Controller
App Mgmt -
K8s / VM
Private
Link
1
~ 2
days
4 2
~ 2-3
days
5
~1-2
weeks
3
~ 1-2
weeks
~ 1-2
weeks
~ 1-2
weeks
~ 1-2
weeks
67
~ 9-15
weeks
Total8
~ 3-4
weeks
Internet

7. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 7
A New Approach is required for Modern Apps - Distributed Cloud Services
Distributed Cloud ApproachProblems with current products
Integrated StackMultiple Point Products
Distributed Fleet Operations approach -
Control Plane based mgmt
Appliance mgmt model -
Each instance managed individually
SaaS based Operations with full lifecycle mgmtOperationally complex, manual upgrades
Single observability portalMultiple panes of glass
Deployable in thousands of clusters across
premise, cloud, network & edge
Large size not fit for deploying in
multiple locations
API GW
APP FW
Loadbalancer
Firewall
Networking
DDOS

8. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 8
Delivering a Modern App, Publicly, using Distributed Cloud approach
Users
Discover
apps
1
2
2
Control Plane to distribute
app reachability and app
health
3
Advertise app publicly
on anycast VIP
4
Distribute Specific Cloud Services
closer to the user (e.g., DDOS, FW,
SSL offload, LB, WAF)
1
3
4
5
5
Persistent connection
to origin endpoint
Control Plane
Data Plane
Global Network with
multiple POP Sites

9. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 9
Delivering a Modern App, Privately, using Distributed Cloud approach
Discover
apps
1
2
2
Control Plane to distribute
app reachability and app
health
3
Advertise app privately
on specific sites
4
Distribute Cloud Services at
specific sites (e.g., LB, WAF)
1
4
5
5
Completely private data
plane across sites, not
exposed to internet
Control Plane
Data Plane
3
Global Network Private
Connectivity to DC &
Clouds in all regions

10. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 10
Operational Benefit of Distributed Cloud Approach - Customer case study
Current
Approach
Distributed
Cloud Approach
Deliver new services faster 3 new services / yr
11 new services /
yr ~$7M/yr
Reduced Operational
Expense from a Consistent
operational model
25
(15 QA+10-Devops)
5
(2 QA+3 Devops) ~$5M /yr
Reduced operational
expense from faster
troubleshooting,
self-service, one-click
deployment
~300 mins /
incident
~15mins /
incident ~$1M/yr
Business
Value
NETWORK / IT
DEVOPS
~ 7-12
weeks
~ hours
- days
Source: Case Study done using West Coast based Tech Company on their recent adoption of cloud agnostic approach

11. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA
Enable the Cloud for Everyone, Everywhere
Demonstration

12. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA
Redis
Service
Mysql DB
Wordpress topology in Private DC Vanilla Kubernetes cluster
cluster-xxx
Wordpress

13. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 13
It took 8 weeks to configure 7 different point products
Router Network
Firewall
Front
Loadbalancer
Front-Door
DDOS
App
Firewall
Ingress
Controller
App Mgmt -
K8s / VM
User
1
~ 2
days
4 2
~ 2-3
days
5
~ 1-2
weeks
3
~ 1-2
weeks
~ 1-2
weeks
~ 1-2
weeks
~ 2-3
weeks
67
~ 7-12
weeks
Total
Router Fortigate F5 (or Nginx)CloudFlare PAN or Nginx
or Fortigate
Nginx ESXI/
KVM
Rancher/
Kubeadm

14. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 14
Distributed Cloud approach only took me 5 minutes to advertise app publicly
Users
Discover
apps
1
2
2
Control Plane to distribute
app reachability and app
health
3
Advertise app publicly on
anycast VIP
4
SSL Offload, WAF configured
on N/W Edge
1
3
4
Control Plane
Data Plane
Global Network with
multiple POP Sites
~ 5
mins
~ 5
mins
~ 5
mins
~ 15
mins
~ 0
secs

15. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 15
And troubleshooting is nightmare because of 7 disjointed mgmt portals
Router Network
Firewall
Front
Loadbalancer
Front-Door
DDOS
App
Firewall
Ingress
Controller
App Mgmt -
K8s / VM
User
1
~ 15-30
mins
4 2
~ 15-30
mins
5
~30 - 60
mins
3
~ 30-60
mins
~ 30-60
mins
~ 30-60
mins
~ 30-60
mins
67
~ 3-6
hours
Total
Router Fortigate F5 (or Nginx)CloudFlare PAN or Nginx
or Fortigate
Nginx ESXI/
KVM
Rancher/
Kubeadm

16. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 16
Troubleshooting was quick because of integrated single pane of glass with alerts & integrations
Users
App
Discovery
1
2
4
Troubleshooting for network firewall,
WAF, Loadbalancing
1
3
4
Global Network with
multiple POP Sites
~ 5
mins
~ 5-10
mins
5
Latency Troubleshooting
to Origin Endpoint
~ 5-10
mins
~ 15-25
mins

17. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA 17
Distributed Cloud approach only took me 15 minutes to advertise app privately
Discover
apps
1
2
3
Advertise app privately
on specific sites
4
Distribute Cloud Services at specific
sites (e.g., LB, WAF)
1
4
5
Control Plane
Data Plane
3
Global Network with
multiple POP Sites
~ 5
mins
~ 5
mins
~ 5
mins
~ 15
mins
2
Control Plane to distribute
app reachability and app
health
~ 0
secs

18. © 2019 Volterra Inc. All Rights Reserved.CONFIDENTIAL - DO NOT DISTRIBUTE WITHOUT NDA
Enable the Cloud for Everyone, Everywhere
Q&A