Infoblox - Stemmer

Core Network Services (CNS) 

The Basis for Dynamic Infrastructure 

Wolfgang Bresgen 

Regional Sales Manager 

Germany North / West 

+49.160.97332249 

wbresgen@infoblox.com 

© 2009 Infoblox Inc. All Rights Reserved.

Core Network Services – 

The “Glue” Between Networks and Applications 

Applications 

1 

MSFT AD Web CRM E-Commerce IP Tel ERP Messaging 

Core Network 

Services 

Network Infrastructure 

IP ADDRESS MGMNT 

(IPAM) 

NAMING 

(DNS) 

ADDRESSING 

(DHCP) 

FILE DELIVERY 

(TFTP / FTP / HTTP) 

AUTHENTICATION 

(RADIUS) 

TIME (NTP) 

Routing IDS WAN Optimization Switching Wireless Firewalls 


Core Network Services Delivery & Management Today: 

Complex, Insecure, Brittle 

2 

Challenges of spreadsheet-IPAM: 

• Inconsistencies in IP number plan 

• How to share and delegate? 

• How to audit and report? 

ERP, CRM, 

eCommerce 

Intranet, 

Extranet 

Wireless 

E-mail 

VoIP 

Web 

Microsoft 

AD 

DNS 

DHCP 

IPAM 

RADIUS 

TFTP 

NTP 

Challenges of legacy Un-frastructure: 

• Complex to manage and maintain 

• Security risks 

• No High Availability or Disaster Recovery 

BIND 9.3.2, 9.2.6, 8.4.7 

DHCP 3.0.4 

NTP 4.2.0 


Today’s Core Network Services: Infrastructure 1.0 

PSTN 

Infrastructure 1.0 

= 

TCP/IP 

Endpoint 

Intelligence 

Network 

Infrastructure 1.0 

Manual Processes and Primitive/Custom Tools 

Increase Costs and Reduce Availability 


IPAM Diseconomies of Scale Prove that 

Conventional Approaches are Obsolete 

Annual 

IPAM 

Costs 

Per 

IP 

Address 

$10 

$9 

$8 

$7 

$7.46 

$8.68 

$9.86 

10,000 

Size of Network (IP Addresses) 

Average $8.10 

Costs per IP address grow 

for all devices as each new 

IP device is added 

Source: Computerworld MarketVibe research report, October 2008: “Core Network Services Survey: The Costs and Impacts of DNS and IP 

Address Management (IPAM) for the Enterprise and SMB” 


As Networks Add Devices and Applications, 

Management Costs Rapidly Escalate 

Expense 

Size of Network 

Time 

Total annual 

IPAM costs ($) 

Annual IPAM 

costs per IP 

address ($) 

IP addresses 

per Employee 


Growing Demands and Slowing Budgets Means 

Increased Stress, Reduced Availability 

Network 

Scale 

and 

Complexity 

Users 

Devices 

Systems 

Applications 

Offices 

Factories 

Protocols 

Services 

Mobility 

People 

Budgets 

Network Management Resources 

Network 

Management 

Demands 


The Impact on Those Who Run 

the Network 


8 

Infoblox Appliances Automate Core Network 

Services 

DNS DHCP IPAM RADIUS FTP/TFTP/HTTP NTP MORE… 

� Integrated core network services on hardened appliances 

� Centralized visibility and control 

� Powerful IPAM and service automation 

SIMPLER TO 

MANAGE 

MORE 

RESILIENT AND 

SECURE 

LOWER 

COST 


Infoblox Grid Technology Provides Unparalleled 

Availability and Ease of Management 

Grid: A collection of member 

appliances, all running the same 

software, providing one or more 

services (DNS, DHCP, RADIUS, File 

Delivery, etc.) 

9 

Coordinated by a grid master 

Sharing a distributed database 

Communicating via an SSL VPN 

Provides: 

- Centralized visibility and control 

-Real time IPAM 

- Monitoring and reporting 

- Failover and disaster recovery 

for protocols, data & management 

Member 

Member 

Member 

Grid Master 

Infoblox 

Grid 

Member/ 

Grid Master Candidate 

Member 


Infoblox Grid führt Core Network Services zur 

Abbildung unerreichter Verfügbarkeit 

Member ist vom Master getrennt: 

Änderungen werden vom Member 

gepflegt und nach Verbindungswiederherstellung 

synchronisiert 

10 

Individueller Geräteausfall: 

neues Gerät wird 

nach Installation sofort 

durch den Master mit allen 

Attributen des vorherigen 

versorgt 

Member 

Member 

Grid Master 


Grid 

Katastrophaler Ausfall des Master 

(beide fallen aus): Admin promotet 

einen ‘Grid Master Candidate’ zum 

Master – Member werden automatisch 

synchronisiert 

Member 

„Software Updates…“ 

Member 


Geräteausfall im HA: 

Failover zum Secondary 

via VRRP— funktioniert 

für Member und Master 


Traditional IPAM Systems Have 

Significant Limitations 

Legacy IPAM Systems– 

A separate application overlaid on the service delivery infrastructure 

11 

Overlay IPAM 

Application 

(or spreadsheet) 

DNS / DHCP 

Servers 

MANAGEMENT 

INFRASTRUCTURE 

-Data in IPAM system out of sync with network (non real-time) 

-Admin actions can elude audit controls (direct/root access to DNS/DHCP servers) 

-IPAM data & app must be backed-up separately from DNS/DHCP servers 

-Difficult to upgrade – numerous error states, no roll-back 

-Brittle DR (data at DR site may be old, manual fail back to main site, data loss) 

-Many add-on expenses (professional services can more than double costs) 

-Difficult to report and audit 


Infoblox Built-In IP Address Manager Uses Web 2.0 

Technology to Make IPAM as Powerful as iTunes® 

User-defined 

Smart Folders 

are available 

from anywhere in 

the GUI 

12 

Users can define 

their own Smart 

Folders to only 

see what they 

want or use a 

Globally defined 

Smart Folder. 

Define multiple filters and criteria of 

what will be displayed in the Smart 

Folder 

Results are displayed as web links for 

quickly locating and editing. Columns 

can be customized and sorted. 


Infoblox Solutions Provide a Compelling ROI 

� Eliminate and consolidate servers 

� Increase efficiency and productivity, reduce helpdesk costs 

– Simplify and automate routine tasks 

– Reduce network outages 

– Delegate routine tasks and reduce helpdesk escalations 

– Automate monitoring and reporting for operations and compliance 

– Simplify troubleshooting 


Eliminate and Consolidate Servers for DNS, 

DHCP and other Core Network Services 

Microsoft 

Domain 

Controller 

External 

DNS 

Before - 

Microsoft 

Domain 

Controller 

Microsoft 

Domain 

Controller 

Microsoft 

Domain 

Controller 

Distributing domain controllers incurs high costs for 

server management 

Inefficient management, no IPAM 

External 

DNS 

After - 

Microsoft 

Domain 

Controller 

By centralizing domain authentication, domain 

controllers can be replaced by Infoblox appliances for 

DNS, DHCP, File Delivery (TFTP/HTTP), etc. 

Centralized management, lower latency, IPAM 


ROI for Infrastructure Consolidation 

+ + + + = 

Total servers eliminated (1 Linux, 4 Microsoft) = 5 

Monthly server TCO = 5 * $1,500 = $7500 

Total three year TCO = $7500 * 12 * 3 = $270,000 

Three year TCO of Infoblox appliances = $101,245 

(Including cost to purchase appliances) 

Server replacement 3 Year ROI = 270, 000 – 101,245 = $168,755 

* Assumption: Server maintenance cost = $1500 per month, taken as an average of typical server maintenance contracts 


16 

Member 

Member 

Member 

Grid Master 


Grid 

Member/ 


Member 


Infoblox vNIOS Virtual Appliance Software Further 

Reduces TCO and Makes ROI More Compelling 

• Infoblox vNIOS Virtual 

Appliance software 

• Available for Riverbed 

Steelhead appliances and 

Cisco ISR Branch Routers 

• Leverage existing hardware 

• Reduce space & power 

• Supports green initiatives 

17 

Member 

Member 

Infoblox vNIOS 

Software on Riverbed 

Steelhead Appliance 

Member 

Grid Master 


Grid 

Member/ 


Member 

Infoblox vNIOS 

Software on Cisco 

ISR Branch Router 


Virtual Appliances Enable a “Serverless Branch” 

and Support both Infoblox and Microsoft 

Microsoft 

Domain 

Controller 

External 

DNS 

Before - 

Microsoft 

Domain 

Controller 

Microsoft 

Domain 

Controller 

Microsoft 

Domain 

Controller 

Distributing domain controllers incurs high costs for 

server management 

Inefficient management, no IPAM 

External 

DNS 

After - 

Microsoft 

Domain 

Controller 

Cisco ISR wiith 

vNIOS virtual 

appliance 

Steelhead 

Cisco WAAS 

with Windows 

appliance with 

and Infoblox 

MS Windows 

vNIOS 

virtual 

appliance ISR with vNIOS 

virtual appliance 

Both Cisco and Riverbed offer appliances that support 

Microsoft Windows to provide local domain 

authentication 


Automating Core Network Services Reduces 

Labor Costs, Errors & Downtime 

� Assign, track and report on IP address usage 

� Enable self-service by help desk and departmental personnel for 

routine moves/adds/changes 

� Eliminate “duplicate IP’s” 

� Tie device information to IP addresses and keep them in sync 

� Reclaim and allocate your IP space 

� Avoid DNS configuration errors 

� Monitor DHCP range usage 

� Stop non-network-related help desk calls from escalating to the 

network team 

� Transfer core network services related skills (configuration, scripting 

etc.) to new employees 


IP Address Provisioning Example 

Problem: Assign static IP address to a device (printer, camera, etc,) 

The traditional way – 30 Minutes 

� Helpdesk receives a request for a new IP 

address 

� Helpdesk forwards the request to network team 

� Network administrator looks up spreadsheet for 

an available static IP address 

� Uses PING or other methods to see if IP 

address is in use 

� Update spreadsheet 

� Contact server administrators for updating 

DNS & DHCP records including reverse zones 

� Verify functionality 

� Get back to helpdesk upon completion 

Infoblox Benefits 

The Infoblox Way – 2 Minutes 

� Helpdesk receives a request for a new IP 

address 

� Helpdesk uses simple Web-based GUI 

to get next available IP address and 

assign it to the device 

Net savings of approx $40 

per IP assignment – and 

response in minutes vs. 

days 

– Helpdesk resolves request, without errors and without involving network team 

– Faster response, fewer duplicate IPs, less downtime, reduced load on network team 


IP address Reclaim Case Study 

Problem: A new laptop cannot get an IP address due to IP space 

exhaustion 


� Helpdesk receives a ticket saying “cannot connect to 

network” 


� Network administrator examines the device to 

determine the problem and concludes it is unable to 

get an IP address 

� Administrator looks at DHCP logs to see IP address 

usage, the space looks full 

� Administrator does a manual “ping sweep” of IP 

address range to find available IPs. 

� Administrator assigns one of the IPs that “seem” 

available 

� Assigned IP may already be in use by some other 

device and conflicts may arise once the other device 

comes up 

� Follow these steps again to troubleshoot 



� IP address lease history, network 

discovery and automated alerts allow 

administrators to proactively free up IP 

addresses 

Net savings of $80 per 

incident (not including lost 

work time and additional 

costs from manual errors) 

– Avoids outages by proactively reclaiming IPs and cleaning up IP space 

– Increases user productivity 


IP address Reclaim Case Study 

Problem: A new laptop cannot get an IP address due to IP space 

exhaustion 


� Helpdesk receives a ticket saying “cannot connect to 

network” 


� Network administrator examines the device to 

determine the problem and concludes it is unable to 

get an IP address 

� Administrator looks at DHCP logs to see IP address 

usage, the space looks full 

� Administrator does a manual “ping sweep” of IP 

address range to find available IPs. 

� Administrator assigns one of the IPs that “seem” 

available 

� Assigned IP may already be in use by some other 

device and conflicts may arise once the other device 

comes up 

� Follow these steps again to troubleshoot 



� IP address lease history, network 

discovery and automated alerts allow 

administrators to proactively free up IP 

addresses 

Net savings of $80 per 

incident (not including lost 

work time and additional 

costs from manual errors) 

– Avoids outages by proactively reclaiming IPs and cleaning up IP space 

– Increases user productivity 


Additional Savings from Automation of Software 

Updates and Patching 

The traditional CNS: 8 Hours 

� Patching 16 Microsoft 

Domain Controllers running 

DNS 

– Average 25 minutes per 

server 

– Each server must be patched 

individually and manually 

– Risk of taking down non-DNS 

services running on the same 

server 

Infoblox Benefits: 

– Saves up to 90% administrative effort 

– Eliminates service outages 

� Patching Infoblox Grid of 

appliances 

– Single operation controlled 

from Grid Master 

– Done in less than 1 hour 


Infoblox Provides a Modular Product Line 

24 

75,000 

75,000 

36,000 

24,000 

12,000 

3,000 

DNS QPS 

Right-sized appliances fit any environment 

from branch to data center 

Infoblox-250 

Small Office / Store 


Branch / Large Store 


Medium / Large Office 

Infoblox-155X 

Regional Office / DR Site 

(Dual Power Option) 


HQ / Data Center 

(Hot swap power, disks, 

fans) 

25 75 150 225 

750 

DHCP Leases/Sec 


Enhance and Extend the Infoblox Platform 

Unique bloxTools Environment and Community 

� The bloxTools Environment hosts 3 rd - 

party applications on Infoblox 

appliances 

25 25 

– “SNAPins” 

bloxTools 

SNAPins 

bloxTools Environment 

Infoblox API 

Infoblox NIOS 

Operating System 

� SNAPins are easy to develop 

(easier than API applications) 

� SNAPins run on the grid master 

& get benefits of HA, DR, easy 

upgrade and other grid features 

� New SNAPins are contributed 

and supported by the “bloxTools 

Community” 

– www.bloxtools.com 

� SNAPins available now: 

– Geo Grid-Viewer 

– Reporting Package 

– Web-Based Operator Console 


loxTools GeoViewer SNAPin 

Web 2.0 Technology in an IPAM GUI 

26 

Clicking a node 

provides details 

and performance 

graphs 

Real-time connection 

health reporting for all 

devices 


loxTools Operator Console SNAPin 

Customizable Web-Based GUI for day-to-day Tasks 

� Simple web interface for 

delegated admins 

� Workflow 

� Scheduling 

� Full admin audit 

� Supports common 

functions out of the box 

– Add host 

– Modify DNS record 

– Find next available IP 

– Etc. 

� Easily customized to 

meet specific workflow 

requirements 

27 


Infoblox Global Support Meets the Needs of 

Distributed Enterprises 

� Four Major Tech Support Centers 

around the globe with 24x7 coverage 

– Santa Clara 

– Antwerp, Belgium 

– Trivandrum, India 

– Tokyo, Japan 

� Multi-language Support including 

Dutch, French, German, Japanese, 

Korean, and Spanish 

� Nine global depots support next-day 

replacement across all major 

population centers 

– Santa Clara 

– Canada 

– Amsterdam 

– India 

– China 

– Singapore 

– Hong Kong 

– Japan 

– Australia 

� Consistently ranked as the top 

support organization by the world’s 

most demanding companies 

Follow the Sun 


Infoblox is a Pioneer and Market Leader 

� Pioneered Core Network Services Appliances: 

29 

– World’s first DNS, DHCP, IPAM, and RADIUS appliances 

� Market share leader (IDC) 

� 275+ employees with headquarters in Santa Clara, CA 

� Offices/Partners in over 30 countries 

� 4 TAC centers with 24/7 global support 

� Experienced management team and technical leaders 

– Robert Thomas, CEO, formerly CEO of NetScreen 

– Cricket Liu, Vice President of Architecture, author of O’Reilly’s DNS and BIND 

– Tom Mendoza, Board of Directors 

� More than 2,700 companies use Infoblox as their core network services platform 

– Over 25,000 appliances shipped 

– 120 of the Fortune 500 companies depend on Infoblox 

� Strategic partnerships & joint solutions with industry leaders: 


Key Partnerships 

� Microsoft Gold Certified Partner 

– Advanced Infrastructure, Security and Network competencies 

� Cisco Technology Developer Program 

– Infoblox software on Cisco Integrated Service Routers 

� IBM Global Services has standardized on Infoblox appliances for DNS and 

DHCP managed services for major enterprise customers 

� Riverbed RSP Program Partner 

– Infoblox software on Riverbed Steelhead appliances 

� Siemens includes Infoblox in all phone networks sold worldwide; provides 

outsourced services for enterprises leveraging Infoblox; standardized on 

Infoblox internally 

� Avaya DevConnect Program Partner 


http://www.infoblox.com/services/dns-advisor-pro.cfm 

31 


Infoblox Grid is the Foundation for 

Your Network and Applications 

32 

IP Address Management (IPAM) 

• Included with Infoblox DNS/DHCP 

• Solutions to enhance existing Microsoft 

or VitalQIP systems 

External DNS 

• Secure platform, easy administration, 

and “one-button” patching 

Internal DNS/DHCP, Full AD support 

• Overcome MS DNS limitations and 

avoid dependencies 

• Microsoft certified solution. 

IP Telephony 

• Nonstop DHCP and IP phone config 

file delivery 

Network Access Control (NAC) 

• DHCP authentication, RADIUS / 802.1x 

authentication, and NAC reports 


Infoblox: The Industry’s Only Utility-Grade 

Platform for Core Network Services 

• Global control from a single GUI 

• Grid / Distributed DB technology 

• One-button software updates 

• Easy backup/restore/revert 

• Continuous real-time monitoring 

• Extensive error checking 

• Automation of repetitive tasks 

• Device pre-provisioning & easy 

install 

• High-Availability failover (

Infoblox - Stemmer

Create successful ePaper yourself

Delete template?

Save as template?