Systems and methods to build a monitoring fabric
Systems and methods for building a monitoring fabric are described. The system receives a duplicate of a first portion of traffic information from a first network as first traffic information and communicates the first traffic information in the monitoring fabric. The first traffic information is communicated to a controller that configures the monitoring fabric. The system receives a duplicate of a second portion of the traffic information from the first network as second traffic information. The system forwards the second traffic information to at least one tool.
1. A system comprising:
at least one processor and memory having instructions that, when executed, cause the at least one processor to perform operations comprising:
receiving a duplicate of a first portion of traffic information from a first network as first traffic information, the first traffic information being received at a plurality of ingress interfaces providing access to a monitoring fabric;
receiving the first traffic information, in the monitoring fabric with a first plurality of switches that are controlled by a controller, at the controller;
storing the first traffic information in a storage system;
configuring a second plurality of switches in the monitoring fabric based on the first traffic information;
receiving a duplicate of a second portion of the traffic information from the first network as second traffic information, the second traffic information being received at a first ingress interface included in the plurality of ingress interfaces providing access to the monitoring fabric; and
forwarding the second traffic information in the monitoring fabric with the second plurality of switches, the forwarding including forwarding the second traffic information over at least one egress interface to at least one tool that is utilized to monitor the traffic information in the first network.
2. The system of claim 1 , wherein the monitoring fabric includes a virtual monitoring fabric.
3. The system of claim 2 , wherein the first plurality of switches includes a first plurality of virtual switches and wherein the second plurality of switches includes a second plurality, of virtual switches.
4. The system of claim 3 , wherein the controller includes a virtual controller and wherein the storage system includes a cloud-based storage system and wherein the at least one tool includes a virtual tool farm.
5. The system of claim 4 , wherein the virtual monitoring fabric includes the first plurality of virtual switches, the second plurality of virtual switches, the virtual controller, and the cloud-based storage system.
6. The system of claim 1 , wherein the monitoring fabric includes a hyper-scale monitoring fabric.
7. The system of claim 1 , wherein the first plurality of switches includes a first plurality of switching machines and wherein the second plurality of switches includes a second plurality of switching machines.
8. The system of claim 7 , wherein the first plurality of switching machines includes a first plurality of white box switches and wherein the second plurality of switching machines includes a second plurality of white box switches.
9. The system of claim 1 , wherein the controller includes a controller computer and wherein the storage system includes a database and wherein and wherein the at least one tool includes a physical tool farm.
10. A method comprising:
receiving a duplicate of a first portion of traffic information from a first network as first traffic information, the first traffic information being received at a plurality of ingress interfaces providing access to a monitoring fabric;
receiving the first traffic information, in the monitoring fabric with a first plurality of switches that are controlled by a controller, at the controller;
storing the first traffic information in a storage system;
configuring a second plurality of switches in the monitoring fabric based on the first traffic information;
receiving a duplicate of a second portion of the traffic information from the first network as second traffic information, the second traffic information being received at a first ingress interface included in the plurality of ingress interfaces providing access to the monitoring fabric; and
forwarding the second traffic information in the monitoring fabric with the second plurality of switches, the forwarding including forwarding the second traffic information over at least one egress interface to at least one tool that is utilized to monitor the traffic information in the first network.
11. The method of claim 10 , wherein the monitoring fabric includes a virtual monitoring fabric.
12. The method of claim 11 , wherein the first plurality of switches includes a first plurality of virtual switches and wherein the second plurality of switches includes a second plurality of virtual switches.
13. The method of claim 12 , wherein the controller includes a virtual controller and wherein the storage system includes a cloud-based storage system and wherein the at least one tool includes a virtual tool farm.
14. The method of claim 13 , wherein the virtual monitoring fabric includes the first plurality of virtual switches and the second plurality of virtual switches.
15. The method of claim 13 , wherein the first network includes a production network.
16. The method of claim 10 , wherein the monitoring fabric includes a hyper-scale monitoring fabric.
17. The method of claim 10 , wherein the first plurality of switches includes a first plurality of switching machines and wherein the second plurality of switches includes a second plurality of switching machines.
18. The method of claim 17 , wherein the first plurality of switching machines includes a first plurality of white box switches and wherein the second plurality of switching machines includes a second plurality of white box switches.
19. The method of claim 10 , wherein the controller includes a controller computer and wherein the storage system includes a database and wherein and wherein the at least one tool includes a physical tool farm.
20. A non-transitory machine-readable medium and storing a set of instructions that, when executed by a processor; causes a machine to perform operations comprising:
receiving a duplicate of a first portion of traffic information from a first network as first traffic information, the first traffic information being received at a plurality of ingress interfaces providing access to a monitoring fabric;
receiving the first traffic information, in the monitoring fabric with a first plurality of switches that are controlled by a controller, at the controller;
storing the first traffic information in a storage system;
configuring a second plurality of switches in the monitoring fabric based on the first traffic information;
receiving a duplicate of a second portion of the traffic information from the first network as second traffic information, the second traffic information being received at a first ingress interface included in the plurality of ingress interfaces providing access to the monitoring fabric; and
forwarding the second traffic information in the monitoring fabric with the second plurality of switches, the forwarding including forwarding the second traffic information over at least one egress interface to at least one tool that is utilized to monitor the traffic information in the first network.