Cisco ACI

Cisco ACI
Name	Cisco ACI
Developer	Cisco Systems
Initial release	2013
Latest release	ACI 5.x series
Programming language	C, Python, Go
Operating system	NX-OS (ACI mode)
License	Proprietary

Cisco ACI

Cisco ACI is a software-defined networking solution developed by a major networking vendor to enable policy-driven automation across data center fabrics, integrating with products and platforms from vendors such as VMware, Microsoft, Red Hat, Amazon Web Services, and Google Cloud Platform. It combines hardware spine-leaf designs from providers like Arista Networks and Juniper Networks with controller-based orchestration inspired by projects such as OpenStack and Kubernetes, while interoperating with management ecosystems including Ansible, Terraform, Puppet, and Chef. Customers from sectors represented by institutions such as Goldman Sachs, Facebook, Netflix, Bank of America', and Walmart use it to unify network, compute, and storage policies across infrastructures that include systems from Dell EMC, Hewlett Packard Enterprise, Lenovo, and Nutanix.

Overview

Cisco ACI provides an integrated policy model and central controller called the Application Policy Infrastructure Controller that abstracts application requirements into network intent for use with hardware switches and software endpoints, aligning with orchestration paradigms found in OpenStack, CloudStack, VMware vSphere, Microsoft System Center, and Kubernetes. It leverages fabric architectures similar to designs by Arista Networks and Juniper Networks and supports APIs comparable to interfaces from Amazon Web Services and Google Cloud Platform to enable hybrid deployments with vendors like Azure and IBM. The solution targets enterprises, service providers, and public sector organizations including NASA, Department of Defense (United States), United Kingdom Ministry of Defence, Deutsche Bank, and Siemens, seeking to standardize policy semantics and telemetry used by platforms such as Splunk, Elastic, Prometheus, and Grafana.

Architecture

The architecture centers on a centralized policy engine and fabric composed of leaf and spine switches, using ASIC-based hardware platforms from families like the Cisco Nexus 9000 series, with software components influenced by designs from Juniper Networks and projects such as OpenFlow and ONOS. The controller (APIC) implements constructs such as tenants, application profiles, endpoint groups, and contracts—terminology that aligns to models adopted by VMware NSX, Microsoft Azure Resource Manager, and Red Hat OpenShift. Data plane forwarding uses VXLAN encapsulation similar to implementations in Nicira and integrations with Broadcom ASICs, while the control plane exposes RESTful APIs comparable to APIs offered by Google Cloud Platform and Amazon Web Services for programmability with tools like Postman and curl.

Deployment and Integration

Deployments range from single-site data centers to multisite architectures and hybrid clouds, interoperating with virtualization and hyperconvergence platforms from VMware, KVM, Hyper-V, Nutanix AHV, and OpenStack Nova. Integration patterns include service chaining with third-party security appliances from Palo Alto Networks, Fortinet, and Checkpoint, and storage integrations with arrays from EMC, NetApp, and Pure Storage. Operators often combine ACI with orchestration tools such as Ansible, Terraform, SaltStack, and Jenkins for CI/CD pipelines used by organizations like Spotify, Airbnb, Uber, and Lyft.

Management and Automation

Management is centralized through the APIC controller with programmability via REST APIs, Python SDKs, and intent-based models that echo automation frameworks from HashiCorp, Red Hat, Canonical, and Microsoft Azure DevOps. Telemetry and analytics integrate with platforms such as Splunk, Elastic Stack, Prometheus, and Datadog; logging and events are processed alongside SIEM systems from Splunk Enterprise, IBM QRadar, and ArcSight. Automation workflows often use CI/CD tooling like Jenkins, GitLab CI, CircleCI, and Bamboo to drive lifecycle operations consistent with practices at Google, Amazon, Microsoft, and Facebook.

Security and Multitenancy

ACI supports role-based access control and policy isolation through tenants, endpoint groups, and contracts, integrating with identity providers and directories such as Active Directory, LDAP, Okta, and Ping Identity. It enables microsegmentation comparable to approaches in VMware NSX and service insertion for third-party security platforms like Palo Alto Networks, Fortinet, and Check Point Software Technologies. Compliance and audit practices align with standards and regulators such as PCI DSS, HIPAA, GDPR, NIST, and ISO/IEC 27001, and are used by enterprises including JP Morgan Chase, Citigroup, and Wells Fargo.

Performance and Scalability

Designed for low-latency, high-throughput fabrics, the solution scales across large leaf-spine topologies used by hyperscalers such as Google, Amazon, Microsoft Azure, and Facebook, leveraging ASIC performance from vendors like Broadcom and switch families comparable to Cisco Nexus, Arista 7000, and Juniper QFX. It supports large-scale endpoint counts and multi-pod, multi-site fabrics for global deployments observed in infrastructure at Netflix, LinkedIn, Apple, and Twitter, while offering telemetry for capacity planning using tools like Grafana, Prometheus, and Elastic Stack.

Use Cases and Industry Adoption

Common use cases include multi-tenant cloud data centers for telecommunications providers such as AT&T, Verizon, and Vodafone; financial services infrastructures for Goldman Sachs and Morgan Stanley; healthcare and research deployments at Mayo Clinic, Cleveland Clinic, and University of California, San Francisco; and large-scale web platforms operated by Netflix, Twitter, and Dropbox. Adoption patterns emphasize integration with orchestration stacks from VMware vSphere, Kubernetes, and OpenShift to support application delivery and DevOps practices used by organizations like Spotify, Airbnb, Uber, and Lyft.

Category:Networking