DNS, DHCP & IP Address Management appliances
For Microsoft DNS & DHCP servers
For open source DNS & DHCP servers
Manage multi-vendor cloud DNS servers centrally
RIR Declaration Management and Automation
Automated network device configuration and management
Centralized visibility over all your clouds
A single source of truth for your network automation
It’s much easier to remember a meaningful name than a meaningless IP address
Carrier-grade DNS DDoS attack protection
Protect users and block DNS-based malware activity
Adaptive DNS security for service continuity and data protection
Improve Application Access Control to prevent spread of attacks
Optimize application delivery performance from the edge
Working from anywhere needs DNS security
Visibility, analytics and micro segmentation for effective Zero Trust strategy
Enable work from anywhere by controlling access, security and data privacy
Simplify management and control costs across AWS, Azure and GCP environments
Risk-free migration to reduce DDI complexity and cost
Move risk-free to improve performance, security and costs
Automate management, unify control and strengthen security of connected devices
Protect your network against all DNS attacks, data exfiltration and ransomware
Enable zero touch operations for network management and security
Improve resiliency, deployment velocity and user experience for SD-WAN projects
Integrated DNS, DHCP, IPAM services to simplify, automate and secure your network.
Simplify design, deployment and mgmt of critical DDI services for telcos
Simplify and automate management of critical DDI services for finance
Simplify and automate management of critical DDI services for higher education
Simplify and automate management of critical DDI services for retail
Open architecture for DDI integration
Technology partnerships for network security & management ecosystems
Extend security perimeters and strengthen network defenses
Submit requests for temporary licenses
Submit access requests for EfficientIP knowledge platforms
Submit membership requests for EfficientIP Community
We integrate DDI, DNS Security and intelligent app traffic management
Customer-centric DDI project delivery and training
Acquire the skills needed to manage EfficientIP SOLIDserver™
Identify vulnerabilities with an assessment of your DNS traffic
Test your protection against data breaches via DNS
Dedicated representation for your organization inside EfficientIP
Explore content which helps manage and automate your network and cloud operations
Read content which strengthens protection of your network, apps, users and data
Learn how to enhance your app delivery performance to improve resilience and UX
Why Using DNS Allow Lists is a No-Brainer
Applications and Infrastructures must be approached in terms of life-cycle
Who we are and what we do
Meet the team of leaders guiding our global growth
Technology partnerships for network security and management ecosystems
Discover the benefits of the SmartPartner global channel program
Become a part of the innovation
The latest updates, release information, and global events
Extend Your Enterprise Security Perimeter
April 24, 2019 | EfficientIP | IPAM, Network Automation
Cisco ACI (Application Centric Infrastructure) brings to data centers a new integrated way of building networks and linking applications to users. The EfficientIP SOLIDserver communicates with the API proposed by the Cisco Application Policy Infrastructure Controller (APIC) in order to maintain a coherent view of the network overlay directly inside EfficientIP’s IPAM (IP Address Management) software, thus consolidating the repository of IP golden records.
In an automation process designed to provision everything required for user to application communication, from the server hosting the code to the switch port connecting the user device, we can differentiate two main topics: orchestration and reconciliation.
Orchestration is the sequence that creates all the components required for usage deployment, generally leveraging software defined methods, infrastructure as code, and continuous deployment. For now, orchestration processes are specialized for each technological domain, meaning we are unable to rely on having all the desired information in a single repository. It is therefore mandatory to validate data from time to time and check for inconsistencies – a process often referred to as data validation and reconciliation (also known as DVR).
EfficientIP SOLIDserver DDI (DNS-DHCP-IPAM) solution plays a major role in both phases. During orchestration it provides IP resources like subnet and addresses, and reserves DNS records for enabling application and service access for the users (see also “Make Cloud Orchestration Simple Through DDI”). During reconciliation it gathers information from the network and cloud components in order to guarantee the accuracy of the information stored in the IPAM. The collected information is compared to the provisioned one in order to quickly highlight any discrepancies and provide valuable insight for proactively correcting errors. One could argue that IP resources should be reserved in advance and be accurate before installation takes place, but software defined network (SDN), automation and multi-cloud are mostly based on dynamic resources allocation for which IP provisioning is not always performed in the same way.
EfficientIP has developed a specific solution that is able to populate the IPAM with information contained in the Cisco APIC relating to application servers deployed in the fabric. It collects information such as the tenant, the application, the EPG name (End Point Group), the physical interface on the leaf switch to which the server is connected, and the MAC and IP addresses of the deployed resource. Once in the IPAM view – extended with specific class parameters – any device discovered in the Device Manager tool will be automatically mapped. For example, the Device Manager connector for VMware vSphere is able to discover all virtual machines deployed and gather meta-data information that will populate its database. Once a mac address is associated with a discovered device (e.g. a server or container), if it is present in the IPAM, the device is automatically mapped. Thus, the IPAM view is totally accurate and presents the whole connectivity chain from the application linked to its tenant in the ACI ecosystem, hosted on a server and connected to a physical switch port. Furthermore the reconciliation phase is able to be performed using an event driven model if the SDN and cloud components offer such technologies. This enables near real time notifications and an IPAM which is always up to date, making it the single source of network truth.
SOLIDserver’s complete openness for both providing information through its rich API set and collecting data from the datacenter ecosystem via dynamic process is key in the cloud movement. Resources are more and more spread throughout various environments – linked with network automation with dynamic network (SDN) – and all these elements are volatile because of orchestration and elasticity.
Therefore, its mandatory to keep and use an accurate repository of information regarding IP information, on which all the other components of orchestration and automation should rely, for deployment, auditing or billing activities.
Tags: APIDDIDevice managerDNSInfrastructure as codeIP address management softwareIPAMMulticloudNetwork AutomationSolidserver
When our goal is to help companies face the challenges of modern infrastructures and digital transformation, actions speak louder than words.
Explore content highlighting the value EfficientIP solutions bring to your network