Plan Your Deployment

This chapter contains the following topics:

Before You Begin

This section explains the decisions you need to make before installing Crosswork Network Controller solution on your preferred platform.

  1. Determine how many VMs you need

  2. Identify the resource footprint

  3. Special Considerations

After completing the planning in the above steps, follow the relevant installation workflow steps for your platform:


Note

Starting with the Crosswork Network Controller version 4.1, Crosswork deployment is no longer supported for the Cisco CSP platform. For more information, see End-of-Life Announcement for the Cisco Cloud Services Platform Operating System.

Determine how many VMs you need


Attention

This topic is applicable only when you need to deploy Crosswork Network Controller as a cluster. In case of single VM deployment, see Install Cisco Crosswork Network Controller on a Single VM

After finalizing the Crosswork Network Controller tier that meets the needs of your production environment, use the table below to determine the number of VMs required to deploy the Crosswork Network Controller cluster and the type of Data Gateways to be deployed. This is a crucial step as each Crosswork Network Controller tier can impact the overall resources needed.


Note

Geo redundancy solution requires double the number of VMs. For more information, see Enable Geo Redundancy section.

Crosswork Network Controller is available in these tiers:

Table 1. Crosswork Network Controller tiers

Cisco Crosswork Network Controller tier

1

Contents

Crosswork Data Gateway deployment

2

Recommended number of cluster VMs

3

Essentials

Element Management Functions

On-Premise Standard (default): Collectors only.

3 Hybrid nodes

Advantage

Crosswork Optimization Engine

On-Premise Standard (default): Collectors only.

3 Hybrid nodes + 2 Worker nodes

Crosswork Active Topology

On-Premise Standard (default): Collectors only.

Crosswork Service Health

On-Premise Extended: Collectors and offload services.

Premier

Crosswork Workflow Manager

On-Premise Extended: Collectors and offload services.

3 Hybrid nodes + 2 Worker nodes

Crosswork Workflow Manager Solutions

On-Premise Extended: Collectors and offload services.

Add-on

Crosswork Change Automation

On-Premise Extended: Collectors and offload services.

3 Hybrid nodes + 2 Worker nodes

Crosswork Health Insights

On-Premise Extended: Collectors and offload services.

1

There are licensing implications for different tiers, please consult your Cisco Account team to understand which tiers and licenses are required for your use cases.

2

The VM resource requirements for Crosswork Data Gateway are different for each type and cannot be modified. Therefore, if your requirements change, you must re-deploy the Crosswork Data Gateway to move from one type to another. For more information, see the Redeploy a Crosswork Data Gateway VM section in the Cisco Crosswork Network Controller 7.1 Administration Guide.

3

The number of VMs mentioned is the recommended count. You can add more Worker nodes (maximum up to three worker nodes) as needed. If your requirements exceed the recommended count, please contact the Cisco Customer Experience team.

Ensure that you have sufficient worker nodes in your cluster. You can always check the load in your cluster and choose to add new worker nodes post installation. For more information, see the Deploy New Cluster Nodes section in the Cisco Crosswork Network Controller 7.1 Administration Guide.

Identify the resource footprint

Once you determine the Crosswork applications you want and the number of VMs you will need to deploy to host them, ensure that you have the resources needed for them. The resources required per VM such as CPU, Memory, and Storage vary based on the data center where your VMs will be hosted.


Note

  • The resources listed for NSO are higher than for other NSO use cases due to the additional requirements Crosswork Network Controller places on NSO.

  • The NSO footprint depends on the type of deployment, standalone or LSA.

  • The SR-PCE count will depend on the number of head-ends that need to be managed

  • The values in Storage column is the space needed for storing Crosswork files and does not consider any additional overhead that may be required (for example, RAID configuration). Storage requirements vary based on factors such as the number of devices being supported and the type of deployment selected. However, 1 TB disk space should work for most deployments.

  • The storage required for each backup will vary based on the your cluster size, applications in the cluster, and the scale requirements.

  • Solid-state drives (SSDs) are required for all Crosswork Network Controller deployments due to their performance.

  • Upgrade of the cluster (using parallel hardware) temporarily requires double the total disk space used by the cluster. See Upgrade Using Parallel Hardware for more information.

  • The number of Data Gateways needed depends on the number of devices you have in your network and the level of redundancy you want (1:n up to 1:1). To determine the number of Crosswork Data Gateways needed, contact the Cisco Customer Experience team.

See these topics to know more about resource requirements per VM for each deployment:

VM requirements

This topic explains the requirements for Hybrid and Worker VMs when deploying different tiers of the Crosswork Network Controller.

VM storage specifications

Table 2. Storage specifications per VM

Crosswork Network Controller tier

VM type

Device count

Recommended disk size (approximated)

File system to configure

Required file system size

Essentials

Hybrid

<= 15k

~ 1 TB

ManagerDataFs

500 GB

Hybrid

> 15k

~ 2 TB

ManagerDataFs

1500 GB

Worker

<= 15k

~ 1 TB

WorkerDataFs

500 GB

Worker

> 15k

~ 2 TB

WorkerDataFs

1500 GB

Advantage / Premier

Hybrid

N/A

~ 1 TB

ManagerDataFs

500 GB

Worker

<= 15k

~ 1 TB

WorkerDataFs

500 GB

Worker

> 15k

~ 2 TB

WorkerDataFs

1500 GB
Table 3. Data file systems

Parameter

Description

ManagerDataFsSize

Size of data file system for Hybrid VMs.

WorkerDataFsSize

Size of data file system for Worker VMs.

Disk requirements

The VM data store(s) need to have disk access latency < 10 ms and > 4000 IOPS. For more information on the diagnostic checks, see Diagnostic assessment.

Table 4. IOPS requirements

IOPS value

Status

Response

IOPS value > 4000

 PASS

Installation proceeds without the need for user acknowledgement.

1000 < IOPS value > 4000

 BLOCK

For production environments, installation requires more than 4000 IOPS. Values between 1000 and 4000 IOPS are considered suboptimal. Installation is blocked, but you can choose to ignore the failure and continue. You must explicitly acknowledge the report before proceeding, and by doing so, you acknowledge this warning and accept the risks.

IOPS value < 1000

 FAIL

Installation is blocked irrespective of user response.
Table 5. Network bandwidth requirements

Network bandwidth

Status

Response

Bandwidth > 8000 Mbps

PASS

Installation proceeds without the need for user acknowledgement.

1000 < Bandwidth < 8000 Mbps

BLOCK

Values between 1000 and 8000 Mbps are considered suboptimal. Installation is blocked, but you can choose to ignore the failure and continue. You must explicitly acknowledge the report before proceeding, and by doing so, you acknowledge this warning and accept the risks.

Bandwidth < 1000 Mbps

FAIL

Installation is blocked irrespective of user response.

Resource footprint for VMware

This topic explains the resource requirements per VM to deploy Crosswork Network Controller Hybrid or Worker node, Crosswork Data Gateways, NSO, and SR-PCE on VMware.


Important

  • As Crosswork Network Controller cluster nodes place high demands on the VMs, ensure that you have not oversubscribed CPU or memory resources on the machines hosting the nodes.

  • Ensure that you have a docker-capable host to load the installer tool.

  • The VM data store(s) must have disk access latency < 10 ms and > 4000 IOPS.

  • The network bandwidth from Node IP towards to Management VIP should be at least 8000 Mbps.

Table 6. Resource footprint for VMware

Component

vCPU

Clock Freq (GHz)

Memory (RAM)

Network Interface Controller (NIC)

Storage (Boot disk + Data disks)

Crosswork Network Controller Hybrid or Worker node

12

Minimum clock reservation: 18 GHz

>= 2.20

96 GB

10 Gbps

 See VM requirements

Crosswork Data Gateway On-Premise Standard

12

>= 2.20

48 GB

10 Gbps

70 GB (50 GB + 20 GB)

Crosswork Data Gateway On-Premise Extended

20

>= 2.20

96 GB

10 Gbps

570 GB (50 GB + 520 GB)

Cisco NSO

16

>= 2.20

256 GB

10 Gbps

1 TB

Cisco SR-PCE

Note

 

This is the requirement for running a Cisco XRv9K with SR-PCE functionality enabled.

8

>= 2.20

24 GB

10 Gbps

70 GB

Basic SCP Server (for storing backups)

-

-

-

-

At least 25 GB (recommended)

Resource footprint for KVM

This topic explains the resource requirements per VM to deploy Crosswork Network Controller Hybrid or Worker nodes, Crosswork Data Gateways, and NSO on KVM based hypervisor.


Important

  • As Crosswork Network Controller cluster nodes place high demands on the VMs, ensure that you have not oversubscribed CPU or memory resources on the machines hosting the nodes.

  • The VM data store(s) must have disk access latency < 10 ms and > 4000 IOPS.

  • The network bandwidth from Node IP towards to Management VIP should be at least 8000 Mbps.

Table 7. Resource footprint for KVM

Component

vCPU

Clock Freq (GHz)

Memory (RAM)

Network Interface Controller (NIC)

Storage (Boot disk + Data disks)

Crosswork Network Controller Hybrid or Worker node

12

Minimum clock reservation: 18 GHz

>= 2.20

96 GB

10 Gbps

 See VM requirements

Crosswork Data Gateway On-Premise Standard

12

>= 2.20

48 GB

10 Gbps

70 GB (50 GB + 20 GB)

Crosswork Data Gateway On-Premise Extended

20

>= 2.20

96 GB

10 Gbps

570 GB (50 GB + 520 GB)

Cisco NSO

16

>= 2.20

256 GB

10 Gbps

1 TB

Basic SCP Server (for storing backups)

-

-

-

-

At least 25 GB (recommended)

Resource footprint for single VM deployments

This table lists the recommended resources to deploy Crosswork Network Controller on a single VM.


Important

  • The VM data store need to have disk access latency < 10 ms and > 4000 IOPS.

  • The network bandwidth from Node IP towards to Management VIP should be at least 8000 Mbps.

Table 8. Crosswork Network Controller on a single VM

VM profile

vCPU

Memory (RAM)

Storage

Use case
XLarge

24

128 GB

1 TB

The XLarge VM profile is used to deploy the Crosswork Network Controller Advantage tier (which includes Optimization Engine, Active Topology, Service Health, and more) on a single VM.

Large

12

96 GB

1 TB

The Large VM profile is used to deploy the Crosswork Network Controller Essentials tier on a single VM.

Small

8

48 GB

650 GB

The Small VM profile is only used to deploy the arbiter VM in a geo HA setup.

Special Considerations

In addition to the above instructions, there may be certain setup options that you need to consider before you begin the installation.

  • Check versions of NSO and SR-PCE – Please see the Release Notes for Crosswork Network Controller 7.1.0 to know the NSO and SR-PCE versions compatible with Crosswork Network Controller.

  • Are you going to use self-signed certificates? – if yes, you need to make the certificates available. For more information on the type of certificates supported and how to manage them, see the Manage Certificates section in the Cisco Crosswork Network Controller 7.1 Administration Guide.

  • Do you plan to integrate Crosswork with external authentication servers?– Integration with TACACS+ or other external authentication servers will require you to have credentials created for the Crosswork user accounts and roles.

  • In Crosswork Data Gateway, do you want to configure a Syslog server to collect the syslog?– if yes, then provide the host name or IPv4 or IPv6 address of an external syslog server. Or, you have the option to configure the syslog server using the interactive console after the installation is complete.


    Note

    IPv6 deployments allow the use of both full-form and short-form IPv6 addresses during installation. In the backend, all IPv6 addresses are normalized to a standard format regardless of the input form.

  • In Crosswork Data Gateway, do you want to configure an Auditd server to collect the event logs?– if yes, then provide the host name or IPv4 or IPv6 address of an external auditd server. As an alternative, you have the option to configure the auditd server using the interactive console after the installation is complete.

  • Do you plan to enable the automatic execution of linked playbooks? – If yes, you must enable Playbook Job Scheduling and disable Credential Prompting for playbook execution in the Network Automation settings window. For more information, see the Enable Automatic Playbook Execution topic in the Cisco Crosswork Network Controller 7.1 Closed-Loop Network Automation guide.