Stretching a Data Center to the Cloud

"We're using the Cisco Cloud Network Controller to extend the application policies and constructs we have on-prem into the cloud," Nilsson says. "And because the controller is directly integrated with Azure, we don't have to use a separate GUI when configuring, deploying, and managing workloads in the cloud. It saves us a ton of time."

Security through microsegmentation

In addition to stretching its tenant environment, production workloads, and application policies to the cloud, Skanska is using the combination of Cisco Nexus Dashboard Orchestrator and HashiCorp Terraform to establish infrastructure as code (IaC) and accelerate network operations. On-premises deployments that used to take a week now take less than a day, Nilsson says, and the multiweek cloud deployments of the past are now completed in a few days. 

"We're mostly doing simple things like creating application profiles, bridge domains, and endpoint groups," he explains. "But our goal is to use Nexus Dashboard and Terraform to configure and automate everything in the future, both on-prem and in the cloud."

Although the two environments are being increasingly amalgamated, the resources within them are separated and secured through microsegmentation. Skanska's VMware footprint, for example, has been segmented into seven different endpoint groups.

"We're segmenting lots of things—tenants, endpoint groups, bridge domains, service contracts—which is really beneficial from a security standpoint," Nilsson says. "We view and manage our on-prem and cloud environments as a single domain, with segmentation reducing the attack surfaces."

Although there is more work to do, Nilsson says that Skanska has made significant progress aligning its on-premises Cisco ACI network with Microsoft Azure. And the company can extend the environment to additional clouds in the future using the same toolset and policies.

"This has been a big effort, and Cisco has been a fantastic partner throughout the process," he concludes. "Everyone has been very helpful and supportive, and we've really appreciated the technical assistance we've received from the engineers and the entire Cisco team."