CloudVision® is Arista’s modern, multi-domain management platform that leverages cloud networking principles to deliver a simplified NetOps experience. Unlike traditional domain-specific management solutions, CloudVision enables zero-touch network operations with consistent operations enterprise-wide, helping to break down the complexity of siloed management approaches.

As Arista’s platform for Network as-a-Service, CloudVision is designed to bring OpEx efficiency through automation across the entire network lifecycle - from design, to operations, to support and ongoing maintenance.

CloudVision - Arista’s Platform for Network as-a-Service

Featured Video: CloudVision Overview

CloudVision is built on a Network Data Lake (NetDL) architecture that leverages real-time state to provide an abstraction of the physical network to a broader, network-wide perspective allowing for a more efficient approach for several operational and network telemetry capabilities including the following highlights:

• Multi-domain scope, bringing consistent network operations to Data Center, Campus, WAN, and multi-cloud use-cases
• Cloud-native architecture, offered with the same feature set across both cloud service (SaaS) and on-prem appliance (virtual or physical) deployment options
• Real-time state streaming for network telemetry and analytics – a modern approach to replace legacy polling per device
• State repository, analytics engines and telemetry views to provide an unprecedented level of granularity in real-time monitoring and historic network state for forensic troubleshooting
• Cognitive analytics, leveraging the rich NetDL data source as the basis for training AI/ML models to generate better recommendations and insights for operators
• Turn-key automation with CloudVision Studios for initial and ongoing provisioning, ZTP as-a-Service, configuration management and network-wide change control – including automated upgrades, network rollback, and network snapshots
• Risk and compliance management providing a real-time view of bug and security vulnerability exposure; and patch and lifecycle management
• Centralized API gateway for both northbound and southbound integrations, leveraging OpenConfig, gRPC, and REST APIs

CloudVision features some domain-specific capabilities designed for multiple operator types, managing Day-0 through to Day-2 operations.

Campus

• Campus dashboard and landing page – designed to present key wired and wireless client information to the user to assist with everyday operations in the campus
• Quick actions – simple point and click guided workflows, including: provisioning port profiles via front panel port views; and diagnostic workflows for interface cycling and cable tests
• Endpoint overview – search for wired and wireless endpoints connected to the network, view telemetry about these endpoints, and understand their client journey – in real-time or over a time continuum

Enterprise WAN with CV Pathfinder

• Multi-domain visualization – network topology in geographic view providing visibility of data center, campus, branch, and public cloud networks, and how they connect together via the WAN
• Application identification – identify and classify applications into virtual topologies with the Pathfinder service and monitor application usage with real-time telemetry
• Adaptive overlays – visualize Adaptive Virtual Topologies created by the Pathfinder service, along with Dynamic Path Selection tunnels

Application Observability with CV UNO

• Workload application and infrastructure visibility – leveraging the multi-modal power of NetDL sourcing information from applications and external systems, such as the hypervisor, to provide a dynamic application-to-network graph with real-time and historical data
• Proactive risk analysis – evaluate potential network changes before deployment, ensuring operational resilience and stability
• Real-time impact analysis – assist operators determine whether performance issues stem from the network or the application, expediting resolution and simplifying coordination across operations teams

Zero Trust Networking Services with Multi-domain Segmentation Services (MSS)

• Endpoint identification and tagging – manage microperimeter by dynamically identifying endpoints and workloads and applying tags used for policy enforcement
• Traffic mapping service – create and manage zero trust traffic policies based on network observation and recommendations
• Continuous traffic and policy monitoring – real-time visibility of policy violations and reporting of flows affected by traffic drops, providing vital intelligence of how the zero trust policies are impacting endpoints