DMF 8.5.0 TOI

The DMF Application Identification feature allows monitoring of applications identified from packets taken from filter interfaces and sent through the fabric by sending IPFIX reports to a collector. The feature provides a filtering function by forwarding or dropping packets from specific applications before sending the packet to the analysis tools.

In a typical CloudVision-DMF integration deployment, CloudVision Portal (CVP) deploys alongside the DANZ Monitoring Fabric (DMF). The DMF Controller communicates with CVP to retrieve its managed device inventory and configures port mirroring sessions on any CVP-managed production devices that are Arista Extensible Operating System (EOS) switches.

This document describes a new feature of Arista Analytics offering the ability to consolidate Netflow V9 and IPFIX records by grouping those sharing similar identifying characteristics within a configurable time window.

SwitchLightOS (SWL) switches can now report their CPU queue statistics and debug counters. Viewing these statistics can be done using the DANZ Monitoring Fabric (DMF) Controller CLI. The statistics are exported to any connected DMF Analytics Node.

The Service Node forwards packets based on the max-tokens and tokens-per-refresh parameters using the DMF Sample Service feature. The sample service uses one token to forward one packet.

This document lists the latest hardware support and other changes in DMF release 8.5.0.

This document briefly describes adding an access control list (ACL) command to the DANZ Monitoring Fabric (DMF) supported commands family. The feature allows access to the Analytics Node (AN) UI from specific IP addresses or ranges of IP addresses.

This document describes the extension of an existing feature allowing DMF EOS Filter Switches to send select flow metadata to the DMF Analytics Node for analysis. Previously, only SWL Filter Switches supported the feature.

This feature describes how Session Initiation Protocol (SIP) packets are parsed in a DANZ Monitoring Fabric (DMF) Analytics Node deployment and presented in a dashboard to allow the retrieval of data packets conveying voice traffic (RTP) from the DMF Recorder Node (RN). DMF accomplishes this by showing logical call information such as the call ID, phone number, and username. 

The DANZ Monitoring Fabric (DMF) Controller in Azure feature supports the operation of the Arista Networks DMF Controller on the Microsoft Azure platform and uses the Azure CLI or the Azure portal to launch the Virtual Machine (VM) running the DMF Controller.

This document describes the extension of an existing feature allowing DMF to use intra-fabric L2GRE tunnels.These tunnels enable forwarding unmodified production network packets over intermediate L3 networks used by DMF, which can now forward packets with Arista Networks Timestamp headers across L2GRE tunnels defined on EOS switches.

This document describes the extension of an existing feature. L3 Delivery Interfaces are now supported on select EOS switches with Jericho2 and higher ASICs. As a result, DMF Managed Services that need an L3 Delivery Interface can now use the L3 Delivery Interface defined on the EOS switch.

While retaining all information from the previous version, the new policy page features a new layout and design and offers additional functionalities for easier viewing, monitoring, and troubleshooting of policies.

This feature provides a method to rename a DMF policy.DMF 8.5 Controllers support the Policy rename feature.

This document describes two possible uses of Isilon storage connected to a DMF Recorder Node: As extra storage space extending the storage provided by the local disks on the Recorder Node. As primary storage space that relies on the local disks of the Recorder Node in a failure scenario. This secondary mechanism assumes that the remote disk configuration on the DMF controller is correct.

Latency and drop information help determine if there is a loss in a particular flow and where the loss occurred. A Service Node action configured as a DMF-managed service that, given two separate taps or spans in the production network, can measure the latency of a flow traversing through these two points. It can also detect packet drops between two points in the network if the packet only appears on one point within a specified time frame, currently set to 100ms.

Enable egress sFlow to sample traffic sent to any DANZ Monitoring Fabric (DMF) Recorder Node (RN) attached to the fabric. Examining these sampled packets on a configured sFlow collector allows the identification of post-match-rule flows recorded by the RNs without performing a query against the RNs. While not explicitly required, Arista Networks highly recommends using the DMF Analytics Node (AN) as the configured sFlow collector, as it can automatically identify packets sampled utilizing this feature.

Previously, DMF calculated the overlap policy limit by determining how many policies use the same filter interface, irrespective of whether the policies are active or inactive. By default, the overlap policy limit is 4, and the maximum is 10.

This feature enables the tunnel interfaces on the SAND platforms to perform filtering based on all options provided by DMF. 

DMF 8.5 introduces a newly designed Create Policy configuration workflow, replacing the former workflow page.

Integrate subnets and corresponding extensible attributes from an Infoblox application into Arista Analytics’ collection of IP blocks and corresponding list of attributes.

This document describes a new feature of Arista Analytics that combines Netflow and IPFIX records containing application information with Netflow and IPFIX records containing flow information.This feature improves the visibility of data per application by correlating flow records with applications identified by the flow exporter.

In DMF, all SWL OS switches with the same underlying ASIC have the same RTAG7 hash parameters configured by default. After configuring MLAG to load balance traffic from filter to delivery switches, and when the number of interfaces in the MLAG and LAG in the delivery switch is the same, the traffic will not be load balanced in the delivery switch because of hash polarization.

Match VMware vCenter-specific information in the policy. Specifically, this feature matches traffic using VMware vCenter Virtual Machine (VM) names. Requires DANZ Monitoring Fabric (DMF) vCenter integration.

A new feature of Arista Analytics offers the ability to upsample traffic volume sampled by NetFlow V9/IPFIX and SFlow.This feature provides a better visibility of traffic volumes by approximating the number of bytes and packets from samples collected by the NetFlow V9/IPFIX or SFlow sampling protocols. It provides those approximation statistics along with the ElasticSearch statistics. The feature bases the approximations on the flow exporter’s sampling rate or a user-provided fixed factor.

Prometheus is an open source monitoring and alerting toolkit. It collects and stores metrics from different sources in a time-series database. Prometheus offers a powerful query language, which allows users to analyze and visualize the collected data in real-time. With its robust alerting system, Prometheus can also notify users of potential issues which helps with their timely resolution.

The DISK_LOW notification is no longer produced when disk usage is high and the packet recorder is configured with the Rolling-FIFO memory eviction policy, which is the default policy. In Rolling-FIFO policy mode, the disk is expected to be constantly near full, evicting the oldest packets to free up space for the newly recorded packets. In this mode, a single warning log message is produced including a note explaining that is the expected behavior.

Like SWL switches, EOS switches now report their SKUs to the DANZ Monitoring Fabric (DMF) Controller. View the EOS switch SKU using the DMF Controller CLI or GUI.

The feature in DMF adds the ability to manually configure static IP addresses for IPAM-managed switches. In an IPAM-enabled environment, the administrator may configure some or all switches using this feature. The IPAM module automatically configures the switches with no static IP address assignment.

A DMF fabric consists of a pair of controllers, switches, and managed appliances. This feature allows the user to retrieve the infrastructure metrics (interface counters, CPU usage etc.) associated with all these devices centrally from the controllers using its REST API.

The DANZ Monitoring Fabric (DMF) optimizes transport port ranges and VLAN ranges within a single match rule. Improvements in DMF 8.5 now support cross-match rule optimization.

User Defined Field (UDF) filtering enables offset-based matching. This feature supports the use of UDFs on EOS 7280R3 platforms. 

In DMF metadata is appended to the packets forwarded by the fabric to a tool attached to a delivery interface. This metadata is encoded primarily in the outer VLAN tag of the packets.

The Wildcard tunneling feature allows the DANZ Monitoring Fabric (DMF) to decapsulate L2GRE-based tunneled traffic from any remote source. This feature, supported on SwitchLightOS (SWL) based DMF switches in prior releases, now allows wildcard tunnels on Arista EOS-based DMF switches. Please refer to the DMF User Guide for more information on configuring the feature.