Alkira > Resources > Integrated Security and Network Services > Seamlessly Integrate Infoblox in Multiple Clouds Using the Alkira Cloud Networking Solution

Seamlessly Integrate Infoblox in Multiple Clouds Using the Alkira Cloud Networking Solution

Seamlessly Integrate Infoblox in Multiple Clouds Using the Alkira Cloud Networking Solution

Infoblox provides critical networking and security services including centralized, secure, and easy-to-manage DNS (Domain Name System), IPAM (IP address management), NTP (Network Time Protocol), DHCP (Dynamic Host Configuration Protocol) and DNS security. Alkira simplifies the integration of these Infoblox services in Cloud Exchange Point (CXP), enabling customers to seamlessly use them in multiple clouds.

With digital transformations and growing complexity in networks to support those transformations, the IP address management, including DHCP, IP Address Inventory, DNS, becomes a difficult task for IT administrators. Moreover, as businesses either expand or move their applications and workloads into multiple clouds, the complexity of adapting Cloud and integrating IP Management services increases exponentially. Security is another concern as businesses move their workloads to the cloud.

Alkira Cloud Networking as a Service (CNaaS), is the fastest way to Cloud. Businesses can deploy Infoblox as a service in Alkira to manage DNS, DHCP, IPAM and DNS Security for their multi-cloud multi-region environments. Some of the Alkira customers are already using Infoblox in their existing on-premises networks, and they can easily integrate Infoblox instances in Alkira CXP to expand and utilize the same services for their growing cloud environments.

Figure 1: Infoblox as a Service in Alkira Exchange Point

Deployment with Native Cloud :

Figure 2: Infoblox in Cloud Service Provider

In a traditional network environment Infoblox is deployed on-premises to provide network services such as DHCP, IPAM, DNS and DNS security. When customers migrate or expand their network to cloud environment, Infoblox instances can be deployed in the cloud. Customers may choose to have the same Grid (group of Instances managed by a single Grid Master Instance) manage Cloud Instances or deploy a new Grid Master in Cloud to manage a separate Grid for Cloud environment. Either way, each instance needs to be manually deployed and configured. Typically, network services are deployed in the model of a Shared VPC/VNET, where same resources can be shared with different customer departments (e.g. staging, testing, pre-production, production, etc).

Problem with this Approach:

Deployment Complexity:

Every cloud service provider has different constructs like a routing table, a subnet, an internet gateway, UDR, peering, etc., which work in different ways. When instances are deployed in a multi-cloud environment, managing and operating these constructs becomes even more complex, and it becomes a challenge to have an optimal design.

Shared Services Model Complexity:

Increased complexity when services deployed in a shared VPC/VNET design needs to be shared with resources in different departments in a multi-segment environment.

Anycast Routing Complexity:

Complex Routing configurations to support advertisement and preference of Anycast IP addresses from different regions.

Multi-Cloud Connectivity:

To provide same network services in different clouds, either services are redeployed in each cloud or traffic is backhauled to on-premises.

Alkira Approach:

Figure 3: Alkira CXP With Integrated Infoblox ServiceAlkira simplifies deployment of Infoblox networking and security through a single UI page of configurations. Customers can deploy multiple instances of Infoblox, assign them different roles, and implement multi-cloud multi-region design with high performance using Anycast capability of Infoblox.Figure 4: Alkira Portal UI Configuration for InfobloxFrom this single UI, below different design use cases for Infoblox instances in Alkira can be deployed:

Alkira Supported Deployment Models

New Grid in Alkira

Figure 5: Alkira CXP With New Infoblox GridCustomers new to Infoblox can introduce the service in their network, by deploying Infoblox as a Service in Alkira CXP. Customers can deploy Grid Master, Grid Master Candidate and Grid Members within Alkira for centralized IP management services.

Existing Infoblox Grid

Figure 6: Alkira CXP Infoblox Service with existing GridCustomers with existing Infoblox Grid Master, deployed in on-premises or Cloud, can either have the Alkira Infoblox instances join the existing Grid Master as a Grid Master Candidate/Members, or deploy a new Grid with a new Grid Master in Alkira for resources connected to the Alkira network.

Multi-Segment Deployment

Figure 7: Alkira Resource Share of Infoblox ServiceInfoblox service in Alkira CXP maintains the network segmentation. Customers can deploy new Grids in each segment with a separate Grid Master and Members, to keep isolation between different business departments. To optimize the solution and use the same Infoblox Service for different segments, customers can use the Alkira’s Resource Sharing feature to allow resources in another segment consume the same IP address management services.

Multi-Region CXP Deployment

Figure 8: Alkira Multi-Region With Integrated Infoblox ServiceInfoblox as a service in Alkira can be deployed in a single or multiple CXP regions. These multiple instances can utilize the Anycast capability of Infoblox to optimize the service response.

Alkira and Infoblox Solution Benefits:

Simple Design and Deployment

Alkira solution is built with simplifying cloud networking in mind and gives the customer a cloud-agnostic experience. Customers can deploy Infoblox services in Alkira as per their use case requirement from the Alkira portal.

Secure Multi-Cloud Approach

Alkira eliminates the need of configuring each CSP construct individually with a shared services VPC/VNET without compromising security. Using Alkira’s Resource Sharing feature from Alkira portal, the same Infoblox service is shared between different Alkira Segments. Refer to the blog Cloud Networking Design Patterns with Segmentation and Micro-Segmentation for deeper understanding of Segmentation supported by Alkira.

Anycast Routing with Reliability

Alkira implements the Anycast routing between different Alkira regions with reliability. Customers are only required to provide Anycast IP address and Alkira Region where Anycast should be supported.

Health Monitoring

Monitor overall health of the service and health of the individual Infoblox instance, deployed in Alkira, from a single pane of glass Alkira portal.

Multi-layered Security Policy

Control the traffic to Infoblox service with Alkira’s intent based Policies or use Firewall services integrated in Alkira for inspection. Visit the blog ‘Multi-Cloud Inline Traffic Inspection using Alkira’ for more information.

Modernize your cloud network with Alkira


To learn more about how Alkira can help simplify cloud networking for your organization, reach out and schedule a demo today.

You can also try our Cloud Insights tool for free here, giving you instant inventory and insights into your cloud networking resources.

You May Also Like

Alkira mobile app screens

Introducing the Alkira Mobile App: Network Visibility Wherever, Whenever

Enterprise networks are expected to run 24/7, and the teams responsible for them need visibility wherever work happens. Cloud environments, partner connections, security services, and provisioning workflows are constantly changing. When something needs attention, network and operations teams need a fast way to understand what happened, assess impact, and take the right next step. That...
Jacob Donovan
Simple diagram showing a network as a platform

The Network Needs To Be Part of Your AI Strategy

Enterprises are moving quickly on AI, but many are still running networking models designed for a slower, more centralized and static era. Today’s network has to connect clouds, data centers, campuses, branches, partner environments, and increasingly private AI infrastructure while enforcing consistent policy across all of it. That creates a new operational reality: every new...
Calvin Nguyen
Blue network shield checkmark illustration

Navigating DORA: Operational Resilience and Security by Design

The Digital Operational Resilience Act (DORA) is reshaping how financial institutions in the European Union manage operational risk related to information and communication technology (ICT). As the regulation takes effect, organizations must ensure that their critical ICT service providers support strong operational resilience, risk management, and oversight capabilities. For technology providers supporting financial institutions, this...
Misbah Rehman