思科的数据中心虚拟化解决方案-SEVT-Jiapeng

Virtual Storage
Presentation_ID
© 2006 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
10
网络虚拟化
User Identification (Per Port or 802.1x) Per User Role L2 VLANs L3 VRFs
Presentation_ID
© 2006 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
5
数据中心虚拟化目标
整合或者共享物理资产来提高利用率
减少物理设备，电缆，空间，电力与制冷
快速部署以及重部署资源以符合业务发展目标
3、后刀片服务器（Servers － Beyond Blades） 4、面向互联网的架构（Web-oriented architecture ） 5、企业聚合应用（Mashup）技术 6、专业化系统（Specialized systems） 7、社会化软件和社交网络（Social software and social networking） 8、统一通信技术（Unified communications） 9、商业情报技术（Business intelligence） 10、绿色IT技术（Green IT）
60–180 < 25% 40–400% 7–10
DC Records Retention (Years) 数据中心记录保管
DC Power and Cooling Costs数据中心电力跟制冷费用 ~ 25–30%
Data Center Operations数据中心维护
> 30%
“By 2008, 50% of Today’s Data Centers Will Have Insufficient Power and Cooling Capacity to Meet the Demands of High-Density Equipment”
VDCs and Contexts
Campus/WAN Campus/WAN Nexus 7000
Presentation_ID
© 2006 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
15
VDC应用模式
水平整合与垂直整合
Objective: Consolidate lateral infrastructure that delivers similar roles for separate operational or administrative domains. Benefits: Reduced power and space requirements, can maximize density of the platform, easy migration to physical separation for future growth
Virtual Virtual Virtual Firewall Firewall Firewall Context Context Context 11 1 Virtual SLB Context 29 Virtual Virtual Virtual SSL SSL SSL Context Context Context 33175
Source: Gartner, 2008
Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
3
Gartner 2009 10 大战略技术
1、虚拟化技术(Virtualization)
2、云计算(Cloud Computing)技术
Cisco Confidential
9
FRONT-END 前端虚拟化
Front-End Virtualization
VLAN VRF VDC VSS VPNs
Front-End
Virtual Network Services
Virtual Virtual Virtual Firewall Firewall Firewall Context Context Context 1 1 1
Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
4
虚拟化-定义
(一种表述）
Virtualization 虚拟化
Is the Pooling and Abstraction of Resources and Services in a Way That Masks the Physical Nature and Boundaries of Those Resources and Services from Their Users
11
数据中心里的分隔
Drivers
• Consolidate data centers from multiple organizational units (OUs) • Higher utilization of dedicated data center spaces
Needs
• Partition routing so groups can’t see/access each other (compliance/organizational boundaries) • Separate management for subset of services
Virtual SLB Context 29 Virtual Virtual Virtual SSL SSL SSL Context Context Context 3 3 175
Virtual Machines
Back-End
Virtual SANs/Unified IO
VSANs
vHBA
CNA
FCoE
UDLD
CDP 802.1X
GLBP
HSRP IGMP
VDC 1
VDC 2 VDC 3 VDC 4
VLAN PVLAN STP LACP …
Biblioteka BaiduUDLD CDP 802.1X CTS
LACP
…
CTS
PIM …
SNMP
Infrastructure Kernel
VDC – Virtual Device Context Cisco NX-OS能够将OS和硬件资源划分为模拟虚拟设备的虚拟环境
14
数据中心里用VDC做分隔
Using VDCs, management of both services and switching infrastructure kept completely indepdendent
Security-policy management and deployment by user group VRFs/VLANs can be deployed within context of each VDC
Presentation_ID
© 2006 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
6
T1S2-Cisco
从应用“独占资源” 向“共享资源”转变
用户接入 网络
单独的 应用系统
单独的 应用系统
单独的 应用系统
数据中心 网络
存储资源池 计算资源池
13
Segmentation
VDC - 虚拟设备环境
VDC 1 VDC 2 Layer 2 Protocols
Layer 2 Protocols
VLAN
PVLAN STP
Layer 3 Protocols
OSPF
BGP EIGRP
Layer 3 Protocols
OSPF BGP EIGRP PIM … GLBP HSRP IGMP SNMP
VRF-Lite + GRE, VRF-Lite End-to-End, MPLS VPN
WAN
Virtualized Services: FW, ACE, … VLANs Partition Server Farms
Mainframe
Servers
Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
Virtual Machines
服务器虚拟化 Back-End 虚拟化
SAN HBA Unified IO (FCoE) Storage
Back-End
Virtual SANs/Unified IO
VSANs vHBA CNA FCoE
Virtual Storage
Presentation_ID
Options
• VLANs/VRFs
• VDCs • Service contexts
Presentation_ID
© 2006 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
12
Segmentation
L3 VRF技术
IP交换 (向访问层) IP交换 (向核心层) GRE Tunnel VRF-LITE end to end Partner Green VRF VRF Red VRF Guest VRF Global Table
Cisco Confidential
7
数据中心虚拟化一览
Front-End 数据中心的虚拟化
核心层 VDC 汇聚层、服务层 VDC VSS VPC 访问层
Front-End Virtualization
VLAN VRF VDC VSS VPNs
Front-End
Virtual Network Services
每个VDC拥有其自身的软件进程、专用硬件资源(接口)和独立的管理环境 独立的安全管理界限划分和故障隔离域 VDC有助于将分立网络整合为一个通用基础设施，保留物理上独立的网络 的管理界限划分和故障隔离特性，并提供单一基础设施所拥有的多种运营 成本优势。
Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
802.1q
SVI or Sub-Interface sub-interface (Layer 3)
Physical Interface (Layer 3)
First L3 Hop Device
Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
© 2006 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
2
数据中心的趋势
Days to Deploy Applications部署应用的天数 Server/Storage Utilization服务器/存储利用率 Annual Storage Growth 每年存储增长
共享的应用服务
独立的专用 主机模式
存储分离的 高端服务器模式
数量众多的 机架及刀片式服务器
共享的服务导向模式 标准化资源组成“共享池” 根据需求以构筑 数据中心的“虚拟化”基础架构
Presentation_ID
© 2006 Cisco Systems, Inc. All rights reserved.
© 2006 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
8
目录
数据中心虚拟化技术的概览
CISCO的数据中心虚拟化解决方案 应用案例分享-CISCO IT
Presentation_ID
© 2006 Cisco Systems, Inc. All rights reserved.
数据中心的虚拟化 解决方案
Presentation_ID
© 2006 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
1
目录
数据中心虚拟化技术的概览
CISCO的数据中心虚拟化解决方案
应用案例分享-CISCO IT
Presentation_ID