网络虚拟化的变革

2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 1 网络虚拟化的变革 思科系统 (中国 )网络技术有限公司 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 2 Agenda 链路的虚拟化 设备的虚拟化 服务的虚拟化 全面的虚拟化 总结 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 3 司空见惯的虚拟化 Ethenet port chanel Multilink ppp HSRP/GLBP Local Access Loop=64 kbps DLCI: 400 PVC DLCI: 500 DLCI: 200 DLCI: 100 PVC Frame-relay/ATM-SVC/PVC 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 4 Virtualized Interconnect L3 VPNs MPLS VPNs, GRE, VRF-Lite, MPLS services over GRE, VNETs* L2 VPNs - AToM, Unified I/O, VLAN trunks, OTV* 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 5 虚拟链路 (ipsec/ssl-vpn)实现远程用户安全接入 总部 SITE-SITE VPN 业务伙伴 Extranet VPN 到业务伙伴的 WAN扩展 新应用 新的业务模型 远程办公室 Intranet VPN 低的成本 , 通道连接，丰富的 VPN服务 新应用，省钱 家庭办公 移动用户 POP POP 远程访问 VPN 安全 , 可扩展 , 加密的通道 省钱，简单 VPN 路由器 ISR VPN 路由器 ISR VPN 软件 VPN 软件 思科 ASA5500 作为EASY-VPN SERVER AAA认证 服务器 ACS GRE-VPDN 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 6 Storage IPC LAN Processor Memory I/O I/O I/O Storage IPC LAN I/O Subsystem Processor Memory FCoE 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 7 数据中心网络融合 : IP,SAN,HPC Unified Fabric Unified Fabric and I/O 存储网络 管理网络 后台网络 前端网络 网络备份 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 8 Agenda 链路的虚拟化 设备的虚拟化 服务的虚拟化 全面的虚拟化 总结 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 9 VLAN-TRUNK VLAN Tag added by incoming port VLAN Tag stripped by forwarding port 802.1Q VLAN identifier 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 10 路径隔离： router vrf（ Virtual Routing/Forwarding） 设备虚拟化 Control Plane Virtualization Data Plane Virtualization Management Virtualization 数据路径虚拟化 Single-hop Multi-hop 802.1q DLCI VPI/VCI PW, VFI Tags / circuits Tags / circuits vlan vlan 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 11 Branch Blue VRF Green VRF Red VRF Branch Blue VRF Green VRF Red VRF Branch Blue VRF Green VRF Red VRF Branch Blue VRF Green VRF Red VRF Network Virtualization - Extension Servers Mainframe WAN Which Virtualization Technology For Extending: - L2 ? - L3 ? Campus and Data Center 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 12 Virtual SANs (VSANs)-将 lan的概念移植到存储 Eliminates costs associated with separate physical fabrics through consolidation Allows partitioning of individual switches and/or fabrics Overlay isolated virtual fabrics on same physical infrastructure VSANs contain zones and separate fabric services Availability Fault isolation isolate virtual fabrics from fabric-wide faults/reconfigurations Scalability Replicated fabric services per VSAN Security Complete hardware isolation between virtual SAN Department/ Customer A Shared Storage Department/ Customer B VSAN-Enabled Fabric Mgmt VSAN MDS 9222i 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 13 Inter-VSAN Routing (IVR) Sharing Resources Across VSANs Allows sharing of centralized resources such as tape and disks across VSANs without merging separate fabrics Provides high fabric resiliency and VSAN-based manageability Distributed, scaleable, and highly resilient architecture Transparent to third-party switches Enables blade-per-VSAN architecture for blade servers Tape VSAN_4 (access via IVR) HR VSAN_3 Marketing VSAN_2 Blade Server Tape VSAN_4 (access via IVR) VSAN-Specific Disk Engineering VSAN_1 Marketing VSAN_2 HR VSAN_3 IVR IVR MDS 9222i MDS 9222i IVR 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 14 Virtual Firewall Core/Internet Catalyst 6500/7600 FW SM A B C VFW VFW VFW MSFC E.g. three customers a three security contexts scales up to 256 VLANs can be shared if needed (VLAN 10 on the right-hand side example Each context has its own policies (NAT, access-lists, fixups, etc.) Core/Internet Catalyst 6500/7600 A FW SM B C VFW VFW VFW MSFC Vlan 10 Vlan 20 Vlan 30 Vlan 11 Vlan 21 Vlan 31 Vlan 10 Vlan 11 Vlan 21 Vlan 31 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 15 Online Bank Application Virtualized Application Switching ACE Way Cisco ACE ESX Server Virtual Machines Bank Apps Micro soft Orcale Microsoft Outlook Virtual Machines Bank Apps Micro soft Oracle App Has Capacity Available Ideal Isolation 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 16 IDSM-2 Module for the Catalyst 6500 Chassis Catalyst-integrated security module delivering full-featured intrusion protection Industry-exclusive product providing high speed threat protection Promiscuous operation with no impact on Catalyst performance or reliability Common code base for consistent features and signature updates Enhanced management simplifying deployment 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 17 StackWise Plus 统一堆叠 如同一台设备 64Gbps 堆叠吞吐量 与 StackWise 的向后兼容 一个网管单元（ IP、 SNMP、CLI、 STP 协议、 VLAN ） 跨堆叠 EtherChannel 、跨堆叠 QoS 主用 /备用架构支持主机故障切换 双向堆叠提供容错性 业务智能转发 配置和管理自动化 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 18 语音服务器群集 CLUSTER 集 群服务器 Infiniband VPN SERVER CLUSTER ASA5500 IPSEC/SSL VPN CALLMANAGER Internet 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 19 VPC 基于 Nexus7000虚拟化技术 跨机箱多链路捆绑 避免以太网环路 增加上行带宽 双活的工作机制 快速故障收敛 网络更简单 传统设计 VPC 设计 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 20 Si Si特性 网络系统虚拟化 不中断的转发 /机箱间的状态切换 （ NSF/SSO） 多机箱 EtherChannel（ MEC） VSS的优势 通过简化网络来提高运行效率 促进不中断的持续通信 将系统带宽容量扩展到 1.44 Tbps 虚拟交换系统 1440 网络系统虚拟化 物理视图 逻辑视图 主控制层面 主数据层面 热等待 控制层面 主数据层面 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 21 FEX = Virtual Chassis 简化网络，简化管理 ToR 的布线， EoR 的架构 Nexus 5000 Virtualized chassis + Nexus 5000 Nexus 2000 Fabric Extender = 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 22 Layer-2 Protocols Layer-3 Protocols VLAN mgr STP OSPF BGP EIGRP GLBP HSRP VRRP UDLD CDP 802.1X IGMP snoop LACP PIM CTS SNMP Protocol Stack (IPv4 / IPv6 / L2) RIB RIB 1 RIB n VDC Layer-2 Protocols Layer-3 Protocols VLAN mgr STP OSPF BGP EIGRP GLBP HSRP VRRP UDLD CDP 802.1X IGMP snoop LACP PIM CTS SNMP Protocol Stack (IPv4 / IPv6 / L2) RIB RIB 1 RIB n Infrastructure Linux 2.6 Kernel Layer-2 Protocols Layer-3 Protocols VLAN mgr STP OSPF BGP EIGRP GLBP HSRP VRRP UDLD CDP 802.1X IGMP snoop LACP PIM CTS SNMP Protocol Stack (IPv4 / IPv6 / L2) RIB RIB 1 RIB n Layer-2 Protocols Layer-3 Protocols VLAN mgr STP OSPF BGP EIGRP GLBP HSRP VRRP UDLD CDP 802.1X IGMP snoop LACP PIM CTS SNMP Protocol Stack (IPv4 / IPv6 / L2) RIB RIB 1 RIB n 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 23 VN-Link 以虚对虚 VMW ESX Server VMW ESX Server Cisco VN-Link VM #5 VM #8 VM #7 VM #6 VM #4 VM #3 VM #2 VM #1 VM #4 VM #3 VM #2 VM #1 VN-Link Property Mobility Vmotion for the network Ensures VM security Maintains connection state Virtual Center VMs Need to Move VMotion DRS SW Upgrade/Patch Hardware Failure Policy-Based VM Connectivity Non-Disruptive Operational Model Mobility of Network & Security Properties Cisco VN-LinkVirtual Network Link 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 24 Agenda 链路的虚拟化 设备的虚拟化 服务的虚拟化 全面的虚拟化 总结 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 25 Cisco WAAS/Mobile Solution Overview Branch Office Regional Office WAAS WAAS WAAS Large Campus OR Data Center WAAS Mobile Server VPN VPN WAAS Mobile Server International Mobile User WAAS Mobile SW over VPN WAAS Mobile SW over VPN Domestic Mobile User WAN Internet 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 26 W1 A1 FS1 FS2 V1 E1 分支机构中的虚拟数据中心服务 IP 网络 W1 A1 FS2 E1 数据中心 分支机构 1 分支机构 2 WAAS V1 W1 A1 FS1 FS2 V1 E1 FS1 WAAS WAAS 为分支机构用户提供与总部一样的应用性能 降低总拥有成本 提高业务灵活性和响应能力 简化数据保护，备份和永续性 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 27 虚拟会议 -webex/meeting place -经典的云计算 面对面的沟通无论在是时间上还是成本上都会是很大的问题。 需要集成的虚拟会议解决方案 统一的拨号规划 目录服务 服务质量 管理 统一的网络架构，便于管理 减少开支 同一通信网络 唯一的技术支持队伍 应用层面的培训 运维开销降低 统一的工具 用户方便地实现多种会议服务 拨号 /点击 进入会议 多种会议服务 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 28 思 科联络中心解决方案 互 联网 网 关 固 话网 共享 应用和服务 无处不在的 基于网络的托管 可 分布的 服务和终端 一致的 客户体验 座 席 Web 应 用 基 于语音的 自我服务系统 业 务规则 路 由处理 处 理引擎 报 表系统 CRM Cisco 语音 分配管理系统 移 动座席 知 识员工 专 业技能组 语 音 /数据 网 络 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 29 思科网真，既虚拟又真实 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 30 思科三维网真 -将科幻变成现实 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 31 Agenda 链路的虚拟化 设备的虚拟化 服务的虚拟化 全面的虚拟化 总结 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 32 SAN L4-7 services L4-7 services Branches Data Center I Data Center II WAN/MAN/Internet Branches Data Center I Data Center II ranches ncheCampus Network and Compute Virtualization Network Virtualization Compute Virtualization Virtual Machines Clusters Storage Virtualization Partition Simplify/Pool Interconnect Consolidated I/O Segmentation VM-aware Networking Intelligent L2 Domains LAN Extension Centralized Management 2007 Cisco Systems, Inc. All rights reserved. Cisco Confidential 33 UCS 管理者 Embedded in Fabric Interconnect UCS多机箱 Fabric互联交换机 20 Port 10Gb FCoE 40 Port 10Gb FCoE UCS机箱 Fabric扩展器 Logically part of Fabric Interconnect Inserts into Blade Enclosure UCS 刀片服务器机箱 Flexible bay configurations Logically part of Fabric Interconnect UCS 刀片服务器