最新VMware NSX网络虚拟化PPT学习课件

GCRReviewSessionforVMWorldBriefing,RickChenVMWareNSBU,颠覆传统技术,打造软件定义数据中心,#NET7388S,Agenda,NSXMessageQuickUpdateVMWareMessageforOpenstackMediaFeedbackandResponse,NSXMessageQuickUpdate,WhatisVMwareNSX?,WhatisVMwareNSX?,ExistingPhysicalNetwork,WhatisVMwareNSX?,ExistingPhysicalNetwork,WhatisVMwareNSX?,NetworkHypervisor,ExistingPhysicalNetwork,WhatisVMwareNSX?,NetworkHypervisor,VirtualNetworks,ExistingPhysicalNetwork,TheVirtualNetwork,TheTimeisNow,Source:CrehanResearchInc.,40%ofvirtualizationadminsalsomanagevirtualswitching,77%ofVMwarecustomersarepreparingfornetworkvirtualization,VisibilityandDebugging,VisibilityandDebugging,VM,VM,VM,Virtualizationmadenetworkvisibilitydifficult,Networkvirtualizationprovidesvisibility,BasicIdea,OneComplexNetwork,VLANs,StaticRoutes,VRFS,ACLS,VLANs,VLANs,ACLS,VRFS,Visibility&Troubleshooting,Hypervisor,PhysicalHost,NSXvSwitch,VM,Hypervisor,PhysicalHost,NSXvSwitch,VM,0,0,VM,VM,0,53,Visibility&Troubleshooting,Hypervisor,PhysicalHost,NSXvSwitch,VM,Hypervisor,PhysicalHost,NSXvSwitch,VM,0,0,VM,VM,53,0,OngoingWork:VCOPSIntegration,VirtualNetworkHealthMonitoring&Troubleshooting,PhysicalComponentsHealthMonitoringandTroubleshooting,RuntimeNetworkOptimization,Networkvirtualizationdecouplescorrectnessfromperformancenetworkwide.Traditionally,thesearecoupled.Forexample,addinganewboxoftenmeansdowntimeandconfigurationchanges.Providesabilitytochangeperformancecharacteristicsonthefly.,Example:RuntimeDeploymentofDistributedRouting,VM,VM,VM,VM,VM,VM,VM,VM,VM,VM,VM,VM,VM,VM,VM,VM,LatencyImpactonProductionNetwork,AndMuch,MuchMore,MPLSintegrationControlplanefederationPolicyframeworksFlow-leveltrackingforfabricoptimization,NSXEcoSystem,VMwareNSXEcosystem,SeeingBroadAdoption,EcoSysemIntegrationandPositioningToday,NSXforMHOvsdbforL2-L3capabilityintegration,NSXOptimizedForvSphereServiceComposerforL4-L7integration,UnifiedNSXPlatformFromL2L7Integration,VLAN,NSXTheNetworkVirtualizationPlatform,PhysicalNetwork,vSphereHost,vSphereHost,KVM,XenServer,Hardware,Software,ControllerCluster,VM,VM,CMP,Tunnelsarelikecables,Physical,STT,Hypervisor,Hypervisor,WORLD,VXLAN,VXLAN,VirtualNetwork,Cable,Cable,Cable,CopperCable,Controller,Thirdpartyhardware,WhyNotaSingleTunnelFormat?,STTwasdesignedtooptimizeperformanceforhypervisor-hypervisortrafficLeveragingcommodityNICbehaviorsothattunnelinghasnegligibleperformanceimpactUnfortunately,itshardforswitchestoimplement&canraiseissueswithfirewallsVXLANisthedefactoindustrystandardfornetworkvirtualizationIdealformulti-vendorsituations(e.g.vswitch-physicalswitchcommunication)WillstarttoseeNICsupportforhighperformanceinthenextyearExtensibilityoftheheaderlikelyneededSTThas64-bit“context”vs24-bitVNITunnelformatdecoupledfromcontrolplaneTunnelformat!=virtualizationarchitecture,HardwareVTEPs,Benefits:Fine-grainedaccess:canpullasinglephysicalportintothevirtualworldConnectbaremetalworkloadswithhigherperformance/throughputSameoperationalmodel(provisioning,monitoring)asvirtualnetworksConsistentprovisioningandoperationsforentireDataCenter,regardlessofworkloads,overasimpleIPfabric,API(OVSDB),Tunnels(VXLAN),PhysicalWorkloads,VM,ControllerCluster,VM,VM,Logicalnetwork(VNI),ConnectingthePhysicaltotheVirtual,VMMACS,PHYMACS,IPUnderlay(nomulitcastrequired),VMwareMessageforOpenstack,CloudManagementPlatforms(CMPs),AnatomyofaCloudManagementPlatform,APILayer,CMPLogic(governance,workflow,placement),DriverLayer,WebGUI,CLI,SDK,CloudManagementPlatform,Identity,AnatomyofOpenStack,WebGUI,LinuxCLIs,PythonSDKs,Compute&ImagesAPI,ComputeLogic(quotas,scheduling),ComputeDrivers(vSphere,KVM),NetworkAPI,NetworkLogic(quotas,scheduling),ComputeDrivers(NSX,Cisco),BlockStorageAPI,BlockStorageLogic(quotas,scheduling),BlockStorageDrivers(vSAN,EMC),Userauthentication,authorization,Nova/Glance,Neutron(Quantum),Cinder,Keystone,Horizon,OpenStackCMP,ButWhatAbout.,Free/opensourceCMPsarenothingnew:Eucalyptus,OpenNebula,CloudStackareolder,withsimilarcapabilitiesItisneverfreetoensuresmoothoperationofcomplexsoftwareinfrastructureComesdownto:Builduplargeinternalteamabletotroubleshoot/fixOpenStackissues.Butstillneedtofindawaytosupportlowerlayersofsoftwareinfrastructure(e.g.,hypervisor,storage)Buysupportfromavendor(e.g.,useofenterprisedistroswith“free”Linux).,Free!,Misconception:OpenStackisaProduct,No,itisanopensourcecodebase,managedbyOpenStackFoundationManagesprocessaroundchangestotheopensourcecodebaseProvidesmarketing/promotionofOpenStack,managestrademark.OpenStackis/willbeavailableinmanydifferentforms,including:,“Rollyourown”:Downloadframeworksourcecode,buildinternalteamtodoalmosteverything.,“Distro”:Packagedframeworkcodewithinstall/configmgmtbundledwithOS.Payforsupport.,“Core+”:Commercialproduct,usesOpenStackcodeandAPIs,butoftenalsoincludeproprietaryaddons.,“APICompat”:ExistingproductaddsOpenStackAPIcompatibility.,Tradeoffs,Flexible/CustomizableVendorAgnosticComplex+resourceintensivetooperate.Missingmgmttools.,LessFlexibleVendorSpecificEasiertoadopt+operateIncludesmgmt.tools,Misconception:WithOpenStackAPI,lowerlayersdontmatter.,OpenStackisaframework.AlwaystalkaboutOpenStackonX.Yourunderlyinginfrastructurematters:Compute:issueswithnoisy-neighborslikeAWS?Network:limitedbyVLANs?Storage:provideSLAstoguaranteeIOPS?Management:proactivelyidentify&quicklyfixissues?,Misconception:OpenStackReleasesarelikeProductReleases,Time-basedreleases,every6months.InclusioninOpenStackisprimarilybasedoncodereview+unittests.Notfunctionaltesting,muchlessscale/performance/stresstesting.Time-basedrelease.Morelikean“earlybeta”.Usersordistrosdoadditionaltestingonwhattheycareabout,report/fixbugs,anddecidewhenitis“goodenoughSignificantvariationsintheamountoftesting,rangingfrom:“wellwornpath”ofbasicfunctionalitywithcommondrivers/configurations“testedonce”byvendorwhowanted“checkbox”ofOpenStackcompatibilityExtendstothingslikedocumentation,upgrades,etc.,Essex,Folsom,Grizzly,Havana,Icehouse,2012.1,2012.2,2013.1,2013.2,2014.1,Misconception:TheOpenStackAPIisa“Standard”,No.Today“OpenStack”isanycloudbasedonsomevariantoftheOpenStacksoftware.Thisprovides:AvendorneutralAPISharedknowledge/conceptsandsimilartoolsButisnota“standard”intermsofinteroperabilityRelyingon“similarcode”allowsforsignificantvariation:APIextensionsleadtofragmentation(e.g.,criticismofRAX+HPbythefoundation)RunningdifferentOpenStackversionsorservices(nova-networkvs.Neutron)RunningwithdifferentconfigurationoptionsDriversmayhavesubtledifferencesinimplementation(e.g.L2broadcastinNeutron)Howtogetclosertorealinteroperability?Someincommunityalreadypushingconformancetesting,realAPIspecificationsExpecttoseeVMwaregetinvolvedintheseeffortsmovingforward,The“standardkilogram”,Misconception:ChoosingbetweenOpenStackandVMware,Reality:OpenStackcanrunontopofcompute/network/storage/mgmt:entirelyfromVMwareecosystementirelyfromothersourcesamixofVMwareecosystem+othersourcesOpenStackcanco-existwithotherCMPsinthesameVMwarestack.Ex:UseOpenStacktogivedevelopersprogrammaticself-serviceaccesstoasliceofyourvSpherecapacityUsevCenterorvCACtomanageITworkloadsthatrequiresignificantgovernance,Misconception:OpenStackisonlyforServiceProviders,Has“roots”inSPs,butsomelargeenterprisesactlikeSPs:Viewtheircloudplatformitselfasakeypointofcompetitivedifferentiation.Havetheirownlargeinternaldevelopmentteamsbuildingcloudsoftware.SeeOpenStackasaflexibleplatformtheycancustomize+use.SProots&frameworkcomplexitycanbestumblingblocksformajorityofenterprises:focuson“newcloudapps”weakenterprisefeatures(e.g.,SLAs).Limitedadmintoolstoconfigure,monitor,troubleshootetc.Standalonedesign:nointegrationintoexistingenterpriseworkflowsVeryLinux-centric,withlotsofdifferentservicestoinstall/manage.WiderenterpriseadoptionwilldependsonintegrationOpenStackbeingintegrated+soldaspartofanenterprise-gradeproduct.,OpenStackonVMware:Devops+EnterpriseITonasingleplatform,Best-of-BreedVMwareTechnologiesandOpenStack,Tenant-Side,Admin/Operator-Side,Horizon(WebPortal),vSphere&vCenter,CLITools&Scripts(DevOpsAutomation),vCACApplicationDirector,Nova,Neutron,Cinder,Glance,NSX,Datastores3rd-party/vSAN,vCentertemplates,CloudOperatorTools(vCenter,vCOPs,LogInsightetc.),ThirdPartyOperatortools(Puppet/Chef,scripts,nagios.),LiveDemoofOpenStackonvSphere+NSX,Nova(compute),vSpheredriver,Horizon,Cinder(blockstorage),vSpheredatastoredriver,Neutron(network),NSXdriver,vCenter,NSXController,vSph