思科IP存储网络架构

思科IP存储网络架构,思科系统(中国)网络技术有限公司,IP相关协议IPSAN的设计IPSAN的案例分析思科智能存储网络平台总结,议程,IP的相关协议-iSCSI,FCIP,iSCSI介绍,iSCSIInternetSCSIProtocol.isanewtransportprotocolforSANs.leveragesanEthernetinfrastructure.representschoiceforSANconnectivity.isverycomplementarytoFibreChannel.EnableslowercostSANinfrastructureManynewiSCSIsolutionsMidrangeserverandapplicationconnectivityBladeserverSANconnectivityHighdensityserverclusterconnectivityLongerdistanceSANconnectivityNote:Cantchangespeed-of-lightlimitationsiSCSIcombinesthespeedofblockaccesswiththecostofEthernet,iSCSI已经成为标准并得到行业支持,TheiSCSIprotocolisastandardmaintainedbytheIETFIPStorage(IPS)workinggroupStandardbasedonrev.20draft-ietf-ips-iscsi-20.txtCiscoandIBMco-authoredoriginaliSCSIprotocoldraftManyotherdraftsandstandardsmaintainedbytheworkinggroupiSCSIsecurity(draft-ietf-ips-security)iSCSInaming(draft-ietf-iscsi-name-disc)iSCSImanagement(draft-ietf-iscsi-mib)iSCSIboot(draft-ietf-iscsi-boot),CiscoiSCSI架构,DAS/SAN/iSCSI/NAS的比较,MicrosoftExchange2000iSCSI测试,RapidlyemergingastheapplicationchoiceformessagingandcollaborationRequiresalargevolumeofstorage,butlittlethroughputMinimalCPUutilizationdifferencebetweeniSCSIsoftwaredriversandFibreChannelHBAs,StorageNetworkThroughput,MB/s,Users,TheoreticalMaximumThroughputof100MbpsEthernet,ServerCPUUtilization,%CPUUtilization,Microsoft“loadsim”generator,Users,基于主机的镜像:远程iSCSI,RemoteMirror,SN5428StorageRouterorMDS9000withIPS-8,E.g.SupplementanexistingFibreChannelHBAattachedhostserverEmployiSCSIoverexistinginter-siteIPnetworkiSCSIdriveronHostServerVolumeManageronHostServere.g.WindowsLDMorVeritasVolumeManagerHAthroughredundantlinks,routersandclusteredStorageRoutersQoS:LLQtominimizequeuinglatencyonWANlink,DisasterRecoverySite,iSCSI,MDS9000,基于主机的镜像:本地及远程iSCSI,iSCSI,PrimarySite,DisasterRecoverySite,iSCSIusedforlocalandremotemirrorsEachMirrorappearstoiSCSIasaseparatetargetcanusesingleormultipleNICsHAClusterateachsitetoenhanceavailabilityVolumeManagermultipathingtofurtherenhanceavailabilityHAthroughmultiplelinks,routers,switches,anddualStorageRoutersateachsite,SN5428StorageRouterorMDS9000withIPS-8,SN5428StorageRouterorMDS9000withIPS-8,FCIP的介绍,允许SAN孤岛实现跨IP网络进行互连的技术.每个互连通道称为FCIP连接并可包括一个或多个TCP的对话.在FCIP连接的每个端点均分配一个虚拟E_Port(VE_Port).VE_Port之间的通讯和普通的E_Port通讯是一样的.成功连接的结果(如果所有均成功的话)是完全地实现了光纤通道交换架构的合并.TCP/IP用于提供拥塞控制及无误数据的按序传递的底层传输平台.,FCIP适用的存储应用例子,远程复制EMCSRDFHitachiTrueCopyHPContinuousAccess(CA)HPDRMIBMPPRC远程LAN-Free备份园区内SAN的互连,常见的FCIP使用环境,FCIP应用环境示范:星型远程连接,基于主机的镜像:FCIP,FCIPusingMDS9000IPServicesBlade,FCIPusingMDS9000IPServicesBlade,IPstoragenetworkingcarryingstoragetrafficoverIPUsesTCP,areliabletransportfordeliveryCanbeusedforlocaldatacenterandlonghaulapplicationsTwoprimaryprotocols:iSCSIInternetSCSIallowsblockstoragetobeaccessedoveraTCP/IPnetworkasthoughitwaslocallyattachedIETFStandardprotocolFCIPFibre-Channel-over-IPusedtotunnelFibreChannelframesoverTCP/IPconnectionsIETFDraftprotocol,iSCSI/FCIPIP存储网络的组成,FCIPandiSCSI互补的协议标准,FCIP:SAN-to-SANoverIPiSCSI:HosttoStorageoverIP,澳州Deakin大学数据中心,ConsolidatedStorageIBMESS800Turbo(“Shark”)30TBcapacity,ConsolidatedBackupQuantumP7000,ConnectivitytoCampusIPNetworkandIPWANCloud,ConsolidatedServerFarm,ConnectivitytoCampusIPNetworkandIPWANCloud,CollapsedCoreFCFabric2xMDS9509DirectorsWithIPmodules,FCIPiSCSI,FCIPiSCSI,UnicreditFCIP实现数据复制,异步复制,Site1(Milano),Site2(Verona),6xGE,10GE,IPmodule,MDS9509,Cat6509,10GE,IPmodule,MDS9509,Cat6509,Opticalpath1,1x10GElambda,6xGE,10GE,IPmodule,MDS9509,Cat6509,10GE,IPmodule,MDS9509,Cat6509,Opticalpath2,1x10GElambda,6xGE,6xGE,磁盘阵列,180Km,磁盘阵列,磁盘阵列,磁盘阵列,Unicredit远程磁带备份,Site1(Milano),Site2(Verona),2xGE,10GE,IPmodule,MDS9509,Cat6509,10GE,IPmodule,MDS9509,Cat6509,Opticalpath1,1x10GElambda,2xGE,10GE,IPmodule,MDS9509,Cat6509,10GE,IPmodule,MDS9509,Cat6509,Opticalpath2,1x10GElambda,2xGE,2xGE,180Km,VeritasNetbackupservers,VeritasNetbackupservers,LTOTapeLibrary,LTOTapelibrary,London,Amsterdam,Paris,ONS15454,SAN1,SAN2,SDHRingOC-48,Cisco7600,CiscoMDS9509w/IPS,Approx650km,Approx1500km,远程SAN扩展Euronext.LIFFE,SAN3,SAN4,AsynchronousreplicationthroughHDSTrueCopyoverFCIP,Cisco存储网络产品系列,MDS9509,MultilayerFabricSwitches,MDS9500MultilayerDirectors,16-portFC,32-portFC,Supervisor,8-portIPiSCSI+FCIP,MDS9000Modules,MgmtOS,MDS9000Family-OS,CiscoFabricManager,MDS9506,MDS9216,MDS9140/MDS9120,MDS9000FamilySN5428,IndustryLeadingInvestmentProtectionAcrossaComprehensiveProductLine,CSMIBMVirt.,ASMVeritasVirt.,支持iSCSI/FCIP,SN5428,支持iSCSI/FCIP,支持iSCSI/FCIP,支持iSCSI/FCIP,22,CiscoFabricManager-Screenshot,CiscoFabricManagerScreenshotShowingMultiprotocolSANTopology,Dual-homediSCSIhosts,FCIPLinks,iSCSIhostsindefaultzone,PortChannels,FibreChannelhosts,23,SANOSFeatureSet,-NetworksusemorethanFC-CiscoOpticalSDH/SONETDWDM/CWDM-IP,iSCSIFCIPQOSE-2-EServiceProviders,VSANsZoning-Hard/SoftLUN/ReadOnlyHost&SwitchAuth.(FC-SP)PortSecurityRadius/TACACSAESforSNMPandSSH,BusinessContinuanceVolumeMgmtReplication-OpenAPI-Networkbasedapps.req.QOS,FabricMgr.Partner/SRMSMI-S(Bluefin)MIBs/APIVSANRBACFabricAnalyzerCiscoRME,FCCVOQInter-VSANRouting(IVR)WriteAccel.QoSRateLimitingInteropmode,HighcapacityModularfabricandline-cardsPortchannelFSPFldbalanceVSANsInvest.Protection,Fabric-WideSecurity,Multi-protocolStorage,SANMgmt,Scalability,Network-BasedStorageApps.,CiscoNetworkedStorage,IntelligentFCSwitching,虚拟SAN(VSANs)介绍,虚拟SAN(VSAN)提供了在统一的物理交换架构上建立逻辑交换架构并分配端口的机制使用与以太网上VLAN相同的技术虚拟交换架构建立于更高成本效益的冗余物理交换架构降低了以往存储孤岛导致的端口浪费每个VSAN提供隔离的交换架构服务提供了高可用保障的安全隔离基于硬件的安全隔离流量在交换机之间的链路上明确标记了VSAN的成员信息每个VSAN均可进行流量统计和管理,利用VSAN实现存储网络的优化,VSAN从物理隔离改为逻辑隔离,虚拟SAN避免了故障的扩散,虚拟SAN隔离了交换架构以增加可用性高可用性每个VSAN均独立维护自己完整的交换服务集每个VSAN提供隔离的交换架构服务提供了高可用保障的安全隔离HBA卡或控制器的误操作交换架构的重置操作分区集合的信息改变交换架构的被迫重置仅限于单个VSAN,结果是更快的恢复基于较小的规模下,使用VSAN来提供高效的本地基于SAN的磁带备份,利用独立的VSAN进行集中式的磁带备份消除了因独立的物理架构带来的昂贵成本VSANs提供的高可用性隔离的虚拟交换阵列服务避免