VMware网络虚拟化技术(NSX)课件

VMwareNSX|TheNewRoleofSoftwareNetworkingVMware的SDDC体系结构软件定义的数据中心抽象化池化自动化管理和自动化网络（和安全性）

计算/服务器

存储（和可用性）

服务器虚拟化vs网络虚拟化物理网络(Arista,Cisco,HP,Juniper,Cumulus,…)网络虚拟化平台需求:IP可达的网络虚拟网络虚拟网络虚拟网络网络连线网络连线网络连线L2,L3,L4-7网络服务物理运算单元及内存(Dell,HP,IBM,Quanta,…)服务器虚拟化软件需求:x86硬件架构虚拟机虚拟机虚拟机应用服务应用服务应用服务X86服务环境脱钩TheNewRoleofSoftwareNetworkingHalfofallServerAccessPortsarealreadyvirtual…ontrackbe~67%in2years~80%ofVMwarecustomersarepreparingfornetworkvirtualization40%ofvAdminsmanagevirtualswitchingVirtualServerAccessPorts32%CAGRPhysicalServerAccessPorts15%CAGRCREHANRESEARCHInc.VirtualServerAccessPorts32%CAGRPhysicalServerAccessPorts15%CAGRCREHANRESEARCHInc.TheNewRoleofSoftwareNetworkingHypervisorHypervisorX86Hosts40GbpsPerhostPhysicalorVirtual30KLogicalSwitchesHardwareSoftwareHardwareSoftwareAnyCloudManagementPlatform40GbpsPerhostNoTromboning1,000LogicalRoutersPerdomain30GbpsPerhostKernelIntegrated25,000CPS2.5millionSessionsScale-Out150Gbpsthroughput1MCPS10MConcurrentFW,LB,VPNTheNewRoleofSoftwareNetworking1101001,000Hosts30Gbps300Gbps3Tbps30TbpsThePowerofaDistributedSystemDistributedSwitchingDistributedRoutingDistributedFirewallEdgeServicesVMwareNSXSoftwareVirtualNetworksExistingNetworkInfrastructureSwitchingRoutingFirewallLB,VPNEdgeServices30TerabitspersecondVMwareNSXAPIHypervisorX86HostsHardwareSoftwareCAPEXOPEXHardwareSoftwareForwardingCapacityAgility&SpeedTheNewRoleofSoftwareNetworking1101001,000Hosts30Gbps300Gbps3Tbps30TerabitspersecondThePowerofaDistributedSystemExistingNetworkInfrastructureSimplifiedNoVLAN,NoACL,NoFirewallRulesNewFunctionalityNewEconomicsExistingInfrastructureDistributedSwitchingDistributedRoutingDistributedFirewallEdgeServicesVMwareNSXSoftwareNSX|The“NetworkHypervisor”Adatacenternetwork…InternetExistingPhysicalNetworkInternetComputeinfrastructure….ExistingPhysicalNetworkInternetHypervisorsandvSwitches…ExistingPhysicalNetworkInternetNSX|The“NetworkHypervisor”NetworkHypervisorExistingPhysicalNetworkInternetVirtualNetworks–LikeVirtualMachinesfortheNetworkNetworkHypervisorVirtualNetworksExistingPhysicalNetworkAVirtualNetwork?NSXvSwitchHypervisorExistingPhysicalNetworkVirtualNetworkNSXvSwitchHypervisorNoChangetoWorkloadsNSXvSwitchHypervisorVMVMExistingPhysicalNetworkVirtualNetworkNSXvSwitchHypervisorVMUserSpaceVMProgrammaticallyProvisionedNSXvSwitchHypervisorVMVMVMExistingPhysicalNetworkVirtualNetworkClusterControllerCloudMgtPlatformDistributedNetworkServicesDistributedNetworkServicesNSXvSwitchHypervisorVMUserSpaceVMVMServicesDistributedtotheVirtualSwitchPhysicalHostNSXvSwitchVMVMVMNSXvSwitchVMUserSpaceVMVMHypervisorUserSpaceHypervisorExistingPhysicalNetworkVirtualNetworkClusterControllerCloudMgtPlatformVirtualNetwork–AcompletenetworkinsoftwareLogicalSwitch(L2)L3L2ACLEgressLogicalSwitch(L2)L2L3LoadBalancerIDSVirtualNetworkInSoftwareIngress1.1.1.0/241.1.2.0/24NetworkHypervisorPhysicalNetworkGeneralPurposeIPHardwarePhysicalNetworkVirtualNetwork–AcompletenetworkinsoftwareEgressLogicalSwitch(L2)L3L2ACLFWLBIDSACLLogicalSwitch(L2)GeneralPurposeIPHardwareLoadBalancerIDSVirtualNetworkInSoftwareIngress1.1.1.0/241.1.2.0/24NetworkHypervisorQoSOnANYNetworkHardwareESXiKernelPhysicalHostNSXvSwitchVMESXiUserSpaceVMVMESXiKernelPhysicalHostNSXvSwitchVMESXiUserSpaceVMVMLogicalSwitchIngressLogicalSwitchEgressLogicalSwitchPhysicalNetwork–IPPacketForwarding

(ECMP,L3Fabric)SecuritySecurity–CompleteIsolationHypervisorPhysicalHostNSXvSwitchVMVMVMHypervisorPhysicalHostNSXvSwitchVMVMVMVirtualNetworkVirtualNetwork192.168.2.20192.168.2.20192.168.2.10192.168.2.10VirtualNetworksareisolatedfromeachother(OverlappingIPAddresses)VirtualNetworksareisolatedfromunderlyingphysicalnetwork(IPv6overIPv4)2607:f0d0:1002:51::42607:f0d0:1002:51::7IPv6IPv4InternetHypervisorPhysicalHostVMVMVMvSwitchCentralPolicies,DistributedEnforcement,MovewithVMsHypervisorPhysicalHostvSwitchVMVMVMSecurityPolicySecurityPolicy-ReduceChokePointSecurity-CentrallyDefinePolicies,DistributeRuleEnforcement-SecurityPoliciesMovewithVMs-ChangestocentralpoliciesautomaticallydistributedtoaffectedVMsScaleControllerControllerScale-outControllerCluster100,000VirtualMachines10,000VirtualNetworksController客户案例iLandeBay“NVPallowsustorepurposenetworkinfrastructureon-demand,andreducesthetimeittakestodeploytest/devenvironmentsfromdaystominutes.JCMARTINCLOUDARCHITECT,EBAY7daysto30secondsTransformthetimeittakestodeploycomplextest&developmentenvironmentsfordevelopersandQA.Rackspace“NVP,combinedwithOpenStackisagamechanger.Togetherwearebringingenterpriseprivatenetworkingtothecloud.LEWMOORMANPRESIDENT,RACKSPACERackspaceCloudNetworks$15-$20millionayearsavingsbynotoverprovisioningserversDeliverenterprise-classprivatenetworkinginapublic,multi-tenantcloud.ImprovedServerUtilization–lessoverprovisioningofserversWithoutNetworkVirtualization60%AssetUtilizationWithNetworkVirtualization90%AssetUtilizationNTT“Networkvirtualizationisthekeytocloud…andNVPtranscendsanythingwe’veseen.EIJIKUWANAVICEPRESIDENT,GENERALMANAGER,SECUREPLATFORMInter-DataCenterVMmobilityDisasterRecoveryTransformNTT’scloudintoacommoncomputingplatformthatacceleratesdeliveryofservicesandmaximizesNTT’sworldwideassets,datacentersandcarrier-gradenetworks.Layer3NetworkServerHypervisorServerHypervisorLogicalViewTransportViewVM5VM6VM7VM5VM6VM7OpenvSwitchinServerHypervisorOpenvSwitchinServerHypervisorNVPExtender#1DataCenterVM3VM4VM1VM2

VM3VM4VM1VM2ControllerClusterAPINTT跨数据中心整合，实现云迁移服务SolutionBenefit:支持在线虚拟机迁移vMotion虚拟机网络地址不需更改简化物理网络配置不需要