云计算的网络资源

网络虚拟化——云计算的网络资源虚拟化的基本概念，实现虚拟化的技术十月23网络虚拟化

——云计算的网络资源

主要目标了解网络虚拟化的基本概念、含义

了解云计算中的虚拟网络框架及主要模块

了解虚拟局域网VLAN和虚拟存储区域网络VSAN了解云计算中的虚拟网络管理主要关键技术网络虚拟化（讲）Itisaprocessoflogicallysegmentingorgroupingphysicalnetwork(s)andmakingthemoperateassingleormultipleindependentnetwork(s)called“VirtualNetwork(s)”.NetworkVirtualizationEnablesvirtualnetworkstosharenetworkresources（使虚拟网络共享网络资源）Allowscommunicationbetweennodesinavirtualnetworkwithoutroutingofframes（允许在虚拟网络中的节点之间进行通信，而不需要使用帧的路由）Enforcesroutingforcommunicationbetweenvirtualnetworks（虚拟网络中的通信执行路由）Restrictsmanagementtraffic,including‘NetworkBroadcast’,frompropagatingtoothervirtualnetwork（限制管理业务，包含网络广播，传播到另一个虚拟网络）Enablesfunctionalgroupingofnodesinavirtualnetwork（

使网络中节点的功能分组）VirtualizedDataCenter–Networking3云计算中的虚拟网络（讲）InvolvesvirtualizingphysicalandVMnetworksVirtualizedDataCenter–Networking4PNIC–PhysicalNICStorageArrayPhysicalNetworkClientPhysicalServerPNICPhysicalServerPNICHypervisorHypervisorConsistsoffollowingphysicalcomponents:Networkadapters,switches,routers,bridges,repeaters,andhubsProvidesconnectivityAmongphysicalserversrunninghypervisorBetweenphysicalserversandclientsBetweenphysicalserversandstoragesystemsPhysicalNetwork云计算中的虚拟网络(contd.)（讲）VirtualizedDataCenter–Networking5PNIC–PhysicalNICVNIC–VirtualNICStorageArrayPhysicalNetworkClientVNICPhysicalServerPNICVNICVNICHypervisorKernelVMNetworkVNICPhysicalServerPNICVNICVNICHypervisorKernelVMNetworkResidesinsidephysicalserverConsistsoflogicalswitchescalled“virtualswitches”ProvidesconnectivityamongVMsinsideaphysicalserverProvidesconnectivitytoHypervisorkernelConnectstophysicalnetworkVMNetwork云计算中的虚拟网络

(contd.2)（讲）VMandphysicalnetworksarevirtualizedtocreatevirtualnetworks;forexample:virtualLAN,virtualSANVirtualizedDataCenter–Networking6PNICVirtualNetwork2VirtualNetwork1PhysicalSwitchVirtualSwitchVNICPNICPNICPNICVNICPhysicalSwitchVNICVNICVM3VM4VM1VM2VirtualSwitch网络虚拟化的主要工具（讲）VirtualizedDataCenter–Networking7PhysicalswitchOperatingSystem(OS)OSmusthavenetworkvirtualizationfunctionalityHypervisor虚拟机管理程序Usesbuilt-innetworkingandnetworkvirtualizationfunctionalitiesTocreatevirtualswitchandconfiguringvirtualnetworksonitOr,usesthird-partysoftwareforprovidingnetworkingandnetworkvirtualizationfunctionalitiesThird-partysoftwareisinstalledontothehypervisorThird-partysoftwarereplacesthenativenetworkingfunctionalityofthehypervisor网络虚拟化的优点（讲）VirtualizedDataCenter–Networking8BenefitDescriptionEnhancessecurity提高安全性RestrictsaccesstonodesinavirtualnetworkfromanothervirtualnetworkIsolatessensitivedatafromonevirtualnetworktoanotherEnhancesperformanceRestrictsnetworkbroadcastandimprovesvirtualnetworkperformanceImprovesmanageabilityAllowsconfiguringvirtualnetworks

fromacentralizedmanagementworkstationusingmanagementsoftware

EasesgroupingandregroupingofnodesImprovesutilizationandreducesCAPEXEnables

multiplevirtualnetworkstosharethesamephysicalnetwork,whichimprovesutilization

ofnetworkresourceReducestherequirementtosetupseparatephysicalnetworksfordifferentnodegroups云计算中的虚拟网络框架虚拟网络的组成（讲）VDCnetworkinfrastructureincludesbothvirtualandphysicalnetworkcomponentsComponentsareconnectedtoeachothertoenablenetworktrafficflowVirtualizedDataCenter–NetworkingComponentDescriptionVirtualNICConnectsVMstotheVMnetworkSends/receivesVMtrafficto/fromVMnetworkVirtualHBAEnablesaVMtoaccessFCRDMdisk/LUNassignedtotheVMVirtualswitchIsanEthernetswitchthatformsVMnetworkProvidesconnectiontovirtualNICsandforwardsVMtrafficProvidesconnectiontohypervisorkernelanddirectshypervisortraffic:management,storage,VMmigrationPhysicaladapter:NIC,HBA,CNAConnectsphysicalserverstophysicalnetworkForwardsVMandhypervisortrafficto/fromphysicalnetworkPhysicalswitch,routerFormsphysicalnetworkthatsupportsEthernet/FC/iSCSI/FCoEProvidesconnectionsamongphysicalservers,betweenphysicalserversandstoragesystems,andbetweenphysicalserversandclients10典型的网络互联和数据流——场景1（讲）PhysicalserverVirtualSwitch(Ethernet)PNICNAS/iSCSIStorageArrayHypervisorKernelVM1VM2VM3VNICVNICVNICPhysicalSwitch(Ethernet)Traffictype:VMManagementIPstorageVMmigrationTraffictype:ManagementIPstorageVMmigrationTraffictype:VMClientsPhysicalServersVirtualizedDataCenter–Networking11典型的网络互联和数据流——场景2（讲）VirtualizedDataCenter–NetworkingPhysicalserverVirtualSwitch(Ethernet)FC/iSCSIStorageArrayVM1VM3VNICVNICFC/iSCSIHBAPhysicalSwitch(FC/Ethernet)PNICVM2VNICHypervisorKernelPhysicalSwitch(Ethernet)Traffictype:VMManagementVMmigrationTraffictype:FCoriSCSIstorageTraffictype:ManagementVMmigrationTraffictype:VMClientsPhysicalServers12典型的网络互联和数据流——场景3VirtualizedDataCenter–NetworkingPhysicalserverVirtualSwitch(Ethernet)CNANAS/FC/iSCSIStorageArrayVM1VM3VNICVNICHypervisorKernelVM2VNICPhysicalSwitch(FCoE)Traffictype:VMManagementFC/IPstorageVMmigrationTraffictype:VMTraffictype:IPstorageManagementVMmigrationTraffictype:FCstorageClientsPhysicalServers13虚拟网络构成

——虚拟网卡（VirtualNIC）（讲）ConnectsVMstovirtualswitchForwardsEthernetframestovirtualswitchHas

uniqueMACandIPaddressesSupportsEthernetstandardssimilartophysicalNICVirtualizedDataCenter–Networking14虚拟网络构成——虚拟HBA卡（VirtualHBA）（讲）EnablesaVMtoaccessFCRDMdisk/LUNassignedtotheVMConfiguredusingN_PortIDVirtualization(NPIV)technologySinglephysicalFCHBAorCNAport(N_port)tofunctionasmultiplevirtualN_ports,eachwithitsownWWNAvirtualN_portactsasavirtualHBAportHypervisorkernelleveragesNPIVtoinstantiatevirtualN_portsAssignsthevirtualN_portstotheVMsEnableszoningandLUNmaskingatVMlevelVirtualizedDataCenter–Networking15PhysicalServerStorageArrayPhysicalHBAFabricSwitchVirtualHBAVirtualHBAVirtualHBA虚拟网络构成——虚拟交换机（VirtualSwitch）（讲）IsalogicalOSIlayer2switchthatsupportsEthernetprotocolResidesinsideaphysicalserverIs

createdandconfiguredusinghypervisorMaintainsMACaddresstableforframeforwardingDirectsnetworktrafficto/fromVMsandhypervisorkernelVMtoVMwithinphysicalserverVMtophysicalnetworkHypervisorkernel:IPstorage,VMmigration,andmanagementVirtualizedDataCenter–Networking16虚拟交换机(VirtualSwitch):PortsandPortGroup（讲）TypesofportsHypervisorkernelport:ProvidesconnectivitytohypervisorkernelVMport:ProvidesconnectivitytovirtualNICsUplinkport:ProvidesconnectivitytophysicalNICVMportgroup:MechanismforapplyinguniformnetworkpolicysettingstoagroupofVMportsPolicyexample:Security,loadbalancing,andfailoveracrossPNICsVMsconnectedtoaVMportgroupsharecommonconfigurationEliminatesconfiguringpoliciestoVMportsindividuallyVirtualizedDataCenter–Networking17VMportgroupsUplinkportsHypervisorkernelportVirtualSwitchPG1PG2PG3VMportDistributedVirtualSwitch（讲）AggregationofmultiplevirtualswitchesdistributedacrossmultiplephysicalserversVirtualizedDataCenter–Networking18ABCDEABCDEABDEGFIJCHVirtualSwitchDistributedVirtualSwitchPNICPNICPNICPNICPNICPNICPNICPNICVNICVNICVNICVNICVNICsVNICVNICPhysicalnetworkPhysicalnetworkVirtualSwitchVNICVNICVNICs+CentralizesVMnetworkmanagementMaintainsnetworkpoliciesduringVMmigrationBenefit虚拟局域网VLAN和虚拟存储区域网络VSANVirtualLocalAreaNetwork(VLAN)（讲）VirtualizedDataCenter–Networking20Alogicalnetwork,createdonaLANoracrossLANsconsistingofphysicalandvirtualswitches,enablingcommunicationamongagroupofnodes,regardlessoftheirlocationinthenetwork.VLANControlsbroadcastactivityandimprovesnetworkperformanceSimplifiesmanagementIncreasessecuritylevelsProvideshigherutilizationofswitchandreducesCAPEXBenefitVLANTrunking（讲）Singleconnection(Trunklink)carriesmultipleVLANtrafficSingleport(Trunkport)tosend/receivemultipleVLANtrafficovertrunklinkTrunkportisincludedtoallVLANsVLANtrunkingisenabledbytaggingEthernetframes21VirtualizedDataCenter–NetworkingItisatechnologythatallowstrafficfrommultipleVLANstotraverseasinglenetworkconnectionVLANTrunkingVLAN10VLAN20VLAN30WithoutTrunkingVLAN10,20,30VLAN10,20,30TrunklinkWithTrunkingVLAN10,20,30VLAN10,20,30BenefitsofVLANTrunking（讲）Eliminatestheneedfordedicatednetworklink(s)foreachVLANReducesinter-devicelinkswhenthedeviceshavemorethanoneVLANReducesthenumberofvirtualNICs,storageports,andswitchportsReducesmanagementcomplexity22VirtualizedDataCenter–NetworkingVLANTrunkingScenario（讲）23VLAN10VLAN20VLAN30TrunklinkTrunklinkVM1VM2VM3VM5VM4VLAN20VLAN10VLAN10,20,30TrunklinkSalesgroup:IncludesVM1,VM4,andVM5Financegroup:IncludesVM2andVM5Marketinggroup:IncludesVM3andVM5PhysicalServerPhysicalServerVirtualizedDataCenter–NetworkingFrame虚拟网络流量管理的主要需求（讲）LoadbalancingDistributesworkloadacrossmultipleITresourcesPreventsover/underutilizationofresources,andoptimizesperformancePolicy-basedmanagementAllowsusingapolicyfordistributionoftrafficacrossVMsandnetworklinksAllowsusingapolicyfortrafficfailoveracrossnetworklinksResourcesharingwithoutcontentionEnablesguaranteedservicelevelswhentrafficfrommultiplevirtualnetworkssharephysicalnetworkresourcesSetspriorityforbandwidthallocationtodifferenttypesoftraffic24虚拟网络流量管理主要技术（讲）Balancingclientworkload:HardwarebasedBalancingclientworkload:SoftwarebasedStormcontrolNICteamingLimitandshareTrafficshapingMultipathingVirtualizedDataCenter–Networking25Technique1–BalancingClientWorkload:HardwareBased（讲）Adevice(physicalswitch/router)distributesclienttrafficacrossmultipleservers–physicalorvirtualmachinesClientsuseIPaddress(virtual)oftheloadbalancingdevicetosendrequestsLoadbalancingdevicedecideswheretoforwardrequestDecisionmakingistypicallygovernedbyloadbalancingpolicy,forexample:Roundrobin,Weightedroundrobin,Leastconnections26VirtualizedDataCenter–NetworkingTechnique4–NICTeaming（讲）LogicallygroupsphysicalNICsconnectedtoavirtualswitchCreatesNICteamswhosememberscanbeactiveandstandbyBalancestrafficloadacrossactiveNICteammembersProvidesfailoverintheeventofanNIC/linkfailureAllowsassociatingpoliciesforloadbalancingandfailoveratavirtualswitchoraportgroup27VirtualizedDataCenter–NetworkingTechnique6–TrafficShaping（讲）Controlsnetworkbandwidthatvirtual/distributedvirtualswitchorportgroupPreventsimpactonbusiness-criticalapplicationtrafficbynon-criticaltrafficflow28ParameterDescriptionAverageBandwidthDatatransferrateallowedovertimeWorkloadataswitchportcanintermittentlyexceedav.BandwidthBurst:

Whentheworkloadexceedstheaveragebandwidth,itiscalledburstPeakBandwidthMaxdatatransferratewithoutqueuing/droppingframesBurstSizeMaxamountofdataallowedtotransferinaburstBurstsize=bandwidth×timeBandwidthinaburstcangouptopeakbandwidthWorkload