Cisco思科数据中心网络架构和设计指南

1©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSessionNumberPresentation_ID2©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSessionNumberPresentation_ID•ServerFarmArchitectureOverview•DesignRequirementsintheServerFarm•AccessLayerDesignModels•DensityandScalabilityImplications•ScalingB/WwithGigabitEtherChannel®and10GE•SpanningTreeDesignandScalability•HighAvailabilityintheDC•Summary333©2005CiscoSystems,Inc.Allrightsreserved.DC-210111127_05_2005_c24©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSessionNumberPresentation_ID2,3•L2andL3requirements•Dualandsingleattached•Highperformance,lowlatencyL2switching•Mixofover-subscriptionrequirements•Manyuplinkoptions•STPprocessingforconfiguredVLANsonly•UtilizesservicesintheaggregationlayerL3AccessBladeChassisw/IntegratedSwitchBladeChassisw/PassThruMainframew/OSAL2w/ClusteringandNICTeamingEnterpriseCoreDCAggregationDCCoreDCAccess5©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSessionNumberPresentation_ID•AggregatesaccessuplinksintoDCcore•LargeSTPprocessingload•Providesadvancedapplicationandsecurityfunctionsviaservicemodules•Maintainssessionstateandconnectiontablesforredundancy•Whataretheseservices?/EnterpriseCoreDCAccessServiceModulesL3AccessBladeChassisw/IntegratedSwitchBladeChassisw/PassThruMainframew/OSAL2w/ClusteringandNICTeaming6©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSessionNumberPresentation_ID•Applicationandsecurityservicescanbedeployedas:AppliancesServiceblades•Servicebladessuchasfirewallbladesandloadbalancingblades…providehardware-basedstatefulfunctions•Integratedbladesoptimizerackspace,cablingandconfigurationmgmt•ProvidehighestflexibilityandeconomiesofscaleLayer4–7Services:FW,SLB,SSL,IDS7©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSessionNumberPresentation_ID•Theaggregationmodulemayprovidetheprimarycommunicationpathforservertoservertraffic•Nontraditionaltrafficemerging•Drivingloweroversubscriptionand10GEuplinks•ServersnowshipwithPCI-XNIC’sandGE•PlanbandwidthforfutureservertruecapacityAccessAggregationDCCoreWhatTypesofServertoServerTrafficWillExist?Multi-TierInteraction,Backup,Replication,ClusterMessaging,StorageoverIP8©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSessionNumberPresentation_ID•InterconnectsAGGmodules•Isolatesfailuredomains•ScaleslargeSTPdiameters•Improves10GEscaling•PlanandbuildDCcoreupfrontNx100ServersNx100ServersAggModule1AggModule2DCCoreAggregationGE/10GEGE/10GEAccessEnterpriseCore9©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSessionNumberPresentation_ID•Purposebuiltserverswitchingfabricenabling:LowlatencyRDMAServervirtualizationGRID/Utilitycomputing•ClusteringenvironmentsDatabaseclusteringHAclusteringHPCclustering•GatewaytoIPswitchingandstoragelayers•New,leadingedge,stillmaturingNASNASBladeServersUNIX/WindowsServersVirtualServerFabric#2(Blade-based)VirtualServerFabric#1Linux/WindowsIPInfrastructureUNIXUNIXWINWINEnterpriseGRIDStorageNetworkServerSwitchFabricInfinibandEthernetEthernetFC101010©2005CiscoSystems,Inc.Allrightsreserved.DC-210111127_05_2005_c211©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSessionNumberPresentation_ID2•Clustering:applicationsoftenexecuteonmultipleserversclusteredtoappearasasingledevice;commonforHAandloadbalancingrequirements;(WindowsMSCSandNLB)•NICteamingsoftwarerequireslayer2adjacencybetweenteamedNICsMicrosoftApplications.NETJavaBasedApplications,J2EE…12©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSessionNumberPresentation_ID2“Layer2adjacencybetweenserversmeansthattheserversareinthesamebroadcastdomain.WhenserversareLayer2adjacent,eachserverreceivesallbroadcastsandmulticastpacketsfromanotherserver.”PacketMagazine:SecondQuarter2005DesigningtheDataCenterAccessLayer13©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSessionNumberPresentation_ID•Commongoal:combinemultipleserverstoappearasaunifiedsystemthroughspecials/wandnetworkinterconnects•A2NodeHAclustercanuseadedicatedcrossovercableforexchangeofdata,sessionstate,monitoring…•Twoormoreserversuseaswitchtoprovidetheinterconnectonanisolatedlayer2segment/VLAN•Examples:MS-Windows2003AdvancedServer2003ClusterService(MSCS),forExchangeandSQLServers(uptoeightnodes)•VeritasClusteringforHA•L2AdjacencyisrequiredServer-AServer-BClusterNetworkwith2Nodes-CrossoverCableConnectionFront-EndInterfaceFront-EndInterfaceClusterNetworkwith2orMoreNodesonSwitchVLANABC14©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialSessionNumberPresentation_ID•Transactional/HTTP-basedapplicationsare“clustered”forscalabilitypurposes(MSCSNLBexample,upto32nodes)•Layer2segmentusedto“multicast”allincomingpacketstoallhostsincluster(L2Adjacencyisrequired)•SingleIPaddressassociatedwithamulticastMACaddressintheclusterarpreply(Windows)•PurposebuiltloadbalancersprovideastandardhardwarebasedunicastsolutionsupportinghundredsofnodesFront-EndInterfaceServer-BasedNLBUsesFlooding:MulticastAddressUsedinArpReplyforServerIPSLBHardware:UseUnicast-BasedSolutionClusterNetworkABCABCClusterNetworkToVIPToR