思科的数据中心虚拟化解决方案-SEVT-Jiapeng

©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID1数据中心的虚拟化解决方案©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID2目录数据中心虚拟化技术的概览CISCO的数据中心虚拟化解决方案应用案例分享-CISCOIT©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID3“By2008,50%ofToday’sDataCentersWillHaveInsufficientPowerandCoolingCapacitytoMeettheDemandsofHigh-DensityEquipment”数据中心的趋势DaystoDeployApplications部署应用的天数Server/StorageUtilization服务器/存储利用率AnnualStorageGrowth每年存储增长DCRecordsRetention(Years)数据中心记录保管DCPowerandCoolingCosts数据中心电力跟制冷费用DataCenterOperations数据中心维护Source:Gartner,200860–18025%40–400%7–10~25–30%30%©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID4Gartner200910大战略技术1、虚拟化技术(Virtualization)2、云计算(CloudComputing)技术3、后刀片服务器（Servers－BeyondBlades）4、面向互联网的架构（Web-orientedarchitecture）5、企业聚合应用（Mashup）技术6、专业化系统（Specializedsystems）7、社会化软件和社交网络（Socialsoftwareandsocialnetworking）8、统一通信技术（Unifiedcommunications）9、商业情报技术（Businessintelligence）10、绿色IT技术（GreenIT）©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID5虚拟化-定义(一种表述）Virtualization虚拟化IsthePoolingandAbstractionofResourcesandServicesinaWayThatMasksthePhysicalNatureandBoundariesofThoseResourcesandServicesfromTheirUsers©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID6数据中心虚拟化目标整合或者共享物理资产来提高利用率减少物理设备，电缆，空间，电力与制冷快速部署以及重部署资源以符合业务发展目标©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID7从应用“独占资源”向“共享资源”转变共享的服务导向模式标准化资源组成“共享池”根据需求以构筑数据中心的“虚拟化”基础架构数据中心网络用户接入网络共享的应用服务计算资源池存储资源池存储分离的高端服务器模式数量众多的机架及刀片式服务器单独的应用系统单独的应用系统独立的专用主机模式单独的应用系统T1S2-Cisco©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID8数据中心虚拟化一览Front-EndVirtualSANs/UnifiedIOVirtualStorageVirtualNetworkServicesVirtualFirewallContext1VirtualSSLContext3VirtualMachinesFront-EndVirtualizationVirtualFirewallContext1VirtualFirewallContext1VirtualSLBContext29VirtualSSLContext3VirtualSSLContext175VSSVLANVRFVPNsVDCvHBAVSANsFCoECNABack-EndFront-End数据中心的虚拟化核心层VDC汇聚层、服务层VDCVSSVPC访问层服务器虚拟化Back-End虚拟化SANHBAUnifiedIO(FCoE)Storage©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID9目录数据中心虚拟化技术的概览CISCO的数据中心虚拟化解决方案应用案例分享-CISCOIT©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID10Front-EndVirtualSANs/UnifiedIOVirtualStorageVirtualNetworkServicesVirtualFirewallContext1VirtualSSLContext3VirtualMachinesFront-EndVirtualizationVirtualFirewallContext1VirtualFirewallContext1VirtualSLBContext29VirtualSSLContext3VirtualSSLContext175VSSVLANVRFVPNsVDCvHBAVSANsFCoECNABack-EndFRONT-END前端虚拟化©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID11网络虚拟化ServersMainframeWANL3VRFsVRF-Lite+GRE,VRF-LiteEnd-to-End,MPLSVPNVirtualizedServices:FW,ACE,…PerUserRoleL2VLANsUserIdentification(PerPortor802.1x)VLANsPartitionServerFarms©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID12数据中心里的分隔Drivers•Consolidatedatacentersfrommultipleorganizationalunits(OUs)•HigherutilizationofdedicateddatacenterspacesNeeds•Partitionroutingsogroupscan’tsee/accesseachother(compliance/organizationalboundaries)•SeparatemanagementforsubsetofservicesOptions•VLANs/VRFs•VDCs•Servicecontexts©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID13SegmentationL3VRF技术802.1qGlobalTableGuestVRFSVIorsub-interface(Layer3)GRETunnelVRF-LITEendtoendIP交换(向核心层)IP交换(向访问层)SVIorsub-interface(Layer3)PhysicalInterface(Layer3)PartnerVRFSVIorSub-Interface(Layer3)FirstL3HopDeviceRedVRFGreenVRF©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID14SegmentationVDC-虚拟设备环境VDC–VirtualDeviceContextCiscoNX-OS能够将OS和硬件资源划分为模拟虚拟设备的虚拟环境每个VDC拥有其自身的软件进程、专用硬件资源(接口)和独立的管理环境独立的安全管理界限划分和故障隔离域VDC有助于将分立网络整合为一个通用基础设施，保留物理上独立的网络的管理界限划分和故障隔离特性，并提供单一基础设施所拥有的多种运营成本优势。InfrastructureKernelVDC1VDC2VDC3Layer2ProtocolsLayer3ProtocolsVLANPVLANOSPFBGPEIGRPGLBPHSRPIGMPUDLDCDP802.1XSTPLACPPIMCTSSNMP……VDC1VDC4Layer3ProtocolsOSPFBGPEIGRPGLBPHSRPIGMPPIMSNMP…VDC2Layer2ProtocolsVLANPVLANUDLDCDP802.1XSTPLACPCTS…©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID15数据中心里用VDC做分隔Nexus7000Campus/WANCampus/WANVDCsandContextsUsingVDCs,managementofbothservicesandswitchinginfrastructurekeptcompletelyindepdendentSecurity-policymanagementanddeploymentbyusergroupVRFs/VLANscanbedeployedwithincontextofeachVDC©2006CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialPresentation_ID16VDC应用模式水平整合与垂直整合Objective:Consolidatelateralinfrastructurethatdeliverssimilarrolesforseparateoperationaloradministrativedomains.Benefits:Reducedpowerandspacerequirements,canmaximizedensityoftheplatform,easymigrationtophysicalseparationforfuturegrowthcore1core2agg2agg1acc2acc1agg4agg3accYaccNacc2acc1accYaccNcorecoreCoreAggregationVDCsCoreDevicesAggregationDevicesaggVDC1aggVDC2aggVDC1aggVDC2aggVDC1aggVDC2AdminGroup1AdminGroup2AdminGroup1AdminGroup2core1core2agg4agg3accYaccNaccYaccNcoreVDCaggVDCCoreVDCsAggregationVDCsCoreDevicesAggregationDevicescoreVDCaggVDC©2006CiscoSystems,Inc.Allrightsreserved.CiscoCo