在数据中心环境中提供当前和新兴技术的网络架构

1©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialDC-1101TRENDSINTHENETWORKEDDATACENTERBruceWINTERS2©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialDC-1101Agenda•DataCenterTrends•DCFront-endArchitectualOverview•DCBack-endArchitecturalOverview•EmergingDataCenterTechnologiesBladeServersClusterandGridComputing,Infiniband•Summary3©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialDC-1101FirewallServicesIntrusionDetectionVPNTerminationDOSProtectionAnomalyDetectionContentCachingSSLOffloadingServerBalancingFileCachingAONAnalysisAppAccelerationCoreNetworkAnalysisAggregationAccessServerVirtualizationVRemoteDMAServicesVirtualI/OClusteringServicesComputeFabricServicesFabricGatewayServicesServerClustersServerFarmsStorage/TapeFarmsEdgeCoreFabricRoutingServicesDataReplicationSvcsStorageVirtualizationFabricGatewayServicesVirtualFabrics(VSANs)ABScalingEthernetModuleCiscoCatalystLayer2Switch10GigabitEthernetGigabitEthernetCiscoCatalyst6500MultilayerSwitchCiscoCatalystLayer3SwitchInfinibandCisco3000SeriesFabricServerSwitchCisco7000SeriesFabricServerSwitchVirtualServerLinkVirtualServersFibreChannelCiscoMDS9500MultilayerDirectorFibreChannelTrunkARedundantSANFabricLayersDataCenterFunctionalLayersFunctionalFrameworkfortheDataCenterArchitecture4©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialDC-1101DATACENTERTRENDS5©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialDC-1101Goals...•LowerCablingCosts•Increasepower/coolingbase•Usefixedsizeaccessswitchesperrack•ManageapredictableEnvironmentNetworkRequirements…•PortDensityDemandChanges•DeviceManagementincreaseshighly•ServicesshouldbepredictableAdaptExistingFacilityPlansGreen-fieldDCsFacilitiesManagementNetworkManagementDCEnvironmentalsLowerCapitalandOperationalCosts6©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialDC-1101Goals...•ReducenumberofdistributedserverfarmsandSAN’s•ReducenumberofOS’s•StandardizeonsoftwareandhardwarearchitecturesNetworkRequirements…•Higherserverfarmdensity•Higheraveragetrafficloads•Higheruplinkcapacityandthroughput•HigherHBAdensity•StoragevirtualizationSingleArchitecture•Predictable•Deterministic•HighlyAvailable•ServiceReadyConsolidationDataCenters,Servers,Applications,StorageLinuxUnixWin2kAIXHPUXSolarisNTWebSphereExchangeIISLotusjava.NETPentiumPCI-XAthlonDataCenterADataCenterB7©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialDC-1101Goals...•IncreaseCPU,I/OandMEMperRU•Ethernet,iSCSI,FCorIBserverintegration•BladeServerwithDCServicesNetworkRequirements…•SlotandPortDensity•Multi-servicesupport•SimplicityandHABladeServerIntegrationReducingTCO&ImprovingmanageabilitySingleArchitecture•DCCorelayer•Highport/slotdensity•AdvancedSTPfeatures•HighlyAvailable•ServiceReady8©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialDC-1101Goals...•Controlappuptime-Clienttoserver-Servertoserver-Servertostorage-StoragetostorageNetworkRequirements…•Comprehensivesecuritytoolkit•Minimizerisksandvulnerabilities•Guaranteeperformance•EnsureintegrationandmanageabilityWormsSYNFloodTrustExploitationDDOSVirusesBufferoverflowServersDCInfrastructureApplicationsMan-in-the-middleSingleArchitecture•Firewalls•HostandNetwork:IntrusionManagement•Encryption•L3/L2SecurityFeaturesDCCoreAggregationAccessEdgeSecurityProtectDCtargets9©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialDC-1101Goals...•SiteRecoveryincluding:-Clienttoserverrecovery-Servertoserverrecovery-Storagetostoragerecovery•LAN/SANextensionNetworkRequirements…•Automaticsiteselection•DataReplication•Site-to-sitetransportBusinessContinuanceAchievinghighestlevelofavailabilityDistributedEnvironment•SiteSelectionTechnology•DataReplicationSyncandAsync•DCInterconnectWAN,MetroOpticalAggregationAccessEdgeInternetEdge10©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialDC-1101Goals...•Logicalpartitioning•Dynamicprovisioning•Self-adjusting•I/OVirtualization•ServerVirtualizationNetworkRequirements…•Logicalfunctioninstances•Policy-drivenfunctioncontrol•Commonmanagementinterface•ServerFabricVirtualizationIncreaseoperationalefficiencyVirtualInfrastructure:Routers&SwitchesStoragefabricVirtualServices:Firewalls,SLB,SSLVirtualSystemsVirtualservers,virtualI/O,virtualstorageNetworkManagement11©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialDC-1101Network-Server-StorageFabricsGoals...•ServerFarmHA•HigherComputationalCapacity•Seamlessuseofdistinctserverplatforms•SeamlessuseofdistributedserverfarmsNetworkRequirements…•HighPortDensityDemand•Widerangeofphysicalconnectivityoptions•HighThroughput,LowoversubscriptionandlowlatencyClusteringIncreaseHighAvailability,ComputingCapacityandFlexibilityStorageWebAppDBStorageWebAppDBCPUCPUCPUCPUCPUCPUCPUCPUCPUCPUCPU12©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialDC-1101DATACENTERFRONT-ENDARCHITECTURALOVERVIEW13©2005CiscoSystems,Inc.Allrightsreserved.CiscoConfidentialDC-1101DataCenterFront-endArchitecture•ServerFarmarchitectureoverview•DesignrequirementsintheServerFarm•Accesslayerdesignmodels•Densityandscalabilityimplications•ScalingB/Wwi