數(shù)據(jù)中心拓?fù)浼軜?gòu)設(shè)計(jì)指南

1、數(shù)據(jù)中心拓?fù)浼軜?gòu)設(shè)計(jì)指南 配圖部門：作者：日期：傳統(tǒng)機(jī)架出租中的資源碎片示意圖控制器自主界面TORVMVM物理機(jī)虛擬機(jī)機(jī)架中心機(jī)房1VXLAN GWTORVMVM控制器集群FWLB物理機(jī)虛擬機(jī)存儲(chǔ)機(jī)架TORVMVM物理機(jī)虛擬機(jī)機(jī)架中心機(jī)房nVXLAN GWTORVMVMFWLB物理機(jī)虛擬機(jī)存儲(chǔ)機(jī)架邊緣機(jī)房1邊緣機(jī)房n網(wǎng)絡(luò)管理員跨機(jī)房互聯(lián) 機(jī)架出租方案總體概覽SpineServer leafBorder leaf(Service leaf)數(shù)據(jù)中心網(wǎng)絡(luò)典型部署方案Peer-linkLeafEth-TrunkEth-TrunkVTEP推薦M-LAG部署方案M-LAGSpineServer Leaf

2、Border Leaf(&ServiceLeaf)M-LAG（dual-active）PE RouterOSPF 100Area 0P2PP2PP2PP2PP2PP2PP2PP2PP2P單DC內(nèi)Underlay網(wǎng)絡(luò)路由規(guī)劃設(shè)計(jì)多Fabric部署OSPF路由規(guī)劃推薦LeafSpineLeafSpineFabric 1Fabric 2OSPF Area 1OSPF Area 2Border LeafBorder LeafOSPF Area 0EBGPAS 65503AS 65502LeafSpineAS 65501AS 63500單Fabric內(nèi)部EBGP路由規(guī)劃推薦多Fabric之間EBGP路由

3、規(guī)劃推薦EBGPAS 65503AS 65502LeafSpineAS 65501AS 63500EBGPAS 65523AS 65522LeafSpineAS 65521AS 63520AS 61500Fabric 1Fabric 2中心機(jī)房 跨機(jī)房VXLAN Overlay網(wǎng)絡(luò)L2 SWInternet租戶網(wǎng)絡(luò)運(yùn)營(yíng)商網(wǎng)絡(luò)GWNVENVENVENVENVENVENVENVEGWL3 GW & L2 SWL2 SW邊緣機(jī)房租戶自帶網(wǎng)關(guān)租戶A租戶B租戶C租戶網(wǎng)絡(luò)SpineServer leafBorder leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE

4、(router)GWGWGW路由對(duì)接LogicalSwitchLogicalRouterFWL3 GWISP網(wǎng)絡(luò)外部網(wǎng)絡(luò)外部網(wǎng)絡(luò)租戶網(wǎng)絡(luò)租戶AISP提供網(wǎng)關(guān)租戶A租戶CSpineServer leafBorder leaf(Service leaf)M-LAG (dual-active)PE (router)L2租戶B二層接入外部網(wǎng)絡(luò)ISP網(wǎng)絡(luò)租戶網(wǎng)絡(luò)LogicalSwitchLogicalRouterISP網(wǎng)絡(luò)外部網(wǎng)絡(luò)租戶網(wǎng)絡(luò)租戶AFWLBVPN租戶自帶網(wǎng)關(guān)-單機(jī)房租用租戶A租戶網(wǎng)絡(luò)SpineServer leafBorder leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (du

5、al-active)PE (router)GW路由對(duì)接租戶AL2VTEPVTEPVTEPVTEP二層接入BGPISP網(wǎng)絡(luò) 租戶網(wǎng)絡(luò)LeafBD2Tenant 1 NetworkLeafBD2BDIF1Tenant 1 NetworkL3Tenant L3 GWTenant L2 GWT1-VRFBD1L2L2T1-VRFPEBGP外網(wǎng)私網(wǎng)專線VBDIFBGP外部網(wǎng)絡(luò)Border LeafEVPN VXLAN路由對(duì)接-Static Route租戶A租戶網(wǎng)絡(luò)SpineServer leafBorder leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (ro

6、uter)GW路由對(duì)接租戶AL2VTEPVTEPVTEPVTEP二層接入VXLANeBGP/StaticVLANVLANStaticBGP EVPNISP網(wǎng)絡(luò)租戶網(wǎng)絡(luò)LeafBDIF1Tenant 1 NetworkL3T1-VRFEVPN VXLANT1-VRFPEBGP外部網(wǎng)絡(luò)私網(wǎng)專線VBDIFBGPBorder LeafTenant L3 GW外部網(wǎng)絡(luò)路由對(duì)接-eBGP租戶A租戶網(wǎng)絡(luò)SpineServer leafBorder leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)GW路由對(duì)接租戶AL2VTEPVTEPVTEPVTEP二

7、層接入VXLANVLANeBGPeBGPVLANBGP EVPNISP網(wǎng)絡(luò)租戶網(wǎng)絡(luò)LeafBDIF1Tenant 1 NetworkL3T1-VRFEVPN VXLANT1-VRFPEBGP外網(wǎng)私網(wǎng)專線VBDIFBGPBorder LeafTenant L3 GW外部網(wǎng)絡(luò)路由對(duì)接-OSPF租戶A租戶網(wǎng)絡(luò)SpineServer leafBorder leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)GW路由對(duì)接租戶AL2VTEPVTEPVTEPVTEP二層接入VXLANVLANOSPFeBGPVLANBGP EVPNISP網(wǎng)絡(luò)租戶網(wǎng)絡(luò)Lea

8、fBDIF1Tenant 1 NetworkL3T1-VRFEVPN VXLANT1-VRFPEBGP外網(wǎng)私網(wǎng)專線VBDIFBGPBorder LeafTenant L3 GW外部網(wǎng)絡(luò)單機(jī)房租用-流量模型SpineServer LeafBorder leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)路由對(duì)接VTEPVTEPVTEPVTEP二層接入L3 GWWANLANL2 SWLANFW機(jī)架2機(jī)架1租戶網(wǎng)絡(luò)訪問外網(wǎng)流量跨子網(wǎng)互訪流量同子網(wǎng)互訪流量外部網(wǎng)絡(luò)跨機(jī)房VXLAN二層拉通跨機(jī)房租用-單點(diǎn)L3接入SpineServer leafBor

9、der leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)路由對(duì)接VTEPVTEPVTEPVTEP二層接入L3 GWWANLANL2 SWLANFW機(jī)架2機(jī)架1租戶網(wǎng)絡(luò)訪問外網(wǎng)流量跨子網(wǎng)互訪流量同子網(wǎng)互訪流量VTEPVTEP二層接入L2 SWLAN機(jī)架3租戶網(wǎng)絡(luò)機(jī)房1機(jī)房2外部網(wǎng)絡(luò)跨機(jī)房租用-多點(diǎn)L3接入集中出口跨機(jī)房VXLAN二層拉通SpineServer LeafBorder leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)路由對(duì)接VTEPVTEPVTEPVTEP二層接入L3

10、GWWANLANL2 SWLANFW機(jī)架2機(jī)架1租戶網(wǎng)絡(luò)訪問外網(wǎng)流量跨子網(wǎng)互訪流量同子網(wǎng)互訪流量VTEPVTEP二層接入L2 SWLAN機(jī)架2租戶網(wǎng)絡(luò)機(jī)房1機(jī)房2路由對(duì)接L3 GWWANLANFW機(jī)架1外部網(wǎng)絡(luò)外部網(wǎng)絡(luò)外部網(wǎng)絡(luò)跨機(jī)房租用-多點(diǎn)L3接入獨(dú)立出口跨機(jī)房VXLAN二層拉通SpineServer LeafBorder Leaf(Service Leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)路由對(duì)接VTEPVTEPVTEPVTEP二層接入L3 GWWANLANL2 SWLANFW機(jī)架2機(jī)架1租戶網(wǎng)絡(luò)訪問外網(wǎng)流量跨子網(wǎng)互訪流量同子網(wǎng)互訪流量VTEPVTEP

11、二層接入L2 SWLAN機(jī)架2租戶網(wǎng)絡(luò)機(jī)房1機(jī)房2路由對(duì)接L3 GWWANLANFW機(jī)架1Border Leaf(Service Leaf)PE (router)VTEP租用ISP網(wǎng)關(guān)-單機(jī)房租用SpineServer LeafBorder Leaf(Service Leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)租戶AL2VTEPVTEPVTEPVTEP二層接入BGP租戶A租戶網(wǎng)絡(luò)租戶BISP網(wǎng)絡(luò) 租戶網(wǎng)絡(luò)LeafBD2Tenant 1 NetworkLeafBD2BDIF1Tenant 1 NetworkL3Tenant L2 GWT1-VRFBD1L2L2

12、Ext-VRFPEBGP外網(wǎng)私網(wǎng)專線VBDIFBGPBDIF2T1-VRFBDIF2vFwT1-VRFExt-VRF外部網(wǎng)絡(luò)EVPN VXLANBorder Leaf單機(jī)房租用-流量模型訪問外網(wǎng)流量跨子網(wǎng)互訪流量同子網(wǎng)互訪流量SpineServer LeafBorder Leaf(Service Leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)VTEPVTEPVTEPVTEP租戶網(wǎng)絡(luò)L2 SWLAN機(jī)架租用機(jī)位租用外部網(wǎng)絡(luò)跨機(jī)房VXLAN二層拉通跨機(jī)房租用-集中出口SpineServer LeafBorder Leaf(Service Leaf)ISP網(wǎng)絡(luò)M-L

13、AG (dual-active)PE (router)VTEPVTEPVTEPVTEP二層接入L2 SWLAN機(jī)架2租戶網(wǎng)絡(luò)訪問外網(wǎng)流量跨子網(wǎng)互訪流量同子網(wǎng)互訪流量VTEPVTEP二層接入L2 SWLAN機(jī)架2租戶網(wǎng)絡(luò)機(jī)房1機(jī)房2機(jī)位租用外部網(wǎng)絡(luò)主備出口邏輯示意圖VPCFWDC 1公網(wǎng)GW主出口備出口公網(wǎng)DC 2FWGW路由直通路由直通DVRDVRServerServer跨機(jī)房VXLAN二層拉通跨機(jī)房租用-主備出口SpineServer LeafBorder Leaf(Service Leaf)ISP網(wǎng)絡(luò)PE (router)VTEPVTEPVTEPVTEP二層接入L2 SWLAN機(jī)架2租戶網(wǎng)

14、絡(luò)訪問外網(wǎng)流量跨子網(wǎng)互訪流量同子網(wǎng)互訪流量VTEPVTEP二層接入L2 SWLAN機(jī)架2租戶網(wǎng)絡(luò)DC1DC2機(jī)位租用Border Leaf(Service Leaf)PE (router)VTEP備出口主出口外部網(wǎng)絡(luò)外部網(wǎng)絡(luò)故障場(chǎng)景主備切換前后流量路徑對(duì)比PEPEBorderLeafDC 1VTEPVTEPServerLeafDC 2VTEPVTEPBorderLeafServerServerSpineSpineLB FWVTEPLB FWVTEPServiceLeafServiceLeafServerLeaf正常狀態(tài)，流量走主用出口主出口故障，流量走備份出口主用出口，高優(yōu)先級(jí)路由備用出口，低