數(shù)據(jù)中心網(wǎng)絡(luò)架構(gòu)演進(jìn)趨勢

1、數(shù)據(jù)中心網(wǎng)絡(luò)架構(gòu)演進(jìn)趨勢Data Center Fabric Evolution 議程數(shù)據(jù)中心網(wǎng)絡(luò)架構(gòu)演進(jìn)趨勢數(shù)據(jù)中心架構(gòu)設(shè)計(jì)考慮傳統(tǒng)二層網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)MSDC-全三層網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)基于Trill & FaricPath大二層網(wǎng)絡(luò)架構(gòu)Vxlan以及Vxlan增強(qiáng)網(wǎng)絡(luò)架構(gòu)NSX網(wǎng)絡(luò)虛擬化未來發(fā)展趨勢數(shù)據(jù)中心網(wǎng)絡(luò)模型發(fā)展趨勢Spine + Leaf CLOS數(shù)據(jù)中心網(wǎng)絡(luò)架構(gòu)方向 STPMAN/WANFabricPath/BGPMAN/WANVXLAN/BGP EVPNMAN/WANACIMC-LAGMAN/WANTrill/FP(Flood & Learn)VXLAN(Flood & Learn)數(shù)據(jù)

2、中心網(wǎng)絡(luò)技術(shù)及架構(gòu)演進(jìn)議程數(shù)據(jù)中心網(wǎng)絡(luò)架構(gòu)演進(jìn)趨勢數(shù)據(jù)中心架構(gòu)設(shè)計(jì)考慮傳統(tǒng)二層網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)MSDC-全三層網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)基于Trill & FaricPath大二層網(wǎng)絡(luò)架構(gòu)Vxlan以及Vxlan增強(qiáng)網(wǎng)絡(luò)架構(gòu)NSX網(wǎng)絡(luò)虛擬化未來發(fā)展趨勢“似乎目前沒有完美的網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)，同時具備2層網(wǎng)絡(luò)靈活性，3層網(wǎng)絡(luò)的擴(kuò)展性，真正實(shí)現(xiàn)“網(wǎng)絡(luò)敏捷部署和自動化?”ABSOLUTELY Yes !答案是通過overlay技術(shù)虛擬化整個網(wǎng)絡(luò)架構(gòu)，通過硬件網(wǎng)絡(luò)提供三層IP背板，所有的網(wǎng)絡(luò)智能服務(wù)通過Network Hypervisor靈活部署Humm, show me .什么是Overlay技術(shù): Location與Id

3、entity分離IP coreDevice IPv4 or IPv6 Address Represents Identity and LocationTraditional BehaviourLoc/ID “Overloaded” Semantic10.1.0.1When the Device Moves, It Gets a New IPv4 or IPv6 Address for Its New Identity and Location20.2.0.9Device IPv4 or IPv6 Address Represents Identity Only. When the Device

4、 Moves, Keeps Its IPv4 or IPv6 Address. It Has the Same IdentityOverlay BehaviourLoc/ID “Split”IP core1.1.1.12.2.2.2Only the Location Changes10.1.0.110.1.0.1Its Location Is Here!議程數(shù)據(jù)中心網(wǎng)絡(luò)架構(gòu)演進(jìn)趨勢數(shù)據(jù)中心架構(gòu)設(shè)計(jì)考慮傳統(tǒng)二層網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)MSDC-全三層網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)基于Trill & FaricPath大二層網(wǎng)絡(luò)架構(gòu)Vxlan以及Vxlan增強(qiáng)網(wǎng)絡(luò)架構(gòu)NSX網(wǎng)絡(luò)虛擬化未來發(fā)展趨勢基于STP的數(shù)據(jù)中心網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)

5、Good Old Days？vPC Feature OverviewvPC Concept & BenefitsvPC Feature OverviewvPC Concept & BenefitsFeature OverviewHow does vPC help with STP? (1 of 2)Feature OverviewHow does vPC help with STP? (2 of 2) 議程數(shù)據(jù)中心網(wǎng)絡(luò)架構(gòu)演進(jìn)趨勢數(shù)據(jù)中心架構(gòu)設(shè)計(jì)考慮傳統(tǒng)二層網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)MSDC-全三層網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)基于Trill & FaricPath大二層網(wǎng)絡(luò)架構(gòu)Vxlan以及Vxlan增強(qiáng)網(wǎng)絡(luò)架構(gòu)NSX網(wǎng)絡(luò)

6、虛擬化未來發(fā)展趨勢議程數(shù)據(jù)中心網(wǎng)絡(luò)架構(gòu)演進(jìn)趨勢數(shù)據(jù)中心架構(gòu)設(shè)計(jì)考慮傳統(tǒng)二層網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)MSDC-全三層網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)大二層網(wǎng)絡(luò)架構(gòu)Vxlan以及Vxlan增強(qiáng)網(wǎng)絡(luò)架構(gòu)NSX網(wǎng)絡(luò)虛擬化未來發(fā)展趨勢Cisco FabricPathFrameClassical Ethernet FrameSwitch ID Unique number identifying each FabricPath switchFtag (Forwarding tag) Unique number identifying topology or distribution treeTTL Decremented at each

7、switch hop to prevent frames looping indefinitelyDMACSMAC802.1QEtypeCRCPayloadDMACSMAC802.1QEtypePayloadCRC(new)FPTag(32)OuterSA(48)OuterDA(48)Endnode ID(5:0)Endnode ID(7:6)U/LI/GRSVDOOO/DLSubSwitch IDLIDEtype0 x89036 bits112 bits1112 bits8 bits16 bits10 bits6 bits16 bitsSwitch IDFtagTTLOriginal CE

8、Frame16 bytes25Fabric Path的報(bào)文封裝FabricPathMAC Table on S100MACIF/SIDMACIF/SIDAe1/13 (local)e2/29S10S20S30S40Root forTree 1Root forTree 2S100S200S300Fabric Path的報(bào)文轉(zhuǎn)發(fā) Host A to Host B(1) Broadcast ARP RequestMAC AMAC BMultidestination Trees on Switch 100TreeIF1po102po10,po20,po30,po40Hash ResultFFFF.FF

9、FF.FFFFSMACAPayloadMultidestination Trees on Switch 10TreeIF1po100,po200,po3002po100po10po20po40po30Ftag Ftag FFFF.FFFF.FFFFSMACAPayloadpo100po300po200e1/13po10po20po30po40FFFF.FFFF.FFFFSMACAPayloadFtag1SA100FFFF.FFFF.FFFFLearn MACs of directly-connecteddevices unconditionallyDont learn MACs from un

10、known flood framesFabricPathMAC Table on S300MACIF/SIDMultidestination Trees on Switch 300TreeIF1po10,po20,po30,po402po40Hash26S100e2/29S10S20S30S40Root forTree 1Root forTree 2S200S300MAC AMAC Bpo10po20po40po30po100po300po200e1/13po10po20po30po40Multidestination Trees on Switch 100TreeIF1po102po10,p

11、o20,po30,po40Ftag Multidestination Trees on Switch 10TreeIF1po100,po200,po3002po100Ftag DMACASMACBPayloadHash ResultA Fabric Path的報(bào)文轉(zhuǎn)發(fā) Host A to Host B(2) Unicast ARP ReplyFabricPathMAC Table on S300MACIF/SIDMACIF/SIDBe2/29 (local)MISSIf DMAC is known, then learn remote MACMultidestination Trees on

12、Switch 300TreeIF1po10,po20,po30,po402po40FabricPathMAC Table on S100MACIF/SIDAe1/13 (local)MACIF/SIDAe1/13 (local)B300 (remote)DMACASMACBPayload*MC1 DMACDMACASMACBPayloadFtag1SA300010F.FFC1.01C0*Hash27e2/29S10S20S30S40S200S300MAC AMAC Bpo10po20po40po30e1/13po10po20po30po40S100DMACBSMACAPayloadFabric

13、PathMAC Table on S100DMACBSMACAPayloadMACIF/SIDAe1/13 (local)B300 (remote)B S300 FabricPath Routing Table on S100SwitchIFS10po10S20po20S30po30S40po40S200po10, po20, po30, po40S300po10, po20, po30, po40S300 FabricPath Routing Table on S30SwitchIFS300po300S300 Fabric Path的報(bào)文轉(zhuǎn)發(fā) Host A to Host B(3) Unic

14、ast DataHashDMACBSMACAPayloadFtag1SA100DA300FabricPathMAC Table on S300MACIF/SIDBe2/29 (local)MACIF/SIDAS100 (remote)Be2/29 (local)FabricPath Routing Table on S300SwitchIFS300MAC LookupIf DMAC is known, then learn remote MACpo300B 28議程數(shù)據(jù)中心網(wǎng)絡(luò)架構(gòu)演進(jìn)趨勢數(shù)據(jù)中心架構(gòu)設(shè)計(jì)考慮傳統(tǒng)二層網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)MSDC-全三層網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)大二層網(wǎng)絡(luò)架構(gòu)Vxlan以及Vxlan

15、增強(qiáng)網(wǎng)絡(luò)架構(gòu)NSX網(wǎng)絡(luò)虛擬化未來發(fā)展趨勢31VXLAN 包封裝格式MAC-in-IP Encapsulation32UnderlayOuter IP HeaderOuter MAC HeaderUDP HeaderVXLAN HeaderOriginal Layer-2 FrameOverlay14 Bytes(4 Bytes Optional)Ether Type0 x0800VLAN IDTagVLAN Type0 x8100Src. MAC AddressDest. MAC Address484816161620 BytesDest. IPSource IPHeader Checksum

16、Protocol 0 x11 (UDP)IP HeaderMisc. Data7281632328 BytesChecksum 0 x0000UDP LengthVXLAN PortSource Port161616168 BytesReservedVNIReservedVXLAN Flags RRRRIRRR824248Src VTEP MAC AddressNext-Hop MAC AddressSrc and Dst addresses of the VTEPsAllows for 16M possible SegmentsUDP 4789Hash of the inner L2/L3/

17、L4 headers of the original frame. Enables entropy for ECMP Load balancing in the Network.50 (54) Bytes of OverheadVXLAN 網(wǎng)關(guān)類型VXLAN to VLAN Bridging(Layer-2 Gateway)VXLAN-to-VXLAN Routing(Layer-3 Gateway)VXLAN-to-VLAN Routing(Layer-3 Gateway)Vxlan Gateway33VVXLAN RouterIngress VXLAN packeton RED segme

18、ntEgress VXLAN packet is ROUTED to new segmentVVXLAN RouterIngress VXLAN packeton RED segmentEgress packet is IEEE 802.1q tagged interface. packet is ROUTED to new VLANVVXLAN Layer-2 GatewayIngress VXLAN packeton RED segmentEgress packet is IEEE 802.1q tagged interface. packet is BRIDGED to new VLAN

19、VXLAN 轉(zhuǎn)發(fā)方式介紹 Flood&Learn34V1V3MACVNIVTEPMAC_A30000E1/12Host BMAC_B / IP_BMACVNIVTEPMAC_B30000E1/4Virtual SwitchMACVNIVTEPMAC_C30000E1/8V2Destination Group239.1.1.1(00:01:5E:01:01:01)Host AMAC_A / IP_AHost CMAC_C / IP_CVTEP發(fā)現(xiàn)機(jī)制& 地址學(xué)習(xí)(1) VXLAN Flood&Learn35V1V3UnderlaySIP: IP_V1DIP: 239.1.1.1SMAC: MAC

20、_V1DMAC: 00:01:5E:01:01:01UDPVXLAN VNID: 30000ARP RequestSMAC: MAC_ADMAC: FF:FF:FF:FF:FF:FFOverlay2MACVNIVTEPMAC_A30000E1/12Host BMAC_B / IP_BMACVNIVTEPMAC_B30000E1/4MAC_A30000V1Virtual SwitchARP Request for IP_BSrc MAC: MAC_ADst MAC: FF:FF:FF:FF:FF:FF4MACVNIVTEPMAC_C30000E1/8MAC_A30000V1V2Destinati

21、on Group239.1.1.1(00:01:5E:01:01:01)3Host AMAC_A / IP_A1ARP Request for IP_BSrc MAC: MAC_ADst MAC: FF:FF:FF:FF:FF:FF3Host CMAC_C / IP_CARP Request for IP_BSrc MAC: MAC_ADst MAC: FF:FF:FF:FF:FF:FF4MACVNIVTEPMAC_B30000E1/4MACVNIVTEPMAC_C30000E1/8VTEP發(fā)現(xiàn)機(jī)制& 地址學(xué)習(xí)(2) VXLAN Flood&Learn36Host AMAC_A / IP_AH

22、ost BMAC_B / IP_BV3ARP Response from IP_BSrc MAC: MAC_BDst MAC: MAC_A5MACVNIVTEPMAC_B30000E1/4MAC_A30000V1MACVNIVTEPMAC_A30000E1/12MAC_B30000V2ARP Response for IP_BSrc MAC: MAC_BDst MAC: MAC_A7V2V1UnderlaySIP: IP_V2DIP: IP_V1SMAC: hop-by-hopDMAC: MAC_V2UDPVXLAN VNID: 30000ARP ResponseSMAC: MAC_BDMAC: MAC_AOverlay6MACVNIVTEPMAC_A30000E1/12VXLAN 報(bào)文轉(zhuǎn)發(fā)VXLAN Flood&Learn37Host AMAC_A / IP_AHost BMAC_B / IP_BV34MACVNIVTEPMAC_B30000E1/4MAC_A30000V1MACVNIVTEPMAC_A30000E1/12MAC_B30000V2V2V1SIP: IP_ADIP: IP_BSMAC: MAC_ADMAC: MAC_B1