云計(jì)算平臺(tái)存儲(chǔ)架構(gòu)設(shè)計(jì)

云計(jì)算平臺(tái)存儲(chǔ)架構(gòu)設(shè)計(jì)第1頁(yè)/共47頁(yè)Agenda介紹–基礎(chǔ)架構(gòu),四要素,內(nèi)容和相關(guān)文檔Availability(可靠性)SecureSeparation(安全隔離)ServiceAssurance(服務(wù)保證)Management(可管理性)StorageinSMTArchitecture(SMT架構(gòu)中的存儲(chǔ)系統(tǒng))Summary(總結(jié))

牛牛文庫(kù)文檔分享第2頁(yè)/共47頁(yè)SecureMulti-Tenancy架構(gòu)HRBUAPPHRAppsBUAppsCoreAppsHRBUAPPVMwareVMwareVMware傳統(tǒng)數(shù)據(jù)中心架構(gòu)SecureMulti-tenancy安全多租賃架構(gòu)

牛牛文庫(kù)文檔分享第3頁(yè)/共47頁(yè)SecureMulti-Tenancy架構(gòu)四要素s服務(wù)保證提供跨主機(jī)層、網(wǎng)絡(luò)層和存儲(chǔ)層的一致性的SLA保證安全隔離實(shí)現(xiàn)跨分區(qū)的數(shù)據(jù)安全隔離增加安全和訪問(wèn)控制可用性

構(gòu)建彈性架構(gòu),提供高可用性、容錯(cuò)性和冗余性可管理性簡(jiǎn)化管理端到端的管理SecureMulti-tenancyArchitecture

牛牛文庫(kù)文檔分享第4頁(yè)/共47頁(yè)SecureMulti-Tenancy基礎(chǔ)架構(gòu)構(gòu)成NetAppSANscreenNetworkComputeSANCiscoNexus7000CiscoNexus5000CiscoUCS6100FabricInterconnectCiscoUCS5100BladeServerCiscoMDSVMwarevSphereCiscoNexus1000VVMwarevShieldStorageNetAppMultiStoreNetAppFASVMwarevSphereVMwarevSphereNetAppFilerViewNetAppProvisioningManagerNetAppProtectionManagerNetAppOperationsManagerCiscoUCSManagerCiscoDataCenterNetworkManagerVMwarevShieldManagerVMwarevCenterNetAppSnapManager服務(wù)器VMwarevShieldVMwarevSphereCiscoUnified

ComputingSystem網(wǎng)絡(luò)CiscoNexus1000VCiscoNexus5000CiscoNexus7000CiscoMDS存儲(chǔ)NetAppUnifyFASStorageNetAppMultistoreFlexvol/De-DuplicationFlexshareSnapshot/Snapmirror管理VMwarevShieldManagerVMwarevCenterCiscoUCSManagerCiscoDCNetworkManagerNetAppOperationsManagerNetAppProvisioningManagerNetAppSANscreen&SnapManager

牛牛文庫(kù)文檔分享第5頁(yè)/共47頁(yè)VCEArchitecture6

牛牛文庫(kù)文檔分享第6頁(yè)/共47頁(yè)SecureMulti-Tenancy基礎(chǔ)架構(gòu)數(shù)據(jù)訪問(wèn)示意圖7NetworkStorageComputer

牛牛文庫(kù)文檔分享第7頁(yè)/共47頁(yè)架構(gòu)設(shè)計(jì)指南DesigningSecureMulti-tenancyintoVirtualizedDataCenterDesignGuideCiscoValidatedDesign(CVD)SolutionBrief(4pages)ArchitectureOverview(25pages)CVD:DesignGuide

(90pages)DesignConsiderationsBestPracticeBillofMaterialCVD:DeploymentGuide

(100+pages)ConfigurationSoftwareRecommendation

牛牛文庫(kù)文檔分享第8頁(yè)/共47頁(yè)Agenda介紹–基礎(chǔ)架構(gòu),四要素,內(nèi)容和相關(guān)文檔Availability(可靠性)SecureSeparation(安全隔離)ServiceAssurance(服務(wù)保證)Management(可管理性)StorageinSMTArchitecture(SMT架構(gòu)中的存儲(chǔ)系統(tǒng))Summary(總結(jié))

牛牛文庫(kù)文檔分享第9頁(yè)/共47頁(yè)極富彈性的端到端基礎(chǔ)架構(gòu)Core/AggregationAccessComputeSAN/StorageCiscoNexus7000CiscoNexus5000CiscoUCS6100FabricInterconnectUCS5100BladeServerCiscoMDSNetAppFASvPCvPC4x10GE4x10GE4x10GE4x10GEFCFC10GE10GEvPCEtherChannelEtherChannelFCFC服務(wù)器vCenterHeartbeatVMwareHAvMotion/StoragevMotionUCSFabricRedundancy網(wǎng)絡(luò)vPCEtherChannelN1KVActive/StandbyVSMLink/DeviceRedundancy存儲(chǔ)RAID-DPNetAppHASnapshotSnapMirror/SnapVaultVMwarevSphereNexus1000VVMwarevCenter

牛牛文庫(kù)文檔分享第10頁(yè)/共47頁(yè)基礎(chǔ)架構(gòu)可靠性:網(wǎng)絡(luò)和UCSx4x4x4x4x4x4x4x4x4x4x4x4x4x4x4x4AABBUCS1AggregationLayerUCS2VSMActiveVEMNexus7000andNexus5000LooplessTopologywithvPCPort-ChannelRPVST+Nexus1000VSupervisorAvailability

(VSM)ForwardingPath

Availability(VEM)Nexus1000VVSMStandbyUnifiedComputingSystemFabricAvailabilityControlPlaneAvailabilityForwardingPathAvailabilityBladeServerPathAvailabilityvPCAccessLayervPCvPCvPCvPC

牛牛文庫(kù)文檔分享第11頁(yè)/共47頁(yè)基礎(chǔ)架構(gòu)可靠性:VMwareHA和vCenter心跳VMwareHAProtectionagainstserverfailureConfigurableVMrestartpriorityProtectionagainstVMguestOSfailureConfigurableVMheartbeatmonitorsensitivityPrimaryvs.SecondaryNodesvCenterHeartbeatPrimaryandSecondaryvCenterserverinreplicationandsynchronizationProtectionagainsthardwareandapplicationfailure

牛牛文庫(kù)文檔分享第12頁(yè)/共47頁(yè)基礎(chǔ)架構(gòu)可靠性:vMotion和StoragevMotionvMotionContinuouslyavailabilitytotenantsduringplannedserveroutagesZerodowntimemigrationofVMbetweenserversStoragevMotionContinuouslyavailabilitytotenantsduringmigrationtodifferenttiersofstorageSupportsallthreeprotocols:NFS,iSCSI,FCP

牛牛文庫(kù)文檔分享第13頁(yè)/共47頁(yè)基礎(chǔ)架構(gòu)可靠性:基于存儲(chǔ)系統(tǒng)的全面數(shù)據(jù)保護(hù)手段14

牛牛文庫(kù)文檔分享14完整的數(shù)據(jù)恢復(fù)方案SnapRestore?Snapshot?Copies–D2DBackupSnapVault?,SnapLock?,LockVault?AsynchronousSnapMirrorSynchronousSnapMirror?

SynchronousClustersMetroCluster數(shù)據(jù)快速備份和恢復(fù)數(shù)據(jù)快速恢復(fù)磁盤備份及數(shù)據(jù)遵循方案不同級(jí)別的服務(wù)協(xié)議基于網(wǎng)絡(luò)的恢復(fù)不中斷的操作AppIntegrationContinuousAvailabilityLocalSnapshotsBackupDisasterRecoveryComplianceDR/Dev/TestClonesSnapManagerSuit與應(yīng)用高度集成的數(shù)據(jù)管理套件第14頁(yè)/共47頁(yè)Agenda介紹–基礎(chǔ)架構(gòu),四要素,內(nèi)容和相關(guān)文檔Availability(可靠性)SecureSeparation(安全隔離)ServiceAssurance(服務(wù)保證)Management(可管理性)StorageinSMTArchitecture(SMT架構(gòu)中的存儲(chǔ)系統(tǒng))Summary(總結(jié))

牛牛文庫(kù)文檔分享第15頁(yè)/共47頁(yè)數(shù)據(jù)安全隔離服務(wù)器UCS&vSphereRBACVMSecuritywith

vShieldandNexus1000VUCSResourcePool

Separation網(wǎng)絡(luò)AccessControlListVLANSegmentationQoS-Classification存儲(chǔ)vFilerunitsIPSpacesVLANSegmentation

牛牛文庫(kù)文檔分享第16頁(yè)/共47頁(yè)訪問(wèn)控制定義角色云架構(gòu)管理員

租賃單元管理員租賃單元用戶訪問(wèn)控制列表Nexus1000V,5000,7000基于角色的訪問(wèn)控制UCSManagerServerAdminNetworkAdminStorageAdminCustomizedAdminvCenterPrivilegeAssignmentUserGroupAssociationPermissionAssignmentTenantBNetAppMultiStorevFilervFilervFilervFilerTenantATenantCTenantDTenantBCloudAdministrator

牛牛文庫(kù)文檔分享第17頁(yè)/共47頁(yè)VLAN整合PerspectiveVLAN組功能RoutableCloudAdminManagementManageUCS,

N1KV,Storage,

NetworkDevicesNetworkManagement&OOBYesControlConnectivityacrosscompute,network,andstorageentitiesNoTenant(租賃單元)ApplicationAdminVMandapplicationadministrationYesDataServicethecustomerapplication.DependsVLANTypesFunctionRoutableControlPlaneVLANToMangecontrolPlaneNoManagementVLANToMangeManagementYesEngineeringVLANToseparateforEngineering.NoMarketingVLANToserviceMarketingteam.DependsHRVLANTotoserviceHRgroup.NoDataCenterVLANToseparateDataCenterfromotherplaces.DependsStorageVLANVLANonlyforSANNo復(fù)雜DataVLAN??VLAN#200WhichVLAN??VLAN#201??WhichVLANforVM#2?ManagementVLAN?

牛牛文庫(kù)文檔分享第18頁(yè)/共47頁(yè)19VM安全和vShield和Nexus1000V安全隔離Simplecontainer-basedrulecreationleveragingvCenterinventoryobjectsPointofenforcementclosetoVMPolicybasedseparationbetweentenantsPolicybasedseparationformulti-tierapplication

與N1KV完全集成VirtualServiceDomain(VSD)featureleveragedbyvShieldtointerceptVM-destinedflowsvMotionawarenessvShieldsessionstatetablesfollowtheVMCiscoVN-LinkmaintainsVMprotectionpolicyconsistencyduringvMotionProtected(VSDInside)Unprotected(VSDOutside)PhysicalAdaptersNexus1000VTenantATenantBTenantCMembersofVSD

牛牛文庫(kù)文檔分享第19頁(yè)/共47頁(yè)計(jì)算資源的隔離vSphereResourcePoolDesignBestPracticeDedicatedresourcepoolsforinfrastructureandtenantsSeparatesub-resourcepoolforindividualtenantsCombinedwithRBACtosecurelyisolateaccessbetweentenantsStoragePoolInterconnectPoolTenantAResourcePoolTenantBResourcePoolTenantBResourcePoolTenantResourcePoolInfrastructureResourcePoolTenantBResourcePool

牛牛文庫(kù)文檔分享第20頁(yè)/共47頁(yè)NetAppSecureMulti-Tenancy

用戶/應(yīng)用/符合的分區(qū)隔離ChallengesResourceutilizationSecureseparationResourcehogsSecuremulti-tenancyMultiStoreSecurepartitionofstorageandnetworkingProventechnology:16,000licensesThird-partyvalidsecuritytestingVirtualStoragePartitionCustomerBVirtualStoragePartitionCustomerCDataDataDataDataDataDataVirtualStoragePartitionCustomerADataDataDataMultiStore?

牛牛文庫(kù)文檔分享第21頁(yè)/共47頁(yè)Agenda介紹–基礎(chǔ)架構(gòu),四要素,內(nèi)容和相關(guān)文檔Availability(可靠性)SecureSeparation(安全隔離)ServiceAssurance(服務(wù)保證)Management(可管理性)StorageinSMTArchitecture(SMT架構(gòu)中的存儲(chǔ)系統(tǒng))Summary(總結(jié))

牛牛文庫(kù)文檔分享第22頁(yè)/共47頁(yè)服務(wù)保證

–交付服務(wù)級(jí)別協(xié)議(SLA)HighPriorityMedPriorityPlatinumCoSGoldCoS計(jì)算ExpandableReservationDynamicResourceSchedulerUCSQoSSystemClassesforResourceReservationandLimit網(wǎng)絡(luò)QoS-ClassificationQoS-QueuingQoS-BandwidthcontrolQoS-RateLimiting存儲(chǔ)FlexShareStorageReservationsThinProvisioning4GE2GE

牛牛文庫(kù)文檔分享第23頁(yè)/共47頁(yè)網(wǎng)絡(luò)服務(wù)保證QoS–ClassificationClassificationCapabilityIdentifyTrafficTypesClassifyatSourceof

OriginQoS–QueuingPacketDeliveryScheduleQoS-BandwidthControlQoS–RateLimitingBackEndTrafficControl&ManagementTrafficTypesBestEffortFrontEndTrafficBulkDataNetworkManagementNFSDataStore/N1KVService-ClassScavengerBestEffortCoS6,GoldCoS6GoldCoS4,SilverCoS5PlatinumCoS&UCSClassCoS0&1,BestEffortCoS6,GoldCoS5,PlatinumCoS5,PlatinumCoS4,SilvervMotionTransactionalApplicationStorageIOApptoApp(multi-tier)CoS4,SilverCoS2,Bronze

牛牛文庫(kù)文檔分享第24頁(yè)/共47頁(yè)計(jì)算資源服務(wù)保證內(nèi)嵌vCenterResourcePool設(shè)置提供:resourceguaranteeforinfrastructureandtenantservicesResourcepool設(shè)置基于用戶所需的SLA要求:VMwareDRS提供了一個(gè)ESX集群內(nèi)的完全自動(dòng)的跨UCS刀片的負(fù)載分配在VM/vApp運(yùn)行狀態(tài)下在穩(wěn)定或不穩(wěn)定的狀況下ResourcePoolSettingsPlatinumTenantGoldTenantSilverTenantReservationReservedReservedNoreservationLimitsUnlimitedLimitedLimitedSharesHighMediumLowExpandableReservationEnabledDisabledDisabled

牛牛文庫(kù)文檔分享第25頁(yè)/共47頁(yè)存儲(chǔ)系統(tǒng)服務(wù)級(jí)別協(xié)議(SLA)保證可對(duì)優(yōu)先應(yīng)用或用戶提供高優(yōu)先級(jí)訪問(wèn)保證Fivelevelsofprioritizationavailable隔離租賃單元性能問(wèn)題,保證其它租賃單元的SLA不受其影響運(yùn)行Flexshare軟件的FAS存儲(chǔ)系統(tǒng)ClientsDatabaseServerSwitchPlatinumSLAGoldSLAMediumPriorityHighPriority

牛牛文庫(kù)文檔分享第26頁(yè)/共47頁(yè)Agenda介紹–基礎(chǔ)架構(gòu),四要素,內(nèi)容和相關(guān)文檔Availability(可靠性)SecureSeparation(安全隔離)ServiceAssurance(服務(wù)保證)Management(可管理性)StorageinSMTArchitecture(SMT架構(gòu)中的存儲(chǔ)系統(tǒng))Summary(總結(jié))

牛牛文庫(kù)文檔分享第27頁(yè)/共47頁(yè)ServerLayerNetworkLayerStorageLayervCenterServervShieldManagerUnifiedComputingSystem(UCS)ManagerSANscreenDataCenterNetworkManagerFlexibleNetFlowFabricManagerSANscreenOperationsManagerProvisioningandProtectionManagerSANscreenServiceInsightServiceAssuranceApplicationInsightCapacityManagerVMInsight端到端的管理

牛牛文庫(kù)文檔分享第28頁(yè)/共47頁(yè)CiscoUCSManagerUCSManager

SinglepointofmanagementforUCSsystemofcomponentsAdapters,blades,chassis,fabricextenders,fabricinterconnects

EmbeddeddevicemanagerDiscovery,Inventory,Configuration,Monitoring,Diagnostics,StatisticsCollectionCoordinateddeploymenttomanagedendpoints

APIsforintegrationwithnewandexistingdatacenterinfrastructureSMASH-CLP,IPMI,SNMPXML-basedSDKforcommercial&customimplementationsGUICustomPortalorToolsSystemsManagementSoftwareCLI

牛牛文庫(kù)文檔分享第29頁(yè)/共47頁(yè)CiscoDataCenterNetworkManager

Centralizedmanagementthroughoutthedatacenternetwork

Ethernet,IProutingandNetworkSecuritydomainawareness

Enableserror-freeprovisioning

Configurationvalidationviasyntaxandsemanticschecks

Healthmonitoring

Real-timealarmsandkeytrafficperformanceindicators

Facilitatestheinsertionofinnovativenetworkfeatures

Networkvirtualizationtransparentlysupported

Powerfulindustry-standardSOAP/XMLAPI

Statefulnetworkinformationenablingnetwork-aware3rdpartyapplications

牛牛文庫(kù)文檔分享第30頁(yè)/共47頁(yè)vCenter基礎(chǔ)架構(gòu)管理CentralizedControlandVisibilityResourceAllocationOverviewPerformanceChartsOverviewDatastoreUtilizationOverviewProactiveManagementDefaultAlarmstomonitorinfrastructurehealth,resourceandspaceutilizationExtensibilityvShieldManagerNetAppVirtualStorageConsole(VSC)第31頁(yè)/共47頁(yè)32vShieldManager和vCenter

server集成PolicyOverviewTrafficflowHistoricalflowchartRealTimeflowchart

牛牛文庫(kù)文檔分享第32頁(yè)/共47頁(yè)NetApp存儲(chǔ)系統(tǒng)管理

SANscreenallowsprovidersandtenantsvisibilityintofullstoragepathProvisioningManagereasesprovidersdeploymentProtectionmanagermakesbackupsandrecoveryasnap.OperationsManagerofferschargebackreportingandmonitoring

牛牛文庫(kù)文檔分享第33頁(yè)/共47頁(yè)Agenda介紹–基礎(chǔ)架構(gòu),四要素,內(nèi)容和相關(guān)文檔Availability(可靠性)SecureSeparation(安全隔離)ServiceAssurance(服務(wù)保證)Management(可管理性)StorageinSMTArchitecture(SMT架構(gòu)中的存儲(chǔ)系統(tǒng))Summary(總結(jié))

牛牛文庫(kù)文檔分享第34頁(yè)/共47頁(yè)SMT架構(gòu)下的存儲(chǔ)系統(tǒng)彈性的存儲(chǔ)架構(gòu)數(shù)據(jù)可靠性存儲(chǔ)有效性虛擬化環(huán)境集成35

牛牛文庫(kù)文檔分享第35頁(yè)/共47頁(yè)36NAS

(File)DepartmentaliSCSIEnterpriseSAN

(Block)Fibre

ChannelEnterpriseDedicated

EthernetSANNASDepartmentalCorporate

LANFASSeries彈性的存儲(chǔ)架構(gòu):統(tǒng)一的存儲(chǔ)架構(gòu)設(shè)計(jì)LUNLUNFileFileFCoE

牛牛文庫(kù)文檔分享第36頁(yè)/共47頁(yè)彈性的存儲(chǔ)架構(gòu):持續(xù)在線的數(shù)據(jù)流動(dòng)性3737NetAppConfidential-InternalUseOnly37解決無(wú)法為下列操作安排停機(jī)時(shí)間的問(wèn)題存儲(chǔ)擴(kuò)容計(jì)劃內(nèi)維護(hù)宕機(jī)時(shí)間技術(shù)更新軟件升級(jí)提高服務(wù)級(jí)別的靈活度動(dòng)態(tài)的負(fù)載均衡可調(diào)整的存儲(chǔ)設(shè)備級(jí)別應(yīng)用透明化集成保持優(yōu)異性能保持交易一致性

Data

Data

DataStoragePoolStoragePool

牛牛文庫(kù)文檔分享第37頁(yè)/共47頁(yè)彈性的存儲(chǔ)架構(gòu):存儲(chǔ)資源Qos管理，優(yōu)化應(yīng)用響應(yīng)38基于卷的優(yōu)先級(jí)定義在線動(dòng)態(tài)調(diào)整保證關(guān)鍵業(yè)務(wù)的I/O優(yōu)先級(jí)響應(yīng)實(shí)現(xiàn)存儲(chǔ)整合場(chǎng)景下，多應(yīng)用下的性能負(fù)荷優(yōu)化01020304050607080LowPriorityVolumesMediumPriorityVolumesHighPriorityVolumesLatency(msec)01020304050607080LowPriorityVolumesMediumPriorityVolumesHighPriorityVolumesLatency(msec)

牛牛文庫(kù)文檔分享第38頁(yè)/共47頁(yè)傳統(tǒng)磁帶備份數(shù)據(jù)可靠性:瞬間備份,無(wú)服務(wù)器性能影響傳統(tǒng)備份方式不再適合云計(jì)算快速,簡(jiǎn)單備份/恢復(fù)StoragePoolVM1VM2VM1VM2CPUUtilization高服務(wù)器利用率備份窗口小磁帶備份速度慢/復(fù)雜/昂貴/可靠性差容災(zāi)困難NetApp快照備份服務(wù)器運(yùn)行應(yīng)用，沒(méi)有后臺(tái)處理瞬間數(shù)據(jù)備份和恢復(fù)低存儲(chǔ)負(fù)荷應(yīng)用一致性CPUUtilizationsnapshot

牛牛文庫(kù)文檔分享第39頁(yè)/共47頁(yè)數(shù)據(jù)可靠性:高效率D2D備份架構(gòu)SnapVaultOSSV管理服務(wù)器

NetApp二級(jí)近線存儲(chǔ)FlexClone

Copies本地或遠(yuǎn)程站點(diǎn)OSSV

Windows/LinuxESX內(nèi)置磁盤或非NetApp存儲(chǔ)OSSV

優(yōu)勢(shì)備份速度快備份窗口小備份/恢復(fù)的可靠性高可與遠(yuǎn)程復(fù)制技術(shù)聯(lián)動(dòng)實(shí)現(xiàn)異地容災(zāi)備份或容災(zāi)數(shù)據(jù)可近實(shí)時(shí)檢驗(yàn)NetApp異地容災(zāi)存儲(chǔ)SnapMirrorNetApp主存儲(chǔ)Snapshot測(cè)試主機(jī)

牛牛文庫(kù)文檔分享第40頁(yè)/共47頁(yè)存儲(chǔ)有效性:多種空間有效性存儲(chǔ)技術(shù)41SnapshotTM

Copies快照備份Deduplication重復(fù)數(shù)據(jù)刪除Savesupto95%forfullbackups;25%to55%formostdatasets.Save

upto

95%ThinProvisioning

(FlexVol?)自動(dòng)精簡(jiǎn)部署技術(shù)20%to33%typicalsavings.33%Savingscompoundwhenusingmultiplefeatures!Saveover

80%WritableSnapshot(FlexClone?)Copies虛擬克隆技術(shù)RAID6(RAID-DPTM)Savesupt