版權(quán)說明：本文檔由用戶提供并上傳，收益歸屬內(nèi)容提供方，若內(nèi)容存在侵權(quán)，請進行舉報或認領(lǐng)
文檔簡介
Contrail介紹
---JuniperoverlaySDN解決方案Contrail介紹---JuniperoverlayContrail介紹---Juniperoverlay網(wǎng)絡(luò)虛擬化演進方向VirtualNetworkOverlaysReactiveEnd-to-EndVLANconfiguredonphysicalswitchesRequiresprogrammingofflowsNoimpact
tophysical
networkManualEnd-to-EndPROACTIVE
SOFTWAREOVERLAYOPENFLOWREACTIVEAPPOACHVLANAPPROACH網(wǎng)絡(luò)虛擬化演進方向VirtualNetworkOverl網(wǎng)絡(luò)虛擬化演進方向VirtualNetworkOverl需要手動在每臺配置每隔VLAN的信息插入服務(wù)相對比較復(fù)雜
VLANID一共只有4096個，支持的用戶數(shù)量也是4096
用戶的流量在物理網(wǎng)絡(luò)直接傳輸網(wǎng)絡(luò)虛擬化---VLAN手工控制.低效率.擴展性低.需要手動在每臺配置每隔VLAN的信息插入服務(wù)相對比較復(fù)雜V需要手動在每臺配置每隔VLAN的信息插入服務(wù)相對比較復(fù)雜V網(wǎng)絡(luò)虛擬化----OpenflowOpenFlow需要底層交換機的支持OpenFlow需要編程每個用戶的流量都要經(jīng)過物理網(wǎng)絡(luò)轉(zhuǎn)發(fā)延遲較高.擴展性低.增加故障的考慮點.可升級.Openflow控制器每個流量的首個數(shù)據(jù)包都要去到控制器進行分析網(wǎng)絡(luò)虛擬化----OpenflowOpenFlow需要底層交網(wǎng)絡(luò)虛擬化----OpenflowOpenFlow需要底層交數(shù)據(jù)包不用經(jīng)過控制器，僅通過隧道進行轉(zhuǎn)發(fā)通過已存在的網(wǎng)絡(luò)轉(zhuǎn)發(fā)數(shù)據(jù)用戶的信息通過隧道轉(zhuǎn)發(fā)，對現(xiàn)網(wǎng)沒有感知，即使現(xiàn)網(wǎng)的結(jié)構(gòu)在發(fā)生改變控制器運用編程手段控制虛擬的vswitch和虛擬網(wǎng)關(guān)網(wǎng)絡(luò)虛擬化----OVerlay低延遲.高擴展性.自動恢復(fù)能力.可以在任何網(wǎng)絡(luò)上實現(xiàn).數(shù)據(jù)包不用經(jīng)過控制器，僅通過隧道進行轉(zhuǎn)發(fā)通過已存在的網(wǎng)絡(luò)轉(zhuǎn)發(fā)數(shù)據(jù)包不用經(jīng)過控制器，僅通過隧道進行轉(zhuǎn)發(fā)通過已存在的網(wǎng)絡(luò)轉(zhuǎn)發(fā)JuniperCONTRAIL的角色與作用ServiceNodesInternetVPNDCIWANGatewayRouter
JunosVContrailOrchestratorComputeAPIsStorageAPIsNetworkAPIsServerVirtualMachinevRouterPhysicalSwitchesvSRX,F5…Juniper的contrail以openstack為基礎(chǔ)，通過API調(diào)用openstack的組件JuniperCONTRAIL的角色與作用ServiceJuniperCONTRAIL的角色與作用ServiceContrail組件PhysicalNetwork
(nochanges)AnalyticsOPENCONTRAILCONTROLLERControlConfigurationPhysicalHostwithHypervisorvRouterVMVMVMVMPhysicalHostwithHypervisorvRouterVMVMVMVMWAN,InternetGateway通過API戒口接收VM的狀態(tài)信息，包括遷移，新建等可以實時分析數(shù)據(jù)和流量通過openstack的API控制其他的節(jié)點信息vRouter:虛擬化的vswitch，為虛擬機接入提供虛擬化戒口Gateway:可以采用juniper的MX或者EX9200TODAY2014Juniper目前完成openstack的集成，后續(xù)還會支持Vmware等更多的云平臺系統(tǒng)contrail控制器Contrail節(jié)點Contrail節(jié)點Contrail組件PhysicalNetwork
(noContrail組件PhysicalNetwork
(noIPAM,VirtualDNSSecurityLoad
Balancing3rdPartyNetworkServicesRichAnalyticsHigh
AvailabilityServiceChainingAPI
ServicesRoutingandSwitchingGatewayServicesContrail功能IPAM,VirtualDNSSecurityLoad
IPAM,VirtualDNSSecurityLoad
Contrail–
控制器和節(jié)點ControlNode
"BGPmodule"
ProxiesXMPPControl
NodeControl
NodeComputeNodeComputeNodeConfigurationNodeConfigurationNodeIF-MAPXMPPIBGPIF-MAPClient控制器和節(jié)點之間可以實現(xiàn)控制和轉(zhuǎn)發(fā)分離
控制器可以控制多個節(jié)點，包括路由器和computenode控制層面通過BGP協(xié)議實現(xiàn)路由控制轉(zhuǎn)發(fā)點通過動態(tài)的GRE的隧道轉(zhuǎn)發(fā)數(shù)據(jù)物理拓撲和交換機對于用戶是透明的Gateway
RoutersServiceNodesContrail–控制器和節(jié)點CContrail–控制器和節(jié)點CControlplane–路由發(fā)布方式10.1.1.110.1.1.270.10.10.1151.10.10.110.1.1.2:NH=151.10.10.1;LBL=1710.1.1.1:NH=70.10.10.1;LBL=3910.1.1.110.1.1.2PAYLOADVRFPriSrcIPPriDstIP10.1.1.110.1.1.2PAYLOADLBL=17GRE70.10.10.1151.10.10.1PubSrcIPPubDstIPVMVRFPriSrcIPPriDstIP10.1.1.110.1.1.2PAYLOADPriSrcIPPriDstIPVMIPNetworkAgentAgentXMPPXMPPControlNodeConfigurationNodeREST/API10.1.1.2:NH=151.10.10.1;LBL=1710.1.1.1:NH=70.10.10.1;LBL=39(DynamicTunnelEncapsulation)(DynamicTunnelDecapsulation)Server1Server2ControlPlane*OuterMACheaderwasleftoutintentionallytoreduceclutter10.1.1.1:NH=70.10.10.1;LBL=3910.1.1.2:NH=151.10.10.1;LBL=17ControlPlaneIF-MAP通過BGP協(xié)議VM的地址被宣告到控制器中轉(zhuǎn)發(fā)時原始數(shù)據(jù)包經(jīng)過GRE再次封裝Controlplane–路由發(fā)布方式10.1.1.1Controlplane–路由發(fā)布方式10.1.1.1應(yīng)用場景—邏輯拓撲VM
G1VM
G2VM
G3VNGVM
R1VM
R2VM
R3VNRPNVM
FW虛擬網(wǎng)絡(luò)用戶的VM虛擬防火墻物理路由器物理網(wǎng)絡(luò)應(yīng)用場景—邏輯拓撲VM
G1VM
G2VM
G3VNGVM應(yīng)用場景—邏輯拓撲VM
G1VM
G2VM
G3VNGVM應(yīng)用場景—物理拓撲OpenStackContrail
ControllerNeutronNova虛擬VM帶vrouter的Hypervisor物理交換機物理出口路由器應(yīng)用場景—物理拓撲OpenStackContrail
Con應(yīng)用場景—物理拓撲OpenStackContrail
Con邏輯與物理拓撲對應(yīng)VM
G1VM
G2VM
G3VNGVM
R1VM
R2VM
R3VNRL3VPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICAL邏輯與物理拓撲對應(yīng)VM
G1VM
G2VM
G3VNGVM邏輯與物理拓撲對應(yīng)VM
G1VM
G2VM
G3VNGVM初始化過程，網(wǎng)絡(luò)還沒有建立VM
G1VM
G2VM
G3VNGVM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICAL初始化過程，網(wǎng)絡(luò)還沒有建立VM
G1VM
G2VM
G3VN初始化過程，網(wǎng)絡(luò)還沒有建立VM
G1VM
G2VM
G3VN用戶新建虛擬網(wǎng)絡(luò)VM
G1VM
G2VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGCreateVNG用戶新建虛擬網(wǎng)絡(luò)VM
G1VM
G2VM
G3VM
R1VM用戶新建虛擬網(wǎng)絡(luò)VM
G1VM
G2VM
G3VM
R1VM用戶新建虛擬機VMG1VM
G1VM
G2VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGCreateVMG1
AttachtoVNGNova:CreateVMVM
G1用戶新建虛擬機VMG1VM
G1VM
G2VM
G3VM
用戶新建虛擬機VMG1VM
G1VM
G2VM
G3VM
VM
G1VM
G2VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1Neutron:
AttachVMtoVNCreateVMG1
AttachtoVNGXMPP:
Createrouting-instance用戶新建虛擬機VMG1VM
G1VM
G2VM
G3VM
R1VM
R2VM
R3VM
G1VM
G2VM
G3VM
R1VM
R2VM
R3用戶新建VMG2VM
G1VM
G2VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGCreateVMG2
AttachtoVNGVM
G1Nova:CreateVMVM
G2用戶新建VMG2VM
G1VM
G2VM
G3VM
R1V用戶新建VMG2VM
G1VM
G2VM
G3VM
R1V用戶新建VMG2VM
G1VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1Neutron:
AttachVMtoVNCreateVMG2
AttachtoVNGVM
G2XMPP:
Createrouting-instanceVM
G2用戶新建VMG2VM
G1VM
G3VM
R1VM
R2V用戶新建VMG2VM
G1VM
G3VM
R1VM
R2VContrail通過指令在兩個服務(wù)器之間建立隧道VM
G1VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1CreateVMG2
AttachtoVNGVM
G2XMPP:
ExchangeroutesCreatetunnelsVM
G2Contrail通過指令在兩個服務(wù)器之間建立隧道VM
G1VContrail通過指令在兩個服務(wù)器之間建立隧道VM
G1V用戶的數(shù)據(jù)包在隧道中轉(zhuǎn)發(fā)的情況VM
G1VM
G2IPprefixNexthopVMG1Virtualethernetport
toVMG1Greenrouting-instanceIPFIBVMG2PushlabelL2+
GREencapstoserverS2MPLSlabelNexthopL1Pop+Greenrouting-instanceGlobalMPLSFIBIPprefixNexthopServerS2PhysicalethernetportGlobalIPFIBIPprefixNexthopVMG1PushlabelL1
GREencapstoserverS1Greenrouting-instanceIPFIBVMG2VirtualethernetporttoVMG2MPLSlabelNexthopL2Pop+Greenrouting-instanceGlobalMPLSFIBIPprefixNexthopServerS1PhysicalethernetportGlobalIPFIBInnerIPheaderPayloadVMG1SourceIPVMG2DestIP...MPLSL2LabelGRE...OuterIPheaderServerS1SourceIPServerS2DestIPEthernetServerS1SourceMACServerS2DestMACPacketS1S2用戶的數(shù)據(jù)包在隧道中轉(zhuǎn)發(fā)的情況VM
G1VM
G2IPpr用戶的數(shù)據(jù)包在隧道中轉(zhuǎn)發(fā)的情況VM
G1VM
G2IPpr用戶新建VMG3VM
G1VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1VM
G2VM
G2CreateVMG3
AttachtoVNGNova:CreateVMVM
G3用戶新建VMG3VM
G1VM
G3VM
R1VM
R2V用戶新建VMG3VM
G1VM
G3VM
R1VM
R2V用戶新建VMG3VM
G1VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1VM
G2VM
G2CreateVMG3
AttachtoVNGVM
G3Neutron:
AttachVMtoVNXMPP:
Createrouting-instance用戶新建VMG3VM
G1VM
G3VM
R1VM
R2V用戶新建VMG3VM
G1VM
G3VM
R1VM
R2VContrail在物理服務(wù)器之間再搭建兩條隧道VM
G1VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1VM
G2VM
G2CreateVMG3
AttachtoVNGVM
G3XMPP:
ExchangeroutesCreatetunnelsContrail在物理服務(wù)器之間再搭建兩條隧道VM
G1VMContrail在物理服務(wù)器之間再搭建兩條隧道VM
G1VM用戶的最終狀態(tài)VM
G1VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1VM
G2VM
G2VM
G3用戶的最終狀態(tài)VM
G1VM
G3VM
R1VM
R2VM
用戶的最終狀態(tài)VM
G1VM
G3VM
R1VM
R2VM
兩個不同用戶均新建了VM以后VM
G1VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1VM
G2VM
G2VM
G3VM
R1VM
R3VM
R2兩個不同用戶均新建了VM以后VM
G1VM
G3VM
R1V兩個不同用戶均新建了VM以后VM
G1VM
G3VM
R1V虛擬vrouter和出口路由器之間建立隧道VM
G1VM
G3VM
R1VM
R2VM
R3VNROpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1VM
G2VM
G2VM
G3VM
R1VM
R3VM
R2VM
FWVM
FWL3VPNApplyPolicyVNR?L3VPNNetconf:
Configure
routing-instance虛擬vrouter和出口路由器之間建立隧道VM
G1VM
G虛擬vrouter和出口路由器之間建立隧道VM
G1VM
GVM
G1VM
G3VM
R1VM
R2VM
R3VNROpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1VM
G2VM
G2VM
G3VM
R1VM
R3VM
R2VM
FWVM
FWL3VPNApplyPolicyVNR?L3VPNBGP:
ExchangeroutesCreatetunnels虛擬vrouter和出口路由器之間建立隧道VM
G1VM
G3VM
R1VM
R2VM
R3VNROVM
G1VM
G3VM
R1VM
R2VM
R3VNROVM
G1VM
G3VM
R1VM
R2VM
R3VNROpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1VM
G2VM
G2VM
G3VM
R1VM
R3VM
R2VM
FWVM
FWL3VPNApplyPolicyVNR?L3VPNXMPP:
ExchangeroutesCreatetunnels虛擬vrouter和出口路由器之間建立隧道VM
G1VM
G3VM
R1VM
R2VM
R3VNROVM
G1VM
G3VM
R1VM
R2VM
R3VNRO所有的工作都是通過API界面在調(diào)用openstack的API所有的工作都是通過API完成系統(tǒng)使用通過的編程語言Python和Javalibraries(otherscanbesupportedasthereisinterest)也可以是curl數(shù)據(jù)模型是公開的，有對應(yīng)的文檔可編程接口API’s調(diào)用系統(tǒng)所有的工作都是通過API可編程接口API’s調(diào)用系統(tǒng)所有的工作都是通過API可編程接口API’s調(diào)用系統(tǒng)所有的總結(jié):Contrail是SDN解決方案的創(chuàng)新者開發(fā)那個的平臺所有的Hypervisors上運行的協(xié)議都是標準的可以云平臺可以完好的結(jié)合開放可以與現(xiàn)有網(wǎng)絡(luò)結(jié)合，節(jié)省升級和更換設(shè)備的成本
SDN的物理層面的架構(gòu)簡單化簡化網(wǎng)絡(luò)中的組件，通過虛擬化實現(xiàn)簡單自動更新云平臺虛擬網(wǎng)絡(luò)的結(jié)構(gòu)可以與云平臺進行結(jié)合使用自帶的分析系統(tǒng)可以分析流量智能化總結(jié):Contrail是SDN解決方案的創(chuàng)新者開發(fā)那個的平總結(jié):Contrail是SDN解決方案的創(chuàng)新者開發(fā)那個的平CONTRAIL的發(fā)展計劃JV-CNTR-(#CPUsockets)$1000/socket/yr(incl.J-support)$1700/socket+22%J-supportCNTR-O-(#CPUsockets)Persocketpricing(SWonly)HardwaresolutionvalidationCNTR-CBLKHW+SW(persocketpricing)+supportProfessionalServicesengagementContrailOpenstackNetworkingComponentJuniperOpenstackFullOpenstackSWincludingContrailJuniperCloudBlocksFullSoftwareStack+HardwareTodayDec2013Q22014CloudPlatform+ContrailCloudstack+Contrail(forNetworkingPilotinaBoxFullSW+HWinaStarterKitIBM+ContrailIBMSmartCloudOrchestrator+Contrail(forNetworking)HostedContrail+JunosphereContrailHW+SW+NetworkTroubleshootingsoftware(JunosphereResident)FutureCONTRAIL的發(fā)展計劃JV-CNTR-(#CPUsoCONTRAIL的發(fā)展計劃JV-CNTR-(#CPUso33Thankyou!33Thankyou!33Thankyou!33Thankyou!Contrail介紹
---JuniperoverlaySDN解決方案Contrail介紹---JuniperoverlayContrail介紹---Juniperoverlay網(wǎng)絡(luò)虛擬化演進方向VirtualNetworkOverlaysReactiveEnd-to-EndVLANconfiguredonphysicalswitchesRequiresprogrammingofflowsNoimpact
tophysical
networkManualEnd-to-EndPROACTIVE
SOFTWAREOVERLAYOPENFLOWREACTIVEAPPOACHVLANAPPROACH網(wǎng)絡(luò)虛擬化演進方向VirtualNetworkOverl網(wǎng)絡(luò)虛擬化演進方向VirtualNetworkOverl需要手動在每臺配置每隔VLAN的信息插入服務(wù)相對比較復(fù)雜
VLANID一共只有4096個，支持的用戶數(shù)量也是4096
用戶的流量在物理網(wǎng)絡(luò)直接傳輸網(wǎng)絡(luò)虛擬化---VLAN手工控制.低效率.擴展性低.需要手動在每臺配置每隔VLAN的信息插入服務(wù)相對比較復(fù)雜V需要手動在每臺配置每隔VLAN的信息插入服務(wù)相對比較復(fù)雜V網(wǎng)絡(luò)虛擬化----OpenflowOpenFlow需要底層交換機的支持OpenFlow需要編程每個用戶的流量都要經(jīng)過物理網(wǎng)絡(luò)轉(zhuǎn)發(fā)延遲較高.擴展性低.增加故障的考慮點.可升級.Openflow控制器每個流量的首個數(shù)據(jù)包都要去到控制器進行分析網(wǎng)絡(luò)虛擬化----OpenflowOpenFlow需要底層交網(wǎng)絡(luò)虛擬化----OpenflowOpenFlow需要底層交數(shù)據(jù)包不用經(jīng)過控制器，僅通過隧道進行轉(zhuǎn)發(fā)通過已存在的網(wǎng)絡(luò)轉(zhuǎn)發(fā)數(shù)據(jù)用戶的信息通過隧道轉(zhuǎn)發(fā)，對現(xiàn)網(wǎng)沒有感知，即使現(xiàn)網(wǎng)的結(jié)構(gòu)在發(fā)生改變控制器運用編程手段控制虛擬的vswitch和虛擬網(wǎng)關(guān)網(wǎng)絡(luò)虛擬化----OVerlay低延遲.高擴展性.自動恢復(fù)能力.可以在任何網(wǎng)絡(luò)上實現(xiàn).數(shù)據(jù)包不用經(jīng)過控制器，僅通過隧道進行轉(zhuǎn)發(fā)通過已存在的網(wǎng)絡(luò)轉(zhuǎn)發(fā)數(shù)據(jù)包不用經(jīng)過控制器，僅通過隧道進行轉(zhuǎn)發(fā)通過已存在的網(wǎng)絡(luò)轉(zhuǎn)發(fā)JuniperCONTRAIL的角色與作用ServiceNodesInternetVPNDCIWANGatewayRouter
JunosVContrailOrchestratorComputeAPIsStorageAPIsNetworkAPIsServerVirtualMachinevRouterPhysicalSwitchesvSRX,F5…Juniper的contrail以openstack為基礎(chǔ)，通過API調(diào)用openstack的組件JuniperCONTRAIL的角色與作用ServiceJuniperCONTRAIL的角色與作用ServiceContrail組件PhysicalNetwork
(nochanges)AnalyticsOPENCONTRAILCONTROLLERControlConfigurationPhysicalHostwithHypervisorvRouterVMVMVMVMPhysicalHostwithHypervisorvRouterVMVMVMVMWAN,InternetGateway通過API戒口接收VM的狀態(tài)信息，包括遷移，新建等可以實時分析數(shù)據(jù)和流量通過openstack的API控制其他的節(jié)點信息vRouter:虛擬化的vswitch，為虛擬機接入提供虛擬化戒口Gateway:可以采用juniper的MX或者EX9200TODAY2014Juniper目前完成openstack的集成，后續(xù)還會支持Vmware等更多的云平臺系統(tǒng)contrail控制器Contrail節(jié)點Contrail節(jié)點Contrail組件PhysicalNetwork
(noContrail組件PhysicalNetwork
(noIPAM,VirtualDNSSecurityLoad
Balancing3rdPartyNetworkServicesRichAnalyticsHigh
AvailabilityServiceChainingAPI
ServicesRoutingandSwitchingGatewayServicesContrail功能IPAM,VirtualDNSSecurityLoad
IPAM,VirtualDNSSecurityLoad
Contrail–
控制器和節(jié)點ControlNode
"BGPmodule"
ProxiesXMPPControl
NodeControl
NodeComputeNodeComputeNodeConfigurationNodeConfigurationNodeIF-MAPXMPPIBGPIF-MAPClient控制器和節(jié)點之間可以實現(xiàn)控制和轉(zhuǎn)發(fā)分離
控制器可以控制多個節(jié)點，包括路由器和computenode控制層面通過BGP協(xié)議實現(xiàn)路由控制轉(zhuǎn)發(fā)點通過動態(tài)的GRE的隧道轉(zhuǎn)發(fā)數(shù)據(jù)物理拓撲和交換機對于用戶是透明的Gateway
RoutersServiceNodesContrail–控制器和節(jié)點CContrail–控制器和節(jié)點CControlplane–路由發(fā)布方式10.1.1.110.1.1.270.10.10.1151.10.10.110.1.1.2:NH=151.10.10.1;LBL=1710.1.1.1:NH=70.10.10.1;LBL=3910.1.1.110.1.1.2PAYLOADVRFPriSrcIPPriDstIP10.1.1.110.1.1.2PAYLOADLBL=17GRE70.10.10.1151.10.10.1PubSrcIPPubDstIPVMVRFPriSrcIPPriDstIP10.1.1.110.1.1.2PAYLOADPriSrcIPPriDstIPVMIPNetworkAgentAgentXMPPXMPPControlNodeConfigurationNodeREST/API10.1.1.2:NH=151.10.10.1;LBL=1710.1.1.1:NH=70.10.10.1;LBL=39(DynamicTunnelEncapsulation)(DynamicTunnelDecapsulation)Server1Server2ControlPlane*OuterMACheaderwasleftoutintentionallytoreduceclutter10.1.1.1:NH=70.10.10.1;LBL=3910.1.1.2:NH=151.10.10.1;LBL=17ControlPlaneIF-MAP通過BGP協(xié)議VM的地址被宣告到控制器中轉(zhuǎn)發(fā)時原始數(shù)據(jù)包經(jīng)過GRE再次封裝Controlplane–路由發(fā)布方式10.1.1.1Controlplane–路由發(fā)布方式10.1.1.1應(yīng)用場景—邏輯拓撲VM
G1VM
G2VM
G3VNGVM
R1VM
R2VM
R3VNRPNVM
FW虛擬網(wǎng)絡(luò)用戶的VM虛擬防火墻物理路由器物理網(wǎng)絡(luò)應(yīng)用場景—邏輯拓撲VM
G1VM
G2VM
G3VNGVM應(yīng)用場景—邏輯拓撲VM
G1VM
G2VM
G3VNGVM應(yīng)用場景—物理拓撲OpenStackContrail
ControllerNeutronNova虛擬VM帶vrouter的Hypervisor物理交換機物理出口路由器應(yīng)用場景—物理拓撲OpenStackContrail
Con應(yīng)用場景—物理拓撲OpenStackContrail
Con邏輯與物理拓撲對應(yīng)VM
G1VM
G2VM
G3VNGVM
R1VM
R2VM
R3VNRL3VPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICAL邏輯與物理拓撲對應(yīng)VM
G1VM
G2VM
G3VNGVM邏輯與物理拓撲對應(yīng)VM
G1VM
G2VM
G3VNGVM初始化過程，網(wǎng)絡(luò)還沒有建立VM
G1VM
G2VM
G3VNGVM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICAL初始化過程，網(wǎng)絡(luò)還沒有建立VM
G1VM
G2VM
G3VN初始化過程，網(wǎng)絡(luò)還沒有建立VM
G1VM
G2VM
G3VN用戶新建虛擬網(wǎng)絡(luò)VM
G1VM
G2VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGCreateVNG用戶新建虛擬網(wǎng)絡(luò)VM
G1VM
G2VM
G3VM
R1VM用戶新建虛擬網(wǎng)絡(luò)VM
G1VM
G2VM
G3VM
R1VM用戶新建虛擬機VMG1VM
G1VM
G2VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGCreateVMG1
AttachtoVNGNova:CreateVMVM
G1用戶新建虛擬機VMG1VM
G1VM
G2VM
G3VM
用戶新建虛擬機VMG1VM
G1VM
G2VM
G3VM
VM
G1VM
G2VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1Neutron:
AttachVMtoVNCreateVMG1
AttachtoVNGXMPP:
Createrouting-instance用戶新建虛擬機VMG1VM
G1VM
G2VM
G3VM
R1VM
R2VM
R3VM
G1VM
G2VM
G3VM
R1VM
R2VM
R3用戶新建VMG2VM
G1VM
G2VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGCreateVMG2
AttachtoVNGVM
G1Nova:CreateVMVM
G2用戶新建VMG2VM
G1VM
G2VM
G3VM
R1V用戶新建VMG2VM
G1VM
G2VM
G3VM
R1V用戶新建VMG2VM
G1VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1Neutron:
AttachVMtoVNCreateVMG2
AttachtoVNGVM
G2XMPP:
Createrouting-instanceVM
G2用戶新建VMG2VM
G1VM
G3VM
R1VM
R2V用戶新建VMG2VM
G1VM
G3VM
R1VM
R2VContrail通過指令在兩個服務(wù)器之間建立隧道VM
G1VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1CreateVMG2
AttachtoVNGVM
G2XMPP:
ExchangeroutesCreatetunnelsVM
G2Contrail通過指令在兩個服務(wù)器之間建立隧道VM
G1VContrail通過指令在兩個服務(wù)器之間建立隧道VM
G1V用戶的數(shù)據(jù)包在隧道中轉(zhuǎn)發(fā)的情況VM
G1VM
G2IPprefixNexthopVMG1Virtualethernetport
toVMG1Greenrouting-instanceIPFIBVMG2PushlabelL2+
GREencapstoserverS2MPLSlabelNexthopL1Pop+Greenrouting-instanceGlobalMPLSFIBIPprefixNexthopServerS2PhysicalethernetportGlobalIPFIBIPprefixNexthopVMG1PushlabelL1
GREencapstoserverS1Greenrouting-instanceIPFIBVMG2VirtualethernetporttoVMG2MPLSlabelNexthopL2Pop+Greenrouting-instanceGlobalMPLSFIBIPprefixNexthopServerS1PhysicalethernetportGlobalIPFIBInnerIPheaderPayloadVMG1SourceIPVMG2DestIP...MPLSL2LabelGRE...OuterIPheaderServerS1SourceIPServerS2DestIPEthernetServerS1SourceMACServerS2DestMACPacketS1S2用戶的數(shù)據(jù)包在隧道中轉(zhuǎn)發(fā)的情況VM
G1VM
G2IPpr用戶的數(shù)據(jù)包在隧道中轉(zhuǎn)發(fā)的情況VM
G1VM
G2IPpr用戶新建VMG3VM
G1VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1VM
G2VM
G2CreateVMG3
AttachtoVNGNova:CreateVMVM
G3用戶新建VMG3VM
G1VM
G3VM
R1VM
R2V用戶新建VMG3VM
G1VM
G3VM
R1VM
R2V用戶新建VMG3VM
G1VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1VM
G2VM
G2CreateVMG3
AttachtoVNGVM
G3Neutron:
AttachVMtoVNXMPP:
Createrouting-instance用戶新建VMG3VM
G1VM
G3VM
R1VM
R2V用戶新建VMG3VM
G1VM
G3VM
R1VM
R2VContrail在物理服務(wù)器之間再搭建兩條隧道VM
G1VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1VM
G2VM
G2CreateVMG3
AttachtoVNGVM
G3XMPP:
ExchangeroutesCreatetunnelsContrail在物理服務(wù)器之間再搭建兩條隧道VM
G1VMContrail在物理服務(wù)器之間再搭建兩條隧道VM
G1VM用戶的最終狀態(tài)VM
G1VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1VM
G2VM
G2VM
G3用戶的最終狀態(tài)VM
G1VM
G3VM
R1VM
R2VM
用戶的最終狀態(tài)VM
G1VM
G3VM
R1VM
R2VM
兩個不同用戶均新建了VM以后VM
G1VM
G3VM
R1VM
R2VM
R3VNRPNVM
FWOpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1VM
G2VM
G2VM
G3VM
R1VM
R3VM
R2兩個不同用戶均新建了VM以后VM
G1VM
G3VM
R1V兩個不同用戶均新建了VM以后VM
G1VM
G3VM
R1V虛擬vrouter和出口路由器之間建立隧道VM
G1VM
G3VM
R1VM
R2VM
R3VNROpenStackContrail
ControllerNeutronNovaPHYSICALLOGICALVNGVM
G1VM
G2VM
G2VM
G3VM
R1VM
R3VM
R2VM
FWVM
FWL3VPNApplyPolicyVNR?L3VPNNetconf:
Configure
routing-instance虛擬vrouter和出口路由器之間建立隧道VM
G1VM
G
溫馨提示
- 1. 本站所有資源如無特殊說明，都需要本地電腦安裝OFFICE2007和PDF閱讀器。圖紙軟件為CAD,CAXA,PROE,UG,SolidWorks等.壓縮文件請下載最新的WinRAR軟件解壓。
- 2. 本站的文檔不包含任何第三方提供的附件圖紙等，如果需要附件，請聯(lián)系上傳者。文件的所有權(quán)益歸上傳用戶所有。
- 3. 本站RAR壓縮包中若帶圖紙，網(wǎng)頁內(nèi)容里面會有圖紙預(yù)覽，若沒有圖紙預(yù)覽就沒有圖紙。
- 4. 未經(jīng)權(quán)益所有人同意不得將文件中的內(nèi)容挪作商業(yè)或盈利用途。
- 5. 人人文庫網(wǎng)僅提供信息存儲空間，僅對用戶上傳內(nèi)容的表現(xiàn)方式做保護處理，對用戶上傳分享的文檔內(nèi)容本身不做任何修改或編輯，并不能對任何下載內(nèi)容負責(zé)。
- 6. 下載文件中如有侵權(quán)或不適當(dāng)內(nèi)容，請與我們聯(lián)系，我們立即糾正。
- 7. 本站不保證下載資源的準確性、安全性和完整性, 同時也不承擔(dān)用戶因使用這些下載資源對自己和他人造成任何形式的傷害或損失。
最新文檔
- 廣東石油化工學(xué)院《Andoid基礎(chǔ)編程》2023-2024學(xué)年第一學(xué)期期末試卷
- 廣東汕頭幼兒師范高等?？茖W(xué)?！兜谝煌鈬Z英》2023-2024學(xué)年第一學(xué)期期末試卷
- 廣東農(nóng)工商職業(yè)技術(shù)學(xué)院《生物制藥學(xué)科前沿進展》2023-2024學(xué)年第一學(xué)期期末試卷
- 廣東茂名幼兒師范?？茖W(xué)?！洞黉N策略》2023-2024學(xué)年第一學(xué)期期末試卷
- 廣東茂名健康職業(yè)學(xué)院《英國文學(xué)下》2023-2024學(xué)年第一學(xué)期期末試卷
- 廣東理工職業(yè)學(xué)院《美國社會與文化》2023-2024學(xué)年第一學(xué)期期末試卷
- 一年級數(shù)學(xué)計算題專項練習(xí)集錦
- 大腦的奧秘：神經(jīng)科學(xué)導(dǎo)論(復(fù)旦大學(xué))學(xué)習(xí)通測試及答案
- 【2022屆走向高考】高三數(shù)學(xué)一輪(北師大版)基礎(chǔ)鞏固：第8章-第1節(jié)-簡單幾何體及其三視圖和直觀圖
- 2022韶山市高考英語閱讀理解及書面表達精煉(8)及答案
- 2024年版美國結(jié)直腸外科醫(yī)師協(xié)會《肛周膿腫、肛瘺、直腸陰道瘺的臨床實踐指南》解讀
- 機動車商業(yè)保險條款（2020版）
- GB/T 44250.1-2024面向油氣長輸管道的物聯(lián)網(wǎng)系統(tǒng)第1部分：總體要求
- 一年級數(shù)學(xué)上冊加減法口算題每日一練25套打印版
- DLT 572-2021 電力變壓器運行規(guī)程
- 事業(yè)單位招錄公共基礎(chǔ)知識（政治）模擬試卷10（共258題）
- 教育部校企合作辦法
- 溝通技巧-考試試題及答案
- “技能興威”第一屆威海市職業(yè)技能大賽農(nóng)產(chǎn)品食品檢驗員（海洋食品產(chǎn)業(yè)鏈）賽項規(guī)程
- 幼兒園故事繪本《賣火柴的小女孩兒》課件
- 中央2024年國家藥品監(jiān)督管理局中國食品藥品檢定研究院招聘筆試歷年典型考題及考點附答案解析
評論
0/150
提交評論