SDNbasedOverlay應(yīng)用場景和優(yōu)勢分析

1、消消費(fèi)費(fèi)自服務(wù)門戶自服務(wù)門戶云管理平臺云管理平臺vCloud Automation Center管理平面管理平面NSX Manager單點(diǎn)配置單點(diǎn)配置REST API 和和 UI 接口接口vCenter Server控制平面控制平面NSX ControllerManages Logical networksRun-time stateDoes not sit in the Data PathControl-Plane ProtocolNSX Logical Router Control VMUser World Agent數(shù)據(jù)平面數(shù)據(jù)平面NSX Edge Services GatewayESX

2、iVDS Hypervisor Kernel Modules FirewallDistributed Logical RouterVXLANNSX vSwitchNSX EdgeVM form factorData Plane for North South traffic Routing and Advanced servicesNSX vSwitch分布式網(wǎng)絡(luò)邊緣分布式網(wǎng)絡(luò)邊緣線速性能線速性能 Vmware NSX 整體架構(gòu)整體架構(gòu)H3C SDN 整體架構(gòu)整體架構(gòu)CONFIDENTIAL2Agile Function ControllerCONFIDENTIAL3解耦合之解耦合之H3C：和

3、物理硬件網(wǎng)絡(luò)完全緊耦合：和物理硬件網(wǎng)絡(luò)完全緊耦合的架構(gòu)的架構(gòu)SiSiSiSi思科華三華為SiSiSiSiNSX Vxlan虛擬化層虛擬化層v 網(wǎng)絡(luò)和底層物理網(wǎng)絡(luò)解耦合底層物理網(wǎng)絡(luò)可是是任意廠商網(wǎng)絡(luò)設(shè)備v Any application any where不受二層網(wǎng)絡(luò)STP、二層廣播風(fēng)暴、MAC地址表和VLAN數(shù)量的限制，實現(xiàn)any application any wherev 統(tǒng)一的安全策略的一致性防火墻安全策略和IP地址解耦合，安全策略和位置無關(guān)服務(wù)器機(jī)房解耦合之解耦合之VMware：NSX徹底和底層物理網(wǎng)絡(luò)解耦合徹底和底層物理網(wǎng)絡(luò)解耦合跨多廠商網(wǎng)絡(luò)構(gòu)建數(shù)據(jù)中心資源池跨多廠商網(wǎng)絡(luò)構(gòu)建數(shù)據(jù)中心

4、資源池SiSiSiSi思科華三華為SiSiSiSiNSX Vxlan虛擬化層虛擬化層v 網(wǎng)絡(luò)和底層物理網(wǎng)絡(luò)解耦合底層物理網(wǎng)絡(luò)可是是任意廠商網(wǎng)絡(luò)設(shè)備v Any application any where不受二層網(wǎng)絡(luò)STP、二層廣播風(fēng)暴、MAC地址表和VLAN數(shù)量的限制，實現(xiàn)any application any wherev 統(tǒng)一的安全策略的一致性防火墻安全策略和IP地址解耦合，安全策略和位置無關(guān)服務(wù)器機(jī)房主數(shù)據(jù)中心1主數(shù)據(jù)中心2主數(shù)據(jù)中心3解耦合之解耦合之VMware：NSX徹底和底層物理網(wǎng)絡(luò)解耦合徹底和底層物理網(wǎng)絡(luò)解耦合跨多廠商網(wǎng)絡(luò)構(gòu)建跨數(shù)據(jù)中心資源池跨多廠商網(wǎng)絡(luò)構(gòu)建跨數(shù)據(jù)中心資源池配置配置

5、和運(yùn)維和運(yùn)維管理管理-H3CCONFIDENTIAL6CONFIDENTIAL7配置配置和運(yùn)維和運(yùn)維管理管理-Vmware NSXTraditional Firewall Rule Mgt & OperationsVirtual Firewalls (1 3 Gbps)Virtual Firewalls自動化管理和運(yùn)維護(hù), 分布式部署內(nèi)嵌到hypervisro內(nèi)核, 分布式彈性擴(kuò)展的性能 (20 Gbps/host)分布式虛分布式虛擬擬化防火化防火墻墻 8虛擬化防火墻架構(gòu)性能分析虛擬化防火墻架構(gòu)性能分析CONFIDENTIAL9虛擬化防火墻架構(gòu)性能分析虛擬化防火墻架構(gòu)性能分析Sourc

6、e or Destination FieldDescriptionIPv4 or IPv6IPv4 or IPV6 address can be host address, subnet or range of addressesDatacentervCenter Datacenter attribute. Rule will apply for all VM/vNIC existing in the DatacenterClustervCenter Cluster attribute.Rule will apply for all VM/vNIC existing in the Cluste

7、rNetworkvCenter Network (vSwitch) attributeRule will apply for all VM/vNIC connected to this networkVirtual AppvCenter vAPP attributeRule will apply for all VM/vNIC part of the vAPPResource PoolvCenter Resource Pool attributeRule will apply for all VM/vNIC part of the Resource PoolVirtual MachineVM

8、name attributevNICVM vNIC attributeLogical SwitchNSX logical switch attribute (VNI or VXLAN Network Identifier). Rule will apply for all VM/vNIC connected to this logical switchSecurity GroupNSX security group attribute (defined through Service Composer tab)Rule will apply for all VM/vNIC part of th

9、e Security GroupIP setsList of IPv4 or IPv6 adressRule IDRule NameSourceDestinationServiceActionApplied ToService FieldDescriptionProtocolTCP, UDP, Oracle_TNS, FTP, SUN_RPC_TCP, SUN_RPC_UDP. NBNS_BROADCAST, NBDG_BROADCAST, ICMP, IGMP, IPCOMP, IPV6ROUTE, IPV6FRAG, IPV6ICMP, IPV6NONXT, IPV6OPTS, RSVP,

10、 GRE, ESP, AH, L2TP, SCTP, IPv4, ARP, X25, LLC, FR_ARP, BPQ, DEC, DNA_DL, DNA_RC, DNA_RT, LAT, DIAG, CUST, SCA, TEB, RAW_FR, RARP, AARP, ATALK, IEEE_802_1Q, IPX, NETBEUI, IPv6, PPP, ATMMPOA, PPP_DISC, PPP_SES, ATMFATE, LOOPNote: user can define custom protocol as well by clicking onNew - Service Por

11、ts (Destination L4 ports)Unique port or range of portsAdvanced options: Source Ports (Source L4 ports)Unique port or range of portsAction FieldDescriptionBlockBlock the trafficAllowEnable the trafficLogLog the traffic informationDo not logDont Log the traffic informationNSX分布式防火墻支持和分布式防火墻支持和IP地址的解耦合

12、地址的解耦合CONFIDENTIAL11H3C虛擬化環(huán)境的路由處理虛擬化環(huán)境的路由處理傳統(tǒng)方式傳統(tǒng)方式CONFIDENTIAL12VMware虛擬化環(huán)境的路由處理虛擬化環(huán)境的路由處理分布式路由分布式路由Multi-Machine BlueprintsCloud ConsumerCloud AdminSLACost ProfileSecurityNetworkingServiceCatalogServiceRequestNetwork ProfilesSecurity GroupsSecurity PoliciesNetwork AdminLoad Balancer AdminStandardi

13、zed TemplatesLogical Load BalancerSecurity AdminAVAILABILITYSECURITYCONNECTIVITYSecurity TagsExternal Networks自動化自動化之之Vmware NSX通過標(biāo)準(zhǔn)的REST API 向上支持多種企業(yè)云管理平臺（Vcloud Director,vCAC,OpenStack,Cloudstack）實現(xiàn)網(wǎng)絡(luò)虛擬化資源的自動部署純軟方案和軟硬結(jié)合方案的對比純軟方案和軟硬結(jié)合方案的對比VmwareH3C技術(shù)領(lǐng)先性一體化的SDDC數(shù)據(jù)中心架構(gòu)，引領(lǐng)數(shù)據(jù)中心云計算發(fā)展主要應(yīng)對軟件定義網(wǎng)絡(luò)對其硬件的沖擊技術(shù)成熟性首個SDN商用平臺，國內(nèi)外大量的使用案例應(yīng)用場景非常有限藕合度和底層硬件完全解耦合，底層網(wǎng)絡(luò)只要是通用的支持IP路由的通用網(wǎng)絡(luò)設(shè)備即可整體架構(gòu)仍然依賴于底層專用廠商網(wǎng)絡(luò)設(shè)備，CAPEX和OPEX高配置運(yùn)行維管理和計算虛擬化平臺無縫融合，簡化大大簡化初始配置和后期的運(yùn)維管理無