Глибоке занурення у System Center 2012 SP1Михайло Комаров

Газпром-информ

MVP Virtual Machine

СодержаниеДемонстрация System Center Virtual Machine Manager 2012 SP1: Управление ISCSI Target посредством SMI-S provider.

Взаимодействие с хранилищем в SCVMM 2012 SP1

Демонстрация System Center Virtual Machine Manager 2012 SP1 : Virtual Network.

Реализация сети SCVMM 2012 SP1

Демонстрация

System Center Virtual Machine Manager: Управление ISCSI Target посредством SMI-S provider.

Storage Management InitiativeSNIA adopted the Storage Management

Initiative Specification in 2002 (BlueFin spec) and designated an ISO/IEC standard in 2007.

SMI consists of three main programs:SMI-S: Primary organization governing the SMI-S effort with the guidance of the SNIACTP: Conformance Testing Program validates that a member company's products conform to a particular version of the SMI-SSMILab: environment that manages and coordinates vendors' development efforts to deliver SMI-S with a centralized data center with storage equipment and multiple plugfests per year.

Участники на апрель 2013

Участники на апрель 2013

Вид в SCVMM 2012 SP1

Реализация стека SMI-S в SCVMM 2012SP1

SMI-S SAN/NAS Proxy

Provider

SMI-S SANw/ Embedded

Provider

SMI-S NASProxy Provider

WindowsScale-out File Server

SMAPI

WMI

SMP:SMI-S

StorageService

SMPPartner Provider

SMP:Spaces

WSMAN/WinRM

WSMan/WinRM

Hyper-VStandalone Hyper-V

Cluster

NAS Device

SAN/NAS Device

CIMXML/WMI

CIMXMLCIMXML

SAN Device

Proprietary

Proprietary Proprietary

VMM Server

WSMan/WinRM

SMI-S SAN Proxy

Provider

SANDevice

Proprietary

FC/iSCSI

(some providersrequire this

CIMXMLWMI

VMVM

Library Server

WSMan/WinRM

Allocation and Assignment

Standards Based Management

VM, Host, and Cluster Storage Management

Extensive SAN and NAS Support

Scalable Provisioning

Storage Monitoring

Array Onboarding

Storage Classification

Rapid ProvisioningBlock and File Storage Management

End to End Mapping

Insight Flexibility Automation

SAN Migration

Возможности по взаимодействию с хранилищами на уровне частного облака

Демонстрация

Демонстрация System Center Virtual Machine Manager 2012 SP1 : Virtual Network.

Серверная виртуализацияРабота нескольких виртуальных северов на одно физическом сервере

Каждая VM думает , что работает на отдельном выделенном сервере

Hyper-V Виртуализация сетиРабота нескольких виртуальных сетей в внутри физической сети.

Каждая виртуальная сеть думает, что работает в реальном окружении.

Physicalserver

Blue VM Red VM Blue network Red networkVirtualization

Physicalnetwork

Виртуализация Hyper-V

Virtualization Policy

System Center

Customer Address Space (CA)

Red2Blue2

10.0.0.5

Red1Blue1

10.0.0.5 10.0.0.7 10.0.0.7

Blue10.0.0.510.0.0.7

BlueCorp

RedCorp

Red10.0.0.510.0.0.7

Datacenter Network

Host 1 Host 2

Provider Address Space (PA)

192.168.4.22192.168.4.11

CA PA

Виртуализация клиентских IP адресов

Different subnets

10.0.0.5 10.0.0.5 10.0.0.7 10.0.0.7

192.168.2.22 192.168.5.55

192.168.2.22192.168.5.55

10.0.0.5 10.0.0.7

GRE Key 5001

MAC

10.0.0.5 10.0.0.7

GRE Key 6001

MAC192.168.2.22

192.168.5.55

10.0.0.510.0.0.7

10.0.0.510.0.0.7

10.0.0.5 10.0.0.7

10.0.0.510.0.0.7

Инкапсуляция NVGRE

• Software Defined Networking (management, configuration, data)• Hyper-V

Network Virtualization

• Extensible Virtual Switch

• Network Policy/Offloads• SR-IOV• DHCP Guard• IPSec Task

Offload• Bandwidth

Control• Trunk Mode

VM Network

Logical NW

Virtual Machine

Physical Network

VLAN 25Subnet 10.0.0.0/26

Fab

ric

Vir

tual

Virtual Machine

Extension

Extension

Extension

VM Network

Logical NW

SCVMM2012 SP1 Реализация сети

Host5

VM VM VM

Host6

VM VM VM

Host3

VM VM VM

Host4

VM VM VM

Host1

VM VM VM

Host2

VM VM VM

Logical Network

Концепция сети SCVMM 2012 SP1

Network Site

San Jose Seattle

Network SiteNetwork Site

Точка прохождения трафика между : Виртуальными машинами, внешними сетями, хостом виртуализации

Hyper-V Switch

Tenant Isolation

Traffic Shaping Security Performance Diagnostics

Port ACL

PVLAN

Trunkmode

BandwidthMinimum

BandwidthCap

DHCPGuard

RouterGuard

IPsec TaskOffload

DynamicVMQ

PortMirroring

EventTracing(ETW)

UnifiedTracing

(UT)

Возможности логического коммутатора Windows server 2012

Windows Azure services for Windows Server

LoadBalancer

LB Backend

Gateway

Tenant 2 VMs

Tenant 2

Tenant 1 VMs

Tenant 1

LM, Cluster, Storage

Hyper-V hosts

SQL SPF, etc.VMM

Management

Corporate

Public Internet

with extensible Virtual switch

Сеть предприятия

с виртуальными коммутаторами

Hyper-V Host – Root Partition

Virtualization

CA1CA1

VM1 VMU

CA2

VM23rd Party components

Physical NIC (Non SRIOV)

Physical NIC(SRIOV)

Hardware

Top of rack switchVendor network

management console

Policy database

VMM Agent

VMM Server

SCVMM

VendorSCVMMPlugin

Capture Extension

Filtering Extension

Forwarding Extension

VMM Imports:• Port profiles• Logical networks• IP Pools• Tenant networks

Расширение коммутатора Hyper-V

Networks & policies synced to SCVMM

Adds hosts to N1KVConnects VMs (VNICs) to VM Networks

Nexus1000V VEM

Server

Nexus 1000VVSM

WS 2012 Hyper-V

SCVMM

Create networks and policies (logical networks, network sites, VMnetworks)

SCVMM manages the placement and live-migration of the VMs based on the constraints between VM networks and the network sites.

VM VM VM VM

ServerAdmin

1

2

3

4

5

SCVMM 2012 SP1

NetworkAdmin

Configuration data and

policies sent to N1KV VEM

Cisco Nexus 1000V Operational Model

Essential ($0) Advanced ($695/cpu)

VLANs, ACL, QoS vPath LACP Multicast Netflow, SPAN, ERSPAN Management (SNMP etc.) SCVMM Integration DHCP Snooping IP Source Guard Dynamic ARP Inspection Virtual Security Gateway**

** Only supports network-attributes

Cisco Nexus 1000V PricingTiered Licensing – Essential & Advanced Editions

Fabr

ikam

Dat

acen

ter n

etw

ork

– 10

.0.0

.0/1

6 VMNetwork 1“Contoso Finance” VM1

IP: 172.16.1.2GW: 172.16.1.1DNS:172.16.3.99

VM2IP: 172.16.2.2GW: 172.16.2.1DNS:172.16.3.99

NVGRE VPN Gateway

“Fabrikam”

DNS1IP:172.16.3.99

CORP-RED172.16.3.0/24

Subnet G(hidden)

w.x.y.z/30

Subnet 1172.16.1.0/24

Subnet 2172.16.2.0/24

Any VPN Gateway

“Contoso”In

tern

et

Cont

oso

Corp

Net

wor

k

Net

wor

k Vi

rtua

lizati

on R

oute

r

172.

16.1

.1, 1

72.1

6.2.

1 an

d 10

.254

.254

.1

DC IP: 10.0.0.xVN IP: 10.254.254.2

IP: 1.2.3.4

IP: 4.3.2.1

IP: 172.16.0.2

CORP-KIRK172.16.4.0/2

4

VPN Gateway – “Hybrid Cloud”

VMNetwork 1“Contoso Finance” VM1

IP: 172.16.1.2GW: 172.16.1.1DNS:172.16.3.99

VM2IP: 172.16.2.2GW: 172.16.2.1DNS:172.16.3.99

Gateway“Contoso”

DNS1IP:172.16.3.99

CORP-RED172.16.3.0/24

Subnet G(hidden)

10.254.254.0/30

Subnet 1172.16.1.0/24

Subnet 2172.16.2.0/24

Cont

oso

data

cent

er n

etw

ork

– 10

.0.0

.0/1

6

Net

wor

k Vi

rtua

lizati

on R

oute

r

172.

16.1

.1, 1

72.1

6.2.

1 an

d 10

.254

.254

.1

CORP-KIRK172.16.4.0/24

DC IP: 10.0.0.xVN IP: 10.254.254.2

IP: 172.16.0.2

VPN Gateway – “Private Cloud”

Hyper

Data center Edge

AggregatorSwitches

AccessSwitches

Hyper-V Host

Virtual Switch

Team

RDMA

VM

Corp orInternet

VM

Коммутация узлов в датацентре

Спасибо за внимание!!!