a consolidated virtualization approach to deploying distributed cloud networks
Post on 16-Apr-2017
798 Views
Preview:
TRANSCRIPT
#ATM16
HPE Data Center Network VirtualizationDaryl WanConsulting Technical Marketing Engineer @ArubaNetworks |
2#ATM16
• Complex and static networking• Network Services added between zones• Difficult to change, scale and expand
Bare Metal Servers
L2 Access Switches
IRF L2/L3 Core Switches
40G Link aggregation & 802.1Q trunks
WAN / Internet
L2 DMZ IRF Switches
L2 External Zone IRF Switches
Application Load Balancers
Firewalls
WAN Routers
Traditional DC Networking
HypervisorVMVM
VMVM
VMVM
HypervisorVMVM
VMVM
VMVM
3#ATM16
DC Network Virtualization (NV) / Overlay Networking• Simpler, faster, flexible and scalable networking• Services and zones moved to Network Virtualization solutions / Overlay networks• Supports multi-tenancy and different network variations for each tenant• Provides compute and network automation
WAN / Internet
WAN Routers
Tenant 1 Tenant 2 Tenant X
Physical Underlay Network Fabric
Virtual Overlay Networks
HypervisorVMVM
VMVM
VMVM
HypervisorVMVM
VMVM
VMVM
Bare Metal Servers
4#ATM16
Virtual Extensible Local Area Network (VXLAN) • Provides L2 connectivity over an L3 network• Requires unicast IP (UDP) network connectivity between VXLAN capable devices / VXLAN Tunnel End
Points (VTEPs) • Multicast underlay network typically not required• Allows multi-tenancy to scale beyond 4K VLANs • Overcomes MAC and ARP table limitations in physical network devices
WAN / Internet
WAN Routers
Physical Underlay Network Fabric
HypervisorVMVM
VMVM
VMVM
HypervisorVMVM
VMVM
VMVM
NV Controller
HypervisorVMVM
VMVM
VMVM
HypervisorVMVM
VMVM
VMVM
VXLAN Tunnels for Tenant 1
VXLAN Tunnels for Tenant 2
5#ATM16
HPE Network Virtualization Solutions
Virtual Cloud Network HPE-VMware NSX Distributed Cloud Network
Enhanced Neutron Networking
Open source, DevOps Virtualized VMW Enterprises Service Provider/Telcos
De-risk the journey with HPE Trusted Network Transformation Services
DCNVCN
5
Multi DC NFV
Powered by HPE
6#ATM16
Similar Functionality/Benefits
WAN / Internet
WAN Routers
Tenant 1 Tenant 2 Tenant X
Physical Underlay Network Fabric
Virtual Overlay Networks
HypervisorVMVM
VMVM
VMVM
HypervisorVMVM
VMVM
VMVM
Bare Metal Servers
DCNVCN
Powered by HPE
7#ATM16
HPE Takes The Cloud Infrastructure Market Lead
HPE now leading the market - 13% share
Cloud infrastructure equipment market• $16 billion per quarter (S/S/N)• Growing at 25% year over year
Networking/virtualization provides a foundational prerequisite for “Cloud”
8#ATM16
HPE Helion CloudSystemThe industry’s leading private cloud solution for a hybrid world
#1Private Cloud Solution1
3,000Customers
Storage
Forrester Research ranks HP as a "leader" in the private cloud2
IDC has assessed HP as a Leader in the IDC MarketScape for IaaS in U.S. Government3
Fully-integrated, end-to-end, private cloud solution, built for traditional and cloud native workloads, delivering automation, orchestration and control, across multiple clouds
“HP is the clear leader in private cloud and is the market leader in cloud servers” 1
OpenOpenStack® and Cloud Foundry™ Software
9#ATM16
HPE CloudSystem9.0 (Includes Helion OpenStack) and 5930 Integration
Bare Metal Server 101.1.0.10/24
101.1.0.X/24
OVSDB
NETCONF / SNMP
HP Converged Control
SDN Application
HP VAN SDN Controller
Cloud Controller Cluster with VCN
HypervisorVMVM
VMVM
VMVMOVS
vAPP
ESXi Host
5930 VTEP
VXLAN Overlay Tunnel
• Automation of 5930 VXLAN tunnels
• Bridges virtual (VMs) to physical devices (Bare Metal Servers, WAN routers etc)
10#ATM16
HPE-VMware NSX partnership
The Industry’s first NSX OEM network virtualization lifecycle partnership - simplifying customer’s experience
HPE FlexFabric OVSDB certification with VMware NSX
The Industry’s most complete end-to-end services portfolio with decades of networking and VMware expertise
+
HPE VMware NSX OEM Network certification
Differentiated through bridging virtual/physical
One partner capable of delivering SDDC life cycle solutions
HPE branded services
Global end-to-end SDDC and virtualization lifecycle services
11
Network Virtualization Demo (Physical switch automation via Centralized Controller)
12#ATM16
HP Networking Underlay Network
VXLAN Overlay Tunnels
VM2 101.1.0.12/24
VMware NSXv and HPE 5930 Integration (Demo)
Bare Metal 101.1.0.10/24
NSX Controller
NSX Manager
10.10.10.146/24
10.10.10.145/24vCenter
10.10.10.113/24
5930 HW VTEP
VM1 101.1.0.11/24
OVSDB
• Automation of 5930 VXLAN tunnels • Bridges virtual (VMs) to physical devices
(Bare Metal Servers, WAN routers etc)
HypervisorVMVM
VMVM
VMVM
HypervisorVMVM
VMVM
VMVM
14#ATM16
HPE DCN and 5930 Integration
Underlay Network
HP Virtualized ServicesController (VSC)
HP Virtualized ServicesDirectory (VSD)
HP Virtual Routing & Switching (VRS)Hypervisor
VMVM
VMVM
VMVM
VXLAN Overlay Tunnel
5930 VTEP
Bare Metal 101.1.0.10/24
VM1 101.1.0.11/24
• Automation of 5930 VXLAN tunnels • Bridges virtual (VMs) to physical devices
(Bare Metal Servers, WAN routers etc)
OVSDB
15#ATM16
HPE DCN & Helion OpenStack 2.0 Integration
Underlay Network
HP Virtualized ServicesController (VSC)
HP Virtualized ServicesDirectory (VSD)
HP Virtual Routing & Switching (VRS)
HP Virtual Routing & Switching (VRS)
Compute1 Compute2HypervisorVMVM
VMVM
VMVM
HypervisorVMVM
VMVM
VMVM
VXLAN Tunnel
2 main benefits from integration: • Micro-segmentation• Service-insertion
16#ATM16
DCN & Helion OpenStack 2.0 Integration Demo 1: Micro-Segmentation Use Case
Before DCN security policy is active• Internal1 VM is able
to ping and SSH to Internal2 VM
17#ATM16
DCN & Helion OpenStack 2.0 Integration Demo 1: Micro-Segmentation Use Case
DCN security policy• SSH from Internal1
VM to Internal2 VM to be dropped
18#ATM16
DCN & Helion OpenStack 2.0 Integration Demo 1: Micro-Segmentation Use Case
After DCN security policy is updated• SSH from Internal1
VM to Internal2 VM is now dropped
Customers can now enable security policies for VMs even on the same Helion OpenStack virtual network
19#ATM16
DCN & Helion OpenStack 2.0 Integration Demo 2: Service-Insertion Use Case
Before DCN forwarding policy is active• Internal1 VM is able
to ping and SSH to DMZ1 VM via their default gateway router (R1)
• No transit traffic seen on VSR
20#ATM16
DCN & Helion OpenStack 2.0 Integration Demo 2: Service-Insertion Use Case
DCN forwarding policy• Redirect all IPv4
traffic from Internal subnet to DMZ subnet via VSR
21#ATM16
DCN & Helion OpenStack 2.0 Integration Demo 2: Service-Insertion Use Case
After DCN forwarding policy is updated• Internal1 VM is able to
ping and SSH to DMZ1 VM via VSR router (modified path)
• VSR is able to detect transit traffic
Customers can now add on their desired application layer security appliances to inspect and protect traffic between Helion OpenStack subnets
22#ATM16
Existing DC Network
Migrating to HPE Network Virtualization Solutions
Existing Cisco Core
Existing Cisco Aggregation/
Access
Existing Cisco Fabric Extenders / Switches
• Deploy HPE NV Solutions on existing or new HPE servers
• Deploy over existing Cisco/other vendor network• Add 5930 integration
• Deploy new greenfield DC fabric with HPE switches to create a separate failure domain
• L3 ECMP CLOS leaf/spine fabric without spanning tree• Connect new greenfield DC fabric to existing network• Deploy HPE NV Solutions on existing or new HPE servers• Add 5930 integration
HypervisorVMVM
VMVM
VMVM
HypervisorVMVM
VMVM
VMVM
HypervisorVMVM
VMVM
VMVM
HypervisorVMVM
VMVM
VMVM
Existing DC networkNew HPE DC Fabric
HPE 5930
HPE NV Software deployed on servers
HPE NV Software deployed on servers
Bare Metal Servers
or New Greenfield DC Fabric
23#ATM16
Join Aruba’s Titans of Tomorrow force in the fight against network mayhem. Find out what your IT superpower is.
Share your results with friends and receive a free superpower t-shirt.
www.arubatitans.com
Thank you
top related