博科网络解决方案介绍

1、博科网络解决方案介绍时不我待新IT的最后一块拼图 The New IP价值IT 交付能力时间用户期待，业务需求Cloud, Social, MobileIT Relevance GapIT2Digital BusinessSocial mediaCloudIoT快速扩展 按需连接大量接入，动态感知压力平衡 突发应对安全保密 快速认证云管理平台 (Tenant Provisioning)OpenStack | CloudStack | RestAPI | Homegrown Scripting | Vendor Provided Solutions基础资源分配 Infra Provisionin

2、g3Native FabricYang Model-NetConfCLICLI ScriptingCLISIMPLE/STATICCloudYang Model- RestAPIDevOpsPythonPuppet AgentController-based ArchitectureBrocade Vyatta ControllerVMware NSXAGILE/FEATURE-RICH推陈出新由静态人工 到 动态自动化分久必合SDN 网络 地方服从中央4士兵不要思想，有领袖替他们思想。 希特勒CISCOBrocadeJuniperALUHuawei业务需求新业务上线了，我想保障它的带宽Net

3、work Engineer好的，给我点时间配置网络我等到花儿也谢了业务需求新业务上线了，我想保障它的带宽兄弟们，新业务上线，请按照规则保障带宽CISCOBrocadeJuniperALUHuawei网络部门太给力了DoneDoneDoneDoneDone乱花迷眼如何选择SDN厂商？给用户更多选择应用容易移植低风险Platinum Members of OpenDaylightSilver Members of OpenDaylightGold Member of OpenDaylight6将遇良才SDN与NFV将传统硬件产品上运行的多种软件，如路由器，交换机，防火墙，负载均衡，BRAS等，移植

4、到X86服务器上实现虚拟化，提供同样功能。优势:降低成本，提高敏捷性软件OS厂商专有硬件传统专属功能硬件设备NFVSDN将传统网络设备（包括硬件、虚拟化软件）的控制权从设备内部提取到外部，采用统一的平台进行管理，提供高度应用层面可控的，可编程的网络服务。优势:增加自动化程度和敏捷性，提供弹性可调度的网络资源SDN Controller软件OS 软件OSHypervisorx86 硬件设备行业标准服务器Control planeControl planeControl planeControl planeNFV独辟蹊径从物理到虚拟路由器北京上海深圳广州硬件路由器如同传统路标/地图固定/难以改变/

5、替换成本高虚拟路由器如同App动态/弹性/降低成本资源KVMESXiHyper-VBurst to CloudVPNIPSec, SSLRouterOSPF, BGPFirewallStateful, NATORHypervisorx86 ServerBrocade vRouterBrocade Vyatta vRouter在一个软件image中，集成先进的routing, firewall 和VPN网关功能提供全面的按需网络功能虚拟化软件和云计算架构组件 在新型数据中心网络架构中解耦硬件和软件功能，为提供和传统标准一致，但更加灵活低成本的路由和安全边界提供全面而强大的高极路由，状态防火墙和V

6、PN功能部署于行业标准X86平台，多虚拟化内核的支持（KVM / ESXi / XEN / Hyper-V）Integrates into common Orchestration applications and provides elastic scale8DatabaseVMVMVMHypervisorApplicationVMVMVMHypervisorWebVMVMVMHypervisorVLAN1VLAN2VLAN1VLAN2VLAN1VLAN2VyattaVyattaVyattaWANBrocade Vyatta 5400 vRouter全球最广泛使用的虚拟路由器9VPNIPSe

7、c, SSLRouterOSPF, BGPFirewallStateful, NATRoutingSecurityVPNSystem ManagementIP ServicesPlatformsHigh AvailabilityIPv4, IPv6, Static, PBR, OSPF, RIP, BGP, MulticastIPv4, IPv6, Stateful Firewall, NATIPSec, SSL, Route-based, L2-bridging, DMVPNCLI, RESTful API, GUI SSH, DHCP, DNS, SNMPVRRP, Stateful Fa

8、ilover, Config SyncVMware, Xen, KVM, Hyper-V, x86ORHypervisorx86 ServerFeature HighlightsVyatta 5400 ArchitectureLinux10Core 0Core 1Core 2Core 3Core 4Core 5Core 6Core 7Brocade Vyatta 5600 Virtual Router业界性能最强的虚拟路由器New ArchitecturevPlane architecture Up to 10Gbps per Core on bare metal10Gbps+ on VM w

9、ith SRIOV or PCI pass-throughTarget Use Case: NFVvRR, vPE, vCE, vBRASHigh Performance BGP RoutingTarget Use Case: CSPvR, vFW, vVPNVMware, KVM, Xen, Bare Metal 11RoutingSecurityVPNSystem ManagementIP ServicesPlatformsHigh AvailabilityIPv4, IPv6, Static, PBR, OSPF, RIP, BGP, MulticastIPv4, IPv6, State

10、ful Firewall, NATIPSec, SSL, Route-based, L2-bridging, DMVPNCLI, RESTful API, GUI HQoS, SSH, DHCP, DNS, SNMPVRRP, Stateful Failover, Config SyncVMware, KVM, x86Feature HighlightsPacket PipelinePacket PipelineVyatta 5600 vPlane ArchitectureIntel DPDK12VMPacketPacketPacketCore 0Core 1Core 2Core 3Core

11、4Core 5Core 6Core 7PacketPacketPacketVyatta 5400Vyatta 5600Forwarding1Mpps/physical core14.5 Mpps/physical coreFirewall0.9 Mpps/physical core11 Mpps/physical coreNAT0.55 Mpps/physical core6.5 Mpps/physical coreMax system performance8-10 Mpps200 MppsBare Metal Performance5400 vs. 5600* Next Gen perfo

12、rmance numbers limited by test gear13Brocade L2-7 网络功能虚拟化软件14Brocade Vyatta vRouterBrocade Virtual ADXL2 L7 NETWORKING SERVICES HIGHLIGHTSL23 SERVICESTCP, UDP, MMS, RTSP, FTP, TFTP, HTTP, DNS, SSL, OpenScript Engine for application scriptingIPv4, IPv6, Static, PBR, OSPF, RIP, BGPIPv4, IPv6, Stateful

13、 Firewall, NATROUTINGSECURITYVPNIPSec, SSL, Route-based, L2-bridgingL2: VLAN, 802.1q VLAN TaggingL3: IPv4 & IPv6 routingOSPFv2, OSPFv3, BGP, and static routingL4-7 SLBSECURITYDynamic and Static NAT, SSL TerminationCLI, RESTful API, GUI SSH, DHCP, DNS, SNMPCLI, XML API, GUISyslog, Telnet, SNMP, SNTP,

14、 AAA+ SteelApp因势利导重新定义负载均衡7Seconds$250ms15第三方内容（如广告）实时个人信息（如cookie）大量图片和flash大并发连接/移动终端的访问16Halfx2Half因势利导重新定义负载均衡Brocade 软件 ADC压缩硬件成本，减少硬件消耗更高的性能和支撑能力更少的部署时间简便的快速的迁移能力传统硬件ADC高昂的TCO固定的带宽/有限扩展能力专业人员/较长的部署时间受限于地理位置，无法任意迁移一锤子买卖？Pay as you Go17?Web and Application Servers?Brocade VirtualTraffic ManagerH

15、igher service levelsfor high-value customers因势利导人人都爱 VIP高速响应快速连接能力更好的带宽 You name it!因势利导如何做到？内容去重复优化压缩高达4倍以上的加载速度Backup site广域全局部署GSLB(流量在多个站点之间引导定向用户访问就近/连接速度/网站压力可用站点重定向云端迁移因势利导如何做到？How It Works: Brocade Virtual Traffic ManagerWeb andApplication ServersRequest RulesSSL DecryptionService Protection

16、TCP OffloadRate ShapingApplication FirewallLoad BalancingSession PersistenceBandwidth ShapingSSL EncryptionHTTP MultiplexingConcurrency ControlApplication Auto-ScalingRequestResponseMonitorsVirtual Server ClientConnectionsPoolServerConnectionsResponse RulesTCP OffloadHTTP CachingContent CompressionS

17、ervice Level MonitoringBandwidth ShapingTransaction LoggingApplication FirewallSimple Wizards for Creating New Services21Powerful Tools, Easy to Manage1.$path = http.getpath();2.if( string.startswith( $path, /products ) )3. http.redirect( /services.html );4.Content-based routingPrivate CloudAuto-Sca

18、lingPublic CloudProgrammable InfrastructureDynamic DeploymentLoad BalancingContent CachingSSL AccelerationFIPS capabilityContent-based routingPolicy managementWeb Content OptimizationWeb Application Firewall.Service ProvisioningRapid ADC Deployment, Faster Cycle TimesPolicy and Control#TrafficScript

19、#Select resource pool$hh = http.getHostHeader();$poolmap = =. =. =. =.;$pool = $poolmap $hh ;if( pool.activeNodes( $pool ) = 1 ) pool.use( $pool );Free Download of Brocade vADCFree Developer EditionNo license key Allows developers to test all Brocade vADC capabilitiesSoftware form factorApplication

20、development tools that fit right into modern QA/test platformsApplication-aware scripting language (TrafficScript) Or re-use programs or code from other languages, such as JavaBrocade CommunityAccess to support baseThird party resources, including Puppet manifests, Chef recipes,Application Blueprint

21、s for VMware, Microsoft, Oracle and SAPVisit /vADCto download Brocade vADC Developer Edition因势利导特性一览软件授权按需授权动态精细化分配带宽随时分配和回收带宽“微” ADCs多租户业务分区弹性扩展统计流量监控计费报告汇总业务加速提高用户体验/合理引导流量资源管理实例管理 (active / inactive)珠联璧合Server + NFV =更好的成本和差异化优势 VS 810万元的100G级别路由器通过NFV结合传统服务器的优势，带来项目竞争和控标的新方式，以及差异化的引导方式，和更多的项目成本弹

22、性。26Vyatta vRouter Vyatta VrouterHypervisorx86 硬件设备SUGON x86 ServerSR8804-X主机+双网板(D类)+双主控(1H1)+双交流电源 122,500 8端口增强型万兆以太网光接口模块(SFP+,LC)(B类) 175,000总价 297,50027极度简化的 VCS部署和扩展方式默认支持，自动开启 VCS fabric 部署连接等待Fabric自动形成大二层部署完毕！单点管理全网拓扑和端口自动化运维管理5分钟上线30台机器，5小时？甚至5天？VCSVCSVCS使用Brocade VCS Fabric 技术，为10台VDX 交换

23、机配置大二层和逻辑机箱:Step 1: 开机Step 2: 配置RBridge IDsStep 3: 连线Step 4: 没有第四步！Cisco FabricPath, 10 Nexus 7000 交换机:Step 1: Create two portchannels between a Nexus pairStep 2: Activate Virtual PortChannel (vPC) between themStep 3: Activate FabricPath on the vPC pairStep 4: Activate vPC+ in the pair (7 commands p

24、er switch)Step 19: Configure Media Access Control (MAC) learning mode for FabricPath Virtual LANs (FP VLANs)Step 20: Activate FabricPath in the defined portchannelStep 21: Repeat the previous 20 steps for the four other vPC+ pairsStep 101: Configure two portchannels between each edge vPC pair and th

25、e core vPC pairStep 106: Activate FabricPath on the eight defined portchannelsStep 114: On each Nexus 7000 in the core vPC, define eight portchannels28园区、数据中心网络部分设备推荐ICX 6400(1G)Brocade ICX 7450/7250 (1G)ICX 6610(10G)Campus SwitchAccess EdgeICX 7750(40G) Aggregation/CoreLayer 2Layer 3 Layer 3 DC Swi

26、tchLayer 2/3 VDX 8770-4/8 1G100GVDX 6740(1G/10G)Layer 2/3 VDX 6940(10G/40G)VDX 6940(10G/40G)MLXe-4/8/16/321G100G NFVVyatta vRouterLayer 3 Layer 47 + Brocade SteelAppSUGON + Brocade network = Better total solution提供打包整体方案29Brocade SDN+NFVCampus IPDC networkIP+SANScalable and Open Cloud APIsPaaS - OpenStackSugon Server FarmSugon Storage FarmWhy？一体化平台化交付式上升至平台服务提供商刚柔并济Brocade硬件NSX软件 NSXVDX VTEP integrationVXLANCompute RackBrocad