SONA数据中心的发展之路

1 2005 Cisco Systems, Inc. All rights reserved. Cisco PublicBusiness Ready Data CenterArchitecture SONA 数 据 中 心 的 发 展 之 路 2 2005 Cisco Systems, Inc. All rights reserved.Business Ready Data CenterArchitecture Cisco Public 传统的数据中心的问题应用系统及服务通讯的应用计算的基础架构 网络基础架构基础设施(电力, 冷却,布线, 及物理安全)存储的基础架构Enterprise Data Center Internet Data CenterPublic Web Site100s of Servers with Integrated StorageE-Commerce Application4-Tier Application App. ServerInternet Data CenterSupply-Chain ManagementTraditional Voice PBX In-House Developed Apps 2-Tier CRM ApplicationNCR DB ServerData WarehousingFinance, HR, Payroll and EDIMainframe Systems Tape Backup Multiple 2-Tier ERP InstancesEngineering ServicesNAS Filers E-MailE-Mail Appliances IP ServicesDNS RADIUS LDAPJBOD Operations Center 现有的基础架构缺乏灵活性不足的恢复能力费用高昂不一致的安全策略不一致的业务永续/容灾计 划资源利用率不足运维复杂, 低效隔离的应用环境僵化隔离的基础架构 3 2005 Cisco Systems, Inc. All rights reserved.Business Ready Data CenterArchitecture Cisco Public 数据中心基础架构的发展路径 三个阶段性步骤 自动化 存储资源网络资源计算资源 Dynamic Provisioning and Information Lifecycle Management (ILM) to Enable Business AgilityBusiness PoliciesOn-DemandService Oriented 虚拟化 存储资源网络资源计算资源 应用系统Management of Resources Independent of Underlying Physical Infrastructure to Increase Utilization, Efficiency and Flexibility 数据 网络服务器 互连网络 Centralization and Standardization to Lower Costs, Improve Efficiency and Uptime 整合LANWANMAN存储网络 存储 网络 智能化 信息网络 (IIN) HPC集群网格 4 2005 Cisco Systems, Inc. All rights reserved.Business Ready Data CenterArchitecture Cisco PublicMDS FamilySFS Family Catalyst Family ONS FamilyDirectorFabricModularRackBladeInfinibandSwitching DWDM, SONET, SDH, FCIP 思科数据中心网络架构的框架基础架构的增强服务应用网络化服务 Virtualization, Replication, Virtual FabricsRDMA, Low Latency ClusteringFirewalls, Intrusion Protection, Security Agents 5 2005 Cisco Systems, Inc. All rights reserved.Business Ready Data CenterArchitecture Cisco Public 数据中心里的安全服务 Storage & Tape Arrays AVS WAASApplication Network Services MDS 9500 WAN, VPN, InternetCatalyst 6500Virtual Firewalls Provides Isolation and Controls Access Host Protection Cisco Security ManagerVSANs for Storage Isolation DDOS Guard Protection Application-Layer SecurityIntrusion Protection Prevent Outbreak Propagation FC Security Protocol for Authenticating Access 6 2005 Cisco Systems, Inc. All rights reserved.Business Ready Data CenterArchitecture Cisco Public 系统管理员安装新的服务器安装 O/S, 补丁及应用系统网络管理员连接以太网, 配置 VLAN 及端口的相关设置负载均衡管理员把新的服务器加入到服务器群组中安全管理员检查安全策略, 增加防火墙的可通过的端口地址网络管理员确保访问路由指向新的服务器存储管理员配置 LUN, 映射至服务器存储管理员规划磁盘卷及相关资源假设我们需要增加一台服务器到Web服务器群组The challenge is one of coordination delays. This type of simple scale-out of an existing serve often takes enterprises 90-days.New service turn-ups, after the application has been developed, often take 180+ days.VFrame is designed to eliminate these delays and automate the provisioning of services今天: 需要部署一个企业的服务 7 2005 Cisco Systems, Inc. All rights reserved.Business Ready Data CenterArchitecture Cisco Public VFrame 可控制服务器启动并连接到对应的 LUN/映象VFrame 配置端口, VLAN, 及交换策略VFrame 增加服务器到负载均衡的群组中VFrame 在防火墙服务模块上配置虚拟防火墙VFrame 规划可路由的子网地址VFrame 获取对应的 LUN 及 WWN 名称VFrame 获取可用的存储卷及启动的映象文件第三方资源规划的应用VFrame 提供企业服务的资源规划(Provisioning) 8 2005 Cisco Systems, Inc. All rights reserved.Business Ready Data CenterArchitecture Cisco Public 未来的服务器资源规划的实现VFrame Provisioning 60+% 服务器利用率30% 服务器数量减少 9 2005 Cisco Systems, Inc. All rights reserved.Business Ready Data CenterArchitecture Cisco Public Branch Office分支架构文件服务器的膨胀 解决方案: 广域应用加速服务File Storage in the Data Center WAN/VPN Network Local File & Print ServerFile Storage DistributedCore File EngineTape ArraysFilesStorage ArraysFilesNetwork Attached Storage FilersFiles LAN Speeds for Remote Files Files AdministratorAdministrator 10 2005 Cisco Systems, Inc. All rights reserved.Business Ready Data CenterArchitecture Cisco Public Remote Users网站应用的性能保证 解决方案: 应用加速服务WAN/VPN NetworkAPPS ARE TOO SLOW! Remote BranchTelecommuter Data Center 2x - 5x Faster Application Delivery!AVS - 3100 11 2005 Cisco Systems, Inc. All rights reserved.Business Ready Data CenterArchitecture Cisco Public 业务连续及规章要求 解决方案: 增强的业务连续方案 MDS 9500 DWDMNetworkSONET/SDHIP WANMetro / Wide Data CenterInterconnect NetworkONS155X0154xxONS154547X00Storage &Tape ArraysBlade ServersUNIX/NT Servers Mainframes 1 3 MDS 9500Storage &Tape ArraysBlade ServersUNIX/NT Servers Mainframes 广泛的应用支持 Asynch / Synch Replication, Backup, Point in Time Copy Multi-vendor Support: EMC, HP, HDS, IBM, Appliances 3rd Party Appliance Support: SANTap Network Assisted Serverless Backup连续访问 Global Site Selector VPN IPSec, SSL, MPLS Optimized Exit Routing优化的 SAN 扩展 Multi-protocol Transport: FCIP, DWDM, Sonet/SDH Distance / Application Optimization: Write and Tape Acceleration Security: FCIP Encryption and FC-SP Auth WAN Utilization: Compression and Large B2B Credits Availability: VSANs and Inter VSAN Routing 12 2005 Cisco Systems, Inc. All rights reserved.Business Ready Data CenterArchitecture Cisco Public 层次Server Virtualization VRemote DMA ServicesVirtual I/OClustering ServicesCompute Fabric ServicesFabric Gateway Services服务器集群 总结HPC/网格 存储/磁带区域 核心层汇聚层接入层边缘层核心层Firewall ServicesIntrusion DetectionVPN TerminationDOS ProtectionAnomaly Detection Content CachingSSL OffloadingServer BalancingFile CachingAON Analysis App AccelerationFabric Routing ServicesData Replication SvcsStorage Virtualization Fabric Gateway ServicesVirtual Fabrics (VSANs)Network Analysis QoS IPMcIGPs STPMPLSVLANsDoS GREVRFIPSecHSRP PVLANsVRRP GLBPIGPsA B Scaling Ethernet ModuleCisco Catalyst Layer 2 Switch 10 Gigabit EthernetGigabit EthernetCisco Catalyst 6500 Multilayer SwitchCisco Catalyst Layer 3 Switch InfinibandCisco 3000 Series Fabric Server Switch Cisco 7000 Series Fabric Server Switch Virtual Server LinkVirtual ServersFibre ChannelCisco MDS 9500 Multilayer Director Fibre Channel Trunk ARedundant SAN Fabric 13 2005 Cisco Systems, Inc. All rights reserved.Business Ready Data CenterArchitecture Cisco Public