數(shù)據(jù)中心拓撲架構(gòu)設(shè)計指南

1、數(shù)據(jù)中心拓撲架構(gòu)設(shè)計指南 配圖部門：作者：日期：傳統(tǒng)機架出租中的資源碎片示意圖控制器自主界面TORVMVM物理機虛擬機機架中心機房1VXLAN GWTORVMVM控制器集群FWLB物理機虛擬機存儲機架TORVMVM物理機虛擬機機架中心機房nVXLAN GWTORVMVMFWLB物理機虛擬機存儲機架邊緣機房1邊緣機房n網(wǎng)絡(luò)管理員跨機房互聯(lián) 機架出租方案總體概覽SpineServer leafBorder leaf(Service leaf)數(shù)據(jù)中心網(wǎng)絡(luò)典型部署方案Peer-linkLeafEth-TrunkEth-TrunkVTEP推薦M-LAG部署方案M-LAGSpineServer Leaf

2、Border Leaf(&ServiceLeaf)M-LAG（dual-active）PE RouterOSPF 100Area 0P2PP2PP2PP2PP2PP2PP2PP2PP2P單DC內(nèi)Underlay網(wǎng)絡(luò)路由規(guī)劃設(shè)計多Fabric部署OSPF路由規(guī)劃推薦LeafSpineLeafSpineFabric 1Fabric 2OSPF Area 1OSPF Area 2Border LeafBorder LeafOSPF Area 0EBGPAS 65503AS 65502LeafSpineAS 65501AS 63500單Fabric內(nèi)部EBGP路由規(guī)劃推薦多Fabric之間EBGP路由

3、規(guī)劃推薦EBGPAS 65503AS 65502LeafSpineAS 65501AS 63500EBGPAS 65523AS 65522LeafSpineAS 65521AS 63520AS 61500Fabric 1Fabric 2中心機房 跨機房VXLAN Overlay網(wǎng)絡(luò)L2 SWInternet租戶網(wǎng)絡(luò)運營商網(wǎng)絡(luò)GWNVENVENVENVENVENVENVENVEGWL3 GW & L2 SWL2 SW邊緣機房租戶自帶網(wǎng)關(guān)租戶A租戶B租戶C租戶網(wǎng)絡(luò)SpineServer leafBorder leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE

4、(router)GWGWGW路由對接LogicalSwitchLogicalRouterFWL3 GWISP網(wǎng)絡(luò)外部網(wǎng)絡(luò)外部網(wǎng)絡(luò)租戶網(wǎng)絡(luò)租戶AISP提供網(wǎng)關(guān)租戶A租戶CSpineServer leafBorder leaf(Service leaf)M-LAG (dual-active)PE (router)L2租戶B二層接入外部網(wǎng)絡(luò)ISP網(wǎng)絡(luò)租戶網(wǎng)絡(luò)LogicalSwitchLogicalRouterISP網(wǎng)絡(luò)外部網(wǎng)絡(luò)租戶網(wǎng)絡(luò)租戶AFWLBVPN租戶自帶網(wǎng)關(guān)-單機房租用租戶A租戶網(wǎng)絡(luò)SpineServer leafBorder leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (du

5、al-active)PE (router)GW路由對接租戶AL2VTEPVTEPVTEPVTEP二層接入BGPISP網(wǎng)絡(luò) 租戶網(wǎng)絡(luò)LeafBD2Tenant 1 NetworkLeafBD2BDIF1Tenant 1 NetworkL3Tenant L3 GWTenant L2 GWT1-VRFBD1L2L2T1-VRFPEBGP外網(wǎng)私網(wǎng)專線VBDIFBGP外部網(wǎng)絡(luò)Border LeafEVPN VXLAN路由對接-Static Route租戶A租戶網(wǎng)絡(luò)SpineServer leafBorder leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (ro

6、uter)GW路由對接租戶AL2VTEPVTEPVTEPVTEP二層接入VXLANeBGP/StaticVLANVLANStaticBGP EVPNISP網(wǎng)絡(luò)租戶網(wǎng)絡(luò)LeafBDIF1Tenant 1 NetworkL3T1-VRFEVPN VXLANT1-VRFPEBGP外部網(wǎng)絡(luò)私網(wǎng)專線VBDIFBGPBorder LeafTenant L3 GW外部網(wǎng)絡(luò)路由對接-eBGP租戶A租戶網(wǎng)絡(luò)SpineServer leafBorder leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)GW路由對接租戶AL2VTEPVTEPVTEPVTEP二

7、層接入VXLANVLANeBGPeBGPVLANBGP EVPNISP網(wǎng)絡(luò)租戶網(wǎng)絡(luò)LeafBDIF1Tenant 1 NetworkL3T1-VRFEVPN VXLANT1-VRFPEBGP外網(wǎng)私網(wǎng)專線VBDIFBGPBorder LeafTenant L3 GW外部網(wǎng)絡(luò)路由對接-OSPF租戶A租戶網(wǎng)絡(luò)SpineServer leafBorder leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)GW路由對接租戶AL2VTEPVTEPVTEPVTEP二層接入VXLANVLANOSPFeBGPVLANBGP EVPNISP網(wǎng)絡(luò)租戶網(wǎng)絡(luò)Lea

8、fBDIF1Tenant 1 NetworkL3T1-VRFEVPN VXLANT1-VRFPEBGP外網(wǎng)私網(wǎng)專線VBDIFBGPBorder LeafTenant L3 GW外部網(wǎng)絡(luò)單機房租用-流量模型SpineServer LeafBorder leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)路由對接VTEPVTEPVTEPVTEP二層接入L3 GWWANLANL2 SWLANFW機架2機架1租戶網(wǎng)絡(luò)訪問外網(wǎng)流量跨子網(wǎng)互訪流量同子網(wǎng)互訪流量外部網(wǎng)絡(luò)跨機房VXLAN二層拉通跨機房租用-單點L3接入SpineServer leafBor

9、der leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)路由對接VTEPVTEPVTEPVTEP二層接入L3 GWWANLANL2 SWLANFW機架2機架1租戶網(wǎng)絡(luò)訪問外網(wǎng)流量跨子網(wǎng)互訪流量同子網(wǎng)互訪流量VTEPVTEP二層接入L2 SWLAN機架3租戶網(wǎng)絡(luò)機房1機房2外部網(wǎng)絡(luò)跨機房租用-多點L3接入集中出口跨機房VXLAN二層拉通SpineServer LeafBorder leaf(Service leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)路由對接VTEPVTEPVTEPVTEP二層接入L3

10、GWWANLANL2 SWLANFW機架2機架1租戶網(wǎng)絡(luò)訪問外網(wǎng)流量跨子網(wǎng)互訪流量同子網(wǎng)互訪流量VTEPVTEP二層接入L2 SWLAN機架2租戶網(wǎng)絡(luò)機房1機房2路由對接L3 GWWANLANFW機架1外部網(wǎng)絡(luò)外部網(wǎng)絡(luò)外部網(wǎng)絡(luò)跨機房租用-多點L3接入獨立出口跨機房VXLAN二層拉通SpineServer LeafBorder Leaf(Service Leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)路由對接VTEPVTEPVTEPVTEP二層接入L3 GWWANLANL2 SWLANFW機架2機架1租戶網(wǎng)絡(luò)訪問外網(wǎng)流量跨子網(wǎng)互訪流量同子網(wǎng)互訪流量VTEPVTEP

11、二層接入L2 SWLAN機架2租戶網(wǎng)絡(luò)機房1機房2路由對接L3 GWWANLANFW機架1Border Leaf(Service Leaf)PE (router)VTEP租用ISP網(wǎng)關(guān)-單機房租用SpineServer LeafBorder Leaf(Service Leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)租戶AL2VTEPVTEPVTEPVTEP二層接入BGP租戶A租戶網(wǎng)絡(luò)租戶BISP網(wǎng)絡(luò) 租戶網(wǎng)絡(luò)LeafBD2Tenant 1 NetworkLeafBD2BDIF1Tenant 1 NetworkL3Tenant L2 GWT1-VRFBD1L2L2

12、Ext-VRFPEBGP外網(wǎng)私網(wǎng)專線VBDIFBGPBDIF2T1-VRFBDIF2vFwT1-VRFExt-VRF外部網(wǎng)絡(luò)EVPN VXLANBorder Leaf單機房租用-流量模型訪問外網(wǎng)流量跨子網(wǎng)互訪流量同子網(wǎng)互訪流量SpineServer LeafBorder Leaf(Service Leaf)ISP網(wǎng)絡(luò)M-LAG (dual-active)PE (router)VTEPVTEPVTEPVTEP租戶網(wǎng)絡(luò)L2 SWLAN機架租用機位租用外部網(wǎng)絡(luò)跨機房VXLAN二層拉通跨機房租用-集中出口SpineServer LeafBorder Leaf(Service Leaf)ISP網(wǎng)絡(luò)M-L

13、AG (dual-active)PE (router)VTEPVTEPVTEPVTEP二層接入L2 SWLAN機架2租戶網(wǎng)絡(luò)訪問外網(wǎng)流量跨子網(wǎng)互訪流量同子網(wǎng)互訪流量VTEPVTEP二層接入L2 SWLAN機架2租戶網(wǎng)絡(luò)機房1機房2機位租用外部網(wǎng)絡(luò)主備出口邏輯示意圖VPCFWDC 1公網(wǎng)GW主出口備出口公網(wǎng)DC 2FWGW路由直通路由直通DVRDVRServerServer跨機房VXLAN二層拉通跨機房租用-主備出口SpineServer LeafBorder Leaf(Service Leaf)ISP網(wǎng)絡(luò)PE (router)VTEPVTEPVTEPVTEP二層接入L2 SWLAN機架2租戶網(wǎng)

14、絡(luò)訪問外網(wǎng)流量跨子網(wǎng)互訪流量同子網(wǎng)互訪流量VTEPVTEP二層接入L2 SWLAN機架2租戶網(wǎng)絡(luò)DC1DC2機位租用Border Leaf(Service Leaf)PE (router)VTEP備出口主出口外部網(wǎng)絡(luò)外部網(wǎng)絡(luò)故障場景主備切換前后流量路徑對比PEPEBorderLeafDC 1VTEPVTEPServerLeafDC 2VTEPVTEPBorderLeafServerServerSpineSpineLB FWVTEPLB FWVTEPServiceLeafServiceLeafServerLeaf正常狀態(tài)，流量走主用出口主出口故障，流量走備份出口主用出口，高優(yōu)先級路由備用出口，低