在混合網(wǎng)絡(luò)架構(gòu)中更好用戶體驗(yàn)鋼頭

分支數(shù)據(jù)中數(shù)據(jù)中數(shù)據(jù)中心(虛擬化與整合數(shù)據(jù)2?2015RiverbedTechnology.Allrights分支數(shù)據(jù)中數(shù)據(jù)中數(shù)據(jù)中心(虛擬化與整合數(shù)據(jù)2?2015RiverbedTechnology.Allrights數(shù)據(jù)中云(IaaS&如何簡(jiǎn)化基礎(chǔ)架構(gòu)…而不影響用如何簡(jiǎn)化基礎(chǔ)架構(gòu)…而不影響用戶體驗(yàn)…性能3?2015RiverbedTechnology.AllrightsSteelhead能夠加速任何地點(diǎn)的用戶訪問(wèn)…Steelhead能夠加速任何地點(diǎn)的用戶訪問(wèn)…同時(shí)加強(qiáng)IT控制可視4?2015RiverbedTechnology.AllrightsWhyWANOptimizationWasWAN@1.5Mbps&LANWindows4086??<1??ExchangeWhyWANOptimizationWasWAN@1.5Mbps&LANWindows4086??<1??Exchange2534<0.5<1.5??72<1.5<1.5&MS55??60<1Oracle3030??<0.55?2015RiverbedTechnology.AllrightsWANthroughputis<1%ofL1.5Mpbs 89 ? 89優(yōu)化網(wǎng)絡(luò)性能表現(xiàn)達(dá)100優(yōu)化網(wǎng)絡(luò)性能表現(xiàn)達(dá)1006?2015RiverbedTechnology.AllrightsSteelhead7?2015RiverbedTechnology.AllrightsCIFSMacMAPIMAPI?Steelhead7?2015RiverbedTechnology.AllrightsCIFSMacMAPIMAPI???????????????Steelhead8?Steelhead8?2015RiverbedTechnology.Allrights無(wú)處不在的BRANCHREMOTERiverbedOptimizationSystemSteelheadSteelheadVirtual無(wú)處不在的BRANCHREMOTERiverbedOptimizationSystemSteelheadSteelheadVirtualSteelheadVMware&MicrosoftvirtualPhysicalSteelheadforSteelheadforSoftwareforPC&Mac Steelhead集群與負(fù)載均衡9?2015RiverbedTechnology.Allrights無(wú)處不在的專用的WAN優(yōu)化設(shè)豐富的規(guī)格選擇（容量、連接數(shù)高性能無(wú)處不在的專用的WAN優(yōu)化設(shè)豐富的規(guī)格選擇（容量、連接數(shù)高性能的硬件（內(nèi)存、CPU、連接數(shù)、磁盤???STEELHEADCX?2015RiverbedTechnology.Allrights???管理多達(dá)2000臺(tái)設(shè)備（steelheadvshinterceptors,CENTRALMANAGEMENT???管理多達(dá)2000臺(tái)設(shè)備（steelheadvshinterceptors,CENTRALMANAGEMENT????2-25臺(tái)steelhead集多達(dá)1M并發(fā)連接數(shù)和40Gbps?2015RiverbedTechnology.Allrights加速云計(jì)優(yōu)化IaaS和SaaS性加速云計(jì)優(yōu)化IaaS和SaaS性???STEELHEAD對(duì)microsoftoffice365提速高達(dá)100???STEELHEAD?2015RiverbedTechnology.AllrightsSteelheadSaaS分支機(jī)構(gòu)/移動(dòng)辦?SteelheadSaaS分支機(jī)構(gòu)/移動(dòng)辦?2015RiverbedTechnology.AllrightsSteelheadAmazonWebServices(EC2,基于ESX透明方式截獲SteelheadAmazonWebServices(EC2,基于ESX透明方式截獲流量并優(yōu)化靈活適應(yīng)物理或虛擬環(huán)境彈性部署，易于擴(kuò)展隨業(yè)務(wù)一起增長(zhǎng)簡(jiǎn)單的基于portal管??????公有?2015RiverbedTechnology.AllrightsSteelhead用公有云用DC/CloudVirtualorphysicalSteelhead用公有云用DC/CloudVirtualorphysicalAmazonEC2&ESXRiverbedInstance管部升配合Cloud客戶客戶?2015RiverbedTechnology.AllrightsWindows和MAC的電腦??STEELHEAD??STEELHEADWindows和MAC的電腦??STEELHEAD??STEELHEADMOBILE?2015RiverbedTechnology.AllrightsSteelheadMobileDeployment&MobileHomeDATASteelheadMobileDeployment&MobileHomeDATASteelheadMobileControllerdeployedinthedatacenterSteelheadMobileClientMSIsoftwarepackageisinstalledOnceconnected,SteelheadMobilefirstgetspolicyandlicensefromtheSteelheadMobilethenconnectstotheSteelheadappliance&beginsacceleratingdatatransfersSmallBranch?2015RiverbedTechnology.AllrightsSteelhead?Steelhead?2015RiverbedTechnology.Allrights應(yīng)用場(chǎng)景1：應(yīng)用加MORESITESMORE應(yīng)用場(chǎng)景1：應(yīng)用加MORESITESMORE?2015RiverbedTechnology.Allrights連續(xù)6年的Gartner報(bào)告中的領(lǐng)導(dǎo)steelhead優(yōu)應(yīng)用場(chǎng)景2：遠(yuǎn)程備份與容?應(yīng)用場(chǎng)景2：遠(yuǎn)程備份與容?2015RiverbedTechnology.Allrights高達(dá)50倍的多達(dá)99％的無(wú)法滿足RPO與RTOsteelhead優(yōu)應(yīng)用場(chǎng)景3：服務(wù)器整BRANCH?2015Riverbed應(yīng)用場(chǎng)景3：服務(wù)器整BRANCH?2015RiverbedTechnology.Allrights支持絕大多數(shù)應(yīng)用與協(xié)議的優(yōu)市場(chǎng)領(lǐng)先的WAN優(yōu)業(yè)內(nèi)領(lǐng)先的虛擬化平簡(jiǎn)化分支機(jī)構(gòu)的基礎(chǔ)架構(gòu)管不能影響分支機(jī)構(gòu)應(yīng)用的性steelhead優(yōu)客戶挑Steelhead?Steelhead?2015RiverbedTechnology.AllrightsSteelheadCXCX255–?SteelheadCXCX255–?2015RiverbedTechnology.AllrightsSteelheadCXCX3070–SteelheadCXCX3070–?2015RiverbedTechnology.AllrightsSteelhead?Steelhead?2015RiverbedTechnology.Allrights發(fā)起新的TCP會(huì)（優(yōu)化的發(fā)起新的TCP會(huì)（優(yōu)化的?2015RiverbedTechnology.AllrightsScalableDataReferencing(SDR)重構(gòu)的數(shù)????客戶向服務(wù)器請(qǐng)求截獲請(qǐng)求，并將數(shù)據(jù)分片與磁盤上數(shù)據(jù)比對(duì)ScalableDataReferencing(SDR)重構(gòu)的數(shù)????客戶向服務(wù)器請(qǐng)求截獲請(qǐng)求，并將數(shù)據(jù)分片與磁盤上數(shù)據(jù)比對(duì)，僅新數(shù)據(jù)（不重復(fù)）被壓縮、發(fā)送到WAN，同時(shí)存入磁對(duì)于重復(fù)的數(shù)據(jù)，使用指針代替原始數(shù)據(jù)片?對(duì)端的 根據(jù)指針重構(gòu)數(shù)據(jù)，并交付給客戶 ?2015RiverbedTechnology.AllrightsTCPVirtualWindowExpansion（往返數(shù)據(jù)包）也大量減實(shí)際負(fù)載數(shù)據(jù)量遠(yuǎn)大于TCP協(xié)議負(fù)指針（代替重復(fù)數(shù)據(jù)新數(shù)?2015RiverbedTechnology.AllrightsTCPVirtualWindowExpansion（往返數(shù)據(jù)包）也大量減實(shí)際負(fù)載數(shù)據(jù)量遠(yuǎn)大于TCP協(xié)議負(fù)指針（代替重復(fù)數(shù)據(jù)新數(shù)?2015RiverbedTechnology.Allrights應(yīng)用的饒舌低效的應(yīng)用（饒舌ReadRead應(yīng)用的饒舌低效的應(yīng)用（饒舌ReadRead?2015RiverbedTechnology.AllrightsTransaction請(qǐng)優(yōu)化的傳tripTransaction請(qǐng)優(yōu)化的傳trip（往返數(shù)據(jù)包）?2015RiverbedTechnology.AllrightsRiverbed常用端Riverbed常用端DatastoreSyncIn-pathport(“Autodiscovery”0x4c)NAT(TCPProxy)portServerSideOut-of-path(SSOoP)portFailover(SerialCluster)portMAPIExchange2003ExchangeDirectorNSPITCPConnectionForwarding(neighbor)portInterceptorApplianceSteelhead?2015RiverbedTechnology.Allrights缺省Passthrough的端口列Interactive缺省Passthrough的端口列InteractiveSecure*?2015RiverbedTechnology.AllrightsAuto-DiscoverySteelheadSYN+IPofSteelhead)數(shù)據(jù)中分支機(jī)Auto-DiscoverySteelheadSYN+IPofSteelhead)數(shù)據(jù)中分支機(jī)客戶發(fā)送CSH在TCPoption0x4c(76decimal)，形成SYN+SSH截獲SYN+CSH與SSH建立內(nèi)部會(huì)話CSH與客戶端建立外部會(huì)話（tc）；SSH與服務(wù)器建立外部會(huì)話）服務(wù)器與客戶端之間的優(yōu)化通道建立（三段tcp會(huì)話CSH(ClientSSH(ServerSteelHead)By單條tcp會(huì)話決定；??????????一個(gè)steelhead可以同時(shí)是和?2015RiverbedTechnology.AllrightsAuto-流程?2015Auto-流程?2015RiverbedTechnology.AllrightsEnhancedAuto-Discovery簡(jiǎn)化復(fù)雜環(huán)境下的steelheadEnhancedAuto-Discovery簡(jiǎn)化復(fù)雜環(huán)境下的steelhead?2015RiverbedTechnology.AllrightsSteelheadWANvisibilitySteelheadWANvisibility地址模式CorrectAddressing–缺省模BRANCHDATALANSubnet192.168.1.xxx/24DCSubnet10.1.1.xxx/S-SHIn-PathCorrectAddressing–缺省模BRANCHDATALANSubnet192.168.1.xxx/24DCSubnet10.1.1.xxx/S-SHIn-Path/C-SHIn-Path/?2015RiverbedTechnology.AllrightsDest.IP&SrcIP&0::Dest.IP&SrcIP&::Dest.IP&SrcIP&0::CorrectAddressing&PortBRANCHDATALANSubnet192.168.1.xxx/24DCSubnet10.1.1.xxx/S-SHIn-PathCorrectAddressing&PortBRANCHDATALANSubnet192.168.1.xxx/24DCSubnet10.1.1.xxx/S-SHIn-Path/C-SHIn-Path/?2015RiverbedTechnology.AllrightsDest.IP&SrcIP&0::Dest.IP&SrcIP&::Dest.IP&SrcIP&0::FullIP&PortTransparency（全透明LANSubnet192.168.1.xxx/24DCSubnet10.1.1.xxx/S-SHIn-Path/FullIP&PortTransparency（全透明LANSubnet192.168.1.xxx/24DCSubnet10.1.1.xxx/S-SHIn-Path/C-SHIn-Path/?2015RiverbedTechnology.AllrightsDest.IP&SrcIP&0::Dest.IP&SrcIP&0::Dest.IP&SrcIP&0::NAT支持的結(jié) 無(wú)NAT，NAT支持的結(jié) 無(wú)NAT，或NAT位于Steelhead的內(nèi)側(cè)（靠近Client-NAT-SH→SH-NAT-客戶端有Client-SH-NAT→SH-不支持，但可以使用FullTransparency服務(wù)器端有Client-SH→NAT-SH-兩端都有Client-SH-NAT→NAT-SH-?2015RiverbedTechnology.AllrightsIn-Path僅適用于CSH(ClientSide5種類型–Pass-允許直通In-Path僅適用于CSH(ClientSide5種類型–Pass-允許直通的流量（不優(yōu)化Auto-auto-discover(優(yōu)化Fixed-–––指定(不采auto-discovery)，配合out-of-path部署模–發(fā)送tcpreset給客戶––僅適用于在LAN口上檢測(cè)到的SYN數(shù)據(jù)包?2015RiverbedTechnology.AllrightsPeering決定Steelhead如何響auto-的探測(cè)包Steelhead串接環(huán)境下，處于中間的SteelheadPeering決定Steelhead如何響auto-的探測(cè)包Steelhead串接環(huán)境下，處于中間的Steelhead可用其passthrought過(guò)3種類型???Accept-?2015RiverbedTechnology.AllrightsSteelheadSteelheadSteelheadOutofSteelheadOutof?2015RiverbedTechnology.AllrightsIn_pathLanx_y/wanx_y:2層接口，僅具有物理/:In_pathLanx_y/wanx_y:2層接口，僅具有物理/:):?2015RiverbedTechnology.Allrights串行In-Path部署（fail連接方式Core/Edgee(LANSide)SlaveIn-Path(WAN–串行In-Path部署（fail連接方式Core/Edgee(LANSide)SlaveIn-Path(WAN–協(xié)商操作使用端口Master設(shè)備進(jìn)行（WANWAN?2015RiverbedTechnology.AllrightsIn-Path部?eCore/Edge?使用connectionforwarding?發(fā)現(xiàn)異步路由，會(huì)交回給原?SteelheadIn-Path部?eCore/Edge?使用connectionforwarding?發(fā)現(xiàn)異步路由，會(huì)交回給原?SteelheadSteelhead?ORWANWAN??將fail-to-wire改成fail-to-?2015RiverbedTechnology.AllrightsFail-to-全局設(shè)Fail-to-block–切換–fail-to-Fail-to-全局設(shè)Fail-to-block–切換–fail-to-檢查狀態(tài)–希望傳播鏈路狀態(tài)---?2015RiverbedTechnology.Allrights僅使用Wanx_y接口，Lanx_y僅使用Wanx_y接口，Lanx_yInpathx_y仍活躍并用于處理3路由器上需配置WCCP或PBR實(shí)現(xiàn)流量?2015RiverbedTechnology.AllrightsOutOfPath(僅用于服務(wù)器側(cè)服務(wù)不使用任何in_path接口，當(dāng)然也OutOfPath(僅用于服務(wù)器側(cè)服務(wù)不使用任何in_path接口，當(dāng)然也不用lan/wan接口；使用primary接口進(jìn)行優(yōu)化流量處理必須配合fixed-targetrule（in-path只能用于服務(wù)器側(cè)(SSH)，單向有效；CSHin-path方式部署，包括virtual?2015RiverbedTechnology.AllrightsPrimary接服務(wù)Outofpath處理從DMZ?2015Riverbed服務(wù)Outofpath處理從DMZ?2015RiverbedTechnology.AllrightsPrimary接–––Lanx_y/wanx_y:2層接口，僅具有物理/鏈路層屬性，成對(duì)對(duì)應(yīng)；Inpathx_y:3層接口，IP可達(dá)，需配置ip地址與網(wǎng)關(guān)；LSP（linkstate–––Lanx_y/wanx_y:2層接口，僅具有物理/鏈路層屬性，成對(duì)對(duì)應(yīng)；Inpathx_y:3層接口，IP可達(dá)，需配置ip地址與網(wǎng)關(guān)；LSP（linkstate 接口down時(shí)，可強(qiáng)制down掉對(duì)應(yīng)的wan(lan)x_y接口–––僅使用Wanx_y接口，Lanx_y接口不使用；Inpathx_y仍活躍并用于處理3層通信；路由器上需配置WCCP或PBR實(shí)現(xiàn)流量導(dǎo)向Outof––––不使用任何han/nrma必須配合fidtgtrule（inthrule)；只能用于服務(wù)器側(cè)(SSH)，單向有效；CSH仍需使用in-path方式部署，包括virtual在PoC測(cè)試與mobile的環(huán)境中很Cr5bec..?2015?2015RiverbedTechnology.Allrights加速云計(jì)優(yōu)化IaaS和SaaS性加速云計(jì)優(yōu)化IaaS和SaaS性???STEELHEAD對(duì)microsoftoffice365提速高達(dá)100???STEELHEAD?2015RiverbedTechnology.AllrightsSteelhead用公有云用DC/CloudVirtualorphysicalSteelhead用公有云用DC/CloudVirtualorphysicalAmazonEC2&ESXRiverbedInstance管部升配合Cloud客戶客戶客戶Cr5bec..SteelheadIaaS?2015RiverbedSteelheadIaaS?2015RiverbedTechnology.AllrightsSteelheadIaaS目前支持AWS,AzureSteelheadIaaS目前支持AWS,Azure?2015RiverbedTechnology.AllrightsCCX-SUB-570-SubscriptionBasedSteelHeadCX570cLowCloudAppliance6Mbps250ConnectionModelSubscriptionBasedSteelHeadCX570cLowCloudAppliance6Mbps250ConnectionModelCCX-SUB-570-SubscriptionBasedSteelHeadCX570cMidCloudAppliance10Mbps400ConnectionModelSubscriptionBasedSteelHeadCX570cMidCloudAppliance10Mbps400ConnectionModelSteelHeadfor1.5MO365Steelhead3---SteelHeadfor1.5MO365Steelhead3---412Akamai云?2015Ri