EMBARGO: Cloud datacenter network operations using

Download Report

Transcript EMBARGO: Cloud datacenter network operations using

-
-
-
Physical Network
Devices
Physical / Virtual
Networks
Compute/Storage
Infrastructure
Network/Security
Services
Windows Server
IPAM
Physical / Virtual
Networks
System Center
Virtual Machine
Manager
Compute/Storage
Infrastructure
System Center
Operations
Manager
Network/Security
Services
Host
NFVs
NWs
VMs
GWs
Windows Server
IPAM
PowerShell
Discovery
and
Topology
System Center
Virtual
Machine
Northbound
Interface
Manager
Fabric
Network
Management
Network
Monitoring
System Center
Operations
Manager
…
Southbound Interfaces
Physical Network
Devices
Physical / Virtual
Networks
Compute/Storage
Infrastructure
Network/Security
Services
Custom
Management Apps
Auto-discovery of all the
network, compute and
storage resources and
their inter-connection
Network
discovery
Deduce
topology
Auto-construction of
network topology based on
what is discovered/ updated
on the network
Validate
topology
Validate the discovered network topology against
desired for compliance and design conformance
Hosts
4. Discovery engine uses host records in AD, queries
the host objects and stiches the information, with
that obtained via SNMP discovery to construe the
complete topology of the network...
Active
Directory
1. User provides a set
of seed devices and
credentials
Discovered
Device
Seed Device
Discovered
Device
Discovery
Engine
2. Discovery engine connects to the
seed devices using SNMP and uses
other information out of MAC, ARP,
Route and LLDP tables…
3. Discovery engine, traverses the
devices connected to the seed
devices and there on….
Discovered
Device
Discovered
Device
Discovered
Device
1. Design
network
Granular controls required
for troubleshooting
Design the IP addressing properties,
VLANs, routes, ACLs, LAGs, port
channels, policies…
2. Configure
network
Configure the Access, and
Aggregate switches per the
required desired/goal state
for design compliance
PowerShell
Northbound Interface
Fabric
Network
Management
…
Southbound Interface
Simplified OMI/DSC
Schema
Configuring fabric network of datacenter
for dynamic assignment of IP addresses
and network properties to the compute
resources
• Configure the DHCP
scopes for the specified IP
subnets and IP pools
Setup of MS DHCP
•
•
•
•
Setup to configure
Access switch
Set mgmt. IP on an Ethernet port
Set mgmt. username and password
Get and set default VLAN
Set DhcpHelper IP address
Assumption:
Switch already bootstrapped with the required firmware
• Configure VLANs (IDs, state, VLAN IP
addrs description)
addr., dhcpHelper IP addrs.,
• Configure Ethernet port (VLANs,
dhcpHelpers port addr., VLAN mode,
dhcpHelpers,
speed, max speed, state, network addr.,
portlacpsetting, descriptions)
Configuration of
access switch
Assumption:
Admin will be upfront aware about the port he is
intending to configure
1. Accurately measure loss/latency
within and across fault domains
5. Insight to granular device/port level
statistics and network monitoring data.
These will be available via REST
APIs and out of SCOM for
further diagnostics /
remediation
Measure
Remediation
4. Determine which virtual networks
are impacted by the degradation
Impact
analysis
Outage
detection
Fault
localization
(root cause)
2. Detect network outages
in near real time
3. Determine which device/interface is
causing network degradation
inter-subnet
intra-subnet
subnet-to-internet
Uses topology to autodiscover all possible
paths taken by network
packets
Uses advanced
algorithms to localize
problems to specific
nodes or even links
Supports ECMP networks (L2, L3, or a combination of
both L2 and L3 networks)
System Center
Operation
Manager
Northbound Interface
Discovery
and
Topology
Network
Monitoring
Southbound Interface
SNMP (Get/Traps) /
WCF / WMI
…
Unified management of physical and
virtual address spaces (integration with
SCVMM)
• Integrated IP addressing, DNS and DHCP
management
•
Virtualized
Network
Automation
•
•
•
Tracking activity of IP
address/user/mc
IP utilization & trend
Audit config (now
includes DNS as well)
Network Audit
& Visibility
Delegated
Administration
WS Next
Release
• Granular RBAC to manage IP address
space, DHCP & DNS
• Delegated administration within and across
datacenters
IPAM
•
•
•
•
Disaster recovery
Multiple instance
deployment
SQL database
Extensive PS support
Scale,
Robustness &
Automation
Infrastructure
Services
Management
Automatic server discovery
Single console DHCP and DNS
management across datacenters
• Management of granular DNS properties
•
•
Heterogeneous
Infrastructure
Management
•
Framework to prep eco-system for 3rd
party DHCP & DNS server management
DNSServerConfiguration)
Note:
* - Host A or AAAA, CNAME, MX, AFS Database, ATM Address, DHCID, DNAME, Host Information, ISDN, Pointer, Responsible person, Route Through, Service Location, Text, Well Known Services,
X.25, Name Servers, WINS, WINS-R and SOA
** - Domain-joined DNS servers they can be file-based or AD integrated
http://technet.microsoft.com/library/dn765472.aspx
http://technet.microsoft.com/en-us/library/hh546785.aspx
http://www.microsoft.com/en-us/server-cloud/products/
windows-azure-pack
http://azure.microsoft.com/en-us/
http://channel9.msdn.com/Events/TechEd
www.microsoft.com/learning
http://microsoft.com/technet
http://developer.microsoft.com
Centralized management across virtual/physical networks, including virtualized network services
Centralized configuration
Standardized APIs
Built from Azure’s experience in managing
large networks.
Enables development of management
apps, automation and customization via
extensible northbound & southbound
REST APIs.
•
Central point of automation/control
•
Scalable for large, dynamic networks.
Complete solution for private
clouds
Extensible, standards based
•
Leverage existing investments (Virtual
Network Functions)
•
Compatible with existing & emerging
network designs (SNMP, OVSDB,
VXLAN, OMI, …)
•
Hybrid / Remote connectivity
•
Cloud scale Load Balancer
•
Firewall
•
Management of physical network
Lower TCO
•
Active monitoring / diagnostics
•
Integrate with existing infrastructure
(VMM, OM, …)
•
Ease of network troubleshooting
Common control plane, reduced operational complexity
TerminationPoint
• Topology API contains three types of objects
• TopologyNode
• TopologyTerminationPoint
• TopologyLink
A network interface like
NIC, switch port, port
channel etc. on a network
device is represented by a
topology termination point
Router
• TopologyNode represents a network devices
• Each network interface of the device is
represented by a topology termination point
object.
TopologyNode
A network device like a
switch router or host is
represented by a topology
node
Switch 2
Switch 1
TopologyLink
Connection between two
devices is represented by a
topology link
• Topology links represent the connections
between two network devices
Host 1
Host 2
Host
Impact
NFVs
NWs
Alert /
VMs
Monitoring
GWs
Windows Server
IPAM
PowerShell
System Center
Virtual Machine
Manager
System Center
Operations
Manager
Northbound Interface
Discovery
and
Topology
Fabric
Network
Management
Network
Monitoring
…
Southbound Interface
Physical Network
Devices
Physical / Virtual
Networks
Compute/Storage
Infrastructure
Network/Security
Services
Custom
Management Apps
Host
Alerts
VNFs
NWs
Reports
VMs
Monitoring
GWs
Physical Network
Devices
Physical / Virtual
Networks
Compute/Storage
Infrastructure
Network/Security
Services
Host
Impact
NFVs
NWs
Alert /
VMs
Monitoring
GWs
Windows Server
IPAM
PowerShell
Discovery
and
Topology
System Center
Virtual
Machine
Northbound
Interface
Manager
Fabric
Network
Management
Network
Monitoring
System Center
Operations
Manager
…
Southbound Interface
Physical Network
Devices
Physical / Virtual
Networks
Compute/Storage
Infrastructure
Network/Security
Services
Custom
Management Apps