1、消消費費自服務門戶自服務門戶云管理平臺云管理平臺vCloud Automation Center管理平面管理平面NSX Manager單點配置單點配置REST API 和和 UI 接口接口vCenter Server控制平面控制平面NSX ControllerManages Logical networksRun-time stateDoes not sit in the Data PathControl-Plane ProtocolNSX Logical Router Control VMUser World Agent數據平面數據平面NSX Edge Services GatewayESX

2、iVDS Hypervisor Kernel Modules FirewallDistributed Logical RouterVXLANNSX vSwitchNSX EdgeVM form factorData Plane for North South traffic Routing and Advanced servicesNSX vSwitch分布式網絡邊緣分布式網絡邊緣線速性能線速性能 Vmware NSX 整體架構整體架構H3C SDN 整體架構整體架構CONFIDENTIAL2Agile Function ControllerCONFIDENTIAL3解耦合之解耦合之H3C：和

3、物理硬件網絡完全緊耦合：和物理硬件網絡完全緊耦合的架構的架構SiSiSiSi思科華三華為SiSiSiSiNSX Vxlan虛擬化層虛擬化層v 網絡和底層物理網絡解耦合底層物理網絡可是是任意廠商網絡設備v Any application any where不受二層網絡STP、二層廣播風暴、MAC地址表和VLAN數量的限制，實現any application any wherev 統一的安全策略的一致性防火墻安全策略和IP地址解耦合，安全策略和位置無關服務器機房解耦合之解耦合之VMware：NSX徹底和底層物理網絡解耦合徹底和底層物理網絡解耦合跨多廠商網絡構建數據中心資源池跨多廠商網絡構建數據中心

4、資源池SiSiSiSi思科華三華為SiSiSiSiNSX Vxlan虛擬化層虛擬化層v 網絡和底層物理網絡解耦合底層物理網絡可是是任意廠商網絡設備v Any application any where不受二層網絡STP、二層廣播風暴、MAC地址表和VLAN數量的限制，實現any application any wherev 統一的安全策略的一致性防火墻安全策略和IP地址解耦合，安全策略和位置無關服務器機房主數據中心1主數據中心2主數據中心3解耦合之解耦合之VMware：NSX徹底和底層物理網絡解耦合徹底和底層物理網絡解耦合跨多廠商網絡構建跨數據中心資源池跨多廠商網絡構建跨數據中心資源池配置配置

5、和運維和運維管理管理-H3CCONFIDENTIAL6CONFIDENTIAL7配置配置和運維和運維管理管理-Vmware NSXTraditional Firewall Rule Mgt & OperationsVirtual Firewalls (1 3 Gbps)Virtual Firewalls自動化管理和運維護, 分布式部署內嵌到hypervisro內核, 分布式彈性擴展的性能 (20 Gbps/host)分布式虛分布式虛擬擬化防火化防火墻墻 8虛擬化防火墻架構性能分析虛擬化防火墻架構性能分析CONFIDENTIAL9虛擬化防火墻架構性能分析虛擬化防火墻架構性能分析Sourc

6、e or Destination FieldDescriptionIPv4 or IPv6IPv4 or IPV6 address can be host address, subnet or range of addressesDatacentervCenter Datacenter attribute. Rule will apply for all VM/vNIC existing in the DatacenterClustervCenter Cluster attribute.Rule will apply for all VM/vNIC existing in the Cluste

7、rNetworkvCenter Network (vSwitch) attributeRule will apply for all VM/vNIC connected to this networkVirtual AppvCenter vAPP attributeRule will apply for all VM/vNIC part of the vAPPResource PoolvCenter Resource Pool attributeRule will apply for all VM/vNIC part of the Resource PoolVirtual MachineVM

8、name attributevNICVM vNIC attributeLogical SwitchNSX logical switch attribute (VNI or VXLAN Network Identifier). Rule will apply for all VM/vNIC connected to this logical switchSecurity GroupNSX security group attribute (defined through Service Composer tab)Rule will apply for all VM/vNIC part of th

9、e Security GroupIP setsList of IPv4 or IPv6 adressRule IDRule NameSourceDestinationServiceActionApplied ToService FieldDescriptionProtocolTCP, UDP, Oracle_TNS, FTP, SUN_RPC_TCP, SUN_RPC_UDP. NBNS_BROADCAST, NBDG_BROADCAST, ICMP, IGMP, IPCOMP, IPV6ROUTE, IPV6FRAG, IPV6ICMP, IPV6NONXT, IPV6OPTS, RSVP,

10、 GRE, ESP, AH, L2TP, SCTP, IPv4, ARP, X25, LLC, FR_ARP, BPQ, DEC, DNA_DL, DNA_RC, DNA_RT, LAT, DIAG, CUST, SCA, TEB, RAW_FR, RARP, AARP, ATALK, IEEE_802_1Q, IPX, NETBEUI, IPv6, PPP, ATMMPOA, PPP_DISC, PPP_SES, ATMFATE, LOOPNote: user can define custom protocol as well by clicking onNew - Service Por

11、ts (Destination L4 ports)Unique port or range of portsAdvanced options: Source Ports (Source L4 ports)Unique port or range of portsAction FieldDescriptionBlockBlock the trafficAllowEnable the trafficLogLog the traffic informationDo not logDont Log the traffic informationNSX分布式防火墻支持和分布式防火墻支持和IP地址的解耦合

12、地址的解耦合CONFIDENTIAL11H3C虛擬化環境的路由處理虛擬化環境的路由處理傳統方式傳統方式CONFIDENTIAL12VMware虛擬化環境的路由處理虛擬化環境的路由處理分布式路由分布式路由Multi-Machine BlueprintsCloud ConsumerCloud AdminSLACost ProfileSecurityNetworkingServiceCatalogServiceRequestNetwork ProfilesSecurity GroupsSecurity PoliciesNetwork AdminLoad Balancer AdminStandardi

13、zed TemplatesLogical Load BalancerSecurity AdminAVAILABILITYSECURITYCONNECTIVITYSecurity TagsExternal Networks自動化自動化之之Vmware NSX通過標準的REST API 向上支持多種企業云管理平臺（Vcloud Director,vCAC,OpenStack,Cloudstack）實現網絡虛擬化資源的自動部署純軟方案和軟硬結合方案的對比純軟方案和軟硬結合方案的對比VmwareH3C技術領先性一體化的SDDC數據中心架構，引領數據中心云計算發展主要應對軟件定義網絡對其硬件的沖擊技術成熟性首個SDN商用平臺，國內外大量的使用案例應用場景非常有限藕合度和底層硬件完全解耦合，底層網絡只要是通用的支持IP路由的通用網絡設備即可整體架構仍然依賴于底層專用廠商網絡設備，CAPEX和OPEX高配置運行維管理和計算虛擬化平臺無縫融合，簡化大大簡化初始配置和后期的運維管理無