underlay和overlay网络介绍

网络基础:

以太网从最开始设计出来就是一个分布式网络,没有中心的控制节点,网路中的各个设备之间通过协议传递的方式学习网络的可达信息,由每台设备自己决定要如何转发,这直接导致了没有整体观念,不能从整个网络的角度对流量进行调控。由于要完成所有网络设备之间的互通,就必须使用通用的语言,这就是网络协议,RFC就是网络协议的法律,相当于国际法,各个设备供应商遵从国际法行事,就基本保证了整个网络世界的正常运行。


1、Underlay网络

Underlay就是当前数据中心网路基础转发架构的网络,只要数据中心网络上任意两点路由可达即可,指的是物理基础层。我们可以通过物理网络设备本身的技术改良、扩大设备数量、带宽规模等完善Underlay网络,其包含了一切现有的传统网络技术。


2、Overlay 网络

Overlay 在网络技术领域,指的是一种网络架构上叠加的虚拟化技术模式,其大体框架是对基础网络不进行大规模修改的条件下,实现应用在网络上的承载,并能与其它网络业务分离,并且以基于IP的基础网络技术为主。

Overlay 技术是在现有的物理网络之上构建一个虚拟网络,上层应用只与虚拟网络相关。一个Overlay网络主要由三部分组成:

  1. 边缘设备:是指与虚拟机直接相连的设备
  2. 控制平面:主要负责虚拟隧道的建立维护以及主机可达性信息的通告
  3. 转发平面:承载 Overlay 报文的物理网络

通过部署Overlay网络,可以实现物理网络向云和虚拟化的深度延伸,使云资源池化能力可以摆脱物理网络的重重限制,是实现云网融合的关键。Overlay网络也是一个网络,不过是建立在Underlay网络之上的网络。Overlay网络的节点通过虚拟的或逻辑的链接进行通信,每一个虚拟的或逻辑的链接对应于Underlay网络的一条路径(Path),由多个前后衔接的链接组成。

Overlay技术可以分为网络Overlay,主机Overlay和混合式Overlay三大类。

网络Overlay是指通过控制协议对边缘的网络设备进行网络构建和扩展,也就是本文所讲的Overlay网络技术。

Overlay网络技术多种多样,一般采用TRILL、VxLan、GRE、NVGRE等隧道技术。

TRILL(Transparent Interconnection of Lots of Links)技术是电信设备厂商主推的新型环网技术;NVGRE(Network Virtualization using Generic Routing Encapsulation)和STT(Stateless Transport Tunneling Protocol)是IT厂商主推的Overlay技术;以及大家非常熟悉的VXLAN(Virtual eXtensible LAN)等基于隧道的封装技术。

由于这些也都是新增的协议,均需要升级现有网络设备才能支持。Overlay网络中应用部署的位置将不受限制,网络设备可即插即用、自动配置下发,自动运行,Overlay网络业务变化,基础网络不感知,并对传统网络改造极少,最为重要的是虚拟机和物理服务器都可以接入Overlay网络中。


3、overlay和underlay的联系

Overlay网络和Underlay网络是相互独立的,Overlay网络使用Underlay网络点对点传递报文,而报文如何传递到Overlay网络的目的节点完全取决于Underlay网络的控制平面和数据平面,报文在Overlay网络入和出节点的处理(如丢弃,转发)则完全由Overlay网络的封装协议来决定。

既然是隧道技术,就需要在原有报文的基础增加一些报文头,这无疑会增加网络转发负担,要多传递一些“无用”字节报文,会降低网路性能,Underlay方式才是数据中心网络发展的终极形式。

还有Overlay网络并没有完全的与物理网络解耦合,仍然需要在服务器和网络设备上做大量的人工配置,Overlay网络的部署在可维护性上不是减少,反而是增加了运维的负担。

Overlay网络和Underlay网络实际上并不是什么新鲜概念,比如在传统网络中,L3VPN、灵活QINQ、MACinMAC等功能都是隧道技术,这些协议的作用和Overlay的实现作用非常类似,只不过Overlay所用到的新协议考虑更多的是虚拟机迁移、移动性,新协议定义内容更加丰富和合理而已。

Overlay网络技术充分考虑到了数据中心网络的现实问题,现有的网络很难一下子切换到SDN网络,网络完全由控制器和Underlay网络构成,转发平面与控制平面完全解耦。

Overlay网络就可以充分利用现有的物理网络,完全虚拟出一张逻辑网络,这样完全可以满足虚拟机在网络里任意迁移的目的,又不会浪费现有的网络资源,是在SDN网络和传统网络之间做出的一种折衷方案,网络的未来必要还是Underlay加控制器的方案。


4、展望

将数据中心网络分为Underlay和Overlay两个部分,是在数据中心虚拟化的大背景下产生的,虽然目前Overlay网络更为重要,但是也需要Underlay网络,而且Underlay网络必不可少,在相当长的一段时间内,两种网络形式将长期并存。随着SDN技术的成熟,Overlay网络也许会慢慢退出历史舞台,完全由控制器接管网络。

1 概述 ····················································································································································· 1 1.1 产生背景··············································································································································1 1.2 技术优点··············································································································································1 2 Overlay技术介绍··································································································································· 3 2.1 Overlay的概念介绍·······························································································································3 2.2 Overlay的解决方法·······························································································································3 3 Overlay技术实现··································································································································· 5 3.1 Overlay网络基础架构 ···························································································································5 3.2 Overlay网络部署需求 ···························································································································7 3.2.1 VXLAN网络和传统网络互通的需求 ···························································································7 3.2.2 VXLAN网络安全需求 ·················································································································7 3.2.3 Overlay网络虚拟机位置无关性··································································································8 3.2.4 Overlay与SDN的结合 ················································································································8 4 H3C SDN Overlay模型设计··················································································································9 4.1 H3C SDN Overlay模型设计 ·················································································································9 4.2 SDN控制器模型介绍 ··························································································································11 4.3 H3C SDN Overlay组件介绍 ···············································································································12 4.4 SDN Overlay网络对接 ················································································································13 4.4.1 SDN Overlay与OpenStack对接·······························································································14 4.4.2 SDN Overlay与基于OpenStack的增强平台对接··································································15 4.4.3 SDN Overlay与非OpenStack平台对接 ················································································16 4.5 服务链在Overlay网络安全中的应用···································································································16 4.5.1 什么是服务链 ··························································································································16 4.5.2 Overlay网络服务链节点描述····································································································17 4.5.3 服务链在Overlay网络安全中的应用························································································17 5 SDN Overlay组网方案设计················································································································· 19 5.1 SDN Overlay组网模型························································································································19 5.1.1 网络Overlay ····························································································································20 5.1.2 主机Overlay ····························································································································20 5.1.3 混合Overlay ····························································································································20 5.2 H3C SDN Overlay典型组网 ···············································································································20 5.2.1 网络Overlay ····························································································································20 ii 5.2.2 主机Overlay ····························································································································23 5.2.3 混合Overlay ····························································································································26 5.2.4 Overlay组网总结······················································································································26 6 SDN Overlay转发流程描述················································································································· 28 6.1 SDN Overlay流表建立和发布·············································································································28 6.1.1 流表建立流程对ARP的处理 ····································································································28 6.1.2 Overlay网络到非Overlay网络··································································································28 6.1.3 非Overlay网络Overlay网络 ·································································································29 6.2 Overlay网络转发流程 ·························································································································29 6.2.1 Overlay网络到非Overlay网络··································································································30 6.2.2 非Overlay网络Overlay网络 ·································································································31 6.3 Overlay网络虚机迁移 ·························································································································32 6.4 SDN Overlay升级部署方案 ················································································································33 6.4.1 SDN Overlay独立分区部署方案·······························································································33 6.4.2 IP GW旁挂部署方案 ················································································································34 6.4.3 核心升级, SDN Overlay独立分区 ··························································································35 6.4.4 Overlay网关弹性扩展升级部署································································································35 6.4.5 多数据中心同一控制器集群部署 ·····························································································36 7 SDN Overlay方案优势总结················································································································· 37
评论 1
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值