Service Delivery Network Architecture Design

1
Service Delivery Network ArchitectureDesign
Implementation Guide

• Sajid Awan
• VP, Systems Engineering

2
SDNA Topics

• Background
• Architecture Strategy
• Network Design
• Planning Implementation

3
SDNA Components

• Services Domains
• Logical Grouping of Related Services
• End User Services
• Supporting Services
• Infrastructure Services
• Service Modules
• Aggregation of Service Domains with similar
  Security needs
• Distribution Modules
• Aggregation and scaling of Service Modules within
  a Data Center

• Capabilities
• Scalability
• Availability
• Flexibility
• Security
• Persistence
• Manageability
• Performance

4
SDNA Logical ArchitectureBasic Connectivity
5
SDNA Logical ArchitectureService Load Balancing
6
SDNA Logical ArchitectureSecurity Integration
7
SDNA Network Components

• Fixed L2-3 Switch
• Non-Blocking Performance
• VLAN, STP, LAG
• OSPF, VRRP, ECMP
• Basic QoS, Filtering

• Modular L2-3 Switch
• Non-Blocking Performance
• High Availability
• VLAN, STP, LAG
• OSPF/BGP, VRRP, ECMP
• Filtering, QoS, DDOS protection

• Load Balancer Firewall
• Best of breed
• External to the switch

• Server NIC
• 10/100/1000baseT, some 10GE
• Multiple NICs for production, backup and
  management
• VLAN capable
• NIC Teaming support (redundancy)

8
Production Network Options
Simple Service Module

• Service Domains are independent (separate VLAN)
• Service Module includes Load Balancer Firewall
• Unified Aggregation/Access switch is L2
• No Spanning Tree needed
• Distribution Module is optional
• Distribution switch is L3

9
Production Network Options
Advanced Service Module

• Service Domains are independent (separate VLAN)
• Service Module includes Load Balancer Firewall
• Unified Aggregation/Access switch is L2
• No Spanning Tree needed
• Distribution Module is optional
• Distribution switch is L3

10
Production Network Options
Complex Service Module

• Service Domains are independent (separate VLAN)
• Service Module includes Load Balancer
• Aggregation switch is L2
• Access switch is L2
• Distribution Module is optional
• Distribution switch is L3

11
Management Backup Networks
12
Traffic Flow
Traffic Flow

• Bidirectional flow is thru Firewall Load
  Balancer
• Better flow visibility
• Upstream can bypass Firewall or Load Balancer
• Allows scaling of low capacity appliances

13
Network Virtualization
Network Virtualization

• Removes physical barriers of Service Domain
  topology
• Better bandwidth utilization with NIC Teaming
• VLANs load share redundant links
• NICs uses Virtual MAC

14
NIC Teaming
vMAC
vMAC
15
Network Failover
Switch Failover
Link Failover
16
Network Failover
Firewall Failover
Load Balancer Failover
17
Protocol Address Mapping
18
Implementation Example 1Production Network
19
Implementation Example 1Management Backup
Networks
20
Implementation Example 2Production Network
21
Thank You