Talk about SDN Everyone is certainly not unfamiliar, the current most fire except small Apple should be Sdn. In the past two years, Sdn's heat swept the entire network industry, universities, onf, operators and equipment manufacturers in the active exploration and research, some manufacturers (software and hardware) has even introduced a deliverable solution, and put into practical applications.
The guests interviewed today are also from a network of spruce, a technology company focused on SDN technology. According to the Spruce Network CEO Shing, they started their own SDN road entirely because they have been carrying the "SDN gene." As early as 2003 Shing still on campus, he was studying packet classification algorithm, in constant learning, many "open" words to give him inspiration, so, OpenGate appeared, The idea is that when the network device becomes open, we can schedule the flow inside instead of just dealing with the bag inside, what can be done?
The first to Shian 烜 alma mater's Teaching Building network as the foundation, the network has been transformed into a SDN network that includes WiFi access, and the final effect is that the network of laboratories and conference rooms is linked to a data center, which brings great convenience to the users of the campus, He feels custom-made for a Chinese SDN innovation company, the Spruce network.
Talking about the name "Spruce", Shing about the time when he was going to set up the company, think a lot of names, feel not long, one day with friends to eat, see the hotel wall there is a picture, there is a cloud, there is a large green fir, and then a flash on the decision to name as "Spruce"-in the field of cloud computing, The meaning of long lasting.
Spruce Concept
When talking about the team, Shing said that at present the whole team has about 40 people, are from Baidu, Huawei and other enterprises of the technical backbone, is the earliest start to do SDN technical team, we are now doing SDN, to create a through the chip, system, application, Algorithm Sdn.
CSDN: Now SDN is very hot and almost everyone's mantra. What do you think of SDN as a professional SDN? Is it a panacea or another hype word?
Shing: There are two fundamental problems in SDN: One is the problem of resource management. The second is the problem of service integration. Resources are the equivalent of land, and there is no way to talk about the problem of producing crops, the traditional data center can be hosted, this is one, there is also a cloud era, how the data center expansion.
The first step is the management of resources. Cloud platform can be all virtual resources into a large pool of resources, while the cloud platform to know the location of resources, while ensuring the user's perception, virtual out of a data center distributed in various locations, data center is not enough time users can also apply for resource expansion.
The second step is how to manage services with a private cloud. There are two modes to choose from, one to manage, and the other to automate through self-service. Now the user wants to deploy this series of things no longer need spare parts, moving machines and wiring and so on, through the browser can be completed, which integrates the network and the automated deployment of services.
Now let's see Sdn. Can be divided into three points of view, the user perspective, Software development Perspective, hardware developer perspective.
From the user's point of view, the rapid deployment of business on the cloud is the user's needs, and to achieve high price/performance. And the administrator can feel the existence of SDN, the administrator in the browser set up a virtual distributed switch, all distributed in a cabinet of physical and virtual equipment in accordance with the needs of users organized, after delivery users can see how to access telecommunications, unicom, how to do load balancing, Layout of the business as well as horizontal expansion and so on. So for administrators, SDN is a tool to help them solve problems efficiently.
In the aspect of software development, the main problem is on the port and the stream, the port problem is an integration question, the Spruce uses the Sdn gateway to construct the virtual network to do. At the same time, in the data center is very important is monitoring, livecloud dynamic monitoring, with the help of openflow real-time traffic monitoring, the resources are also monitored, using the gateway to monitor the flow within each rack. The second is to use the controller to help users improve service quality.
Some people say that SDN does not need hardware, we only need to use ordinary server can do, unless you require particularly high performance. Why is it particularly high? We have done a lot of work in software optimization, which has the core algorithm, intelligent scheduling, in the case of million trillion, completely through the performance of the server to meet the unlimited expansion of the business. If you need higher performance, you can use OpenFlow switches to do this, the principle is the same.
Finally, when these are done, we can see the difference between the existence of Sdn. Customers get a private cloud of proprietary proprietary resources, as well as professional services, through a flexible private cloud. And this private cloud is a highly cost-effective, scalable cloud service that can meet a wide range of customer requirements.
CSDN: Can you introduce the characteristics of spruce Livecloud elastic private cloud?
Shing: The characteristics of livecloud elastic private cloud mainly include the following three points:
Flexible construction of business networks: a flexible networking function based on software definition Network (SDN) technology
Enterprise customers based on cloud platform networking services, on the one hand, the private subnet can be defined independently to ensure 100% security isolation between private networks to enhance the reliability of the business environment; On the other hand, the complex business topology can be constructed by visualization of the network management, and the flexible change business networks should be used for business development when the business is developing rapidly. Enhance cloud service efficiency: "Resources + Services" cloud management, very simplified cloud operations and cloud services
Based on the data center operating system (DCOS) technology, the data center realizes the management of large-scale heterogeneous resources, and the data center realizes the integration of IT service based on the SDN technology. Data centers are based on resource management and service integration, dramatically improve operational efficiency and provide flexible and diverse IT services to avoid vendor lock-in; Similarly, enterprise customers manage their own resources through "private cloud", manage the virtualized resources and proprietary resources in private cloud, and flexibly network; and "service" Way to consume computing, storage, networking, and security services on demand, making it easier for businesses to build private clouds and quickly build a cloud-appropriate environment for business.
Enterprise-Class Services: "IT Services supermarkets: integrated industry-leading IT services, providing enterprise-class high-quality cloud services The" IT Services Supermarket "model, designed to improve the integration of cloud computing services industry chain, to the traditional IT service providers to cloud services to provide the most consistent with their use of the way, At the same time for enterprise customers choose Professional Enterprise-class IT products lowered the threshold. In the current release of "National branch cloud Services", based on the Livecloud flexible private cloud management platform to achieve the seamless integration of all types of services and delivery, has integrated the domestic professional IT service provider industry star products, such as "Web application firewall, vulnerability scan and so on". For enterprises, the traditional enterprise-class security product consumption is expensive, in the service mode, only on demand, according to the amount of pay, you can enjoy the enterprise-class high-performance IT services.
CSDN: For the current domestic numerous cloud service providers, Aliyun, Tencent Cloud, Qingyun and so on, spruce Livecloud elastic private cloud advantage where?
Shing: First of all, from the SDN technology, we should be at home to do the first batch of people, the foundation of our team is from Tsinghua, when the 03 in Tsinghua has begun to study the relevant content, 06 began to do some academic papers, published some patents, 10 began to do the industrialization of things, So we have a very good foundation! And we are currently the only real in the chip, systems, applications and cloud Platform can do SDN company. So SDN brings us great advantages, mainly reflected in the following points.
1, in terms of scalability, we can help customers to do big and small by means of Sdn. Our advantage is to support a single individual large-scale customers, such as the Chinese electronic Technology group's National Network Range project is based on Livecloud Cloud platform, which has thousands of virtual machines, and the need to quickly build a topological structure, flexible access to physical equipment, Unified management and scheduling of the entire IT environment.
User network 100% Two layer isolation flexible network, build complex topological structure virtual environment and exclusive equipment mixed network
2, from the integration of services, the current equipment manufacturers more and more difficult to do, facing a transformation of the problem, we can help them to transform. For example, firewalls, routers, switches, and so on, we through the SDN way, through the virtual network, so that one of its devices into a number of virtual networks, each virtual network delivered to a user, in this mode of the device to become virtualized. Use the virtual network mode to make this, so that one of its devices can be used at the same time for multiple users, but also can save a lot of costs.
The introduction of enterprise-class IT service providers on demand to buy, on-demand professional services Team one-stop service
3, from the monitoring, a user's private cloud architecture may be distributed across multiple racks, or even multiple data centers inside, suddenly a physical device or a single point of problem, will affect those business? These must require the service provider to perceive the user's business, must have a large distributed monitoring system, it can put the virtual world and the reality of the world to complete a full response, so when a problem occurs, can be a series of points through, so that the administrator can quickly solve the problem, Give the user timely notification.
Historical monitoring and real-time monitoring management monitoring data Visualization, global overview of business running status to help users business analysis
CSDN: The Spruce Network has been focused on the SDN technology and its application in the cloud Computing data Center, can you tell me about the technical advantages that spruce has achieved in this area?
Shing: In order to build high quality EPC service, the Spruce team used SDN (software-defined Networking) technology to build a network virtualization platform on the complex and changeable IDC physical network infrastructure, which effectively solved the extensibility and security of EPC service, Reduced the complexity of business deployment and operations. The ideal network virtualization scenario needs to achieve four goals:
Unlimited scalability: A virtual two-tier network can span host servers, racks, and even across data centers. Virtual machines are free to migrate and have the same address labels and network policies before and after migration. Tenant Network Isolation: The virtual networks of different tenants are completely isolated and different tenants can use the same private IP address. Ensure network Forwarding performance: Network virtualization has a low impact on user communication performance. Control operation Dimension: establish the mapping relationship between virtual network and physical network, and quickly locate the anomaly and fault in the virtual network.
CSDN: How is the security of Spruce network ensured?
Shing: Livecloud uses SDN abstract method to decompose the traditional "network security" into "network" and "security", both of which appear in the form of service. Livecloud, on the one hand, builds virtual networks on the base network on the data center, and provides security for each virtual network on the other. Because of the provision of flexible private cloud services, each tenant's business needs to have extranet and intranet security. For extranet security, Livecloud provides tenants with different types of security gateway services, supporting ACLs, VPNs, NAT, vulnerability detection and other security functions; for intranet security, Livecloud provides innovative depth flow detection DFI to tenants (Deep flows Cotecna) function, help users to quickly locate intranet security problems, and provide corresponding network isolation and error-debugging functions. In addition, when a private cloud changes, such as a virtual machine migration or failure restart, Livecloud ensures that all network and security services are automatically changed with the business.
Platform deployment diagram
Free Subscription "CSDN cloud Computing (left) and csdn large data (right)" micro-letter public number, real-time grasp of first-hand cloud news, to understand the latest big data progress!
CSDN publishes related cloud computing information, such as virtualization, Docker, OpenStack, Cloudstack, and data centers, sharing Hadoop, Spark, Nosql/newsql, HBase, Impala, memory calculations, stream computing, Machine learning and intelligent algorithms and other related large data views, providing cloud computing and large data technology, platform, practice and industry information services.