思博倫通信云計(jì)算測試解決方案

PROPRIETARY AND CONFIDENTIAL 云計(jì)算測試 - ICTC2010 數(shù)據(jù)中心 Data center 云基礎(chǔ)架構(gòu) Cloud infrastructure 應(yīng)用安全 Application security 云服務(wù) Cloud services 2 PROPRIETARY AND CONFIDENTIAL 思博倫通信公司 (Spirent Communications) 總部在美國加州 全球 1800多名員工 全球著名測試儀器提供商 通信測試行業(yè)的領(lǐng)導(dǎo)者 在網(wǎng)絡(luò)性能分析和服務(wù)保障方面為用戶提供全面先進(jìn)的測試分析解決方案 3 PROPRIETARY AND CONFIDENTIAL 思博倫通信中國 現(xiàn)有北京，上海，廣州三個(gè)代表處， 南京、杭州、武漢、深圳四個(gè)衛(wèi)星辦公室 亞太及中國區(qū)總部位于北京航空航天大學(xué)旁的世寧 大廈，投資 1000萬美金，有員工 200余人 在中國建有思博倫全球第二大實(shí)驗(yàn)室 在中國有售后技術(shù)支持中心（ TAC）及維修中心 售后服務(wù)熱線： 400-810-9529 售后服務(wù)郵箱： S 在國內(nèi)有 Global Service 團(tuán)隊(duì) 負(fù)責(zé)專業(yè)認(rèn)證培訓(xùn) (SCPA， SCPT， SCPE)，在國內(nèi)與清華大學(xué)，東南大學(xué)等多家高校合作，開設(shè)了思博倫學(xué)院專業(yè)認(rèn)證培訓(xùn)和考試機(jī)構(gòu) 自動化開發(fā)和培訓(xùn)服務(wù) , 有 10多位專職自動化工程師為用戶提供自動化平臺和測試?yán)_發(fā) 、 自動化培訓(xùn)等服務(wù)，成功實(shí)施的典型項(xiàng)目包括中興數(shù)據(jù)事業(yè)部自動化平臺，華為和華三的 VTP自動化平臺和華為的 GT3000自動化平臺。 測試服務(wù)，承擔(dān)中國電信，中國網(wǎng)通，中國移動，中國聯(lián)通等運(yùn)營商或者大型專網(wǎng)的重要測試服務(wù)。與國家重點(diǎn)實(shí)驗(yàn)室（傳輸所 /數(shù)據(jù)所）建立戰(zhàn)略合作伙伴關(guān)系 4 PROPRIETARY AND CONFIDENTIAL Applications VoIP Security QoS IPTV 40G 100G Routing Virtualization IPv6 5 PROPRIETARY AND CONFIDENTIAL 議程 云計(jì)算概述 思博倫通信云計(jì)算測試解決方案 數(shù)據(jù)中心與云基礎(chǔ)架構(gòu)測試 核心局域網(wǎng) &存儲網(wǎng)絡(luò)基礎(chǔ)架構(gòu)（ Core LAN & SAN Fabric） 虛擬服務(wù)器局域網(wǎng) &存儲網(wǎng)絡(luò)接入（ Virtual Server LAN & SAN Access） 云互聯(lián)（ Inter Cloud connect） 應(yīng)用安全與云服務(wù)測試 安全服務(wù)（ Security Services） 應(yīng)用發(fā)布與優(yōu)化（ Application delivery and optimization） 云服務(wù)（ X as a Service） 測試應(yīng)用舉例 6 PROPRIETARY AND CONFIDENTIAL 云計(jì)算概述 寬帶網(wǎng)絡(luò)接入 快速彈性和 擴(kuò)展性 基于使用付費(fèi) 按需自助服務(wù) 資源池 National Institute Standards and Technology (NIST)國家標(biāo)準(zhǔn)技術(shù)委員會定義： “ 云計(jì)算是一種可以方便的按需接入可配置共享計(jì)算機(jī)資源池 (如 , 網(wǎng)絡(luò) , 服務(wù)器 , 存儲 , 應(yīng)用和服務(wù) )的模型。它可以快速供給、釋放，最小化管理和與提供商配合。 ” 7 PROPRIETARY AND CONFIDENTIAL 云計(jì)算概述 Power usage effectiveness Green Grid提出 - 關(guān)注數(shù)據(jù)中心能耗效率的業(yè)界組織 PUE 是用來度量數(shù)據(jù)中心能耗效率的指標(biāo) PUE = 整個(gè)數(shù)據(jù)中心消耗的電能 / IT設(shè)備消耗電能 現(xiàn)代數(shù)據(jù)中心的 PUE值大概是 1.21 Battersea Power Station 典型的數(shù)據(jù)中心 Solar Power Seville 最新調(diào)查表明數(shù)據(jù)中心的平均 PUE值是 2.5 交換設(shè)備 UPS 冷卻設(shè)備 通信設(shè)備 服務(wù)器 存儲設(shè)備 數(shù)據(jù)中心架構(gòu)效率 Data Center Infrastructure Efficiency (DCIE) 百分?jǐn)?shù)， DCIE = IT設(shè)備消耗電能 /整個(gè)數(shù)據(jù)中心消耗的電能 8 PROPRIETARY AND CONFIDENTIAL 云計(jì)算概述 Multi-core & Virtualization enabling the cloud 過去： IaaS 單臺主機(jī) 現(xiàn)在：一臺服務(wù)器支持 16-48 VM 4 到 8 cores server 年底：一臺服務(wù)器支持 96+ IaaS 32 cores 64 threads 9 PROPRIETARY AND CONFIDENTIAL 云計(jì)算概述 Network stack in the cloud Server/Hypervisor 物理 LAN & SAN 連接 (L1-2) 基礎(chǔ)架構(gòu) Infrastructure 虛擬 LAN & SAN 連接 (L2-3) IaaS: 安裝 Linux 或 Windows 的 Virtual server 平臺 Platform application transactions (L4-6) PaaS: 虛擬主機(jī) Web hosting, 數(shù)據(jù)庫服務(wù)器 database server 軟件 Software user content (L7) SaaS:網(wǎng)頁郵件收發(fā) webmail, 效力應(yīng)用軟件 productivity apps Server/Hypervisor IaaS PaaS SaaS SaaS PaaS SaaS SaaS U U U U U U U U IaaS IaaS PaaS PaaS 10 PROPRIETARY AND CONFIDENTIAL 關(guān)鍵的測試驅(qū)動 Cloud network performance性能 給虛擬和真實(shí)的基礎(chǔ)架構(gòu)帶來更大壓力 接入網(wǎng)絡(luò)復(fù)用程度比例從 1:20到 1:4到 1:1，無阻塞 難以預(yù)防周期性的網(wǎng)絡(luò)擁塞 不同業(yè)務(wù)對服務(wù)質(zhì)量 (QoS)的要求越來越高 VLAN Priority 和 IP ToS/Diffserv 無論客戶的服務(wù)是基于本地還是跨越基礎(chǔ)架構(gòu) AVAILABILITY SECURITY SCALABILITY 11 PROPRIETARY AND CONFIDENTIAL 關(guān)鍵的測試驅(qū)動 Cloud network availability可用性 動態(tài)遷移 Live Migration 不需關(guān)電遷移 IaaS VM 自動資源調(diào)度 Automated resource scheduling 根據(jù)負(fù)載自動調(diào)度遷移 IaaS VM 高可靠性 High availability 硬件故障時(shí)迅速重啟 IaaS VM 殺手應(yīng)用 The killer apps for cloud data centers 高負(fù)載高帶寬消耗 PERFORMANCE SECURITY SCALABILITY 12 PROPRIETARY AND CONFIDENTIAL 關(guān)鍵的測試驅(qū)動 Cloud network security安全 企業(yè)應(yīng)用事件 transactions要多次跨域網(wǎng)絡(luò) 多種安全選擇 在廣域網(wǎng) WAN 在匯聚或核心 虛擬安全設(shè)備 IIS .Net Oracle Apache Web sphere MySQL PERFORMANCE AVAILABILITY SCALABILITY 13 PROPRIETARY AND CONFIDENTIAL 關(guān)鍵的測試驅(qū)動 Cloud network scalability擴(kuò)展性 虛擬云網(wǎng)絡(luò) 100x規(guī)模與復(fù)雜性 新網(wǎng)元 虛擬交換機(jī) /防火墻等虛擬設(shè)備 480,000 IaaS 虛擬機(jī)（ VM） 480,000 MAC 和 IP 地址 應(yīng)用和網(wǎng)絡(luò)流量呈指數(shù)增長 云內(nèi)或外部 Access Aggregation/ Core Virtual Cloud PERFORMANCE AVAILABILITY SECURITY 14 PROPRIETARY AND CONFIDENTIAL 關(guān)鍵的測試驅(qū)動 Unknowns of Cloud Services Will physical & virtual appliance scale the same? Are adjacent cloud services security threats? How do virtual appliances affect availability? What makes or breaks the quality of experience? Performance Availability Scale Security 15 PROPRIETARY AND CONFIDENTIAL 思博倫云計(jì)算測試解決方案 Remove the Cloud Unknowns AVAILABILITY Fail over Live migration SECURITY Encryption Simultaneous threats SCALE Subscribers Cloud TCO PERFORMANCE Realism Quality of Experience 16 PROPRIETARY AND CONFIDENTIAL 思博倫云計(jì)算測試解決方案 Core LAN & SAN Fabric Virtual Server LAN & SAN Access Inter Cloud connect Security Services Application Delivery Optimization X as a Service 端到端性能測試 應(yīng)用安全 & 云服務(wù) 數(shù)據(jù)中心 & 云架構(gòu) 17 PROPRIETARY AND CONFIDENTIAL Core LAN & SAN Fabric 市場趨勢 Overview of the Market Trends 高密度無阻塞架構(gòu)，成百上千的 10GbE端口 最大吞吐量下任意點(diǎn)到點(diǎn) 時(shí)延在 微秒級 FC、 FCOE接口將設(shè)備連接到核心架構(gòu) Core fabric IEEE, 數(shù)據(jù)中心橋接 DCB, 增強(qiáng)以太網(wǎng)性能 , 無丟包 支持 10,000s 虛擬機(jī) MAC地址 40G/100GE線卡 2011成為標(biāo)準(zhǔn)組件 Juniper 128x 10G Cisco 256x 10G Brocade 256x 10G HP/3Com 144x 10G Voltaire 288x 10G Arista 384x 10G 18 PROPRIETARY AND CONFIDENTIAL Core LAN & SAN Fabric 測試應(yīng)用舉例 Overview of the use case Fabric Throughput RFC 2544 LAN, Draft DCB SAN & Converged Performance Fabric Latency RFC 2544 LAN, Draft DCB SAN & Converged Availability Fabric Access Control Security Fabric Address Capacity RFC 2889 LAN, SAN Scalability 19 PROPRIETARY AND CONFIDENTIAL Virtual Server LAN & SAN Access 市場趨勢 Overview of the Market Trends 服務(wù)器融合 虛擬化服務(wù)器及 I/O 服務(wù)器接入的 LAN/SAN融合 刀片服務(wù)器和機(jī)箱的動態(tài)管理 20 PROPRIETARY AND CONFIDENTIAL Virtual Server LAN & SAN Access 測試應(yīng)用舉例 Overview of the use case LAN & SAN Throughput Virtual, Blade and Top of Rack switching Performance QoS during Live Migration & Vmotion Availability Virtual, Blade and ToR LAN and SAN switch Access Control Security LAN MAC and SAN N_Port address capacity Scalability LAN & SAN I/O STC 1G-100G Real SCSI target 21 PROPRIETARY AND CONFIDENTIAL Inter Cloud connect 市場趨勢 Overview of the Market Trends 云提供商尋求提供從數(shù)據(jù)中心云到終端用戶的端到端服務(wù) 服務(wù)跨越數(shù)據(jù)中心、運(yùn)營商網(wǎng)絡(luò)，需要實(shí)現(xiàn)冗余、可靠性、大容量和資源平衡 新技術(shù)不僅僅要傳輸 L2層數(shù)據(jù)中心，還要增加更多 L3功能 23 PROPRIETARY AND CONFIDENTIAL Inter Cloud connect 測試應(yīng)用舉例 Overview of the use case Inter Cloud and Fabric Extension Throughput Performance Live Migration WAN link QoS/QoE distance impact Availability Leakage and separation of services Security Capacity of routing/VPN protocols Scalability LAN & SAN I/O STC 1G-100G Real SCSI target 24 PROPRIETARY AND CONFIDENTIAL IDS/IPS Firewall Virtual Security Firewall, IDS/IPS Security services 市場趨勢 Overview of the network 高端數(shù)據(jù)中心需要高性能設(shè)備 : 350,000/s新建速率 ,10 million+ 并發(fā) Hypervisor虛擬安全設(shè)備 混合部署真實(shí)和虛擬設(shè)備 : 分擔(dān)部分負(fù)責(zé)到虛擬防火墻 25 PROPRIETARY AND CONFIDENTIAL Security Services Firewall/IDS/IPS 測試應(yīng)用舉例 Overview of the use case IDS/IPS Firewall Virtual Security Firewall, IDS/IPS Maximum firewall bandwidth throughput Maximum new connections per second Performance Application response time at maximum throughput Impact of live migration on application response time Availability Impact on performance of DDOS attack Signature based attack mitigation cause and effect at load Security Maximum number of concurrent connections/sessions Number of concurrent connections at maximum throughput Scalability 26 PROPRIETARY AND CONFIDENTIAL Application Delivery Optimization 市場趨勢 Overview of the network 高性能真實(shí)設(shè)備 : application acceleration, load balancing, rate shaping, SSL offloading Hypervisor 虛擬 ADC設(shè)備 : 單臺虛擬 WAN加速器可以支持 50,000并發(fā)連接 混合部署真實(shí)和虛擬設(shè)備 : F5 Local Traffic Manager (LTM)發(fā)布虛擬版本 (VE)， 可以和硬件設(shè)備協(xié)同工作 Router WAN Optimizer Loadbalancer Virtual ADC App Optimizer & Loadbalancer 27 PROPRIETARY AND CONFIDENTIAL Application Delivery Optimization 測試應(yīng)用舉例 Overview of the use case Throughput of physical and virtual ADC Throughput of physical and virtual WAN Optimizer Performance Are advanced WAN accelerator policy working? If the loadbalancer goes down what happens to the incoming requests? Availability Impact of specific threats on physical and virtual appliances Impact of load on security policies Security Number of concurrent connections/sessions Secure and Clear Number of connections/sessions per second Scalability Router WAN Optimizer Loadbalancer Virtual ADC App Optimizer & Loadbalancer 28 PROPRIETARY AND CONFIDENTIAL X as a Service 市場趨勢 Overview of the Market Trends AT&T, Verizon, NTT, Fujitsu, CHTTL, China Telecom, China Mobile， Korea Telecom, Telstra, Orange, BT, DT, KPN, Telefonica, Telecom Italia, Telia Sonera， 廣電 Terremark, Savvis, Amazon, Microsoft, Google, Alibaba Expected to be $35B market by 2013 29 PROPRIETARY AND CONFIDENTIAL Platform and Software as a Service 市場趨勢 Overview of the network 測試真實(shí)應(yīng)用服務(wù)器性能 提供的 服務(wù) 包括 Platform as a Service Software as a Service Storage as a Service CIFS and NFS Virtualized servers hosting IaaS, Paas, SaaS 30 PROPRIETARY AND CONFIDENTIAL Platform and Software as a Service 測試應(yīng)用舉例 Overview of the use case Response time of Software as a Service Web application CIFS and NFS Storage as a Service throughput Performance Impact of live migration on application response times Impact on streaming media during live migration Availability Service authentication and login Security XaaS maximum number concurrent users/sessions XaaS number of users/sessions per second Scalability Virtualized servers hosting IaaS, PaaS, SaaS 31 PROPRIETARY AND CONFIDENTIAL 虛擬化 Hypervisor Virtual Machine Virtual Machine Windows Linux Virtual Machine UNIX Efficient Virtualization uses a lightweight Hypervisor (Type 1) on bear metal. Advantage Very efficient & Fast Disadvantage More tightly bound To specific hardware Platforms 32 PROPRIETARY AND CONFIDENTIAL Hypervisor Virtual Switch Virtual Machine Virtual Machine Windows Linux Virtual Machine UNIX Real World LAN 虛擬化 Spirent Test Center 真實(shí) Spirent Test Center 如何測試 -數(shù)據(jù)中心和云基礎(chǔ)架構(gòu) 33 PROPRIETARY AND CONFIDENTIAL Hypervisor Virtual Machine Virtual Machine Windows Linux Virtual Machine UNIX L4-7應(yīng)用層仿真產(chǎn)生真實(shí)壓力 如何測試 -應(yīng)用安全與云服務(wù) 34 PROPRIETARY AND CONFIDENTIAL HDD 方案：增加 I/O 解決問題 Server Load VHDD VHDD VHDD 實(shí)例：單個(gè) I/O的潛在問題 SAN HDD I/O HBA HBA HBA CNA CNA CNA Internet Hypervisor Virtual Machine Windows Virtual Machine Virtual Machine Linux UNIX HDD 35 PROPRIETARY AND CONFIDENTIAL Hypervisor Virtual Machine Virtual Machine Windows Linux Virtual Machine UNIX 模擬真實(shí)應(yīng)用壓力流量進(jìn)行業(yè)務(wù)訪問 實(shí)例：應(yīng)用壓力導(dǎo)致內(nèi)存耗盡 36 PROPRIETARY AND CONFIDENTIAL Hypervisor Virtual Machine Virtual Machine Windows Linux Virtual Mac