VMware vCloud Director – Networking Architecture v1.

0
September 5th, 2010
Designed By: Hany R. Michael
www.hypervizor.com
HYPERVIZOR FROM THE CORE TO THE CLOUD
VMware vCloud™ Director Networking Architecture
A Holistic View From a Private Cloud Perspective

Active Diagram Layers

IP Addresses vSwitches Descriptions External Clouds Net Pools vCD Screens
You can hide/show the diagram layers from the left panel in your PDF reader.

Organization 1 Organization 2

vApp Isolated, not connected to any vAppNet routed to an OrgNet that is

vApp(s) Directly connected to an isolated Enternal OrgNetwork
OrgNetworks vApp Network(s) routed to an isolated Internal OrgNetwork directly connected to an External Network.

192.168.2.100 192.168.2.101 192.168.2.200 192.168.2.100 192.168.2.101 192.168.2.200 192.168.2.100 192.168.2.101 192.168.2.200 192.168.0.100 192.168.0.101 192.168.0.103 192.168.0.104 192.168.0.105 192.168.0.200 192.168.2.100 192.168.2.101 192.168.2.102

APP DB DNS APP DB DNS APP DB DNS APP DB AD APP DB DNS APP DB DNS
A pool of network resources consumed as needed whenever
OS OS OS OS OS OS OS OS OS OS OS OS OS OS OS OS OS OS
a new vApp/Organization network is created. This could be on
the fly (vCNI & VLAN backed) or manually (Portgorup backed)

vApp Network Routed vApp Network Routed NETWORK POOLS vApp Network Routed
EDGE EDGE EDGE EDGE

VLAN-Backed
Internal Organization Network Isolated Automated Provisioning Internal Organization Network Isolated External OrgNet Direct
EDGE EDGE
vShield Edge is a service VM running
various networking services like:
DHCP, NAT and Firewall vCNI-Backed
Automated Provisioning

vApp Directly connected to routed vApp Directly connected to routed vApp Network routed to another vApp Network routed to another vApp Directly connected to an OrgNet that is
vApp without any network OrgNetwork OrgNetwork PortGroup-Backed routed OrgNetwork. routed OrgNetwork. directly connected to an External Network.
connectivity (None)
GW: 192.168.0.1 Domain: DNS: 172.30.1.40 GW: 192.168.0.1 Domain: DNS: 172.30.1.40
Manually Provisioned
hypervizor.com hypervizor.com 192.168.2.100 192.168.2.101 192.168.2.102 192.168.2.100 192.168.2.101 192.168.2.102 10.10.10.50 10.10.10.51 10.10.10.52

APP DB 192.168.0.100 192.168.0.101 192.168.0.102 192.168.0.103 192.168.0.104 192.168.0.200 APP DB DNS APP DB DNS APP DB DNS
OS OS OS OS OS OS OS OS OS OS OS
APP DB Web APP DB Web
OS OS OS OS OS OS

Web DB vNetwork Distributed Switch vNetwork Standard Switch

OS OS vApp Network Routed vApp Network Routed
EDGE EDGE
Cisco Nexus 1000V
None (No Network)
172.30.1.40 hypervizor.com
External Organization Network Routed DNS AD External Organization Network Routed External OrgNet Direct

OS OS The vApps are directly mapped through

E D G E 192.168.0.1 EDGE the OrgNet to consume the IP pool of
the External Network.

Shared External Network across two organizations. IP Pool: 10.10.10.50 – 10.10.10.60

External Network IP Subnet: 172.30.0.0/23 External Network External Network

Could be one vNetwork Standard Switch or vNetwork Distributed Switch with different Portgroups segmented by VLANs. These PGs are manually created by the vSphere Admin.

vNetwork Distributed Switch vCenter Networking View vNetwork Standard Switch vNetwork Standard Switch vNetwork Standard Switch
HvCenter01.hypervizor.com
HyperCloud-vDSwitch Virtual Switch: vSwitch1 Virtual Switch: vSwitch2 Virtual Switch: vSwitch3
…………………………………………………………………………………………... Hypervizor Datacenter …………………………………………………………………………………………... …………………………………………………………………………………………... …………………………………………………………………………………………...
Production
Virtual Machine Port Group Physical Adapters Virtual Machine Port Group Physical Adapters Virtual Machine Port Group Physical Adapters
Native-PortGroup HyperCloud-vDSwitch-DVUplink... External-Network-Production
External-Network-Internet External-Network-Production vmnic0 1000 Full External-Network-Internet vmnic1 1000 Full External-Network-VPN-Cairo vmnic4 1000 Full
External-Network-VPN-Cairo 2 virtual machine(s) | VLAN ID 10 2 virtual machine(s) | VLAN ID 20 2 virtual machine(s) | VLAN ID 30
VLAN ID: 10 …………………………………………….. vmnic2 1000 Full …………………………………………….. ……………………………………………..
- dvUplink1 (1 NIC Adapter) HyperCloud-vDSwitch DNS01
vmnic3 1000 Full vmnic5 1000 Full
Virtual Machines (190) VM1 VM1
vmnic6 hvesx07.hypervizor.com HyperCloud-vDSwitch-DVUplinks-18 DNS01

…
- dvUplink2 (1 NIC Adapter) Native-PortGroup AD01 VM(n) VM(n)
dvs.VC92..DVS1CM1-F2-ITDev-OrgNet... vmnic7 hvesx07.hypervizor.com dvs.VC92..DVS1CM1-F1-ITDev-OrgNet-Routed
- dvUplink3 (1 NIC Adapter) dvs.VC92..DVS1CM1-F2-ITDev-OrgNet-Isolated
VLAN ID: -- vmnic8 hvesx01.hypervizor.com dvs.VC92..DVS1CM1-F3-ITDev-OrgNet-Direct
Virtual Machines (3) dvs.VC92..DVS1CM1-F5-ITOps-OrgNet-Routed
dvs.VC92..DVS1CM1-F5-ITOps-OrgNet-Isolated
dvs.VC92..DVS1CM1-F5-ITOps-OrgNet-Direct
dvs.VC92..DVS1CM1-F2-ITDev-Org... dvs.VC92..DVS1CM1-F5-vAppNet-Routed-ITDev-Rou..
dvs.VC92..DVS1CM1-F5-vAppNet-Isolated-ITDev-Ro.. Production INTERNET MPLS
VLAN ID: -- dvs.VC92..DVS1CM1-F5-vAppNet-Routed-ITDev-Isol...
Virtual Machines (3) dvs.VC92..DVS1CM1-F5-vAppNet-Isolated-ITDev-Iso...
The different dvPortgroups listing the
VMs running inside your cloud as
dvs.VC92..DVS1CM1-F3-ITDev-Org... well as the vSM Edge devices. The main production network for the Internet Access for the vApps VPN Access to/from external network.
A dvPortgroup of a vApp Network
customer. Can be shared as need connected (Direct or Routed) to this Could be a remote office, a consulting
VLAN ID: -- between different organizations/BUs. External Network. company or a partner network.
A dvPortgroup of an Organization Network
Virtual Machines (3)

An External Network
dvs.VC92..DVS1CM1-F4-ITDev-Org...

VLAN ID: --
Virtual Machines (3) vCloud Director Network Sections
vse-43762033 A vShield Edge Device
0880375628-WebServer
A set of VMs running in the cloud
0880426456-DBServer
0880766484-DNSServer Network Pools External Networks Organization Networks

Name Status Type Pool (Used/Total) vDS Name Status VLAN Default Gateway IP Pool (Used/Total) vSphere Network Name Status Default Gateway Type Connected To Network Pool

HyperCloud-NetPool-PG Port Group 50% -- External-Network-Production 10 172.30.0.2 50% External-Network-Production OrgNet-ITDev-Direct 172.30.0.2/23 Direct External-Network-Production --

HyperCloud-NetPool-vCNI Cloud Network Isolation 50% HyperCloud-vDSwitch External-Network-Internet 20 212.77.192.1 50% External-Network-Internet OrgNet-ITDev-Isolated 192.168.1.1/24 Internal -- HyperCloud-NetPool-vCNI

HyperCloud-NetPool-VLAN Cloud Network Isolation 50% HyperCloud-vDSwitch External-Network-VPN-Cairo 30 10.10.10.1 50% External-Network-VPN-Cairo OrgNet-ITDev-Routed 192.168.0.1/24 Routed External-Network-VPN-Cairo HyperCloud-NetPool-vCNI