大数据架构设计方案 ppt课件.pptx

大数据架构设计方案 ppt课件.pptx

《大数据架构设计方案 ppt课件.pptx》由会员分享，可在线阅读，更多相关《大数据架构设计方案 ppt课件.pptx（49页珍藏版）》请在冰点文库上搜索。

ACI方案,2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,1,互联网电商大数据,2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,2,应用服务器应用程序,2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,3,文件服务器文件,数据库服务器数据库,2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,4,2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,5,基础架构,2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,6,应用系统,业务需求,2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential7,应用系统语言,人工翻译由于相互之间的不熟悉，如何确保需求翻译的正确性？

高并发，大流量高可用：

7*24海量数据用户分布广泛安全：

网站受攻击，密码泄露需求快速变更，发布频繁,基础架构语言,端口数量核心层、接入层带宽速率,VLAN划分,IP地址规划防火墙,QoS,负载均衡CPU、内存、网卡、存储,应用系统团队,2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,8,ApplicationTiers,Provider/ConsumerRelationships,基础架构团队,VLANs,SubnetsProtocols,Ports,应用系统和基础架构人员必须相互翻译自己的语言,如何跨越这个障碍？

2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,9,架构师,懂业务,熟系统,熟悉网络、服务器、防火墙,在哪里？

有其他的办法吗？

2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,10,SoniJiandani,2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,11,ApplicationCentricInfrastucture以应用为中心的基础架构,安全保护,2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,12,负载均衡,与数据库相连,应用需求,应用（WEB）高带宽,中间件,数据库与中间件相连低延迟,数据库,WEB,防火墙负载均衡,负载均衡,ACI将应用的语言翻译成网络的语言,网络需求,VM1,Server1,Server2,Server1,中间件VM2LXC1,全系列产品线一览,2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,13,应用策略架构控制器,开放标准，拥抱开源,NEXUS9000系列交换机,业界领先的合作伙伴,APIC,2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,14,Servers,Servers,sticky-serverfarmsn_cookie,classFOO_APP_VIP_CLASS,2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,15,policy-lmoaapdbmaullatnic-emavticphiFnOsOeWrEvBi-cVeIPclassFOOWEB_VIP_CLASS,vLAN666,DB,L3vLAN111,FWvLAN222,www,www,www,vLAN444,AppServers,FW,SLB,app,app,FW,switch1（config）#switch1（config）#inteth1/1switch1（config）#switchmodeacc,switch1（config）#switchaccvlan666,switch1（config）#noshut,switch2（config）#switch2（config）#inteth1/2-3switch2（config）#switchmodeaccswitch2（config）#switchaccvlan111sswwiitcthc2（hc3on（fcigo）n#fniogs）hu#tswitch3（config）#inteth1/4-5switch3（config）#switchmodeacc,switch3（config）#switchaccvlan222,SSLSLBvLAN333,sswwiticth3c（hco4n（ficgo）#nfnoigsh）u#tswitch4（config）#inteth1/6switch4（config）#switchmodeaccswitch4（config）#switchaccvlan333switch4（config）#noshutswitch4（config）#inteth1/7-9,switch4（config）#switchmodeacc,switch4（config）#switchaccWvleanb333,switch4（config）#noshut,vLAN555,vLAN777,switch5（config）#switch5（config）#inteth1/10-11switch5（config）#switchmodeaccswitch5（config）#switchaccvlan444switch5（config）#noshutswitch5（config）#inteth1/11-15switch5（config）#switchmodeaccswitch5（config）#switchaccvlan555switch5（config）#noshutswitch5（config）#monitorsession1sourcevlan,555,switch5（config）#monitorsession1desteth1/16,switch6（config）#switch6（config）#inteth1/16-19switch6（config）#switchmodeaccswitch6（config）#switchaccvlan777switch6（config）#noshutswitch6（config）#monitorsession1sourcevlan777switch6（config）#monitorsession1desteth1/20,rserverwebsrvr280,cryptocsr-paramstestparms,organization-unityou,certfooyou.cer,router（config）#router（config）#inteth1router（config）#ipadd6.6.6.1255.255.255.0router（config）#notshutrouter（config）#inteth2router（config）#ipaddr1.1.1.1255.255.255.0router（config）#noshutrouter（config）#routereigrp100frowu1te（rc（coonnffiig）g#）n#etwork6.6.6.0mask255.255.255.0frwo1u（tceorn（fciogn）f#igi）n#tneettwhor0k/1.1.1.0mask255.255.255.0frwo1u（tceorn（fciogn）f#ign）a#meiipfrouotuetsi0d.e0.000.0.0.06.6.6.254fw1（config）#inteth0/2fw1（config）#nameifwebfront20fw1（config）#objectnetworkwebfront_vipfw1（config）#host6.6.6.6sfwl1b（c1onf（iCg）O#NFsItaGt）ic（webfront,outside）1.1.1.6pfrwo1b（ecohntftipg）h#ttapc-cpersosb-elistoutside_webpermittcpanyhost6.6.6.6eq80fiwn1t（ecrovnaflig3）0#access-listoutside_webpermittcpanyhost6.6.6.6eq443fewx1p（eccotnfsitga）t#usac2c0e0ss2-0g0roupoutside_webininterfaceoutsiderserverhostwebsrvr1descriptionfoowebserveripaddress3.3.3.1inservicerserverhostwebsrvr2descriptionfoowebserverfipw2ad（dcreosnsf3i.3g.）3.#2fiwn2s（ecrovnifcieg）#inteth0/1rsefrwv2e（rcohnofsitg）w#ebnsarmveri3fwebfront20fdwe2s（ccroinpftigo）n#foiontwethse0r/v2erfiwp2（acdodnrfeisgs）#3.3n.a3m.e3ifappfront50fiwn2s（ecrovnifcieg）#objectnetworkappfarm_vipserfvwe2r（fcaornmfihgo）s#thFoOsOtWE5B.F5A.R5M.5,fpsrlo（bbe2onhft（tgpC-OprNnoFabteIG（a）ppfront,webfront）static4.4.4.4,IDS/IPSfrws2e（rcvoenrfiwheobsstrvarcpcpess8rs0v-rl1istweb_to_apppermittcpanyhost4.4.4.4eq8081,idnescriipcteionfooappserver,ipaddress5.5.5.1,inservicerserverwheobsstrvarp3ps8r0vr2inserdveiscceriptionfooappserver,cryptiopgaednderreastse5k.e5y.51.0224fooyou.key,inservice,rservceorunthroystUSappsrvr3descartieptCiaolniforoniaappserveriploacdadlrietsysS5a.n5.J5o.s3e,inosregravniiczeation-namefoo,serverfarmhostFOOAPPFARM,rsseerrviearl-anpupmsbrevr1cr8i0s8c1o123,IDS/IPcSryptroseirmvpeorrtapfptsprv1r22.1830.8114.15anonymousfooyou.cer,rsceirpvheerraRpSpAs_rWvIrT3H_8R0C841_128_MD5,sslc-lparsosx-ymaspertvyipceehFtOtOpWElBo_aSdSbLalancematch-anyFOO_APP,class-mapmatch-allFOO_APP_VIP_CLASS,clapsosl-imcayp-mmaaptcthy-paellloFaOdObSaSlLa_nVcIeP_fCiLrAsStS-matchFOO_APP-MATCH2mcaltacshsvFiOrOt_uAaPlP-address2.2.2.22tcpeqhttpspolicy-smtaipcktyy-pseerlvoeardfbaarlmanscne_cfoiorksite-matchL7-SSL-MATCH,policyl-amsaspL7m_uWlEtBi-matchFOO_APP-VIP,fw3（pcrcoobnmemfohint-gtnp）a-m#,fwc3r（ycpotnofigge）n#eraitnetcestrht0e/s1tparmsfooyou.key,fw3（confiings）e#rvniacmeeifappfront70,fwp3a（rcaomneftiegr）-#mapintypeethss0l/2SSL_PARAMETERS,fw3（confiings）e#rvniacmeeifdbfront90,fw3（confviegr）s#ioonbjTeLcSt1networkdb_cluster,fw3（icnosnefrivgi）c#ehost7.7.7.7,fw3（confkiegy）#fonoaytou（.dkbefyront,appfront）static5.5.5.50,fw3（config2）#maatcccheshst-tlpisvtirwteuba_lt-oa_dadprpespser4m.i4t.4t.c4p4atncypheoqst8058.15.5.50eq1433,15,dbppdbt课件,Servers,Servers,sticky-serverfarmsn_cookie,classFOO_APP_VIP_CLASS,2012Ciscoand/oritsaffiliates.Allrightsreserved.,CiscoConfidential,16,policy-lmoaapdbmaullatnic-emavticphiFnOsOeWrEvBi-cVeIPclassFOOWEB_VIP_CLASS,vLAN666,DB,L3vLAN111,FWvLAN222,www,www,www,vLAN444,Servers,FW,SLB,app,app,FW,switch1（config）#switch1（config）#inteth1/1switch1（config）#switchmodeaccswitch1（config）#switchaccvlan666,switch1（config）#noshut,switch2（config）#switch2（config）#inteth1/2-3switch2（config）#switchmodeaccswitch2（config）#switchaccvlan111sswwiitcthc2（hc3on（fcigo）n#fniogs）hu#tswitch3（config）#inteth1/4-5,switch3（config）#switchaccvlan222,SSLSLBvLAN333,switch4（config）#switchmodeacc,switch4（config）#switchaccWvlaenb333,switch4（config）#noshut,IDS/IPS,vLAN555,vLAN777,switch5（config）#switch5（config）#inteth1/10-11,switch5（config）#switchmodeacc,accvlan4,switch5（config）#noshut,switch5（config）#inteth1/11-15switch5（config）#switchmodeacc,switch5（config）#switchaccvlan555switch5（config）#noshutswitch5（config）#monitorsession1sourcevlan,555,switch5（config）#monitorsession1desteth1/16,switch6（config）#switch6（config）#inteth1/16-19switch6（config）#switchmodeaccswitch6（config）#switchaccvlan777switch6（config）#noshutswitch6（config）#monitorsession1sourcevlan777switch6（config）#monitorsession1desteth1/20,cryptocsr-paramstestparms,organization-unityou,certfooyou.cer,cryptiopgaednderreastse5k.e5y.51.0224fooyou.key,inservice,rservceorunthroystUSappsrvr3descartieptCiaolniforoniaappserveriploacdadlrietsysS5a.n5.J5o.s3e,inosregravniiczeation-namefoo,serverfarmhostFOOAPPFARM,rsseerrviearl-anpupmsbrevr1cr8i0s8c1o123,IDS/IPcSryptroseirmvpeorrtapfptsprv1r22.1830.8114.15anonymousfooyou.cer,rsceirpvheerraRpSpAs_rWvIrT3H_8R0C841_128_MD5,sslc-lparsosx-ymaspertvyipceehFtOtOpWElBo_aSdSbLalancematch-anyFOO_APP,class-mapmatch-allFOO_APP_VIP_CLASS,clapsosl-imcayp-mmaaptcthy-paellloFaOdObSaSlLa_nVcIeP_fCiLrAsStS-matchFOO_APP-MATCH2mcaltacshsvFiOrOt_uAaPlP-address2.2.2.22tcpeqhttpspolicy-smtaipcktyy-pseerlvoeardfbaarlmanscne_cfoiorksite-matchL7-SSL-MATCH,policyl-amsaspL7m_uWlEtBi-matchFOO_APP-VIP,fw3（pcrcoobnmemfohint-gtnp）a-m#,fwc3r（ycpotnofigge）n#eraitnetcestrht0e/s1tparmsfooyou.key,fw3（confiings）e#rvniacmeeifappfront70,fwp3a（rcaomneftiegr）-#mapintypeethss0l/2SSL_PARAMETERS,fw3（confiings）e#rvniacmeeifdbfront90,fw3（confviegr）s#ioonbjTeLcSt1networkdb_cluster,fw3（icnosnefrivgi）c#ehost7.7.7.7,fw3（confkiegy）#fonoaytou（.dkbefyront,appfront）static5.5.5.50,fw3（config2）#maatcccheshst-tlpisvtirwteuba_lt-oa_dadprpespser4m.i4t.4t.c4p4atncypheoqst8058.15.5.50eq1433,www,www,switch5（config）#switch需要增加更44多,的WEB服务器,sswwiitcthc3（hc4on（fcigo）n#fsiwigt）ch#modeacc,sswwiticth43c（hco4n（ficgo）#nfinnoitgsh）ue#th2/7-9,sswwiittcchh44（ccoonnffiigg）#siwnittchetmhod1e/6accsswwiittcchh44（ccoonnffiigg）#sswwiittcchhamcocdeavclcan333sswwiittcchh44（ccoonnffiigg）#nsowisthcuhtaccvlan333switch4（config）#noshutswitch4（config）#inteth1/7-9,router（config）#router（config）#inteth1router（config）#ipadd6.6.6.1255.255.255.0router（config）#notshutrouter（config）#inteth2router（config）#ipaddr1.1.1.1255.255.255.0router（config）#noshutrouter（config）#routereigrp100rfowut1e（r（ccoonnffigi）g#）n#etwork6.6.6.0mask255.255.255.0rfowu1t（ecro（ncfoingf）i#g）i#ntnetewtohrk0/11.1.0mask255.255.255.0rfowu1t（ecro（ncfoingf）i#g）n#ameiipfrouotuets0i.d0e.00.00.0.0.06.6.6.254fw1（config）#inteth0/2fw1（config）#nameifwebfront20fw1（config）#objectnetworkwebfront_vipfw1（config）#host6.6.6.6fswl1（bc1onf（igC）O#NFsItaGt）ic（webfront,outside）1.1.1.6fpwr1o（bceonhftitgp）#httapc-cpersosb-elistoutside_webpermittcpanyhost6.6.6.6eq80fwi1n（tceornvfailg）3#0access-listoutside_webpermittcpanyhost6.6.6.6eq