|
Advanced system architecture
Provides continuous bandwidth upgrade with advanced CLOS multi-level multi-plane switching architecture.
Orthogonal stencil design: The S10500X service board and the switching stencil adopt a completely orthogonal design (90 degrees). The cross-line card service traffic is directly switched on the stencil through the orthogonal connector, and the backplane trace is reduced to zero (maximum Avoiding signal attenuation), greatly improving system bandwidth and evolution capability, and the whole machine capacity can be smoothly extended to hundreds of Tbps;
Supports 40GE and 100GE Ethernet standards to meet the needs of non-blocking campus networks and future development needs.
Independent switching network board, control engine and switching network board hardware are independent of each other, adopt 5 switching plane design, and support 4+1 redundancy of stencil to maximize equipment reliability, and provide continuous upgrade of subsequent product bandwidth. Guarantee.
The fan frame and power supply frame are redundantly designed to cope with unexpected situations and greatly improve the overall reliability of the device.
Innovative distributed multi-engine design
The S10500X features an innovative hardware design that provides powerful control and millisecond-level reliability through a fully distributed, independent control engine, inspection engine, and maintenance engine.
The distributed control engine provides a powerful control processing system for all service boards. It can easily handle various protocol packets and control packets, and supports fine control of protocol packets to provide a comprehensive anti-protocol packet attack capability.
A distributed detection engine, which can detect fast faults such as distributed BFD and OAM, and associates with the protocol of the control plane to support fast protection switching and fast convergence. It can implement millisecond-level fault detection and ensure service is not guaranteed. Interrupt
The distributed maintenance engine, the intelligent CPU system supports the power supply intelligent management, and can support the board to power on and off sequentially (reducing the power impact caused by the simultaneous power-on of the board, improving the life of the device, reducing the electromagnetic radiation, and reducing the system power consumption). Online status check.
IRF2 (Second Generation Intelligent Resilient Architecture - Horizontal Virtualization)
For the horizontal service integration of the campus network, the S10500X supports IRF2 (Second Generation Intelligent Resilient Architecture) technology, which virtualizes multiple high-end devices into one logical device. It is the industry's leading core switch product supporting 4-box virtualization. Reliability, distribution and manageability have strong advantages, mainly reflected in three aspects:
Reliability: Through the patented route hot backup technology, redundant backup of all information of the control plane and data plane and uninterrupted three-layer forwarding are realized in the entire virtual architecture, which greatly enhances the reliability and high performance of the virtual architecture. At the same time, single point of failure is eliminated and business interruption is avoided;
Distribution: Through the distributed cross-device link aggregation technology, load balancing and mutual backup of multiple uplinks are implemented, thereby improving the redundancy of the entire network architecture and the utilization of link resources;
Manageability: The entire flexible architecture shares an IP management, simplifying network device management, simplifying network topology management, improving operational efficiency, and reducing maintenance costs.
IRF3.1: (3rd Generation Intelligent Resilient Architecture Upgrade - Vertical Virtualization)
The S10500X series supports heterogeneous virtualization in the vertical dimension. The core and access devices form a vertical logical virtual device through IRF3.1 technology. The AC and AP are managed and configured in a unified manner. As a remote interface board, it is added to the main equipment system to achieve the expansion of I/O port capability and centralized control management. IRF3.1 technology can simplify management, greatly reduce network management nodes; simplify wiring, layer 2 becomes a layer, saves horizontal connection cables; finally realizes data forwarding plane virtualization, and simplifies service deployment and automatic orchestration.
Data Center Virtualization and Network Convergence Technology
As the core equipment of enterprise-class cloud computing data center, S10500X provides a series of technical solutions in cloud computing data center virtualization and network convergence:
TRILL/SPB:
As the size of servers and switches increases, data center networks tend to flatten the network architecture to facilitate maintenance management, which requires building a large Layer 2 network; the S10500X supports large data centers through TRILL or SPB technologies. The construction of a two-tier network. Data Center's Translatent Interconnection of Lots of Links (TRB) and SPB (Shortest Path Bridging) protocol combine the simplicity, flexibility and stability of the Layer 2 layer with the stability and scalability of the Layer 2 layer. High-performance organic integration provides higher density ports and a flatter network architecture to meet the access needs of large-scale servers in the data center.
EVI (Ethernet Virtual Interconnection) technology
EVI is an advanced "MAC in IP" technology. EVI solution deployment is very simple. Based on the existing IP network, it provides flexible Layer 2 interconnection for distributed physical sites. EVI solution deployment is very simple, compatible with the user's existing network, protecting user investment.
VXLAN (Virtual eXtensible LAN, Scalable Virtual Local Area Network)
VXLAN is a Layer 2 VPN technology based on IP network and encapsulated in "MAC in UDP". VXLAN can provide Layer 2 interconnection for distributed physical sites based on existing service providers or enterprise IP networks, and can provide service isolation for different tenants.
EVB (Edge Virtual Bridging)
The virtual Ethernet port Aggregator technology is used to upload the network traffic generated by the virtual machine to the physical switch connected to the server for processing. This not only implements traffic forwarding between virtual machines, but also solves virtual machine traffic policing and access control policy deployment. problem.
FCoE (Fibre Channel over Ethernet) protocol.
FCoE technology is mainly used to solve the problem of heterogeneous integration of LAN networks and storage networks in cloud computing data centers. Through the deployment of FCoE and CEE (Converged Enhanced Ethernet) technology, the convergence of the data center front-end network and the back-end network architecture can be realized, and the technical problems of data, computing and storage triple-network splitting can be solved, thereby greatly reducing Data center procurement and expansion costs.
Multi-service convergence based on open architecture
The S10500X inherits H3C's open architecture design concept, Open Application Architecture (OAA), which forwards L2 to L3 messages from traditional campus network core switches.
Single function, redefined as integrated L2 to L7 deep service awareness, wired and wireless integration, active and passive integration, IPv4/IPv6 integration, network traffic analysis and control
Multi-service bearer platform that integrates multiple services.
Support OAA security control card such as firewall module, ADE module, NSM module, etc., can extend security protection function to each port of the switch; support virtual firewall
Function, can provide VPN users with a network firewall rental service. Achieve seamless integration of network services and security services.
Support wireless control module to realize wired and wireless integrated solution. The wireless control module provides a wealth of business capabilities, including sophisticated user control management and a complete RF tube
Security and security mechanisms, fast roaming, superior QoS, and support for IPv6; the wireless control module achieves endpoint access defense for wireless access users through linkage with the security policy server, improving the security of the entire network.
A tightly coupled OAA is supported. The OAA board can be loaded directly into the switch and exists as a specific board of the switch.
Comprehensive IPv6 solution
The S10500X series supports the IPv6 protocol family and supports IPv6 static routes, RIPng, OSPFv3, IS-ISv6, BGP4+ and other IPV6 routing protocols. It supports rich IPv4 to IPv6 transition technologies, including IPv6 manual tunnels, 6to4 tunnels, ISATAP tunnels, and GREs. Tunneling technologies such as tunnels and IPv4-compatible auto-configuration tunnels ensure a smooth transition from IPv4 to IPv6.
Hardware level encryption technology
The S10500X supports the hardware-level encryption technology Macsec technology (802.1ae), which is different from the traditional end-to-end basic application layer protection soft encryption technology. Macsec protects the management of bridged networks and other data by encrypting the password technology of the data source to protect the information integrity. Reprotection and confidentiality services are provided. By confirming the frame sent by the station, the attack on the Layer 2 protocol can be protected from the root.
|
