Data Center Technology
| Type of study | Follow-up Master |
|---|---|
| Language of instruction | Czech |
| Code | 460-4173/01 |
| Abbreviation | TDC |
| Course title | Data Center Technology |
| Credits | 5 |
| Coordinating department | Department of Computer Science |
| Course coordinator | Mgr. Ing. Michal Krumnikl, Ph.D. |
Subject syllabus
Lectures:
* Data center network infrastructure – overview of logical modules and their functions. Typical scalable and redundant physical topologies, PODs concept. Implementation of shared infrastructures and logical separation of customers (shared L3 with filtering, Private VLAN, VLANs + VRF Lite with separation of routing processes, MPLS/VPN with access to shared parts). Relationship between logical and physical topology, integration of network services (firewalls, load balancers). Overview of typical hosted logical topologies and security zone models. Datacenter Ethernet technology.
* Communication interfaces for high-speed data transfer (Fibre Channel, InfiniBand, FCoE) – port security, fabric binding, FC network interconnection over IP (FCIP). Traffic optimization: traffic engineering and cost profile.
* MPLS in frame mode as a basic technology for data centers (DC) and service providers (SP). Structure and principles of operation (control plane vs. data plane). Label Distribution Protocol (LDP) and its role in MPLS. LIB and LFIB tables and their relationship to interior routing protocols (IGP). BGP-free core concept and MPLS deployment for IPv6 (6PE).
* Data center network design. Ensuring reliable data center operation and optimizing their efficiency – data throughput management, cloud computing and infrastructure (facilities), energy efficiency and PUE (Power Usage Effectiveness) metrics. Data center security standards (TIER certification, rating).
* Multi-site data centers – reasons for L2 extensions and related issues, including Spanning Tree limitations. Datacenter part interconnection options: virtual chassis, EVPN factories, Cisco Application-Centric Infrastructure (ACI), VxLANs and segment routing. Alternative approaches without L2 extensions, such as MPLS/VPN with partial VPN overlap. Implementation of logical topologies in data centers, deployment of centralized services and alternative Internet connectivity options. Overview of 6VPE technology for IPv6 VPN.
* Use of MPLS in backbone networks and service providers: L2 interconnection (EoMPLS, AToM), MPLS QoS mechanisms and link protection (Link/Node Protection). Traffic Engineering (MPLS TE) and RSVP protocol. MPLS domain interconnection options, Carrier Supporting Carrier (CsC) concept
* Data center access options using L3 VPN: GRE and IPSec tunneling technologies for secure communication. Multipoint IPSec solution (GDOI/GETVPN) for scalable encrypted connectivity. Dynamic L3 VPN using DMVPN for flexible and efficient network topology.
* Technologies for transition to IPv6: tunneling and translation mechanisms (6to4, ISATAP, NAT64, 6rd and others).
* Protocols and tools for management, monitoring and diagnostics of computer networks, data centers and computing infrastructures: SNMP (including MIB and RMON) for network management, network traffic analysis using NetFlow and NetConf configuration interface.
* Service models of cloud services and methods of their deployment: SaaS, PaaS and IaaS. Software-Defined Networks (SDN) – concept, advantages and relationship to cloud environments.
* Technologies used within Public and Private Cloud environments (Amazon Web Services, Microsoft Azure, Google Cloud) and virtualization platforms: VMware NSX, OpenStack (Contrail, OpenVSwitch, OVSDB).
Lab exercises:
* Introduction to network laboratory, reminder of Cisco router configuration. VRF/lite, IBGP terminated in VRF, local VRF import/export, IGP in VRF, separate VRF on PE for CE-facing interface and core VRF, import and export between them.
* Multitenant DCs based on VRF and VLAN – Implementation of redundant logical topology in the physical network (HSRP/VRRP+static routing/BGP). Local import/export of routes between VRFs, bridging between VRFs and into the global address space by static routing.
* Fundamentals of Fibre Channel technology, Fibre Channel over Ethernet, Port Security.
* MPLS – basic configuration, monitoring LDP and its relationship to routing protocol, FIB, LFIB, tracing labeled packets. BGP-free core. 6PE
* L3 MPLS VPN – basic configuration. L3 MPLS VPN with partial overlap (export maps).
* L3 MPLS VPN – PE-CE routing.
* AToM, OSPF LFA.
* Traffic engineering using Segment Routing.
* EVPN/VxLAN.
* GRE tunnels and their use. IPSec (using VTI). Dynamic Multi-point Virtual Private Network (DMVPN). GET VPN.
* Static tunnels 6/4 and 4/6. Dynamic tunnels – 6to4 (ISATAP)
* SNMP, Netflow. (SPAN), Netconf/YANG.
* Basic OpenStack configuration, AWS CLI.
* Data center network infrastructure – overview of logical modules and their functions. Typical scalable and redundant physical topologies, PODs concept. Implementation of shared infrastructures and logical separation of customers (shared L3 with filtering, Private VLAN, VLANs + VRF Lite with separation of routing processes, MPLS/VPN with access to shared parts). Relationship between logical and physical topology, integration of network services (firewalls, load balancers). Overview of typical hosted logical topologies and security zone models. Datacenter Ethernet technology.
* Communication interfaces for high-speed data transfer (Fibre Channel, InfiniBand, FCoE) – port security, fabric binding, FC network interconnection over IP (FCIP). Traffic optimization: traffic engineering and cost profile.
* MPLS in frame mode as a basic technology for data centers (DC) and service providers (SP). Structure and principles of operation (control plane vs. data plane). Label Distribution Protocol (LDP) and its role in MPLS. LIB and LFIB tables and their relationship to interior routing protocols (IGP). BGP-free core concept and MPLS deployment for IPv6 (6PE).
* Data center network design. Ensuring reliable data center operation and optimizing their efficiency – data throughput management, cloud computing and infrastructure (facilities), energy efficiency and PUE (Power Usage Effectiveness) metrics. Data center security standards (TIER certification, rating).
* Multi-site data centers – reasons for L2 extensions and related issues, including Spanning Tree limitations. Datacenter part interconnection options: virtual chassis, EVPN factories, Cisco Application-Centric Infrastructure (ACI), VxLANs and segment routing. Alternative approaches without L2 extensions, such as MPLS/VPN with partial VPN overlap. Implementation of logical topologies in data centers, deployment of centralized services and alternative Internet connectivity options. Overview of 6VPE technology for IPv6 VPN.
* Use of MPLS in backbone networks and service providers: L2 interconnection (EoMPLS, AToM), MPLS QoS mechanisms and link protection (Link/Node Protection). Traffic Engineering (MPLS TE) and RSVP protocol. MPLS domain interconnection options, Carrier Supporting Carrier (CsC) concept
* Data center access options using L3 VPN: GRE and IPSec tunneling technologies for secure communication. Multipoint IPSec solution (GDOI/GETVPN) for scalable encrypted connectivity. Dynamic L3 VPN using DMVPN for flexible and efficient network topology.
* Technologies for transition to IPv6: tunneling and translation mechanisms (6to4, ISATAP, NAT64, 6rd and others).
* Protocols and tools for management, monitoring and diagnostics of computer networks, data centers and computing infrastructures: SNMP (including MIB and RMON) for network management, network traffic analysis using NetFlow and NetConf configuration interface.
* Service models of cloud services and methods of their deployment: SaaS, PaaS and IaaS. Software-Defined Networks (SDN) – concept, advantages and relationship to cloud environments.
* Technologies used within Public and Private Cloud environments (Amazon Web Services, Microsoft Azure, Google Cloud) and virtualization platforms: VMware NSX, OpenStack (Contrail, OpenVSwitch, OVSDB).
Lab exercises:
* Introduction to network laboratory, reminder of Cisco router configuration. VRF/lite, IBGP terminated in VRF, local VRF import/export, IGP in VRF, separate VRF on PE for CE-facing interface and core VRF, import and export between them.
* Multitenant DCs based on VRF and VLAN – Implementation of redundant logical topology in the physical network (HSRP/VRRP+static routing/BGP). Local import/export of routes between VRFs, bridging between VRFs and into the global address space by static routing.
* Fundamentals of Fibre Channel technology, Fibre Channel over Ethernet, Port Security.
* MPLS – basic configuration, monitoring LDP and its relationship to routing protocol, FIB, LFIB, tracing labeled packets. BGP-free core. 6PE
* L3 MPLS VPN – basic configuration. L3 MPLS VPN with partial overlap (export maps).
* L3 MPLS VPN – PE-CE routing.
* AToM, OSPF LFA.
* Traffic engineering using Segment Routing.
* EVPN/VxLAN.
* GRE tunnels and their use. IPSec (using VTI). Dynamic Multi-point Virtual Private Network (DMVPN). GET VPN.
* Static tunnels 6/4 and 4/6. Dynamic tunnels – 6to4 (ISATAP)
* SNMP, Netflow. (SPAN), Netconf/YANG.
* Basic OpenStack configuration, AWS CLI.
E-learning
Materials are available at https://lms.vsb.cz/?lang=en
Literature
Advised literature
1. KRATTIGER, Lukas; KAPADIA, Shyam a JANSEN, David. Building Data Centers with VXLAN BGP EVPN: A Cisco NX-OS Perspective. Cisco Press, 2017. ISBN 9780134514925 , 477 pages.
2. RAJ, Pethuru a RAMAN, Anupama. Software-Defined Cloud Centers: Operational and Management Technologies and Tools. Springer, 2019. ISBN 978-3-030-08752-4 , 242 pages.
3. JORGE MARX GÓMEZ; MORA, Manuel; MAHESH S. RAISINGHANI; NEBEL, Wolfgang
a RORY V. O'CONNOR. Engineering and Management of Data Centers: An IT Service Management Approach. Springer, 2018. ISBN 978-3-319-87946-8 , 290 pages.
4. BARROSO, Luiz Andre; PARTHASARATHY, Ranganathan a HOLZLE, Urs. The datacenter as a computer: designing warehouse-scale machines. Third edition. Cham, Switzerland: Springer, 2022. ISBN 978-3-031-01761-2 , 189 pages.
5. Yeluri R., Castro-Leon E.: Building the Infrastructure for Cloud Security: A Solutions View. Apress, 2013, ISBN 978-1-4302-6145-2 , 270 pages.
6. Pepelnjak, I., Guichard, J.: MPLS and VPN Architectures, Cisco Press, 2012, ISBN 1-58714-323-2 , 420 pages.
7. Gustavo A. A. Santana: Data Center Virtualization Fundamentals: Understanding Techniques and Designs for Highly Efficient Data Centers with Cisco Nexus, UCS, MDS, and Beyond, Cisco Press, 2013, ISBN 978-1587143243 , 960 pages.
8. Uptime Institute: Tier Standard: Operational Sustainability, 2013.
2. RAJ, Pethuru a RAMAN, Anupama. Software-Defined Cloud Centers: Operational and Management Technologies and Tools. Springer, 2019. ISBN 978-3-030-08752-4 , 242 pages.
3. JORGE MARX GÓMEZ; MORA, Manuel; MAHESH S. RAISINGHANI; NEBEL, Wolfgang
a RORY V. O'CONNOR. Engineering and Management of Data Centers: An IT Service Management Approach. Springer, 2018. ISBN 978-3-319-87946-8 , 290 pages.
4. BARROSO, Luiz Andre; PARTHASARATHY, Ranganathan a HOLZLE, Urs. The datacenter as a computer: designing warehouse-scale machines. Third edition. Cham, Switzerland: Springer, 2022. ISBN 978-3-031-01761-2 , 189 pages.
5. Yeluri R., Castro-Leon E.: Building the Infrastructure for Cloud Security: A Solutions View. Apress, 2013, ISBN 978-1-4302-6145-2 , 270 pages.
6. Pepelnjak, I., Guichard, J.: MPLS and VPN Architectures, Cisco Press, 2012, ISBN 1-58714-323-2 , 420 pages.
7. Gustavo A. A. Santana: Data Center Virtualization Fundamentals: Understanding Techniques and Designs for Highly Efficient Data Centers with Cisco Nexus, UCS, MDS, and Beyond, Cisco Press, 2013, ISBN 978-1587143243 , 960 pages.
8. Uptime Institute: Tier Standard: Operational Sustainability, 2013.