From 110cd211cc5d2ad8fd116fe7fdf9f7c007f5a8d8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marc=20Sch=C3=B6chlin?= Date: Tue, 10 Dec 2024 09:03:05 +0100 Subject: [PATCH 1/3] diagram network setup MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Marc Schöchlin --- docs/src/overview/Implementation-Overview.drawio.svg | 4 ++++ docs/src/overview/networking.md | 2 ++ 2 files changed, 6 insertions(+) create mode 100644 docs/src/overview/Implementation-Overview.drawio.svg diff --git a/docs/src/overview/Implementation-Overview.drawio.svg b/docs/src/overview/Implementation-Overview.drawio.svg new file mode 100644 index 0000000000..043b55613c --- /dev/null +++ b/docs/src/overview/Implementation-Overview.drawio.svg @@ -0,0 +1,4 @@ + + + +
Internet
Uplink
Spine
Switch
Leaf
Switch
Tenant
Server(s)
Manage-
ment
Switch
Tenant
Firewall
Exit
Switch
Manage-
ment
Server
L3 (+ L2)
L3
L3
L3
L2
L2
L3
L3 (+ L2)
L2
L3
FRR
Internet
Uplink
DHCP
FRR
FRR
FRR
FRR
FRR
FRR
EVPN
for
Tenant-to-Tenant
Connectivity
EVPN
for L2 Installation
Network
 \ No newline at end of file diff --git a/docs/src/overview/networking.md b/docs/src/overview/networking.md index 0bf0850764..324d544b6d 100644 --- a/docs/src/overview/networking.md +++ b/docs/src/overview/networking.md @@ -190,6 +190,8 @@ Reference: See the [CLOS overview picture](#CLOS) | Management Switch | Connected to the management port of each of the network switches. | +![Illustration about the implementation](Implementation-Overview.drawio.svg) + Tenant servers are organized into a layer called projects. In case those tenant servers require access to or from external networks, a new tenant server to function as a firewall is created. Leaf and spine switches form the fundament of the CLOS network to facilitate redundancy, resilience and scalability. Exit switches establish connectivity to or from external networks. Management Switch and Management Server are mandatory parts that build a management network to access the network switches for administration. To operate the CLOS topology, software defined configuration to enable BGP, VRF, EVPN and VXLAN must be set up. From deb7161ace321479566e7108fac20fb495b13116 Mon Sep 17 00:00:00 2001 From: Gerrit Date: Wed, 11 Dec 2024 14:01:23 +0100 Subject: [PATCH 2/3] Illustrations for physical wiring and VRF separation. --- .../Implementation-Overview.drawio.svg | 4 - .../network-physical-wiring.drawio.svg | 510 ++++++++++++++++++ docs/src/overview/network-vrfs.drawio.svg | 496 +++++++++++++++++ docs/src/overview/networking.md | 7 +- 4 files changed, 1012 insertions(+), 5 deletions(-) delete mode 100644 docs/src/overview/Implementation-Overview.drawio.svg create mode 100644 docs/src/overview/network-physical-wiring.drawio.svg create mode 100644 docs/src/overview/network-vrfs.drawio.svg diff --git a/docs/src/overview/Implementation-Overview.drawio.svg b/docs/src/overview/Implementation-Overview.drawio.svg deleted file mode 100644 index 043b55613c..0000000000 --- a/docs/src/overview/Implementation-Overview.drawio.svg +++ /dev/null @@ -1,4 +0,0 @@ - - - -
Internet
Uplink
Spine
Switch
Leaf
Switch
Tenant
Server(s)
Manage-
ment
Switch
Tenant
Firewall
Exit
Switch
Manage-
ment
Server
L3 (+ L2)
L3
L3
L3
L2
L2
L3
L3 (+ L2)
L2
L3
FRR
Internet
Uplink
DHCP
FRR
FRR
FRR
FRR
FRR
FRR
EVPN
for
Tenant-to-Tenant
Connectivity
EVPN
for L2 Installation
Network
 \ No newline at end of file diff --git a/docs/src/overview/network-physical-wiring.drawio.svg b/docs/src/overview/network-physical-wiring.drawio.svg new file mode 100644 index 0000000000..de80b9b32d --- /dev/null +++ b/docs/src/overview/network-physical-wiring.drawio.svg @@ -0,0 +1,510 @@ + + + + + + + + + + + + + +
+
+
+ Leaf Layer +
+
+
+ + + Leaf La... + + + + + + + +
+
+
+ Spine Layer +
+
+
+ + + Spine L... + + + + + + + + + +
+
+
+ Server Layer +
+
+
+ + + Server... + + + + + + + + + +
+
+
+ Leaf 1 +
+
+
+ + + Leaf 1 + + + + + + + +
+
+
+ Firewalls +
+ and +
+ Machines +
+
+
+ + + Firewalls... + + + + + + + + + +
+
+
+ Leaf 2 +
+
+
+ + + Leaf 2 + + + + + + + + + +
+
+
+ Spine 1 +
+
+
+ + + Spine 1 + + + + + + + + +
+
+
+ Exit 1 +
+
+
+ + + Exit 1 + + + + + + + + + + + +
+
+
+ Leaf 3 +
+
+
+ + + Leaf 3 + + + + + + + +
+
+
+ Firewalls +
+ and +
+ Machines +
+
+
+ + + Firewalls... + + + + + + + + + +
+
+
+ Leaf 4 +
+
+
+ + + Leaf 4 + + + + + + + + + +
+
+
+ Spine 2 +
+
+
+ + + Spine 2 + + + + + + + + +
+
+
+ Exit 1 +
+
+
+ + + Exit 1 + + + + + + + +
+
+
+ + External +
+ Networks + +
+
+
+ + + External... + + + + + + + +
+
+
+ Exit Layer +
+
+
+ + + Exit La... + + + + + + + + + +
+
+
+ Management Leaf 1 +
+
+
+ + + Management Le... + + + + + + + + +
+
+
+ Management Leaf 2 +
+
+
+ + + Management Le... + + + + + + + + +
+
+
+ Management Spine 1 +
+
+
+ + + Management Sp... + + + + + + + + + +
+
+
+ Management Spine 2 +
+
+
+ + + Management Sp... + + + + + + + + +
+
+
+ Management Firewall 1 +
+
+
+ + + Management Fi... + + + + + + + + +
+
+
+ Management Firewall 2 +
+
+
+ + + Management Fi... + + + + + + + +
+
+
+ + metal-stack +
+ Control Plane + +
+
+
+ + + metal-stack... + + + + + + + + + +
+
+
+ Management Server 1 +
+
+
+ + + Management Se... + + + + + + + + +
+
+
+ Management Server 2 +
+
+
+ + + Management Se... + + + + + + + +
+
+
+ Server BMCs +
+
+
+ + + Server BMCs + + + + + + + + + +
+
+
+ Switch +
+ Administration +
+
+
+ + + Switch... + + + + + + + + + Text is not SVG - cannot display + + + + diff --git a/docs/src/overview/network-vrfs.drawio.svg b/docs/src/overview/network-vrfs.drawio.svg new file mode 100644 index 0000000000..a274bb0b42 --- /dev/null +++ b/docs/src/overview/network-vrfs.drawio.svg @@ -0,0 +1,496 @@ + + + + + + + + + + + + +
+
+
+ Leaf Layer +
+
+
+ + + Leaf La... + + + + + + + +
+
+
+ Spine Layer +
+
+
+ + + Spine L... + + + + + + + +
+
+
+ Exit Layer +
+
+
+ + + Exit La... + + + + + + + +
+
+
+ Server Layer +
+
+
+ + + Server... + + + + + + + + + +
+
+
+ Internet Pod +
+
+
+ + + Internet Pod + + + + + + + +
+
+
+ Data Center Pod +
+
+
+ + + Data Center Pod + + + + + + + +
+
+
+ Internet VRF +
+
+
+ + + Internet VRF + + + + + + + +
+
+
+ DC VRF +
+
+
+ + + DC VRF + + + + + + + +
+
+
+ + Firewall Tenant 1 + +
+
+
+ + + Firewall Tenant 1 + + + + + + + +
+
+
+ Internet VRF +
+
+
+ + + Internet VRF + + + + + + + +
+
+
+ Tenant 1 VRF +
+
+
+ + + Tenant 1 VRF + + + + + + + + +
+
+
+ Machine +
+ Tenant 1 +
+
+
+ + + Machine... + + + + + + + + +
+
+
+ Machine +
+ Tenant 1 +
+
+
+ + + Machine... + + + + + + + + +
+
+
+ Machine +
+ Tenant 1 +
+
+
+ + + Machine... + + + + + + + + +
+
+
+ Machine +
+ Tenant 2 +
+
+
+ + + Machine... + + + + + + + + +
+
+
+ Machine +
+ Tenant 2 +
+
+
+ + + Machine... + + + + + + + + +
+
+
+ Machine +
+ Tenant 2 +
+
+
+ + + Machine... + + + + + + + +
+
+
+ + VXLAN + +
+
+
+ + + VXLAN + + + + + + + +
+
+
+ Tenant 1 VRF +
+
+
+ + + Tenant 1 VRF + + + + + + + +
+
+
+ VXLAN +
+
+
+ + + VXLAN + + + + + + + +
+
+
+ Tenant 2 VRF +
+
+
+ + + Tenant 2 VRF + + + + + + + + + + + + + +
+
+
+ Firewall Tenant 2 +
+
+
+ + + Firewall Tenant 2 + + + + + + + +
+
+
+ Tenant 2 VRF +
+
+
+ + + Tenant 2 VRF + + + + + + + +
+
+
+ DC VRF +
+
+
+ + + DC VRF + + + + + + + + + + + + + +
+
+
+ VXLAN +
+
+
+ + + VXLAN + + + + + + + +
+
+
+ VXLAN +
+
+
+ + + VXLAN + + + + + + + + + Text is not SVG - cannot display + + + + diff --git a/docs/src/overview/networking.md b/docs/src/overview/networking.md index 324d544b6d..739f9b05a3 100644 --- a/docs/src/overview/networking.md +++ b/docs/src/overview/networking.md @@ -189,13 +189,18 @@ Reference: See the [CLOS overview picture](#CLOS) | Management Server | Jump-host to access all network switches within the CLOS topology for administrative purpose. | | Management Switch | Connected to the management port of each of the network switches. | +![Physical Wiring](network-physical-wiring.drawio.svg) -![Illustration about the implementation](Implementation-Overview.drawio.svg) +> Picture 5: This illustration shows an example of a suitable physical wiring inside a metal-stack partition. Tenant servers are organized into a layer called projects. In case those tenant servers require access to or from external networks, a new tenant server to function as a firewall is created. Leaf and spine switches form the fundament of the CLOS network to facilitate redundancy, resilience and scalability. Exit switches establish connectivity to or from external networks. Management Switch and Management Server are mandatory parts that build a management network to access the network switches for administration. To operate the CLOS topology, software defined configuration to enable BGP, VRF, EVPN and VXLAN must be set up. +![Network VRFs across the different switch layers](network-vrfs.drawio.svg) + +> Picture 6: This illustration illustrates VRF tenant separation and shows VRF termination happening on the firewall for the tenant VRF and external network VRFs. + ### Network Operating Systems SONiC as the network operating system will be installed on all network switches (leaves, spines, exit switches) within the CLOS topology. SONiC cannot be installed on bare metal servers that require BGP/EVPN but does not have a switching silicon. From cab2f3118f5797beb8d372e8152eb7a64209f312 Mon Sep 17 00:00:00 2001 From: Gerrit Date: Wed, 11 Dec 2024 14:04:25 +0100 Subject: [PATCH 3/3] Texts. --- docs/src/overview/networking.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/src/overview/networking.md b/docs/src/overview/networking.md index 739f9b05a3..3cf350c310 100644 --- a/docs/src/overview/networking.md +++ b/docs/src/overview/networking.md @@ -199,7 +199,7 @@ To operate the CLOS topology, software defined configuration to enable BGP, VRF, ![Network VRFs across the different switch layers](network-vrfs.drawio.svg) -> Picture 6: This illustration illustrates VRF tenant separation and shows VRF termination happening on the firewall for the tenant VRF and external network VRFs. +> Picture 6: This illustration shows the VRF tenant separation and VRF termination happening on the firewall for the tenant VRF and external network VRFs. ### Network Operating Systems