Shulou(Shulou.com)05/31 Report--

Today, I will talk to you about how to create a virtual private line with ZStack hybrid cloud + SD-WAN. Many people may not know much about it. In order to make you understand better, the editor has summarized the following for you. I hope you can get something according to this article.

In the private cloud, ZStack allows users to customize the network architecture and load and unload various network services. When you need to cross WAN resources to contact another ZStack or public cloud, you can dynamically schedule WAN resources through the capability of DAHO, so as to establish a high-speed and stable private line between the two points. The whole process of users can be fully self-service, effective in seconds, and have a variety of flexible billing strategies for payment by usage.

How to complete the configuration of ZStack local network

Before creating a Direct Connect, we need to understand how ZStack manages the VPC. ZStack manages VPC through cloud routing, supports separate management of layer 2 and layer 3 networks, and can load / unload various network services, such as elastic IP, load balancer, NAT, etc.

Let's first create an internal network within the ZStack. ZStack defines the internal network as private network, public network and system network. The private network carries the operation of the CVM, the public network defines the network to which the CVM accesses, and the system network loads various network devices (including virtual network devices) in the ZStack. This three-network separation mode allows users to manage their own networks clearly.

In simple cases, ZStack can merge the public network with the management network, that is, external access through the management network. However, ZStack, since the purpose of Direct Connect is to connect with the public cloud through Direct Connect, we need to create a separate public network for the CVM. The practice is as follows:

1. Create a management layer 2 network and a layer 3 network, where the gateway address of the layer 3 network is the address of the management node

two。 Create a private layer 2 network and a layer 3 network, where the gateway address is the gateway address of cloud routing

3. Create a public layer 2 network and a layer 3 network, in which the vlan of the layer 2 network needs to communicate with the POP point of the DAHO layer 2, and the gateway address (assuming A) and cidr of the layer 3 network are recorded and need to be used later.

After completing the above work, we can create a vm on the VPC at will. Next, let's see how to connect this vm with Aliyun's ecs.

How to set VPC on Ali Cloud through ZStack

ZStack has taken over all the VPC functions on Ali Cloud, and we can easily manage Ali Cloud resources in the hybrid cloud page of ZStack.

We first add an area to which we want to connect, such as East China 2, and then add an availability zone to the corresponding area, such as East China 2-C. At this point, ZStack will intelligently synchronize all the user's resources in East China 2Mel C, such as the VPC created by the user in advance. If the user has not created it in advance, you can also create a VPC in ZStack and a virtual switch under the corresponding VPC. Next, the user can create an ecs in this vpc to test connectivity to the vm in the ZStack. The establishment of the dedicated line is through Aliyun's high-speed channel service, so there needs to be a border router to help connect. But in ZStack+DAHO 's scheme, users do not need to create additional border routers, and everything is done intelligently.

How to create DAHO Direct Connect

When users go to the DAHO directory of ZStack, they can see the connection points of various data centers and public clouds assigned to users by DAHO. Users simply select a pair of connection points and enter the required bandwidth, as well as the vlan number of the ZStack public network and a pair of public network accessible cidr addresses in the first step, where the address A must be the "local gateway" on the page, and then ZStack will automatically call DAHO and Aliyun's API Complete the following necessary processes, such as "create a dedicated line", "create a router interface", "create a border router", "modify a gateway address", "set a route" and so on. After the virtual direct connect is created, users do not need to wait and can immediately test the mutual access of the virtual machines on both sides.

The following figure shows the configuration diagram of the created Direct Connect:

How to dynamically modify the created DAHO Direct Connect

The establishment of a dedicated line between the two networks for the first time, due to the need to configure distributed routing and create connections to router interfaces, although fully automated, but takes a long time. However, when the first connection is established successfully, the user can modify the bandwidth or deactivate the virtual direct connect at any time. ZStack and DAHO work together to reuse resources intelligently in the background, so that users only need to wait a few seconds. Therefore, users can often modify their own virtual private lines, which greatly reduces the cost of use.

How can I see the usage of the virtual private line and the midpoint I pass through?

Users can log in to the work platform of Dahe Yunlian, enter their account number, and then go to the self-service page to view details.

After reading the above, do you have any further understanding of how to create a virtual direct connect with ZStack hybrid cloud + SD-WAN? If you want to know more knowledge or related content, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.