Application Switching Principles with Proxy Load Balancer: (datacenter in a box)
1. Datacenter in a Box with Proxy-Based
Application Switch
VIP
VIP
sra-1
mta-1
Luc Wijns
Architect, Cloud and Security
Consultant
mta-2
sra-2
2. Datacenter in a Box with Proxy-Based
Application Switch
• Objective: Create a test bench to simulate datacenter on
tiny environments – can also serve as minimal
configuration for startups.
• Technology:
> Service Delivery Network Architecture (
http://www.oracle.com/technetwork/systems/networking/819-6319-150175.pdf )
> Solaris Virtualization (Solaris 10 Zones)
3. Services Domains and Services Types
Demo Service Module
SRA Service Domain
Exclusive IP
Services
MTA Service Domain
LDAP Service Domain
PROXY Service Domain
AMDUI Service Domain
Service Domain A
Shared IP Services
Service Domain B
Service Domain C
Service Domain D
Management
Domain
4. Zones and Services
<Zone Name>
Service
Demo Service Module
SRA Service Domain
Exclusive IP
Services
MTA Service Domain
LDAP Service Domain
PROXY Service Domain
AMDUI Service Domain
Service Domain A
Shared IP Services
Service Domain B
Service Domain C
Service Domain D
Management
Domain
5. Services Domains and Systems
Demo Service Module
SRA Service Domain
Exclusive IP
Services
MTA Service Domain
LDAP Service Domain
PROXY Service Domain
AMDUI Service Domain
Service Domain A
Shared IP Services
Service Domain B
Service Domain C
Service Domain D
Management
Domain
6. Layer 3: Exclusive IP Services
Principle of Operations:
Load Balance Across Tiers for Scalability
and Security
Bge2
192.168.254.20
VIP
Bge12000
10.1.12.254
VIP
Bge11000
10.1.11.254
Bge11000:1
10.1.11.10
Vlan11
sra-1
Vlan12
Bge12003
10.1.12.2
Bge12000
10.1.12.1
mta-1
bge13000
mta-2
bge13003
Bge11003
10.1.11.2
Bge11000
10.1.11.1
sra-2
7. Layer 3: Exclusive IP Services Details
(On Solaris 10)
Bge2 192.168.254.20
bge2
bge<VLANid>000
bge<VLANid>000
bge11000
bge2
sra-1
Apache
bge<VLANid>003
Global Zone
bge11003
sra-2
VLAN
bge12003
bge12000
mta-1
<Zone Name>
11
12
mta-2
13
bge13003
bge13000
14
ldap-1
ldap-2
bge15000
amdui-1
Service-Zone-1
Bge11000
10.1.11.1
Bge12000
10.1.12.1
Bge13000
10.1.13.1
Bge14000
10.1.14.1
Bge15000
10.1.15.1
Service-Zone-2
Bge11003
10.1.11.2
Bge12003
10.1.12.2
Bge13003
10.1.13.2
Bge14003
10.1.14.2
Bge15003
10.1.15.2
bge14003
bge14000
proxy-1
15
Zeus
Bge11000
10.1.11.254
Bge12000
10.1.12.254
Bge13000
10.1.13.254
Bge14000
10.1.14.254
Bge15000
10.1.15.254
proxy-2
bge15003
amdui-2
From (SD)
External
Sra
Service Addresses
To (SD)
VIP
Sra
192.168.255.20
Mta
10.1.11.10
8. Layer 3: Shared IP Services Details
Bge2 192.168.255.20
bge2
bge<VLANid>000
<Zone Name>
Apache
ce<VLANid>000
Global Zone
cee100000
cee100000
bge2
a-1
a-2
ce101000
cee101000
b-1
VLAN
100
101
b-2
102
ce102000
ce102000
103
c-1
Service-Zone-1
ce100000
10.1.11.1
ce101000
10.1.101.1
ce102000
10.1.102.1
ce103000
10.1.103.1
Service-Zone-2
ce100000
10.1.11.2
ce101000
10.1.101.2
ce102000
10.1.102.2
ce103000
10.1.103.2
c-2
ce103000
cee103000
d-1
Zeus
Bge100000
10.1.100.254
Bge101000
10.1.101.254
Bge102000
10.1.102.254
Bge103000
10.1.103.254
d-2
From (SD)
External
a
Service Addresses
To (SD)
VIP
a
TBD
b
10.1.100.10