ISP operator laboratory test rack topology construction experience sharing

Hello, everyone. I haven't updated practical information for some days. Recently, I seldom have a holiday to repair, so I'd better sit down and talk about the laboratory environment I have been responsible for maintaining and building for a long time.

Don't talk too much nonsense, just go to the picture. Because the picture is large, it is uploaded into upper and lower parts.

Network main Framework (part I)

Server main Framework (part two)

Give a detailed description of this topology in less than 2 months, I actually test how many functions, the basic underlying configuration is not detailed to talk about, too esay.

Switch layer 2 / 3 (STP, ACL, ARP, PBR, BGP, OSPF, VRRP, HSRP, SVF, STACK, CSS)

Firewall is highly available and virtualized (HA, failover, VRRP, × ×, IPS, IDS)

Routers (OSPF, BGP, GRE, ACL, × ×)

Server Virtualization (xenserver, exsi, hyper-v)

Octopus asynchronous serial port access to manage all network devices

Wait, I'll just make a general introduction here.

Device type:

Huawei-SW:S9306/S9303/S5700EI/SI/LI/S2300/S12800

Huawei-R:AR2204/NE40

Cisco-SW:3750/2960

Cisco-Rorel 1921 Unix 7206

Huasan-SW:S5500

Huasan-R:S8804

Firewall: watchguard/dep-f1000/dell/Juniper-SSG/USG/ASA/Hillstone/ Huasan F1000

Fortress machine: an Heng

IPS:Hillstone-SG2560

Server: small blade four-node server

Storage: Dell MD3000, Huawei ST5500, Dell SC4020

What is the number of equipment? Anyway, it does not mean that it will be combined, and that it will be combined does not mean that it understands business needs. So it's all on your own! Come on, net worker.

In fact, at this point, I suddenly find that there are only so many things I have written over and over again. In fact, it is very difficult to define how much I have learned and how much I have seen. Therefore, it is very rare to really delve into each learning process.

(what kind of enterprise high availability networking, × × × high availability interconnection, traffic diversion, large two-tier double active service cluster architecture, MPLS, DDOS automatic detection cluster, core pop point construction and planning, multi-line dual active and switching, physical redundancy, PDU redundancy, monitoring monitoring and response API, fortress machine security audit, deployment of various security inspection architectures in the intranet, etc.)

After working on the ISP side for a year, people with ability and confidence basically understand the reasons and considerations behind the design, so it is difficult to say how good a web worker is and how many things he can do. The chances of talented Internet workers who completely rely on their skills to blend into big companies are very small.

After working on the ISP side for two years, staying up late, being complained, implementing, and so on, it is easy to make an earth-shaking change for a web worker, and it is even understandable to be "gilded". If readers are lucky enough to read this, I suggest that if you are young and want to do in-depth research and study in the fields of network and systems, cloud computing and other technical fields, you might as well consider finding a party B who can exercise yourself. Just like me .

Insert a picture, this is I consumed a lot of personal energy and project summary bit by bit, from the basic to advanced to complex networking framework, are summarized. Because they are all records of personal habits, if I am lucky enough to organize them into PPT or playbook, I will certainly spare no effort to do this.

All right, the topic is a little biased, take it back first, today's topic is the sharing of the construction and maintenance of this laboratory. no, no, no. As we all know, when we Internet workers receive a demand, we often worry about whether there will be mistakes in some details, and even the most powerful Internet workers (except those with rich experience and prestige) will rashly promise that this demand will be done well, so there is an experiment at this time, which is really happy for us Internet workers.

Insert another picture:

More than 70% of the above are tested and summarized through the laboratory, and there are hundreds of off-work nights struggling alone in the dark room.