Tuesday, March 13, 2018

VPS provider 2xDC design help

Hello redditors,

Currently working over a new design for a VPS provider (smallish one) that also provides a service that a lot customers will want (lets call this service, the "critical service").

Basically I made a high level overview of the design that you can see in the following picture:

design

Aside from the critical service and Internet, xconnects may be offered between DCs to certain customers (perhaps via VPLS), the DCs aren't owned by the VPS provider, it's colocated.

Now a little bit more of information here, we basically need:

  • 3 VRFs (Internet, Critical Service, Management)
  • I want traffic to flow as optimal as possible
  • Most of incoming and outgoing Internet traffic is going to be from/to DC1
  • Since both DC are colo, it means spacing for networking equipment is a concern, want to be as effective with space as possible
  • Money is also a concern so nothing ASR9X for instance is possible
  • This isn't a heavy east-west like DC, for instance the critical service will have its own network isolated and only expose a set of connection IPs via firewalls to the main Network, but we don't expect a huge amount of traffic from main network to these IPs
  • Critical and Internet service must be isolated so I was thinking customers must have 2X ports, 1 for the Internet, and the other for the critical service, or just trunk and use VLANs
  • Due to costs and limitations around geography where this will work, it's not expected to have more than 1 Gbps of BW per provider, and no more than 10GE per IX
  • Redundancy is also a concern here

I've wrote more details in the image, I have some doubts here:

  • I either terminate the DCI connections at core/dist switches (still deciding whether a chassis would be better), meaning those switches needs to get full BGP routes for optimal routing or..
  • Terminate the DCI at the edge, collapsing EDGE and DCI into 1 or 2 appliances per DC, so core only see local routes plus default
  • What do you think overall about the design? what would you collapse or not? Again, this is a VPS provider that also offers a special service to some customers

If you need more info please feel free to request it, for this design we're thinking on going mainly with Huawei.

Edit: I forgot to add 2 key important facts:

  • Basically we have no experience at all with EVPN and VxLAN that's why we went to first think on MPLS
  • We do not intent to span L2 between DCs, aside from the occasional XCONNECT for a customer (and this would be PTP)


No comments:

Post a Comment