Connect to Alibaba Cloud. For partners

Transcription

1 Connect to Alibaba Cloud For partners

2 1. Terms 5. Use Cases 2. Background 6. Setup Example 3. Customer Architecture 7. Other Info 4. Connec7on Process 8. Annex

3 Terms VPC: Virtual Private Cloud Private network within Alibaba Cloud. ExpressConnect Connections between VPCs (same-region or cross-region) and VPC to on-premise data centre. pconn: Physical Connection A pconn represents a physical connected line. VBR: Virtual Border Router A VBR is a virtual device resides on Alibaba Cloud side, it s the mapping of the dedicated line entry point. A dedicated line can have multiple VBRs, each VBR connects to one VLAN. PE: Provider Edge RI: Router Interface A virtual device, represents the I/O interface for a router. It can be attached to a router for connecting other routers, bridging the networks. CPE: Customer Premises Equipment The connected device on the customer s side. Router Table A table manages the routing entries, both VBR and VPC routers have it. VLAN: Virtual Local Area Network VLANs are logical channels separate different customer s data transmitting in the same physical line. AP: Access Point A customer can use one or more dedicated lines to connect their data centre with an AP so that the private networks in their data centre and Alibaba Cloud are connected. An AP can have multiple AD. AD: Access Device The device for the dedicated line connection, multiple AD forms an AP. NNI: Network-to-Network Interface The interface between two networks. The line between a partner s network to Alibaba Cloud s AP is an NNI. ECMP: Equal-Cost Multi-Path routing

4 1. Terms 5. Use Cases 2. Background 6. Setup Example 3. Customer Architecture 7. Other Info 4. Connec7on Process 8. Annex

5 Background The major parties are the Alibaba Cloud, its customers and partners (ISP). Customers - who want to connect their on-premise data centre to Alibaba Cloud Partners - who provides the connectivity service

6 1. Terms 5. Use Cases 2. Background 6. Setup Example 3. Customer Architecture 7. Other Info 4. Connec7on Process 8. Annex

7 Customer Architecture With customer visible devices Partner s network CPE VBR vrouter Private network Customer IDC Alibaba Cloud VPC

8 1. Terms 5. Use Cases 2. Background 6. Setup Example 3. Customer Architecture 7. Other Info 4. Connec7on Process 8. Annex

9 Partner Connection Process Needs AP info from AC side Port info: 1G/10G based LR Create acc. Apply EC Pay Install Fee Receive LOA from AC Physically Line Appears N Begin Have AC acc.? Y End Build Cross Connect Y More? N Terms: AC (Alibaba Cloud) P. (Partner) acc. (Account) EC (ExpressConnect) IDC Provider Partner Alibaba Cloud

10 Customer Connection Process Creates customer s uid Creates VPC vrouter IP CPE IP VPC IP Subnet mask Create acc. Create VPC Accept VBR Config VBR N N Begin Have AC acc.? Y Have P. acc.? Y VPC exists? Y Config CPE N P.: NNI is ready Create acc. Request Connect Connected P.? N Y Customer s uid NNI s pconn id VLAN id NoSfy Customer Test passed? Y N Connect customer Create VBR More? N End Lay the cable Y Terms: AC (Alibaba Cloud) P. (Partner) acc. (Account) EC (ExpressConnect) Customer Partner Alibaba Cloud

11 1. Terms 5. Use Cases 2. Background 6. Setup Example 3. Customer Architecture 7. Other Info 4. Connec7on Process 8. Annex

12 1. Single-line + Single-VPC Alibaba Cloud CIDR: /8 Customer uid: VLAN id: 510 AP- A RI VPC id: vpc Private network Customer A IDC CPE VBR- a1 vrouter CIDR: /24 VPC pconn: pc- a Partner s network AP- B pconn: pc- b Partner IDC

13 2. Single-line + Multi-VPC Alibaba Cloud CIDR: /8 Customer uid: VLAN id: 510 AP- A RI VPC id: vpc Private network Customer A IDC CPE VBR- a1 vrouter CIDR: /24 VPC pconn: pc- a Partner s network AP- B vrouter VPC pconn: pc- b Partner IDC

14 3. Multi-line + Single-VPC Alibaba Cloud CIDR: /8 Customer uid: VLAN id: 510 AP- A RI VPC id: vpc Private network Customer A IDC CPE VBR- a1 vrouter CIDR: /24 VPC pconn: pc- a Partner s network AP- B VBR- b1 pconn: pc- b VLAN id: 510 Partner IDC

15 4. Multi-line + Multi-VPC Alibaba Cloud CIDR: /8 Customer uid: VLAN id: 510 AP- A RI VPC id: vpc Private network Customer A IDC CPE VBR- a1 vrouter CIDR: /24 VPC pconn: pc- a Partner s network AP- B VBR- b1 vrouter VPC pconn: pc- b VLAN id: 510 Partner IDC

16 5. Multi-tenant with Mixed Modes Alibaba Cloud CIDR: /8 Customer uid: VLAN id: 510 AP- A RI VPC id: vpc Private network Customer A IDC CPE VBR- a1 vrouter CIDR: /24 VPC pconn: pc- a Customer uid: VPC id: vpc VLAN id: 520 Private network CPE Partner s network AP- B VBR- a2 vrouter Customer uid: VPC id: vpc VPC Customer B IDC VLAN id: 520 VBR- b1 vrouter VPC pconn: pc- b VPC id: vpc VLAN id: 530 Private network CPE VBR- b2 vrouter VPC Customer C IDC Partner IDC

17 1. Terms 5. Use Cases 2. Background 6. Setup Example 3. Customer Architecture 7. Other Info 4. Connec7on Process 8. Annex

18 Multi-line + Single-VPC Example Customer lifecycle Connects to Alibaba Cloud via the partner Customer registers an Alibaba Cloud account Customer contacts the partner to confirm the connection account UID Partner creates VBR for the customer Customer accepts and configures the VBR from the web console Customer creates VPC Customer creates RI and bridges VBR and VPC Customer to confirm Alibaba Cloud account UID

19 Multi-line + Single-VPC Example Definitions Partner NNI is physically established, Germany Region, AP is FRA-A NNI consists of two 10G fibre optics, namely pc-a and pc-b Allocated VLAN id 510 for the customer, the two lines share the same VLAN id. Customer uid: VPC id: vpc CIDR: /24 On-premise IDC intranet range: /8 Bought two 100Mbps MPLS-VPN lines from the partner

20 Multi-line + Single-VPC Example Prerequisites Partner Physically connected to customer s CPE, labeled the two lines #1 corresponds to NNI line pc-a #2 corresponds to NNI line pc-b The connection is L2, if L3 please refer to Notes for MPLS-VPN Partners

21 Initial State CIDR: /8 FRA- A Alibaba Cloud Customer uid: VPC id: vpc Private network Customer A IDC CPE vrouter CIDR: /24 VPC pconn: pc- a 1. Physical connec7ons are done. Partner s network FRA- B pconn: pc- b Partner IDC

22 Create VBR For partners In the console: UID: Line: pc-a VLAN: pc- a 510

23 VBR Created Alibaba Cloud CIDR: /8 Customer uid: VLAN id: 510 FRA- A VPC id: vpc Private network Customer A IDC CPE VBR- a1 vrouter CIDR: /24 VPC pconn: pc- a 1. Physical connec7ons are done. 2. VBR created. Partner s network FRA- B pconn: pc- b Partner IDC

24 Accept and Config VBR For the customer vbr- a1 pc- a 510 FRA- A To confirm Confirm Reject

25 Accept and Config VBR For the customer Config the VBR Complete the VBR information Name: vbr-a1 Description: VBR via pc-a Connection points: Alibaba Cloud side: Customer side: Subnet mask: Name: Desc.: Connection points: vbr-a1 VBR via pc-a * Alibaba Cloud side * Customer side * Subnet mask OK Cancel

26 VBR Configured Alibaba Cloud CIDR: /8 Customer uid: VLAN id: 510 FRA- A VPC id: vpc Private network Customer A IDC CPE VBR- a1 vrouter CIDR: /24 VPC pconn: pc- a 1. Physical connec7ons are done. 2. VBR created. 3. VBR configured. Partner s network FRA- B pconn: pc- b Partner IDC

27 RI Configured Alibaba Cloud CIDR: /8 Customer uid: VLAN id: 510 FRA- A RI VPC id: vpc Private network Customer A IDC CPE VBR- a1 vrouter CIDR: /24 VPC pconn: pc- a 1. Physical connec7ons are done. 2. VBR created. 3. VBR configured. Partner s network FRA- B pconn: pc- b Partner IDC

28 Config CPE For the customer On the CPE side, set the IP address of port connecting line #1 ip address /30 Test the connection Test if and can ping each other

29 Add One More Connection Repeat the previous steps to create one more connection Create VBR UID: Line: pc-a VLAN: 510 Accept and configure VBR Name: vbr-b1 Description: VBR via pc-b Connection points: Alibaba Cloud side: Customer side: Subnet mask: Config CPE ip address /30

30 Multi-Line Enabled Alibaba Cloud CIDR: /8 Customer uid: VLAN id: 510 FRA- A RI VPC id: vpc Private network Customer A IDC CPE VBR- a1 vrouter CIDR: /24 VPC pconn: pc- a 1. Physical connec7ons are done. 2. VBR created. 3. VBR configured. 4. Mul7- line configured. Partner s network FRA- B VBR- b1 pconn: pc- b VLAN id: 510 Partner IDC

31 Config Static Routing The customer will have to configure the static routing for their CPE, VBR and VPC. For multi-line connection, they should also configure ECMP health check address. Create RI for VBR to VPC, size middle.1. VBR add a route /8, point to leased line direction. VBR add a route /24, point to vrouter RI. VPC add a route /8, point to vrouter RI, create ECMP with previous two RIs. CPE routing points to Alibaba Cloud side IP in VBR configuration. Please refer to the online manual.

32 1. Terms 5. Use Cases 2. Background 6. Setup Example 3. Customer Architecture 7. Other Info 4. Connec7on Process 8. Annex

33 Other Info 1. VLAN tagging The data packets are marked with VLAN tags in partner s intranet. When the packets reach the NNI on Alibaba Cloud side, they will be distinguished based on these VLAN tags and dispatch to the corresponding users. 2. Alibaba Cloud doesn t support L2 extension, e.g. QinQ 3. Notes for MPLS-VPN partners MPLS-VPN and other L3 transmission cores can be treated as gateway devices between CPE and Alibaba Cloud router. Health check to ensure both sides reachable is mandatory. Meaning on the Alibaba Cloud side, PE device should be configured route to VBR address using 32-bit routing.

34 Other Info 4. Notes for L2 parters For VPLS and other L2 VLAN extensions, on Alibaba Cloud side, there is no risk of broadcast storm in the same broadcast domain. As the two connection routers are independent on Alibaba Cloud side, not in the same broadcast domain. However, for the customer side, the CPE device might have broadcast storms. 5. Notes for SDN partners The VXLAN tag used by Alibaba Cloud is not compatible with RFC If DSN controllers are used, please repack the tagged VLAN data.

35 1. Terms 5. Use Cases 2. Background 6. Setup Example 3. Customer Architecture 7. Other Info 4. Connec7on Process 8. Annex

36 Versions Version Date Changes Author update according to Richard Fu s review Yanan Wen, Richard Fu initial version Yanan Wen

37