Advanced system architecture
Adopt advanced Clos multi-level multi-plane switching architecture to provide continuous bandwidth upgrade capability.
Orthogonal network board design: The S10500X service board and switching network board are completely orthogonal (90 degrees). The cross-line card service traffic is directly switched on the network board through the orthogonal connector, supporting cell switching. The backplane route is reduced to zero (greatly avoiding signal attenuation), greatly improving the system bandwidth and evolution capacity, and the overall capacity can be smoothly expanded to 100 Tbps;
Support 40GE and 100GE Ethernet standards to fully meet the application and future development needs of non-blocking campus networks.
Independent switching network board, control engine and switching network board hardware are independent of each other, adopting a 5-switching plane design, and supporting network board N + M redundancy to maximize equipment reliability, while providing guarantee for the continuous upgrade of subsequent product bandwidth.
The main control slot is a full-width slot, and the fan frame and power supply frame are redundantly designed to cope with unexpected situations and greatly improve the overall reliability of the equipment.
Innovative distributed multi-engine design
The S10500X adopts an innovative hardware design, which provides powerful control capabilities and millisecond high reliability guarantees for the system through a fully distributed independent control engine, inspection engine, and maintenance engine;
Distributed control engine, all business boards provide a powerful control processing system, easily process various protocol messages and control messages, and support fine control of protocol messages, providing the system with a complete ability to resist protocol message attacks;
Distributed detection engine, all business boards can be distributed BFD, OAM and other rapid fault detection, and linkage with the control plane protocol to support rapid protection switching and fast convergence, can achieve millisecond fault detection, to ensure uninterrupted business;
Distributed maintenance engine, intelligent CPU system supports intelligent power management, can support single-board sequential power-up and power-down (reduce power shock caused by single-board power-up at the same time, improve equipment life, reduce electromagnetic radiation, reduce system power consumption), equipment online status check.
IRF2 (Intelligent Resilient Architecture Generation 2 - Horizontal Virtualization)
For the needs of horizontal business integration of the campus network, the S10500X supports IRF2 (second-generation intelligent elastic architecture) technology, virtualizes multiple high-end devices into a logical device, and is the core switch product of Xinhua San's leading support for 4-box virtualization. It has powerful advantages in reliability, distribution and ease of management, mainly reflected in three aspects:
Reliability: Through routing hot backup technology, redundant backup and uninterrupted three-layer forwarding of all information in the control plane and data plane are realized throughout the virtual architecture, greatly enhancing the reliability and high performance of the virtual architecture, while eliminating a single point of failure and avoiding business interruption;
Distribution: Through distributed cross-device link aggregation technology, load sharing and mutual backup of multiple uplinks are achieved, thereby improving the redundancy of the entire network architecture and the utilization of link resources;
Ease of management: The entire elastic architecture shares one IP management, simplifies network device management, simplifies network topology management, improves operational efficiency, and reduces maintenance costs.
IRF3.1: (3rd Generation Smart Resilient Architecture Upgrade — Vertical Virtualization)
The S10500X series products can support heterogeneous virtualization in the vertical dimension. The core and access devices are formed into a vertical logical virtual device through IRF3.1 technology. It supports unified management and configuration of AC and AP, which is equivalent to adding a box device as a remote interface board to the master device system to achieve the purpose of expanding I/O port capabilities and centralized control management. IRF3.1 technology can simplify management and greatly reduce network management nodes; simplify cabling, layer 2 becomes layer 1, saving lateral connection cables; and finally realize data forwarding plane virtualization to simplify business deployment and automatic orchestration.
PTP Clock
The S10500X supports 1588V2 and synchronous Ethernet functions to meet the needs of high-precision time synchronization between network devices. Compared with the same-precision GPS time synchronization, it improves security and lowers deployment costs.
Data Center Virtualization and Network Convergence Technologies
As the core equipment of enterprise-class cloud computing data center, S10500X provides a series of technical solutions in cloud computing data center virtualization and network convergence:
TRILL：
As the scale of servers and switches increases, the data center network increasingly tends to flatten the network architecture for easy maintenance and management, which requires the construction of a large Layer 2 network; S10500X supports the construction of a large Layer 2 network in the data center through Trill technology. The Trill (Transparent Interconnection of Lots of Links) protocol, a large Layer 2 technology in the data center, combines the simplicity and flexibility of Layer 2 with the stability, scalability and high performance of Layer 3, which can provide higher-density ports and a flattened network architecture to meet the access needs of large-scale servers in the data center.
Evi (Ethernet Virtual Interconnection) technology
Evi is an advanced "Mac in IP" technology, and the Evi solution is very simple to deploy, based on the existing IP network, providing flexible Layer 2 interconnection capabilities to decentralized physical sites. The Evi solution is very simple to deploy, compatible with the user's existing network, and protects the user's investment.
VXLAN (Virtual eXtensible LAN, extensible virtual local area network)
VXLAN is a Layer 2 VPN technology based on IP networks in the form of “Mac in UDP” encapsulation. VXLAN can provide Layer 2 interconnection for decentralized physical sites based on existing service provider or enterprise IP networks, and can provide business isolation for different tenants.
EVB (Edge Virtual Bridging)
Through VEPA (Virtual Ethernet Port Aggregator) technology, the network traffic generated by virtual machines is uploaded to the physical switch connected to the server for processing, which not only realizes the traffic forwarding between virtual machines, but also solves the problems of virtual machine traffic supervision and access control policy deployment.
FCoE (Fibre Channel over Ethernet) protocol.
FCoE technology is mainly used to solve the problem of heterogeneous convergence of LAN and storage networks in cloud computing data centers. Through the deployment of FCoE and CEE (Converged Enhanced Ethernet) technology, the convergence of data center front-end network and back-end network architecture can be achieved, and the technical challenges of data, computing and storage triple-network fragmentation can be solved, thus greatly reducing the cost of data center procurement and capacity expansion.
Highly available M-LAG architecture
The S10500X series switches support M-LAG (Multichassis Link Aggregation Group) cross-device link aggregation technology (formerly DRNI technology). By virtualizing two physical devices as one device at the forwarding level to achieve cross-device link aggregation, the control level is kept independent of each other, thus improving single-board-level reliability to device-level reliability.
Multi-Service Convergence Based on Open Architecture
The S10500X series adheres to the H3C company's open architecture design concept, Open Application Architecture (OAA), and redefines the simple function of L2 to L3 message forwarding of the traditional campus network core switch as a multi-service bearing platform integrating L2 to L7 deep business perception, wired and wireless integration, active and passive integration, IPv4/IPv6 integration, network traffic analysis and management.
The S10500X series supports firewall modules, IPS modules, load balancing and other security control modules, which can extend security protection functions to each port of the switch. It supports virtual firewall functions, which can provide network firewall rental services for VPN users. Enables seamless convergence of network business and security business.
The S10500X series supports the future-oriented open business platform, integrating third-party software through switches to bring stronger business convergence capabilities to switches.
Next-generation wired and wireless integration solution
The S10500X series of switches supports a new generation of wired and wireless integration solutions. The switch natively supports the converged AC function, and can directly manage the wireless AP. Compared with a single wireless AC insertion card solution, the S10500X series switches have more flexible and simple deployment. At the same time, the S10500X series switches support a large-capacity professional wireless AC insertion card solution, and can perfectly combine with the AC function of the switch to form a unique hierarchical AC solution to solve the management complexity in a large-scale wireless deployment environment, making the wired wireless integration solution more flexible and easier.
Fusing AC as a native feature of the switch, and supporting the combination of virtualization technologies such as IRF2/IRF3.1, one device manages the entire network of wired and wireless devices, greatly simplifying network operation and maintenance complexity.
Comprehensive IPv6 Solution
The S10500X series switches fully support the IPv6 protocol family, support IPv6 static routing, RIPng, OSPFv3, IS-ISv6, BGP4 + and other IPv6 routing protocols, and support a wealth of IPv4 to IPv6 transition technologies, including: IPv6 manual tunneling, 6to4 tunneling, ISATAP tunneling, GRE tunneling, IPv4-compatible automatic configuration tunneling and other tunneling technologies to ensure a smooth transition from IPv4 to IPv6.
Hardware-grade encryption
The S10500X supports hardware-level encryption technology Macsec technology (802.1ae), which is different from traditional end-to-end basic application layer protection soft encryption technology. Macsec manages the bridge network and other data control protocols by authenticating the cryptographic technology of the data source to protect the integrity of the information and provide re-protection and confidentiality services. By confirming the frames sent by the station, it is possible to protect the attack on the Layer 2 protocol at the root.
Centralized monitoring capability
S10500XThe series supports the monitoring board function, supports the 1 +1 redundant backup function, and monitors the working status of the equipment hardware in real time, including the power load and power adjustment, the automatic adjustment of the fan speed, and the dynamic deployment of the whole machine energy consumption.
