单一网络：与云无关的面向服务和策略的网络架构.pdf

1、One Network:Cloud-Agnostic Service&Policy-Oriented Network Architecture2020:Why One Network?Organically grown cloud platform with 300+products Multiple network paths Multiple runtimes with their own networking Products were not well integrated Not all runtimes were supported on every path Some paths

2、 were not controlled by policiesDevelopment velocity was affected Before 2020Google Prod NetworkingGoogle Cloud Virtual Networking(Andromeda)Customer multi-cloud/on-prem networkingGCEGKEBorgCloud RunBorgGoogle Distributed CloudServerless NetworkingCloud Service Mesh/IstioServiceMeshAWSAppMeshWhy is

3、Networking Complicated?GKE NetworkingGKE on-prem NetworkingGoogle Prod NetworkingGoogle Cloud Virtual Networking(Andromeda)Customer multi-cloud/on-prem networkingGCEGKEBorgCloud StorageData FusionCloud SQLAppsAppsCloud RunBorgBigQueryDLPBigQuery OmniGoogle Distributed CloudServerless NetworkingCloud

4、 Service Mesh/IstioServiceMeshAWSAppMeshWhy is Networking Complicated?GKE NetworkingGKE on-prem NetworkingAppsCloud API GatewayAppsGoogle Prod NetworkingGoogle Cloud Virtual Networking(Andromeda)Customer multi-cloud/on-prem networkingGCEGKEBorgCloud API GatewayData FusionAppsAppsCloud RunBorgGoogle

5、Distributed CloudServerless NetworkingCloud Service Mesh/IstioServiceMeshAWSAppMeshWhy is Networking Complicated?GKE NetworkingGKE on-prem NetworkingOne Network:Unified Service Networking OverlayCloud StorageBigQueryCloud SQLAppsDLPBigQuery OmniAppsSolving these challenges with One NetworkGoal:Defin

6、e policies uniformly across servicesConstraints:Heterogeneous compute&infrastructure Different compute platforms Different application architectures Different language runtimes Co-existence of monoliths,services and microservices Across multi-cloud/on-prem deploymentsSolution:One Network Policies ma