Azure 网络体系结构Azure network architecture

Azure 网络体系结构提供从 Internet 到 Azure 数据中心的连接。The Azure network architecture provides connectivity from the Internet to the Azure datacenters. 在 Azure 上部署的工作负载(IaaS、PaaS 和 SaaS)都在使用 Azure 数据中心网络。Any workload deployed (IaaS, PaaS, and SaaS) on Azure is leveraging the Azure datacenter network.

网络拓扑Network topology

Azure 数据中心的网络体系结构包含以下组件:The network architecture of an Azure datacenter consists of the following components:

  • 边缘网络Edge network
  • 广域网Wide area network
  • 区域网关网络Regional gateways network
  • 数据中心网络Datacenter network

Azure 网络示意图

网络组件Network components

网络组件的简短说明。A brief description of the network components.

  • 边缘网络Edge network

    • Microsoft 网络和其他网络(例如 Internet、企业网络)之间的分界点Demarcation point between Microsoft networking and other networks (for example, Internet, Enterprise network)
    • 向 Azure 提供 Internet 和 ExpressRoute 对等互连Provides Internet and ExpressRoute peering into Azure
  • 广域网Wide area network

    • 覆盖全球的 Microsoft 智能主干网络Microsoft intelligent backbone network covering the globe
    • Azure 区域之间提供连接Provides connectivity between Azure regions
  • 区域网关Regional gateway

    • Azure 区域中所有数据中心的聚合点Point of aggregation for all of the datacenters in an Azure region
    • 在 Azure 区域内的数据中心之间提供大规模连接(例如,每个数据中心数百 TB)Provides massive connectivity between datacenters within an Azure region (for example, multi hundred terabits per datacenter)
  • 数据中心网络Datacenter network

    • 提供数据中心内服务器之间的连接,确保较低的超额订阅带宽Provides connectivity between servers within the datacenter with low oversubscribed bandwidth

上述网络组件旨在提供最大的可用性,以支持永远在线、始终可用的云业务。The above network components are designed to provide maximum availability to support always-on, always-available cloud business. 从物理方面一直到控制协议,网络中都设计并内置了冗余。The redundancy is designed and built into the network from the physical aspect all the way up to control protocol.

数据中心网络复原能力Datacenter network resiliency

下面讲解使用数据中心网络的复原能力设计原则。Let’s illustrate the resiliency design principle using datacenter network.

数据中心网络是 CLOS 网络的修订版本,可为云规模流量提供较高的双向带宽。The datacenter network is a modified version of a Clos network, providing high bi-sectional bandwidth for cloud scale traffic. 网络使用大量的商用设备构造,以减少单个硬件故障造成的影响。The network is constructed using a large number of commodity devices to reduce the impact caused by individual hardware failure. 这些设备战略性地分处不同的物理位置,具有独立的电源和冷却域,可减少环境事件的影响。These devices are strategically located in different physical locations with separate power and cooling domain to reduce impact of an environment event. 在控制平面上,所有网络设备都以 OSI 模型第 3 层路由模式运行,从而消除流量循环的历史问题。On the control plane, all network devices are running as OSI model Layer 3 routing mode, which eliminates the historical issue of traffic loop. 不同层之间的所有路径都处于活动状态,以便使用相等成本多路径 (ECMP) 路由提供高冗余和带宽。All paths between different tiers are active to provide high redundancy and bandwidth using Equal-Cost Multi-Path (ECMP) Routing.

下图演示了数据中心网络由不同的网络设备层进行构造的情况。The following diagram demonstrates that the datacenter network is constructed by different tiers of network devices. 图中的条形表示提供冗余和高带宽连接性的网络设备组。The bars in the diagram represent groups of network devices which provide redundancy and high bandwidth connectivity.


后续步骤Next steps

若要详细了解 Microsoft 如何帮助保护 Azure 基础结构,请参阅:To learn more about what Microsoft does to help secure the Azure infrastructure, see: