Firefly has launched a single IP shared networking solution based on BMC NAT forwarding technology. By leveraging VLAN segmentation, internal/external network isolation, NAT address translation, and routing policy deployment, this solution enables normal network communication for all core boards by configuring just a single public IP address.
This article will provide a systematic explanation from multiple aspects, including project background, core pain points, solution implementation, and project delivery results, offering reusable practical references for networking deployment of similar high-density, large-scale server clusters.
Pain Points: Large-Scale Clusters Constrained by Network Limitations
During the project initiation phase, the specific on-site network environment is often difficult to define in advance. However, during the array server deployment phase, network resource issues at the project site may be discovered. The specific problems are as follows:
Insufficient On-Site IP Resources
Conventional project sites typically use a 24-bit subnet mask (i.e., a /24 network segment) for their external networks, providing only 254 usable IP addresses per segment. After deducting IPs for gateways, broadcasts, existing devices, and reservations, the actual IP resources available for allocation to array servers are extremely limited.
Cumbersome Processes and High Costs
The traditional expansion method involves adding new routers. However, this not only incurs hardware procurement costs and long-term O&M management costs but also requires cross-departmental coordination, budget approval, bidding, and procurement processes for temporary network equipment additions. The procedures are cumbersome, the cycle is uncontrollable, and it seriously delays the overall project launch schedule.
Complex Network O&M Management
When the number of cluster nodes is large, each core board requires individual IP configuration, registration, maintenance, and troubleshooting. This involves a large amount of manual work and complex processes. Furthermore, batch IP configuration can easily lead to IP conflicts, parameter errors, and chaotic inventory records, significantly increasing O&M workload and the probability of device networking failures, resulting in low overall O&M management efficiency.
Low Network Resource Utilization
All core boards within the cluster occupy independent public IPs. A large number of public IP resources are occupied for long periods, yet most core boards only perform routine data interaction tasks and do not require independent public IP privileges. This results in severe idleness and waste of IP resources, greatly reducing the overall utilization efficiency of the public IP address space.
Solution Implementation
1. Configure the server BMC with a high-speed network card, with a recommended bandwidth specification of no less than 5Gbps.
2. The BMC high-speed network card, combined with an internal Layer 3 switch, uses VLAN technology to virtually divide two logical network ports, serving as the WAN port and LAN port respectively.
- The WAN port connects to the on-site service network, while the LAN port handles data interaction and transmission for the computing cores.
- A Layer 3 switch is used to isolate the internal and external networks, dividing the computing nodes and the on-site service network into two independent network zones.
3. To enable the array server to be deployed externally as an independent single IP, one-way communication is required: the computing cores must be able to access on-site terminal devices like cameras normally, while the on-site network is prohibited from directly accessing the computing cores' intranet.
- Develop and deploy NAT address translation and IP forwarding functions based on the BMC.
- Plan and configure the network-wide routing table, and complete routing policy deployment.
4. Complete debugging and parameter configuration for all network devices, and comprehensively verify the implementation effects of network isolation, one-way access, and forwarding policies.
Customer Project Delivery
Multiple customers have successfully implemented projects on the CSB1-N10 platform:
-
Deployed 10 BM1684X nodes
-
Achieved 160-channel video stream forwarding via BMC
-
Based on an 8Mbps/channel peak calculation: Total bandwidth is 1280Mbps
-
Occupies only 25.6% of the 5G Ethernet card, which is fully sufficient for future expansion and added computing power
Solution Effectiveness Summary
Through BMC NAT forwarding + VLAN isolation + one-way access control, this solution supports the stable networking of large-scale array servers with extremely low consumption of public IPs (requiring only 1 IP). It achieves the alleviation of IP resource bottlenecks, reduces O&M costs, and provides security isolation without the need to purchase additional network equipment. This solution is applicable to array server cluster scenarios with strict network control, tight IP resources, and a need for rapid, large-scale deployment.
For detailed solutions, please contact: sales@t-firefly.com
