Data Center Networking

[Locas]

Hello everyone,

I am trying to figure out that how can we provide networking in Data Center as per the requirement. The requirement is that their will be about 500 Virtual Machines which are used by 500 multiple clients. The the VM should have a normal firewall for security. In this requirement I am lost on how can I provide the network to those 500 machines so that I can apply rules in firewall and also those 500 machine should not be able to communicate with each other. 

One option is to create 500 different VLAN network for each VM but it is not a feasible and good solution. Is there any other method so that I can provide network connectivity to those VM from firewall?

 

My basic network architecture

GW-Router ---> Firewall ----->switches----->host-machines---->VMS
(Note: I want to provide network from firewall so that I can create security and NAT policies for those 500 machines.)

[dogwitch]

1 minute ago, Locas said:

Hello everyone,

I am trying to figure out that how can we provide networking in Data Center as per the requirement. The requirement is that their will be about 500 Virtual Machines which are used by 500 multiple clients. The the VM should have a normal firewall for security. In this requirement I am lost on how can I provide the network to those 500 machines so that I can apply rules in firewall and also those 500 machine should not be able to communicate with each other. 

One option is to create 500 different VLAN network for each VM but it is not a feasible and good solution. Is there any other method so that I can provide network connectivity to those VM from firewall?

 

My basic network architecture

GW-Router ---> Firewall ----->switches----->host-machines---->VMS
(Note: I want to provide network from firewall so that I can create security and NAT policies for those 500 machines.)

lvl1techs,network chunk,crosstalk solutions

[Levent]

I hate to say it but if you have to ask this question when you are taking a task of this scale, then I am afraid it might be best to leave it to someone who knows what they are doing.

[Agall]

49 minutes ago, Locas said:

Hello everyone,

I am trying to figure out that how can we provide networking in Data Center as per the requirement. The requirement is that their will be about 500 Virtual Machines which are used by 500 multiple clients. The the VM should have a normal firewall for security. In this requirement I am lost on how can I provide the network to those 500 machines so that I can apply rules in firewall and also those 500 machine should not be able to communicate with each other. 

One option is to create 500 different VLAN network for each VM but it is not a feasible and good solution. Is there any other method so that I can provide network connectivity to those VM from firewall?

 

My basic network architecture

GW-Router ---> Firewall ----->switches----->host-machines---->VMS
(Note: I want to provide network from firewall so that I can create security and NAT policies for those 500 machines.)

 

To be honest, if you're asking us about this, you're probably better off contracting this with a local company who can build that architecture. Building architecture versus maintaining it is a whole different ballpark.

 

Building a network with 500 remote clients isn't trivial, at all.

[iamnotapop]

I agree with others here, asking the question probably means that you need a contractor / 3rd party that specialises in enterprise datacentre networking. Trust me, you'll thank yourself for it when you can direct questions & support elsewhere...

 

The only experience that I've had with something of that scale was a couple of basic management tasks not architecture, those were on Fortinet Vdoms... I couldn't tell you much more tbh 

[mynameisjuan]

On 8/28/2023 at 12:09 PM, dogwitch said:

lvl1techs,network chunk,crosstalk solutions

Networking wise, their content/knowledge is novice to adv. beginner and homelab/SMB at best. There a much better networking channels for getting into the fundamentals to mid-level designs.

 

That said, the OP's project seems to already be in progress. Less time needs to be focused on the design itself and instead focus on looking for consultants. These scenarios almost never end well.