H3C S12500X-AF Cloud Computing Data Center Core Switch
H3C S12500 is a core switching product designed by H3C Technology Co., Ltd. (hereinafter referred to as H3C) for cloud computing data centers. It adopts an advanced CLOS+multi-level multi plane orthogonal no middle board architecture, and the business board and switching network board adopt a completely orthogonal design (90 degrees). The cross line card business traffic is directly connected to the switching network board through orthogonal connectors, and the backplane routing is reduced to zero (greatly avoiding signal attenuation), greatly improving the system bandwidth and evolution capability. The overall capacity can be smoothly expanded.
The S12500 is currently a core switching device with professional performance in the industry. A single machine can provide 3072 line speed 10G/25G ports or 768 line speed 40G/100G ports, providing ultra-high density 10G and high-density 40G/100G capabilities, and supporting 400G port expansion capability; The S12500 is also the first switch from New H3C to integrate three technologies: IRF2 (second-generation intelligent elastic architecture), IRF3.1 (upgraded version of third-generation intelligent elastic architecture), and MDC (multi tenant device environment), meeting the requirements of cloud computing data center virtualization, truly realizing network equipment resource pooling, and providing users with flexible choices; In the face of sudden traffic in the next generation of data centers, innovative "distributed entrance caching" technology has been adopted, which can achieve 200ms caching of data and meet the requirements of network sudden traffic in data centers, high-performance computing, and other areas; Simultaneously supporting independent control engines, detection engines, and maintenance engines, providing the system with powerful control capabilities and a high reliability guarantee of 50ms.
The S12500 products include S12501X-AF, S12502X-AF, S12504X-AF, S12508X-AF, S12516X-AF, etc
The model can adapt to the port density and performance requirements of different network scales, providing strong equipment support for data center network construction. Simultaneously combining H3C series routers, switches, security, iMC, and H3Cloud to provide a full range of solutions for data center networks.
Product Features
Advanced CLOS+Multi level Multi plane Switching Architecture
Adopting advanced CLOS/CLOS+multi-level multi plane orthogonal switching architecture, the business board and switching network board adopt fully orthogonal design (90 degrees), providing continuous bandwidth upgrade capability.
Adopting a back panel/middle panel design to enhance the ventilation and heat dissipation capabilities of the equipment.
Supports high-density 40GE and 100GE Ethernet ports, fully meeting the needs of data center applications and future development.
Independent switching network board, with control engine and switching network board hardware independent of each other, maximizes equipment reliability and provides guarantees for continuous bandwidth upgrades of subsequent products.
Dynamic variable cell sharding with strict non blocking switching improves overall forwarding performance.
Application requirements for cloud computing data centers
The S12500 series products support VXLAN (Virtual eXtensible LAN) technology, which is a layer 2 VPN technology based on IP networks and encapsulated in the form of "MAC in UDP". VXLAN can provide layer 2 interconnection for dispersed physical sites based on existing service providers or enterprise IP networks, and can provide business isolation for different tenants.
The S12500 series products support EVPN (Ethernet Virtual Private Network), which is a layer 2 VPN technology. The control plane uses MP-BGP to announce EVPN routing information, and the data plane supports forwarding messages using VXLAN encapsulation.
The S12500 series products support EVI (Ethernet Virtual Interconnection) technology, which is an advanced "MAC in IP" technology. The deployment of EVI solutions is very simple, based on existing IP networks, providing flexible layer 2 interconnection functions for dispersed physical sites.
The S12500 series products support FC and FCoE (FC over Ethernet) technologies; FCoE technology is mainly used to solve the problem of heterogeneous LAN networks and FC storage networks in cloud computing data centers. Through the deployment of FCoE and CEE technologies, the integration of front-end and back-end network architectures in data centers can be achieved, solving the technical problem of data, computing, and storage network fragmentation, thereby greatly reducing the procurement and expansion costs of data centers
The S12500 series products support large capacity ARP/ND, MAC, ACL table entries, which can adapt to the flat networking needs of large data center networks.
The 10GE/40GE/100GE business cards all support three-layer line speed forwarding and cross board full line speed forwarding.
Innovative Multi Engine Control Design
Adopting innovative hardware design, the system provides powerful control capability and 50ms high reliability guarantee through independent control engine, detection engine, and maintenance engine.
• Independent control engine, providing a powerful main control CPU system, easily processing various protocol and control messages, and supporting fine control of protocol messages, providing the system with comprehensive resistance to protocol message attacks;
An independent detection engine provides a highly reliable and high-performance FFDR (Fast Fault Detection and Restoration) system for fast fault detection such as BFD and OAM, and is linked with control plane protocols to support fast protection switching and convergence. It can achieve 50ms fault detection and ensure uninterrupted business operations;
• Independent maintenance engine, intelligent EMS (Embedded Maintenance Subsystem) CPU system, which supports intelligent power management and can support sequential power on and off of single boards (reducing power shock caused by simultaneous power on of single boards, improving equipment life, reducing electromagnetic radiation, and reducing system power consumption), and online status check of equipment.
Pioneering the launch of a cloud controller that integrates X86 architecture, supporting 256GB SSD hard drives, Intel Xeon E5 8-core processors, and 64GB of memory; Support the operation of SDN controllers/directors/third-party software to achieve dual plane management and control of data center overlay&overlay; Support installation of Linux/Windows systems, installation of virtual machine/NFV functionality, and integration with Openstack/third-party cloud platforms.
An independent monitoring engine, built into the main control board and completely separated from the business control plane, monitors the real-time working status of device hardware, including power load and power adjustment, automatic adjustment of fan speed, dynamic adjustment of overall energy consumption, etc.
Data center level reliability assurance
The S12500 series products provide a dedicated FFDR system for fast fault detection such as BFD and OAM, and are linked with control plane protocols to support fast protection switching and convergence.
• Supports BFD for VRRP/BGP/IS-IS/RIP/OSPF/RSVP/static routing, etc.
• Supports NSR/GR for OSFP/BGP/IS-IS/RSVP, etc.
The control engine and the switching network board hardware are independent of each other, achieving physical separation between the control plane and the forwarding plane, with control engine 1+1 redundancy; Exchange network board N+M redundancy; Redundant design of fan system; Power module N+M redundancy; Maximize the fault isolation capability and reliability of the system.
Highly available M-LAG architecture
The S12500 series switches support M-LAG (Multicasting Link Aggregation Group) cross device link aggregation technology (formerly DRNI technology), which achieves cross device link aggregation by virtualizing two physical devices as one device at the forwarding layer, maintaining control layer independence from each other, thereby improving single board level reliability to device level reliability.
M-LAG decouples the control plane from the data plane, and each node device can be independently upgraded to ensure zero interruption of user business.
The dual active access of the device provides device level redundancy protection and traffic load sharing, while improving system reliability.
Suitable for overlay and traditional underlay scenarios, with flexible networking.
Multi level security protection
The multi-level protection and security of the control plane, the control plane policy feature of S12500 manages the flow of messages from the data plane (DP) to the control plane (CP) by configuring QoS filtering and speed limits, protecting the S12500 switch from identifying and protecting important messages in the event of DDoS attacks, discarding illegal messages, and ensuring that the control plane maintains normal forwarding and protocol status in the event of attacks or high traffic.
• Support massive ACL rules and meet full line speed forwarding requirements; Fine security access control can be applied to various L2/IPv4/IPv6/MPLS packets and their field combinations.
• Supports hardware level encryption Macsec technology (802.1ae), which differs from traditional end-to-end basic application layer protection software encryption technology. Macsec protects and manages bridge networks and other data control protocols through cryptographic techniques that authenticate data sources, ensuring information integrity and providing re protection and confidentiality services. By confirming the frames sent by the station, it is possible to protect the Layer 2 protocol from attacks at the root.
Distributed caching mechanism and refined QoS
In the face of sudden traffic in next-generation data centers, innovative "distributed entry caching" technology has been adopted. Each port can accurately allocate bandwidth and shape traffic for all business flows flowing to that port. The precise scheduling of the forwarding plane ensures support for distributed caching in the Ingress direction, effectively sharing and utilizing the cache space distributed on each line card, providing better caching performance.
The network application model has been transformed from C/S to B/S, and the change in application methods has led to an increase in network burst traffic. Large cache mechanisms have become an urgent need for network devices. The S12500 supports 200ms of burst traffic per 10 Gigabit port, combined with a distributed entry caching mechanism, to meet the high burst traffic requirements of large data centers.
Single chip supports 4GB cache, line card supports up to 32GB cache, and port supports 2G cache.
Each board has a maximum hardware queue of 96K, supporting fine-grained QoS and traffic management. It can accurately allocate different priorities and queues to different users and business flows according to their needs, ensuring different bandwidth, business latency, and jitter performance.
Comprehensive maintenance and testing mechanism
Online status detection mechanism, through a dedicated maintenance engine, can detect the switching network board, backplane communication channel, business communication channel, key chips, storage, etc. of the device. Once the relevant module malfunctions, report it to the system through EMS.
Single board isolation function can isolate a specified board from the forwarding plane and no longer participate in forwarding on the forwarding plane, but the isolated board is still in the control plane and can be managed. Real time diagnosis, CPLD upgrade and other business processing can be performed on this single board without affecting the overall system business.
Supports Ethernet OAM and provides multiple device level and network level fault detection methods.
Open Application Architecture
The S12500 series products are designed based on the OAA (Open Application Architecture) concept and innovatively launch an open business platform.
Support network security multi service card insertion module, which can integrate firewall module, IPS module, ACG application control gateway module, LB load balancing module, etc. A solution for integrated network security through product integration.
Green and environmentally friendly design
The S12500 series products support intelligent management of power supply through an intelligent EMS engine system. They can support sequential power on of single boards (reducing power shock caused by simultaneous power on of single boards, improving equipment life, and reducing electromagnetic radiation), control single board power off, isolate faulty/idle single boards, and reduce system power consumption.
The S12500 series product fan adopts high-efficiency PWM speed regulation fan and supports stepless speed regulation. The system can automatically collect the temperature of the single board, calculate the fan speed control curve based on the actual situation of the device, and issue the speed control command to the fan frame. The system supports fan status monitoring (speed monitoring, fault alarm, etc.), which can automatically partition and adjust speed according to environmental temperature and single board configuration, reducing device power consumption and operating noise, effectively reducing environmental noise and extending fan life.
The S12500 series products support automatic detection of internal ports. When a slot is not configured with an interface board or a port is not connected to a cable, the system can automatically close the corresponding internal port, saving overall power consumption.
The minimum power consumption for 10G ports is less than 3.4W, for 40G ports it is less than 10.4W, for 100G ports it is less than 13.8W, and for 400G ports it is less than 20.3W.
The S12500 series products meet the EU RoHS standards for material environmental protection and safety.
The S12500 series products adopt front and rear direct ventilation, strict front and rear air duct design, high ventilation and heat dissipation efficiency, energy-saving and environmentally friendly, which can meet the requirements of efficient heat dissipation and energy consumption in data center rooms.
Comprehensive virtualization capability
IRF2 (Intelligent Resilient Framework 2, second-generation intelligent resilient architecture)
The S12500 series products support IRF2 technology, virtualizing up to 4 high-end devices into one logical device, which has strong advantages in reliability, distribution, and ease of management; Support cross transmission wavelength division devices for ultra long distance IRF2, meeting the design requirements of dual active backup solutions for remote data centers.
Reliability: Through hot backup technology, redundant backup and uninterrupted data forwarding of all information in the control plane and data plane are achieved throughout the entire virtual architecture, greatly enhancing the reliability and high performance of the virtual architecture, while eliminating single points of failure and avoiding business interruptions;
Distributed: Through cross device link aggregation technology, load sharing and mutual backup of multiple uplink links are achieved, thereby improving the redundancy of the entire network architecture and the utilization of link resources;
Ease of Management: The entire elastic architecture shares a common IP management, simplifying network device management, simplifying network topology management, improving operational efficiency, and reducing maintenance costs.
MDC (Multi tenant Device Context)
The S12500 series products can achieve a 1: N virtualization capability through MDC technology, which means that one physical switch can be virtualized into N logical switches, up to a maximum of 16 logical switches, meeting the needs of multiple customers sharing core switches; By dividing the ports of a single board into different MDCs, the capabilities of the core switch can be fully utilized while reducing the investment cost for users. MDC technology is used to achieve secure isolation of business.
EVB (Edge Virtual Bridging)
The S12500 series products support Edge Virtual Bridging (EVB), which uploads the data traffic generated by the Virtual Machine (VM) to the physical switch connected to the server for processing through the VEPA (Virtual Ethernet Port Aggregator) mode. Not only does it achieve traffic forwarding between virtual machines, but it also solves the connection and management boundary problems between virtual machines and networks.