网络 ======== IP规划 -------------------------- 119.96.203.98为托管机房外网IP，202.103.24.68为机房DNS。 172.20.20.0/24为托管机房网段；172.20.19.0/24为托管机房管理网段；172.21.21.0/24为办公室网络网段。 172.21.21.0/24网段分配如下： +-----------------+------------+------+ | IP | 用途 | 说明 | +=================+============+======+ | 172.21.21.254 | 防火墙网关 | | +-----------------+------------+------+ | 172.21.21.251 | ESXI | | +-----------------+------------+------+ | 172.21.21.250 | Dell iDRAC | | +-----------------+------------+------+ | 172.21.21.242 | AP2 | | +-----------------+------------+------+ | 172.21.21.241 | AP1 | | +-----------------+------------+------+ | 172.21.21.1-100 | DHCP | | +-----------------+------------+------+ 172.20.19.0/24网段分配如下： +-----------------+----------------------+------+ | IP | 用途 | 说明 | +=================+======================+======+ | 172.20.19.254 | 防火墙网关 | | +-----------------+----------------------+------+ | 172.20.19.252 | 存储服务器管理口B | | +-----------------+----------------------+------+ | 172.20.19.251 | 存储光纤交换机管理口 | | +-----------------+----------------------+------+ | 172.20.19.250 | 存储服务器管理口A | | +-----------------+----------------------+------+ | 172.20.19.249 | Server-1 管理口 | | +-----------------+----------------------+------+ | 172.20.19.248 | Server-2 管理口 | | +-----------------+----------------------+------+ | 172.20.19.247 | Server-3 管理口 | | +-----------------+----------------------+------+ | 172.20.19.246 | Server-4 管理口 | | +-----------------+----------------------+------+ | 172.20.19.245 | Server-5 管理口 | | +-----------------+----------------------+------+ | 172.20.19.244 | Server-6 管理口 | | +-----------------+----------------------+------+ | 172.20.19.243 | Server-7 管理口 | | +-----------------+----------------------+------+ | 172.20.19.242 | Server-8 管理口 | | +-----------------+----------------------+------+ | 172.20.19.241 | 保留 | | +-----------------+----------------------+------+ | 172.20.19.240 | Server-10 管理口 | | +-----------------+----------------------+------+ | 172.20.20.1-239 | 未分配 | | +-----------------+----------------------+------+ 172.20.20.0/24网段分配如下： +-------------------+------------------------+-----------------------------------------+ | IP | 用途 | 说明 | +===================+========================+=========================================+ | 172.20.20.254 | 防火墙网关 | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.251 | vCenter | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.250 | OpenStack浮动IP | 暂时未用，预留 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.249 | Server-1 物理机ESXi | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.248 | Server-2 物理机ESXi | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.247 | Server-3 物理机ESXi | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.246 | Server-4 物理机ESXi | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.245 | Server-5 物理机ESXi | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.244 | Server-6 物理机ESXi | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.243 | Server-7 物理机ESXi | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.242 | Server-8 物理机ESXi | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.241 | 保留 | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.240 | Server-10 物理机CentOS | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.201-239 | 物理机保留地址 | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.200 | 虚拟机模板IP | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.199 | dl-199 | server4 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.198 | dl-198 | server3 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.197 | dl-197 | server2 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.196 | dl-196 | server1 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.195 | dl-195 | server5 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.194 | dl-194 | server6 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.193 | dl-193 | server7 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.192 | dl-192 | server8 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.191 | 深度学习保留 | 暂未使用 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.190 | NFS | 预计部署Docker-Registry,暂未部署 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.189 | gitlab | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.188 | 各种镜像 | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.171-188 | 内部公共服务预留 | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.170 | gitlab同步服务 | 使用VPN，组网后删除，暂未部署 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.160-169 | 姜福泉运维测试使用 | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.100-159 | 未分配 | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.29-99 | 大数据环境保留 | | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.28 | server1-CDH6 | kerberos+HA worker （2master+3worker) | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.27 | server1-CDH6 | kerberos+HA worker （2master+3worker) | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.26 | server1-CDH6 | kerberos+HA worker （2master+3worker) | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.25 | server1-CDH6 | kerberos+HA master2 （2master+3worker) | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.24 | server1-CDH6 | kerberos+HA master1 （2master+3worker) | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.23 | server4-CDH5 | kerberos+HA worker （2master+3worker) | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.22 | server4-CDH5 | kerberos+HA worker （2master+3worker) | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.21 | server4-CDH5 | kerberos+HA worker （2master+3worker) | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.20 | server4-CDH5 | kerberos+HA master2 （2master+3worker) | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.19 | server4-CDH5 | kerberos+HA master1 （2master+3worker) | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.18 | 测试使用CDH5 | server3-bd2018-worker | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.17 | 测试使用CDH5 | server3-bd2017-worker | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.16 | 测试使用CDH5 | server3-bd2016-worker | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.15 | 测试使用CDH5 | server3-bd2015-master | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.14 | CDH5-Open-大内存 | server2-bd2014-worker | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.13 | CDH5-Open-大内存 | server2-bd2013-worker | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.12 | CDH5-Open-大内存 | server2-bd2012-worker | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.11 | CDH5-Open-大内存 | server2-bd2011-master | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.6-10 | igis环境预留 | 计算中心开发环境 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.5 | server1-iGIS-service | 自用正式服务环境 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.4 | server4-iGIS-show | 产品经理验收与演示环境 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.3 | server3-iGIS-test3 | 联调环境 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.2 | server3-iGIS-qa | 测试使用 | +-------------------+------------------------+-----------------------------------------+ | 172.20.20.1 | server1-igis-dev1 | 微服务开发环境 | +-------------------+------------------------+-----------------------------------------+ 网络拓扑 ------------ 网络拓扑图如下： .. image:: _static/images/network.png 网络管理 -----------