Virtualisation des réseaux locaux - Switch, hyperviseur et pare-feu

Abstract

The need for hosting application and data continues to grow. But this increase brings up two opposing constraints : on the one hand we must streamline the machines to keep operating costs and environmental and on the other hand we must fully isolate applications and data with each other. This challenge is the basic element of virtualization : maximum reuse of resources, while giving everyone the feeling of having a dedicated environment. This is the challenge that this article seeks to address, by focusing on the local network. This article explains how, starting from a network designed at a time when these needs did not exist, partitioning mechanisms have been put in place. It addresses the Ethernet partitioning (VLAN), its implementation at a firewall level, with an example of virtual firewall instance per logical network in FreeBSD, but also the partitioning within an hypervisor covering its implementation in VMware. Finally and as the needs of hosting applications have increased, this article also describes the evolution in order to define an aggregate of equipments, this aggregate of equipments will be viewed as a single equipment.