Network design of Enterprise Ecommerce Company

 


https://www.youtube.com/watch?v=vUK1YS88ssI  - Server farm

This diagram shows a typical enterprise network architecture split into an internal campus network, an edge layer, and connections to external providers. The main idea is that the inside of the company mostly uses private IP addresses, while the boundary to the outside world uses public IP addresses and routing devices.

Campus network

The left side is the Enterprise Campus, where users, servers, and internal devices live. It is organized into layers: Access, Distribution, Core, and Server Farm.

  • Access layer connects end devices like PCs, printers, and access switches.

  • Distribution layer aggregates access switches and applies policy, routing, and segmentation.

  • Core layer is the high-speed backbone that moves traffic quickly across the campus.

  • Server farm is where internal application and data servers sit.

The repeated “Private Addressing” labels mean these internal devices use RFC 1918-style private IP space rather than Internet-routable addresses.

Edge and NAT

The middle section is the Enterprise Edge, which is the boundary between the internal campus and external networks. This is where traffic often passes through firewalls, routers, and NAT devices.

NAT stands for Network Address Translation. It lets many internal private hosts share one or more public IP addresses when they access the Internet, which is why the diagram shows private addressing on the inside and public addressing on the outside.

External connections

The right side shows the SP Edge or service-provider side, including connections such as ISP 1, ISP 2, PSTN, and older Frame Relay/ATM networks. These represent different ways an enterprise can connect to carriers, the Internet, remote users, or legacy WAN services.

The diagram also labels use cases like WAN, Internet, E-commerce, and Remote Access to show that the enterprise edge supports multiple traffic types and security domains.

Simple example

A laptop inside the campus might get a private address like 10.x.x.x, send traffic to the core, then reach the edge router where NAT translates it to a public address before the packet goes out to the Internet. When the reply comes back, NAT maps it back to the original internal device.

Network TypeCommon Protocol
Small Enterprise DC- OSPF
Medium Enterprise DC- OSPF / EIGRP
Large Enterprise DC- OSPF 

Data CenterBGP

Comments

Post a Comment

Popular posts from this blog

🖧 VLAN (Virtual Local Area Network)

  🖧 VLAN (Virtual Local Area Network) 🧠 Top 5 Key Points Logical Network Segmentation: VLANs divide a physical network into multiple logical networks , thus breaking broadcast domain. Improved Security: Devices in different VLANs cannot communicate unless explicitly allowed via a router or Layer 3 switch . Reduces Broadcast Domains: Each VLAN is its own broadcast domain , minimizing unnecessary traffic. Better Management: Departments (HR, Sales, IT, etc.) can be grouped into different VLANs without changing physical cabling . Requires VLAN Tagging (802.1Q): VLAN information is carried between switches using 802.1Q trunking . VLAN Benefits: Improved security by isolating sensitive systems  Reduced broadcast traffic and better performance Smaller broadcast domains mean less unnecessary traffic and bandwidth saved.. Easy to troubleshoot.  Trunk can carry traffic for up to 4094 VLAN IDs ( ie 4094 subinterfaces ). . Complete Flow PC1 (No Tag) | ...
Read more

🌐 NAT (Network Address Translation)

Image
  🌐 NAT (Network Address Translation) 🧠 Top 6 Key Points Translates Private IPs to Public IPs: NAT converts internal (private) IP addresses into a single or multiple public IPs so that devices inside a LAN can access the Internet. Conserves Public IP Addresses: NAT allows multiple internal hosts to share one public IP, saving global address space. Improves Security: Internal IPs remain hidden from the outside world, reducing attack exposure. Types of NAT: Static NAT: One-to-one mapping (internal ↔ public).  ( Server) Dynamic NAT: Many-to-many mapping (pool of public IPs).  (  PAT (NAT Overload): Many-to-one mapping (most common).  Configured on Routers: NAT runs on routers at the boundary between private and public networks , translating IPs for outbound/inbound traffic. NAT Type Used Today 6 Common Use Static NAT ✅ Yes  (limited use 7 Publishing internal servers with a dedicated public IP Dynamic NAT ⚠️ Rarely L...
Read more

🛰️ OSPF (Open Shortest Path First)

  🛰️ OSPF (Open Shortest Path First) 🧠 Top 5 Key Points about OSPF Link-State Protocol → OSPF shares detailed information about network topology (not just hop count). Metric: Uses cost , calculated based on bandwidth (higher bandwidth = lower cost). Fast Convergence: Quickly detects and adapts to network changes. Supports VLSM & CIDR: Fully classless , allowing subnet flexibility. Area-Based Design: Supports hierarchical networks (Area 0 = Backbone, others connect to it). ⚙️ Additional Notes Works at Layer 3 (Network Layer) of the OSI model. Uses Dijkstra’s SPF (Shortest Path First) algorithm. Multicast addresses: 224.0.0.5 → All OSPF routers 224.0.0.6 → Designated Router (DR) and Backup DR OSPF uses Link-State Advertisements (LSAs) to exchange topology information. Each LSA type has a specific purpose. Here's a practical explanation of LSA Types 1–7 . 1. Type 1 – Router LSA Generated by: Every OSPF router Flooded within...
Read more