В puka mua Ua wehewehe au i ka ʻōnaehana automation network. Wahi a kekahi poʻe, ʻo kēia hoʻokokoke mua ʻana i ka pilikia ua hoʻoponopono i kekahi mau nīnau. A hauʻoli nui kēia iaʻu, no ka mea ʻo kā mākou pahuhopu i ka pōʻai ʻaʻole e uhi i ka Ansible me nā palapala Python, akā e kūkulu i kahi ʻōnaehana.

Hoʻonohonoho ka papa hana like i ke ʻano o kā mākou e hana ai i ka nīnau.
A ʻo ka virtualization pūnaewele, kahi i hoʻolaʻa ʻia ai kēia pilikia, ʻaʻole i kūpono i ke kumuhana ADSM, kahi a mākou e loiloi ai i ka automation.

Akā, e nānā kākou mai kahi ʻaoʻao ʻē aʻe.

Nui nā lawelawe i hoʻohana i ka pūnaewele like no ka manawa lōʻihi. I ka hihia o kahi mea hoʻohana kelepona, ʻo 2G, 3G, LTE, broadband a me B2B, no ka laʻana. I ka hihia o kahi DC: ka hoʻohui ʻana no nā mea kūʻai aku ʻokoʻa, Pūnaewele, mālama poloka, mālama mea.

A pono nā lawelawe āpau i kahi kaʻawale mai kekahi i kekahi. ʻO kēia ke ʻano i ʻike ʻia ai nā pūnaewele overlay.

A ʻaʻole makemake nā lawelawe āpau e kali i kahi kanaka e hoʻonohonoho iā lākou me ka lima. ʻO kēia ke ʻano o nā mea hoʻokani pila a me SDN.

ʻO ke ala mua i ka automation systematic o ka pūnaewele, a i ʻole kekahi hapa o ia mea, ua lawe lōʻihi a hoʻokō ʻia ma nā wahi he nui: VMWare, OpenStack, Google Compute Cloud, AWS, Facebook.

ʻO ia kā mākou e hana ai i kēia lā.

Nā mea

• kumu
• Kau'ōlelo
• Underlay - pūnaewele kino
• ʻO ka uhi ʻana - ka ʻupena virtual
  • Kau ʻia me ToR
  • Kaulana mai ka mea hoʻokipa
  • Ke hoʻohana nei i ka lole Tungsten ma ke ʻano he laʻana
    • Kūkākūkā i loko o ka mīkini kino hoʻokahi
    • Ke kamaʻilio ma waena o nā VM i loaʻa ma nā mīkini kino like ʻole
    • Puka i ka honua waho

• NPP
• hopena
• nā loulou pono

kumu

A no ka mea ke kamaʻilio nei mākou e pili ana i kēia, pono ia e haʻi i nā mea e pono ai no ka virtualization network. ʻOiaʻiʻo, ʻaʻole i hoʻomaka kēia hana i nehinei.

Ua lohe paha ʻoe i ʻoi aku ma mua o hoʻokahi manawa ʻo ka pūnaewele ka mea inert loa o kekahi ʻōnaehana. A he oiaio keia ma na ano apau. ʻO ka pūnaewele ke kumu e hoʻomaha ai nā mea a pau, a paʻakikī loa ka hoʻololi ʻana iā ia - ʻaʻole ʻae nā lawelawe i ka wā e pau ai ka pūnaewele. ʻO ka manawa pinepine, hiki i ka wehe ʻana i kahi node hoʻokahi ke hoʻopau i kahi hapa nui o nā noi a hopena i nā mea kūʻai aku. ʻO kēia ke kumu e pale aku ai ka hui pūnaewele i kekahi loli - no ka mea i kēia manawa ke hana nei (ʻaʻole paha mākou i ʻike pehea), akā ma ʻaneʻi pono ʻoe e hoʻonohonoho i kahi mea hou, a ʻaʻole ʻike ʻia pehea e pili ai i ka pūnaewele.

I ʻole e kali i ka poʻe networkers e hoʻokomo i nā VLAN a ʻaʻole e hoʻopaʻa inoa i nā lawelawe ma kēlā me kēia node pūnaewele, ua hele mai ka poʻe me ka manaʻo o ka hoʻohana ʻana i nā overlays - overlay networks - aia nā ʻano like ʻole: GRE, IPinIP, MPLS, MPLS L2/L3VPN, VXLAN, GENEVE, MPLSoverUDP, MPLSoverGRE, etc.

Aia kā lākou hoʻopiʻi i nā mea maʻalahi ʻelua:

• Hoʻonohonoho ʻia nā node hope—ʻaʻole pono e hoʻopā ʻia nā node transit. Hoʻonui nui kēia i ke kaʻina hana, a i kekahi manawa e ʻae iā ʻoe e haʻalele loa i ka ʻoihana ʻoihana pūnaewele mai ke kaʻina o ka hoʻolauna ʻana i nā lawelawe hou.
• Ua hūnā ʻia ka ukana i loko o nā poʻomanaʻo - ʻaʻole pono nā nodes transit e ʻike i kekahi mea e pili ana iā ia, e pili ana i ke kamaʻilio ʻana ma nā pūʻali, a i ʻole e pili ana i nā ala o ka pūnaewele overlay. 'O ia ho'i, pono 'oe e mālama i ka 'ike li'ili'i ma nā papa, 'o ia ho'i ka ho'ohana 'ana i kahi mea ma'alahi/ma'alahi.

I kēia pilikia ʻaʻole piha piha, ʻaʻole wau e hoʻolālā e kālailai i nā ʻenehana hiki ke hiki, akā e wehewehe i ke kaʻina hana no ka hana ʻana o nā pūnaewele overlay ma DCs.

E wehewehe ka moʻo holoʻokoʻa i kahi kikowaena ʻikepili i loaʻa nā lālani o nā pahu like i hoʻokomo ʻia nā lako kikowaena like.

Ke holo nei kēia mea hana i nā mīkini virtual / pahu / serverless e hoʻokō i nā lawelawe.

Kau'ōlelo

I loko o kahi loop kikowaena E inoa wau i kahi papahana e hoʻokō i ka ʻaoʻao kikowaena o ke kamaʻilio client-server.

Ua kapa ʻia nā mīkini kino i loko o nā pā ole e hana mākou.

Mīkini kino — hoʻokomo ʻia ka kamepiula x86 i loko o kahi pā. ʻO ka huaʻōlelo i hoʻohana pinepine ʻia kahu kahu. ʻO ia kā mākou e kapa ai "mīkini"a i ʻole kahu kahu.

Mea nānā hoʻi - he palapala noi e holo ana ma ka mīkini kino e hoʻohālike ana i nā kumuwaiwai kino kahi e holo ai nā Mīkini Virtual. I kekahi manawa ma ka palapala a me ka Pūnaewele ua hoʻohana ʻia ka huaʻōlelo "hypervisor" ma ke ʻano he synonym no "host".

Mīkini uila - he ʻōnaehana hana e holo ana ma ka mīkini kino ma luna o kahi hypervisor. No mākou i kēia pōʻai, ʻaʻole ia he mea nui inā he mīkini virtual maoli a i ʻole kahi pahu. E kāhea kākou "ВМ«

Mea hoolimalima he manaʻo ākea aʻu e wehewehe ai ma kēia ʻatikala ma ke ʻano he lawelawe kaʻawale a i ʻole ka mea kūʻai aku.

Hoʻolimalima nui a i ʻole multitenancy - ka hoʻohana ʻana i ka noi like e nā mea kūʻai aku/lawelawe like ʻole. I ka manawa like, ua hoʻokō ʻia ka hoʻokaʻawale ʻana o nā mea kūʻai mai kekahi i kekahi me ka hoʻolālā noiʻi noiʻi, ʻaʻole ma o nā manawa holo kaʻawale.

ToR — Ma luna o ka hoʻololi Rack - kahi hoʻololi i hoʻokomo ʻia i loko o kahi pā kahi i hoʻopili ʻia ai nā mīkini kino a pau.

Ma waho aʻe o ka topology ToR, hoʻomaʻamaʻa nā mea hoʻolako like ʻole End of Row (EoR) a i ʻole Middle of Row (ʻoiai he mea ʻino kēia hope a ʻaʻole au i ʻike i ka pōkole MoR).

Pūnaewele lalo a i ʻole ka ʻupena i lalo a i ʻole ka underlay ʻo ia ka ʻōnaehana pūnaewele kino: nā hoʻololi, nā mea ala, nā kaula.

ʻO ka ʻupena uhi a i ʻole ka uhi ʻana a i ʻole ka uhi ʻana - he ʻupena uila o nā tunnels e holo ana ma luna o ke kino.

L3 lole a IP paha - kahi mea kupanaha o ke kanaka e hiki ai iā ʻoe ke pale i ka hana hou ʻana i ka STP a me ke aʻo ʻana iā TRILL no nā nīnauele. ʻO kahi manaʻo i loko o ka pūnaewele holoʻokoʻa a hiki i ka pae kiʻekiʻe he L3 wale nō, me ka ʻole o nā VLAN a, no laila, nā kikowaena hoʻolaha hoʻonui nui. E nānā mākou i hea mai ka huaʻōlelo "factory" ma ka ʻāpana aʻe.

SDN - Pūnaehana i wehewehe ʻia. ʻAʻole pono i kahi hoʻolauna. ʻO kahi ala i ka hoʻokele pūnaewele kahi i hoʻololi ʻia ai ka pūnaewele ʻaʻole e ke kanaka, akā e kahi papahana. ʻO ka mea maʻamau ka hoʻoneʻe ʻana i ka Plane Control ma waho aʻe o nā hāmeʻa pūnaewele hope i ka mea hoʻoponopono.

NFV — Network Function Virtualization — virtualization of network devices, suggesting that some network functions can be run in the form of virtual machines or containers to speed the homplement of new services, organize Service Chaining and simpler horizontal scalability.

VNF - Hana Pūnaewele Pūnaewele. Mea hoʻohana virtual kikoʻī: router, switch, firewall, NAT, IPS/IDs, etc.

Ke hoʻomaʻamaʻa nei au i ka wehewehe ʻana i kahi hoʻokō kikoʻī, i ʻole e huikau i ka mea heluhelu. No ka heluhelu noʻonoʻo ʻana, kuhikuhi wau iā ia i ka ʻāpana kūmole. Eia kekahi, ʻo Roma Gorge, ka mea e hoʻohewa nei i kēia ʻatikala no ka pololei ʻole, e hoʻohiki e kākau i kahi pilikia kaʻawale e pili ana i nā ʻenehana virtualization server a me ka ʻenehana, ʻoi aku ka hohonu a me ka nānā ʻana i nā kikoʻī.

Hiki ke hoʻokaʻawale ʻia ka hapa nui o nā pūnaewele i ʻelua mau ʻāpana:

Lalo malalo - kahi pūnaewele kino me kahi hoʻonohonoho paʻa.
Pale - ka wehe ʻana ma luna o Underlay no ka hoʻokaʻawale ʻana i nā mea hoʻolimalima.

He ʻoiaʻiʻo kēia no ka hihia o DC (a mākou e loiloi ai i kēia ʻatikala) a no ka ISP (ʻaʻole mākou e loiloi, no ka mea, ua hana ʻia. SDSM). Me nā ʻoihana ʻoihana, ʻoiaʻiʻo, ʻokoʻa ke kūlana.

Kiʻi me ka nānā ʻana i ka pūnaewele:

Lalo malalo

ʻO Underlay kahi pūnaewele kino: nā mea hoʻololi a me nā kaula. ʻIke nā mea hana ma lalo o ka honua pehea e hiki ai i nā mīkini kino.

Ke hilinaʻi nei ia i nā protocols maʻamau a me nā ʻenehana. ʻAʻole ka mea liʻiliʻi no ka mea e hana ana nā hāmeʻa lako a hiki i kēia lā ma luna o nā polokalamu proprietary ʻaʻole i ʻae i ka hoʻonohonoho ʻana i ka chip a i ʻole ka hoʻokō ʻana i kāna mau protocols ponoʻī; no laila, pono ka launa pū me nā mea kūʻai aku a me ka standardization.

Akā hiki i kekahi e like me Google ke hoʻomohala i kā lākou mau hoʻololi a haʻalele i nā protocols i ʻae ʻia. ʻAʻole Google ʻo LAN_DC.

ʻAʻole liʻiliʻi ka hoʻololi ʻana o Underlay no ka mea ʻo kāna hana ka pilina IP maʻamau ma waena o nā mīkini kino. ʻAʻole ʻike ʻo Underlay i kekahi mea e pili ana i nā lawelawe, nā mea kūʻai aku, a i ʻole nā ​​​​mea hoʻolimalima e holo ana ma luna o ia - pono ia e hoʻopuka i ka pūʻolo mai kekahi mīkini a i kekahi.
Hiki ke ʻano o ka underlay penei:

• IPv4+OSPF
• IPv6+ISIS+BGP+L3VPN
• L2+TRILL
• L2+STP

Hoʻonohonoho ʻia ka pūnaewele Underlay ma ke ʻano maʻamau: CLI/GUI/NETCONF.

Ma ka lima, nā palapala, nā pono pono'ī.

ʻO ka ʻatikala aʻe o ka moʻo e hoʻolaʻa ʻia i ka underlay i nā kikoʻī hou aku.

Pale

ʻO ka Overlay kahi ʻupena kikowaena o nā tunnels i kau ʻia ma luna o Underlay, hiki iā ia ke kamaʻilio me nā VM o hoʻokahi mea kūʻai aku me ka hoʻokaʻawale ʻana mai nā mea kūʻai aku.

Hoʻopili ʻia ka ʻikepili o ka mea kūʻai aku ma kekahi mau poʻomanaʻo tunneling no ka hoʻouna ʻana ma luna o ka pūnaewele lehulehu.

No laila hiki i nā VM o hoʻokahi mea kūʻai (hoʻokahi lawelawe) ke kamaʻilio me kekahi i kekahi ma o Overlay, me ka ʻike ʻole i ke ala e hele ai ka ʻeke.

Hiki paha ke overlay, no ka laʻana, e like me kaʻu i ʻōlelo ai ma luna:

• GRE tunnel
• VXLAN
• EVPN
• L3VPN
• GENEVE

Hoʻonohonoho maʻamau a mālama ʻia kahi pūnaewele overlay ma o kahi mea hoʻokele kikowaena. Mai ia mea, hāʻawi ʻia ka hoʻonohonoho hoʻonohonoho, Control Plane a me Data Plane i nā hāmeʻa e ala a hoʻopili i nā mea kūʻai aku. Liʻiliʻi ma lalo E nānā kākou i kēia me nā laʻana.

ʻAe, ʻo SDN kēia ma kona ʻano maʻemaʻe.

ʻElua mau ala ʻokoʻa i ka hoʻonohonoho ʻana i kahi pūnaewele Overlay:

1. Kau ʻia me ToR
2. Kaulana mai ka mea hoʻokipa

Kau ʻia me ToR

Hiki ke hoʻomaka i ka overlay ma ke kuapo komo (ToR) e kū ana i loko o ka pahu, e like me ka hana, no ka laʻana, i ka hihia o kahi lole VXLAN.

He hana hoʻāʻo ʻia kēia ma nā pūnaewele ISP a kākoʻo nā mea kūʻai lako pūnaewele āpau iā ia.

Eia nō naʻe, i kēia hihia, pono e hiki i ka ToR switch ke hoʻokaʻawale i nā lawelawe like ʻole, kēlā me kēia, a pono ka luna hoʻomalu pūnaewele, i kekahi ʻano, e hui pū me nā luna hoʻokele virtual machine a hana i nā loli (ʻoiai ʻo ia hoʻi) i ka hoʻonohonoho ʻana o nā hāmeʻa. .

Maʻaneʻi e kuhikuhi wau i ka mea heluhelu i kahi ʻatikala e pili ana VxLAN ma Habré ko makou hoa kahiko @bormoglotx.
Ma keia nā hōʻike me ENOG ʻO nā ala e kūkulu ai i kahi pūnaewele DC me kahi lole EVPN VXLAN e wehewehe kikoʻī ʻia.

A no ka piha piha ʻana i ka ʻoiaʻiʻo, hiki iā ʻoe ke heluhelu i ka puke a Tsiska ʻO kahi lole hou, wehe, a hiki ke hoʻonui ʻia: VXLAN EVPN.

ʻIke wau he ʻano encapsulation wale nō ʻo VXLAN a hiki ke hoʻopau ʻia nā tunnels ʻaʻole ma ToR, akā ma luna o ka mea hoʻokipa, e like me ka mea i hana ʻia ma OpenStack, no ka laʻana.

Eia naʻe, ʻo ka lole VXLAN, kahi e hoʻomaka ai ka overlay ma ToR, ʻo ia kekahi o nā hoʻolālā pūnaewele overlay i hoʻokumu ʻia.

Kaulana mai ka mea hoʻokipa

ʻO kekahi ala ʻē aʻe e hoʻomaka a hoʻopau i nā tunnels ma ka hopena hope.
I kēia hihia, noho maʻalahi ka pūnaewele (Underlay) a paʻa.
A ʻo ka pūʻali ponoʻī e hana i nā encapsulation e pono ai.

Pono kēia e holo i kahi noi kūikawā ma nā mea hoʻokipa, akā pono ia.

ʻO ka mea mua, ʻoi aku ka maʻalahi o ka holo ʻana i kahi mea kūʻai aku ma kahi mīkini Linux a i ʻole, e ʻōlelo paha, hiki paha, ʻoiai ma kahi hoʻololi e pono paha ʻoe e huli i nā hāmeʻa SDN proprietary, ka mea e pepehi ai i ka manaʻo o ka lehulehu.

ʻO ka lua, hiki ke waiho ʻia ka hoʻololi ToR i kēia hihia ma ke ʻano maʻalahi, mai ka manaʻo o ka Plane Control a me ka Plane Data. ʻOiaʻiʻo, ʻaʻole pono ia e kamaʻilio me ka mea hoʻokele SDN, a ʻaʻole pono hoʻi e mālama i nā pūnaewele / ARP o nā mea kūʻai aku i pili - ua lawa ia e ʻike i ka IP address o ka mīkini kino, e hoʻomaʻamaʻa nui i ka hoʻololi / nā papa kuhikuhi.

Ma ka moʻo ADSM, koho wau i ke ala overlay mai ka mea hoʻokipa - a laila kamaʻilio wale mākou e pili ana iā ia a ʻaʻole mākou e hoʻi i ka hale hana VXLAN.

ʻOi aku ka maʻalahi o ka nānā ʻana i nā laʻana. A ma ke ʻano he kumuhana hoʻāʻo e lawe mākou i ka OpenSource SDN platform OpenContrail, i ʻike ʻia i kēia manawa Ka lole Tungsten.

Ma ka hopena o ka ʻatikala e hāʻawi wau i kekahi mau manaʻo e pili ana i ka hoʻohālikelike me OpenFlow a me OpenvSwitch.

Ke hoʻohana nei i ka lole Tungsten ma ke ʻano he laʻana

Loaʻa i kēlā me kēia mīkini kino vRouter - he mea hoʻokele virtual e ʻike e pili ana i nā pūnaewele pili iā ia a me nā mea kūʻai aku iā lākou - ʻo ia hoʻi he router PE. No kēlā me kēia mea kūʻai, mālama ʻo ia i kahi papa kuhikuhi kaʻawale (heluhelu VRF). A hana maoli ʻo vRouter i ka hoʻoheheʻe ʻana o Overlay.

ʻO kahi mea hou aʻe e pili ana i vRouter aia ma ka hope o ka ʻatikala.

Hoʻopili ʻia kēlā me kēia VM ma ka hypervisor i ka vRouter o kēia mīkini ma o Pākuʻi TAP.

piula wai - ʻO Terminal Access Point - kahi kikowaena ma ka linux kernel e hiki ai i ka pilina pūnaewele.

Inā he nui nā pūnaewele ma hope o ka vRouter, a laila ua hana ʻia kahi kikowaena virtual no kēlā me kēia o lākou, kahi i hāʻawi ʻia ai kahi IP address - ʻo ia ka helu ʻīpuka paʻamau.
Hoʻokomo ʻia nā pūnaewele a pau o ka mea kūʻai aku i hoʻokahi VRF (hoʻokahi papa), ʻokoʻa - i loko o nā ʻokoʻa.
E hana wau i kahi hōʻole ma ʻaneʻi ʻaʻole maʻalahi nā mea āpau, a e hoʻouna wau i ka mea heluhelu nīnau i ka hopena o ka ʻatikala..

I hiki i nā vRouters ke kamaʻilio me kekahi i kekahi, a no laila, aia nā VM ma hope o lākou, hoʻololi lākou i ka ʻike ala ma o SDN hooponopono.

No ka puka ʻana i waho o ka honua, aia kahi puka i waho o ka matrix - kahi ʻīpuka pūnaewele virtual VNGW - ʻO ka ʻīpuka Pūnaewele Kūikawā (ko'u manawa).

I kēia manawa, e nānā kākou i nā hiʻohiʻona o nā kamaʻilio - a e maopopo.

Kūkākūkā i loko o ka mīkini kino hoʻokahi

Makemake ʻo VM0 e hoʻouna i kahi ʻeke iā VM2. E noʻonoʻo kākou i kēia manawa he mea kūʻai hoʻokahi VM kēia.

Mokulele ʻIkepili

1. Loaʻa iā VM-0 kahi ala paʻamau i kāna interface eth0. Hoʻouna ʻia ka pūʻolo ma laila.
   Hoʻopili maoli ʻia kēia interface eth0 i ka mea hoʻokele virtual vRouter ma o ka interface TAP tap0.
2. Hoʻopili ʻo vRouter i ke kikowaena i hele mai ai ka ʻeke, ʻo ia hoʻi, nona ka mea kūʻai aku (VRF), a nānā i ka helu o ka mea hoʻokipa me ka papa kuhikuhi o kēia mea kūʻai.
3. I ka ʻike ʻana aia ka mea loaʻa ma ka mīkini hoʻokahi ma kahi awa ʻē aʻe, hoʻouna wale ʻo vRouter i ka ʻeke iā ia me ka ʻole o nā poʻomanaʻo hou - no kēia hihia, loaʻa iā vRouter kahi komo ARP.

I kēia hihia, ʻaʻole i komo ka ʻeke i ka pūnaewele kino - ua hele ʻia i loko o ka vRouter.

Mokulele Mana

Ke hoʻomaka ka mīkini virtual, haʻi ka hypervisor iā ia:

• ʻO kāna helu IP ponoʻī.
• ʻO ke ala paʻamau ma o ka vRouter IP address ma kēia pūnaewele.

Hōʻike ka hypervisor iā vRouter ma o kahi API kūikawā:

• He aha kāu e pono ai e hana i kahi kikowaena virtual.
• He aha ke ʻano o ka pūnaewele virtual e pono ai (VM) e hana?
• ʻO ka VRF (VN) e hoʻopaʻa iā ia.
• ʻO kahi helu ARP kūʻokoʻa no kēia VM - ʻo ia ke kikowaena ma hope o kāna IP address a me kahi helu MAC e pili ana.

Eia hou, ua maʻalahi ke kaʻina hana pili maoli no ka hoʻomaopopo ʻana i ka manaʻo.

No laila, ʻike ʻo vRouter i nā VM āpau o hoʻokahi mea kūʻai aku ma kahi mīkini i hāʻawi ʻia ma ke ʻano he pūnaewele pili pono a hiki ke ala ma waena o lākou iho.

Akā ʻo VM0 a me VM1 no nā mea kūʻai like ʻole a, no laila, aia i nā papa vRouter like ʻole.

Hiki iā lākou ke kamaʻilio me kekahi i kekahi ma muli o nā hoʻonohonoho vRouter a me ka hoʻolālā pūnaewele.
No ka laʻana, inā hoʻohana nā VM o nā mea kūʻai ʻelua i nā helu lehulehu, a i ʻole ka NAT ma ka vRouter ponoʻī, a laila hiki ke hana i ke ala pololei i ka vRouter.

Ma kahi ʻē aʻe, hiki ke hele i nā wahi kikoʻī - pono ʻoe e hele i kahi kikowaena NAT e kiʻi i kahi helu lehulehu - ua like kēia me ke komo ʻana i nā pūnaewele waho, i kūkākūkā ʻia ma lalo nei.

Ke kamaʻilio ma waena o nā VM i loaʻa ma nā mīkini kino like ʻole

Mokulele ʻIkepili

1. Hoʻokahi like ka hoʻomaka: Hoʻouna ʻo VM-0 i kahi ʻeke me ka wahi e hele ai ʻo VM-7 (172.17.3.2) i kona paʻamau.
2. Loaʻa iā vRouter a ʻike kēia manawa aia ka huakaʻi ma kahi mīkini ʻokoʻa a hiki ke loaʻa ma o Tunnel0.
3. ʻO ka mea mua, kau ia i kahi lepili MPLS e hōʻike ana i ke kikowaena mamao, i hiki ai i ka vRouter ke hoʻoholo i kahi e waiho ai i kēia ʻeke me ka ʻole o nā hulina hou.

   

4. Loaʻa iā Tunnel0 ke kumu 10.0.0.2, kahi e hele ai: 10.0.1.2.
   Hoʻohui ʻo vRouter i nā poʻomanaʻo GRE (a i ʻole UDP) a me kahi IP hou i ka ʻeke kumu.
5. He ala paʻamau ka papa hoʻokele vRouter ma o ka helu ToR1 10.0.0.1. Ma laila ʻo ia e hoʻouna ai.

   
   

6. ʻO ToR1, ma ke ʻano he lālā o ka pūnaewele Underlay, ʻike (no ka laʻana, ma o OSPF) pehea e hiki ai i 10.0.1.2 a hoʻouna i ka ʻeke ma ke ala. E hoʻomaopopo ua hoʻohana ʻia ka ECMP ma aneʻi. ʻElua mau hope i loko o ke kiʻi, a e hoʻokaʻawale ʻia nā pae like ʻole i loko o lākou e ka hash. I ka hihia o kahi hale hana maoli, e ʻoi aku ka nui o nā 4 nexthops.

   I ka manawa like, ʻaʻole pono ʻo ia e ʻike i ka mea ma lalo o ke poʻomanaʻo IP waho. ʻO ia, ʻoiaʻiʻo, ma lalo o IP hiki ke loaʻa kahi sandwich o IPv6 ma luna o MPLS ma luna o Ethernet ma luna o MPLS ma luna o GRE ma luna o Helene.

7. No laila, ma ka ʻaoʻao e loaʻa ana, wehe ʻo vRouter iā GRE a, me ka hoʻohana ʻana i ka tag MPLS, hoʻomaopopo i ke kikowaena e hoʻouna ʻia ai kēia ʻeke, huki a hoʻouna i kona ʻano kumu i ka mea loaʻa.

Mokulele Mana

Ke hoʻomaka ʻoe i ke kaʻa, e like me ka mea i hōʻike ʻia ma luna.

A me kēia mau mea:

• No kēlā me kēia mea kūʻai, hoʻokaʻawale ʻo vRouter i kahi hōʻailona MPLS. ʻO kēia ka lepili lawelawe L3VPN, kahi e hoʻokaʻawale ʻia ai nā mea kūʻai aku i loko o ka mīkini kino like.
  

  ʻO ka ʻoiaʻiʻo, hoʻokaʻawale mau ʻia ka tag MPLS e ka vRouter - ma hope o nā mea a pau, ʻaʻole i ʻike mua ʻia e launa pū ka mīkini me nā mīkini ʻē aʻe ma hope o ka vRouter hoʻokahi a ʻaʻole ʻoiaʻiʻo paha kēia.

• Hoʻokumu ʻo vRouter i kahi pilina me ka mea hoʻokele SDN me ka hoʻohana ʻana i ka protocol BGP (a i ʻole like me ia - ma ke ʻano o TF, ʻo XMPP 0_o kēia).
• Ma kēia kau, hōʻike ʻo vRouter i nā ala i nā pūnaewele pili i ka mea hoʻoponopono SDN:
  • Helu helu pūnaewele
  • Ke ala hoʻopili (MPLSoGRE, MPLSoUDP, VXLAN)
  • ʻO ka hōʻailona mea kūʻai aku MPLS
  • ʻO kāu helu IP e like me nexthop

• Loaʻa i ka mea hoʻoponopono SDN ia mau ala mai nā vRouters pili a hōʻike iā lākou i nā poʻe ʻē aʻe. ʻO ia, hana ia ma ke ʻano he Alanui Reflector.

ʻO ka hana like ma ka ʻaoʻao ʻē aʻe.

Hiki ke hoʻololi i ka overlay i kēlā me kēia minuke. ʻO kēia ka mea e hana ai i nā ao ākea, kahi e hoʻomaka mau ai nā mea kūʻai aku a pani i kā lākou mīkini virtual.

Mālama ke kikowaena kikowaena i nā paʻakikī āpau o ka mālama ʻana i ka hoʻonohonoho a me ka nānā ʻana i nā papa hoʻololi / alahele ma ka vRouter.

ʻO ka ʻōlelo koʻikoʻi, kamaʻilio ka mea hoʻoponopono me nā vRouters āpau ma o BGP (a i ʻole kahi protocol like) a hoʻouna wale i ka ʻike alahele. BGP, no ka laʻana, ua loaʻa iā Address-Family e haʻi i ke ʻano encapsulation MPLS-ma-GRE ai ole ia, MPLS-i-UDP.

I ka manawa like, ʻaʻole loli ka hoʻonohonoho ʻana o ka pūnaewele Underlay i kekahi ʻano, ʻo ia hoʻi, ʻoi aku ka paʻakikī o ka automate, a maʻalahi hoʻi e wāwahi me kahi neʻe ʻino.

Puka i ka honua waho

Ma kahi e pau ai ka simulation, a pono ʻoe e haʻalele i ka honua virtual i ka mea maoli. A pono ʻoe i kahi puka kelepona uku.

Hoʻohana ʻia nā ala ʻelua:

1. Ua hoʻokomo ʻia kahi mea hoʻokele lako.
2. Hoʻomaka ʻia kahi mea hana e hoʻokō i nā hana o kahi alalai (ʻae, ma hope o SDN, ua hālāwai pū mākou me VNF). E kapa aku kākou he ʻīpuka virtual.

ʻO ka maikaʻi o ke ala ʻelua he scalability ākea ākea - ʻaʻole lawa ka mana - ua hoʻokuʻu mākou i kahi mīkini virtual me kahi ʻīpuka. Ma kekahi mīkini kino, me ka ʻole e ʻimi i nā racks manuahi, nā ʻāpana, nā mana mana, kūʻai i ka lako ponoʻī, lawe iā ia, hoʻokomo, hoʻololi, hoʻonohonoho, a laila hoʻololi pū i nā ʻāpana hewa i loko.

ʻO nā pōʻino o ka ʻīpuka virtual ʻo ia ka ʻāpana o kahi router kino i ʻoi aku ka ikaika ma mua o ka mīkini virtual multi-core, a ʻoi aku ka paʻa o kāna polokalamu, i hoʻohālikelike ʻia i kona waihona ponoʻī.aole). He mea paʻakikī hoʻi ke hōʻole i ka ʻoiaʻiʻo e hana wale ana ka hāmeʻa a me ka lako polokalamu, koi wale i ka hoʻonohonoho ʻana, ʻoiai ʻo ka hoʻomaka ʻana a me ka mālama ʻana i kahi ʻīpuka virtual he hana ia no nā ʻenekini ikaika.

Me ka wāwae hoʻokahi, nānā ka ʻīpuka i loko o ka overlay virtual network, e like me ka Virtual Machine maʻamau, a hiki ke launa pū me nā VM ʻē aʻe. I ka manawa like, hiki iā ia ke hoʻopau i nā pūnaewele o nā mea kūʻai aku a, no laila, e hoʻokō i ke ala ma waena o lākou.

Me kona wāwae ʻē aʻe, nānā ka ʻīpuka i ka ʻupena iwi kuamoʻo a ʻike pehea e komo ai i ka Pūnaewele.

Mokulele ʻIkepili

ʻO ia hoʻi, ke ʻano o ke kaʻina hana penei:

1. ʻO VM-0, me ka hoʻopaʻa ʻole ʻana i ka vRouter like, hoʻouna i kahi ʻeke me kahi huakaʻi i waho o ka honua (185.147.83.177) i ka interface eth0.
2. Loaʻa iā vRouter kēia ʻeke a nānā i ka helu wahi e hele ai ma ka papa ʻaina - ʻike i ke ala paʻamau ma ka ʻīpuka VNGW1 ma o Tunnel 1.
   ʻIke pū ʻo ia he tunnel GRE kēia me SIP 10.0.0.2 a me DIP 10.0.255.2, a pono pū ʻo ia e hoʻopili mua i ka lepili MPLS o kēia mea kūʻai aku, a VNGW1 e manaʻo nei.
3. Hoʻopili ʻo vRouter i ka ʻeke mua me MPLS, GRE a me nā poʻomanaʻo IP hou a hoʻouna iā ia i ToR1 10.0.0.1 ma ka paʻamau.
4. Hāʻawi ka pūnaewele i lalo i ka ʻeke i ka ʻīpuka VNGW1.
5. Hoʻopau ka ʻīpuka VNGW1 i nā poʻomanaʻo tunneling GRE a me MPLS, ʻike i ka helu wahi e hele ai, ʻimi i kāna papa kuhikuhi a hoʻomaopopo i ke kuhikuhi ʻia ʻana i ka Pūnaewele - ʻo ia hoʻi, ma o Full View a i ʻole Default. Inā pono, hana i ka unuhi NAT.
6. Hiki ke loaʻa kahi pūnaewele IP maʻamau mai VNGW a hiki i ka palena, ʻaʻole paha.
   Loaʻa paha kahi pūnaewele MPLS maʻamau (IGP+LDP/RSVP TE), aia paha kahi lole hope me BGP LU a i ʻole kahi tunnel GRE mai VNGW a i ka palena ma o kahi pūnaewele IP.
   E like me ia, hana ʻo VNGW1 i nā encapsulation e pono ai a hoʻouna i ka ʻeke mua i ka palena.

ʻO ke kaʻa kaʻa ma ka ʻaoʻao ʻē aʻe e hele i nā ʻanuʻu like ma ka ʻaoʻao ʻē aʻe.

1. Hoʻokuʻu ka palena i ka ʻeke i VNGW1
2. Wehe ʻo ia iā ia, nānā i ka helu o ka mea i loaʻa a ʻike hiki iā ia ke komo ma o ka tunnel Tunnel1 (MPLSoGRE a i ʻole MPLSoUDP).
3. No laila, hoʻopili ia i kahi lepili MPLS, kahi poʻomanaʻo GRE/UDP a me kahi IP hou a hoʻouna iā ia i kāna ToR3 10.0.255.1.
   ʻO ka helu wahi e hele ai ka tunnel ʻo ia ka IP address o ka vRouter ma hope o ka VM i loaʻa - 10.0.0.2.
4. Hāʻawi ka pūnaewele i lalo i ka ʻeke i ka vRouter makemake.
5. Heluhelu ka vRouter i ka GRE/UDP, e hoʻomaopopo i ka interface me ka hoʻohana ʻana i ka lepili MPLS a hoʻouna i kahi ʻeke IP ʻikeʻole i kāna interface TAP e pili ana me ka eth0 o ka VM.

Mokulele Mana

Hoʻokumu ʻo VNGW1 i kahi kaiāulu BGP me kahi mea hoʻoponopono SDN, kahi e loaʻa ai iā ia nā ʻike alahele āpau e pili ana i nā mea kūʻai: ʻo ia ka IP address (vRouter) ma hope o ka mea kūʻai aku, a ʻo ia ka inoa MPLS i ʻike ʻia e ia.

Pēlā nō, hōʻike ʻo ia iā ia iho i ka mea hoʻokele SDN o ke ala maʻamau me ka lepili o kēia mea kūʻai aku, e hōʻike ana iā ia iho ʻo ka nexthop. A laila hiki mai kēia paʻamau i vRouters.

Ma VNGW, ʻike pinepine ʻia ka hōʻuluʻulu ala a i ʻole ka unuhi NAT.

A ma ka ʻaoʻao ʻē aʻe, hoʻouna pololei ʻo ia i kēia ala aggregated i ka hālāwai me nā palena a i ʻole Route Reflectors. A mai iā lākou e loaʻa ai ke ala paʻamau a i ʻole Full-View, a i ʻole kekahi mea ʻē aʻe.

Ma ke ʻano o ka encapsulation a me ka hoʻololi ʻana i nā kaʻa, ʻaʻole ʻokoʻa ʻo VNGW mai vRouter.
Inā hoʻonui liʻiliʻi ʻoe i ka laulā, a laila hiki iā ʻoe ke hoʻohui i nā ʻenehana pūnaewele ʻē aʻe i nā VNGWs a me nā vRouters, e like me nā pā ahi, ka hoʻomaʻemaʻe ʻana a i ʻole nā ​​māla hoʻonui, IPS, a pēlā aku.

A me ke kōkua o ka hoʻokumu ʻana i nā VRF a me ka hoʻolaha pololei ʻana i nā ala, hiki iā ʻoe ke hoʻoikaika i ke kaʻa i ke ala āu e makemake ai, i kapa ʻia ʻo Service Chaining.

ʻO ia hoʻi, ma ʻaneʻi ke hana nei ka mea hoʻoponopono SDN ma ke ʻano he Alanui-Reflector ma waena o VNGWs, vRouters a me nā mea ʻenehana pūnaewele ʻē aʻe.

Akā ʻo ka mea ʻoiaʻiʻo, hoʻolele pū ka mea hoʻoponopono i ka ʻike e pili ana i ka ACL a me ka PBR (Policy Based Routing), e hoʻokaʻawale i nā kahe o kēlā me kēia kanaka ma mua o ke ala e haʻi ai iā lākou.

NPP

No ke aha ʻoe e hana mau ai i ka ʻōlelo GRE/UDP?

ʻAe, ma ka laulā, hiki ke ʻōlelo ʻia he kikoʻī no ka Tungsten Fabric - ʻaʻole pono ʻoe e noʻonoʻo pono.

Akā inā mākou e lawe, a laila ʻo TF ponoʻī, ʻoiai ʻo OpenContrail, kākoʻo i nā encapsulation ʻelua: MPLS ma GRE a me MPLS ma UDP.

Maikaʻi ka UDP no ka mea ma ka Source Port he mea maʻalahi loa ka hoʻopili ʻana i kahi hana hash mai ka IP + Proto + Port mua i kona poʻo, e ʻae iā ʻoe e hana i ke kaulike.

I ka hihia o GRE, auwe, aia wale nō nā poʻomanaʻo IP waho a me GRE, ua like ia no nā kaʻa i hoʻopili ʻia a ʻaʻohe kamaʻilio e pili ana i ke kaupaona ʻana - hiki i nā poʻe ke nānā hohonu loa i loko o ka ʻeke.

A hiki i kekahi manawa, hana nā mea hoʻokele, inā ʻike lākou i ka hoʻohana ʻana i nā tunnels dynamic, ma MPLSoGRE wale nō, a i kēia manawa wale nō lākou i aʻo ai e hoʻohana i ka MPLSoUDP. No laila, pono mākou e hana i kahi leka e pili ana i ka hiki o nā encapsulation ʻelua.

Ma ka pololei, pono e hoʻomaopopo i ke kākoʻo piha ʻana o TF i ka hoʻohui L2 me ka hoʻohana ʻana iā VXLAN.

Ua hoʻohiki ʻoe e huki like me OpenFlow.
Ke noi maoli nei lakou. ʻO vSwitch i ka OpenStack hoʻokahi hana i nā mea like loa, me ka hoʻohana ʻana iā VXLAN, ʻo ia hoʻi, he poʻomanaʻo UDP.

Ma ka Plane Data e hana like lākou; ʻokoʻa loa ka Plane Control. Hoʻohana ʻo Tungsten Fabric i ka XMPP e hāʻawi i ka ʻike ala i vRouter, aʻo OpenStack e holo i Openflow.

Hiki iā ʻoe ke haʻi hou mai iaʻu e pili ana i vRouter?
Ua māhele ʻia i ʻelua ʻāpana: vRouter Agent a me vRouter Forwarder.

Holo ka mea mua ma ka Space User o ka OS host a kamaʻilio pū me ka mea hoʻoponopono SDN, e hoʻololi i ka ʻike e pili ana i nā ala, VRF a me ACL.

Hoʻokomo ka lua i ka Plane Data - maʻamau ma Kernel Space, akā hiki ke holo ma SmartNICs - nā kāleka pūnaewele me kahi CPU a me kahi ʻāpana programmable hoʻololi ʻokoʻa, kahi e hiki ai iā ʻoe ke wehe i ka ukana mai ka CPU o ka mīkini hoʻokipa, a hoʻolilo i ka pūnaewele wikiwiki a ʻoi aku. hiki ke wānana.

ʻO kahi hiʻohiʻona ʻē aʻe ʻo ia ka vRouter he noi DPDK i ka Mea Hoʻohana Space.

Hoʻouna ʻo vRouter Agent i nā hoʻonohonoho i vRouter Forwarder.

He aha ka Pūnaewele Kūikawā?
Ua ʻōlelo au ma ka hoʻomaka ʻana o ka ʻatikala e pili ana i ka VRF e pili ana kēlā me kēia hoaaina i kāna VRF ponoʻī. A inā ua lawa kēia no ka ʻike haʻahaʻa o ka hana ʻana o ka ʻoihana overlay, a laila i ka wā e hiki mai ana e pono e wehewehe.

ʻO ka mea maʻamau, i loko o nā mīkini virtualization, ua hoʻokomo ʻia ka hui Virtual Network (hiki iā ʻoe ke noʻonoʻo i kēia he inoa kūpono) mai nā mea kūʻai aku / nā mea hoʻolimalima / mīkini virtual - kahi mea kūʻokoʻa kūʻokoʻa. A hiki ke hoʻopili ʻia kēia Pūnaewele Virtual ma o nā pilina i hoʻokahi mea hoʻolimalima, i kekahi, i ʻelua, a i ʻole ma nā wahi āpau. No laila, no ka laʻana, hoʻokō ʻia ʻo Service Chaining i ka wā e pono ai ke kaʻa ʻana i kekahi mau nodes i ke kaʻina i koi ʻia, ma o ka hoʻokumu ʻana a me ka hoʻopili ʻana i nā Pūnaewele Virtual i ke kaʻina pololei.

No laila, no laila, ʻaʻohe pilina pololei ma waena o ka Virtual Network a me ka mea hoʻolimalima.

hopena

He wehewehe haʻahaʻa loa kēia o ka hana ʻana o kahi pūnaewele virtual me kahi overlay mai ka host a me kahi mea hoʻokele SDN. Akā ʻaʻole pili i ke kahua virtualization āu e koho ai i kēia lā, e hana like ia, ʻo VMWare, ACI, OpenStack, CloudStack, Tungsten Fabric a i ʻole Juniper Contrail. E ʻokoʻa lākou i nā ʻano encapsulation a me nā poʻomanaʻo, nā protocols no ka hāʻawi ʻana i ka ʻike i ka hoʻopau ʻana i nā polokalamu pūnaewele, akā ʻo ke kumu o kahi pūnaewele overlay hiki ke hoʻonohonoho pono ʻia e hana ana ma luna o kahi pūnaewele underlay maʻalahi a paʻa.
Hiki iā mākou ke ʻōlelo i kēia lā ua lanakila ʻo SDN ma luna o kahi pūnaewele overlay i ke kahua o ka hana ʻana i kahi ao pilikino. Eia naʻe, ʻaʻole kēia manaʻo ʻaʻohe wahi o Openflow i ka honua hou - ua hoʻohana ʻia ia ma OpenStacke a ma ka VMWare NSX like, e like me kaʻu ʻike, hoʻohana ʻo Google iā ia e hoʻonohonoho i ka pūnaewele lalo.

Ma lalo ua hāʻawi wau i nā loulou i nā mea kikoʻī hou aku inā makemake ʻoe e aʻo hohonu i ka pilikia.

A pehea kā mākou Underlay?

Akā ma ka laulā, ʻaʻohe mea. ʻAʻole ʻo ia i hoʻololi i ke ala holoʻokoʻa. ʻO nā mea a pau e pono ai ʻo ia e hana i ka hihia o kahi overlay mai ka mea hoʻokipa ʻo ia ka hoʻonui ʻana i nā ala a me nā ARP i ka wā e puka mai ai ka vRouter/VNGW a nalowale a lawe i nā ʻeke ma waena o lākou.

E hoʻolālā i kahi papa inoa o nā koi no ka pūnaewele Underlay.

1. Hiki iā ʻoe ke hoʻohana i kekahi ʻano o ka protocol routing, i kā mākou kūlana - BGP.
2. Loaʻa i ka bandwidth ākea, ʻoi aku ka maikaʻi me ka ʻole o ka hoʻopaʻa inoa ʻana, i ʻole e nalowale nā ​​ʻeke ma muli o ke kaumaha.
3. ʻO ke kākoʻo ʻana i ka ECMP he ʻāpana o ka lole.
4. Hiki iā ʻoe ke hāʻawi i ka QoS, me nā mea paʻakikī e like me ECN.
5. ʻO ke kākoʻo ʻana iā NETCONF kahi kumu no ka wā e hiki mai ana.

Ua liʻiliʻi koʻu manawa ma ʻaneʻi i ka hana o ka pūnaewele Underlay ponoʻī. ʻO kēia no ka mea ma hope o ka moʻo e kālele wau iā ia, a e hoʻopā wale mākou iā Overlay i ka hele ʻana.

ʻOiaʻiʻo, ke kaupalena nei au iā mākou a pau ma ka hoʻohana ʻana i kahi kikowaena DC i kūkulu ʻia i loko o kahi hale hana ʻo Cloz me ka routing IP maʻemaʻe a me kahi overlay mai ka host.

Eia naʻe, ke hilinaʻi nei au e hiki ke wehewehe ʻia kekahi pūnaewele i loaʻa i kahi hoʻolālā ma nā huaʻōlelo a me ka automated. ʻO ia wale nō kaʻu pahuhopu ma ʻaneʻi e hoʻomaopopo i nā ala e pili ana i ka automation, a ʻaʻole e huikau i nā mea āpau ma ka hoʻoponopono ʻana i ka pilikia ma ke ʻano maʻamau.

Ma ke ʻano he ʻāpana o ADSM, hoʻolālā wau a me Roman Gorge e hoʻopuka i kahi pilikia kaʻawale e pili ana i ka virtualization o ka mana computing a me kāna pilina me ka virtualization network. E noho ma ka pili.

nā loulou pono

• ʻO ka hale kiʻi kiʻi ʻo Tungsten.
• e pili ana: ao. 6 mau hola e pili ana iā Yandex.Cloud, e uhi pū ana i ka pūnaewele virtual ma TF.
• He aha ka Open vSwitch?
• Hoʻolauna iā VxLAN.
• RFC 7348. Pūnaehana ʻĀpana Kūlana eXtensible Virtual (VXLAN): He Kiʻi no ka uhi ʻana i nā Pūnaewele ʻo Layer 2 ma luna o nā Pūnaewele 3.
  
• Hoʻokokoke Scaleway i ka lole VXLAN EVPN. E kamaʻilio e pili ana i ka pūnaewele DC holoʻokoʻa, me Underlay, Overlay, e pili ana i ka multi-homing a me ka hoʻokele.

Mahalo

• Roma Gorga - ka mea hoʻokipa mua o ka linkmeup podcast a i kēia manawa he loea i ke kahua o nā paepae ao. No nā manaʻo a me nā hoʻoponopono. ʻAe, ke kali nei mākou i kāna ʻatikala hohonu e pili ana i ka virtualization i ka wā e hiki mai ana.
• ʻO Alexander Shalimov - koʻu hoa hana a me ka mea akamai i ke kahua o ka hoʻomohala ʻana i ka pūnaewele virtual. No nā manaʻo a me nā hoʻoponopono.
• ʻO Valentin Sinitsyn - koʻu hoa hana a me ka loea i ke kahua o Tungsten Fabric. No nā manaʻo a me nā hoʻoponopono.
• Artyom Chernobay — linkmeup mea kiʻi kiʻi. No KDPV.
• Alexander Limonov. No ka meme "auto".

Source: www.habr.com