I ka manawa e kākau ai i kēia ʻatikala, ua hoʻihoʻi ʻia kahi hulina ma kahi kahua hana kaulana no ka huaʻōlelo "Network Engineer" ma kahi o ʻekolu haneli mau hakahaka ma Rusia. No ka hoʻohālikelike ʻana, ʻo ka ʻimi ʻana i ka huaʻōlelo "luna hoʻokele" e hoʻihoʻi i kahi kokoke i 2.5 tausani mau hakahaka, a ʻo "DevOps engineer" - kokoke i 800.
ʻO ke ʻano kēia ʻaʻole pono nā mea hoʻohana pūnaewele i nā manawa o nā ao lanakila, Docker, Kubernetes a me Wi-Fi ākea ākea?
E noʻonoʻo kākou (c)
E kamaʻāina kāua. ʻO Alexey koʻu inoa, a he mea hoʻohana pūnaewele wau.
Ua komo au i nā pūnaewele no nā makahiki he 10 a ke hana nei au me nā ʻōnaehana *nix like ʻole ma mua o 15 mau makahiki (ua loaʻa iaʻu kahi manawa e hoʻopili me Linux a me FreeBSD). Ua hana au i loko o nā ʻoihana kelepona, nā hui nui i manaʻo ʻia he "ʻoihana", a i kēia manawa ua hana wau i ka fintech "'ōpio a wiwo ʻole", kahi o nā ao, devops, kubernetes a me nā ʻōlelo weliweli ʻē aʻe e hoʻolilo iaʻu a me kaʻu mau hoa hana ʻole. . I kekahi lā. Malia paha.
ka hoʻokuʻu: "I loko o ko mākou ola,ʻaʻole nā mea a pau i nā manawa a pau, akā i kekahi mea, i kekahi manawa ma nā wahi" (c) Maxim Dorofeev.
ʻO nā mea a pau i kākau ʻia ma lalo nei hiki a pono e noʻonoʻo ʻia i ka manaʻo pilikino o ka mea kākau, ʻaʻole i ʻōlelo ʻo ia ka ʻoiaʻiʻo hope loa, a i ʻole kahi haʻawina piha. ʻO nā huaʻōlelo a pau he fictitious, pau nā coincidences he random.
Welina mai i koʻu honua.
Ma hea e hiki ai iā ʻoe ke hālāwai me nā mea hoʻohana pūnaewele?
1. ʻO nā mea lawelawe kelepona, nā hui lawelawe a me nā mea hoʻohui ʻē aʻe. He mea maʻalahi nā mea a pau maʻaneʻi:ʻo ka pūnaewele no lākou heʻoihana. Kūʻai pololei lākou i ka pilina (operators) a hāʻawi i nā lawelawe no ka hoʻomaka ʻana / mālama ʻana i nā pūnaewele o kā lākou mea kūʻai.
Nui ka ʻike ma ʻaneʻi, akā ʻaʻole nui ke kālā (koe ke alakaʻi ʻoe a i ʻole he luna kūʻai kūleʻa). Eia nō naʻe, inā makemake ʻoe i nā pūnaewele, a aia ʻoe i ka hoʻomaka ʻana o kāu huakaʻi, ʻo kahi ʻoihana e kākoʻo ana i kekahi mea ʻoihana ʻaʻole nui loa, ʻoiai i kēia manawa, e lilo i wahi hoʻomaka kūpono (i nā mea federal ua kākau ʻia nā mea āpau, a ma laila. he wahi liʻiliʻi ia no ka hoʻomohala ʻana). ʻAe, ʻo nā moʻolelo e pili ana pehea e hiki ai iā ʻoe ke ulu mai kahi ʻenekinia e hana ana i kekahi mau makahiki i kahi luna C-level he ʻoiaʻiʻo nō hoʻi, ʻoiai kakaʻikahi, no nā kumu maopopo. Pono nā limahana, no ka mea, hiki ke hoʻololi. He maikaʻi a maikaʻi ʻole kēia i ka manawa like - he mau hakahaka mau, ma ka ʻaoʻao ʻē aʻe - haʻalele pinepine ka poʻe ʻeleu/akamai no ka hoʻolaha ʻana a i ʻole i nā wahi "mahanahana".
2. Kūlana "ʻoihana". ʻAʻole pili inā pili kāna hana nui i ka IT a i ʻole. ʻO ka mea nui, aia kāna ʻoihana IT ponoʻī, e hōʻoiaʻiʻo ana i ka hana o nā ʻōnaehana kūloko o ka ʻoihana, me ka pūnaewele i nā keʻena, nā ala kamaʻilio i nā lālā, etc. Hiki ke hana ʻia nā hana a kahi ʻenekinia pūnaewele i loko o ia mau ʻoihana "ʻāpana manawa" e kahi luna hoʻonohonoho (inā he liʻiliʻi ka ʻoihana pūnaewele a mālama ʻia paha e ka mea hana ʻokoʻa waho), a me kahi loea pūnaewele, inā aia kekahi, hiki i ka ʻO ka manawa like e nānā i ke kelepona a me SAN (ʻaʻole maikaʻi). He ʻokoʻa kā lākou uku - pili nui ia i ka loaʻa kālā o ka ʻoihana, ka nui o ka ʻoihana a me ke ʻano. Ua hana au me nā hui kahi i hoʻokomo pinepine ʻia ai nā ʻōnaehana Cisco "i loko o nā barela", a me nā hui kahi i kūkulu ʻia ai ka pūnaewele mai nā feces, nā lāʻau a me ka lipine uliuli, a ʻaʻole i hōʻano hou ʻia nā kikowaena (pono ʻole e ʻōlelo ʻia, ʻaʻole i hoʻolako ʻia kekahi). ʻAʻole nui ka ʻike ma aneʻi, a ʻaneʻane paha ia ma kahi o ka mea kūʻai paʻa paʻa, a i ʻole "pehea e hana ai i kahi mea ʻole." ʻO wau iho, ʻike wau he mea ʻino loa ia, ʻoiai he nui ka poʻe e like me ia - ua ana ʻia nā mea āpau a hiki ke wānana (inā mākou e kamaʻilio e pili ana i nā hui nui), "dorakha-bahato", etc. Ma ka liʻiliʻi hoʻokahi manawa i ka makahiki, ʻōlelo kekahi mea kūʻai nui ua hele mai lākou me kahi ʻōnaehana mega-super-duper ʻē aʻe e hoʻomaʻamaʻa i nā mea āpau i kēia manawa a hiki ke hoʻopuehu ʻia nā luna ʻōnaehana a me nā pūnaewele, e waiho ana i kahi kāne e kaomi i nā pihi i kahi interface nani. ʻO ka ʻoiaʻiʻo, ʻoiai inā mākou e haʻalele i ke kumukūʻai o ka hoʻonā, ʻaʻole e hele nā networkers ma kahi o laila. ʻAe, aia paha ma kahi o ka console e loaʻa hou kahi kikowaena pūnaewele (akā ʻaʻole kahi ʻāpana kikoʻī o ka hāmeʻa, akā he ʻōnaehana nui e hoʻokele ana i nā ʻumi a me nā haneli o ia mau ʻāpana like ʻole), akā ʻo ka ʻike o "pehea e hana ai nā mea a pau i loko" e mau nō. pono.
3. Nā hui huahana, ʻo ka loaʻa kālā mai ka hoʻomohala ʻana (a, pinepine, hana) o kekahi polokalamu a i ʻole ke kahua - kēlā huahana like. ʻO ka maʻamau he liʻiliʻi lākou a maʻalahi hoʻi, mamao loa lākou mai ka nui o nā ʻoihana a me kā lākou bureucratization. Ma ʻaneʻi e ʻike nui ʻia kēlā mau devops, cubers, dockers a me nā huaʻōlelo weliweli ʻē aʻe, e hoʻolilo maoli i ka pūnaewele a me nā ʻenekini pūnaewele i mea ʻole pono ʻole.
Pehea ka ʻokoʻa o ka mea hoʻohana pūnaewele mai kahi luna hoʻonohonoho?
I ka hoʻomaopopo ʻana o ka poʻe ʻaʻole mai IT - ʻaʻohe mea. Nānā lāua ʻelua i ka pale ʻeleʻele a kākau i kekahi mau kiʻi, i kekahi manawa e hoʻohiki mālie.
Ma ka hoʻomaopopo ʻana i nā mea polokalamu polokalamu - ma muli paha o ke kumuhana. Hoʻoponopono nā luna hoʻomalu i nā kikowaena, nā mea hoʻohana pūnaewele i nā hoʻololi a me nā mea ala. I kekahi manawa hewa ka hoʻoponopono, a hāʻule nā mea āpau no kēlā me kēia. ʻAe, inā he mea ʻē aʻe, ʻo ka poʻe pūnaewele ka hewa. No ka hoʻopaʻa ʻana iā ʻoe, ʻo ia ke kumu.
ʻO kaʻoiaʻiʻo,ʻo kaʻokoʻa nui keʻano o ka hana. Malia paha, aia ma waena o nā pūnaewele ka nui o nā mea kākoʻo o ka "Inā hana ia, mai hoʻopā iā ia!". E like me ke kānāwai, hiki ke hana ʻia kekahi mea (i loko o hoʻokahi mea kūʻai aku) ma ke ala hoʻokahi; aia ka hoʻonohonoho holoʻokoʻa o ka pahu ma laila i ka poho o kou lima. He kiʻekiʻe ke kumukūʻai o kahi hewa, a i kekahi manawa kiʻekiʻe loa (no ka laʻana, pono ʻoe e huakaʻi i mau haneli mau kilomita e hoʻomaka hou i ke alalai, a i kēia manawa he mau tausani kānaka me ka kamaʻilio ʻole - kahi kūlana maʻamau no ka mea kelepona telecom) .
I koʻu manaʻo, ʻo ia ke kumu i hoʻoikaika nui ʻia ai nā ʻenekini pūnaewele, ma kekahi ʻaoʻao, no ka paʻa ʻana o ka pūnaewele (a ʻo ka hoʻololi ka ʻenemi nui o ke kūpaʻa), a ʻo ka lua, ʻoi aku ka hohonu o kā lākou ʻike ma mua o ka laulā (ʻaʻole ʻoe. Pono ʻoe e ʻike i nā ʻenehana a me kā lākou hoʻokō ʻana mai kahi mea hana pono hana). ʻO ia ke kumu i ʻimi ʻia ai kahi luna ʻōnaehana i googled pehea e hoʻopaʻa inoa ai i kahi vlan ma kahi ʻōnaehana Cisco ʻaʻole ia he networker. A ʻaʻole hiki iā ia ke kākoʻo maikaʻi (a me ka hoʻoponopono pilikia) i kahi pūnaewele ʻoi aku ka paʻakikī.
Akā, no ke aha ʻoe e pono ai i kahi networker inā loaʻa iā ʻoe kahi hoster?
No ke kālā hou aʻe (a inā he mea kūʻai aku ʻoe i aloha nui ʻia, malia paha no ka manuahi, "ma ke ʻano he hoaaloha"), e hoʻonohonoho nā ʻenehana kikowaena data i kāu mau hoʻololi e kūpono i kāu mau pono, a kōkua paha iā ʻoe e hoʻokumu i kahi pilina BGP me nā mea hoʻolako. (inā loaʻa iā ʻoe kāu subnet o nā helu IP no ka hoʻolaha).
ʻO ka pilikia nui, ʻaʻole ʻo ke kikowaena data kāu keʻena IT, he hui kūʻokoʻa ʻo ia ka pahuhopu e loaʻa ka waiwai. E komo pū ana me ka uku o ʻoe ma ke ʻano he mea kūʻai aku. Hāʻawi ke kikowaena ʻikepili i nā racks, hāʻawi iā lākou i ka uila a me ke anu, a hāʻawi pū kekahi i kahi pilina "paʻamau" i ka Pūnaewele. Ma muli o kēia ʻōnaehana, hiki i ke kikowaena ʻikepili ke hoʻokipa i kāu mau lako (colocation), hoʻolimalima i kahi kikowaena iā ʻoe (server hoʻolaʻa), a i ʻole e hāʻawi i kahi lawelawe hoʻokele (e laʻa, OpenStack a i ʻole K8s). Akā ʻo ka ʻoihana o kahi kikowaena data (maʻamau) ʻaʻole ia ka hoʻokele ʻana i ka ʻoihana mea kūʻai aku, no ka mea, ʻoi aku ka paʻakikī o kēia kaʻina hana, maikaʻi ʻole ʻia (a i loko o kahi kikowaena data maʻamau nā mea āpau i hiki ke hana ʻia), hui pū ʻia a ʻoi aku ka maikaʻi (ʻo kēlā me kēia mea kūʻai. he kanaka hoʻokahi) a piha i nā hoʻopiʻi ("e haʻi mai ʻoe iaʻu ua hoʻonohonoho ʻia ke kikowaena, akā i kēia manawa ua hāʻule, nau wale nō ka hewa!!!111"). No laila, inā kōkua ka hoster iā ʻoe i kekahi mea, e hoʻāʻo ʻo ia e hana maʻalahi a maʻalahi hoʻi. No ka mea, ʻaʻole pono ka hana ʻana ia mea, ma ka liʻiliʻi loa mai ka manaʻo o nā kumukūʻai hana o nā ʻenekinia o kēia hoster hoʻokahi (akā, ʻokoʻa nā kūlana, ʻike i ka hōʻole). ʻAʻole kēia manaʻo e hana ʻino ka hoster i nā mea āpau. Akā ʻaʻole ia he ʻoiaʻiʻo e hana pololei ʻo ia i kāu mea e pono ai.
Me he mea lā ua maopopo loa ka mea, akā i nā manawa he nui i kaʻu hoʻomaʻamaʻa ʻana ua ʻike au i ka ʻoiaʻiʻo ua hoʻomaka nā ʻoihana e hilinaʻi i kā lākou mea hoʻolako kikowaena ma mua o ka mea e pono ai, ʻaʻole kēia i alakaʻi i kekahi mea maikaʻi. Pono wau e wehewehe i ka lōʻihi a me ka kikoʻī ʻaʻole i uhi ʻia kahi SLA hoʻokahi i nā poho mai ka wā haʻahaʻa (he mau ʻokoʻa, akā ʻo ka mea maʻamau, ʻoi loa ke kumukūʻai no ka mea kūʻai aku) a ʻaʻole ʻike ka mea hoʻokipa i ka mea e hana nei. nā mea kūʻai aku (koe naʻe nā hōʻailona maʻamau). A ʻaʻole hana ka mea hoʻokele i nā waihona no ʻoe. ʻOi aku ka maikaʻi o ke kūlana inā ʻoi aku ʻoe ma mua o hoʻokahi hoster. Inā pilikia kekahi ma waena o lākou, ʻaʻole lākou e ʻike iā ʻoe i ka mea i hewa.
ʻOiaʻiʻo, ʻo nā kumu ma aneʻi e like me ke koho ʻana i ka "in-house admin team vs outsource". Inā helu ʻia nā pilikia, ʻoluʻolu ka maikaʻi, a ʻaʻole manaʻo ka ʻoihana, no ke aha e hoʻāʻo ʻole ai. Ma ka ʻaoʻao ʻē aʻe, ʻo ka pūnaewele kekahi o nā papa hana maʻamau, a ʻaʻole pono e waiho iā ia i nā poʻe o waho inā ʻoe e kākoʻo i nā mea āpau iā ʻoe iho.
I nā hihia hea e pono ai kahi mea hoʻohana pūnaewele?
A laila e kamaʻilio kikoʻī mākou e pili ana i nā ʻoihana meaʻai hou. Me nā mea hana a me nā ʻoihana, maopopo nā mea āpau, hoʻohui a i ʻole ka liʻiliʻi - ua loli iki ma laila i nā makahiki i hala iho nei, a ua pono nā networkers ma mua, a pono lākou i kēia manawa. Akā me kēlā mau mea "'ōpiopio a wiwo ʻole" ʻaʻole maopopo loa. Hoʻokomo pinepine lākou i kā lākou ʻōnaehana holoʻokoʻa i nā ao, no laila ʻaʻole pono lākou i nā admins - koe wale nō nā mea hoʻokele o kēlā mau ao, ʻoiaʻiʻo. ʻO ka ʻōnaehana, ma kekahi ʻaoʻao, he maʻalahi loa i kāna hoʻolālā ʻana, ma ka ʻaoʻao ʻē aʻe, ua maʻalahi ia (ansible/puppet, terraform, ci/cd... well, you know). Eia nō naʻe aia nā kūlana i hiki ʻole iā ʻoe ke hana me ka ʻole o kahi ʻenekinia pūnaewele.
Laʻana 1, maʻamau
Inā hoʻomaka kahi hui me hoʻokahi kikowaena me kahi IP IP lehulehu, aia ma kahi kikowaena data. A laila aia ʻelua mau kikowaena. A laila hou aʻe ... Ma hope a ma hope paha, e pono ai kahi pūnaewele pilikino ma waena o nā kikowaena. No ka mea, ua kaupalena ʻia nā kaʻa "waho" e ka bandwidth (ʻaʻole i ʻoi aku ma mua o 100Mbit/s no ka laʻana) a ma ka nui o nā mea i hoʻoiho ʻia / hoʻouka ʻia i kēlā me kēia mahina (he ʻokoʻa nā kumukūʻai o nā hosters like ʻole, akā ʻoi aku ka maikaʻi o ka bandwidth i ka honua i waho. pūnaewele pilikino).
Hoʻohui ka hoster i nā kāleka pūnaewele hou i nā kikowaena a hoʻokomo iā lākou i kā lākou hoʻololi i kahi vlan kaʻawale. Hōʻike ʻia kahi "flat" kūloko ma waena o nā kikowaena. ʻoluʻolu!
Ke ulu nei ka nui o nā kikowaena, a ke ulu pū nei nā kaʻa ma ka pūnaewele pilikino - backups, replications, etc. Hāʻawi ka hoster e hoʻoneʻe iā ʻoe i nā hoʻololi ʻokoʻa i ʻole ʻoe e hoʻopilikia i nā mea kūʻai aku ʻē aʻe, a ʻaʻole lākou e hoʻopilikia iā ʻoe. Hoʻokomo ka mea hoʻokele i kekahi mau hoʻololi a hoʻonohonoho iā lākou - ʻoi aku paha, e waiho ana i hoʻokahi pūnaewele palahalaha ma waena o kāu mau kikowaena āpau. Hana maikaʻi nā mea a pau, akā i kekahi manawa e hoʻomaka ai nā pilikia: hoʻonui pinepine ka lohi ma waena o nā pūʻali, hoʻopiʻi nā lāʻau no ka nui o nā ʻeke arp i kēlā me kēia kekona, a i ka wā o ka loiloi ua hoʻopaʻa ʻia ka pentester i kāu pūnaewele kūloko holoʻokoʻa, wāwahi hoʻokahi server.
He aha ka mea e hana ai?
E hoʻokaʻawale i ka pūnaewele i nā ʻāpana - vlans. E hoʻonohonoho i kāu ʻōlelo ponoʻī i kēlā me kēia vlan, koho i kahi puka e hoʻololi ai i ke kaʻa ma waena o nā pūnaewele. E hoʻonohonoho i ka acl ma ka ʻīpuka e kaupalena i ke komo ʻana ma waena o nā ʻāpana, a i ʻole e hoʻokomo i kahi pā ahi ʻokoʻa ma kahi kokoke.
Laʻana 1, hoʻomau
Hoʻopili ʻia nā kikowaena i ka LAN me hoʻokahi kaula. Hoʻopili ʻia nā mea hoʻololi i loko o nā pahu i kekahi i kekahi, akā inā loaʻa kahi pōʻino i hoʻokahi pahu, hāʻule ʻekolu mau mea pili. Aia nā papahana, akā aia nā kānalua e pili ana i ko lākou pili. Loaʻa i kēlā me kēia kikowaena kona helu lehulehu, i hoʻopuka ʻia e ka mea hoʻokipa a hoʻopaʻa ʻia i ka rack. ʻO kēlā mau. I ka neʻe ʻana i kahi kikowaena, pono e hoʻololi ʻia ka helu wahi.
He aha ka mea e hana ai?
Hoʻohui i nā kikowaena me ka hoʻohana ʻana i ka LAG (Link Aggregation Group) me ʻelua mau kaula i nā hoʻololi i ka pahu (pono lākou e hoʻonui ʻia). E mālama i nā pilina ma waena o nā lākeke, e hoʻohuli iā lākou i ke ʻano "hōkū" (a i ʻole ka CLOS maʻamau i kēia manawa), i ʻole e pili ka nalo ʻana o kekahi ʻeke i nā mea ʻē aʻe. E koho i nā pahu "waena" kahi e loaʻa ai ke kikowaena pūnaewele a ma kahi e hoʻopili ʻia ai nā pahu ʻē aʻe. I ka manawa like, e hoʻonohonoho i ka ʻōlelo lehulehu, e lawe mai ka mea hoʻokipa (a i ʻole mai RIR, inā hiki) i kahi subnet, āu e hoʻolaha ai (a ma o ka hoster) i ka honua.
Hiki ke hana i kēia mau mea a pau e kahi luna hoʻonohonoho "maʻamau" ʻaʻole ʻike hohonu i nā pūnaewele? ʻAʻole maopopo. E hana anei ka mea hoʻokipa i kēia? Malia paha ia, akā pono ʻoe i kahi kikoʻī kikoʻī kikoʻī kikoʻī, kahi e pono ai kekahi e huki. a laila e nānā ua hana pono nā mea a pau.
Laʻana 2: Kapua
E ʻōlelo kākou he VPC kāu ma kekahi ao lehulehu. No ka loaʻa ʻana mai ke keʻena a i ʻole ka ʻāpana mua o ka ʻoihana i ka pūnaewele kūloko i loko o ka VPC, pono ʻoe e hoʻonohonoho i kahi pilina ma o IPSec a i ʻole kahi ala i hoʻolaʻa ʻia. Ma kekahi ʻaoʻao, ʻoi aku ka liʻiliʻi o IPSec, no ka mea ʻAʻole pono e kūʻai i nā lako lako hou; hiki iā ʻoe ke hoʻonohonoho i kahi tunnel ma waena o kāu kikowaena me kahi helu lehulehu a me ke ao. Akā - ka lohi, ka palena o ka hana (no ka mea e pono e hoʻopili ʻia ke kahawai), me ka hoʻohui ʻole ʻia (no ka mea, aia ke komo ma o ka Pūnaewele maʻamau).
He aha ka mea e hana ai?
E hoʻokiʻekiʻe i kahi pilina ma o kahi ala i hoʻolaʻa ʻia (no ka laʻana, kapa ʻia ʻo AWS iā Direct Connect). No ka hana ʻana i kēia, e ʻimi i kahi hoa hana nāna e hoʻopili iā ʻoe, e hoʻoholo i ka wahi pili kokoke iā ʻoe (ʻo ʻoe i ka mea hoʻohana a me ka mea hoʻohana i ke ao), a, hope, hoʻonohonoho i nā mea āpau. Hiki paha ke hana i kēia me ka ʻole o ka ʻenekinia pūnaewele? ʻAe ʻae. Akā pehea e hoʻoponopono ai me ka ʻole o nā pilikia ʻaʻole maopopo loa.
Loaʻa paha nā pilikia me ka loaʻa ma waena o nā ao (inā he multicloud kāu) a i ʻole nā pilikia me ka lohi ma waena o nā wahi like ʻole, etc. ʻOiaʻiʻo, i kēia manawa ua ʻike ʻia nā mea hana he nui e hoʻonui ai i ka ʻike o nā mea e hana nei i ke ao (ʻo ia mau maka tausani), akā ʻo kēia nā mea hana a ka ʻenekinia pūnaewele, ʻaʻole ia he pani.
Hiki iaʻu ke kahakiʻi i ʻelua mau hiʻohiʻona like ʻole mai kaʻu hana, akā manaʻo wau ua maopopo ka hui, e hoʻomaka ana mai kahi pae o ka hoʻomohala ʻana i nā ʻōnaehana, pono ke loaʻa i kahi kanaka (ʻoi aku ka maikaʻi ma mua o hoʻokahi) i ʻike i ka hana ʻana o ka pūnaewele a hiki ke hoʻonohonoho. nā lako pūnaewele a hoʻoponopono i nā pilikia inā kū mai. E manaʻoʻiʻo mai iaʻu, he mea kāna e hana ai
He aha ka mea e ʻike ai ka mea hana pūnaewele?
ʻAʻole pono (a i kekahi manawa, ʻino) no ka ʻenekinia pūnaewele e hana wale me ka pūnaewele a ʻaʻohe mea ʻē aʻe. ʻOiai inā ʻaʻole mākou e noʻonoʻo i ke koho me kahi ʻōnaehana e noho kokoke ana i ke ao ākea (a, ʻo kēlā me kēia mea e ʻōlelo ai, e lilo ana ia i mea kaulana loa), a e lawe, no ka laʻana, ma ke kahua a i ʻole nā ao pilikino, kahi. ma ka “ʻike pae CCNP wale nō” "ʻAʻole ʻoe e haʻalele.
Ma kahi o, ʻoiaʻiʻo, nā pūnaewele - ʻoiai aia kahi kahua pau ʻole no ke aʻo ʻana, ʻoiai inā ʻoe e noʻonoʻo wale i kahi wahi (nā mea hoʻolako pūnaewele, ʻoihana, nā kikowaena data, Wi-Fi ...)
ʻOiaʻiʻo, e hoʻomanaʻo ka hapa nui o ʻoukou iā Python a me nā "automate network" ʻē aʻe, akā pono wale kēia, akā ʻaʻole lawa. I mea e hiki ai i kahi ʻenekinia pūnaewele ke "hoʻohui maikaʻi i ka hui," pono e hiki iā ia ke ʻōlelo i ka ʻōlelo like me nā mea hoʻomohala a me nā hoa hoʻokele/devs. He aha ka manaʻo?
- ʻAʻole hiki iā ʻoe ke hana ma Linux ma ke ʻano he mea hoʻohana, akā no ka lawelawe ʻana, ma ka liʻiliʻi loa ma ka pae sysadmin-jun: hoʻokomo i ka polokalamu pono, hoʻomaka hou i kahi lawelawe i hāʻule ʻole, kākau i kahi systemd-unit maʻalahi.
- E hoʻomaopopo (ma ka liʻiliʻi ma nā ʻōlelo maʻamau) pehea ka hana ʻana o ka waihona pūnaewele ma Linux, pehea ka hana ʻana o ka pūnaewele i nā hypervisors a me nā ipu (lxc / docker / kubernetes).
- ʻOiaʻiʻo, hiki iā ʻoe ke hana me ansible/chef/puppet a i ʻole ʻōnaehana SCM ʻē aʻe.
- Pono e kākau ʻia kahi laina ʻokoʻa e pili ana i SDN a me nā pūnaewele no nā ao pilikino (e laʻa, TungstenFabric a i ʻole OpenvSwitch). ʻO kēia kekahi papa nui o ka ʻike.
I ka pōkole, ua wehewehe au i kahi loea T-shape maʻamau (e like me ka mea maʻamau ke ʻōlelo i kēia manawa). Me he mea lā ʻaʻohe mea hou, akā ma muli o ka ʻike ninaninau, ʻaʻole hiki i nā ʻenekini pūnaewele āpau ke kaena i ka ʻike o ʻelua mau kumuhana mai ka papa inoa ma luna. I ka hoʻomaʻamaʻa, ʻo ka nele o ka ʻike "ma nā kahua pili" he mea paʻakikī loa ia ʻaʻole wale e kamaʻilio me nā hoahana, akā e hoʻomaopopo pū i nā koi i nā wahi ʻoihana ma ka pūnaewele, e like me ka haʻahaʻa haʻahaʻa o ka papahana. A me ka ʻole o kēia ʻike, ʻoi aku ka paʻakikī o ka pale ʻana i kou manaʻo a "kūʻai aku" iā ia i ka ʻoihana.
Ma ka ʻaoʻao ʻē aʻe, ʻo ka maʻamau like o ka "hoʻomaopopo i ke ʻano o ka hana ʻana o ka ʻōnaehana" hāʻawi i nā mea hoʻohana pūnaewele i kahi pōmaikaʻi maikaʻi loa ma luna o nā ʻano "generalists" ʻike e pili ana i nā ʻenehana mai nā ʻatikala ma Habré / medium a me nā kamaʻilio ma Telegram, akā ʻaʻole maopopo loa pehea e hana ai. nā loina e hana ana kēia a i ʻole ia polokalamu? A ʻo ka ʻike o kekahi mau hiʻohiʻona, e like me ka mea i ʻike ʻia, ua hoʻololi maikaʻi ʻia ka ʻike o nā ʻike he nui.
Nā hopena, a i ʻole TL; DR
- ʻO kahi luna hoʻoponopono pūnaewele (e like me ka DBA a i ʻole ka ʻenekini VoIP) he loea me kahi ʻaoʻao haiki (ʻaʻole like me nā luna hoʻomalu/devs/SRE), ʻaʻole e ala koke ka pono (a ʻaʻole hiki ke ala no ka manawa lōʻihi, ʻoiaʻiʻo) . Akā inā e ala mai, ʻaʻole paha e hoʻololi ʻia e ka ʻike o waho (outsource a i ʻole nā luna hoʻokele maʻamau, "nāna nō hoʻi e mālama i ka pūnaewele"). ʻO ka mea kaumaha loa ʻo ka pono o ia mau loea he liʻiliʻi, a, ma ke ʻano, i loko o kahi hui me 800 programmers a me 30 devops/administrators, aia paha ʻelua mau networkers e hana maikaʻi loa me kā lākou mau kuleana. ʻO kēlā mau. ʻo ka mākeke a he liʻiliʻi loa, a me ka uku maikaʻi - ʻoi aku ka liʻiliʻi.
- Ma ka ʻaoʻao ʻē aʻe, pono ka ʻike pūnaewele maikaʻi i ka honua hou ʻaʻole wale i nā pūnaewele ponoʻī (a pehea e hoʻomaʻamaʻa ai i kā lākou hoʻonohonoho), akā pehea hoʻi e pili ana nā ʻōnaehana hana a me nā polokalamu e holo nei ma luna o kēia mau pūnaewele me lākou. Me ka ʻole o kēia, paʻakikī loa ka hoʻomaopopo ʻana i ka mea a kāu mau hoa hana e noi nei iā ʻoe a e haʻi (kūpono) i kāu mau makemake/koi iā lākou.
- ʻAʻohe ao, ʻo ka kamepiula ʻē aʻe wale nō. Pono ʻoe e hoʻomaopopo ʻo ka hoʻohana ʻana i nā ao lehulehu / pilikino a i ʻole nā lawelawe o kahi mea hoʻolako kikowaena "e hana i nā mea āpau no ʻoe ma ke kumu turnkey" ʻaʻole ia e hoʻololi i ka ʻoiaʻiʻo e hoʻohana mau ana kāu noi i ka pūnaewele, a e pili ana nā pilikia me ia i ka hana o kāu noi. ʻO kāu koho kahi e loaʻa ai ke kikowaena mākaukau, nona ke kuleana no ka pūnaewele o kāu papahana.
Source: www.habr.com