Thaum lub sijhawm sau tsab xov xwm no, kev tshawb fawb ntawm qhov chaw ua haujlwm nrov rau cov kab lus "Network Engineer" rov qab txog peb puas lub chaw haujlwm nyob thoob plaws tebchaws Russia. Rau kev sib piv, kev tshawb nrhiav cov kab lus "tus thawj tswj hwm" rov qab yuav luag 2.5 txhiab tus neeg ua haujlwm, thiab "DevOps engineer" - yuav luag 800.
Puas yog qhov no txhais tau hais tias cov neeg siv network tsis xav tau ntxiv lawm thaum lub sijhawm muaj yeej huab, Docker, Kubernetes thiab thoob plaws ntiaj teb Wi-Fi?
Cia peb xav txog nws (c)
Cia peb paub. Kuv lub npe yog Alexey, thiab kuv yog ib tug networker.
Kuv tau koom nrog hauv tes hauj lwm rau ntau tshaj 10 xyoo thiab tau ua hauj lwm nrog ntau yam * nix systems rau ntau tshaj 15 xyoo (Kuv muaj caij nyoog rau tinker nrog Linux thiab FreeBSD). Kuv tau ua haujlwm hauv xov tooj cua, cov tuam txhab loj uas suav tias yog "kev lag luam", thiab tsis ntev los no kuv tau ua haujlwm hauv "cov tub ntxhais hluas thiab txaus ntshai" fintech, qhov twg huab, devops, kubernetes thiab lwm cov lus txaus ntshai uas yuav ua rau kuv thiab kuv cov npoj yaig tsis tsim nyog. . Ib hnub. Tej zaum.
Kev lees paub: "Hauv peb lub neej, tsis yog txhua yam nyob ib puag ncig thiab txhua qhov chaw, tab sis qee yam, qee zaum hauv qhov chaw" (c) Maxim Dorofeev.
Txhua yam uas sau hauv qab no tuaj yeem thiab yuav tsum tau suav tias yog tus kheej lub tswv yim ntawm tus sau, uas tsis lees tias yog qhov tseeb kawg, lossis txawm tias muaj kev kawm tiav. Tag nrho cov cim yog cuav, tag nrho cov coincidences yog random.
Zoo siab txais tos rau kuv lub ntiaj teb.
Koj tuaj yeem ntsib cov neeg sib tham nyob qhov twg?
1. Cov neeg ua haujlwm hauv xov tooj, cov tuam txhab pabcuam thiab lwm cov koom ua ke. Txhua yam yooj yim ntawm no: lub network rau lawv yog kev lag luam. Lawv ncaj qha muag kev sib txuas (cov neeg ua haujlwm) lossis muab kev pabcuam rau kev tshaj tawm / tswj xyuas lawv cov neeg siv khoom lub network.
Muaj ntau qhov kev paub ntawm no, tab sis tsis muaj nyiaj ntau (tshwj tsis yog koj yog tus thawj coj lossis tus thawj tswj hwm kev muag khoom zoo). Thiab tseem, yog tias koj nyiam cov tes hauj lwm, thiab koj tsuas yog thaum pib ntawm koj txoj kev taug kev, txoj hauj lwm hauv kev txhawb nqa ntawm qee tus neeg ua haujlwm tsis loj yuav, txawm tias tam sim no, yog qhov pib zoo tshaj plaws (hauv tsoom fwv teb chaws txhua yam yog scripted heev, thiab muaj. yog chav me me rau kev muaj tswv yim). Zoo, cov dab neeg hais txog yuav ua li cas koj tuaj yeem loj hlob los ntawm tus kws ua haujlwm hauv lub luag haujlwm hauv ob peb xyoos mus rau tus thawj tswj hwm qib C kuj yog qhov tseeb, txawm tias tsis tshua muaj, rau qhov laj thawj pom tseeb. Muaj ib txwm xav tau cov neeg ua haujlwm, vim tias kev hloov pauv tshwm sim. Qhov no yog ob qho tib si zoo thiab qhov tsis zoo nyob rau tib lub sijhawm - muaj ib txwm muaj chaw ua haujlwm, ntawm qhov tod tes - feem ntau cov nquag nquag / ntse tawm sai sai rau kev nce qib lossis rau lwm qhov, "sov dua" qhov chaw.
2. Conditional "kev lag luam". Nws tsis muaj teeb meem seb nws txoj haujlwm tseem ceeb cuam tshuam nrog IT lossis tsis. Qhov tseem ceeb tshaj plaws yog tias nws muaj nws lub tuam txhab IT, uas ua kom muaj kev ua haujlwm ntawm lub tuam txhab cov txheej txheem sab hauv, suav nrog lub network hauv chaw ua haujlwm, kev sib txuas lus rau cov ceg, thiab lwm yam. Kev ua haujlwm ntawm tus kws tshaj lij network hauv cov tuam txhab xws li tuaj yeem ua "ib nrab sijhawm" los ntawm tus thawj tswj hwm (yog tias lub network infrastructure me me lossis raug tswj los ntawm tus neeg ua haujlwm sab nraud), thiab tus kws tshaj lij network, yog tias muaj, tuaj yeem ntawm tib lub sij hawm saib tom qab xov tooj thiab SAN (tsis zoo). Lawv them nyiaj txawv - nws zoo heev nyob ntawm cov txiaj ntsig ntawm kev lag luam, qhov loj ntawm lub tuam txhab thiab cov qauv. Kuv tau ua haujlwm nrog cov tuam txhab uas Cisco cov tshuab tsis tu ncua "loaded hauv chim", thiab nrog cov tuam txhab uas lub network tau tsim los ntawm cov quav, sticks thiab xiav daim kab xev, thiab cov servers yeej tsis tau hloov kho (tsis tas yuav hais, tsis muaj qhov tshwj xeeb tau muab rau). Muaj ntau qhov kev paub tsawg dua ntawm no, thiab nws yuav luag yog nyob rau hauv thaj chaw ntawm cov neeg muag khoom nruj nruj, lossis "yuav ua li cas ua ib yam dab tsi tsis muaj dab tsi." Tus kheej, kuv pom nws tho txawv heev, txawm hais tias muaj coob tus neeg nyiam nws - txhua yam yog qhov ntsuas tau zoo thiab kwv yees (yog tias peb tham txog cov tuam txhab loj), "dorakha-bahato", thiab lwm yam. Tsawg kawg ib xyoos ib zaug, qee tus neeg muag khoom loj hais tias lawv tau los nrog lwm qhov mega-super-duper system uas yuav ua haujlwm txhua yam tam sim no thiab tag nrho cov tswj hwm thiab cov neeg siv network tuaj yeem sib cais, tawm hauv ob peb los nias khawm hauv qhov zoo nkauj interface. Qhov tseeb yog tias, txawm tias peb tsis quav ntsej tus nqi ntawm cov kev daws teeb meem, networkers yuav tsis mus qhov twg los ntawm qhov ntawd. Yog lawm, tej zaum es tsis txhob ntawm lub console yuav rov muaj lub web interface (tab sis tsis yog ib qho khoom siv tshwj xeeb, tab sis lub kaw lus loj uas tswj xyuas kaum thiab pua pua ntawm cov khoom siv kho vajtse), tab sis kev paub txog "txhua yam ua haujlwm hauv" yuav ua li cas. xav tau.
3. Cov tuam txhab tsim khoom, cov nyiaj tau los ntawm kev txhim kho (thiab, feem ntau, kev ua haujlwm) ntawm qee qhov software lossis platform - cov khoom qub ntawd. Feem ntau lawv yog me me thiab nimble, lawv tseem nyob deb ntawm qhov ntsuas ntawm kev lag luam thiab lawv cov bureaucratization. Nws nyob ntawm no tias tib cov devops, cubers, dockers thiab lwm yam lus phem raug pom nyob rau hauv ntau, uas yuav ua rau lub network thiab network engineers tsis tsim nyog rudiment.
Yuav ua li cas yog ib tug networker txawv los ntawm ib tug system administrator?
Hauv kev nkag siab ntawm cov neeg tsis yog los ntawm IT - tsis muaj dab tsi. Ob leeg saib ntawm lub vijtsam dub thiab sau qee qhov kev sau ntawv, qee zaum ntsiag to cog lus.
Nyob rau hauv kev nkag siab ntawm programmers - tej zaum los ntawm kev kawm cheeb tsam. Cov thawj tswj hwm tswj hwm cov servers, networkers tswj cov keyboards thiab routers. Qee zaum kev tswj hwm tsis zoo, thiab txhua yam poob rau txhua tus. Zoo, nyob rau hauv cov ntaub ntawv ntawm ib yam dab tsi txawv txawv, lub networkers kuj yuav liam. Tsuas yog vim fuck koj, yog vim li cas.
Qhov tseeb, qhov sib txawv tseem ceeb yog txoj hauv kev ua haujlwm. Tej zaum, nws yog ntawm cov networkers uas muaj cov neeg txhawb nqa feem ntau ntawm "Yog tias nws ua haujlwm, tsis txhob kov nws!" mus kom ze. Raws li txoj cai, ib yam dab tsi tuaj yeem ua tiav (hauv ib tus neeg muag khoom) hauv ib txoj kev nkaus xwb; tag nrho kev teeb tsa ntawm lub thawv yog nyob rau hauv xib teg ntawm koj txhais tes. Tus nqi ntawm qhov kev ua yuam kev yog siab, thiab qee zaum siab heev (piv txwv li, koj yuav tsum tau mus ncig ntau pua mais kom rov pib lub router, thiab lub sijhawm no ntau txhiab tus neeg yuav tsis muaj kev sib txuas lus - qhov xwm txheej tshwm sim rau tus neeg teb xov tooj) .
Hauv kuv lub tswv yim, qhov no yog vim li cas network engineers, ntawm ib sab, muaj kev mob siab heev rau kev ruaj ntseg network (thiab kev hloov pauv yog tus yeeb ncuab tseem ceeb ntawm kev ruaj ntseg), thiab qhov thib ob, lawv txoj kev paub mus rau qhov tob tshaj li qhov dav (koj tsis ua. yuav tsum muaj peev xwm teeb tsa ntau ntau ntawm cov daemons sib txawv, koj yuav tsum paub cov thev naus laus zis thiab kev siv los ntawm cov chaw tsim khoom tshwj xeeb). Tias yog vim li cas tus thawj tswj hwm qhov system uas googled yuav ua li cas rau npe vlan ntawm Cisco system tseem tsis tau muaj lub network. Thiab nws tsis zoo li nws yuav muaj peev xwm txhawb nqa tau zoo (nrog rau kev daws teeb meem) ntau dua lossis tsawg dua.
Tab sis vim li cas koj thiaj xav tau ib tus neeg siv xov tooj yog tias koj muaj tus tswv tsev?
Rau cov nyiaj ntxiv (thiab yog tias koj yog tus neeg siv khoom loj heev, tej zaum txawm tias dawb, "raws li ib tug phooj ywg"), cov ntaub ntawv chaw engineers yuav teeb tsa koj cov keyboards kom haum rau koj cov kev xav tau, thiab tej zaum txawm pab koj tsim BGP interface nrog cov chaw muab kev pabcuam. (yog tias koj muaj koj tus kheej subnet ntawm IP chaw nyob rau kev tshaj tawm).
Qhov teeb meem tseem ceeb yog qhov chaw cov ntaub ntawv tsis yog koj lub tuam txhab IT, nws yog ib lub tuam txhab cais uas nws lub hom phiaj yog kom tau txais txiaj ntsig. Nrog rau ntawm tus nqi ntawm koj ua tus neeg siv khoom. Lub chaw cov ntaub ntawv muab racks, muab lawv nrog hluav taws xob thiab txias, thiab tseem muab qee qhov "default" txuas rau Is Taws Nem. Raws li cov txheej txheem no, lub chaw cov ntaub ntawv tuaj yeem tuav koj cov khoom siv (chaw nyob), xauj tawm ib tus neeg rau zaub mov rau koj (tus neeg rau zaub mov tshwj xeeb), lossis muab kev pabcuam tswj hwm (piv txwv li, OpenStack lossis K8s). Tab sis kev lag luam ntawm lub chaw khaws ntaub ntawv (feem ntau) tsis yog kev tswj hwm ntawm cov neeg siv khoom tsim kho, vim tias cov txheej txheem no yog siv zog heev, tsis siv neeg ua haujlwm tsis zoo (thiab nyob rau hauv ib qho chaw cov ntaub ntawv txhua yam uas ua tau yog automated), kev sib koom ua ke ntau dua (txhua tus neeg siv khoom. yog tus kheej) thiab feem ntau fraught nrog kev tsis txaus siab ("koj qhia kuv lub server tau teeb tsa, tab sis tam sim no nws tau tsoo, nws yog tag nrho koj qhov txhaum !!! 111"). Yog li ntawd, yog tias tus tswv tsev pab koj nrog qee yam, nws yuav sim ua kom yooj yim thiab yooj yim li sai tau. Vim tias ua nws nyuaj yog tsis muaj txiaj ntsig, tsawg kawg los ntawm qhov pom ntawm tus nqi ua haujlwm ntawm cov engineers ntawm tus tswv tsev no (tab sis cov xwm txheej txawv, saib tsis lees paub). Qhov no tsis tau txhais hais tias tus tswv tsev yuav tsum ua txhua yam tsis zoo. Tab sis nws tsis yog qhov tseeb tias nws yuav ua raws nraim qhov koj xav tau tiag tiag.
Nws yuav zoo li tias qhov no yog qhov pom tseeb heev, tab sis ob peb zaug hauv kuv qhov kev coj ua kuv tau ntsib qhov tseeb tias cov tuam txhab pib tso siab rau lawv cov chaw muab kev pabcuam hosting me ntsis ntau dua li qhov lawv yuav tsum ua, thiab qhov no tsis ua rau muaj dab tsi zoo. Kuv yuav tsum piav qhia txog qhov ntev thiab nthuav dav tias tsis yog ib qho SLA yuav them rau kev poob ntawm lub sijhawm poob (muaj kev zam, tab sis feem ntau nws yog qhov kim heev rau tus neeg siv khoom) thiab tus tswv tsev tsis paub txog qhov tshwm sim hauv cov neeg muas zaub 'Infrastructure (tshwj tsis yog rau cov ntsuas dav dav). Thiab tus tswv tsev tsis ua thaub qab rau koj ib yam. Qhov xwm txheej tseem phem dua yog tias koj muaj ntau dua ib tus tswv tsev. Nyob rau hauv cov ntaub ntawv ntawm tej teeb meem ntawm lawv, lawv yeej yuav tsis paub rau koj dab tsi mus tsis ncaj ncees lawm.
Qhov tseeb, cov kev xav ntawm no yog tib yam li thaum xaiv "in-house admin team vs outsource". Yog tias qhov kev pheej hmoo raug suav, qhov zoo yog qhov txaus siab, thiab kev lag luam tsis mloog, vim li cas ho tsis sim. Ntawm qhov tod tes, lub network yog ib qho ntawm cov txheej txheem yooj yim tshaj plaws ntawm cov txheej txheem, thiab nws tsis tsim nyog tso nws rau cov neeg sab nraud yog tias koj twb txhawb txhua yam ntawm koj tus kheej.
Yuav ua li cas yog ib tug networker xav tau?
Tom ntej no peb yuav tham tshwj xeeb txog cov tuam txhab khoom noj niaj hnub. Nrog cov tswv lag luam thiab kev lag luam, txhua yam yog qhov tseeb, ntxiv lossis rho tawm - me me tau hloov pauv nyob rau hauv xyoo tas los no, thiab cov neeg siv network xav tau nyob ntawd ua ntej, thiab lawv xav tau tam sim no. Tab sis nrog tib yam "cov tub ntxhais hluas thiab txaus ntshai" tsis yog qhov tseeb. Feem ntau lawv tso lawv tag nrho cov txheej txheem hauv huab, yog li lawv tsis xav tau admins tiag tiag - tsuas yog rau cov tswj hwm ntawm tib huab, tau kawg. Lub infrastructure, ntawm ib sab, yog yooj yim heev nyob rau hauv nws tsim, ntawm qhov tod tes, nws yog zoo automated (ansible / puppet, terraform, ci / cd ... zoo, koj paub). Tab sis txawm nyob ntawm no muaj cov xwm txheej thaum koj tsis tuaj yeem ua yam tsis muaj network engineer.
Piv txwv 1, classic
Piv txwv tias ib lub tuam txhab pib nrog ib tus neeg rau zaub mov nrog rau qhov chaw nyob IP pej xeem, uas nyob rau hauv ib qho chaw khaws ntaub ntawv. Tom qab ntawd muaj ob lub servers. Tom qab ntawd ntxiv ... Tsis ntev los sis tom qab, yuav tsum muaj kev sib txuas lus ntiag tug ntawm cov servers. Vim hais tias "sab nraud" kev khiav tsheb yog txwv ob qho tib si los ntawm bandwidth (tsis pub ntau tshaj 100Mbit / s piv txwv) thiab los ntawm qhov ntim ntawm rub tawm / rub tawm ib lub hlis (cov tswv tsev sib txawv muaj cov nqi sib txawv, tab sis bandwidth mus rau lub ntiaj teb sab nraud feem ntau kim dua li ib lub hlis twg. private network).
Tus tswv tsev ntxiv cov npav network ntxiv rau cov servers thiab suav nrog lawv hauv lawv cov keyboards hauv ib qho vlan cais. Ib cheeb tsam "flat" tshwm nyob nruab nrab ntawm cov servers. Yooj yim!
Tus naj npawb ntawm cov servers tau loj hlob, thiab kev khiav tsheb ntawm tus kheej network kuj tseem loj hlob - thaub qab, rov ua dua, thiab lwm yam. Tus tswv tsev muab txav koj mus rau hauv cov keyboards cais kom koj tsis txhob cuam tshuam nrog lwm tus neeg siv khoom, thiab lawv tsis cuam tshuam rau koj. Lub hoster nruab ib co keyboards thiab cas configures lawv - feem ntau yuav, tawm hauv ib tug ca network ntawm tag nrho koj cov servers. Txhua yam ua haujlwm zoo, tab sis nyob rau qee lub sijhawm teeb meem pib: qeeb ntawm cov tswv ib ntus nce, cov cav tsis txaus siab txog ntau dhau arp pob ntawv ib ob, thiab thaum lub sijhawm kuaj xyuas lub pentester fucked koj lub network hauv zos tag nrho, tawg tsuas yog ib lub server.
Yuav ua li cas?
Faib lub network rau hauv ntu - vlans. Teeb tsa koj tus kheej qhov chaw nyob hauv txhua vlan, xaiv lub rooj vag uas yuav hloov tsheb khiav ntawm tes hauj lwm. Configure acl ntawm lub rooj vag kom txwv kev nkag mus ntawm ntu, lossis txawm tias nruab ib lub firewall nyob ze.
Piv txwv 1, txuas ntxiv mus
Cov servers txuas nrog LAN nrog ib txoj hlua. Cov keyboards nyob rau hauv lub racks yog ib qho kev sib txuas rau ib leeg, tab sis yog tias muaj kev sib tsoo hauv ib lub racks, peb lwm qhov uas nyob ib sab poob. Schemes muaj, tab sis muaj kev tsis ntseeg txog lawv qhov tseeb. Txhua tus neeg rau zaub mov muaj nws qhov chaw nyob pej xeem, uas yog muab los ntawm tus tswv tsev thiab khi rau lub khib. Cov. Thaum tsiv lub server, qhov chaw nyob yuav tsum tau hloov.
Yuav ua li cas?
Txuas cov servers siv LAG (Link Aggregation Group) nrog ob txoj hlua rau cov keyboards hauv khib (lawv kuj yuav tsum tau rov ua dua). Khaws cov kev sib txuas ntawm cov racks thiab hloov mus rau "lub hnub qub" (lossis tam sim no fashionable CLOS) kom qhov poob ntawm ib lub khib tsis cuam tshuam rau lwm tus. Xaiv "central" racks nyob rau hauv uas lub network core yuav nyob thiab qhov twg lwm racks yuav txuas. Nyob rau tib lub sijhawm, muab cov lus tshaj tawm rau pej xeem, coj los ntawm tus tswv tsev (lossis los ntawm RIR, yog tias ua tau) lub subnet, uas koj tus kheej (lossis los ntawm tus tswv tsev) tshaj tawm rau lub ntiaj teb.
Txhua qhov no puas tuaj yeem ua tiav los ntawm tus thawj tswj hwm "ib txwm" uas tsis muaj kev paub tob txog kev sib txuas lus? Tsis paub meej. Tus tswv tsev puas yuav ua qhov no? Tej zaum nws yuav, tab sis koj yuav xav tau cov ncauj lus kom ntxaws ntxaws, uas ib tus neeg yuav tsum tau kos. thiab tom qab ntawd xyuas tias txhua yam ua tiav yog lawm.
Piv txwv 2: Huab
Cia peb hais tias koj muaj VPC hauv qee qhov huab huab. Txhawm rau kom tau txais kev nkag los ntawm lub chaw ua haujlwm lossis ib feem ntawm qhov chaw ua haujlwm rau hauv lub network hauv zos hauv VPC, koj yuav tsum tau teeb tsa kev sib txuas ntawm IPSec lossis ib qho chaw tshwj xeeb. Ntawm ib sab, IPSec yog pheej yig dua, vim tsis tas yuav yuav khoom kho vajtse ntxiv; koj tuaj yeem teeb tsa qhov av ntawm koj lub server nrog chaw nyob pej xeem thiab huab. Tab sis - qeeb, kev ua haujlwm tsawg (vim cov channel yuav tsum tau encrypted), ntxiv rau kev sib txuas tsis muaj kev lees paub (vim kev nkag mus yog los ntawm Internet li niaj zaus).
Yuav ua li cas?
Nce kev sib txuas los ntawm kev sib koom ua ke (piv txwv li, AWS hu nws Direct Connect). Txhawm rau ua qhov no, nrhiav tus neeg ua haujlwm sib koom tes uas yuav txuas koj, txiav txim siab ntawm qhov chaw sib txuas ze tshaj plaws rau koj (ob qho tib si rau tus neeg teb xov tooj thiab tus neeg teb xov tooj rau huab), thiab, thaum kawg, teeb tsa txhua yam. Puas muaj peev xwm ua tau tag nrho cov no yam tsis muaj network engineer? Muaj tseeb tiag. Tab sis yuav ua li cas teeb meem tsis muaj nws nyob rau hauv cov ntaub ntawv ntawm teeb meem yog tsis meej li lawm.
Tej zaum kuj yuav muaj teeb meem nrog kev muaj nyob nruab nrab ntawm huab (yog tias koj muaj ntau lub huab) lossis teeb meem nrog kev ncua ntawm thaj chaw sib txawv, thiab lwm yam. Tau kawg, tam sim no muaj ntau yam cuab yeej tau tshwm sim uas ua rau kom muaj qhov pom tseeb ntawm qhov tshwm sim hauv huab (tib txhiab Qhov muag), tab sis cov no yog tag nrho cov cuab yeej ntawm tus kws tshaj lij network, thiab tsis yog hloov pauv rau nws.
Kuv tuaj yeem kos tawm ntau ntau cov qauv zoo li no los ntawm kuv qhov kev coj ua, tab sis kuv xav tias nws yog qhov tseeb tias pab pawg, pib los ntawm qee theem ntawm kev tsim kho vaj tse, yuav tsum muaj ib tus neeg (xws li ntau tshaj ib tus) uas paub tias lub network ua haujlwm li cas thiab tuaj yeem teeb tsa. khoom siv network thiab txheeb cov teeb meem yog tias lawv tshwm sim. Ntseeg kuv, nws yuav muaj ib yam dab tsi ua
Tus networker yuav tsum paub dab tsi?
Nws tsis yog qhov tsim nyog (thiab txawm tias qee zaum, teeb meem) rau tus kws tshaj lij network los cuam tshuam nrog lub network thiab tsis muaj dab tsi ntxiv. Txawm hais tias peb tsis xav txog qhov kev xaiv nrog kev tsim kho vaj tse uas nyob yuav luag tag nrho hauv huab huab (thiab, txawm li cas los xij, nws tau dhau los ua neeg nyiam dua), thiab siv, piv txwv li, ntawm thaj chaw lossis huab huab, qhov twg. on βCCNP-level knowledge aloneβ βKoj yuav tsis tawm mus.
Ntxiv rau, qhov tseeb, kev tes hauj lwm - txawm hais tias tsuas muaj ib qho kev kawm uas tsis muaj qhov kawg rau kev kawm, txawm tias koj mloog zoo rau ntawm ib cheeb tsam (tus muab kev tes hauj lwm, kev lag luam, cov chaw zov me nyuam, Wi-Fi ...)
Yog lawm, ntau ntawm koj tam sim no yuav nco ntsoov Python thiab lwm yam "network automation", tab sis qhov no tsuas yog qhov tsim nyog, tab sis tsis yog qhov txaus. Txhawm rau kom tus kws tshaj lij network "ua tiav koom nrog pab pawg," nws yuav tsum muaj peev xwm hais tau ib hom lus nrog ob tus neeg tsim khoom thiab cov phooj ywg cov thawj coj / devs. Nws txhais li cas?
- muaj peev xwm tsis tsuas yog ua haujlwm hauv Linux raws li tus neeg siv, tab sis kuj tseem tswj hwm nws, tsawg kawg ntawm sysadmin-jun theem: nruab cov software tsim nyog, rov pib qhov kev pabcuam ua tsis tiav, sau ib qho yooj yim systemd-unit.
- Nkag siab (tsawg kawg hauv cov ntsiab lus dav dav) yuav ua li cas lub network pawg ua haujlwm hauv Linux, lub network ua haujlwm li cas hauv hypervisors thiab ntim khoom (lxc / docker / kubernetes).
- Tau kawg, tuaj yeem ua haujlwm nrog ansible/chef/puppet lossis lwm qhov system SCM.
- Ib txoj kab cais yuav tsum tau sau txog SDN thiab tes hauj lwm rau huab ntiag tug (piv txwv li, TungstenFabric lossis OpenvSwitch). Qhov no yog lwm txheej loj ntawm kev paub.
Hauv luv luv, kuv tau piav qhia txog tus kws tshaj lij T-zoo li (raws li nws yog fashionable hais tam sim no). Nws zoo li tsis muaj dab tsi tshiab, tab sis raws li kev xam phaj, tsis yog txhua tus engineers network tuaj yeem khav theeb ntawm kev paub tsawg kawg yog ob lub ntsiab lus los ntawm cov npe saum toj no. Hauv kev xyaum, qhov tsis muaj kev paub "hauv cov haujlwm uas muaj feem xyuam" ua rau nws nyuaj heev tsis yog rau kev sib txuas lus nrog cov npoj yaig, tab sis kuj nkag siab txog cov kev xav tau uas ua lag luam nyob hauv lub network, raws li qhov qis tshaj ntawm cov txheej txheem ntawm qhov project. Thiab tsis muaj qhov kev nkag siab no, nws nyuaj rau tiv thaiv koj qhov kev xav thiab "muag" rau kev lag luam.
Ntawm qhov tod tes, tib tus cwj pwm ntawm "kev nkag siab yuav ua li cas lub kaw lus ua haujlwm" muab cov neeg sib tham kom zoo dua rau ntau yam "generalists" uas paub txog cov thev naus laus zis los ntawm cov khoom ntawm HabrΓ© / nruab nrab thiab kev sib tham hauv Telegram, tab sis tsis muaj lub tswv yim yuav ua li cas. cov hauv paus ntsiab lus no lossis qhov software ua haujlwm li cas? Thiab kev paub txog qee yam qauv, raws li paub, ua tiav kev paub txog ntau qhov tseeb.
Cov lus xaus, lossis tsuas yog TL; DR
- Tus thawj coj hauv lub network (xws li DBA lossis VoIP engineer) yog tus kws tshaj lij nrog qhov nqaim nqaim (tsis zoo li cov thawj tswj hwm / devs / SRE), qhov xav tau uas tsis tshwm sim tam sim ntawd (thiab yuav tsis tshwm sim ntev, qhov tseeb) . Tab sis yog tias nws tshwm sim, nws tsis zoo li yuav tsum tau hloov los ntawm cov kws tshaj lij sab nraud (outsource lossis cov thawj coj zoo tib yam, "uas kuj saib xyuas lub network"). Dab tsi yog qhov kev tu siab me ntsis yog qhov xav tau rau cov kws tshaj lij no me me, thiab, raws li txoj cai, hauv ib lub tuam txhab nrog 800 programmers thiab 30 devops / tus thawj coj, tej zaum tsuas muaj ob tus neeg koom tes uas ua haujlwm zoo nrog lawv lub luag haujlwm. Cov. lub lag luam yog thiab yog heev, me me, thiab nrog ib tug zoo nyiaj hli - txawm tsawg.
- Ntawm qhov tod tes, lub networker zoo hauv lub ntiaj teb niaj hnub no yuav tsum paub tsis yog cov tes hauj lwm ntawm lawv tus kheej nkaus xwb (thiab yuav ua li cas automate lawv configuration), tab sis kuj yuav ua li cas cov kev khiav hauj lwm systems thiab software uas khiav saum cov tes hauj lwm sib cuam tshuam nrog lawv. Yog tsis muaj qhov no, nws yuav nyuaj heev kom nkag siab txog yam koj cov npoj yaig nug txog koj thiab qhia (tsim nyog) koj qhov kev xav / xav tau rau lawv.
- Tsis muaj huab, nws tsuas yog lwm tus lub computer xwb. Koj yuav tsum nkag siab tias kev siv huab cua pej xeem / ntiag tug lossis cov kev pabcuam ntawm tus kws kho mob "uas ua txhua yam rau koj ntawm kev hloov pauv" tsis hloov qhov tseeb tias koj daim ntawv thov tseem siv lub network, thiab teeb meem nrog nws yuav cuam tshuam rau kev ua haujlwm ntawm koj daim ntawv thov. Koj xaiv yog qhov chaw muaj peev xwm yuav nyob, uas yuav yog lub luag haujlwm rau lub network ntawm koj qhov project.
Tau qhov twg los: www.hab.com