{"id":31067,"date":"2019-10-31T21:39:16","date_gmt":"2019-10-31T18:39:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-vzyat-setevuyu-infrastrukturu-pod-svoj-kontrol-glava-vtoraya-chistka-i-dokumentirovanie\/"},"modified":"2019-10-31T21:39:16","modified_gmt":"2019-10-31T18:39:16","slug":"kak-vzyat-setevuyu-infrastrukturu-pod-svoj-kontrol-glava-vtoraya-chistka-i-dokumentirovanie","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-vzyat-setevuyu-infrastrukturu-pod-svoj-kontrol-glava-vtoraya-chistka-i-dokumentirovanie","title":{"rendered":"Cum s\u0103 preiei controlul asupra infrastructurii de re\u021bea. Capitolul al doilea. Cur\u0103\u021bare \u0219i documentare","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><i>Aceast\u0103 articol este al doilea dintr-o serie de articole intitulate \u201eCum s\u0103-\u021bi controlezi infrastructura de re\u021bea\u201d. Con\u021binutul tuturor articolelor din serie \u0219i link-urile pot fi g\u0103site <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/447008\/\">aici<\/a><\/noindex><\/i>.<\/p>\n<p><img decoding=\"async\" alt=\"Cum s\u0103 preiei controlul asupra infrastructurii de re\u021bea. Capitolul al doilea. Cur\u0103\u021bare \u0219i documentare\" src=\"\/wp-content\/uploads\/2019\/04\/7b8e020272ed52ef0a119714b0a5d58b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nObiectivul nostru \u00een aceast\u0103 etap\u0103 este s\u0103 facem ordine \u00een documenta\u021bie \u0219i configura\u021bie. <br \/>\nLa finalul acestui proces, ar trebui s\u0103 ave\u021bi setul necesar de documente \u0219i re\u021beaua configurat\u0103 conform acestora.<\/p>\n<p>\u00cen acest moment nu vom discuta despre auditul de securitate \u2013 acest subiect va fi tratat \u00een partea a treia. <\/p>\n<p>Dificultatea execut\u0103rii sarcinii stabilite \u00een aceast\u0103 etap\u0103 variaz\u0103 semnificativ de la o companie la alta.<\/p>\n<p>Situa\u021bia ideal\u0103 este aceea c\u00e2nd<\/p>\n<ul>\n<li>re\u021beaua dumneavoastr\u0103 a fost creat\u0103 conform proiectului \u0219i ave\u021bi un set complet de documente<\/li>\n<li>\u00een compania dumneavoastr\u0103 a fost implementat <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/433614\/\">un proces de control \u0219i management al modific\u0103rilor<\/a><\/noindex> pentru re\u021bea<\/li>\n<li>conform acestui proces, dispune\u021bi de documente (inclusiv toate schemele necesare) care ofer\u0103 informa\u021bii complete despre starea actual\u0103 a lucrurilor<\/li>\n<\/ul>\n<p>\n\u00cen acest caz, sarcina dumneavoastr\u0103 este destul de simpl\u0103. Trebuie s\u0103 studia\u021bi documentele \u0219i s\u0103 trece\u021bi \u00een revist\u0103 toate modific\u0103rile care au fost efectuate. <\/p>\n<p>\u00cen cel mai r\u0103u caz, ve\u021bi avea<\/p>\n<ul>\n<li>o re\u021bea creat\u0103 f\u0103r\u0103 proiect, f\u0103r\u0103 plan, f\u0103r\u0103 aprobat, de ingineri care nu au un nivel suficient de calificare,<\/li>\n<li>cu modific\u0103ri haotice, nedocumentate, cu un num\u0103r mare de \u201egunoi\u201d \u0219i solu\u021bii suboptimale<\/li>\n<\/ul>\n<p>\nSe \u00een\u021belege c\u0103 situa\u021bia dumneavoastr\u0103 este undeva la mijloc, dar, din p\u0103cate, pe aceast\u0103 scar\u0103, mai bine \u2013 mai r\u0103u, cu o mare probabilitate, ve\u021bi fi mai aproape de cap\u0103tul r\u0103u.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>\u00cen acest caz, va trebui s\u0103 ave\u021bi inclusiv abilitatea de a citi g\u00e2ndurile, pentru c\u0103 va trebui s\u0103 \u00eenv\u0103\u021ba\u021bi s\u0103 \u00een\u021belege\u021bi ce au vrut s\u0103 fac\u0103 \u201edesignerele\u201d, s\u0103 restaura\u021bi logica lor, s\u0103 finaliza\u021bi cele nefinalizate \u0219i s\u0103 elimina\u021bi \u201egunoiul\u201d. <br \/>\n\u0218i, desigur, va trebui s\u0103 limita\u021bi erorile lor, s\u0103 schimba\u021bi (\u00een acest stadiu, pe c\u00e2t posibil minim) designul \u0219i s\u0103 modifica\u021bi sau s\u0103 crea\u021bi din nou schemele. <\/p>\n<p>Aceast\u0103 articol nu pretinde \u00een niciun caz a fi exhaustiv. Aici voi descrie doar principiile generale \u0219i voi aborda c\u00e2teva probleme frecvente care trebuie rezolvate.<\/p>\n<h2>Set de documente<\/h2>\n<p><\/p>\n<blockquote><p>S\u0103 \u00eencepem cu un exemplu.<\/p>\n<p>Mai jos sunt enumerate c\u00e2teva documente care sunt de obicei create de compania Cisco Systems \u00een procesul de proiectare.<\/p>\n<p><b>CR<\/b> \u2013 Cerin\u021bele clientului, cerin\u021bele clientului (specifica\u021bie tehnic\u0103).<br \/>\nSe creeaz\u0103 \u00eempreun\u0103 cu clientul \u0219i define\u0219te cerin\u021bele re\u021belei.<\/p>\n<p><b>HLD<\/b> \u2013 High Level Design, design de nivel \u00eenalt bazat pe cerin\u021bele re\u021belei (CR). Documentul explic\u0103 \u0219i justific\u0103 deciziile arhitecturale adoptate (topologie, protocoale, alegerea echipamentului, \u2026). HLD nu con\u021bine detalii despre design, cum ar fi interfe\u021bele utilizate \u0219i adresele IP. De asemenea, nu se discut\u0103 configura\u021bia specific\u0103 a echipamentului. Acest document este destinat mai degrab\u0103 s\u0103 explice conducerii tehnice a clientului conceptele cheie de design.<\/p>\n<p><b>LLD<\/b> \u2013 Low Level Design, design de nivel sc\u0103zut bazat pe cel de nivel \u00eenalt (HLD). <br \/>\nAcesta ar trebui s\u0103 con\u021bin\u0103 toate detaliile necesare pentru implementarea proiectului, cum ar fi informa\u021biile despre cum s\u0103 conecta\u021bi \u0219i s\u0103 configura\u021bi echipamentul. Este un ghid complet pentru implementarea designului. Acest document ar trebui s\u0103 furnizeze suficiente informa\u021bii pentru implementarea sa chiar \u0219i de c\u0103tre personal mai pu\u021bin calificat. <\/p>\n<p>C\u00e2teva aspecte, cum ar fi adresele IP, numerele AS, schema de conecta\u021bie fizic\u0103 (cabling), pot fi \"extrase\" \u00een documente separate, cum ar fi <b>NIP<\/b> (Network Implementation Plan).<\/p>\n<p>Construirea re\u021belei \u00eencepe dup\u0103 crearea acestor documente \u0219i se desf\u0103\u0219oar\u0103 \u00een strict\u0103 conformitate cu acestea \u0219i apoi este verificat\u0103 de client (teste) pentru conformitate cu designul.<\/p><\/blockquote>\n<p>\nDesigur, la diferi\u021bi integratori, la diferi\u021bi clien\u021bi, \u00een diferite \u021b\u0103ri cerin\u021bele pentru documenta\u021bia de proiect pot fi diferite. Dar ne-ar pl\u0103cea s\u0103 evit\u0103m formalit\u0103\u021bile \u0219i s\u0103 abord\u0103m problema substan\u021bial. Aceast\u0103 etap\u0103 nu este despre proiectare, ci despre ordonarea lucrurilor \u0219i avem nevoie de un set suficient de documente (scheme, tabele, descrieri...) pentru a ne \u00eendeplini sarcinile. <\/p>\n<p>\u0218i, \u00een opinia mea, exist\u0103 un minim absolut, f\u0103r\u0103 care nu se poate controla eficient re\u021beaua.<\/p>\n<p>Acestea sunt urm\u0103toarele documente:<\/p>\n<ul>\n<li>schema (jurnal) de conecta\u021bie fizic\u0103 (cabling)<\/li>\n<li>schema sau schemele re\u021belei cu informa\u021bii esen\u021biale L2\/L3<\/li>\n<\/ul>\n<p><\/p>\n<h2>Schema de interconectare fizic\u0103<\/h2>\n<p>\n\u00cen unele companii mici, sarcinile legate de instalarea echipamentului \u0219i de conecta\u021bia fizic\u0103 (cabling) sunt responsabilitatea inginerilor de re\u021bea. <\/p>\n<p>\u00cen acest caz, problema este par\u021bial rezolvat\u0103 prin urm\u0103toarea abordare. <\/p>\n<ul>\n<li>utiliza\u021bi descrierea pe interfa\u021b\u0103 pentru a explica ce este conectat la ea<\/li>\n<li>de-a administrativ dezactiva\u021bi (shutdown) toate porturile de re\u021bea neconectate<\/li>\n<\/ul>\n<p>\nAceasta v\u0103 va permite, chiar \u0219i \u00een cazul unei probleme cu linkul (c\u00e2nd cdp sau lldp nu func\u021bioneaz\u0103 pe aceast\u0103 interfa\u021b\u0103), s\u0103 identifica\u021bi rapid ce este conectat la acest port.<br \/>\nDe asemenea, ve\u021bi putea vedea cu u\u0219urin\u021b\u0103 ce porturi sunt ocupate \u0219i care sunt libere, ceea ce este necesar pentru planificarea conexiunilor noului echipament de re\u021bea, servere sau sta\u021bii de lucru. <\/p>\n<p>Dar este clar c\u0103, dac\u0103 pierde\u021bi accesul la echipament, ve\u021bi pierde \u0219i accesul la aceste informa\u021bii. \u00cen plus, \u00een acest mod nu ve\u021bi putea documenta informa\u021bii importante, cum ar fi ce echipament este, ce putere consum\u0103, c\u00e2te porturi are, \u00een ce rack se afl\u0103, ce panouri de patch exist\u0103 \u0219i unde (\u00een ce rack\/panou de patch) sunt acestea conectate. De aceea, documentarea suplimentar\u0103 (nu doar descrierile de pe echipamente) este foarte util\u0103.<\/p>\n<p>Cea mai bun\u0103 op\u021biune este utilizarea aplica\u021biilor create pentru a lucra cu acest tip de informa\u021bii. \u00cens\u0103 se poate limita \u0219i la simple tabele (de exemplu, \u00een Excel) sau s\u0103 afi\u0219eze informa\u021biile pe care le considera\u021bi necesare \u00een scheme L1\/L2.<\/p>\n<blockquote><p>Important!<\/p>\n<p>Un inginer de re\u021bea, desigur, poate cunoa\u0219te destul de bine subtilit\u0103\u021bile \u0219i standardele SCS, tipurile de rackuri, tipurile de surse de alimentare ne\u00eentreruptibil\u0103, ce este un coridor rece \u0219i unul cald, s\u0103 efectueze \u00eemp\u0103m\u00e2ntarea corect\u0103,\u2026 la fel cum \u00een principiu ar putea \u0219ti fizica particulelor elementare sau C++. Dar trebuie s\u0103 \u00een\u021belegem c\u0103 toate acestea nu fac parte din domeniul s\u0103u de cuno\u0219tin\u021be. <\/p>\n<p>De aceea, o practic\u0103 bun\u0103 este ca pentru a rezolva problemele legate de instalarea, conectarea, men\u021binerea func\u021bionalit\u0103\u021bii echipamentului, precum \u0219i de comutarea fizic\u0103, s\u0103 existe fie departamente dedicate, fie persoane desemnate. De obicei, pentru centrele de date, ace\u0219tia sunt inginerii de centre de date, iar pentru birouri \u2014 help-desk. <\/p>\n<p>Dac\u0103 astfel de departamente sunt prev\u0103zute \u00een compania dumneavoastr\u0103, atunci \u00eentreb\u0103rile privind \u00eenregistrarea comunica\u021biei fizice nu sunt sarcina dumneavoastr\u0103, \u0219i v\u0103 pute\u021bi limita doar la descrierea de pe interfa\u021b\u0103 \u0219i la dezactivarea administrativ\u0103 a porturilor neutilizate.<\/p><\/blockquote>\n<h2>Scheme de re\u021bea<\/h2>\n<p>\nNu exist\u0103 o abordare universal\u0103 pentru desenarea schemelor.<\/p>\n<p>Cel mai important \u2014 schemele trebuie s\u0103 ofere \u00een\u021belegerea modului \u00een care va circula traficul, prin ce elemente logice \u0219i fizice ale re\u021belei dumneavoastr\u0103.<\/p>\n<p>Prin elemente fizice ne referim la<\/p>\n<ul>\n<li>echipamente active<\/li>\n<li>interfe\u021bele \/ porte ale echipamentului activ<\/li>\n<\/ul>\n<p>\nSub logicele \u2014 <\/p>\n<ul>\n<li>dispozitive logice (N7K VDC, Palo Alto VSYS, \u2026)<\/li>\n<li>VRF <\/li>\n<li>VLAN-uri<\/li>\n<li>subinterfe\u021be<\/li>\n<li>tuneluri<\/li>\n<li>zone<\/li>\n<li>\u2026<\/li>\n<\/ul>\n<p>\nDe asemenea, dac\u0103 re\u021beaua dumneavoastr\u0103 nu este chiar foarte simpl\u0103, va consta \u00een diferite segmente. <br \/>\nDe exemplu<\/p>\n<ul>\n<li>centru de date<\/li>\n<li>internet<\/li>\n<li>WAN<\/li>\n<li>acces de la distan\u021b\u0103<\/li>\n<li>LAN de birou<\/li>\n<li>DMZ<\/li>\n<li>\u2026<\/li>\n<\/ul>\n<p>\nAr fi rezonabil s\u0103 avem mai multe scheme, care ofer\u0103 at\u00e2t o imagine de ansamblu (cum circul\u0103 traficul \u00eentre toate aceste segmente), c\u00e2t \u0219i o explica\u021bie detaliat\u0103 a fiec\u0103rui segment \u00een parte.<\/p>\n<p>Deoarece \u00een re\u021belele moderne pot exista multe niveluri logice, o abordare bun\u0103 (dar nu obligatorie) poate fi s\u0103 se elaboreze scheme diferite pentru diferitele niveluri, de exemplu, \u00een cazul abord\u0103rii overlay, ar putea fi urm\u0103toarele scheme:<\/p>\n<ul>\n<li>overlay<\/li>\n<li>L1\/L2 underlay<\/li>\n<li>L3 underlay<\/li>\n<\/ul>\n<p>\nDesigur, cea mai important\u0103 schem\u0103, f\u0103r\u0103 de care nu se poate \u00een\u021belege ideea designului dumneavoastr\u0103, este schema de rutare.<\/p>\n<h4>Schema de rutare<\/h4>\n<p>\nCel pu\u021bin \u00een aceast\u0103 schem\u0103 ar trebui s\u0103 fie reflectate<\/p>\n<ul>\n<li>ce protocoale de rutare \u0219i unde sunt utilizate<\/li>\n<li>informa\u021biile de baz\u0103 despre configurarea protocoalelor de rutare (area\/AS number\/router-id\/\u2026)<\/li>\n<li>pe ce echipamente are loc redistribu\u021bia<\/li>\n<li>unde are loc filtrarea \u0219i agregarea rutelor<\/li>\n<li>informa\u021bia despre ruta default <\/li>\n<\/ul>\n<p>\nDe asemenea, deseori util\u0103 este schema L2 (OSI).<\/p>\n<h4>Schema L2 (OSI)<\/h4>\n<p>\n\u00cen aceast\u0103 schem\u0103 poate fi reflectat\u0103 urm\u0103toarea informa\u021bie:<\/p>\n<ul>\n<li>ce VLAN-uri<\/li>\n<li>ce por\u021bi sunt por\u021bi trunk<\/li>\n<li>ce por\u021bi sunt agregate \u00een ether-channel (port channel), virtual port channel<\/li>\n<li>ce protocoale STP \u0219i pe ce echipamente sunt utilizate<\/li>\n<li>set\u0103rile de baz\u0103 ale STP: root\/root backup, cost STP, prioritate port<\/li>\n<li>set\u0103ri suplimentare STP: BPDU guard\/filter, root guard\u2026<\/li>\n<\/ul>\n<p><\/p>\n<h2>Erori caracteristice \u00een proiectare<\/h2>\n<p><\/p>\n<blockquote><p>Exemplu de abordare slab\u0103 \u00een construirea unei re\u021bele.<\/p>\n<p>S\u0103 lu\u0103m un exemplu simplu de construire a unei re\u021bele locale de birou simple.<\/p>\n<p>Av\u00e2nd experien\u021b\u0103 \u00een predarea telecomunica\u021biilor studen\u021bilor, pot spune c\u0103 practic orice student, p\u00e2n\u0103 la mijlocul celui de-al doilea semestru, dispune de cuno\u0219tin\u021bele necesare (\u00een cadrul cursului pe care l-am predat) pentru a configura o LAN de birou simpl\u0103.<\/p>\n<p>Ce este complicat \u00een a conecta \u00eentre ele switch-uri, a configura VLAN-uri, interfe\u021be SVI (\u00een cazul switch-urilor L3) \u0219i a introduce rutare static\u0103?<\/p>\n<p>Totul va func\u021biona.<\/p>\n<p>Dar, \u00een acela\u0219i timp, r\u0103m\u00e2n deoparte \u00eentreb\u0103rile legate de <\/p>\n<ul>\n<li>securitate.<\/li>\n<li>rezilien\u021b\u0103<\/li>\n<li>scalabilitatea re\u021belei<\/li>\n<li>performan\u021b\u0103<\/li>\n<li>l\u0103\u021bimea de band\u0103<\/li>\n<li>fiabilitate.<\/li>\n<li>\u2026<\/li>\n<\/ul>\n<p>\nUneori aud afirma\u021bia c\u0103 o re\u021bea LAN de birou este ceva foarte simplu \u0219i aud acest lucru de obicei de la ingineri (\u0219i manageri) care se ocup\u0103 cu orice altceva, dar nu cu re\u021belele, \u0219i o spun cu at\u00e2t de mult\u0103 \u00eencredere \u00eenc\u00e2t nu te mira dac\u0103 LAN-ul este realizat de oameni cu practic\u0103 \u0219i cuno\u0219tin\u021be insuficiente, fiind realizat aproximativ cu acelea\u0219i gre\u0219eli pe care le voi descrie mai jos.<\/p><\/blockquote>\n<p><\/p>\n<h4>Gre\u0219eli caracteristice de design la nivelul L1 (OSI)<\/h4>\n<p><\/p>\n<ul>\n<li>Dac\u0103 totu\u0219i e\u0219ti responsabil \u0219i pentru cablajul structurat, unul dintre cele mai nepl\u0103cute mo\u0219teniri pe care le po\u021bi avea este o configurare neglijent\u0103 \u0219i g\u00e2ndit\u0103.<\/li>\n<\/ul>\n<p>\nDe asemenea, la tipul L1 a\u0219 include gre\u0219elile legate de resursele echipamentului utilizat, de exemplu,<\/p>\n<ul>\n<li>l\u0103\u021bimea de band\u0103 insuficient\u0103<\/li>\n<li>TCAM insuficient pe echipament (sau utilizare ineficient\u0103 a acestuia)<\/li>\n<li>performan\u021b\u0103 insuficient\u0103 (se refer\u0103 adesea la firewall-uri)<\/li>\n<\/ul>\n<p><\/p>\n<h4>Gre\u0219eli caracteristice de design la nivelul L2 (OSI)<\/h4>\n<p>\nAdesea, c\u00e2nd nu exist\u0103 o \u00een\u021belegere bun\u0103 a modului \u00een care func\u021bioneaz\u0103 STP, ce probleme pot ap\u0103rea, switch-urile sunt conectate haotic, cu set\u0103rile implicite, f\u0103r\u0103 ajust\u0103ri suplimentare pentru STP. <\/p>\n<p>Ca rezultat, avem adesea urm\u0103toarele<\/p>\n<ul>\n<li>diametru STP mare al re\u021belei, ceea ce poate conduce la furtuni de broadcast <\/li>\n<li>root-ul STP va fi determinat aleator (pe baza adresei MAC) \u0219i calea traficului va fi suboptim\u0103<\/li>\n<li>porturile conectate la gazde nu vor fi configurate ca edge (portfast), ceea ce va duce la recalcularea STP la pornirea\/oprinerea sta\u021biilor finale<\/li>\n<li>re\u021beaua nu va fi segmentat\u0103 la nivelul L1\/L2, ceea ce va face ca problemele cu orice switch (de exemplu, suprasarcin\u0103 de alimentare) s\u0103 conduc\u0103 la recalcularea topologiei STP \u0219i la oprirea traficului \u00een toate VLAN-urile de pe toate switch-urile (inclusiv \u00een segmentul critic din perspectiva continuit\u0103\u021bii serviciului)<\/li>\n<\/ul>\n<p><\/p>\n<h4>Exemple de erori \u00een proiectarea L3 (OSI)<\/h4>\n<p>\nC\u00e2teva gre\u0219eli caracteristice ale re\u021belisti \u00eencep\u0103tori:<\/p>\n<ul>\n<li>utilizarea frecvent\u0103 (sau utilizarea exclusiv\u0103) a rut\u0103rii statice<\/li>\n<li>utilizarea protocoalelor de rutare neoptime pentru acest design<\/li>\n<li>segmentarea logic\u0103 neoptim\u0103 a re\u021belei<\/li>\n<li>utilizarea neoptim\u0103 a spa\u021biului de adresare, care nu permite agregarea rutelor<\/li>\n<li>lipsa rutelor de rezerv\u0103<\/li>\n<li>lipsa rezerv\u0103rii pentru gateway-ul implicit<\/li>\n<li>routare asimetric\u0103 \u00een refacerea rutelor (poate fi critic \u00een cazul NAT\/PAT, firewalls stateful)<\/li>\n<li>probleme cu MTU<\/li>\n<li>\u00een timpul refacerii rutelor, traficul trece prin alte zone de securitate sau chiar prin alte firewalls, ceea ce duce la pierderea acestui trafic<\/li>\n<li>scalabilitate slab\u0103 a topologiei<\/li>\n<\/ul>\n<p><\/p>\n<h2>Criterii de evaluare a calit\u0103\u021bii designului<\/h2>\n<p>\nC\u00e2nd vorbim despre optimitate\/ne-optimalitate, trebuie s\u0103 \u00een\u021belegem din perspectiva c\u0103ror criterii putem evalua acest lucru. Din punctul meu de vedere, cele mai semnificative (dar nu toate) criterii (\u0219i explica\u021bia \u00een raport cu protocoalele de rutare) sunt:<\/p>\n<ul>\n<li>scalabilitate (scalability)<br \/>\n De exemplu, a\u021bi decis s\u0103 ad\u0103uga\u021bi un alt centru de date. C\u00e2t de u\u0219or pute\u021bi face acest lucru.<\/li>\n<li>convenien\u021b\u0103 \u00een management (manageability)<br \/>\n C\u00e2t de u\u0219or \u0219i sigur se efectueaz\u0103 modific\u0103rile opera\u021bionale, de exemplu, anun\u021barea unei noi re\u021bele sau filtrarea rutelor<\/li>\n<li>disponibilitate (availability)<br \/>\n Ce procent din timp sistemul dvs. ofer\u0103 nivelul de servicii necesar<\/li>\n<li>securitate (security)<br \/>\n C\u00e2t de protejate sunt datele transmise<\/li>\n<li>pre\u021bul<\/li>\n<\/ul>\n<p><\/p>\n<h2>Modific\u0103ri<\/h2>\n<p>\nPrincipiul de baz\u0103 \u00een aceast\u0103 etap\u0103 poate fi exprimat prin formula \"nu face r\u0103u\".<br \/>\nPrin urmare, chiar dac\u0103 nu sunte\u021bi complet de acord cu designul \u0219i implementarea aleas\u0103 (configurarea), nu este \u00eentotdeauna ra\u021bional s\u0103 face\u021bi modific\u0103ri. O abordare rezonabil\u0103 este clasificarea tuturor problemelor identificate \u00een func\u021bie de doi parametri: <\/p>\n<ul>\n<li>c\u00e2t de u\u0219or poate fi rezolvat\u0103 aceast\u0103 problem\u0103<\/li>\n<li>c\u00e2t de mare este riscul pe care \u00eel prezint\u0103<\/li>\n<\/ul>\n<p>\n\u00cen primul r\u00e2nd, trebuie s\u0103 elimina\u021bi ceea ce \u00een prezent reduce nivelul serviciului furnizat sub cel acceptabil, de exemplu, problemele care conduc la pierderi de pachete. Apoi, rezolva\u021bi ceea ce este mai u\u0219or \u0219i mai sigur de reparat \u00een ordine descresc\u0103toare a gravit\u0103\u021bii riscului (de la problemele de design sau configura\u021bie, care prezint\u0103 riscuri mari, la cele cu riscuri mai mici).<\/p>\n<p>Perfectionismul \u00een aceast\u0103 etap\u0103 poate fi d\u0103un\u0103tor. Aduce\u021bi designul la un stadiu satisf\u0103c\u0103tor \u0219i sincroniza\u021bi configura\u021bia re\u021belei \u00een conformitate cu acesta.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/434750\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u042d\u0442\u0430 \u0441\u0442\u0430\u0442\u044c\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u0432 \u0446\u0438\u043a\u043b\u0435 \u0441\u0442\u0430\u0442\u0435\u0439 \u00ab\u041a\u0430\u043a \u0432\u0437\u044f\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u00bb. \u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u0441\u0442\u0430\u0442\u0435\u0439 \u0446\u0438\u043a\u043b\u0430 \u0438 \u0441\u0441\u044b\u043b\u043a\u0438 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c. \u041d\u0430\u0448\u0430 \u0446\u0435\u043b\u044c \u043d\u0430 \u0434\u0430\u043d\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u2014 \u043d\u0430\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u041d\u0430 \u0432\u044b\u0445\u043e\u0434\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0443 \u0432\u0430\u0441 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0439 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438 \u0441\u0435\u0442\u044c, \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u043d\u0438\u043c\u0438. \u0421\u0435\u0439\u0447\u0430\u0441 \u043c\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23042,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31067","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u042d\u0442\u0430 \u0441\u0442\u0430\u0442\u044c\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u0432 \u0446\u0438\u043a\u043b\u0435 \u0441\u0442\u0430\u0442\u0435\u0439 \u00ab\u041a\u0430\u043a \u0432\u0437\u044f\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u00bb.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-vzyat-setevuyu-infrastrukturu-pod-svoj-kontrol-glava-vtoraya-chistka-i-dokumentirovanie\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u0432\u0437\u044f\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c. \u0413\u043b\u0430\u0432\u0430 \u0432\u0442\u043e\u0440\u0430\u044f. \u0427\u0438\u0441\u0442\u043a\u0430 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u042d\u0442\u0430 \u0441\u0442\u0430\u0442\u044c\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u0432 \u0446\u0438\u043a\u043b\u0435 \u0441\u0442\u0430\u0442\u0435\u0439 \u00ab\u041a\u0430\u043a \u0432\u0437\u044f\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u00bb.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-vzyat-setevuyu-infrastrukturu-pod-svoj-kontrol-glava-vtoraya-chistka-i-dokumentirovanie\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:39:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:39:16+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cum s\u0103 preiau controlul asupra infrastructurii de re\u021bea. Capitolul doi. Cur\u0103\u021bare \u0219i documentare | ProHoster","description":"Acest articol este al doilea din ciclul de articole \"Cum s\u0103 preiau controlul asupra infrastructurii de re\u021bea\".","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-vzyat-setevuyu-infrastrukturu-pod-svoj-kontrol-glava-vtoraya-chistka-i-dokumentirovanie","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u0432\u0437\u044f\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c. \u0413\u043b\u0430\u0432\u0430 \u0432\u0442\u043e\u0440\u0430\u044f. \u0427\u0438\u0441\u0442\u043a\u0430 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 | ProHoster","og:description":"\u042d\u0442\u0430 \u0441\u0442\u0430\u0442\u044c\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u0432 \u0446\u0438\u043a\u043b\u0435 \u0441\u0442\u0430\u0442\u0435\u0439 \u00ab\u041a\u0430\u043a \u0432\u0437\u044f\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u00bb.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-vzyat-setevuyu-infrastrukturu-pod-svoj-kontrol-glava-vtoraya-chistka-i-dokumentirovanie","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:39:16+00:00","article:modified_time":"2019-10-31T18:39:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31067","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 04:22:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:24:13","updated":"2026-01-21 04:22:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31067","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=31067"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31067\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/23042"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=31067"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=31067"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=31067"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}