{"id":71608,"date":"2020-02-27T08:51:12","date_gmt":"2020-02-27T05:51:12","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-v-yandeks-oblake-ustroeno-virtual-private-cloud-i-kak-nashi-polzovateli-pomogayut-nam-vnedryat-poleznye-funkczii"},"modified":"2026-05-21T17:55:47","modified_gmt":"2026-05-21T15:55:47","slug":"kak-v-yandeks-oblake-ustroeno-virtual-private-cloud-i-kak-nashi-polzovateli-pomogayut-nam-vnedryat-poleznye-funkczii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-v-yandeks-oblake-ustroeno-virtual-private-cloud-i-kak-nashi-polzovateli-pomogayut-nam-vnedryat-poleznye-funkczii","title":{"rendered":"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Bun\u0103, m\u0103 numesc Kostya Kramlih, sunt dezvoltator principal \u00een departamentul Virtual Private Cloud de la Yandex.Cloud. M\u0103 ocup de re\u021beaua virtual\u0103 \u0219i, dup\u0103 cum v\u0103 pute\u021bi imagina, \u00een acest articol voi vorbi despre cum este organizat Virtual Private Cloud (VPC) \u00een general \u0219i despre re\u021beaua virtual\u0103 \u00een special. De asemenea, ve\u021bi afla de ce noi, dezvoltatorii serviciului, apreciem feedback-ul din partea utilizatorilor no\u0219tri. Dar s\u0103 le lu\u0103m pe r\u00e2nd.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/62b3d222c1911fb28a345defdd81135c.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p><a rel=\"nofollow\" name=\"habracut\"><\/a><\/p>\n<h2>Ce este VPC?<\/h2>\n<p>\u00cen zilele noastre, exist\u0103 diverse op\u021biuni pentru desf\u0103\u0219urarea serviciilor. Sunt sigur c\u0103 cineva \u00eenc\u0103 mai \u021bine un server sub biroul administratorului, de\u0219i sper c\u0103 astfel de pove\u0219ti devin din ce \u00een ce mai rare.<\/p>\n<p>\u00cen prezent, serviciile \u00eencearc\u0103 s\u0103 migreze c\u0103tre \u043e\u0431\u043b\u0430\u043a\u0438 publice \u0219i tocmai aici se \u00eent\u00e2lnesc cu VPC. VPC este o parte a unui nor public care leag\u0103 resursele utilizatorilor, infrastructurii, platformelor \u0219i alte capacit\u0103\u021bi \u00eentr-un singur \u00eentreg, indiferent de loca\u021bia lor, fie \u00een norul nostru, fie \u00een afara acestuia. \u00cen acela\u0219i timp, VPC permite ca aceste resurse s\u0103 nu fie expuse pe internet f\u0103r\u0103 necesitate, r\u0103m\u00e2n\u00e2nd \u00een interiorul re\u021belei dumneavoastr\u0103 izolate.<\/p>\n<h2>Cum arat\u0103 re\u021beaua virtual\u0103 din exterior<\/h2>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/073a0cbac0e733decd8a4e6ffd9570ff.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>Prin VPC \u00een\u021belegem \u00een primul r\u00e2nd o re\u021bea overlay \u0219i servicii de re\u021bea, cum ar fi VPNaaS, NATaas, LBaas etc. \u0218i toate acestea func\u021bioneaz\u0103 deasupra infrastructurii de re\u021bea rezistente la erori, despre care am discutat <a href=\"https:\/\/habr.com\/ru\/company\/yandex\/blog\/437816\/\" rel=\"nofollow\">un articol excelent<\/a> aici, pe Habr.<\/p>\n<p>S\u0103 examin\u0103m mai \u00eendeaproape re\u021beaua virtual\u0103 \u0219i structura sa.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/b1b7a15912f9c7995663ab9943d473f1.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>S\u0103 lu\u0103m \u00een considerare dou\u0103 zone de disponibilitate. Oferim o re\u021bea virtual\u0103 \u2013 ceea ce am numit VPC. \u00cen realitate, aceasta define\u0219te spa\u021biul unic al adreselor dumneavoastr\u0103 \u201egri\u201d. \u00cen cadrul fiec\u0103rei re\u021bele virtuale, ave\u021bi control total asupra spa\u021biului de adrese pe care \u00eel pute\u021bi aloca resurselor de calcul.<\/p>\n<p>Re\u021beaua este global\u0103. Aceasta se projec\u021beaz\u0103 asupra fiec\u0103rei zone de disponibilitate sub forma unei entit\u0103\u021bi numite Subnet. Pentru fiecare Subnet, \u00eei aloca\u021bi un CIDR de 16 sau mai pu\u021bin. \u00cen fiecare zon\u0103 de disponibilitate poate exista mai mult de o astfel de entitate, av\u00e2nd \u00eentotdeauna un routing transparent \u00eentre ele. Asta \u00eenseamn\u0103 c\u0103 toate resursele dvs. din interiorul unei VPC pot \u201ecomunica\u201d \u00eentre ele, chiar dac\u0103 se afl\u0103 \u00een zone de disponibilitate diferite. \u201eComunicarea\u201d se face f\u0103r\u0103 a ie\u0219i pe internet, prin intermediul canalelor noastre interne, \u201ecrez\u00e2nd\u201d c\u0103 se afl\u0103 \u00een interiorul unei re\u021bele private.<\/p>\n<p>\u00cen schema de mai sus este ilustrat\u0103 o situa\u021bie tipic\u0103: dou\u0103 VPC-uri care se intersecteaz\u0103 pe adrese undeva. Ambele pot apar\u021bine dvs. De exemplu, una pentru dezvoltare, alta pentru testare. Pot exista pur \u0219i simplu utilizatori diferi\u021bi \u2013 \u00een acest caz nu este important. \u0218i \u00een fiecare VPC este conectat\u0103 c\u00e2te o ma\u0219in\u0103 virtual\u0103.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/73e872a4f6c3e19576db4e4980d62a45.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>S\u0103 complic\u0103m schema. Se poate face astfel \u00eenc\u00e2t o ma\u0219in\u0103 virtual\u0103 s\u0103 fie conectat\u0103 simultan la mai multe Subnet. \u0218i nu oricum, ci \u00een re\u021bele virtuale diferite.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/cc4ab2c7553d63ef2636924df1575479.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>\u00cen plus, dac\u0103 trebuie s\u0103 expune\u021bi ma\u0219inile pe internet, acesta poate fi realizat prin API sau UI. Pentru aceasta, este necesar\u0103 configurarea unei traduceri NAT a adresei dvs. \u201egri\u201d, interne, \u00eentr-o adres\u0103 \u201ealb\u0103\u201d \u2013 public\u0103. Nu pute\u021bi alege adresa \u201ealb\u0103\u201d, aceasta este alocat\u0103 aleatoriu din pool-ul nostru de adrese. Odat\u0103 ce nu mai folosi\u021bi IP-ul extern, acesta revine \u00een pool. Pl\u0103ti\u021bi doar pentru timpul utiliz\u0103rii adresei \u201ealbe\u201d.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/c2375fd6d0fb7b55ca55787adf505229.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>Exist\u0103, de asemenea, posibilitatea de a oferi unei ma\u0219ini acces la internet prin intermediul unei instan\u021be NAT. Pe instan\u021b\u0103 se poate ruga traficul printr-un tabel de rutare static. Am prev\u0103zut un astfel de caz, deoarece este necesar pentru unii utilizatori, \u0219i \u0219tim despre asta. Prin urmare, \u00een catalogul nostru de imagini exist\u0103 o imagine NAT special configurat\u0103.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/744ac3bdd2f388bab2597d6fe1519d76.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>Dar chiar \u0219i atunci c\u00e2nd exist\u0103 o imagine NAT gata preparat\u0103, configurarea poate fi complex\u0103. Am \u00een\u021beles c\u0103 pentru unii utilizatori aceast\u0103 op\u021biune nu este cea mai convenabil\u0103, de aceea am creat \u00een cele din urm\u0103 posibilitatea de activare a NAT pentru Subnet-ul dorit cu un singur clic. Aceast\u0103 caracteristic\u0103 este \u00eenc\u0103 \u00een acces preview restric\u021bionat, fiind testat\u0103 cu ajutorul participan\u021bilor din comunitate.<\/p>\n<h2>Cum este structurat\u0103 o re\u021bea virtual\u0103 din interior<\/h2>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/71cab3ae7f067f165a87e30c60559794.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>Cum interac\u021bioneaz\u0103 utilizatorul cu re\u021beaua virtual\u0103? Re\u021beaua prive\u0219te \u00een exterior prin API-ul s\u0103u. Utilizatorul acceseaz\u0103 API-ul \u0219i lucreaz\u0103 cu starea dorit\u0103. Prin API, utilizatorul vede cum ar trebui s\u0103 fie organizat \u0219i configurat totul, av\u00e2nd \u00een acela\u0219i timp o imagine de ansamblu a st\u0103rii curente comparativ cu starea dorit\u0103. Aceasta este perspectiva utilizatorului. \u0218i ce se \u00eent\u00e2mpl\u0103 \u00een interior?<\/p>\n<p>\u00cenregistr\u0103m starea dorit\u0103 \u00een Yandex Database \u0219i mergem s\u0103 configur\u0103m diferitele p\u0103r\u021bi ale VPC-ului nostru. Re\u021beaua overlay din Yandex.Cloud se bazeaz\u0103 pe componentele selectate din OpenContrail, care recent a fost redenumit\u0103 Tungsten Fabric. Serviciile de re\u021bea sunt implementate pe o platform\u0103 unificat\u0103 numit\u0103 CloudGate. \u00cen CloudGate am utilizat \u0219i noi un num\u0103r de componente open source: GoBGP \u2013 pentru accesarea informa\u021biilor de control, precum \u0219i VPP \u2013 pentru implementarea unui router software care func\u021bioneaz\u0103 pe DPDK pentru path-ul de date.<\/p>\n<p>Tungsten Fabric comunic\u0103 cu CloudGate prin GoBGP. Aceasta transmite ce se \u00eent\u00e2mpl\u0103 \u00een re\u021beaua overlay. CloudGate, la r\u00e2ndul s\u0103u, leag\u0103 re\u021belele overlay \u00eentre ele \u0219i cu internetul.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/222d68fff4b9577f316c8642e846172e.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>Acum s\u0103 vedem cum re\u021beaua virtual\u0103 abordeaz\u0103 problemele de scalabilitate \u0219i disponibilitate. S\u0103 consider\u0103m un caz simplu. Avem o zon\u0103 de disponibilitate \u00een care sunt create dou\u0103 VPC-uri. Am lansat un instan\u021biu de Tungsten Fabric, care poate gestiona c\u00e2teva zeci de mii de re\u021bele. Re\u021belele sunt conectate la CloudGate. CloudGate, a\u0219a cum am spus, asigur\u0103 conectivitatea \u00eentre ele \u0219i c\u0103tre internet.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/4da02ba041dcd886eee212dd8998718c.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>S\u0103 presupunem c\u0103 ad\u0103ug\u0103m o a doua zon\u0103 de disponibilitate. Aceasta trebuie s\u0103 func\u021bioneze complet independent de prima. Prin urmare, \u00een a doua zon\u0103 de disponibilitate trebuie s\u0103 instal\u0103m un instan\u021biu separat de Tungsten Fabric. Aceasta va fi un sistem separat, care se ocup\u0103 de overlay \u0219i cunoa\u0219te foarte pu\u021bin despre prima sistem. \u0218i vizibilitatea c\u0103 re\u021beaua noastr\u0103 virtual\u0103 este global\u0103 este de fapt creat\u0103 de API-ul nostru VPC. Aceasta este sarcina sa.<\/p>\n<p>VPC1 se proiecteaz\u0103 \u00een zona de disponibilitate B, dac\u0103 \u00een zona de disponibilitate B exist\u0103 resurse care se conecteaz\u0103 la VPC1. Dac\u0103 nu exist\u0103 resurse din VPC2 \u00een zona de disponibilitate B, nu vom materializa VPC2 \u00een aceast\u0103 zon\u0103. \u00cen schimb, deoarece resursele din VPC3 exist\u0103 doar \u00een zona B, VPC3 nu va exista \u00een zona A. Totul este simplu \u0219i logic.<\/p>\n<p>S\u0103 mergem pu\u021bin mai \u00een profunzime \u0219i s\u0103 vedem cum este structurat un host specific \u00een \u042f.\u041e\u0431\u043b\u0430\u043a\u0435. Principalul lucru de men\u021bionat este c\u0103 toate hosturile sunt organizate la fel. Facem \u00een a\u0219a fel \u00eenc\u00e2t doar minimul necesar de servicii s\u0103 ruleze pe \u00abhardware\u00bb, iar toate celelalte s\u0103 func\u021bioneze pe <a href=\"https:\/\/prohoster.info\/ro\/vps\/abuzoustojchivye-vps\/\">virtu\u00e1lne ma\u0161ini<\/a>. Construim servicii de nivel superior pe baza serviciilor infrastructurale de baz\u0103 \u0219i utiliz\u0103m Cloud pentru a rezolva unele sarcini inginere\u0219ti, de exemplu, \u00een cadrul Continuous Integration.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/4664bd03793ba394ceda1f8214fa2c16.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>Dac\u0103 ne uit\u0103m la un host specific, vom vedea c\u0103 \u00een sistemul de operare al hostului ruleaz\u0103 trei componente:<\/p>\n<ul>\n<li>Compute \u2013 partea care se ocup\u0103 cu distribu\u021bia resurselor de calcul pe host.<\/li>\n<li>VRouter \u2013 partea Tungsten Fabric care organizeaz\u0103 overlay-ul, adic\u0103 tunelizeaz\u0103 pachetele prin underlay.<\/li>\n<li>VDisk \u2013 aceste sunt fragmente de virtualizare a stoc\u0103rii.<\/li>\n<\/ul>\n<p>\u00cen plus, \u00een <a href=\"https:\/\/prohoster.info\/ro\/vps\/abuzoustojchivye-vps\/\">virtu\u00e1lne ma\u0161ini<\/a> ruleaz\u0103 servicii: servicii infrastructurale ale Cloud-ului, servicii de platform\u0103 \u0219i capacit\u0103\u021bile clien\u021bilor. Capacit\u0103\u021bile clien\u021bilor \u0219i serviciile de platform\u0103 trec \u00eentotdeauna prin overlay prin VRouter.<\/p>\n<p>Serviciile infrastructurale pot fi integrate \u00een overlay, dar \u00een principal doresc s\u0103 func\u021bioneze \u00een underlay. \u00cen underlay, se integreaz\u0103 cu ajutorul SR-IOV. De fapt, \u00eemp\u0103r\u021bim placa \u00een carduri de re\u021bea virtuale (func\u021bii virtuale) \u0219i le inser\u0103m \u00een ma\u0219inile virtuale infrastructurale pentru a nu pierde performan\u021ba. De exemplu, acel CloudGate este lansat ca una dintre aceste ma\u0219ini virtuale infrastructurale.<\/p>\n<p>Acum, c\u00e2nd am descris sarcinile globale ale re\u021belei virtuale \u0219i structura componentelor de baz\u0103 ale cloud-ului, s\u0103 vedem cum interac\u021bioneaz\u0103 diferitele p\u0103r\u021bi ale re\u021belei virtuale \u00eentre ele.<\/p>\n<p>\u00centre noi, sunt trei straturi \u00een sistemul nostru:<\/p>\n<ul>\n<li>Config Plane \u2013 stabile\u0219te starea \u021bint\u0103 a sistemului. Acesta este ceea ce configureaz\u0103 utilizatorul prin API.<\/li>\n<li>Control Plane \u2013 asigur\u0103 semantica specificat\u0103 de utilizator, adic\u0103 aduce starea Data Plane la ceea ce a fost descris de utilizator \u00een Config Plane.<\/li>\n<li>Data Plane \u2013 proceseaz\u0103 direct pachetele utilizatorului.<\/li>\n<\/ul>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/644cddfa8bce83a501bf4788a21f9588.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>A\u0219a cum am spus mai sus, totul \u00eencepe cu faptul c\u0103 utilizatorul sau un serviciu platform\u0103 intern\u0103 ajunge la API \u0219i descrie o anumit\u0103 stare \u021bint\u0103.<\/p>\n<p>Aceast\u0103 stare este imediat \u00eenregistrat\u0103 \u00een Yandex Database, returneaz\u0103 prin API ID-ul opera\u021biunii asincrone \u0219i activeaz\u0103 ma\u0219in\u0103ria noastr\u0103 intern\u0103 pentru a oferi starea dorit\u0103 de utilizator. Sarcinile de configurare sunt trimise la SDN-controller \u0219i comunic\u0103 lui Tungsten Fabric ce trebuie f\u0103cut \u00een overlay. De exemplu, acestea rezerv\u0103 porturi, re\u021bele virtuale \u0219i a\u0219a mai departe.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/c2c6e443c93f8dedc6a63e4bd3fd7042.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>Config Plane din Tungsten Fabric livreaz\u0103 starea solicitat\u0103 Control Plane-ului. Prin intermediul acestuia, Config Plane comunic\u0103 cu gazdele, explic\u00e2ndu-le ce va rula pe ele \u00een cur\u00e2nd.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/2139361a9e1837c7bc7f156e8bc36d38.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>Acum s\u0103 vedem cum arat\u0103 sistemul pe gazde. \u00cen <a href=\"https:\/\/prohoster.info\/ro\/vps\/abuzoustojchivye-vps\/\">ma\u0219ina virtual\u0103<\/a> exist\u0103 un anumit adaptor de re\u021bea, conectat la VRouter. VRouter este modulul de baz\u0103 al Tungsten Fabric, care analizeaz\u0103 pachetele. Dac\u0103 pentru un anumit pachet exist\u0103 deja un flow, modulul acesta \u00eel proceseaz\u0103. Dac\u0103 nu exist\u0103 flow, modulul face a\u0219a-numitul punting, adic\u0103 trimite pachetul la procesul din modul utilizator. Procesul analizeaz\u0103 pachetul \u0219i fie r\u0103spunde el \u00eensu\u0219i, cum ar fi \u00een cazul DHCP \u0219i DNS, fie spune lui VRouter ce s\u0103 fac\u0103 cu acesta. Dup\u0103 aceea, VRouter poate procesa pachetul.<\/p>\n<p>Apoi, traficul dintre ma\u0219inile virtuale din cadrul unei re\u021bele virtuale circul\u0103 transparent, el nu este direc\u021bionat c\u0103tre CloudGate. Gazdele pe care sunt desf\u0103\u0219urate ma\u0219inile virtuale comunic\u0103 direct \u00eentre ele. Ele tuneliz\u0103 traficul \u0219i \u00eel transmit reciproc prin overlay.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/1247f20fa2a12f093d7f1d2361d48a02.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>Control Plane comunic\u0103 \u00eentre ele \u00eentre zonele de disponibilitate prin BGP, ca \u0219i cum ar fi cu un alt router. Ele comunic\u0103 ce ma\u0219ini sunt unde ridicate, pentru ca ma\u0219inile virtuale dintr-o zon\u0103 s\u0103 poat\u0103 interac\u021biona direct cu alte ma\u0219ini virtuale.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/f70cd562220c7367e29597d8e8b62f81.jpeg\" alt=\"Cum este organizat Virtual Private Cloud \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile\" \/><\/p>\n<p>De asemenea, Control Plane comunic\u0103 cu CloudGate. De asemenea, informeaz\u0103 unde \u0219i ce ma\u0219ini virtuale sunt ridicate, care sunt adresele lor. Acest lucru permite direc\u021bionarea traficului extern \u0219i a traficului de la echilibratoarele de sarcin\u0103 c\u0103tre ele.<\/p>\n<p>Traficul care iese din VPC ajunge la CloudGate, \u00een data path, unde este procesat rapid de VPP cu pluginurile noastre. Apoi, traficul este trimis fie c\u0103tre alte VPC-uri, fie \u00een exterior, c\u0103tre routerele de frontier\u0103, care sunt configurate prin Control Plane-ul CloudGate-ului.<\/p>\n<h2>Planuri pentru viitorul apropiat<\/h2>\n<p>Dac\u0103 generaliz\u0103m toate cele spuse mai sus \u00een c\u00e2teva propozi\u021bii, putem spune c\u0103 VPC \u00een Yandex.Cloud rezolv\u0103 dou\u0103 probleme importante:<\/p>\n<ul>\n<li>Asigur\u0103 izola\u021bia \u00eentre diferi\u021bi clien\u021bi.<\/li>\n<li>Une\u0219te resursele, infrastructura, serviciile platformei, alte clouduri \u0219i solu\u021biile on-premise \u00eentr-o re\u021bea unitar\u0103.<\/li>\n<\/ul>\n<p>Pentru a rezolva aceste probleme \u00eentr-un mod eficient, trebuie s\u0103 asigur\u0103m scalabilitate \u0219i rezilien\u021b\u0103 la nivelul arhitecturii interne, ceea ce face VPC.<\/p>\n<p>Treptat, VPC se \u00eembog\u0103\u021be\u0219te cu func\u021bii, implement\u0103m noi caracteristici \u0219i \u00eencerc\u0103m s\u0103 \u00eembun\u0103t\u0103\u021bim aspectele legate de utilizator. Unele idei sunt exprimente \u0219i ajung \u00een lista de priorit\u0103\u021bi datorit\u0103 participan\u021bilor din comunitatea noastr\u0103.<\/p>\n<p>Acum avem cam aceast\u0103 list\u0103 de planuri pentru viitorul apropiat:<\/p>\n<ul>\n<li><a href=\"https:\/\/prohoster.info\/ro\/vpn\/\">VPN<\/a> ca serviciu.<\/li>\n<li>Instan\u021be DNS private \u2013 imagini pentru configurarea rapid\u0103 a ma\u0219inilor virtuale cu servere DNS configurate dinainte.<\/li>\n<li>DNS ca serviciu.<\/li>\n<li>\u00cenc\u0103rc\u0103tor intern de echilibrare.<\/li>\n<li>Ad\u0103ugarea unei adrese IP \u201ealbe\u201d f\u0103r\u0103 a recrea ma\u0219ina virtual\u0103.<\/li>\n<\/ul>\n<p>\u00cenc\u0103rc\u0103torul de echilibrare \u0219i posibilitatea de a schimba adresa IP pentru o ma\u0219in\u0103 virtual\u0103 deja creat\u0103 s-au reg\u0103sit pe aceast\u0103 list\u0103 la cererea utilizatorilor. S\u0103 fiu sincer, f\u0103r\u0103 un feedback clar, ne-am ocupa de aceste func\u021bii mai t\u00e2rziu. \u00cens\u0103 acum deja lucr\u0103m la problema adreselor.<\/p>\n<p>Ini\u021bial, o adres\u0103 IP \u201ealb\u0103\u201d putea fi ad\u0103ugat\u0103 doar la crearea ma\u0219inii. Dac\u0103 utilizatorul uita s\u0103 fac\u0103 acest lucru, ma\u0219ina virtual\u0103 trebuia recreat\u0103. La fel \u0219i \u00een cazul \u00een care era necesar\u0103 eliminarea IP-ului extern. \u00cen cur\u00e2nd, va fi posibil s\u0103 activa\u021bi \u0219i s\u0103 dezactiva\u021bi IP-ul public f\u0103r\u0103 a recrea ma\u0219ina.<\/p>\n<p>Nu ezita\u021bi s\u0103 exprima\u021bi <a href=\"https:\/\/cloud.yandex.ru\/features\" rel=\"nofollow\">ideile \u0219i s\u0103 sus\u021bine\u021bi propunerile<\/a> altor utilizatori. Ne ajuta\u021bi s\u0103 \u00eembun\u0103t\u0103\u021bim Cloud-ul \u0219i s\u0103 ob\u021bine\u021bi mai repede func\u021bii importante \u0219i utile!<\/p>\n<p>Sursa: <a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/yandex\/blog\/487694\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442, \u043c\u0435\u043d\u044f \u0437\u043e\u0432\u0443\u0442 \u041a\u043e\u0441\u0442\u044f \u041a\u0440\u0430\u043c\u043b\u0438\u0445, \u044f \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f Virtual Private Cloud \u0432 \u042f\u043d\u0434\u0435\u043a\u0441.\u041e\u0431\u043b\u0430\u043a\u0435. \u042f \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0441\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e, \u0438, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0433\u0430\u0434\u0430\u0442\u044c\u0441\u044f, \u0432 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u043e\u0431 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 Virtual Private Cloud (VPC) \u0432 \u0446\u0435\u043b\u043e\u043c \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438. \u0410 \u0435\u0449\u0451 \u0432\u044b \u0443\u0437\u043d\u0430\u0435\u0442\u0435, \u043f\u043e\u0447\u0435\u043c\u0443 \u043c\u044b, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u0446\u0435\u043d\u0438\u043c \u043e\u0431\u0440\u0430\u0442\u043d\u0443\u044e \u0441\u0432\u044f\u0437\u044c \u043e\u0442 \u043d\u0430\u0448\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041d\u043e \u043e\u0431\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":71609,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-71608","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442, \u043c\u0435\u043d\u044f \u0437\u043e\u0432\u0443\u0442 \u041a\u043e\u0441\u0442\u044f \u041a\u0440\u0430\u043c\u043b\u0438\u0445, \u044f \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f Virtual Private Cloud \u0432 \u042f\u043d\u0434\u0435\u043a\u0441.\u041e\u0431\u043b\u0430\u043a\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-v-yandeks-oblake-ustroeno-virtual-private-cloud-i-kak-nashi-polzovateli-pomogayut-nam-vnedryat-poleznye-funkczii\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u0432 \u042f\u043d\u0434\u0435\u043a\u0441.\u041e\u0431\u043b\u0430\u043a\u0435 \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u043e Virtual Private Cloud \u0438 \u043a\u0430\u043a \u043d\u0430\u0448\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043c\u043e\u0433\u0430\u044e\u0442 \u043d\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442, \u043c\u0435\u043d\u044f \u0437\u043e\u0432\u0443\u0442 \u041a\u043e\u0441\u0442\u044f \u041a\u0440\u0430\u043c\u043b\u0438\u0445, \u044f \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f Virtual Private Cloud \u0432 \u042f\u043d\u0434\u0435\u043a\u0441.\u041e\u0431\u043b\u0430\u043a\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-v-yandeks-oblake-ustroeno-virtual-private-cloud-i-kak-nashi-polzovateli-pomogayut-nam-vnedryat-poleznye-funkczii\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-27T05:51:12+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-21T15:55:47+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cum este organizat Cloud-ul Virtual Private \u00een Yandex.Cloud \u0219i cum ne ajut\u0103 utilizatorii s\u0103 implement\u0103m func\u021bii utile | ProHoster","description":"Bun\u0103, m\u0103 numesc Kostya Kramlih, sunt dezvoltatorul principal al departamentului Cloud-ului Virtual Private la Yandex.Cloud.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-v-yandeks-oblake-ustroeno-virtual-private-cloud-i-kak-nashi-polzovateli-pomogayut-nam-vnedryat-poleznye-funkczii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u0432 \u042f\u043d\u0434\u0435\u043a\u0441.\u041e\u0431\u043b\u0430\u043a\u0435 \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u043e Virtual Private Cloud \u0438 \u043a\u0430\u043a \u043d\u0430\u0448\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043c\u043e\u0433\u0430\u044e\u0442 \u043d\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442, \u043c\u0435\u043d\u044f \u0437\u043e\u0432\u0443\u0442 \u041a\u043e\u0441\u0442\u044f \u041a\u0440\u0430\u043c\u043b\u0438\u0445, \u044f \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f Virtual Private Cloud \u0432 \u042f\u043d\u0434\u0435\u043a\u0441.\u041e\u0431\u043b\u0430\u043a\u0435.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-v-yandeks-oblake-ustroeno-virtual-private-cloud-i-kak-nashi-polzovateli-pomogayut-nam-vnedryat-poleznye-funkczii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-27T05:51:12+00:00","article:modified_time":"2026-05-21T15:55:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"71608","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:59:28","updated":"2022-10-03 18:30:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/71608","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=71608"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/71608\/revisions"}],"predecessor-version":[{"id":181627,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/71608\/revisions\/181627"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/71609"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=71608"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=71608"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=71608"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}