Zvakaoma here kugadzira muchina chaiwo (VM) mugore? Hazvina kuoma kupfuura kugadzira tii. Asi kana zvasvika kune kambani hombe, kunyangwe kuita kwakapusa kwakadaro kunogona kuve kunorwadza kureba. Izvo hazvina kukwana kugadzira muchina chaiwo; iwe zvakare unofanirwa kuwana iyo inodiwa yekuwana yekushanda zvinoenderana nemirairo yese. Marwadzo anozivikanwa kune wese mugadziri? Mune rimwe bhangi hombe, kuita uku kwakatora kubva pamaawa akawanda kusvika kumazuva akati kuti. Uye sezvo kwaive nemazana emabasa akafanana pamwedzi, zviri nyore kufungidzira ukuru hwechirongwa ichi chinopedza basa. Kuti tipedze izvi, takagadziridza gore rakazvimiririra rebhangi uye takagadzira kwete chete maitiro ekugadzira maVM, asiwo ane hukama.
Basa Nhamba 1. Cloud neInternet connection
Bhangi rakagadzira gore rakazvimiririra richishandisa timu yaro yemukati yeIT yechikamu chimwe chetiweki. Nekufamba kwenguva, manejimendi akatenda mabhenefiti ayo uye vakafunga kuwedzera yakavanzika gore pfungwa kune dzimwe nharaunda uye zvikamu zvebhangi. Izvi zvaida nyanzvi dzakawanda uye hunyanzvi hwakasimba mumakore ega. Naizvozvo, timu yedu yakapihwa basa rekuvandudza gore.
Rukova rukuru rweiyi purojekiti yaive kusikwa kwemakina chaiwo mune imwe chikamu chekuwedzera chekuchengetedza ruzivo - munzvimbo isina mauto (DMZ). Apa ndipo panosanganisirwa masevhisi ebhangi nekunze masisitimu ari kunze kwemabhanga.
Asi menduru iyi yaivewo nedivi. Masevhisi kubva kuDMZ aive aripo "kunze" uye izvi zvaisanganisira seti yese yenjodzi yekuchengetedza ruzivo. Chekutanga pane zvese, uku ndiko kutyisidzira kwekubira masisitimu, kuwedzera kunotevera kwenzvimbo yekurwisa muDMZ, uyezve kupinda muhurongwa hwebhangi. Kudzikisa dzimwe dzenjodzi idzi, isu takaronga kushandisa imwe chiyero chekuchengetedza - micro-segmentation solution.
Micro-segmentation kudzivirira
Classic segmentation inovaka miganhu yakachengetedzwa pamiganhu yemanetiweki uchishandisa firewall. Ne microsegmentation, yega yega VM inogona kupatsanurwa kuita yega, yakasarudzika chikamu.
Izvi zvinowedzera kuchengetedzwa kwehurongwa hwese. Kunyangwe kana vanorwisa vakabaya imwe sevha yeDMZ, zvichavaomera zvakanyanya kuti vaparadzire kurwiswa kunetiweki - vanozofanira kupaza akawanda "akakiiwa magonhi" mukati metiweki. Iyo yega firewall yeVM yega yega ine mitemo yayo maererano nayo, iyo inosarudza kodzero yekupinda nekubuda. Isu takapa micro-segmentation tichishandisa VMware NSX-T Distributed Firewall. Ichi chigadzirwa chepakati chinogadzira firewall mitemo yeVM uye inovaparadzira kune iyo virtualization infrastructure. Izvo hazvina basa kuti ndeupi muenzi OS anoshandiswa, mutemo unoshandiswa pamwero wekubatanidza chaiwo michina kune network.
Dambudziko N2. Mukutsvaga kukurumidza uye nyore
Kutumira muchina chaiwo? Zviri nyore! Kudzvanya kaviri uye wapedza. Asi ipapo mibvunzo mizhinji inomuka: nzira yekuwana kubva kune iyi VM kuenda kune imwe kana system? Kana kubva kune imwe system kudzokera kuVM?
Semuenzaniso, mubhangi, mushure mekuraira VM pane gore portal, zvaive zvakafanira kuvhura tekinoroji yekutsigira portal uye kuendesa chikumbiro chekupihwa kwekuwana kwakakodzera. Kukanganisa mukushandisa kwakakonzera kufona uye tsamba dzekugadzirisa mamiriro ezvinhu. Panguva imwecheteyo, VM inogona kuva ne10-15-20 yekuwana uye kugadzirisa imwe neimwe yakatora nguva. Maitiro aDhiyabhorosi.
Pamusoro pezvo, βkuchenesaβ zvisaririra zvebasa rehupenyu hwemashini ari kure aitoda kutarisirwa kwakakosha. Mushure mekunge vabviswa, zviuru zvemitemo yekuwana yakaramba iri pafirewall, ichiisa midziyo. Izvi zvese zviri zviviri mutoro wekuwedzera uye maburi ekuchengetedza.
Iwe haugone kuita izvi nemirairo iri mugore. Hazvina kunaka uye hazvina kuchengeteka.
Kuti uderedze nguva inotora kupa mukana kune maVM uye kuita kuti zvive nyore kuzvibata, isu takagadzira network yekuwana manejimendi masevhisi eVM.
Mushandisi ari padanho remuchina mumenu yemamiriro ezvinhu anosarudza chinhu kugadzira mutemo wekuwana, uye ipapo muchimiro chinovhura chinotsanangura maparamendi - kubva kupi, kupi, mhando dzeprotocol, nhamba dzechiteshi. Mushure mekuzadza nekuendesa fomu, matikiti anodiwa anogadzirwa otomatiki mushandisi tekinoroji yekutsigira system yakavakirwa paHP Service Manager. Ivo vane basa rekubvumidza ichi kana icho kuwana uye, kana kuwana kwakabvumidzwa, kune nyanzvi dzinoita mamwe maoparesheni ayo asati aitwa otomatiki.
Mushure mekunge danho rebhizinesi rinosanganisira nyanzvi rashanda, chikamu chesevhisi chinotanga icho chinogadzira otomatiki mitemo pamadziro emoto.
Seyekupedzisira chord, mushandisi anoona chikumbiro chakapedzwa zvakabudirira pane portal. Izvi zvinoreva kuti mutemo wakasikwa uye iwe unogona kushanda nawo - kuona, kuchinja, kubvisa.
Chibodzwa chekupedzisira chekubatsira
Chaizvoizvo, isu takagadziridza zvidiki zvidiki zvegore rakavanzika, asi bhangi rakawana mhedzisiro inooneka. Vashandisi ikozvino vanogashira kuwana network chete kuburikidza neiyo portal, pasina kubata zvakananga neDesk Revhisi. Inosungirwa fomu minda, kusimbiswa kwavo kwekurongeka kweiyo data yakapinda, pre-yakagadzirirwa rondedzero, yakawedzera data - zvese izvi zvinobatsira kuumba chaiyo yekuwana chikumbiro, iyo ine dhigirii yepamusoro yemukana ichatariswa uye isingarambwe nevashandi vekuchengetedza ruzivo nekuda. kuisa kukanganisa. MaVirtual machines haasisiri mabhokisi matema-iwe unogona kuramba uchishanda nawo nekuita shanduko pane portal.
Nekuda kweizvozvo, nhasi nyanzvi dzeIT dzebhangi dzava nadzo chishandiso chiri nyore chekuwana, uye vanhu ivavo chete ndivo vanobatanidzwa mukuita, pasina ivo vasingakwanise kuita pasina. Pakazara, maererano nemitengo yevashandi, uku kusunungurwa kubva kuzere zuva nezuva remutoro weanenge munhu 1, pamwe nemaawa akawanda akachengeterwa vashandisi. Automation yekugadzira mitemo yakaita kuti zvikwanise kushandisa micro-segmentation solution iyo isingagadzirire mutoro kune vashandi vebhangi.
Uye pakupedzisira, "mutemo wekuwana" wakava accounting unit yegore. Ndokunge, ikozvino gore rinochengeta ruzivo nezve mitemo yeVM ese uye inoachenesa kana chaiwo machina adzimwa.
Nenguva isipi zvikomborero zvemazuva ano zvichapararira kune gore rose rebhangi. Automation yeVM yekugadzira maitiro uye micro-segmentation yakafamba kupfuura iyo DMZ uye yakatora zvimwe zvikamu. Izvi zvakawedzera kuchengetedzeka kwegore rose.
Mhinduro yakaitwa inonakidza zvakare mukuti inobvumira bhanga kuti rikurumidze maitirwo ebudiriro, richiiswededza pedyo nemuenzaniso wemakambani eIT maererano nechiyero ichi. Mushure mezvose, kana zvasvika kune nharembozha, maportals, uye masevhisi evatengi, chero kambani hombe nhasi inovavarira kuve "fekitori" yekugadzira zvigadzirwa zvedhijitari. Mupfungwa iyi, mabhangi anotamba achienderana neakasimba emakambani eIT, achienderana nekugadzirwa kwezvishandiso zvitsva. Uye zvakanaka kana kugona kweiyo IT sisitimu yakavakirwa pane yakavanzika gore modhi inobvumidza iwe kugovera zviwanikwa zvinodikanwa zveizvi mumaminetsi mashoma uye zvakachengeteka sezvinobvira.
Vanyori:
Vyacheslav Medvedev, Musoro we Cloud Computing Dhipatimendi, Jet Infosystems,
Ilya Kuikin, anotungamira mainjiniya wegore computing department reJet Infosystems
Source: www.habr.com