{"id":55847,"date":"2020-01-30T00:00:00","date_gmt":"2020-01-29T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/acl-kommutatorov-v-detalyah"},"modified":"2020-02-18T14:04:00","modified_gmt":"2020-02-18T11:04:00","slug":"acl-kommutatorov-v-detalyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/acl-kommutatorov-v-detalyah","title":{"rendered":"Detajet e ACL t\u00eb switch-ave","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

ACL (Lista e Kontrollit t\u00eb Aksesit) n\u00eb pajisjet rrjet mund t\u00eb realizohen si hardware, ashtu edhe software, ose m\u00eb sakt\u00eb si ACL t\u00eb bazuar n\u00eb harduer dhe softuer. Dhe n\u00ebse duhet t\u00eb kuptojm\u00eb mir\u00eb t\u00eb parat, - ato jan\u00eb rregulla q\u00eb ruhen dhe p\u00ebrpunohen n\u00eb memorjen operative (dmth, n\u00eb Planin e Kontrollit), me t\u00eb gjitha kufizimet q\u00eb vijn\u00eb prej saj, do t\u00eb shqyrtojm\u00eb se si realizohen dhe funksionojn\u00eb ACL-t\u00eb e bazuara n\u00eb harduer n\u00eb artikullin ton\u00eb. Si nj\u00eb shembull do t\u00eb p\u00ebrdorim kalimtar\u00ebt e linj\u00ebs ExtremeSwitching nga kompania Extreme Networks.<\/p>\n

\"Detajet
\n <\/a><\/noindex>
\nDuke qen\u00eb se na intereson pik\u00ebrisht ACL e bazuar n\u00eb harduer, implementimi i brendsh\u00ebm i Data Plane \u00ebsht\u00eb me r\u00ebnd\u00ebsi kryesore p\u00ebr ne, ose chipsetet e p\u00ebrdorura (ASIC). Kalimtar\u00ebt e t\u00eb gjitha linjave t\u00eb kompanis\u00eb Extreme Networks jan\u00eb nd\u00ebrtuar mbi ASIC nga Broadcom, dhe prandaj informacioni q\u00eb do t\u00eb japim m\u00eb posht\u00eb do t\u00eb jet\u00eb gjithashtu i v\u00ebrtet\u00eb p\u00ebr kalimtar\u00ebt e tjer\u00eb t\u00eb pranish\u00ebm n\u00eb treg, q\u00eb jan\u00eb realizuar mbi ASIC t\u00eb ngjash\u00ebm.<\/p>\n

Si\u00e7 tregohet n\u00eb figur\u00ebn m\u00eb sip\u00ebr, drejt\u00eb p\u00ebr drejt\u00eb p\u00ebr funksionimin e ACL n\u00eb chipset p\u00ebrgjigjen \u2018ContentAware Engine\u2019, ndara n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb p\u00ebr \u2018ingress\u2019 dhe \u2018egress\u2019. Arkitekturally, ato jan\u00eb t\u00eb nj\u00ebjta, vet\u00ebm se \u2018egress\u2019 \u00ebsht\u00eb m\u00eb pak i shkall\u00ebzuar dhe m\u00eb pak funksional. Fizikisht, t\u00eb dy \u2018ContentAware Engine\u2019 jan\u00eb memorie TCAM mbi plus logjik\u00ebn p\u00ebrkat\u00ebse, dhe \u00e7do rregull ACL p\u00ebrdorues ose sistem jan\u00eb thjesht nj\u00eb mask\u00eb biti e shkruar n\u00eb k\u00ebt\u00eb memorie. Pik\u00ebrisht p\u00ebr k\u00ebt\u00eb arsye, p\u00ebrpunimi i trafikut nga chipset b\u00ebhet paket\u00eb p\u00ebr paket\u00eb dhe pa degradim t\u00eb rendimentit.<\/p>\n

Fizikisht, e nj\u00ebjta Ingress\/Egress TCAM ndahet logjikisht n\u00eb disa segmente (varet nga sasia e vet\u00eb memories dhe platform\u00ebs), t\u00eb quajtura \u2018ACL slices\u2019. P\u00ebr shembull, e nj\u00ebjta gj\u00eb ndodh me nj\u00eb HDD fizikisht t\u00eb nj\u00ebjt\u00eb n\u00eb laptopin tuaj, kur krijoni disa disqe logjike mbi t\u00eb \u2013 C:>, D:>. \u00c7do ACL-slice nga ana tjet\u00ebr p\u00ebrb\u00ebhet nga qeliza memorje, n\u00eb form\u00ebn e \u2018rreshtave\u2019 n\u00eb t\u00eb cilat shkruhen \u2018rules\u2019 (rregullat\/maskat e bit\u00ebve).<\/p>\n

\"Detajet
\nNd\u00ebrprerja e TCAM n\u00eb ACL-slices ka nj\u00eb logjik\u00eb t\u00eb caktuar. N\u00eb secilin nga ACL-slice t\u00eb ve\u00e7anta mund t\u00eb shkruhen vet\u00ebm \u2018rules\u2019 q\u00eb jan\u00eb t\u00eb pajtueshme me nj\u00ebri-tjetrin. N\u00ebse ndonj\u00eb nga \u2018rules\u2019 nuk \u00ebsht\u00eb i pajtuesh\u00ebm me t\u00eb kaluarit, at\u00ebher\u00eb ai do t\u00eb shkruhet n\u00eb ACL-slice tjet\u00ebr n\u00eb rend, pavar\u00ebsisht nga sa rreshta t\u00eb lir\u00eb p\u00ebr \u2018rules\u2019 kan\u00eb mbetur n\u00eb t\u00eb kaluarin. <\/p>\n

Cila \u00ebsht\u00eb ajo q\u00eb p\u00ebrcakton p\u00ebrputhshm\u00ebrin\u00eb ose munges\u00ebn e saj t\u00eb rregullave t\u00eb ACL? Problemi q\u00ebndron n\u00eb faktin se nj\u00eb \"rresht\" n\u00eb TCAM, ku regjistrohen \"rregullat\", ka nj\u00eb gjat\u00ebsi prej 232 bit dhe ndahet n\u00eb disa fusha \u2013 Fixed, Field1, Field2, Field3. 232 bit ose 29 byte memorie TCAM jan\u00eb plot\u00ebsisht t\u00eb mjaftueshme p\u00ebr t\u00eb regjistruar nj\u00eb bit-mask t\u00eb caktuar t\u00eb nj\u00eb adrese MAC ose IP, por \u00ebsht\u00eb ndjesh\u00ebm m\u00eb pak se kryeangazhimi i paket\u00ebs Ethernet. N\u00eb secilin ACL-slice t\u00eb ve\u00e7ant\u00eb, ASIC kryen nj\u00eb k\u00ebrkim t\u00eb pavarur sipas masave t\u00eb caktuara n\u00eb F1-F3. N\u00eb p\u00ebrgjith\u00ebsi, ky k\u00ebrkim mund t\u00eb realizohet n\u00eb 128 byte t\u00eb par\u00eb t\u00eb kryeangazhimit Ethernet. N\u00eb fakt, pik\u00ebrisht p\u00ebr shkak se k\u00ebrkimi mund t\u00eb kryhet n\u00eb 128 byte, nd\u00ebrsa mund t\u00eb regjistrohet vet\u00ebm 29 byte, p\u00ebr nj\u00eb k\u00ebrkim t\u00eb sakt\u00eb duhet t\u00eb caktohet nj\u00eb ofset (offset) n\u00eb lidhje me fillimin e paket\u00ebs. Ofseti p\u00ebr secilin ACL-slice caktohet gjat\u00eb regjistrimit t\u00eb rregullit t\u00eb par\u00eb dhe n\u00ebse gjat\u00eb regjistrimit t\u00eb rregullit t\u00eb ardhsh\u00ebm zbulohet nevoja p\u00ebr nj\u00eb ofset tjet\u00ebr, at\u00ebher\u00eb ky rregull konsiderohet i pap\u00ebrputhsh\u00ebm me t\u00eb parin dhe regjistrohet n\u00eb ACL-slice tjet\u00ebr.<\/p>\n

N\u00eb tabel\u00ebn m\u00eb posht\u00eb shfaqet rendi i p\u00ebrputhshm\u00ebris\u00eb s\u00eb kushteve q\u00eb jan\u00eb t\u00eb p\u00ebrshkruara n\u00eb ACL. Secili rresht i ve\u00e7ant\u00eb p\u00ebrmban bit-mask t\u00eb p\u00ebrputhshme me nj\u00ebra-tjetr\u00ebn dhe t\u00eb pa p\u00ebrputhshme me rreshta t\u00eb tjer\u00eb.<\/p>\n

\"Detajet
\nSecila paket\u00eb e ve\u00e7ant\u00eb e p\u00ebrpunuar nga ASIC nis nj\u00eb k\u00ebrkim paralel n\u00eb secilin ACL-slice. Kontrolli kryhet deri n\u00eb p\u00ebrputhjen e par\u00eb n\u00eb ACL-slice, por lejohet p\u00ebrputhje t\u00eb shum\u00ebfishta p\u00ebr t\u00eb nj\u00ebjt\u00ebn paket\u00eb n\u00eb ACL-slice t\u00eb ndryshme. \u00c7do \"rregull\" t\u00eb ve\u00e7ant\u00eb ka nj\u00eb veprim p\u00ebrkat\u00ebs q\u00eb duhet t\u00eb realizohet n\u00eb rast t\u00eb p\u00ebrputhjes s\u00eb kushteve (bit-mask). N\u00ebse ndodhi nj\u00eb p\u00ebrputhje n\u00eb disa ACL-slice, at\u00ebher\u00eb n\u00eb bllokun \"Zgjidhja e Konflikteve t\u00eb Veprimit\" n\u00eb p\u00ebrputhje me prioritetin e ACL-slice merr vendim se cili nga veprimet t\u00eb realizohet. N\u00ebse n\u00eb ACL jan\u00eb specifikuar si \"veprimi\" (lejo \/ moho), ashtu edhe \"modifikuesi i veprimit\" (num\u00ebro \/ QoS \/ regjistro \/ ...), at\u00ebher\u00eb n\u00eb rastin e p\u00ebrputhjeve t\u00eb shumta, do t\u00eb realizohet vet\u00ebm \"veprimi\" me prioritet m\u00eb t\u00eb lart\u00eb, nd\u00ebrsa t\u00eb gjith\u00eb \"modifikuesit e veprimit\" do t\u00eb realizohen. N\u00eb shembullin m\u00eb posht\u00eb tregohet se t\u00eb dy num\u00ebruesit do t\u00eb aumentohen dhe do t\u00eb realizohet \"moho\" me prioritet m\u00eb t\u00eb lart\u00eb.<\/p>\n

\"Detajet
\n\"Udh\u00ebzuesi i Zgjidhjeve t\u00eb ACL\"<\/a><\/noindex> me informacion m\u00eb t\u00eb detajuar rreth funksionimit t\u00eb ACL n\u00eb qasje t\u00eb hapur n\u00eb faqen extremenetworks.com<\/a><\/noindex>. \u00c7do pyetje q\u00eb lind ose mbetet gjithmon\u00eb mund t\u00eb b\u00ebhet stafit ton\u00eb n\u00eb zyr\u00eb \u2013 cis@extremenetworks.com<\/a><\/noindex>.
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

ACL (Access Control List) \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u043a\u0430\u043a \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e, \u0442\u0430\u043a \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e, \u0438\u043b\u0438 \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u0435\u0439 \u0433\u043e\u0432\u043e\u0440\u044f hardware \u0438 software-based ACL. \u0418 \u0435\u0441\u043b\u0438 \u0441 software-based ACL \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0432\u0441\u0451 \u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u2014 \u044d\u0442\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (\u0442.\u0435. \u043d\u0430 Control Plane), \u0441\u043e \u0432\u0441\u0435\u043c\u0438 \u0432\u044b\u0442\u0435\u043a\u0430\u044e\u0449\u0438\u043c\u0438 \u043e\u0442\u0441\u044e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f\u043c\u0438, \u0442\u043e \u043a\u0430\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55847","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Detajet e ACL t\u00eb switch-ave | ProHoster","description":"ACL (Lista e Kontrollit t\u00eb Qasjes) n\u00eb pajisjet rrjet vazhdon t\u00eb realizohet si n\u00eb harduer ashtu edhe n\u00eb softuer, ose si\u00e7 \u00ebsht\u00eb zakonisht e njohur, ACL e bazuar n\u00eb harduer dhe softuer.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/acl-kommutatorov-v-detalyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ACL \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445 | ProHoster","og:description":"ACL (Access Control List) \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u043a\u0430\u043a \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e, \u0442\u0430\u043a \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e, \u0438\u043b\u0438 \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u0435\u0439 \u0433\u043e\u0432\u043e\u0440\u044f hardware \u0438 software-based ACL.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/acl-kommutatorov-v-detalyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-29T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55847","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:35:41","updated":"2022-09-29 07:17:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55847","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=55847"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55847\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=55847"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=55847"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=55847"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}