{"id":55847,"date":"2020-01-30T00:00:00","date_gmt":"2020-01-29T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/acl-kommutatorov-v-detalyah"},"modified":"2020-02-18T14:04:00","modified_gmt":"2020-02-18T11:04:00","slug":"acl-kommutatorov-v-detalyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/acl-kommutatorov-v-detalyah","title":{"rendered":"Detajet e ACL e switch-ave","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

ACL (Lista e Kontrollit t\u00eb Qasjes) n\u00eb pajisjet rrjet mund t\u00eb realizohen si harduerik ashtu edhe softuerik, ose si\u00e7 quhet ndryshe, bazuar n\u00eb harduer dhe softuer. Dhe n\u00ebse me ACL bazuar n\u00eb softuer duhet t\u00eb jet\u00eb gjith\u00e7ka e qart\u00eb - jan\u00eb rregulla q\u00eb ruhen dhe p\u00ebrpunohen n\u00eb kujtes\u00ebn operuese (dmth. n\u00eb Planin Kontrollues), me t\u00eb gjitha kufizimet q\u00eb p\u00ebrcjellin, at\u00ebher\u00eb si jan\u00eb zbatuar dhe funksionojn\u00eb ACL bazuar n\u00eb harduer, ne do ta shqyrtojm\u00eb n\u00eb artikullin ton\u00eb. Si nj\u00eb shembull do t\u00eb p\u00ebrdorim nd\u00ebrprer\u00ebsit e seris\u00eb ExtremeSwitching nga kompania Extreme Networks.<\/p>\n

\"Detajet
\n <\/a><\/noindex>
\nDuke qen\u00eb se na intereson pik\u00ebrisht ACL bazuar n\u00eb harduer, implementimi i brendsh\u00ebm i Planit t\u00eb Dh\u00ebnave ka r\u00ebnd\u00ebsi kryesore p\u00ebr ne, ose konkretisht \u00e7ipat q\u00eb p\u00ebrdoren (ASIC). Nd\u00ebrprer\u00ebsit e t\u00eb gjitha linjave t\u00eb kompanis\u00eb Extreme Networks jan\u00eb nd\u00ebrtuar mbi ASIC nga Broadcom, dhe p\u00ebr k\u00ebt\u00eb arsye pjesa m\u00eb e madhe e informacionit m\u00eb posht\u00eb do t\u00eb jet\u00eb e vlefshme gjithashtu p\u00ebr nd\u00ebrprer\u00ebsit e tjer\u00eb t\u00eb pranish\u00ebm n\u00eb treg, t\u00eb realizuar mbi t\u00eb nj\u00ebjtin ASIC.<\/p>\n

Si\u00e7 tregohet n\u00eb figur\u00ebn m\u00eb sip\u00ebr, n\u00eb chipset \u00ebsht\u00eb p\u00ebrgjegj\u00ebs \"Content-Aware Engine\" p\u00ebr funksionimin e drejtp\u00ebrdrejt\u00eb t\u00eb ACL, ve\u00e7an\u00ebrisht p\u00ebr \"ingress\" dhe \"egress\". Arkitektura e tyre \u00ebsht\u00eb e nj\u00ebjt\u00eb, vet\u00ebm se \"egress\" \u00ebsht\u00eb m\u00eb pak e shkall\u00ebzuar dhe m\u00eb pak funksionale. Fizikisht, t\u00eb dy \"Content-Aware Engine\" jan\u00eb memorie TCAM plus logjika p\u00ebrcjell\u00ebse, dhe \u00e7do rregull ACL, qoft\u00eb p\u00ebrdoruesi apo sistemor, \u00ebsht\u00eb nj\u00eb mask\u00eb biterash (bit-mask) e shkruar n\u00eb k\u00ebt\u00eb memorie. Pik\u00ebrisht p\u00ebr k\u00ebt\u00eb arsye, p\u00ebrpunimi i trafikut nga chipset b\u00ebhet paket\u00eb-paket\u00eb dhe pa degradim t\u00eb performanc\u00ebs.<\/p>\n

Fizikisht, e nj\u00ebjta Ingress\/Egress TCAM ndan logjikisht n\u00eb disa segmente (varet nga sasia e vet\u00eb memories dhe platform\u00ebs), t\u00eb njohura si \"ACL slices\". P\u00ebr shembull, e nj\u00ebjta gj\u00eb ndodh me nj\u00eb HDD fizikisht t\u00eb nj\u00ebjt\u00eb n\u00eb laptopin tuaj, kur krijoni disa disqe logjike mbi t\u00eb \u2013 C:>, D:>. Secili ACL-slice p\u00ebrb\u00ebhet nga qeliza memorje, n\u00eb form\u00ebn e \"rreshtave\" ku shkruhen \"rregullat\" (rules\/bit-mask).<\/p>\n

\"Detajet
\nNdajtja e TCAM n\u00eb ACL-slices ka nj\u00eb logjik\u00eb t\u00eb caktuar pas saj. N\u00eb secilin ACL-slice t\u00eb ve\u00e7ant\u00eb mund t\u00eb shkruhen vet\u00ebm \"rregulla\" t\u00eb cilat jan\u00eb t\u00eb p\u00ebrputhshme me nj\u00ebra-tjetr\u00ebn. N\u00ebse ndonj\u00eb nga \"rregullat\" nuk \u00ebsht\u00eb e p\u00ebrputhshme me t\u00eb par\u00ebn, at\u00ebher\u00eb ajo do t\u00eb shkruhet n\u00eb ACL-slice-n e ardhsh\u00ebm, pavar\u00ebsisht se sa rreshta t\u00eb lir\u00eb p\u00ebr \"rregulla\" kan\u00eb mbetur n\u00eb t\u00eb m\u00ebparshmin. <\/p>\n

Nga e ka origjin\u00ebn kjo p\u00ebrputhje ose mos p\u00ebrputhje e rregullave ACL? E v\u00ebrteta \u00ebsht\u00eb se nj\u00eb \"rrjesht\" TCAM-i, ku shkruhen \"rregullat\", ka nj\u00eb gjat\u00ebsi prej 232 bit dhe ndahet n\u00eb disa fusha - Fixed, Field1, Field2, Field3. 232 bit ose 29 byte TCAM memorie jan\u00eb mjaft t\u00eb mjaftueshme p\u00ebr t\u00eb regjistruar bit-mask\u00ebn e nj\u00eb adrese MAC ose IP t\u00eb caktuar, por shum\u00eb m\u00eb e vog\u00ebl se sa titulli i plot\u00eb i paket\u00ebs Ethernet. N\u00eb \u00e7do ACL-slice t\u00eb ve\u00e7ant\u00eb, ASIC kryen nj\u00eb k\u00ebrkim t\u00eb pavarur p\u00ebrmes bit-mask\u00ebs e vendosur n\u00eb F1-F3. N\u00eb t\u00ebr\u00ebsi, ky k\u00ebrkim mund t\u00eb kryhet n\u00eb 128 byte-t\u00eb e par\u00eb t\u00eb titullit Ethernet. N\u00eb fakt, p\u00ebr shkak se k\u00ebrkimi mund t\u00eb kryhet n\u00eb 128 byte, por mund t\u00eb shkruhen vet\u00ebm 29 byte, p\u00ebr nj\u00eb k\u00ebrkim t\u00eb sakt\u00eb duhet caktuar nj\u00eb offset n\u00eb raport me fillimin e paket\u00ebs. Offset-i p\u00ebr \u00e7do ACL-slice caktohet gjat\u00eb regjistrimit t\u00eb rregullit t\u00eb par\u00eb, dhe n\u00ebse gjat\u00eb regjistrimit t\u00eb rregullit t\u00eb m\u00ebpassh\u00ebm zbulohet nevoja p\u00ebr nj\u00eb offset tjet\u00ebr, at\u00ebher\u00eb ky rregull konsiderohet i pap\u00ebrputhsh\u00ebm me t\u00eb parin dhe regjistrohet n\u00eb ACL-slice tjet\u00ebr.<\/p>\n

T\u00eb dh\u00ebnat e m\u00ebposhtme tregojn\u00eb rendin e p\u00ebrputhshm\u00ebris\u00eb s\u00eb kushteve q\u00eb shkruhen n\u00eb ACL. \u00c7do rresht i ve\u00e7ant\u00eb p\u00ebrmban p\u00ebrputhshm\u00ebrit\u00eb midis vetes dhe mos p\u00ebrputhshm\u00ebrit\u00eb me rreshta t\u00eb tjer\u00eb t\u00eb formuara bit-mask.<\/p>\n

\"Detajet
\n\u00c7do paket\u00eb e ve\u00e7ant\u00eb e procesuar nga ASIC nxit nj\u00eb k\u00ebrkim paralel n\u00eb \u00e7do ACL-slice. Kontrolli b\u00ebhet deri n\u00eb p\u00ebrputhjen e par\u00eb n\u00eb ACL-slice, por lejohet gjithashtu p\u00ebrputhje t\u00eb shum\u00ebfishta p\u00ebr t\u00eb nj\u00ebjt\u00ebn paket\u00eb n\u00eb ACL-slice t\u00eb ndryshme. \u00c7do \"rregull\" i ve\u00e7ant\u00eb ka nj\u00eb veprim p\u00ebrkat\u00ebs q\u00eb duhet t\u00eb kryhet n\u00eb rast p\u00ebrputhjeje t\u00eb kushtit (bit-mask). N\u00ebse p\u00ebrputhja ndodhi menj\u00ebher\u00eb n\u00eb disa ACL-slice, at\u00ebher\u00eb n\u00eb bllokun \"Zgjidhja e Konflikteve t\u00eb Veprimeve\" sipas prioritetit t\u00eb ACL-slice merret vendimi se cili veprim do t\u00eb kryhet. N\u00ebse n\u00eb ACL \u00ebsht\u00eb regjistruar si \"veprim\" (lejo\/moho) ashtu edhe \"modifikuesi i veprimit\" (num\u00ebro\/QoS\/regjistro... ), at\u00ebher\u00eb n\u00eb rastet me p\u00ebrputhje t\u00eb shumta do t\u00eb kryhet vet\u00ebm \"veprimi\" m\u00eb me prioritet, nd\u00ebrsa \"modifikuesi i veprimit\" do t\u00eb kryhen t\u00eb gjitha. N\u00eb shembullin m\u00eb posht\u00eb tregohet se t\u00eb dy num\u00ebruesit do t\u00eb rriten dhe do t\u00eb kryhet \"moho\" m\u00eb me prioritet.<\/p>\n

\"Detajet
\n\"ACL Solutions Guide\"<\/a><\/noindex> me informacion m\u00eb t\u00eb detajuar mbi funksionimin e ACL q\u00eb \u00ebsht\u00eb n\u00eb dispozicion publik n\u00eb faqen extremenetworks.com<\/a><\/noindex>. \u00c7do pyetje q\u00eb mund t\u00eb lind\u00eb ose mbetet mund t\u00eb b\u00ebhet gjithmon\u00eb stafit ton\u00eb t\u00eb zyr\u00ebs \u2013 cis@extremenetworks.com<\/a><\/noindex>.
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

ACL (Access Control List) \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u043a\u0430\u043a \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e, \u0442\u0430\u043a \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e, \u0438\u043b\u0438 \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u0435\u0439 \u0433\u043e\u0432\u043e\u0440\u044f hardware \u0438 software-based ACL. \u0418 \u0435\u0441\u043b\u0438 \u0441 software-based ACL \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0432\u0441\u0451 \u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u2014 \u044d\u0442\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (\u0442.\u0435. \u043d\u0430 Control Plane), \u0441\u043e \u0432\u0441\u0435\u043c\u0438 \u0432\u044b\u0442\u0435\u043a\u0430\u044e\u0449\u0438\u043c\u0438 \u043e\u0442\u0441\u044e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f\u043c\u0438, \u0442\u043e \u043a\u0430\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55847","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ACL e switch-\u00ebve n\u00eb detaje | ProHoster","description":"ACL (Lista e Kontrollit t\u00eb Aksesit) n\u00eb pajisjet rrjet mund t\u00eb realizohet si n\u00eb m\u00ebnyr\u00eb harduerike ashtu edhe n\u00eb m\u00ebnyr\u00eb softuerike, ose si\u00e7 thuhet ndryshe, bazuar n\u00eb harduer dhe softuer.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/acl-kommutatorov-v-detalyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ACL \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445 | ProHoster","og:description":"ACL (Access Control List) \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u043a\u0430\u043a \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e, \u0442\u0430\u043a \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e, \u0438\u043b\u0438 \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u0435\u0439 \u0433\u043e\u0432\u043e\u0440\u044f hardware \u0438 software-based ACL.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/acl-kommutatorov-v-detalyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-29T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55847","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:35:41","updated":"2022-09-29 07:17:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55847","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=55847"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55847\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=55847"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=55847"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=55847"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}