{"id":87676,"date":"2020-07-09T13:42:19","date_gmt":"2020-07-09T11:42:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/huawei-dcn-pyat-sczenariev-postroeniya-seti-czod"},"modified":"2020-07-09T13:42:19","modified_gmt":"2020-07-09T11:42:19","slug":"huawei-dcn-pyat-sczenariev-postroeniya-seti-czod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/huawei-dcn-pyat-sczenariev-postroeniya-seti-czod","title":{"rendered":"Huawei DCN: pes\u00eb skenar\u00eb p\u00ebr nd\u00ebrtimin e rrjetit t\u00eb Qendr\u00ebs s\u00eb t\u00eb Dhenave","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sot n\u00eb qend\u00ebr t\u00eb v\u00ebmendjes son\u00eb \u00ebsht\u00eb jo vet\u00ebm linja e produkteve Huawei p\u00ebr krijimin e rrjeteve t\u00eb Qendr\u00ebs s\u00eb t\u00eb Dhenave, por edhe si t\u00eb nd\u00ebrtojm\u00eb zgjidhje komplekse t\u00eb avancuara mbi k\u00ebt\u00eb baz\u00eb. Do t\u00eb fillojm\u00eb me skenar\u00ebt, do kalojm\u00eb te funksionalitetet specifike, pajisjet p\u00ebrkrah\u00ebse dhe do p\u00ebrfundojm\u00eb me nj\u00eb p\u00ebrmbledhje t\u00eb pajisjeve specifike q\u00eb mund t\u00eb sh\u00ebrbejn\u00eb si baz\u00eb p\u00ebr Qendrat e reja t\u00eb t\u00eb Dhenave me nj\u00eb nivel t\u00eb lart\u00eb automatizimi t\u00eb proceseve t\u00eb rrjetit.<\/p>\n

\"Huawei
\n<\/a><\/noindex>
\nPavar\u00ebsisht se sa mbres\u00ebl\u00ebn\u00ebse jan\u00eb karakteristikat e pajisjeve rrjet\u00eb, mund\u00ebsit\u00eb e zgjidhjeve arkitekturore aplikative mbi baz\u00ebn e tyre p\u00ebrcaktohen nga sa e efektshme mund t\u00eb jet\u00eb integrimi i nd\u00ebrsjell\u00eb i teknologjive hardware, software, virtuale dhe t\u00eb tjera q\u00eb lidhen me to. Duke u munduar t\u00eb mbajm\u00eb ritmin me koh\u00ebn, ne p\u00ebrpiqemi t\u00eb ofrojm\u00eb shpejt klient\u00ebve mund\u00ebsi moderne dhe t\u00eb premtuara, t\u00eb cilat shpesh i kalojn\u00eb idet\u00eb m\u00eb ambicioze t\u00eb furnizuesve t\u00eb tjer\u00eb.<\/p>\n

\"Huawei
\n
\nN\u00eb zgjidhjet e bazuara n\u00eb Cloud Fabric p\u00ebrfshihet rrjeti i qendr\u00ebs s\u00eb p\u00ebrpunimit t\u00eb dh\u00ebnash, kontrolluesi SDN, si dhe komponent\u00ebt e tjer\u00eb t\u00eb nevojsh\u00ebm p\u00ebr projektin specifik, p\u00ebrfshir\u00eb nga prodhues t\u00eb tjer\u00eb.<\/p>\n

Skenari i par\u00eb dhe m\u00eb i thjesht\u00eb p\u00ebrfshin p\u00ebrdorimin e nj\u00eb numri minimal komponent\u00ebsh: rrjeti nd\u00ebrtohet mbi nj\u00eb baz\u00eb harduerike Huawei dhe mjete t\u00eb jashtme p\u00ebr automatizimin e proceseve t\u00eb menaxhimit dhe monitorimit t\u00eb rrjetit. P\u00ebr shembull, si Ansible ose Microsoft Azure.<\/p>\n

Skenari i dyt\u00eb n\u00ebnkupton se klienti tashm\u00eb po p\u00ebrdor nj\u00eb sistem virtualizimi dhe SDN p\u00ebr qendrat e t\u00eb dh\u00ebnave, t\u00eb themi NSX, dhe d\u00ebshiron t\u00eb angazhoj\u00eb pajisjet Huawei si VTEP (Virtual Tunnel End Point) harduerik n\u00eb kuad\u00ebr t\u00eb zgjidhjes ekzistuese VMware. N\u00eb faqen e k\u00ebsaj kompanie \u00ebsht\u00eb listuar<\/a><\/noindex> hardware-i Huawei, i cili \u00ebsht\u00eb testuar dhe mund t\u00eb p\u00ebrdoret si VTEP. Sigurisht q\u00eb nuk \u00ebsht\u00eb sekret p\u00ebr ask\u00ebnd se, sa do t\u00eb ishin t\u00eb suksessh\u00ebm zgjidhjet software VXLAN (Virtual Extensible LAN) n\u00eb nd\u00ebrruesit virtual\u00eb, realizimet harduerike jan\u00eb m\u00eb t\u00eb efektshme nga pik\u00ebpamja e performanc\u00ebs.<\/p>\n

Scenari i tret\u00eb \u00ebsht\u00eb nd\u00ebrtimi i sistemeve t\u00eb klas\u00ebs hosting & computing, t\u00eb cilat p\u00ebrmbajn\u00eb nj\u00eb kontrollues, por jan\u00eb t\u00eb privuara nga ndonj\u00eb platform\u00eb m\u00eb t\u00eb lart\u00eb me t\u00eb cil\u00ebn duhet t\u00eb integrohen. Nj\u00eb nga variantet e realizimit t\u00eb k\u00ebtij skenari parashikon ekzistenc\u00ebn e nj\u00eb kontrolluesi t\u00eb ve\u00e7ant\u00eb SDN, Agile Controller-DCN. K\u00ebt\u00eb arkitektur\u00eb, administrator\u00ebt e sistemeve mund ta p\u00ebrdorin p\u00ebr t\u00eb kryer operacionet e p\u00ebrditshme t\u00eb menaxhimit t\u00eb rrjetit. Nj\u00eb variant m\u00eb i avancuar i skenarit t\u00eb tret\u00eb nd\u00ebrtohet mbi nd\u00ebrveprimin e Agile Controller-DCN me VMware vCenter, t\u00eb bashkuar nga nj\u00eb proces biznesi, por p\u00ebrs\u00ebri pa nj\u00eb sistem t\u00eb lart\u00eb administrimi.<\/p>\n

Ve\u00e7antia e skenarit t\u00eb kat\u00ebrt \u00ebsht\u00eb integrimi me nj\u00eb platform\u00eb m\u00eb t\u00eb lart\u00eb t\u00eb bazuar n\u00eb OpenStack ose produktin ton\u00eb t\u00eb virtualizimit FusionSphere. Ne regjistrojm\u00eb shum\u00eb k\u00ebrkesa p\u00ebr zgjidhje t\u00eb tilla arkitekturore, teksa OpenStack (CentOS, Red Hat etj.) g\u00ebzon popullaritetin m\u00eb t\u00eb madh. \u00c7do gj\u00eb varet nga platforma e orkestrimit dhe menaxhimit t\u00eb burimeve kompjuterike q\u00eb aplikohet n\u00eb qendr\u00ebn e t\u00eb dh\u00ebnave.<\/p>\n

Skenari i pest\u00eb \u00ebsht\u00eb krejt\u00ebsisht i ri. P\u00ebrve\u00e7 ndSwitch-\u00ebve t\u00eb njohura mir\u00eb, ai p\u00ebrfshin nj\u00eb switch virtual t\u00eb shp\u00ebrndar\u00eb CloudEngine 1800V (CE1800V), i cili mund t\u00eb eksploatohet vet\u00ebm me KVM (Kernel-based Virtual Machine). Kjo arkitektur\u00eb n\u00ebnkupton integrimin e Agile Controller-DCN me platform\u00ebn e kontejnerizimit Kubernetes p\u00ebrmes nj\u00eb plugini CNI. K\u00ebshtu, Huawei, s\u00eb bashku me gjith\u00eb bot\u00ebn, po kalon nga virtualizimi i hosteve n\u00eb virtualizimin e sistemeve operative<\/b>.<\/p>\n

\"Huawei
\n<\/p>\n

M\u00eb shum\u00eb rreth kontejnerizimit<\/h2>\n

\nM\u00eb par\u00eb p\u00ebrmend\u00ebm switch-in virtual CE1800V, i cili ngrihet me ndihm\u00ebn e Agile Controller-DCN. N\u00eb kombinim me switch-et e harduerit nga Huawei, ata formojn\u00eb nj\u00eb \"shtres\u00eb hibride\". N\u00eb t\u00eb ardhmen e af\u00ebrt, skenar\u00ebt e kontejner\u00ebve nga Huawei do t\u00eb mb\u00ebshtesin funksionalitete NAT dhe balancimin e ngarkes\u00ebs. <\/p>\n

Nj\u00eb kufizim i arkitektur\u00ebs \u00ebsht\u00eb pamund\u00ebsia p\u00ebr t\u00eb p\u00ebrdorur CE1800V ve\u00e7mas nga Agile Controller-DCN. Po ashtu, duhet t\u00eb merret parasysh se nj\u00eb PoD i platform\u00ebs Kubernetes mund t\u00eb p\u00ebrmbaj\u00eb maksimumi 4 milion kontejner\u00eb.<\/p>\n

Konnexioni me rrjetin VXLAN t\u00eb Qendr\u00ebs s\u00eb T\u00eb Dh\u00ebnave b\u00ebhet p\u00ebrmes VLAN (Rrjeti Lokal Virtual), megjithat\u00eb ekziston nj\u00eb mund\u00ebsi, ku CE1800V sh\u00ebrben si VTEP me procesin BGP (Protokolli i Kalimit nga Kufiri). Kjo lejon shk\u00ebmbimin e rrug\u00ebve BGP me rrjetin e fleshit pa angazhuar switch-e t\u00eb ve\u00e7ant\u00eb.<\/p>\n

\"Huawei
\n<\/p>\n

Rrjetet e Bazuar n\u00eb Njer\u00ebz: rrjete q\u00eb analizojn\u00eb q\u00ebllimet<\/h2>\n

\nKoncepte e Rrjetit t\u00eb Bazuar n\u00eb Njer\u00ebz (IDN) nga Huawei paraqiti<\/a><\/noindex> q\u00eb nga viti 2018. Q\u00eb at\u00ebher\u00eb, kompania nuk ka ndalur pun\u00ebn mbi rrjetet q\u00eb lejojn\u00eb, p\u00ebrmes teknologjive t\u00eb informacionit n\u00eb re, t\u00eb dh\u00ebnave t\u00eb m\u00ebdha dhe inteligjenc\u00ebs artificiale, t\u00eb analizojn\u00eb q\u00ebllimet dhe synimet e p\u00ebrdoruesve.<\/p>\n

N\u00eb thelb, ne flasim p\u00ebr nj\u00eb kalim nga automatizimi n\u00eb autonomi. Q\u00ebllimi i shprehur nga p\u00ebrdoruesi rikthehet n\u00eb form\u00ebn e rekomandimeve p\u00ebr produktet rrjetore, se si ta realizojn\u00eb k\u00ebt\u00eb q\u00ebllim. N\u00eb thelb t\u00eb k\u00ebsaj funksionaliteti jan\u00eb mund\u00ebsit\u00eb e Agile Controller-DCN, t\u00eb cilat do t\u00eb shtohen n\u00eb produkt p\u00ebr t\u00eb siguruar realizimin e ideologjis\u00eb IDN.<\/p>\n

N\u00eb t\u00eb ardhmen, me implementimin e IDN, do t\u00eb jet\u00eb e mundur t\u00eb zhvillohen sh\u00ebrbime rrjetesh me nj\u00eb klikim, q\u00eb n\u00ebnkupton nj\u00eb shkall\u00eb shum\u00eb t\u00eb lart\u00eb automatizimi. Arkitektura modulare e funksioneve t\u00eb rrjetit dhe mund\u00ebsia p\u00ebr t\u00eb kombinuar k\u00ebto funksione do t'i lejoj\u00eb administratorit t\u00eb thot\u00eb thjesht se cilat sh\u00ebrbime duhet t\u00eb b\u00ebhen t\u00eb disponueshme n\u00eb at\u00eb ose k\u00ebt\u00eb segment rrjeti.<\/p>\n

P\u00ebr t\u00eb arritur nj\u00eb nivel t\u00eb till\u00eb menaxhueshm\u00ebrie, procesi ZTP (Zero Touch Provisioning) \u00ebsht\u00eb shum\u00eb i r\u00ebnd\u00ebsish\u00ebm. Huawei ka arritur suksese t\u00eb m\u00ebdha n\u00eb k\u00ebt\u00eb drejtim, duke ofruar mund\u00ebsin\u00eb e zhvillimit t\u00eb plot\u00eb t\u00eb rrjetit \"nga kutia\".<\/p>\n

Procesi i m\u00ebtejsh\u00ebm i instalimit dhe zhvillimit p\u00ebrfshin patjet\u00ebr nj\u00eb procedur\u00eb verifikimi t\u00eb lidhshm\u00ebris\u00eb nd\u00ebrmjet burimeve (network connectivity) dhe nj\u00eb vler\u00ebsim t\u00eb ndryshimeve t\u00eb performanc\u00ebs s\u00eb rrjetit n\u00eb var\u00ebsi t\u00eb modave t\u00eb tij t\u00eb funksionimit. Ky hap n\u00ebnkupton realizimin e nj\u00eb simulimi para fillimit t\u00eb p\u00ebrdorimit real.<\/p>\n

Hapi tjet\u00ebr \u00ebsht\u00eb konfigurimi i sh\u00ebrbimeve sipas k\u00ebrkesave t\u00eb klientit (service provisioning) dhe verifikimi i tyre, t\u00eb cilat kryhen nga mjetet e integruara t\u00eb Huawei. Mbas k\u00ebsaj, nuk mbetet gj\u00eb tjet\u00ebr ve\u00e7se t\u00eb kontrollosh rezultatin. <\/p>\n

Tani, e gjith\u00eb ky proces mund t\u00eb realizohet p\u00ebrmes nj\u00eb mekanizmi kompleks t\u00eb vet\u00ebm mbi platform\u00ebn iMaster NCE, q\u00eb p\u00ebrfshin Agile Controller-DCN dhe sistemin e menaxhimit t\u00eb elementeve t\u00eb rrjetit (EMS) eSight.<\/p>\n

\"Huawei
\n
\nAktualisht, Agile Controller-DCN ka aft\u00ebsin\u00eb t\u00eb kontrolloj\u00eb disponueshm\u00ebrin\u00eb e burimeve dhe lidhjeve, si dhe t\u00eb reagoj\u00eb proaktivisht (pas miratimit nga administratori) ndaj problemeve q\u00eb shfaqen n\u00eb rrjet. Shtimi i sh\u00ebrbimeve t\u00eb nevojshme realizohet tani manualisht, por n\u00eb t\u00eb ardhmen Huawei planifikon t\u00eb automatizoj\u00eb k\u00ebt\u00eb dhe operacione t\u00eb tjera, si implementimin e server\u00ebve, konfigurimin e rrjeteve p\u00ebr ruajtjen e dh\u00ebnash, etj. <\/p>\n

\"Huawei
\n<\/p>\n

Zinxhira sh\u00ebrbimesh dhe mikrosigmentimi<\/h2>\n

\nAgile Controller-DCN \u00ebsht\u00eb n\u00eb gjendje t\u00eb p\u00ebrpunoj\u00eb titujt e sh\u00ebrbimit (Net Service Headers, ose NSH) q\u00eb jan\u00eb t\u00eb pranish\u00ebm n\u00eb paketa VXLAN. Kjo \u00ebsht\u00eb e dobishme p\u00ebr t\u00eb krijuar zinxhir\u00eb sh\u00ebrbimesh (service chains). P\u00ebr shembull, n\u00ebse d\u00ebshironi t\u00eb d\u00ebrgoni paketa t\u00eb nj\u00eb lloji t\u00eb caktuar p\u00ebrmes nj\u00eb rruge q\u00eb ndryshon nga ajo q\u00eb ofrohet nga protokolli standard i routingut. Para se t\u00eb dalin nga rrjeti, ato duhet t\u00eb kalojn\u00eb p\u00ebrmes ndonj\u00eb pajisjeje (si firewall, etj.). P\u00ebr k\u00ebt\u00eb mjafton t\u00eb konfiguroni nj\u00eb zinxhir sh\u00ebrbimesh q\u00eb p\u00ebrmban rregullat e nevojshme. Me k\u00ebt\u00eb mekaniz\u00ebm, \u00ebsht\u00eb e mundur, p\u00ebr shembull, t\u00eb konfiguroni politik\u00ebn e siguris\u00eb, por mund t\u00eb ket\u00eb edhe fusha t\u00eb tjera t\u00eb aplikimit.<\/p>\n

\"Huawei
\n
\nN\u00eb diagram \u00ebsht\u00eb paraqitur n\u00eb m\u00ebnyr\u00eb ilustrative funksionimi i zinxhir\u00ebve t\u00eb sh\u00ebrbimeve t\u00eb pajtuesh\u00ebm me RFC t\u00eb bazuar n\u00eb NSH, si dhe nj\u00eb list\u00eb e switch-eve harduerik\u00eb q\u00eb i mb\u00ebshtesin ato.<\/p>\n

\"Huawei
\n
\nMund\u00ebsit\u00eb e zgjidhjeve Huawei n\u00eb fush\u00ebn e krijimit t\u00eb zinxhir\u00ebve sh\u00ebrbimi kompletohen me mjetet e mikrosegmentimit \u2014 nj\u00eb metod\u00eb e siguris\u00eb n\u00eb rrjet q\u00eb p\u00ebrfshin izolimin e segmenteve t\u00eb siguris\u00eb deri n\u00eb element\u00ebt e ve\u00e7ant\u00eb t\u00eb ngarkes\u00ebs s\u00eb pun\u00ebs. Pjesa e radh\u00ebs e listave t\u00eb kontrollit t\u00eb aksesit (Access Control List ose ACL) ndihmon t\u00eb shmanget nevoja p\u00ebr t\u00eb konfiguruar n\u00eb m\u00ebnyr\u00eb manuale nj\u00eb sasi t\u00eb madhe ACL-esh.<\/p>\n

\"Huawei
\n<\/p>\n

Eksplorimi inteligjent<\/h2>\n

\nDuke p\u00ebr shtjellimin e funksionit t\u00eb rrjetit, \u00ebsht\u00eb e pamundur t\u00eb mos p\u00ebrmendet nj\u00eb komponent tjet\u00ebr i mark\u00ebs s\u00eb madhe iMaster NCE \u2014 analizatori inteligjent t\u00eb rrjetit FabricInsight. Ai ofron mund\u00ebsi t\u00eb gjera p\u00ebr mbledhjen e telemetris\u00eb dhe informacionit mbi flukset e t\u00eb dh\u00ebnave n\u00eb rrjet. Telemetria mblidhet p\u00ebrmes gRPC dhe akumulon t\u00eb dh\u00ebna mbi paketat e kaluara, t\u00eb vonuara n\u00eb buffer dhe t\u00eb humbura. Nj\u00eb grumbull tjet\u00ebr i madh informacioni grumbullohet p\u00ebrmes ERSPAN (Analizuesi i Portit t\u00eb Nd\u00ebrlikuar t\u00eb Kalimit), duke ofruar nj\u00eb pasqyr\u00eb t\u00eb flukseve t\u00eb t\u00eb dh\u00ebnave n\u00eb Qendr\u00ebn e T\u00eb Dh\u00ebnave. N\u00eb thelb, b\u00ebhet fjal\u00eb p\u00ebr mbledhjen e kryer\u00ebsve TCP dhe volumit t\u00eb informacionit q\u00eb transmetohet gjat\u00eb \u00e7do sesioni TCP. Kjo mund t\u00eb realizohet duke p\u00ebrdorur pajisje t\u00eb ndryshme Huawei \u2014 lista e tyre \u00ebsht\u00eb e paraqitur n\u00eb diagram.<\/p>\n

Nuk jan\u00eb harruar as SNMP dhe NetStream, k\u00ebshtu q\u00eb Huawei p\u00ebrdor mekanizma t\u00eb vjet\u00ebr dhe t\u00eb rinj p\u00ebr t\u00eb kaluar nga rrjeti si \"kutia e zez\u00eb\" n\u00eb nj\u00eb rrjet p\u00ebr t\u00eb cilin dim\u00eb praktikisht gjith\u00e7ka.<\/p>\n

\"Huawei
\n<\/p>\n

AI Fabric: rrjete inteligjente pa humbje<\/h2>\n

\nFunksionet e AI Fabric, q\u00eb mb\u00ebshteten nga pajisjet tona, kan\u00eb p\u00ebr q\u00ebllim t\u00eb kthejn\u00eb Ethernet n\u00eb nj\u00eb rrjet me performanc\u00eb t\u00eb lart\u00eb, me vonesa t\u00eb ulta dhe pa humbje paketa. Kjo \u00ebsht\u00eb e nevojshme p\u00ebr t\u00eb realizuar skenar\u00ebt kryesor\u00eb t\u00eb implementimit t\u00eb aplikacioneve n\u00eb rrjetin e qendr\u00ebs s\u00eb t\u00eb dh\u00ebnave.<\/p>\n

\"Huawei
\n
\nN\u00eb diagramin m\u00eb lart shohim problemet me t\u00eb cilat ka rrezik t\u00eb p\u00ebrballemi gjat\u00eb operimit t\u00eb rrjetit:<\/p>\n