{"id":87676,"date":"2020-07-09T13:42:19","date_gmt":"2020-07-09T11:42:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/huawei-dcn-pyat-sczenariev-postroeniya-seti-czod"},"modified":"2020-07-09T13:42:19","modified_gmt":"2020-07-09T11:42:19","slug":"huawei-dcn-pyat-sczenariev-postroeniya-seti-czod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/huawei-dcn-pyat-sczenariev-postroeniya-seti-czod","title":{"rendered":"Huawei DCN: pes\u00eb skenar\u00eb p\u00ebr nd\u00ebrtimin e rrjetit t\u00eb Qendr\u00ebs s\u00eb t\u00eb Dh\u00ebnave","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sot t\u00eb fokusohemi jo vet\u00ebm n\u00eb linj\u00ebn e produkteve Huawei p\u00ebr nd\u00ebrtimin e rrjeteve t\u00eb QDC, por edhe se si t\u00eb nd\u00ebrtojm\u00eb zgjidhje komplekse t\u00eb avancuara mbi baz\u00ebn e tyre. T\u00eb fillojm\u00eb me skenar\u00ebt, t\u00eb kalojm\u00eb n\u00eb funksionet specifike, pajisjet mb\u00ebshtet\u00ebse, dhe t\u00eb p\u00ebrfundojm\u00eb me nj\u00eb p\u00ebrmbledhje t\u00eb pajisjeve specifike q\u00eb mund t\u00eb sh\u00ebrbejn\u00eb si baza p\u00ebr QDC moderne me nivele t\u00eb larta automatizimi t\u00eb proceseve rrjetore.<\/p>\n

\"Huawei
\n<\/a><\/noindex>
\nPavar\u00ebsisht sa t\u00eb mbres\u00ebl\u00ebn\u00ebse jan\u00eb karakteristikat e pajisjeve rrjetore, mund\u00ebsit\u00eb e zgjidhjeve arkitekturore t\u00eb aplikacioneve mbi baz\u00ebn e tyre p\u00ebrcaktohen nga sa efikase mund t\u00eb jet\u00eb integrimi i nd\u00ebrsjell\u00eb i teknologjive t\u00eb lidhura, si ato harduerike, software, virtuale dhe t\u00eb tjera. Duke u p\u00ebrpjekur t\u00eb jemi n\u00eb hap me koh\u00ebn, ne p\u00ebrpiqemi t\u00eb ofrojm\u00eb shpejt mund\u00ebsi moderne dhe premtuese p\u00ebr klient\u00ebt, q\u00eb shpesh tejkalojn\u00eb idet\u00eb m\u00eb ambicioze t\u00eb ofruesve t\u00eb tjer\u00eb.<\/p>\n

\"Huawei
\n
\nZgjidhjet q\u00eb bazohen n\u00eb Cloud Fabric p\u00ebrfshijn\u00eb rrjetin e qendr\u00ebs s\u00eb p\u00ebrpunimit t\u00eb t\u00eb dh\u00ebnave, kontrolluesin SDN, si dhe komponent\u00eb t\u00eb tjer\u00eb t\u00eb nevojsh\u00ebm p\u00ebr projektin specifik, duke p\u00ebrfshir\u00eb edhe nga prodhues t\u00eb tjer\u00eb.<\/p>\n

Skenari i par\u00eb dhe m\u00eb i thjesht\u00eb p\u00ebrfshin p\u00ebrdorimin e numrit minimal t\u00eb komponent\u00ebve: rrjeti nd\u00ebrtohet mbi baz\u00ebn harduerike t\u00eb Huawei dhe mjete t\u00eb jashtme p\u00ebr automatizimin e proceseve t\u00eb menaxhimit t\u00eb rrjetit dhe monitorimin e tij. P\u00ebr shembull, si Ansible ose Microsoft Azure.<\/p>\n

Skenari i dyt\u00eb parashikon q\u00eb klienti tashm\u00eb p\u00ebrdor nj\u00eb sistem virtualizimi dhe SDN p\u00ebr qendrat e p\u00ebrpunimit t\u00eb t\u00eb dh\u00ebnave, le t\u00eb themi NSX, dhe d\u00ebshiron t\u00eb p\u00ebrdor\u00eb pajisjet Huawei si nj\u00eb VTEP (Virtual Tunnel End Point) harduerik brenda zgjidhjes ekzistuese VMware. N\u00eb faqen e k\u00ebsaj kompanie \u00ebsht\u00eb publikuar nj\u00eb list\u00eb<\/a><\/noindex> e pajisjeve Huawei, t\u00eb cilat jan\u00eb testuar dhe mund t\u00eb p\u00ebrdoren si VTEP. Nj\u00eb fakt i njohur \u00ebsht\u00eb se, p\u00ebr sa i p\u00ebrket performanc\u00ebs, zbatimet harduerike jan\u00eb m\u00eb efikase se zgjidhjet softuerike VXLAN (Virtual Extensible LAN) n\u00eb switch-at virtual.<\/p>\n

Scenari i tret\u00eb \u00ebsht\u00eb nd\u00ebrtimi i sistemeve t\u00eb klas\u00ebs hosting & computing, t\u00eb cilat p\u00ebrmbajn\u00eb nj\u00eb kontrollues, por nuk kan\u00eb asnj\u00eb platform\u00eb t\u00eb lart\u00eb me t\u00eb cil\u00ebn duhet t\u00eb integrohen. Nj\u00eb nga mund\u00ebsit\u00eb p\u00ebr zbatimin e k\u00ebtij scenari parashikon ekzistenc\u00ebn e nj\u00eb kontrolluesi SDN t\u00eb ve\u00e7ant\u00eb, Agile Controller-DCN. K\u00ebt\u00eb arkitektur\u00eb administrator\u00ebt e sistemeve mund ta p\u00ebrdorin p\u00ebr t\u00eb kryer operacione t\u00eb p\u00ebrditshme t\u00eb menaxhimit t\u00eb rrjetit. Nj\u00eb variant m\u00eb i avancuar i skenarit t\u00eb tret\u00eb ndodhet n\u00eb nd\u00ebrveprimin e Agile Controller-DCN me VMware vCenter, t\u00eb lidhur p\u00ebrmes nj\u00eb procesi biznesi, por p\u00ebrs\u00ebri pa sistem administrimi t\u00eb lart\u00eb.<\/p>\n

Skenari i kat\u00ebrt \u00ebsht\u00eb i ve\u00e7ant\u00eb - integrimi me nj\u00eb platform\u00eb t\u00eb lart\u00eb mbi baz\u00ebn e OpenStack ose produktit ton\u00eb t\u00eb virtualizimit FusionSphere. Ne regjistruam shum\u00eb k\u00ebrkesa p\u00ebr zgjidhje arkitekturore t\u00eb tilla, nd\u00ebr t\u00eb cilat OpenStack (CentOS, Red Hat etj.) \u00ebsht\u00eb m\u00eb popullor. Gjith\u00e7ka varet nga platforma e orkestrimit dhe menaxhimit t\u00eb burimeve llogaritur n\u00eb Qendr\u00ebn e t\u00eb Dh\u00ebnave.<\/p>\n

Skenari i pest\u00eb \u00ebsht\u00eb krejt\u00ebsisht i ri. P\u00ebrve\u00e7 switch-ve t\u00eb njohura harduerike, ai p\u00ebrfshin nj\u00eb switch virtual t\u00eb distribuar, CloudEngine 1800V (CE1800V), i cili mund t\u00eb operohet vet\u00ebm me KVM (Kernel-based Virtual Machine). Kjo arkitektur\u00eb parashikon bashkimin e Agile Controller-DCN me platform\u00ebn e kontejnerizimit Kubernetes p\u00ebrmes nj\u00eb plug-in CNI. K\u00ebshtu, Huawei, s\u00eb bashku me t\u00eb gjith\u00eb bot\u00ebn, po l\u00ebviz nga virtualizimi i hosteve n\u00eb virtualizimin e sistemeve operative.<\/b>.<\/p>\n

\"Huawei
\n<\/p>\n

M\u00eb shum\u00eb p\u00ebr kontejnerizimin.<\/h2>\n

\nM\u00eb par\u00eb p\u00ebrmendem switch-in virtual CE1800V, q\u00eb deployohet me sh\u00ebrbimin Agile Controller-DCN. N\u00eb kombinim me switch-t\u00eb harduerik\u00eb t\u00eb Huawei, ata krijojn\u00eb nj\u00eb \u00aboverlay hibrid\u00bb. N\u00eb t\u00eb ardhmen e af\u00ebrt, skenar\u00ebt kontenier nga Huawei do t\u00eb marrin mb\u00ebshtetje p\u00ebr funksione NAT dhe balancimin e ngarkes\u00ebs. <\/p>\n

Nj\u00eb kufizim i arkitektur\u00ebs \u00ebsht\u00eb pamund\u00ebsia e p\u00ebrdorimit t\u00eb CE1800V ve\u00e7 e ve\u00e7 nga Agile Controller-DCN. Gjithashtu, duhet t\u00eb merret parasysh se nj\u00eb PoD i platform\u00ebs Kubernetes mund t\u00eb p\u00ebrmbaj\u00eb jo m\u00eb shum\u00eb se 4 milion kontejner\u00eb.<\/p>\n

Konekcioni n\u00eb rrjetin VXLAN t\u00eb Qendr\u00ebs s\u00eb t\u00eb Dh\u00ebnave ndodh p\u00ebrmes VLAN (Rrjeti Lokal Virtual), megjithat\u00eb ka nj\u00eb opsion ku CE1800V vepron si VTEP me procesin BGP (Protokolli i Portave Kufitare). Kjo lejon shk\u00ebmbimin e rrug\u00ebve BGP me rrjetin kryesor pa p\u00ebrfshirjen e switch-eve t\u00eb ve\u00e7anta harduerike.<\/p>\n

\"Huawei
\n<\/p>\n

Rrjetet e Drejtuara nga Nian\u00ebt: rrjete q\u00eb analizojn\u00eb q\u00ebllimet<\/h2>\n

\nKoncepti i Rrjetit t\u00eb Drejtuar nga Nian\u00ebt (IDN) t\u00eb Huawei ka prezantuar<\/a><\/noindex> q\u00eb nga viti 2018. Q\u00eb at\u00ebher\u00eb, kompania nuk ka ndalur pun\u00ebn mbi rrjetet q\u00eb lejojn\u00eb, p\u00ebrmes teknologjive t\u00eb shp\u00ebrndarjes s\u00eb t\u00eb dh\u00ebnave, t\u00eb dh\u00ebnave t\u00eb m\u00ebdha dhe inteligjenc\u00ebs artificiale, t\u00eb analizojn\u00eb q\u00ebllimet dhe synimet e p\u00ebrdoruesve.<\/p>\n

N\u00eb thelb, ne po flasim p\u00ebr nj\u00eb l\u00ebvizje nga automatizimi n\u00eb autonomi. Q\u00ebllimi i shprehur nga p\u00ebrdoruesi kthehet si rekomandime p\u00ebr produktet rrjetore se si ta realizojn\u00eb k\u00ebt\u00eb q\u00ebllim. N\u00eb baz\u00eb t\u00eb k\u00ebsaj funksionaliteti gjenden mund\u00ebsit\u00eb e Agile Controller-DCN, t\u00eb cilat do t\u00eb t\u00eb shtohen produktit p\u00ebr t\u00eb siguruar realizimin e ideologjis\u00eb IDN.<\/p>\n

N\u00eb perspektiv\u00eb, me zbatimin e IDN, do t\u00eb jet\u00eb e mundur t\u00eb nd\u00ebrtohen sh\u00ebrbime rrjetore me nj\u00eb klikim, \u00e7ka n\u00ebnkupton nj\u00eb shkall\u00eb tejet t\u00eb lart\u00eb automatizimi. Arkitektura modulare e funksioneve t\u00eb rrjetit dhe mund\u00ebsia p\u00ebr t\u00eb kombinuar k\u00ebto funksione do t\u2019i lejoj\u00eb administratorit thjesht t\u00eb tregoj\u00eb se cilat sh\u00ebrbime duhen b\u00ebr\u00eb t\u00eb disponueshme n\u00eb nj\u00eb segment t\u00eb caktuar rrjeti.<\/p>\n

P\u00ebr t\u00eb arritur nj\u00eb nivel t\u00eb till\u00eb menaxhueshm\u00ebrie, procesi ZTP (Zero Touch Provisioning) \u00ebsht\u00eb shum\u00eb i r\u00ebnd\u00ebsish\u00ebm. Huawei ka arritur suksese serioze n\u00eb k\u00ebt\u00eb, duke ofruar mund\u00ebsin\u00eb e plot\u00eb t\u00eb nd\u00ebrtimit t\u00eb rrjetit \"nga kutia\".<\/p>\n

Procesi i m\u00ebtejsh\u00ebm i instalimit dhe shp\u00ebrndarjes patjet\u00ebr p\u00ebrfshin nj\u00eb procedur\u00eb verifikimi t\u00eb lidhjes mes burimeve (lidhshm\u00ebria e rrjetit) dhe vler\u00ebsimin e ndryshimeve n\u00eb performanc\u00ebn e rrjetit n\u00eb var\u00ebsi t\u00eb m\u00ebnyrave t\u00eb tij t\u00eb pun\u00ebs. Ky hap n\u00ebnkupton realizimin e nj\u00eb simulimi para fillimit t\u00eb p\u00ebrdorimit aktual.<\/p>\n

Hapi i ardhsh\u00ebm \u00ebsht\u00eb konfigurimi i sh\u00ebrbimeve sipas nevojave t\u00eb klientit (shp\u00ebrndarja e sh\u00ebrbimeve) dhe verifikimi i tyre, t\u00eb cilat realizohen me mjete t\u00eb integruara t\u00eb Huawei. M\u00eb pas mbetet vet\u00ebm t\u00eb kontrollohet rezultati. <\/p>\n

T\u00eb gjith\u00eb k\u00ebt\u00eb proces tani \u00ebsht\u00eb e mundur ta kaloni me nj\u00eb mekaniz\u00ebm t\u00eb vet\u00ebm kompleks mbi platform\u00ebn iMaster NCE, e cila p\u00ebrmban Agile Controller-DCN dhe sistemin e menaxhimit t\u00eb elementeve t\u00eb rrjetit (EMS) eSight.<\/p>\n

\"Huawei
\n
\nMomentalisht, Agile Controller-DCN \u00ebsht\u00eb n\u00eb gjendje t\u00eb verifikoj\u00eb disponibilitetin e burimeve dhe pranin\u00eb e lidhjeve, si dhe t\u00eb reagoj\u00eb proaktivisht (pas miratimit nga administratori) n\u00eb rast se ndodhin probleme n\u00eb rrjet. Shtimi i sh\u00ebrbimeve t\u00eb nevojshme b\u00ebhet aktualisht manualisht, por n\u00eb t\u00eb ardhmen, Huawei planifikon ta automatizoj\u00eb k\u00ebt\u00eb dhe operacione t\u00eb tjera, si deployment-i i server\u00ebve, konfigurimi i rrjetit p\u00ebr sistemi t\u00eb ruajtjes dhe m\u00eb tep\u00ebr. <\/p>\n

\"Huawei
\n<\/p>\n

Zinxhiri i sh\u00ebrbimeve dhe mikrosegm\u00ebntimi<\/h2>\n

\nAgile Controller-DCN ka aft\u00ebsin\u00eb t\u00eb p\u00ebrpunoj\u00eb tituj sh\u00ebrbimi (Net Service Headers, ose NSH), q\u00eb p\u00ebrmbahen n\u00eb paketat VXLAN. Kjo \u00ebsht\u00eb e dobishme p\u00ebr krijimin e zinxhir\u00ebve t\u00eb sh\u00ebrbimeve (service chains). P\u00ebr shembull, n\u00ebse d\u00ebshironi t'i d\u00ebrgoni nj\u00eb lloj t\u00eb caktuar pakete n\u00eb nj\u00eb rrug\u00eb q\u00eb ndryshon nga ajo e propozuar nga protokolli standard i routing. Para se t\u00eb dalin nga rrjeti, ato duhet t\u00eb kalojn\u00eb p\u00ebrmes nj\u00eb pajisjeje (si firewall-i etj.). P\u00ebr k\u00ebt\u00eb, mjafton t\u00eb konfigurohet nj\u00eb zinxhir sh\u00ebrbimi q\u00eb p\u00ebrmban rregullat e nevojshme. Duke p\u00ebrdorur k\u00ebt\u00eb mekaniz\u00ebm, mund t\u00eb konfiguroni politika sigurie, por jan\u00eb t\u00eb mundshme edhe fusha t\u00eb tjera t\u00eb aplikimit.<\/p>\n

\"Huawei
\n
\nN\u00eb diagram paraqitet qart\u00eb funksionimi i zinxhive t\u00eb sh\u00ebrbimeve t\u00eb pajtueshme me RFC, t\u00eb bazuara n\u00eb NSH, si dhe nj\u00eb list\u00eb e switch-eve hardware q\u00eb i mb\u00ebshtesin ato.<\/p>\n

\"Huawei
\n
\nKapacitetet e zgjidhjeve t\u00eb Huawei n\u00eb fush\u00ebn e krijimit t\u00eb zinxhir\u00ebve t\u00eb sh\u00ebrbimeve plot\u00ebsohen nga mjetet e mikrosegm\u00ebntimit \u2014 nj\u00eb metod\u00eb e siguris\u00eb n\u00eb rrjet, q\u00eb n\u00ebnkupton izolimin e segmenteve t\u00eb sigurive deri n\u00eb element\u00ebt individual\u00eb t\u00eb ngarkes\u00ebs operative. Shk\u00ebputja e 'pika t\u00eb ngushta' n\u00eb listat e menaxhimit t\u00eb aksesit (Access Control List ose ACL) ndihmohet nga mungesa e nevoj\u00ebs p\u00ebr t\u00eb konfiguruar manualisht nj\u00eb num\u00ebr t\u00eb madh ACL.<\/p>\n

\"Huawei
\n<\/p>\n

Eksplorimi inteligjent<\/h2>\n

\nDuke kaluar n\u00eb \u00e7\u00ebshtjen e p\u00ebrdorimit t\u00eb rrjetit, nuk mund t\u00eb p\u00ebrmendet nj\u00eb komponent tjet\u00ebr i mark\u00ebs s\u00eb p\u00ebrbashk\u00ebt iMaster NCE \u2014 analizatori inteligjent t\u00eb rrjetit FabricInsight. Ai ofron mund\u00ebsi t\u00eb shumta p\u00ebr mbledhjen e telemetris\u00eb dhe informacionit mbi rrjedhat e t\u00eb dh\u00ebnave n\u00eb rrjet. Telemetria mblidhet p\u00ebrmes gRPC dhe grumbullon t\u00eb dh\u00ebna p\u00ebr paketat q\u00eb kalojn\u00eb, ato q\u00eb jan\u00eb vonuar n\u00eb memorie dhe ato t\u00eb humbura. Grumbulli i dyt\u00eb i madh informacioni agregatet p\u00ebrmes ERSPAN (Analizuesit t\u00eb Portit t\u00eb Nd\u00ebrlikuar t\u00eb Rremit) dhe jep nj\u00eb pamje mbi rrjedhat e t\u00eb dh\u00ebnave n\u00eb qendr\u00ebn e t\u00eb dh\u00ebnave. N\u00eb thelb, b\u00ebhet fjal\u00eb p\u00ebr mbledhjen e TCP-k\u00fcreve dhe volumit t\u00eb informacionit q\u00eb transferohet gjat\u00eb \u00e7do seance TCP. Kjo mund t\u00eb b\u00ebhet duke p\u00ebrdorur pajisje t\u00eb ndryshme Huawei \u2014 lista e t\u00eb cilave \u00ebsht\u00eb p\u00ebrshkruar n\u00eb diagram.<\/p>\n

Nuk jan\u00eb harruar as SNMP dhe NetStream, k\u00ebshtu q\u00eb Huawei p\u00ebrdor mekanizma t\u00eb rinj dhe t\u00eb vjet\u00ebr, p\u00ebr t\u00eb kaluar nga rrjeti si \"kutia e zez\u00eb\" n\u00eb nj\u00eb rrjet, p\u00ebr t\u00eb cilin dim\u00eb praktikisht gjith\u00e7ka.<\/p>\n

\"Huawei
\n<\/p>\n

AI Fabric: rrjete inteligjente pa humbje<\/h2>\n

\nFunksionet e AI Fabric, t\u00eb mb\u00ebshtetura nga pajisjet tona, kan\u00eb p\u00ebr q\u00ebllim ta shnd\u00ebrrojn\u00eb Ethernet-in n\u00eb nj\u00eb rrjet me performanc\u00eb t\u00eb lart\u00eb, me vonesa t\u00eb ul\u00ebta, pa humbje paketash. Kjo \u00ebsht\u00eb e nevojshme p\u00ebr realizimin e skenar\u00ebve kryesor\u00eb t\u00eb shp\u00ebrndarjes s\u00eb aplikacioneve n\u00eb rrjetin e qendr\u00ebs s\u00eb t\u00eb dh\u00ebnave.<\/p>\n

\"Huawei
\n
\nN\u00eb diagramin m\u00eb sip\u00ebr shohim problemet me t\u00eb cilat ka rrezik t\u00eb ballafaqohemi gjat\u00eb p\u00ebrdorimit t\u00eb rrjetit:<\/p>\n