IHuawei CloudCampus: isiseko senkonzo yelifu ephezulu

Okukhona sisiya phambili, kokukhona zintsonkothe ​​ngakumbi iinkqubo zentsebenziswano kunye nokwakhiwa kwamacandelo, nokuba kuthungelwano lolwazi oluncinci. Ukutshintsha ngokuhambelana nenguqu yedijithali, amashishini afumana iimfuno ebengakhange abe nazo kwiminyaka embalwa edlulileyo. Masithi, imfuno yokulawula kungekuphela nje indlela amaqela omatshini asebenzayo asebenza ngayo, kodwa kunye nokudityaniswa kwezinto ze-IoT, izixhobo eziphathwayo, kunye neenkonzo zenkampani, apho kukho ezininzi kwaye zininzi zazo. Isidingo seqonga apho kuya kuba lula ukuhambisa uthungelwano olujolise kwiinkonzo "ezihlakaniphile" zenze ukuba iHuawei iqalise i-CloudCampus. Namhlanje siza kuthetha malunga nokuba luhlobo luni lwesigqibo esi, ngubani ozuzayo kuyo kwaye njani.

IHuawei CloudCampus: isiseko senkonzo yelifu ephezulu

Lifuna ntoni ishishini

Ngokuqhelekileyo iinkampani - ngakumbi ezo zinesabelo esikhulu sedijithali kwishishini - ngokukhawuleza zijongana nenyaniso yokuba inethiwekhi yendawo ehleliweyo esemgangathweni ayanele kubo. Bafuna, umzekelo:

  • isiseko esilungele ukusebenzisana kwezixhobo, abantu, izinto kunye nendalo iphela;
  • ukusetyenziswa kothungelwano lweengcingo kunye neengcingo zizonke;
  • ulawulo womnatha lula kakhulu ngaphandle kokulahlekelwa ukusebenza;
  • ukudalwa kothungelwano olulodwa lwenyani;
  • ukukwazi ukwandisa ngokutyibilikayo izakhono zenethiwekhi.

Ukuba ngaphandle kwezandulela, ke kuyo yonke le nto, kunye neminye imisebenzi eyahlukeneyo, senze i-CloudCampus. Ubuchwephesha bamafu busetyenziswa kumbindi wayo woyilo, ukuthunyelwa, ukusetyenziswa kunye nenkxaso yothungelwano lohlobo lwekhampasi - ngolawulo olupheleleyo lwamafu. Ngendlela, ngokungafaniyo nezinye izisombululo ezithelekisekayo zokuququzelela uthungelwano olunjalo, i-CloudCampus ivumela ulawulo oluvela kwilifu laseRashiya.

Kumashishini, ngokukodwa amancinci kunye naphakathi, enye yeenzuzo eziphambili ze-CloudCampus kubukho besicwangciso esicacileyo sokwandisa inethiwekhi kunye nokwandisa ukusebenza kwayo. Okokugqibela, imodeli yezemali ekuhlawulwa ngayo ukusebenza kweziseko zophuhliso ze-MSP yintlawulo-njengoko ukhula. Ikuvumela ukuba uchithe uhlahlo lwabiwo-mali ngokungqongqo kwezo zakhono kunye nesakhono esifunwa ngumbutho okwangoku.

Namhlanje, iinkampani ezili-1,5 lamawaka ezivela kwicandelo le-SMB zisebenza ngesiseko seHuawei CloudCampus. Ngoku makhe sithethe ngokufutshane malunga nendlela CloudCampus esebenza ngayo.

Yintoni "esizinzile" kwi-CloudCampus

Okokuqala, malunga nolwakhiwo jikelele lwenethiwekhi yohlobo lwekhampasi eyenziwe ngokwemodeli yethu. Kukho imigangatho emithathu ngaphakathi kwayo. Phezulu kukho iiprothokholi zenqanaba lesicelo ezinxulumene nezicelo zeshishini. Umzekelo, kuthungelwano lwesikolo - kwi-eSchoolbag, indawo ekrelekrele yokubeka esweni iinkqubo zemfundo. Ngee-API ezahlukeneyo ezivulekileyo, iqhagamshela kumaleko wolawulo-ophakathi, apho amakhadi amabini amakhulu eteknoloji ye-CloudCampus alele khona. Oko kukuthi, i-Agile Controller kunye neCampusInsight isisombululo.

I-injini ye-Agile Controller isisiseko sokwakha i-software-defined distributed networks (SD-WAN), kunye neendawo ezizimeleyo ezibonakalayo. Ikwazenza ngokuzenzekelayo ukusasazwa kwenethiwekhi kunye nokunyanzeliswa komgaqo-nkqubo. Nangona CampusInsight liqonga elibanzi, elandisiweyo lokujonga uthungelwano olungenazingcingo, elakhelwe kulwakhiwo lweenkonzo ezincinci kunye nokwenza lula ukusebenza kwazo nokugcinwa kwazo. Okokugqibela kodwa kuncinci, ngoncedo lwezixhobo zokubonwa kwedatha yokubonwayo (ngaphezulu koku kancinci kancinci).

IHuawei CloudCampus: isiseko senkonzo yelifu ephezulu

Uluhlu "lokongeza" lweziseko, olwakhiwe ngokusebenzisa imodeli ye-SaaS, lulawulwa ngefu lomnikezeli we-MSP. Ekubeni i-scalable kakhulu, iqonga lelifu kumbindi wothungelwano lwekhampasi olunjalo lunokusebenzisa izixhobo ezidityanisiweyo ezingamawaka angama-200 - malunga namaxesha alishumi ngaphezulu kothungelwano oluqhelekileyo.

Apha ngezantsi kukho umaleko womnatha. Ngokulandelayo, ikwayinxenye-mbini. Isiseko sayo (a) kubuchwepheshe benethiwekhi kunye nezixhobo ezizisebenzisayo, ngesiseko apho (b) uthungelwano lwenyani lusebenza.

Kwisiseko esakhiwe ngokwemodeli ye-CloudCampus, izixhobo zenethiwekhi - ii-routers, ii-switching, i-firewall, iindawo zokufikelela, abalawuli benethiwekhi ezingenazintambo - zilawulwa ngeendlela ze-NETCONF.

Ukusuka kwindawo yokujonga i-hardware, "umqolo" wothungelwano lwekhampasi lutshintsho olusisiseko lwe-CloudEngine line, kwaye ngokuyinhloko iHuawei CloudEngine S12700E enokutshintsha okukhulu kwe-57,6 Tbit / s. Ukongeza, inoxinaniso lwezibuko olubalaseleyo lwe-100GE (ukuya kwi-24) kunye nolona luhlu luphezulu lwezantya ze-port ebonakalayo kwi-slot ekhoyo ngoku. Ngezixhobo ezinjalo, "injini" enye inokusingatha ukuya kuthi ga kwi-10 lamawaka amanqaku okufikelela ngaphandle kwamacingo kunye nabasebenzisi abangamawaka angama-50 ngaxeshanye.

I-chipset yeSolar (uphuhliso lukaHuawei) ene-algorithms eyakhelwe-ngaphakathi ye-AI yenza ukuba kube lula ukwenza ngokuthe ngcembe kwaye ngokugqibeleleyo iziseko zekhampasi ziphuculwe - ukusuka kulwakhiwo oluqhelekileyo ukuya kwelale mihla, ngokusekwe kwingqikelelo yothungelwano olujolise kwinkonzo.

Ngenxa yolwakhiwo oluvulekileyo kunye ne-chipset ekrelekrele enokuphinda kusebenze kwakhona, utshintsho lwamva nje lwe-CloudEngine luxhasa ukudalwa kweenethiwekhi zabucala ezandisiweyo (VxLAN), ulawulo lwenkonzo nge-NETCONF/YANG protocol, kunye nolawulo lwe-telemetry yexesha lokwenyani kuzo zonke izixhobo eziqhagamshelwe kuyo. bona.

Ekugqibeleni, isoftware kunye ne-hardware ye-CloudEngine S12700E inceda ukuseka ukutshintshwa kwenethiwekhi okukhawulezileyo kunye nokuhanjiswa kwedatha okungathinteliyo, i-lag engafanelekanga kunye nomngcipheko welahleko yepakethi encitshisiweyo ukuya kwi-zero (enkosi kwi-Data Center Bridging technology). Ngexesha elifanayo, isisombululo sibonelela ngenguqu engenamthungo ukusuka kwingingqi ukuya kulawulo lwamafu lwezixhobo zenethiwekhi.

Esinye sezona zakhono zibalulekileyo zothungelwano lwekhampasi yesizukulwana esilandelayo kukudibana kweenethiwekhi ezineentambo nezingenazingcingo. Ngaphezu koko, ulawulo lwabo lumanyene.

Xa uhambisa iinethiwekhi ze-Wi-Fi 6 ezisekelwe kwi-protocol ye-5G, i-S12700E iswitshi isebenza njengomlawuli we-terabit kwaye ibonelela ngokubambisana phakathi kweenethiwekhi ezingenazintambo kunye neentambo.
Umsebenzi obalulekileyo we-CloudCampus kukugcina umgaqo-nkqubo wokhuseleko oqhelekileyo wothungelwano olucingo kunye nolwe-wireless olusekelwe kwi-matrix yokusebenzisana.

IHuawei CloudCampus: isiseko senkonzo yelifu ephezulu

Umgca wemveliso wokutshintsha kwe-CloudEngine kunye nezisombululo zenethiwekhi ezihambelanayo zenza kube lula ukwakha "isiseko" esiqinileyo kuyo nayiphi na inethiwekhi enkulu yendawo okanye iziseko ezineeofisi ezisasazwa ngokwelizwe.

Ngubani “umfundisi” osekhampasini?

Izibonelelo ze-CloudCampus azikhawulelwanga kwiimpawu zobuchwepheshe zenethiwekhi ngokwayo. Enye, ubuncinane, ibaluleke ngokulinganayo, ikrelekrele, ubukhulu becala i-automated infrastructure management and monitoring. "Ihlakaniphile" kuba ixhomekeke kubukrelekrele bokwenziwa kunye nohlalutyo olukhulu lwedatha.

  • Ulawulo oluzenzekelayo. I-CloudCampus ineziko elilodwa lolawulo lweziseko zophuhliso. Ngayo, ukuthunyelwa kwe-WLAN, i-LAN kunye ne-WAN iinethiwekhi kunye nokulawulwa kwazo kuququzelelwe. Ngaphezu koko, zonke iinkqubo ziyafumaneka ngojongano lwegraphical, ngoko akukho mfuneko ingxamisekileyo yokusebenzisa umgca womyalelo.
  • Ukusebenza ngobukrelekrele kweziseko zophuhliso. Inkqubo ye-O & M kwi-CloudCampus yenza kube lula ukubeka iliso kwindlela inethiwekhi esetyenziswa ngayo "apha kwaye ngoku" kwaye yintoni esongelayo: ukusuka ekusebenzeni kwamacandelo asisiseko kunye nezicelo zomntu ngamnye ukubeka iliso kwindlela yokuziphatha yabasebenzisi kunye namaqela abasebenzisi. Kwaye ungagcini nje ngokugcina umnwe wakho kwi-pulse, kodwa ufumane iingqikelelo malunga nokungasebenzi kakuhle kunye neemeko ezingxamisekileyo. Ukwenza uhlalutyo lucace ngakumbi, kokubini ukubonwa kwimephu yendawo kusetyenziswa inkonzo ye-GIS kunye neyona ndawo ikhoyo yeziseko ezingundoqo zisetyenziswa. Kukwakho ideshbhodi edityanisiweyo ekuvumela ukuba uvavanye imeko yangoku kunye nedatha yembali yazo naziphi na izixhobo kuthungelwano lwekhampasi kujongano olulodwa.

IHuawei CloudCampus: isiseko senkonzo yelifu ephezulu

Kuyaphawuleka ukuba ekusebenzeni okusebenzayo kwenkqubo yokuhlalutya impazamo exelwe kwangaphambili kwi-CloudCampus, ukuqokelelwa kwexesha elide kwedatha akufuneki. Iimodeli zokufunda zoomatshini eziqeqeshwe kwangaphambili zakhiwe kwiqonga, kwaye ukusebenza kwiziseko ezingundoqo "eziphilayo" zibacebisa kuphela, ukwandisa ukuchaneka. Ngenxa yoko, ukuya kuthi ga kwi-85% yeengxaki zinokuqikelelwa kwaye zithintelwe. Kwiimeko ezininzi, isantya sokuphendula kwisehlo sincitshiswa sibe yimizuzu emininzi-ngokuchasene neeyure okanye iintsuku kwiinethiwekhi "zendlela endala".

  • Ukuvuleleka ngokupheleleyo. Phakathi kweenjongo eziphambili zikaHuawei kukuqinisekisa ukuba i-CloudCampus ihlala ivulekile ngolwakhiwo kwaye yenza kube lula ukuvela kweziseko zoncedo zabathengi. Ngesi sizathu, siye savavanya iqonga lokuhambelana neemodeli ezingaphezu kwama-800 zezixhobo zenethiwekhi ezivela kubathengisi abakhulu bamazwe aphesheya. Lilonke, iilabhoratri zamazwe ngamazwe ezingama-26 zenziwe, apho thina, kunye namaqabane amaninzi, sivavanya i-CloudCampus ngokwembono. ukuhambelana ngeeprothokholi zomntu wesithathu, iimodeli zokhuseleko, iinkonzo ze-intanethi, izisombululo zehardware, isoftware, njl.

Ngenxa yoko, iqonga livumela ukudityaniswa noluhlu olubanzi lolawulo lwangaphandle kunye neenkqubo zokuqinisekisa, kwaye iyahambelana nemigangatho emininzi yoshishino (kunye neeprothokholi ezingezizo ezisemgangathweni).

Ikhuselwe njani i-CloudCampus

I-CloudCampus inokhuseleko lokhuseleko kunye nolawulo lokufikelela. Ukusebenza kunye nokufikelela kunye nemigaqo-nkqubo yenkonzo kwisisombululo simanyene. Iiprotokholi ze-802.1x, AAA kunye ne-TACACS zisetyenziselwa ukuqinisekiswa, kunye nokuba kunokwenzeka ukuqinisekisa amalungelo ngedilesi ye-MAC kunye nephaneli ye-intanethi.

Inethiwekhi elawulwa ngamafu ngokwayo isebenza kwiHuawei Cloud, i-cybersecurity apho, njengenye yezona zinto zethu eziphambili "ze-asethi zedijithali," zigcinwa kwizinga eliphezulu. Ukhuseleko lokudluliselwa kolwazi kwi-CloudCampus luphunyeziwe, phakathi kwezinye izinto, kwinqanaba leprotocol: idatha yokuqinisekisa idluliselwa nge-HTTP 2.0, kwaye idatha yoqwalaselo ihanjiswa ngeNETCONF. Ukuthunyelwa kwendawo yedatha yomsebenzisi kunye nolawulo lokufikelela ngokusebenzisa iqonga elilodwa lelifu likwathintela ukugqithisa ukuba kwenzeke. Ewe, isatifikethi seHuawei CA Advanced Encryption siqinisekisa amandla e-cryptographic yolwazi olugqithisiweyo.

Ukhuseleko lomsebenzisi lufezekiswa, ngokukodwa, ngeendlela ezinokwethenjelwa - kunye neendlela ezininzi zokuqinisekisa (kungekhona kuphela nge-portal yenkampani okanye idilesi ye-MAC, kodwa kwakhona, umzekelo, usebenzisa i-SMS okanye nge-akhawunti yenethiwekhi yoluntu). Kwaye i-firewall yesizukulwana esitsha - i-NGFW - ibonelela ngendlela yohlalutyo lwepakethe enzulu kwaye ibonelela ngokhuseleko koomatshini abasebenzayo kuthungelwano kunye nezinye izixhobo eziqhagamshelwe kuyo, kubandakanywa nezisongelo zedijithali ezingekajongwa.

Ngubani oya kungenelwa kakhulu kwisicombululo?

Ngenxa yokuguquguquka kwayo kunye nokulinganisa, i-CloudCampus ifanelekile ukwakha izakhiwo zedijithali kwiinkampani zabo bonke ubukhulu. Okokuqala, nangona kunjalo, yenzelwe amashishini amancinci naphakathi, abathengisi kunye namaziko emfundo (nangona ikwanezicelo kwishishini), kwaye inzuzo yayo ibonakaliswe ngokupheleleyo xa iqala ukwenza ubomi bube lula kubantu amava amancinci okanye aphakathi kwitekhnoloji yenethiwekhi.

Ngokumalunga nokuba nokwenzeka kwemali, iziseko zophuhliso ezakhiwe ngeenxa zonke kwi-CloudCampus zenza kube lula ukunciphisa i-CAPEX kwaye ngokuyinxenye idluliselwe kwi-OPEX. Ngexesha elifanayo, i-CloudCampus iphinda incede ukunciphisa iindleko zokusebenza, umzekelo, ezo zihambelana nokulawula inethiwekhi ye-campus - kwezinye iimeko nge-80%. 

Yenzelwe uthungelwano oluzimeleyo, i-CloudCampus, kunye noyilo lolawulo lwabaqashi abaninzi, inamandla ngakumbi kwiimeko ezimbini.

  • Imibutho emininzi igxile kwikhampasi enye, nganye inesakhiwo sayo, abalawuli bayo, kunye nemigaqo-nkqubo yayo. Emva koko i-CloudCampus isebenza ngokwemodeli ye-MSP yakudala: umboneleli welifu omnye yenani elithile labaqeshi (abaqeshi besiseko senethiwekhi yelifu).
  • Kukho umbutho omnye kuphela, kodwa izinto eziyinyani zemisebenzi yazo zifuna ukudalwa kwee-subnets ezahlukeneyo zetekhnoloji, ulwahlulo lwabasebenzisi, ukuthunyelwa kweendlela ezisezantsi ezisebenzayo (umzekelo, ukucupha ividiyo), uxhulumaniso lwe-WLAN / LAN kunye nesiseko se-IIoT, njl.

Yintoni elandelayo kwi-CloudCampus?

I-CloudCampus iguqukela kwisisombululo esinye seambrela. Ugxininiso kwi-"smart O & M" iya kuhlala, kodwa ugxininiso ekudityaneni kwayo nezinye iinkonzo zeHuawei, kuquka i-SD-Sec, i-CloudInsight kunye ne-SD-WAN, nayo iya kuqinisa. Yonke into yokuqinisekisa ukuba ukuvela kothungelwano lwekhampasi lugudileyo, luneziqhamo kwaye luhlangabezana neemfuno zangoku zoshishino. Ngokuqinisekileyo siya kugubungela eyona nto ibalulekileyo kwiqonga kwibhlog eHabré.

umthombo: www.habr.com

Yongeza izimvo