Ukukhutshwa kwe-DentOS 2.0, inkqubo yokusebenza yenethiwekhi yokutshintsha

Ukukhutshwa kwenkqubo yokusebenza yenethiwekhi ye-DentOS 2.0, esekelwe kwi-Linux kernel kwaye ihloselwe ukuxhobisa iiswitshi, ii-routers kunye nezixhobo ezikhethekileyo zenethiwekhi, ziyafumaneka. Uphuhliso lwenziwa ngokuthatha inxaxheba kwe-Amazon, i-Delta Electronics, i-Marvell, i-NVIDIA, i-Edgecore Networks kunye ne-Wistron NeWeb (WNC). Iprojekthi yasekwa yiAmazon ukuxhobisa izixhobo zenethiwekhi kwiziseko zayo. Ikhowudi ye-DentOS ibhalwe kwi-C kwaye isasazwe phantsi kweLayisensi yoLuntu ye-Eclipse yasimahla.

Ukulawula ukutshintshwa kwepakethi, i-DentOS isebenzisa i-Linux SwitchDev kernel subsystem, ekuvumela ukuba wenze abaqhubi bokutshintsha kwe-Ethernet abanokuhambisa ukuhanjiswa kwesakhelo kunye nokusetyenzwa kwepakethi yenethiwekhi kwiichips ezikhethekileyo zehardware. Isoftware isekelwe kwi-standard ye-Linux network stack, i-NetLink subsystem kunye nezixhobo ezifana ne-IPRoute2, i-tc (i-Traffic Control), i-brctl (i-Bridge Control) kunye ne-FRrouting, kunye ne-VRRP (i-Virtual Router Redundancy Protocol), i-LLDP (I-Link Layer Iiprotocol zeDiscovery Protocol kunye ne-MSTP (iProtokholi yeMithi eNyenziwe kaninzi).

Ukukhutshwa kwe-DentOS 2.0, inkqubo yokusebenza yenethiwekhi yokutshintsha

Imeko yendawo yenkqubo isekwe kwi-ONL (Vula iNethiwekhi yeLinux) unikezelo, ethi, nayo, isebenzisa isiseko sepakethe yeDebian GNU/Linux kwaye ibonelele ngesifakeli, izicwangciso kunye nabaqhubi bokusebenza kwiiswitshi. I-ONL iphuhliswe yiprojekthi yeKhompyutha evulekileyo kwaye liqonga lokudala izixhobo zenethiwekhi ezikhethekileyo ezixhasa ukufakwa kwiimodeli zokutshintsha ezingaphezu kwekhulu ezahlukeneyo. Ukubunjwa kubandakanya abaqhubi bentsebenziswano kunye nezibonakaliso, i-sensors sensors, i-coolers, iibhasi ze-I2C, i-GPIO kunye ne-SFP transceivers ezisetyenziselwa ukutshintsha. Kulawulo, ungasebenzisa i-IpRoute2 kunye nezixhobo ze-ifupdown2, kunye ne-gNMI (gRPC Network Management Interface). YANG (Kusesinye isiZukulwana esilandelayo, i-RFC-6020) imifuziselo yedatha isetyenziselwa ukuchaza uqwalaselo.

Inkqubo ifumaneka kwi-Marvell kunye ne-Mellanox ASIC-based switches kunye ne-48 10-Gigabit port. Ixhasa umsebenzi kunye nee-ASIC ezahlukeneyo kunye ne-network processing data chips, kuquka i-Mellanox Spectrum, i-Marvell Aldrin 2 kunye ne-Marvell AC3X ASIC chips kunye nokuphunyezwa kweetafile zokuhambisa ipakethe ye-hardware. Imifanekiso esele ilungele ukuhlohla ye-DentOS ilungiselelwe i-ARM64 (257 MB) kunye ne-AMD64 (523 MB) yoyilo lwezakhiwo.

Ushicilelo olutsha longeza olu phuculo lulandelayo:

  • Inkxaso ye-NAT-44 kunye ne-NA (P) T yokuguqulela idilesi (NAT) ukusuka kuluhlu lwangaphakathi ukuya kwiidilesi zoluntu kwinqanaba eliqhelekileyo (Uluhlu-3, i-network layer) kunye ne-VLAN port (iibhulorho zothungelwano) ekutshintsheni.
  • Inika iinketho zokuqwalasela i-802.1Q i-interfaces yenethiwekhi (VLAN) kunye nokuhamba kwe-traffic kubo. Iiphakheji ze-IpRoute2 kunye ne-Ifupdown2 zisetyenziselwa uqwalaselo.
  • Inkxaso eyongeziweyo ye-PoE (Amandla phezu kwe-Ethernet) abalawuli bolawulo lwamandla phezu kwe-Ethernet.
  • Utshintsho lwenziwe ukuphucula ukusebenza kunye nokunciphisa ulungelelwaniso lwe-firewall.
  • Uphuculo lolawulo lwezixhobo ezisekelwe kwi-ACL. Inkxaso eyongeziweyo yeeflegi ukuqaphela iidilesi ze-IP zendawo (intranethi).
  • Kuyenzeka ukudibanisa abaphathi abaqhelekileyo ukuqwalasela ulwahlulo lwezibuko.
  • Ngokusekelwe kwi-"devlink", i-API yokufumana ulwazi kunye nokutshintsha iiparitha zesixhobo, inkxaso yezixhobo zokubala zemigibe yendawo kunye neepakethi eziwisiweyo ziphunyeziwe.

umthombo: opennet.ru

Yongeza izimvo