ProHoster > Блог > Isakoso > Adaṣiṣẹ nẹtiwọki. A irú lati ọkan ká aye

Adaṣiṣẹ nẹtiwọki. A irú lati ọkan ká aye

Hey Habr!

Ninu nkan yii a yoo fẹ lati sọrọ nipa adaṣe ti awọn amayederun nẹtiwọọki. Aworan ti n ṣiṣẹ ti nẹtiwọọki ti n ṣiṣẹ ni ile-iṣẹ kekere kan ṣugbọn igberaga pupọ yoo gbekalẹ. Gbogbo awọn ere-kere pẹlu ohun elo nẹtiwọọki gidi jẹ laileto. A yoo wo ọran kan ti o waye ni nẹtiwọọki yii, eyiti o le ti yori si tiipa iṣowo fun igba pipẹ ati awọn adanu owo pataki. Ojutu si ọran yii daadaa daradara sinu ero ti “Automation ti awọn amayederun nẹtiwọki”. Lilo awọn irinṣẹ adaṣe, a yoo ṣafihan bii o ṣe le yanju awọn iṣoro eka ni imunadoko ni akoko kukuru, ati pe a yoo ronu idi ti awọn iṣoro wọnyi yẹ ki o yanju ni ọna yii kii ṣe bibẹẹkọ (nipasẹ console).

be

Awọn irinṣẹ akọkọ wa fun adaṣe jẹ Aṣeṣe (gẹgẹbi ohun elo adaṣe) ati Git (gẹgẹbi ibi ipamọ fun awọn iwe-iṣere Ansible). Emi yoo fẹ lati ṣe ifiṣura lẹsẹkẹsẹ pe eyi kii ṣe nkan iforo, nibiti a ti sọrọ nipa ọgbọn ti Ansible tabi Git, ati ṣalaye awọn nkan ipilẹ (fun apẹẹrẹ, kini awọn ipa ipataskimodules, awọn faili akojo oja, awọn oniyipada ni Ansible, tabi kini o ṣẹlẹ nigbati o tẹ titari git tabi awọn aṣẹ git ṣẹ). Itan yii kii ṣe nipa bii o ṣe le ṣe adaṣe Ansible ati tunto NTP tabi SMTP lori ohun elo rẹ. Eyi jẹ itan nipa bii o ṣe le yara yanju iṣoro nẹtiwọọki laisi awọn aṣiṣe. O tun ni imọran lati ni oye ti o dara bi nẹtiwọọki n ṣiṣẹ, ni pataki kini TCP/IP, OSPF, akopọ Ilana BGP jẹ. A yoo tun mu yiyan Ansible ati Git kuro ni idogba naa. Ti o ba tun nilo lati yan ojutu kan pato, a ṣeduro gíga kika iwe naa “Eto Nẹtiwọọki ati adaṣe. Awọn ogbon fun Onimọ-ẹrọ Nẹtiwọọki Ilẹ-tẹle” nipasẹ Jason Edelman, Scott S. Lowe, ati Matt Oswalt.

Bayi si ojuami.

Igbekalẹ iṣoro naa

Jẹ ki a foju inu wo ipo kan: Aago 3 owurọ, o sun oorun ati ala. Ipe foonu. Oludari imọ-ẹrọ pe:

- Bẹẹni?
— ###, ####, #####, iṣupọ ogiriina ti ṣubu ko si dide !!!
O pa oju rẹ, ni igbiyanju lati loye ohun ti n ṣẹlẹ ki o ronu bi eyi ṣe le ṣẹlẹ paapaa. Lori foonu o le gbọ irun ori ti oludari ti o ya, o si beere lati pe pada nitori pe gbogbogbo n pe e lori ila keji.

Idaji wakati kan nigbamii, o gba awọn akọsilẹ akọkọ akọkọ lati iṣipopada iṣẹ, ji gbogbo eniyan ti o le ji. Bi abajade, oludari imọ-ẹrọ ko purọ, ohun gbogbo jẹ bi o ti jẹ, iṣupọ akọkọ ti awọn ogiriina ti ṣubu, ko si si awọn agbeka ara ipilẹ ti o mu u wá si awọn oye. Gbogbo awọn iṣẹ ti ile-iṣẹ nfunni ko ṣiṣẹ.

Yan iṣoro kan si itọwo rẹ, gbogbo eniyan yoo ranti nkan ti o yatọ. Fun apẹẹrẹ, lẹhin imudojuiwọn moju ni isansa ti ẹru nla, ohun gbogbo ṣiṣẹ daradara, ati pe gbogbo eniyan lọ si ibusun ni idunnu. Ijabọ bẹrẹ si ṣàn, ati awọn buffers wiwo bẹrẹ si ṣiṣan nitori kokoro kan ninu awakọ kaadi nẹtiwọki.

Jackie Chan le ṣe apejuwe ipo naa daradara.

Adaṣiṣẹ nẹtiwọki. A irú lati ọkan ká aye

O ṣeun, Jackie.

Kii ṣe ipo igbadun pupọ, ṣe?

Jẹ ká fi wa nẹtiwọki bro pẹlu rẹ ìbànújẹ ero fun a nigba ti.

Jẹ ki a jiroro bi awọn iṣẹlẹ yoo ṣe dagbasoke siwaju.

A daba ilana atẹle ti igbejade ohun elo naa

  1. Jẹ ká wo ni awọn nẹtiwọki aworan atọka ati ki o wo bi o ti ṣiṣẹ;
  2. A yoo ṣe apejuwe bi a ṣe gbe awọn eto lati ọdọ olulana kan si omiiran nipa lilo Ansible;
  3. Jẹ ki a sọrọ nipa adaṣe ti awọn amayederun IT lapapọ.

Network aworan atọka ati apejuwe

Ero

Adaṣiṣẹ nẹtiwọki. A irú lati ọkan ká aye

Ẹ jẹ́ ká gbé àwòrán tó bọ́gbọ́n mu tí ètò àjọ wa yẹ̀ wò. A kii yoo lorukọ awọn olupese ohun elo kan pato; fun awọn idi ti nkan yii ko ṣe pataki (Oluka akiyesi yoo gboju iru ohun elo ti a lo). Eyi jẹ ọkan ninu awọn anfani to dara ti ṣiṣẹ pẹlu Ansible; nigba ti iṣeto, a ko bikita iru ohun elo ti o jẹ. O kan lati ni oye, eyi jẹ ohun elo lati ọdọ awọn olutaja olokiki, bii Sisiko, Juniper, Check Point, Fortinet, Palo Alto… o le paarọ aṣayan tirẹ.

A ni awọn iṣẹ-ṣiṣe akọkọ meji fun gbigbe ijabọ:

  1. Rii daju pe atẹjade awọn iṣẹ wa, eyiti o jẹ iṣowo ile-iṣẹ;
  2. Pese ibaraẹnisọrọ pẹlu awọn ẹka, ile-iṣẹ data latọna jijin ati awọn ẹgbẹ ẹnikẹta (awọn alabaṣiṣẹpọ ati awọn alabara), ati iraye si awọn ẹka si Intanẹẹti nipasẹ ọfiisi aringbungbun.

Jẹ ká bẹrẹ pẹlu awọn ipilẹ eroja:

  1. Awọn olulana aala meji (BRD-01, BRD-02);
  2. Ogiriina iṣupọ (FW-CLUSTER);
  3. Mojuto yipada (L3-mojuto);
  4. Olutọpa ti yoo di igbesi aye igbesi aye (bi a ṣe yanju iṣoro naa, a yoo gbe awọn eto nẹtiwọki lati FW-CLUSTER si PAJAWỌ) (Pajawiri);
  5. Awọn iyipada fun iṣakoso amayederun nẹtiwọki (L2-MGMT);
  6. Ẹrọ foju pẹlu Git ati Ansible (VM-AUTOMATION);
  7. Kọǹpútà alágbèéká kan lori eyiti idanwo ati idagbasoke awọn iwe-iṣere fun Ansible (Laptop-Automation) ti ṣe.

Nẹtiwọọki naa ti tunto pẹlu ilana ipa ọna OSPF ti o ni agbara pẹlu awọn agbegbe wọnyi:

  • Agbegbe 0 - agbegbe ti o pẹlu awọn onimọ-ọna ti o ni iduro fun gbigbe ijabọ ni agbegbe EXCHANGE;
  • Agbegbe 1 - agbegbe ti o ni awọn onimọ-ọna ti o ni iṣeduro fun iṣẹ ti awọn iṣẹ ile-iṣẹ;
  • Agbegbe 2 - agbegbe ti o pẹlu awọn onimọ-ọna ti o ni iduro fun ijabọ iṣakoso ipa-ọna;
  • Agbegbe N – awọn agbegbe ti awọn nẹtiwọki ẹka.

Lori awọn onimọ-ọna aala, olulana foju kan (VRF-INTERNET) ni a ṣẹda, lori eyiti iwo eBGP ti fi sori ẹrọ pẹlu AS ti o baamu. iBGP ti wa ni tunto laarin VRFs. Ile-iṣẹ naa ni adagun-odo ti awọn adirẹsi funfun ti a tẹjade lori VRF-INTERNET wọnyi. Diẹ ninu awọn adirẹsi funfun ti wa ni taara taara si FW-CLUSTER (awọn adirẹsi lori eyiti awọn iṣẹ ile-iṣẹ n ṣiṣẹ), diẹ ninu ni ipa nipasẹ agbegbe EXCHANGE (awọn iṣẹ ile-iṣẹ inu ti o nilo awọn adirẹsi IP ita, ati awọn adirẹsi NAT ita fun awọn ọfiisi). Nigbamii ti, ijabọ naa lọ si awọn onimọ ipa-ọna foju ti a ṣẹda lori L3-CORE pẹlu awọn adirẹsi funfun ati grẹy (awọn agbegbe aabo).

Nẹtiwọọki Isakoso nlo awọn iyipada iyasọtọ ati duro fun nẹtiwọọki iyasọtọ ti ara. Nẹtiwọọki iṣakoso tun pin si awọn agbegbe aabo.
Olulana pajawiri ti ara ati logbon ṣe ẹda FW-CLUSTER. Gbogbo awọn atọkun lori rẹ jẹ alaabo ayafi awọn ti o wo inu nẹtiwọọki iṣakoso.

Adaṣiṣẹ ati apejuwe rẹ

A ro bi awọn nẹtiwọki ṣiṣẹ. Bayi jẹ ki a wo ni igbese-nipasẹ-igbesẹ ni ohun ti a yoo ṣe lati gbe ijabọ lati FW-CLUSTER si PAJAWIRI:

  1. A mu awọn atọkun lori mojuto yipada (L3-mojuto) ti o so o si FW-CLUSTER;
  2. A mu awọn atọkun lori L2-MGMT ekuro yipada ti o so o si FW-CLUSTER;
  3. A tunto olulana EMERGENCY (nipa aiyipada, gbogbo awọn atọkun wa ni alaabo lori rẹ, ayafi awọn ti o ni nkan ṣe pẹlu L2-MGMT):

  • A jeki awọn atọkun lori pajawiri;
  • A tunto awọn ita IP adirẹsi (fun NAT) ti o wà lori FW-Cluster;
  • A ṣe ipilẹṣẹ awọn ibeere gARP ki awọn adirẹsi poppy ti o wa ninu awọn tabili L3-CORE arp yipada lati FW-Cluster si PAJAWIRI;
  • A forukọsilẹ ọna aiyipada bi aimi si BRD-01, BRD-02;
  • Ṣẹda awọn ofin NAT;
  • Gbe soke si agbegbe OSPF pajawiri 1;
  • Gbe soke si agbegbe OSPF pajawiri 2;
  • A yi awọn iye owo ti awọn ipa ọna ni Area 1 to 10;
  • A yi iye owo ti ọna aiyipada pada ni Agbegbe 1 si 10;
  • A yi awọn IP adirẹsi ni nkan ṣe pẹlu L2-MGMT (si awon ti o wà lori FW-CLUSTER);
  • A ṣe ipilẹṣẹ awọn ibeere gARP ki awọn adirẹsi poppy ti o wa ninu awọn tabili L2-MGMT arp yipada lati FW-CLUSTER si pajawiri.

Lẹẹkansi, a pada si ipilẹṣẹ atilẹba ti iṣoro naa. Aago mẹta ni owurọ, wahala nla, aṣiṣe ni eyikeyi ipele le ja si awọn iṣoro tuntun. Ṣetan lati tẹ awọn aṣẹ nipasẹ CLI? Bẹẹni? O dara, o kere ju lọ fi omi ṣan oju rẹ, mu kọfi diẹ ki o gba agbara ifẹ rẹ.
Bruce, jọwọ ran awọn enia buruku lọwọ.

Adaṣiṣẹ nẹtiwọki. A irú lati ọkan ká aye

O dara, a tẹsiwaju lati ni ilọsiwaju adaṣe wa.
Ni isalẹ ni aworan atọka ti bii iwe-iṣere naa ṣe n ṣiṣẹ ni awọn ofin Ansible. Eto yii ṣe afihan ohun ti a ṣalaye loke, o kan imuse kan pato ni Ansible.
Adaṣiṣẹ nẹtiwọki. A irú lati ọkan ká aye

Ni ipele yii, a rii ohun ti o nilo lati ṣe, ṣe agbekalẹ iwe-iṣere kan, ṣe idanwo, ati ni bayi a ti ṣetan lati ṣe ifilọlẹ.

Digression kekere lyrical miiran. Irọrun itan ko yẹ ki o ṣi ọ lọna. Ilana kikọ awọn iwe-iṣere ko rọrun ati iyara bi o ṣe le dabi. Idanwo gba akoko pupọ, a ṣẹda iduro foju kan, ojutu naa ni idanwo ni ọpọlọpọ igba, bii awọn idanwo 100 ni a ṣe.

Jẹ ki a ṣe ifilọlẹ... Iro kan wa pe ohun gbogbo n ṣẹlẹ laiyara, aṣiṣe wa ni ibikan, nkan ko ni ṣiṣẹ ni ipari. Irora ti n fo pẹlu parachute, ṣugbọn parachute ko fẹ ṣii lẹsẹkẹsẹ ... eyi jẹ deede.

Nigbamii ti, a ka abajade awọn iṣẹ ṣiṣe ti Iwe-iṣere Ansible (awọn adirẹsi IP ti rọpo fun awọn idi ti aṣiri):

[xxx@emergency ansible]$ ansible-playbook -i /etc/ansible/inventories/prod_inventory.ini /etc/ansible/playbooks/emergency_on.yml 

PLAY [------->Emergency on VCF] ********************************************************

TASK [vcf_junos_emergency_on : Disable PROD interfaces to FW-CLUSTER] *********************
changed: [vcf]

PLAY [------->Emergency on MGMT-CORE] ************************************************

TASK [mgmt_junos_emergency_on : Disable MGMT interfaces to FW-CLUSTER] ******************
changed: [m9-03-sw-03-mgmt-core]

PLAY [------->Emergency on] ****************************************************

TASK [mk_routeros_emergency_on : Enable EXT-INTERNET interface] **************************
changed: [m9-04-r-04]

TASK [mk_routeros_emergency_on : Generate gARP for EXT-INTERNET interface] ****************
changed: [m9-04-r-04]

TASK [mk_routeros_emergency_on : Enable static default route to EXT-INTERNET] ****************
changed: [m9-04-r-04]

TASK [mk_routeros_emergency_on : Change NAT rule to EXT-INTERNET interface] ****************
changed: [m9-04-r-04] => (item=12)
changed: [m9-04-r-04] => (item=14)
changed: [m9-04-r-04] => (item=15)
changed: [m9-04-r-04] => (item=16)
changed: [m9-04-r-04] => (item=17)

TASK [mk_routeros_emergency_on : Enable OSPF Area 1 PROD] ******************************
changed: [m9-04-r-04]

TASK [mk_routeros_emergency_on : Enable OSPF Area 2 MGMT] *****************************
changed: [m9-04-r-04]

TASK [mk_routeros_emergency_on : Change OSPF Area 1 interfaces costs to 10] *****************
changed: [m9-04-r-04] => (item=VLAN-1001)
changed: [m9-04-r-04] => (item=VLAN-1002)
changed: [m9-04-r-04] => (item=VLAN-1003)
changed: [m9-04-r-04] => (item=VLAN-1004)
changed: [m9-04-r-04] => (item=VLAN-1005)
changed: [m9-04-r-04] => (item=VLAN-1006)
changed: [m9-04-r-04] => (item=VLAN-1007)
changed: [m9-04-r-04] => (item=VLAN-1008)
changed: [m9-04-r-04] => (item=VLAN-1009)
changed: [m9-04-r-04] => (item=VLAN-1010)
changed: [m9-04-r-04] => (item=VLAN-1011)
changed: [m9-04-r-04] => (item=VLAN-1012)
changed: [m9-04-r-04] => (item=VLAN-1013)
changed: [m9-04-r-04] => (item=VLAN-1100)

TASK [mk_routeros_emergency_on : Change OSPF area1 default cost for to 10] ******************
changed: [m9-04-r-04]

TASK [mk_routeros_emergency_on : Change MGMT interfaces ip addresses] ********************
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n.254', u'name': u'VLAN-803'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+1.254', u'name': u'VLAN-805'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+2.254', u'name': u'VLAN-807'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+3.254', u'name': u'VLAN-809'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+4.254', u'name': u'VLAN-820'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+5.254', u'name': u'VLAN-822'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+6.254', u'name': u'VLAN-823'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+7.254', u'name': u'VLAN-824'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+8.254', u'name': u'VLAN-850'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+9.254', u'name': u'VLAN-851'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+10.254', u'name': u'VLAN-852'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+11.254', u'name': u'VLAN-853'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+12.254', u'name': u'VLAN-870'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+13.254', u'name': u'VLAN-898'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+14.254', u'name': u'VLAN-899'})

TASK [mk_routeros_emergency_on : Generate gARPs for MGMT interfaces] *********************
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n.254', u'name': u'VLAN-803'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+1.254', u'name': u'VLAN-805'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+2.254', u'name': u'VLAN-807'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+3.254', u'name': u'VLAN-809'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+4.254', u'name': u'VLAN-820'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+5.254', u'name': u'VLAN-822'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+6.254', u'name': u'VLAN-823'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+7.254', u'name': u'VLAN-824'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+8.254', u'name': u'VLAN-850'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+9.254', u'name': u'VLAN-851'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+10.254', u'name': u'VLAN-852'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+11.254', u'name': u'VLAN-853'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+12.254', u'name': u'VLAN-870'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+13.254', u'name': u'VLAN-898'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+14.254', u'name': u'VLAN-899'})

PLAY RECAP ************************************************************************

Ṣe!

Ni otitọ, ko ti ṣetan, maṣe gbagbe nipa isọdọkan ti awọn ilana ipa ọna agbara ati ikojọpọ nọmba nla ti awọn ipa-ọna sinu FIB. A ko le ni ipa lori eyi ni eyikeyi ọna. A duro. O sise jade. Bayi o ti šetan.

Ati ni abule ti Vilabajo (eyiti ko fẹ lati ṣe adaṣe adaṣe nẹtiwọki) wọn tẹsiwaju lati fọ awọn awopọ. Bruce (Gbigba, tẹlẹ yatọ, sugbon ko kere dara) ti wa ni gbiyanju lati ni oye bi Elo siwaju sii Afowoyi atunto ti awọn ẹrọ yoo gba ibi.

Adaṣiṣẹ nẹtiwọki. A irú lati ọkan ká aye

Emi yoo tun fẹ lati gbe lori koko pataki kan. Bawo ni a ṣe le gba ohun gbogbo pada? Lẹhin akoko diẹ, a yoo mu FW-CLUSTER wa pada si aye. Eyi ni ohun elo akọkọ, kii ṣe afẹyinti, nẹtiwọọki gbọdọ ṣiṣẹ lori rẹ.

Ṣe o lero bi awọn nẹtiwọọki ṣe bẹrẹ lati jo jade? Oludari imọ-ẹrọ yoo gbọ ẹgbẹrun awọn ariyanjiyan idi eyi ko yẹ ki o ṣe, idi ti eyi le ṣee ṣe nigbamii. Laanu, eyi ni bii nẹtiwọọki naa ṣe n ṣiṣẹ lati opo awọn abulẹ, awọn ege, ati awọn iyokù ti igbadun iṣaaju rẹ. O wa ni jade lati wa ni a patchwork Quilt. Iṣẹ wa ni gbogbogbo, kii ṣe ni ipo pataki yii, ṣugbọn ni gbogbogbo ni ipilẹ, bi awọn alamọja IT, ni lati mu iṣẹ ti nẹtiwọọki wa si ọrọ Gẹẹsi lẹwa “iduroṣinṣin”, o jẹ pupọ pupọ, o le tumọ bi: isokan. , aitasera, kannaa, isokan, systematicity, comparability, isokan. O jẹ gbogbo nipa rẹ. Nikan ni ipo yii jẹ iṣakoso nẹtiwọọki, a ni oye ohun ti o ṣiṣẹ ati bii, a ni oye kedere ohun ti o nilo lati yipada, ti o ba jẹ dandan, a mọ kedere ibiti a le wo ti awọn iṣoro ba dide. Ati pe ni iru nẹtiwọki kan nikan o le ṣe awọn ẹtan bi awọn ti a ti ṣapejuwe tẹlẹ.

Lootọ, iwe-iṣere miiran ti pese, eyiti o da awọn eto pada si ipo atilẹba wọn. Imọye ti iṣiṣẹ rẹ jẹ kanna (o ṣe pataki lati ranti pe aṣẹ awọn iṣẹ-ṣiṣe jẹ pataki pupọ), lati ma ṣe gun nkan kan tẹlẹ kuku gun, a pinnu lati ma fi atokọ ti ipaniyan iwe-iṣere kan ranṣẹ. Lẹhin ṣiṣe iru awọn adaṣe bẹ, iwọ yoo ni ifọkanbalẹ pupọ ati igboya diẹ sii ni ọjọ iwaju, ni afikun, eyikeyi awọn crutches ti o kojọpọ nibẹ yoo ṣafihan ara wọn lẹsẹkẹsẹ.

Ẹnikẹni le kọ si wa ati gba awọn orisun ti gbogbo awọn kikọ koodu, pẹlú pẹlu gbogbo palybooks. Awọn olubasọrọ ni profaili.

awari

Ninu ero wa, awọn ilana ti o le ṣe adaṣe ko tii di crystallized. Da lori ohun ti a ti pade ati ohun ti awọn ẹlẹgbẹ wa ti Iwọ-oorun n jiroro, awọn akori wọnyi han titi di isisiyi:

  • Ipese ẹrọ;
  • Gbigba data;
  • Iroyin;
  • Laasigbotitusita;
  • Imudaniloju.

Ti iwulo ba wa, a le tẹsiwaju ijiroro lori ọkan ninu awọn koko-ọrọ ti a fun.

Emi yoo tun fẹ lati sọrọ diẹ nipa adaṣe. Ohun ti o yẹ ki o jẹ ninu oye wa:

  • Eto naa gbọdọ gbe laisi eniyan, lakoko ti eniyan ni ilọsiwaju. Eto naa ko yẹ ki o dale lori eniyan;
  • Isẹ gbọdọ jẹ amoye. Ko si kilasi ti awọn alamọja ti o ṣe awọn iṣẹ ṣiṣe deede. Nibẹ ni o wa amoye ti o ti aládàáṣiṣẹ gbogbo baraku ati ki o yanju nikan eka isoro;
  • Awọn iṣẹ ṣiṣe boṣewa deede ni a ṣe laifọwọyi “ni ifọwọkan bọtini kan”, ko si awọn orisun ti o padanu. Abajade ti iru awọn iṣẹ-ṣiṣe nigbagbogbo jẹ asọtẹlẹ ati oye.

Ati kini o yẹ ki awọn aaye wọnyi ja si:

  • Itumọ ti awọn amayederun IT (Awọn ewu ti o kere ju ti iṣiṣẹ, isọdọtun, imuse. Kere downtime fun ọdun kan);
  • Agbara lati gbero awọn orisun IT (Eto eto-agbara - o le rii iye ti o jẹ, o le rii iye awọn orisun ti o nilo ninu eto kan, kii ṣe nipasẹ awọn lẹta ati awọn abẹwo si awọn apa oke);
  • O ṣeeṣe lati dinku nọmba awọn oṣiṣẹ IT.

Awọn onkọwe ti nkan naa: Alexander Chelovekov (CCIE RS, CCIE SP) ati Pavel Kirillov. A nifẹ lati jiroro ati igbero awọn ipinnu lori koko ti adaṣe amayederun IT.


orisun: www.habr.com

Fi ọrọìwòye kun