Uma siqhubeka, kuba nzima kakhulu izinqubo zokusebenzisana kanye nokwakheka kwezingxenye, ngisho nakumanethiwekhi amancane olwazi. Ukushintsha ngokuhambisana noguquko lwedijithali, amabhizinisi ahlangabezana nezidingo abengenazo eminyakeni embalwa edlule. Ake sithi, isidingo sokuphatha hhayi nje kuphela ukuthi amaqembu emishini yokusebenza asebenza kanjani, kodwa futhi nokuxhumeka kwezakhi ze-IoT, amadivaysi eselula, kanye nezinsizakalo zezinkampani, okukhona futhi eziningi zazo. Isidingo senkundla okungaba lula kuyo ukuthi kusetshenziswe amanethiwekhi “ahlakaniphile” aqondiswe kwisevisi sigqugquzele uHuawei ukuthi ethule i-CloudCampus. Namuhla sizokhuluma ngokuthi hlobo luni lwesinqumo lesi, ngubani ozuza kuso futhi kanjani.
Lidingani ibhizinisi?
Ngokuvamile izinkampani - ikakhulukazi lezo ebhizinisini lazo kunesabelo esikhulu sedijithali - ngokushesha zibhekana neqiniso lokuthi inethiwekhi yendawo ehlelekile akwanele kubo. Badinga, isibonelo:
- ingqalasizinda efanelekile ukusebenzisana kwamadivayisi, abantu, izinto kanye nendawo yonke;
- ukusetshenziswa kwamanethiwekhi anezintambo nangenawaya ewonke;
- ukuphathwa kwenethiwekhi okwenziwe lula kakhulu ngaphandle kokulahlekelwa ukusebenza;
- ukudalwa kwamanethiwekhi angawodwana abonakalayo;
- ikhono lokukhulisa kahle amakhono enethiwekhi.
Uma ngaphandle kwama-preludes, ngakho konke lokhu, kanye neminye imisebenzi ehlukahlukene, sidale i-CloudCampus. Ubuchwepheshe bamafu busetshenziswa kumnyombo wawo ekwakhiweni, ukuthunyelwa, ukusetshenziswa nokwesekwa kwamanethiwekhi ohlobo lwekhampasi - anokulawulwa kwamafu okujikeleza umjikelezo. Ngendlela, ngokungafani nezinye izixazululo ezifanayo zokuhlela amanethiwekhi anjalo, i-CloudCampus ivumela abaphathi abavela efwini laseRussia.
Kumabhizinisi, ikakhulukazi amancane naphakathi nendawo, enye yezinzuzo eziyinhloko ze-CloudCampus ukuba khona kohlelo olucacile lokwandisa inethiwekhi nokwandisa ukusebenza kwayo. Okokugcina, imodeli yezimali okukhokhwa ngayo ukusebenza kwaleyo ngqalasizinda ye-MSP i-pay-as-you-grow. Ikuvumela ukuthi usebenzise isabelomali ngokuqinile kulawo makhono namakhono inhlangano ewadingayo njengamanje.
Namuhla, izinkampani eziyizinkulungwane eziyi-1,5 ezivela engxenyeni ye-SMB zisebenza ngesisekelo seHuawei CloudCampus. Manje ake sikhulume kafushane ngokuthi i-CloudCampus isebenza kanjani.
Lokho "esikuhlalise" ku-CloudCampus
Okokuqala, mayelana nesakhiwo esijwayelekile senethiwekhi yohlobo lwekhampasi edalwe ngokuya ngemodeli yethu. Kunezingqimba ezintathu ngaphakathi kwayo. Phezulu kunemithetho yezinga lohlelo lokusebenza ehlobene nezicelo zebhizinisi. Isibonelo, kunethiwekhi yesikole - ku-eSchoolbag, indawo ehlakaniphile yokuqapha izinqubo zemfundo. Ngama-Open API ahlukahlukene, ixhumeka kusendlalelo sokuphatha - esiphakathi nendawo, lapho amacilongo amabili amakhulu e-CloudCampus elele khona. Okungukuthi, i-Agile Controller kanye nezixazululo ze-CampusInsight.
Injini ye-Agile Controller iyisisekelo sokwakha amanethiwekhi asabalalisiwe achazwe ngesoftware (SD-WAN), anezindawo ezibonakalayo ezingazodwa. Iphinde izenzele ngokuzenzakalelayo ukuthunyelwa kwenethiwekhi nokusetshenziswa kwenqubomgomo. Nakuba iyinkundla ebanzi, enwebekayo yokuqapha amanethiwekhi angenawaya, eyakhelwe phezu kwe-microservice architecture futhi yenza kube lula ukusebenza kwawo nokugcinwa kwawo. Okokugcina, ngosizo lwamathuluzi okubuka idatha ebonakalayo (okuningi kulokhu ngokuhamba kwesikhathi).
Ungqimba “lwesengezo” lwengqalasizinda, olwakhiwe kusetshenziswa imodeli ye-SaaS, lulawulwa ngefu lomhlinzeki we-MSP. Njengoba i-scalable kakhulu, inkundla yamafu esenhlizweni yenethiwekhi yekhempasi enjalo ingasebenzisa amadivayisi axhumene afika ezinkulungwaneni ezingu-200 - cishe ngokuphindwe kashumi kunenethiwekhi evamile.
Ngezansi isendlalelo senethiwekhi. Ngakolunye uhlangothi, liphinde libe izingxenye ezimbili. Isisekelo sayo (a) ngubuchwepheshe benethiwekhi nezinto ezisetshenziswayo, kusisekelo lapho (b) amanethiwekhi abonakalayo asebenza khona.
Kungqalasizinda eyakhelwe ngokwemodeli ye-CloudCampus, amadivaysi enethiwekhi - ama-routers, ama-switch, ama-firewall, izindawo zokufinyelela, izilawuli zenethiwekhi ezingenazintambo - alawulwa ngezinqubo ze-NETCONF.
Ngokombono we-hardware, "umgogodla" wamanethiwekhi e-campus yizishintshi eziyisisekelo zolayini we-CloudEngine, futhi ngokuyinhloko i-Huawei CloudEngine S12700E enamandla amakhulu okushintsha angu-57,6 Tbit/s. Ukwengeza, inobuningi bembobo obuvelele obungu-100GE (kufika ku-24) kanye nebanga eliphezulu kakhulu lesivinini sembobo ephathekayo ngembobo ngayinye etholakalayo njengamanje. Ngemishini enjalo, "injini" eyodwa ingakwazi ukusingatha amaphuzu okufinyelela okungenazintambo ayizinkulungwane ezingu-10 kanye nabasebenzisi abangafika kwabayizinkulungwane ezingu-50 ngesikhathi esisodwa.
I-Solar chipset (intuthuko kaHuawei) enama-algorithms e-AI akhelwe ngaphakathi yenza kube lula ukwenza kancane kancane futhi ngokuphelele ingqalasizinda yekhampasi ibe yesimanje - ukusuka ekwakhiweni okujwayelekile kuye kweyesimanjemanje, ngokususelwe kumqondo wamanethiwekhi agxile kusevisi.
Ngenxa yesakhiwo esivulekile ne-chipset ehlakaniphile enokuhlelwa kabusha okubanzi, amaswishi akamuva e-CloudEngine asekela ukwakhiwa kwamanethiwekhi ayimfihlo anwetshiwe (i-VxLAN), ukuphathwa kwesevisi ngephrothokholi ye-NETCONF/YANG, kanye nokulawula kwe-telemetry kwesikhathi sangempela kuwo wonke amadivayisi axhunywe kuwo. bona.
Ekugcineni, isoftware ne-hardware ye-CloudEngine S12700E isiza ukusungula ukushintshwa kwenethiwekhi okushesha kakhulu ngokudluliswa kwedatha okungavimbi, ukushiyeka okunganaki kanye nengozi yokulahleka kwephakethe yehliselwe ku-zero (sibonga ubuchwepheshe be-Data Center Bridging). Ngesikhathi esifanayo, isixazululo sinikeza ukuguquguquka okungenamthungo kusuka endaweni kuya ekuphathweni kwamafu kwamadivayisi enethiwekhi.
Elinye lamakhono abaluleke kakhulu enethiwekhi yesikhungo sesizukulwane esilandelayo ukuhlangana kwamanethiwekhi anezintambo nangenawaya. Ngaphezu kwalokho, abaphathi babo babumbene.
Lapho kusetshenziswa amanethiwekhi e-Wi-Fi 6 asuselwa kuphrothokholi ye-5G, iswishi ye-S12700E isebenza njengesilawuli se-terabit futhi inikeza ukusebenzisana phakathi kwamanethiwekhi anentambo nangenawaya.
Umsebenzi obalulekile we-CloudCampus ukugcina inqubomgomo evamile yokuphepha yamanethiwekhi anezintambo nangenawaya ngokusekelwe ku-matrix yokusebenzisana.
Ulayini womkhiqizo wokushintshwa kwe-CloudEngine kanye nezixazululo zenethiwekhi ezihlobene zenza kube nokwenzeka ukwakha “isisekelo” esiqinile sanoma iyiphi inethiwekhi enkulu yendawo noma ingqalasizinda enamahhovisi asatshalaliswe ngokwezindawo.
Ubani “umfundisi” ekhempasini?
Izinzuzo ze-CloudCampus azikhawulelwe kuzici zobuchwepheshe zenethiwekhi ngokwayo. Okunye, okungenani okubaluleke ngokulinganayo, kuhlakaniphile, ikakhulukazi okuzenzakalelayo kokuphathwa kwengqalasizinda kanye nokuqapha. “Ihlakaniphile” ngoba incike ekuhlakanipheni kokwenziwa nasekuhlaziyeni idatha enkulu.
- Ukulawula okuzenzakalelayo. I-CloudCampus inesikhungo esisodwa sokuphatha ingqalasizinda. Ngayo, ukuthunyelwa kwamanethiwekhi e-WLAN, LAN kanye ne-WAN nokulawula phezu kwawo kuhlelwa. Ngaphezu kwalokho, zonke izinqubo ziyatholakala ngokusebenzisa i-graphical interfaces, ngakho-ke asikho isidingo esiphuthumayo sokusebenzisa umugqa womyalo.
- Ukusebenza ngobuhlakani kwengqalasizinda. Uhlelo lwe-O&M ku-CloudCampus lwenza kube lula ukuqapha ukuthi inethiwekhi isetshenziswa kanjani “lapha futhi manje” nokuthi yini eyisabisayo: kusukela ekusebenzeni kwezingxenye eziyinhloko zengqalasizinda kanye nezinhlelo zokusebenza ngazinye kuya ekuqapheni ukuziphatha kwabasebenzisi namaqembu abasebenzisi. Futhi ungagcini nje ngokugcina umunwe wakho ku-pulse, kodwa futhi uthole izibikezelo zokungasebenzi kahle okungenzeka kanye nezimo eziphuthumayo. Ukwenza ukuhlaziya kucace kakhudlwana, kokubili ukubona ngeso lengqondo kumephu yendawo kusetshenziswa isevisi ye-GIS kanye nesimo sangempela sendawo yengqalasizinda kusetshenziswa. Kukhona futhi ideshibhodi ehlanganisiwe ekuvumela ukuthi uhlole isimo samanje nedatha yomlando yanoma imaphi amadivayisi kunethiwekhi yekhampasi esixhumi esibonakalayo esisodwa.
Kuyaphawuleka ukuthi ukuze kusebenze ngempumelelo uhlelo lokubikezela iphutha lokuhlaziya ku-CloudCampus, ukuqoqwa kwedatha yesikhathi eside akudingekile. Amamodeli okufunda omshini aqeqeshwe kusengaphambili akhelwe endaweni yesikhulumi, futhi ukusebenza engqalasizinda “ebukhoma” kuyawacebisa kuphela, okwandisa ukunemba. Ngenxa yalokho, kufika ku-85% wezinkinga zingabikezelwa futhi zivinjelwe. Ezimweni eziningi, isivinini sokuphendula esehlakalweni sincishiswa sibe imizuzu embalwa - uma kuqhathaniswa namahora noma ngisho nezinsuku kumanethiwekhi "endlela endala".
- Ukuvuleka okuphelele. Phakathi kwezinjongo eziyinhloko zikaHuawei ukuqinisekisa ukuthi i-CloudCampus ihlala ivulekile ngokwezakhiwo futhi ivumela ukuvela okungenamthungo kwengqalasizinda yamakhasimende. Ngalesi sizathu, sihlole inkundla ukuthi iyasebenzisana namamodeli angaphezu kuka-800 wamadivayisi enethiwekhi avela kubathengisi abakhulu bamazwe ngamazwe. Sekukonke, kwakhiwe izindawo zokucwaninga zamazwe ngamazwe ezingama-26, lapho thina, kanye nenqwaba yozakwethu, sihlola i-CloudCampus ngokombono. ngamaphrothokholi ezinkampani zangaphandle, amamodeli okuphepha, izinsizakalo eziku-inthanethi, izixazululo zehadiwe, isoftware, njll.
Ngenxa yalokho, inkundla ivumela ukuhlanganiswa nohlu olubanzi lokuphatha kwangaphandle kanye nezinhlelo zokuqinisekisa, futhi futhi iyahambisana namazinga amaningi embonini (kanye nezivumelwano ezingajwayelekile).
I-CloudCampus ivikelwe kanjani
I-CloudCampus inokuvikelwa kokuphepha kwesigaba nokulawula ukufinyelela. Ukusebenza nokufinyelela kanye nezinqubomgomo zesevisi kusixazululo kubumbene. Amaphrothokholi angu-802.1x, AAA kanye ne-TACACS asetshenziselwa ukufakazela ubuqiniso, futhi kungenzeka ukuqinisekisa amalungelo ngekheli le-MAC nangephaneli ye-inthanethi.
Inethiwekhi ephethwe ngamafu ngokwayo isebenza ku-Huawei Cloud, i-cybersecurity yayo, njengenye yempahla yethu eyinhloko "yezimpahla zedijithali," igcinwa ezingeni eliphezulu. Ukuphepha kokudluliselwa kolwazi ku-CloudCampus kuqaliswa, phakathi kwezinye izinto, ezingeni lephrothokholi: idatha yokuqinisekisa idluliselwa nge-HTTP 2.0, futhi idatha yokumisa idluliselwa nge-NETCONF. Ukudluliselwa kwendawo kwedatha yomsebenzisi nokulawula ukufinyelela ngeplathifomu eyodwa yamafu nakho kuvimbela ukweqisa ukuthi kwenzeke. Nokho, isitifiketi se-Huawei CA Advanced Encryption siqinisekisa amandla e-cryptographic olwazi oludlulisiwe.
Ukuphepha komsebenzisi kufinyelelwa, ikakhulukazi, ngezindlela zokuqinisekisa ezinokwethenjelwa - neziningi (hhayi kuphela ngengosi yebhizinisi noma ikheli le-MAC, kodwa futhi, ngokwesibonelo, kusetshenziswa i-SMS noma nge-akhawunti yokuxhumana nabantu). Futhi i-firewall yesizukulwane esisha - i-NGFW - inikeza indlela yokuhlaziya iphakethe elijulile futhi inikeza ukuvikelwa kwemishini yokusebenza kunethiwekhi namanye amadivaysi axhunywe kuyo, okuhlanganisa kusukela ezinsongweni zedijithali ezingakahlolwa.
Obani abayozuza kakhulu kulekhambi?
Ngenxa yokuguquguquka kwayo nokuqina, i-CloudCampus ifanele ukwakha ingqalasizinda yedijithali ezinkampanini zabo bonke osayizi. Okokuqala, nokho, yakhelwe amabhizinisi amancane naphakathi nendawo, abathengisi kanye nezikhungo zemfundo (yize futhi inezicelo ebhizinisini), futhi izinzuzo zayo zembulwa ngokugcwele lapho iqala ukwenza impilo ibe lula kubantu isipiliyoni esincane noma esimaphakathi kubuchwepheshe benethiwekhi .
Mayelana nokuba nokwenzeka kwezezimali, ingqalasizinda eyakhiwe eduze kwe-CloudCampus yenza kube nokwenzeka ukunciphisa i-CAPEX futhi ngokwengxenye bayidlulisele ku-OPEX. Ngesikhathi esifanayo, i-CloudCampus iphinde isize ukunciphisa izindleko zokusebenza, isibonelo, lezo ezihlotshaniswa nokuphatha inethiwekhi ye-campus - kwezinye izimo ngama-80%.
Idizayinelwe amanethiwekhi ahlukene, i-CloudCampus, enezakhiwo zayo zokuphatha abaqashi abaningi, inamandla ikakhulukazi ezimeni ezimbili.
- Izinhlangano eziningana zigxile ekhempasini eyodwa, ngayinye inesakhiwo sayo, abalawuli bayo kanye nezinqubomgomo zayo. Bese i-CloudCampus isebenza ngokwemodeli ye-MSP yakudala: umhlinzeki wefu oyedwa yenani elithile labaqashi (abaqashi bengqalasizinda yenethiwekhi yamafu).
- Kunenhlangano eyodwa kuphela, kodwa amaqiniso emisebenzi yawo adinga ukwakhiwa kwama-subnets ahlukahlukene, ukuhlukaniswa kwabasebenzisi, ukuthunyelwa kwezinhlelo ezingaphansi ezihlukene ezisebenzayo (isibonelo, ukubhekwa kwevidiyo), uxhumano lwe-WLAN/LAN nengqalasizinda ye-IIoT, njll.
Yini elandelayo nge-CloudCampus?
I-CloudCampus iguqukela kusixazululo esisodwa sesambulela. Ukugcizelelwa kwe-"smart O&M" kuzosala, kepha ukugxila ekuhlanganisweni kwayo nezinye izinsizakalo zeHuawei, kufaka phakathi i-SD-Sec, CloudInsight kanye ne-SD-WAN, nakho kuzoqina. Konke ukuqinisekisa ukuthi ukuvela kwenethiwekhi ye-campus ihamba kahle, ithela izithelo futhi ihlangabezana nezidingo zebhizinisi zamanje. Ngokuqinisekile sizofaka izinto ezintsha ezibaluleke kakhulu endaweni yesikhulumi kubhulogi ku-Habré.
Source: www.habr.com