Namuhla, ukugxila kwethu akukhona kuphela emgqeni womkhiqizo we-Huawei wokudala amanethiwekhi esikhungo sedatha, kodwa futhi nendlela yokwakha izixazululo ezithuthukisiwe ezisekelwe kuzo. Ake siqale ngezimo, siqhubekele emisebenzini ethile esekelwa yimishini, futhi siphethe ngokubukezwa kwamadivayisi athile angaba yisisekelo sezikhungo zedatha zesimanje ezinezinga eliphezulu lokuzenzakalela kwezinqubo zenethiwekhi.
Kungakhathaliseki ukuthi izici zemishini yenethiwekhi zihlaba umxhwele kangakanani, amandla ezixazululo zezakhiwo ezisetshenziswayo ezisekelwe kuyo anqunywa ukuthi ukuhlanganiswa okuhlangene kwe-hardware, isofthiwe, i-virtual kanye nobunye ubuchwepheshe obuhlobene nakho kungaba yimpumelelo kangakanani. Ukuzama ukuhambisana nezikhathi, sizama ukunikeza amakhasimende ngokushesha amathuba esimanje futhi athembisayo, avame ukuba ngaphambi kwezinhlelo eziyingozi kakhulu zabanye abathengisi.
Izixazululo ezisuselwe ku-Cloud Fabric zifaka phakathi inethiwekhi yesikhungo sedatha, isilawuli se-SDN, kanye nezinye izingxenye ezidingekayo zephrojekthi ethile, okuhlanganisa evela kwabanye abakhiqizi.
Isimo sokuqala nesilula kunazo zonke sihilela ukusetshenziswa kwenani elincane lezingxenye: inethiwekhi yakhelwe ku-Huawei hardware kanye namathuluzi ezinkampani zangaphandle ukwenza ngokuzenzakalelayo izinqubo zokuphathwa kwenethiwekhi nokuqapha. Isibonelo, njenge-Ansible noma iMicrosoft Azure.
Isimo sesibili sithatha ukuthi ikhasimende selivele lisebenzisa i-virtualization kanye nesistimu ye-SDN yezikhungo zedatha, kusho i-NSX, futhi lifuna ukusebenzisa imishini ye-Huawei njenge-hardware VTEP (Vitual Tunnel End Point) ngaphakathi kwesixazululo esikhona se-VMware. Kuwebhusayithi yale nkampani Imishini yeHuawei ehloliwe futhi engasetshenziswa njenge-VTEP. Phela, akuyona imfihlo ukuthi, kungakhathaliseki ukuthi izixazululo zesofthiwe ye-VXLAN (i-Virtual Extensible LAN) ephumelele kangakanani ekushintsheni okubonakalayo, ukuqaliswa kwe-hardware kusebenza kahle kakhulu ngokusebenza.
Isimo sesithathu siwukwakhiwa kwamasistimu ekilasi lokubamba nelekhompyutha afaka isilawuli, kodwa ashoda noma iyiphi inkundla ephakeme okungadingeka ukuthi ahlanganiswe nayo. Enye yezinketho zokuqalisa lesi simo ihlanganisa ukuba khona kwesilawuli esihlukile se-Agile Controller-DCN SDN. Abalawuli besistimu bangasebenzisa lesi sakhiwo ukwenza imisebenzi yansuku zonke yokuphatha inethiwekhi. Inguqulo ethuthuke kakhudlwana yesimo sesithathu isekelwe ekusebenzelaneni kwe-Agile Controller-DCN ne-VMware vCenter, ehlanganiswe inqubo ethile yebhizinisi, kodwa futhi ngaphandle kwesistimu yokuphatha ephakeme.
Isimo sesine siyaphawuleka - ukuhlanganiswa nenkundla ekhuphuka nomfula okusekelwe ku-OpenStack noma umkhiqizo wethu wokwenza izinto ezibonakalayo we-FusionSphere. Sibhalisa izicelo eziningi zezixazululo ezifanayo zezakhiwo, phakathi kwazo i-OpenStack (i-CentOS, i-Red Hat, njll.) edume kakhulu. Konke kuncike ekutheni iyiphi inkundla ye-orchestration nokuphathwa kwezinsiza zekhompyutha esetshenziswa esikhungweni sedatha.
Isimo sesihlanu sisha ngokuphelele. Ngokungeziwe ekushintsheni kwehadiwe okwaziwayo, kuhlanganisa nokusatshalaliswa kwe-virtual switch CloudEngine 1800V (CE1800V), engasetshenziswa kuphela nge-KVM (Umshini Obonakalayo Osekwe Kernel). Lesi sakhiwo sihlanganisa ukuhlanganisa i-Agile Controller-DCN ne-Kubernetes containerization platform usebenzisa i-plugin ye-CNI. Ngakho, uHuawei, kanye nomhlaba wonke, uyahamba kusuka ku-virtualization host kuya ekusebenzeni kwesistimu yokusebenza.
Okuningi mayelana ne-containation
Phambilini sishilo nge-CE1800V switch ebonakalayo esetshenziswe kusetshenziswa i-Agile Controller-DCN. Ngokuhambisana nokushintshwa kwehardware yeHuawei, bakha uhlobo “lwembondela ehlanganisiwe”. Esikhathini esizayo esiseduze, imibhalo yesiqukathi evela ku-Huawei izothola ukusekelwa kwe-NAT nemisebenzi yokulinganisa ukulayisha.
Umkhawulo wezakhiwo ukuthi i-CE1800V ayikwazi ukusetshenziswa ngokuhlukile ku-Agile Controller-DCN. Kufanele futhi kucatshangelwe ukuthi i-PoD eyodwa yesikhulumi se-Kubernetes ayikwazi ukuqukatha iziqukathi ezingaphezu kwezigidi ezi-4.
Ukuxhuma kunethiwekhi ye-VXLAN yesikhungo sedatha kwenzeka nge-VLAN (Inethiwekhi Yendawo Yendawo Ebonakalayo), kodwa kunenketho lapho i-CE1800V isebenza njenge-VTEP nenqubo ye-BGP (Border Gateway Protocol). Lokhu kuvumela imizila ye-BGP ukuthi ishintshwe nomgogodla ngaphandle kwesidingo sokushintshwa kwezingxenyekazi zekhompuyutha ezihlukene.
Amanethiwekhi Aqhutshwa Ngenhloso: amanethiwekhi ahlaziya izinhloso
Umqondo weHuawei Intent-Driven Network (IDN). emuva ngo-2018. Kusukela ngaleso sikhathi, inkampani iye yaqhubeka isebenza kumanethiwekhi asebenzisa ubuchwepheshe be-cloud computing, idatha enkulu kanye nobuhlakani bokufakelwa ukuhlaziya imigomo nezinhloso zabasebenzisi.
Empeleni, sikhuluma ngomnyakazo osuka ku-automation uye ekuzilawuleni. Inhloso eveziwe yomsebenzisi ibuyiselwa ngendlela yezincomo ezivela emikhiqizweni yenethiwekhi yokuthi le nhloso yenziwa kanjani. Enhliziyweni yalo msebenzi kukhona amakhono we-Agile Controller-DCN azokwengezwa emkhiqizweni ukuze kuqinisekiswe ukuqaliswa kombono we-IDN.
Ngokuzayo, ngokwethulwa kwe-IDN, kuzokwazi ukusebenzisa izinsiza zenethiwekhi ngokuchofoza okukodwa, okusho izinga eliphakeme kakhulu lokuzenzakalelayo. I-architecture ye-modular yemisebenzi yenethiwekhi kanye nekhono lokuhlanganisa le misebenzi kuzovumela umlawuli ukuthi acacise ukuthi yiziphi izinsizakalo okudingeka zenziwe zitholakale engxenyeni ethile yenethiwekhi.
Ukuze kuzuzwe leli zinga lokulawula, inqubo ye-ZTP (Zero Touch Provisioning) ibaluleke kakhulu. I-Huawei izuze impumelelo enkulu kulokhu, ngenxa yokuthi inikeza ikhono lokusebenzisa ngokugcwele inethiwekhi ngaphandle kwebhokisi.
Inqubo eyengeziwe yokufaka nokuthunyelwa ihlanganisa ngempela inqubo yokuhlola ukuxhumana phakathi kwezinsiza (uxhumano lwenethiwekhi) nokuhlola izinguquko ekusebenzeni kwenethiwekhi kuye ngezindlela zayo zokusebenza. Lesi sigaba sibandakanya ukwenza ukulingisa ngaphambi kokuqala ukusebenza kwangempela.
Isinyathelo esilandelayo ukulungisa izinsiza ukuze zivumelane nezidingo zeklayenti (ukunikezwa kwesevisi) nokuqinisekiswa kwazo, okwenziwa ngamathuluzi e-Huawei eyakhelwe ngaphakathi. Khona-ke okusele nje ukuhlola umphumela.
Manje sekungenzeka ukuthi udlule kuyo yonke indlela echazwe kusetshenziswa indlela eyodwa ebanzi esekelwe kunkundla ye-iMaster NCE equkethe i-Agile Controller-DCN kanye nohlelo lokuphatha isici senethiwekhi ye-eSight (EMS).
Njengamanje, i-Agile Controller-DCN ingahlola ukutholakala kwezinsiza kanye nokuba khona kokuxhumeka, kanye nokusebenza (ngemuva kokugunyazwa komlawuli) ukuphendula ezinkingeni kunethiwekhi. Ukwengeza izinsiza ezidingekayo manje kwenziwa mathupha, kodwa esikhathini esizayo uHuawei uhlose ukwenza lokhu kanye neminye imisebenzi, njengokuthunyelwa kweseva, ukucushwa kwenethiwekhi yezinhlelo zokugcina, njll.
Amaketanga esevisi kanye nokuhlukaniswa okuncane
I-Agile Controller-DCN iyakwazi ukucubungula izihloko zesevisi (Net Service Headers, noma i-NSH) eziqukethwe kumaphakethe e-VXLAN. Lokhu kuyasiza ekudaleni amaketanga esevisi. Isibonelo, uhlose ukuthumela uhlobo oluthile lwamaphakethe emzileni ohlukile kulowo onikezwa yiphrothokholi yomzila ojwayelekile. Ngaphambi kokuthi bashiye inethiwekhi, kufanele badlule kolunye uhlobo lwedivayisi (i-firewall, njll.). Ukuze wenze lokhu, kwanele ukumisa uchungechunge lwesevisi oluqukethe imithetho edingekayo. Ngenxa yomshini onjalo, kungenzeka, isibonelo, ukulungisa izinqubomgomo zokuphepha, kodwa ezinye izindawo zokusetshenziswa kwayo zingenzeka.
Umdwebo ubonisa ngokucacile ukusebenza kwamaketanga esevisi ahambisana ne-RFC asekelwe ku-NSH, futhi uhlinzeka ngohlu lwamaswishi ezingxenyekazi zekhompuyutha eziwasekelayo.
Amandla okuhlanganisa isevisi ye-Huawei ahambisana nokuhlukaniswa okuncane, indlela yokuphepha yenethiwekhi ehlukanisa izingxenye zokuphepha kuze kufike ezintweni ezingazodwana zomthwalo womsebenzi. Ukugwema isidingo sokumisa mathupha inombolo enkulu yama-ACL kusiza ukuzungeza ibhodlela Lohlu Lokulawula Ukufinyelela (ACL).
Ukusebenza okuhlakaniphile
Ukuqhubekela odabeni lokusebenza kwenethiwekhi, umuntu akanakuhluleka ukusho enye ingxenye ye-iMaster NCE umbrella brand - i-FabricInsight intelligent network analyzer. Ihlinzeka ngamakhono abanzi okuqoqa i-telemetry nolwazi mayelana nokugeleza kwedatha kunethiwekhi. I-Telemetry iqoqwa kusetshenziswa i-gRPC futhi iqongelela idatha kumaphakethe adlulisiwe, afakwe kubhafa nalahlekile. Inani lesibili elikhulu lolwazi lihlanganiswa kusetshenziswa i-ERSPAN (I-Encapsulated Remote Switch Port Analyzer) futhi inikeza umbono wokugeleza kwedatha esikhungweni sedatha. Empeleni, sikhuluma ngokuqoqa izihloko ze-TCP kanye nenani lolwazi oludluliswayo phakathi neseshini ngayinye ye-TCP. Lokhu kungenziwa kusetshenziswa amadivaysi ahlukahlukene e-Huawei - uhlu lwabo luvezwe kumdwebo.
I-SNMP ne-NetStream nazo azikhohliwe, ngakho-ke uHuawei usebenzisa izindlela ezindala nezintsha ukuze asuke kunethiwekhi “njengebhokisi elimnyama” aye kunethiwekhi esazi yonke into ngayo.
Indwangu ye-AI: Igridi ehlakaniphile engalahleki
Izici ze-AI Fabric ezisekelwa ihadiwe yethu zenzelwe ukuguqula i-Ethernet ibe inethiwekhi esebenza kahle kakhulu, ebambezeleka kancane, engalahleki. Lokhu kuyadingeka ukuze usebenzise izimo eziyisisekelo zokuthunyelwa kwezinhlelo zokusebenza kunethiwekhi yesikhungo sedatha.
Kulo mdwebo ongenhla sibona izinkinga lapho kunengozi yokuhlangabezana nazo lapho usebenzisa inethiwekhi:
- ukulahlekelwa kwephakethe;
- ukuchichima kwe-buffer;
- inkinga yokulayisha inethiwekhi efanele uma usebenzisa izixhumanisi ezihambisanayo.
Imishini kaHuawei isebenzisa izindlela zokuxazulula zonke lezi zinkinga. Isibonelo, ezingeni le-chip, ubuchwepheshe bomugqa obungenayo obubonakalayo bufakiwe, obungavumeli ukuvimbela okokufaka (i-HOL blocking).
Ezingeni lephrothokholi, kukhona indlela ye-Dynamic ECN - eshintsha ngokushintshayo usayizi webhafa, kanye ne-Fast CNP - ithumela ngokushesha amaphakethe omlayezo mayelana nenkinga ekunethiwekhi emthonjeni.
Amalungelo alinganayo okugeleza и Ukusekela ubuchwepheshe be-Dynamic Packet Prioritization (DPP) kuyasiza, okuhlanganisa ukubeka izingcezu ezimfushane zedatha kusuka ekusakazweni okuhlukahlukene kuya kulayini ohlukile obaluleke kakhulu. Ngakho, amaphakethe amafushane aphila kangcono endaweni yokugeleza okude, okusindayo.
Masicacise ukuthi ukuze lezi zindlela ezingenhla zisebenze kahle, kumele zisekelwe yimishini.
Yonke le misebenzi isetshenziswa kwesinye sezimo ezintathu zokusebenzisa imishini yeHuawei:
- lapho kwakhiwa izinhlelo zezobunhloli zokwenziwa ezisekelwe kwizicelo ezisabalalisiwe;
- lapho udala izinhlelo zokugcina idatha ezisabalalisiwe;
- lapho udala amasistimu e-high performance computing (HPC).
Imibono ifakwe kuhadiwe
Ngemva kokuxoxa ngezimo ezivamile zokusebenzisa izixazululo ze-Huawei nokufakwa kuhlu amakhono abo amakhulu, ake sidlulele ngqo kumishini.
I-CloudEngine 16800 iyinkundla ehlinzeka ngokusebenza kuka-400 Gbit/s interfaces. Isici sayo esiwuphawu ubukhona, kanye ne-CPU, ye-chip yayo yokudlulisela phambili kanye neprosesa yobuhlakani bokwenziwa, okudingekayo ukuze kusetshenziswe amakhono e-AI Fabric.
Iplatifomu yenziwe ngokokwakhiwa kwe-orthogonal yakudala enohlelo lokugeleza komoya olungaphambili kuya emuva futhi iza nolunye lwezinhlobo ezintathu ze-chassis - 4 (10U), 8 (16U) noma 16 (32U) Slots.
I-CloudEngine 16800 ingasebenzisa izinhlobo ezimbalwa zamakhadi omugqa. Phakathi kwazo kukhona kokubili i-10-gigabit yendabuko kanye ne-40-, kanye ne-100-gigabit, kuhlanganise nezintsha ngokuphelele. Amakhadi anokuxhumana okungu-25 kanye no-400 Gbit/s ahlelelwe ukukhululwa.
Ngokuqondene namaswishi e-ToR (Top of rack), amamodeli awo amanje akhonjiswe emugqeni wesikhathi ongenhla. Okuthakazelisa kakhulu amamodeli amasha angama-25-Gigabit, ama-switch ayi-100-Gigabit anama-uplink angu-400-Gigabit, kanye namaswishi angu-100-Gigabit aphezulu anamachweba angu-96.
Iswishi eyinhloko emisiwe ye-Huawei okwamanje iyi-CloudEngine 8850. Kufanele ithathelwe indawo imodeli engu-8851 enezindawo zokuhlangana ezingu-32 100 Gbit/s kanye nezindawo eziyisishiyagalombili ezingama-400 Gbit/s, kanye nekhono lokuzihlukanisa zibe 50, 100 noma 200 Gbit/s.
Enye inguquko enokucushwa okungaguquki, CloudEngine 6865, isasele kulayini wemikhiqizo yamanje yeHuawei. Leli ihhashi elifakazelwe elinokufinyelela okungu-10/25 Gbps kanye nama-uplink ayisishiyagalombili angu-100 Gbps. Ake sengeze ukuthi iphinde isekele i-AI Fabric.
Umdwebo ubonisa izici zawo wonke amamodeli amasha wokushintsha, ukubukeka kwawo esikulindele ezinyangeni ezizayo, noma ngisho namaviki. Ukubambezeleka okuthile ekukhululweni kwabo kungenxa yesimo esizungeze i-coronavirus. Futhi, izingqinamba zokucindezela unswinyo kuHuawei zisasebenza, nokho, yonke le micimbi ingathinta kuphela isikhathi se-Premiere.
Ulwazi olwengeziwe mayelana nezixazululo ze-Huawei nezinketho zabo zohlelo lokusebenza lungatholakala kalula ngokubhalisela ama-webinars ethu noma ngokuthintana nabamele izinkampani ngokuqondile.
***
Sikukhumbuza ukuthi ochwepheshe bethu bavame ukwenza ama-webinars emikhiqizweni ye-Huawei kanye nobuchwepheshe ababusebenzisayo. Uhlu lwama-webinars amasonto azayo luyatholakala ku- .
Source: www.habr.com