Inethiwekhi-njenge-Service yebhizinisi elikhulu: icala elingajwayelekile

Inethiwekhi-njenge-Service yebhizinisi elikhulu: icala elingajwayelekile
Uyibuyekeza kanjani imishini yenethiwekhi ebhizinisini elikhulu ngaphandle kokumisa ukukhiqiza? Ukhuluma ngephrojekthi enkulu kumodi "yokuhlinzwa kwenhliziyo evulekile". Umphathi wephrojekthi ye-Linxdatacenter u-Oleg Fedorov. 

Eminyakeni embalwa edlule, siphawule ukwanda kwesidingo samakhasimende sezinsizakalo ezihlobene nengxenye yenethiwekhi yengqalasizinda ye-IT. Isidingo sokuxhumana kwezinhlelo ze-IT, izinsizakalo, izinhlelo zokusebenza, ukuqapha kanye nemisebenzi yokuphatha ibhizinisi cishe kunoma iyiphi indawo iphoqa izinkampani namuhla ukuthi zinakekele kakhulu amanethiwekhi.  

Ububanzi bezicelo busukela ekuqinisekiseni ukubekezelelana kwamaphutha enethiwekhi kuya ekudaleni nasekulawuleni isistimu yokuzimela yeklayenti ngokuthenga ibhlogo yamakheli e-IP, ukusetha izimiso zemizila nokuphatha ithrafikhi ngokuhambisana nezinqubomgomo zenhlangano.

Kukhona nesidingo esikhulayo sezixazululo ezibanzi zokwakha kanye nokugcina ingqalasizinda yenethiwekhi, ikakhulukazi kumakhasimende ingqalasizinda yawo yenethiwekhi eyakhiwa kusukela ekuqaleni noma engasasebenzi, edinga ukuguqulwa okukhulu. 

Lo mkhuba uhambisane nesikhathi sokuthuthuka nokuba yinkimbinkimbi kwengqalasizinda yenethiwekhi ye-Linxdatacenter. Sandisa isimo sobukhona bethu e-Europe ngokuxhuma kumasayithi akude, okuphinde kwadinga ukuthuthukisa ingqalasizinda yenethiwekhi. 

Le nkampani yethule isevisi entsha yamakhasimende, i-Network-as-a-Service: sinakekela zonke izinkinga zenethiwekhi zamakhasimende, siwavumela ukuthi agxile ebhizinisini lawo eliwumgogodla.

Ehlobo lika-2020, iphrojekthi yokuqala enkulu kule ndlela yaqedwa, engingathanda ukukhuluma ngayo. 

Ekuqaleni 

Isakhiwo esikhulu sezimboni siphendukele kithi ukuze senze ingxenye yenethiwekhi yengqalasizinda ibe yesimanje kwenye yezinkampani zayo. Kwakudingekile ukushintsha imishini endala ngemishini emisha, kuhlanganise nomgogodla wenethiwekhi.

Ukwenziwa kwesimanjemanje kwemishini ebhizinisini kwenzeka eminyakeni eyi-10 edlule. Abaphathi abasha bebhizinisi banqume ukwenza ngcono ukuxhumana, beqala ngokubuyekeza ingqalasizinda ezingeni eliyisisekelo, elingokomzimba. 

Iphrojekthi yahlukaniswa yaba izingxenye ezimbili: ukuthuthukiswa kwe-server park kanye nemishini yenethiwekhi. Sasinomthwalo wemfanelo ngengxenye yesibili. 

Izidingo eziyisisekelo zomsebenzi zibandakanya ukunciphisa isikhathi sokungasebenzi kwemigqa yokukhiqiza yebhizinisi ngesikhathi sokwenziwa komsebenzi (futhi kwezinye izindawo, ukuqeda ngokuphelele isikhathi sokungasebenzi). Noma yikuphi ukumiswa kusho ukulahlekelwa kwezimali okuqondile kweklayenti, okwakungafanele kwenzeke ngaphansi kwanoma yiziphi izimo. Ngenxa yemodi yokusebenza yesikhungo 24x7x365, kanye nokucabangela ukungabikho ngokuphelele kwezikhathi zokuphumula ezihleliwe emsebenzini webhizinisi, sinikezwe umsebenzi wokwenza ukuhlinzwa kwenhliziyo evulekile. Lokhu kwaba isici esiyinhloko esihlukanisayo salo msebenzi.

Hambani

Umsebenzi wawuhlelwe ngokuvumelana nesimiso sokunyakaza kusuka kumanodi enethiwekhi akude ukusuka kumnyombo kuya kwaseduze, kanye nalawo angathonya kancane umsebenzi wemigqa yokukhiqiza kuya kulabo abathonya ngokuqondile lo msebenzi. 

Isibonelo, uma sithatha i-node yenethiwekhi emnyangweni wokuthengisa, khona-ke ukuphazamiseka kokuxhumana ngenxa yomsebenzi kulo mnyango ngeke kuthinte ukukhiqiza nganoma iyiphi indlela. Ngesikhathi esifanayo, isigameko esinjalo sizosisiza, njengosonkontileka, ukuhlola ukufaneleka kwendlela ekhethiwe yokusebenza kumayunithi anjalo futhi, ngemva kokulungisa izenzo, sisebenze ezigabeni ezilandelayo zephrojekthi. 

Akudingekile kuphela ukufaka esikhundleni se-node nezintambo kunethiwekhi, kodwa futhi ukulungisa kahle zonke izingxenye ukuze kusetshenziswe kahle isisombululo sisonke. Kwakuyizimo ezivivinywa ngale ndlela: ukuqala umsebenzi kude nomgogodla, sasibonakala sizinika "ilungelo lokwenza amaphutha" ngaphandle kokubeka izindawo ezinobungozi ezibalulekile ekusebenzeni kwebhizinisi. 

Sihlonze izindawo ezingathinti inqubo yokukhiqiza, kanye nezindawo ezibalulekile - ama-workshops, iyunithi yokulayisha nokuthulula, izindawo zokugcina impahla, njll. Ezindaweni ezibalulekile, isikhathi esamukelekayo sokuphumula se-node yenethiwekhi ngayinye ngokuhlukana kwavunyelwana ngaso neklayenti: kusukela ku-1 kuya ku- Imizuzu engu-15 . Kwakungenakwenzeka ukugwema ngokuphelele ukunqamula ama-node enethiwekhi ngayinye, ngoba ikhebula kufanele lishintshwe ngokomzimba lisuka emishinini endala liye kwentsha, futhi phakathi nenqubo yokushintsha kuyadingeka futhi ukuqaqa "intshebe" yezintambo ezakhiwe phakathi neminyaka eminingana yokusebenza ngaphandle kokufanelekile. ukunakekelwa (omunye wemiphumela yokukhipha umsebenzi wokufakwa kwezintambo zekhebula).

Umsebenzi wahlukaniswa waba izigaba eziningana.

Isigaba 1 – Audit. Ukulungiselela kanye nokuxhumana kwendlela yokuhlela umsebenzi kanye nokuhlolwa kokulungela kwamaqembu: iklayenti, usonkontileka wokufaka, kanye nethimba lethu.

Isigaba 2 - Ukuthuthukiswa kwesakhiwo sokwenza umsebenzi, ngokuhlaziywa okujulile nokuhlela. Sikhethe ifomethi yohlu lokuhlola olunenkomba enembile yokuhleleka nokulandelana kwezenzo, kwehle kuya ekulandelaneni kokushintsha izintambo zesichibi ngembobo.

Isigaba 3 - Ukwenza umsebenzi emakhabetheni angathinti ukukhiqiza. Ukulinganisa nokulungiswa kwesikhathi sokuphumula ezigabeni ezilandelayo zomsebenzi.

Isigaba 4 – Ukwenza umsebenzi emakhabetheni athinta ngqo ukukhiqiza. Ukulinganisa nokulungiswa kwesikhathi sokuphumula sesigaba sokugcina somsebenzi.

Isigaba 5 - Ukwenza umsebenzi ekamelweni leseva ukushintsha imishini esele. Yethula umzila ku-kernel entsha.

Isigaba 6 - Ukushintsha okulandelanayo komgogodla wesistimu ukusuka ekucushweni kwenethiwekhi endala kuye kwezintsha ukuze kuguqulwe kahle lonke uhlelo oluyinkimbinkimbi (i-VLAN, umzila, njll.). Kulesi sigaba, sixhume bonke abasebenzisi futhi sadlulisela zonke izinsizakalo ku-hardware entsha, saqinisekisa ukuthi uxhumano lulungile, saqinisekisa ukuthi akukho neyodwa yezinsizakalo zebhizinisi ezimisiwe, saqinisekisa ukuthi uma kwenzeka izinkinga zizoxhunywa ngqo ku-kernel, okwenze kwaba lula ukuxazulula izinkinga ezingaba khona kanye nokusetha kokugcina. 

Izinwele zezinwele zentshebe

Lo msebenzi ubonakale unzima nangenxa yezimo zakuqala ezinzima. 

Okokuqala, kunenombolo enkulu yama-node nezingxenye zenethiwekhi, ezine-topology eyinkimbinkimbi kanye nokuhlukaniswa kwezintambo ngokwenhloso yazo. "Izintshebe" ezinjalo kwakudingeka zikhishwe emakhabetheni futhi "zikanywe" ngobuhlungu, zicabange ukuthi yiluphi ucingo oluvela lapho futhi luholela kuphi. 

Kubukeka kanjena:

Inethiwekhi-njenge-Service yebhizinisi elikhulu: icala elingajwayelekile
Ngakho:

Inethiwekhi-njenge-Service yebhizinisi elikhulu: icala elingajwayelekile
noma kanje: 

Inethiwekhi-njenge-Service yebhizinisi elikhulu: icala elingajwayelekile
Okwesibili, ngomsebenzi ngamunye onjalo kwakudingeka ukulungiselela ifayela elichaza inqubo. "Sithatha i-wire X echwebeni 1 lamathuluzi amadala, siyixhume ku-port 18 yamathuluzi amasha." Kuzwakala kulula, kepha uma unezimbobo ezingama-48 ezivaleke ngokuphelele kudatha yakho yomthombo, futhi ingekho inketho yesikhathi sokuphumula (sikhumbula nge-24x7x365), ukuphela kwendlela yokuphuma ukusebenza ngamabhulokhi. Izintambo eziningi ongazikhipha emishinini yakudala ngesikhathi esisodwa, ungashesha ukuzikama futhi uzifake ku-hardware yenethiwekhi entsha, ugwema ukwehluleka kanye nesikhathi sokuphumula kunethiwekhi. 

Ngakho-ke, esigabeni sokulungiselela, sihlukanise inethiwekhi ngamabhulokhi - ngalinye lingele-VLAN ethile. Imbobo ngayinye (noma isethi encanyana yazo) ezintweni ezindala ingenye ye-VLAN ku-topology entsha yenethiwekhi. Siwaqoqe kanje: amachweba okuqala okushintsha ahlala amanethiwekhi abasebenzisi, amanethiwekhi okukhiqiza aphakathi nendawo, futhi okokugcina - amaphoyinti okufinyelela nama-uplink. 

Le ndlela yenza kube nokwenzeka ukudonsa nokukama emishinini endala hhayi nje ucingo olu-1, kodwa u-10-15, ngesikhathi esisodwa. Lokhu kwasheshisa inqubo yomsebenzi izikhathi eziningana.  

Ngendlela, yilokhu izintambo ezikukhabhinethi zibukeka kanjani ngemva kokukama: 

Inethiwekhi-njenge-Service yebhizinisi elikhulu: icala elingajwayelekile
noma, isibonelo, kanje: 

Inethiwekhi-njenge-Service yebhizinisi elikhulu: icala elingajwayelekile
Ngemva kokuqeda isigaba sesi-2, sithathe ikhefu ukuze sihlaziye amaphutha kanye nokuguquguquka kwephrojekthi. Isibonelo, amaphutha amancane avele ngokushesha ngenxa yokungalungi emidwebeni yenethiwekhi esinikezwe yona (isixhumi esingalungile kumdwebo sisho intambo yesichibi ethengiwe engalungile kanye nesidingo sokuyishintsha). 

Ukumiswa okwesikhashana kwakudingeka, njengoba lapho usebenza ohlangothini lwesiphakeli, ngisho nokuphazamiseka okuncane enqubweni kwakungamukeleki. Uma inhloso bekuwukuqinisekisa isikhathi sokuphumula esigabeni senethiwekhi esingekho ngaphezu kwamaminithi angu-5, khona-ke bekungeke kudlulwe. Noma yikuphi ukuchezuka okungenzeka ohlelweni bekufanele kuvunyelwane nekhasimende. 

Kodwa-ke, ukuhlela kusengaphambili nokuhlukanisa iphrojekthi ibe ngamabhulokhi kwenze kwaba nokwenzeka ukuhlangabezana nesikhathi sokuphumula esihleliwe kuzo zonke izindawo, futhi ezimweni eziningi, sikugweme ngokuphelele. 

Inselele yezikhathi - iphrojekthi engaphansi kwe-COVID 

Nokho, akuzange kube ngaphandle kobunzima obengeziwe. Vele, i-coronavirus ibingesinye sezithiyo. 

Umsebenzi waba nzima ngenxa yokuthi ubhubhane lwaqala, futhi kwakungenakwenzeka ukuthi bonke ochwepheshe abahilelekile kulolu hlelo babe khona ngesikhathi somsebenzi endaweni yeklayenti. Abasebenzi benhlangano yokufaka kuphela abavunyelwe ukungena esizeni, futhi ukulawula kwenziwa ngegumbi le-Zoom - kulo kwakukhona unjiniyela wenethiwekhi ovela e-Linxdatacenter, mina njengomphathi wephrojekthi, unjiniyela wenethiwekhi ovela kuklayenti elibhekele umsebenzi, futhi iqembu elenza umsebenzi wokufaka.

Kwaphakama izinkinga ezazingaziwa ngesikhathi somsebenzi, futhi kwadingeka kwenziwe izinguquko ngokushesha. Ngale ndlela, kwakungenzeka ukuvimbela ngokushesha ithonya lesici somuntu (amaphutha kumjikelezo, amaphutha ekunqumeni isimo somsebenzi wokusebenzisana, njll.).

Nakuba ifomethi yomsebenzi oqhelile ibonakala ingavamile ekuqaleni komsebenzi, sazivumelanisa ngokushesha nezimo ezintsha futhi safinyelela esigabeni sokugcina somsebenzi. 

Sethule ukucushwa kwesikhashana kwezilungiselelo zenethiwekhi ukuze sivumele ama-core cores amabili enethiwekhi - amadala namasha - ukuthi asebenze ngokuhambisana ukuze sifinyelele uguquko olushelelayo. Kodwa-ke, kuvele ukuthi umugqa owodwa owengeziwe awuzange ukhishwe kufayela lokucushwa le-kernel entsha, futhi ukuguqulwa akuzange kwenzeke. Lokhu kwasiphoqa ukuthi sichithe isikhathi esithile sifuna le nkinga. 

Kwavela ukuthi ithrafikhi eyinhloko idluliselwe ngendlela efanele, futhi ithrafikhi yokulawula ayizange ifinyelele ku-node ngokusebenzisa umnyombo omusha. Ngenxa yokuhlukaniswa okucacile kwephrojekthi ngezigaba, kwakungenzeka ukuhlonza ngokushesha isigaba senethiwekhi lapho inkinga yavela khona, ukukhomba inkinga futhi uyiqede. 

Futhi ngenxa yalokho

Imiphumela yobuchwepheshe yephrojekthi 

Okokuqala nje, kwadalwa umgogodla omusha wenethiwekhi yebhizinisi elisha, esakhele amasongo aphathekayo/anengqondo. Lokhu kwenziwa ngendlela yokuthi inkinobho ngayinye kunethiwekhi ibe β€œnengalo yesibili”. Kunethiwekhi endala, amaswishi amaningi ayexhunywe kunkango emzileni owodwa, ingalo eyodwa (uplink). Uma yephuka, iswishi yayingafinyeleleki ngokuphelele. Futhi uma ukushintsha okuningana bekuxhunywe nge-uplink eyodwa, ingozi ibizokhubaza wonke umnyango noma ulayini wokukhiqiza ebhizinisini. 

Kunethiwekhi entsha, ngisho nesigameko senethiwekhi esibucayi ngeke, ngaphansi kwanoma yisiphi isimo, sikwazi ukwehlisa yonke inethiwekhi noma ingxenye yayo ebalulekile. 

Amaphesenti angama-90 azo zonke izinto zenethiwekhi abuyekeziwe, iziguquli zemidiya (iziguquli zemidiya yokusakaza amasignali) zinqanyuliwe, futhi isidingo sezintambo zikagesi ezinikelwe zemishini yokunika amandla amandla siye saqedwa ngokuxhuma kumaswishi e-PoE, lapho amandla ahlinzekwa ngezintambo ze-Ethernet. 

Futhi, konke ukuxhumana okubonakalayo egumbini leseva kanye namakhabethe asensimini kumakwa - kuzo zonke izindawo zokuxhumana ezibalulekile. Lokhu kwenze kwaba nokwenzeka ukulungisa umdwebo we-topological wezinto zokusebenza nokuxhumana kunethiwekhi, okubonisa isimo sangempela sawo namuhla. 

Umdwebo wenethiwekhi
Inethiwekhi-njenge-Service yebhizinisi elikhulu: icala elingajwayelekile
Umphumela obaluleke kakhulu kumagama wezobuchwepheshe: umsebenzi wengqalasizinda omkhulu wenziwa ngokushesha, ngaphandle kokudala noma yikuphi ukuphazamiseka emsebenzini webhizinisi futhi kucishe kunganakwa nabasebenzi bayo. 

Imiphumela yebhizinisi yephrojekthi

Ngokubona kwami, le phrojekthi iyathakazelisa ngokuyinhloko hhayi ezobuchwepheshe, kodwa kusukela ohlangothini lwenhlangano. Ubunzima bulele ngokuyinhloko ekuhleleni nasekucabangeni ngezinyathelo zokuqalisa imisebenzi yephrojekthi. 

Ukuphumelela kwephrojekthi kusivumela ukuthi sithi isinyathelo sethu sokuthuthukisa indawo yokuxhumana ngaphakathi kwephothifoliyo yesevisi ye-Linxdatacenter yisinqumo esifanele se-vector yokuthuthukiswa kwenkampani. Indlela enomthwalo wemfanelo ekuphathweni kwephrojekthi, isu elinekhono, nokuhlela okucacile kusivumele ukuba siqedele umsebenzi ezingeni elifanele. 

Ukuqinisekiswa kwekhwalithi yomsebenzi kuyisicelo esivela kuklayenti sokuqhubeka nokuhlinzeka ngezinsizakalo zokuthuthukiswa kwenethiwekhi ezindaweni zayo ezisele eRussia.

Source: www.habr.com

Engeza amazwana