Sawubona Habr!
Kulesi sihloko singathanda ukukhuluma ngokuzenzakalelayo kwengqalasizinda yenethiwekhi. Umdwebo osebenzayo wenethiwekhi osebenza enkampanini eyodwa encane kodwa eziqhenya kakhulu uzokwethulwa. Wonke amameshi anemishini yenethiwekhi yangempela ayihleliwe. Sizobheka icala elenzeke kule nethiwekhi, okungenzeka ukuthi liholele ekuvinjweni kwebhizinisi isikhathi eside kanye nokulahlekelwa okukhulu kwezimali. Isixazululo saleli cala sihambisana kahle kakhulu nomqondo othi "Ukuzenzakalela kwengqalasizinda yenethiwekhi". Ngokusebenzisa amathuluzi e-automation, sizobonisa ukuthi ungaxazulula kanjani ngempumelelo izinkinga eziyinkimbinkimbi ngesikhathi esifushane, futhi sizocabangela ukuthi kungani lezi zinkinga kufanele zixazululwe ngale ndlela hhayi ngenye indlela (nge-console).
Disclaimer
Amathuluzi ethu ayinhloko okuzenzakalela yi-Ansible (njengethuluzi elizenzakalelayo) kanye ne-Git (njengenqolobane yezincwadi zokudlala ezifanelekayo). Ngingathanda ukubhuka ngokushesha ukuthi lesi akusona isiqephu sendatshana esethulo, lapho sikhuluma ngokunengqondo kwe-Ansible noma i-Git, futhi sichaze izinto eziyisisekelo (ngokwesibonelo, ayini ama-roletaskimodules, amafayela e-inventory, okuguquguqukayo kokuthi Ansible, noma ukuthi kwenzekani lapho ufaka imiyalo ye-git push noma i-git commit). Le ndaba ayimayelana nokuthi ungazijwayeza kanjani i-Ansible futhi ulungiselele i-NTP noma i-SMTP kumishini yakho. Lena indaba emayelana nokuthi ungayixazulula kanjani ngokushesha nangokungcono inkinga yenethiwekhi ngaphandle kwamaphutha. Kuyatuseka futhi ukuqonda kahle ukuthi inethiwekhi isebenza kanjani, ikakhulukazi ukuthi siyini isitaki sephrothokholi ye-TCP/IP, OSPF, BGP. Sizophinde sikhiphe ukukhetha kwe-Ansible ne-Git kubakaki. Uma usadinga ukukhetha isixazululo esithile, sincoma kakhulu ukufunda incwadi ethi “Network Programmability and Automation. Amakhono Onjiniyela Wenethiwekhi Yesizukulwane Esilandelayo" ngu-Jason Edelman, Scott S. Lowe, kanye no-Matt Oswalt.
Manje iphuzu.
Ukwakheka kwenkinga
Ake sicabange ngesimo: Ngehora lesi-3 ekuseni, ulele ubuthongo futhi uyaphupha. Ucingo lwefoni. Umqondisi wezobuchwepheshe ubiza:
- Yebo?
— ###, ####, #####, i-firewall cluster iwile futhi ayivuki!!!
Ucikica amehlo, uzama ukuqonda ukuthi kwenzekani futhi ucabange ukuthi lokhu kungenzeka kanjani. Ocingweni ungezwa izinwele ekhanda lomqondisi ziklebhula, futhi ucela ukuphinda ashayele ngoba ujenene umfonela kulayini wesibili.
Ngemva kwesigamu sehora, uqoqe amanothi esingeniso sokuqala emsebenzini, wavusa wonke umuntu owayengase avuswe. Ngenxa yalokho, umqondisi wezobuchwepheshe akazange aqambe amanga, konke kunjengoba kunjalo, iqoqo eliyinhloko lama-firewall liwile, futhi akukho ukunyakaza komzimba okuyisisekelo okumletha ezingqondweni. Zonke izinsiza ezinikezwa yinkampani azisebenzi.
Khetha inkinga ekuthandeni kwakho, wonke umuntu uzokhumbula okuthile okuhlukile. Isibonelo, ngemva kokubuyekezwa ebusuku ngokungabikho komthwalo osindayo, konke kwasebenza kahle, futhi wonke umuntu walala ejabule. Ithrafikhi yaqala ukugeleza, futhi amabhafa okusebenzelana aqala ukuchichima ngenxa yesiphazamisi kumshayeli wekhadi lenethiwekhi.
UJackie Chan angasichaza kahle isimo.
Ngiyabonga, Jackie.
Akusona isimo esimnandi kakhulu, akunjalo?
Ake siyishiye inethiwekhi yethu bhuti nemicabango yakhe ebuhlungu okwesikhashana.
Ake sixoxe ngokuthi izenzakalo zizoqhubeka kanjani.
Siphakamisa ukuhleleka okulandelayo kokwethulwa kokwaziswa
- Ake sibheke umdwebo wenethiwekhi futhi sibone ukuthi usebenza kanjani;
- Sizochaza ukuthi sizidlulisela kanjani izilungiselelo sisuka kwenye irutha siye kwenye sisebenzisa i-Ansible;
- Ake sikhulume nge-automation yengqalasizinda ye-IT iyonke.
Umdwebo wenethiwekhi nencazelo
Lolu hlelo
Ake sicabangele umdwebo onengqondo wenhlangano yethu. Ngeke sisho abakhiqizi bemishini ethile; ngokwezinjongo zalesi sihloko akusho lutho (Umfundi olalelayo uzoqagela ukuthi hlobo luni lwemishini esetshenziswayo). Lokhu kungenye yezinzuzo ezinhle zokusebenza nge-Ansible; lapho usetha, ngokuvamile asinandaba ukuthi hlobo luni lwesisetshenziswa. Ukuze uqonde nje, lena imishini evela kubathengisi abaziwayo, njengeCisco, Juniper, Check Point, Fortinet, Palo Alto...ungashintsha inketho yakho.
Sinemisebenzi emibili eyinhloko yokuhambisa ithrafikhi:
- Ukuqinisekisa ukushicilelwa kwezinsizakalo zethu, okuyibhizinisi lenkampani;
- Nikeza ukuxhumana namagatsha, isikhungo sedatha esikude nezinhlangano zezinkampani zangaphandle (ozakwethu namakhasimende), kanye nokufinyelela kwamagatsha ku-inthanethi ngehhovisi elimaphakathi.
Ake siqale ngezinto eziyisisekelo:
- Imizila emibili yomngcele (BRD-01, BRD-02);
- I-Firewall Cluster (FW-CLUSTER);
- I-Core switch (L3-CORE);
- Umzila ozoba ulayini wezempilo (njengoba sixazulula inkinga, sizodlulisela izilungiselelo zenethiwekhi zisuka ku-FW-CLUSTER ziye ku-EMERGENCY) (EMERGENCY);
- Ukushintsha kokuphathwa kwengqalasizinda yenethiwekhi (L2-MGMT);
- Umshini obonakalayo one-Git ne-Ansible (VM-AUTOMATION);
- Ikhompyutha ephathekayo lapho ukuhlolwa nokuthuthukiswa kwezincwadi zokudlala ze-Ansible (Laptop-Automation) kwenziwa.
Inethiwekhi ilungiselelwe ngephrothokholi yomzila ye-OSPF enamandla enezindawo ezilandelayo:
- Indawo 0 - indawo ehlanganisa amarutha anesibopho sokuhambisa ithrafikhi endaweni ye-EXCHANGE;
- Indawo 1 - indawo ehlanganisa amarutha anesibopho sokusebenza kwezinsizakalo zenkampani;
- I-Area 2 - indawo ehlanganisa ama-routers anesibopho sokuphatha umzila wethrafikhi;
- Indawo N – izindawo zamanethiwekhi amagatsha.
Kumarutha asemngceleni, irutha ebonakalayo (i-VRF-INTERNET) iyakhiwa, lapho kufakwa khona ukubuka okugcwele kwe-eBGP ne-AS ehambisanayo eyabelwe. I-iBGP imisiwe phakathi kwama-VRF. Le nkampani inenqwaba yamakheli amhlophe ashicilelwe kulawa ma-VRF-INTERNET. Amanye amakheli amhlophe aqondiswe ngqo ku-FW-CLUSTER (amakheli lapho izinsizakalo zenkampani zisebenza khona), amanye ahanjiswa nge-EXCHANGE zone (amasevisi enkampani yangaphakathi adinga amakheli e-IP angaphandle, namakheli e-NAT angaphandle emahhovisi). Okulandelayo, ithrafikhi iya kumarutha abonakalayo adalwe ku-L3-CORE anamakheli amhlophe nampunga (izindawo zokuphepha).
Inethiwekhi Yokuphatha isebenzisa amaswishi azinikele futhi imele inethiwekhi ezinikele ngokomzimba. Inethiwekhi yabaphathi nayo ihlukaniswe ngezindawo zokuphepha.
Irutha EZIPHUTHUMAYO ngokoqobo nangokunengqondo iphinda i-FW-CLUSTER. Zonke izixhumi ezibonakalayo ezikuyo zikhutshaziwe ngaphandle kwalezo ezibheka inethiwekhi yokuphatha.
I-automation nencazelo yayo
Sithole ukuthi inethiwekhi isebenza kanjani. Manje ake sibheke isinyathelo ngesinyathelo ukuthi sizokwenzani ukuze sidlulisele ithrafikhi isuka ku-FW-CLUSTER iye ku-EMERGENCY:
- Sikhubaza ukuxhumana ekushintsheni okuyinhloko (L3-CORE) okuxhuma ku-FW-CLUSTER;
- Sikhubaza izixhumanisi ku-L2-MGMT kernel switch exhuma ku-FW-CLUSTER;
- Silungiselela irutha EZIPHUTHUMAYO (ngokuzenzakalelayo, zonke izixhumanisi zivaliwe kuyo, ngaphandle kwalezo ezihlotshaniswa ne-L2-MGMT):
- Sivumela ukuxhumana ku-EMERGENCY;
- Silungisa ikheli le-IP langaphandle (le-NAT) ebeliku-FW-Cluster;
- Senza izicelo ze-gARP ukuze amakheli e-poppy kumathebula e-arp e-L3-CORE ashintshwe ukusuka ku-FW-Cluster ukuya ku-EMERGENCY;
- Sibhalisa umzila ozenzakalelayo njengomile ku-BRD-01, BRD-02;
- Dala imithetho ye-NAT;
- Khuphukela ku-EMERGENCY OSPF Indawo 1;
- Khuphukela ku-EMERGENCY OSPF Indawo 2;
- Sishintsha izindleko zemizila ku-Area 1 kuya ku-10;
- Sishintsha izindleko zomzila ozenzakalelayo endaweni 1 ukuya ku-10;
- Sishintsha amakheli e-IP ahlobene ne-L2-MGMT (kulawa abeku-FW-CLUSTER);
- Senza izicelo ze-gARP ukuze amakheli e-poppy kumathebula e-arp e-L2-MGMT ashintshwe ukusuka ku-FW-CLUSTER ukuya ku-EMERGENCY.
Futhi, sibuyela ekwakhiweni kwasekuqaleni kwenkinga. Ngehora lesithathu ekuseni, ukucindezeleka okukhulu, iphutha kunoma yisiphi isigaba kungaholela ezinkingeni ezintsha. Ulungele ukuthayipha imiyalo usebenzisa i-CLI? Yebo? Kulungile, okungenani hamba uyogeza ubuso bakho, uphuze ikhofi futhi uqoqe amandla akho.
Bruce, ngicela usize bafana.
Nokho, siyaqhubeka nokuthuthukisa i-automation yethu.
Ngezansi kunomdwebo wendlela ibhuku lokudlala elisebenza ngayo ngamagama Afanelekile. Lolu hlelo lubonisa lokhu esikuchaze ngenhla, kuwukuqaliswa okuqondile nje kokuthi Ansible.
Kulesi sigaba, sibonile ukuthi yini okufanele yenziwe, sakha incwadi yokudlala, sahlola, futhi manje sesilungele ukuyethula.
Okunye ukwehla kwezingoma ezincane. Ukukhululeka kwendaba akufanele kukudukise. Inqubo yokubhala izincwadi zokudlala yayingelula futhi ishesha njengoba kungase kubonakale. Ukuhlola kuthathe isikhathi esiningi, kwasungulwa isiteji esibonakalayo, isixazululo sahlolwa izikhathi eziningi, kwenziwa izivivinyo ezingaba yi-100.
Masiqalise... Kunomuzwa wokuthi konke kwenzeka kancane kancane, kunephutha endaweni ethile, into engeke isebenze ekugcineni. Umuzwa wokugxuma nge-parachute, kodwa i-parachute ayifuni ukuvula ngokushesha ... lokhu kuvamile.
Okulandelayo, sifunda umphumela wemisebenzi eyenziwe ye-Ansible playbook (amakheli e-IP ashintshiwe ngenjongo yokuba yimfihlo):
[xxx@emergency ansible]$ ansible-playbook -i /etc/ansible/inventories/prod_inventory.ini /etc/ansible/playbooks/emergency_on.yml
PLAY [------->Emergency on VCF] ********************************************************
TASK [vcf_junos_emergency_on : Disable PROD interfaces to FW-CLUSTER] *********************
changed: [vcf]
PLAY [------->Emergency on MGMT-CORE] ************************************************
TASK [mgmt_junos_emergency_on : Disable MGMT interfaces to FW-CLUSTER] ******************
changed: [m9-03-sw-03-mgmt-core]
PLAY [------->Emergency on] ****************************************************
TASK [mk_routeros_emergency_on : Enable EXT-INTERNET interface] **************************
changed: [m9-04-r-04]
TASK [mk_routeros_emergency_on : Generate gARP for EXT-INTERNET interface] ****************
changed: [m9-04-r-04]
TASK [mk_routeros_emergency_on : Enable static default route to EXT-INTERNET] ****************
changed: [m9-04-r-04]
TASK [mk_routeros_emergency_on : Change NAT rule to EXT-INTERNET interface] ****************
changed: [m9-04-r-04] => (item=12)
changed: [m9-04-r-04] => (item=14)
changed: [m9-04-r-04] => (item=15)
changed: [m9-04-r-04] => (item=16)
changed: [m9-04-r-04] => (item=17)
TASK [mk_routeros_emergency_on : Enable OSPF Area 1 PROD] ******************************
changed: [m9-04-r-04]
TASK [mk_routeros_emergency_on : Enable OSPF Area 2 MGMT] *****************************
changed: [m9-04-r-04]
TASK [mk_routeros_emergency_on : Change OSPF Area 1 interfaces costs to 10] *****************
changed: [m9-04-r-04] => (item=VLAN-1001)
changed: [m9-04-r-04] => (item=VLAN-1002)
changed: [m9-04-r-04] => (item=VLAN-1003)
changed: [m9-04-r-04] => (item=VLAN-1004)
changed: [m9-04-r-04] => (item=VLAN-1005)
changed: [m9-04-r-04] => (item=VLAN-1006)
changed: [m9-04-r-04] => (item=VLAN-1007)
changed: [m9-04-r-04] => (item=VLAN-1008)
changed: [m9-04-r-04] => (item=VLAN-1009)
changed: [m9-04-r-04] => (item=VLAN-1010)
changed: [m9-04-r-04] => (item=VLAN-1011)
changed: [m9-04-r-04] => (item=VLAN-1012)
changed: [m9-04-r-04] => (item=VLAN-1013)
changed: [m9-04-r-04] => (item=VLAN-1100)
TASK [mk_routeros_emergency_on : Change OSPF area1 default cost for to 10] ******************
changed: [m9-04-r-04]
TASK [mk_routeros_emergency_on : Change MGMT interfaces ip addresses] ********************
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n.254', u'name': u'VLAN-803'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+1.254', u'name': u'VLAN-805'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+2.254', u'name': u'VLAN-807'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+3.254', u'name': u'VLAN-809'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+4.254', u'name': u'VLAN-820'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+5.254', u'name': u'VLAN-822'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+6.254', u'name': u'VLAN-823'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+7.254', u'name': u'VLAN-824'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+8.254', u'name': u'VLAN-850'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+9.254', u'name': u'VLAN-851'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+10.254', u'name': u'VLAN-852'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+11.254', u'name': u'VLAN-853'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+12.254', u'name': u'VLAN-870'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+13.254', u'name': u'VLAN-898'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+14.254', u'name': u'VLAN-899'})
TASK [mk_routeros_emergency_on : Generate gARPs for MGMT interfaces] *********************
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n.254', u'name': u'VLAN-803'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+1.254', u'name': u'VLAN-805'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+2.254', u'name': u'VLAN-807'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+3.254', u'name': u'VLAN-809'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+4.254', u'name': u'VLAN-820'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+5.254', u'name': u'VLAN-822'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+6.254', u'name': u'VLAN-823'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+7.254', u'name': u'VLAN-824'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+8.254', u'name': u'VLAN-850'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+9.254', u'name': u'VLAN-851'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+10.254', u'name': u'VLAN-852'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+11.254', u'name': u'VLAN-853'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+12.254', u'name': u'VLAN-870'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+13.254', u'name': u'VLAN-898'})
changed: [m9-04-r-04] => (item={u'ip': u'х.х.n+14.254', u'name': u'VLAN-899'})
PLAY RECAP ************************************************************************Kwenziwe!
Eqinisweni, ayikalungi kahle, ungakhohlwa mayelana nokuhlangana kwezivumelwano zomzila oguquguqukayo nokulayisha inombolo enkulu yemizila ku-FIB. Asikwazi ukuthonya lokhu nganoma iyiphi indlela. Siyalinda. Kwaphumelela. Manje sekulungile.
Futhi edolobhaneni laseVilabajo (elingafuni ukwenza ngokuzenzakalelayo ukusethwa kwenethiwekhi) bayaqhubeka nokugeza izitsha. UBruce (kuyavunywa, uhlukile kakade, kodwa hhayi kancane kancane) uzama ukuqonda ukuthi kungakanani ukuhlelwa kabusha kwemishini okuzokwenzeka.
Ngingathanda futhi ukugxila ephuzwini elilodwa elibalulekile. Singakwazi kanjani ukubuyisela konke? Ngemva kwesikhathi esithile, sizobuyisela i-FW-CLUSTER yethu ekuphileni. Lona umshini oyinhloko, hhayi ikhophi yasenqolobaneni, inethiwekhi kufanele isebenze kuyo.
Uyazizwa ukuthi amanethiwekhi aqala ukuvutha? Umqondisi wezobuchwepheshe uzozwa izimpikiswano eziyinkulungwane zokuthi kungani lokhu kungafanele kwenziwe, kungani lokhu kungenziwa kamuva. Ngeshwa, yile ndlela inethiwekhi esebenza ngayo kusukela kunqwaba yeziqephu, izingcezu, izinsalela zokunethezeka kwayo kwangaphambili. Kuvele kube yi-patchwork quilt. Umsebenzi wethu ngokujwayelekile, hhayi kulesi simo esithile, kodwa ngokujwayelekile, njengochwepheshe be-IT, ukuletha umsebenzi wenethiwekhi egameni elihle lesiNgisi elithi "ukuvumelana", liningi kakhulu, lingahunyushwa ngokuthi: ukuhambisana. , ukungaguquguquki, ukuqonda, ukuhambisana, ukuhleleka, ukuqhathanisa, ukuhambisana. Konke kumayelana naye. Kulesi simo kuphela inethiwekhi iyalawuleka, siqonda ngokucacile ukuthi yini esebenzayo nokuthi kanjani, siqonda ngokucacile ukuthi yini okudingeka ishintshwe, uma kunesidingo, sazi ngokucacile ukuthi kufanele sibheke kuphi uma kuphakama izinkinga. Futhi kunethiwekhi enjalo kuphela lapho ungenza khona amaqhinga afana nalawa esisanda kuwachaza.
Empeleni, kwalungiselelwa enye incwadi yokudlala, ebuyisele izilungiselelo esimweni sazo sangempela. I-logic yokusebenza kwayo iyafana (kubalulekile ukukhumbula ukuthi ukuhleleka kwemisebenzi kubaluleke kakhulu), ukuze singanwebisi i-athikili evele ibe yinde, sinqume ukungaluthumeli uhlu lokwenziwa kwebhuku lokudlala. Ngemva kokwenza izivivinyo ezinjalo, uzozizwa uzolile futhi uqiniseka ngokwengeziwe esikhathini esizayo, ngaphezu kwalokho, noma yiziphi izinduku ozinqwabelanisa lapho zizoziveza ngokushesha.
Noma ubani angasibhalela futhi athole imithombo yawo wonke amakhodi abhaliwe, kanye nawo wonke ama-palybook. Oxhumana nabo kuphrofayela.
okutholakele
Ngokombono wethu, izinqubo ezingazenzakalela azikakaqiniswa. Ngokusekelwe kulokho esihlangabezane nakho nalokho ozakwethu baseNtshonalanga abaxoxa ngakho, izindikimba ezilandelayo ziyabonakala kuze kube manje:
- Ukunikezwa kwedivayisi;
- Ukuqoqwa kwedatha;
- Ukubika;
- Ukuxazulula izinkinga;
- Ukuhambisana.
Uma kunesithakazelo, singaqhubeka nengxoxo ngesinye sezihloko ezinikeziwe.
Ngingathanda futhi ukukhuluma kancane mayelana ne-automation. Okufanele kube ekuqondeni kwethu:
- Uhlelo kumele luphile ngaphandle komuntu, kuyilapho luthuthukiswa ngumuntu. Uhlelo akufanele luncike kubantu;
- Ukusebenza kufanele kube uchwepheshe. Alikho ikilasi lochwepheshe abenza imisebenzi evamile. Kukhona ochwepheshe abazenzele yonke inqubo futhi baxazulule izinkinga eziyinkimbinkimbi kuphela;
- Imisebenzi evamile evamile yenziwa ngokuzenzakalelayo “ngokucindezela inkinobho”, azikho izinsiza ezimoshwayo. Umphumela wemisebenzi enjalo uhlale ubikezelwa futhi uyaqondakala.
Futhi la maphuzu kufanele aholele kulokho:
- Ukungafihli kwengqalasizinda ye-IT (Ubuncane bezingozi zokusebenza, ukwenziwa kwesimanjemanje, ukuqaliswa. Ukuncipha kwesikhathi sokuphumula ngonyaka);
- Ikhono lokuhlela izinsiza ze-IT (Uhlelo lokuhlela amandla - ungabona ukuthi kungakanani okudliwe, ungabona ukuthi zingaki izinsiza ezidingekayo ohlelweni olulodwa, hhayi ngezincwadi nokuvakashela iminyango ephezulu);
- Amathuba okunciphisa inani labasebenzi be-IT.
Ababhali besihloko: Alexander Chelovekov (CCIE RS, CCIE SP) noPavel Kirillov. Sithanda ukuxoxa nokuphakamisa izixazululo esihlokweni sokuzenzakalela kwengqalasizinda ye-IT.
Source: www.habr.com