Ukukhishwa kwe-DentOS 2.0, isistimu yokusebenza yenethiwekhi yokushintsha

Ukukhululwa kwesistimu yokusebenza yenethiwekhi ye-DentOS 2.0, esekelwe ku-Linux kernel futhi okuhloswe ngayo ukuhlomisa amaswishi, amarutha kanye nemishini yenethiwekhi ekhethekile, kuyatholakala. Ukuthuthukiswa kwenziwa ngokubamba iqhaza kwe-Amazon, Delta Electronics, Marvell, NVIDIA, Edgecore Networks kanye ne-Wistron NeWeb (WNC). Le phrojekthi ekuqaleni yasungulwa yi-Amazon ukuhlomisa imishini yenethiwekhi engqalasizinda yayo. Ikhodi ye-DentOS ibhalwe ngo-C futhi isatshalaliswa ngaphansi kwe-Eclipse Public License yamahhala.

Ukuze ulawule ukushintsha kwephakethe, i-DentOS isebenzisa i-Linux SwitchDev kernel subsystem, ekuvumela ukuthi udale abashayeli bokushintshwa kwe-Ethernet abangathumela ukudluliselwa kohlaka nokucubungula iphakethe lenethiwekhi kuma-chips akhethekile wehadiwe. Isofthiwe isekelwe kusitaki senethiwekhi esivamile se-Linux, isistimu engaphansi ye-NetLink namathuluzi afana ne-IPRoute2, tc (Traffic Control), i-brctl (I-Bridge Control) ne-FRrouting, kanye ne-VRRP (Virtual Router Redundancy Protocol), LLDP (Link Layer Izivumelwano Zokutholwa) kanye ne-MSTP (i-Multiple Spanning Tree Protocol).

Imvelo yesistimu isuselwe ekusabalaliseni kwe-ONL (Open Network Linux), yona, esebenzisa isisekelo sephakheji ye-Debian GNU/Linux futhi inikeze isifaki, izilungiselelo nezishayeli zokuqalisa amaswishi. I-ONL ithuthukiswe iphrojekthi ye-Open Compute futhi iyinkundla yokudala amadivaysi enethiwekhi akhethekile asekela ukufakwa kumamodeli okushintsha angaphezu kwekhulu ahlukene. Ukwakhiwa kuhlanganisa abashayeli bokusebenzelana nezinkomba, izinzwa zokushisa, ama-coolers, amabhasi e-I2C, ama-transceivers e-GPIO kanye ne-SFP asetshenziswa ekushintsheni. Ukuphatha, ungasebenzisa i-IpRoute2 kanye namathuluzi e-ifupdown2, kanye ne-gNMI (gRPC Network Management Interface). I-YANG (Yet Another Next Generation, RFC-6020) amamodeli wedatha asetshenziselwa ukuchaza ukucushwa.

Uhlelo luyatholakala kumaswishi asuselwa ku-Marvell kanye ne-Mellanox ASIC anamachweba afinyelela kwangu-48 10-Gigabit. Isekela ukusebenza ngama-ASIC ahlukahlukene kanye nama-chips okucubungula idatha yenethiwekhi, okuhlanganisa i-Mellanox Spectrum, i-Marvell Aldrin 2 kanye nama-chips e-Marvell AC3X ASIC ngokuqaliswa kwamathebula okudlulisa iphakethe lehadiwe. Izithombe ze-DentOS esezilungele ukufakwa zilungiselelwa izakhiwo ze-ARM64 (257 MB) kanye ne-AMD64 (523 MB).

Ukukhishwa okusha kungeza ukuthuthukiswa okulandelayo:

• Usekelo lwe-NAT-44 kanye ne-NA(P)T yokuhumusha ikheli (NAT) ukusuka kububanzi bangaphakathi ukuya kumakheli omphakathi ezingeni elivamile (Ungqimba-3, ungqimba lwenethiwekhi) kanye nezimbobo ze-VLAN (amabhuloho enethiwekhi) ekushintsheni.
• Ihlinzeka ngezinketho zokumisa ukuxhumana kwenethiwekhi okungu-802.1Q (VLAN) nokuthungatha ithrafikhi kuzo. I-IpRoute2 kanye ne-Ifupdown2 amaphakheji asetshenziselwa ukumisa.
• Ukwesekwa okwengeziwe kwezilawuli ze-PoE (Power over Ethernet) zokuphathwa kwamandla nge-Ethernet.
• Izinguquko zenziwe ukuze kuthuthukiswe ukusebenza kanye nobukhulu bokucushwa kwe-firewall.
• Ukuphathwa kwezinsiza okusekelwe ku-ACL okuthuthukisiwe. Kungezwe usekelo lwamafulegi ukuze abone amakheli e-IP endawo (we-intranethi).
• Kuyenzeka ukuxhuma izibambi ngokwezifiso ukuze ulungiselele ukuhlukaniswa kwembobo.
• Ngokusekelwe kokuthi “devlink”, i-API yokuthola ulwazi kanye nokushintsha amapharamitha wedivayisi, usekelo lwezibali zezicupho zasendaweni namaphakethe awile luyasetshenziswa.

Source: opennet.ru