Manufar wutar bango ta EVPN: ƙofa ta tsakiya da IRB da aka raba
Ƙofofin tsakiya suna bi da zirga-zirgar masu haya ta wutar bango, IRB da aka raba ba ya yin haka. Kwatanta inda kowanne yake bincike da abin da hanya mai sauri take buƙata.
Zane-zane biyu na EVPN suna sanya ƙofar mai haya a wurare daban-daban, kuma wutar bango tana ganin zirga-zirga daban a kowanne. Da ƙofa ta tsakiya, zirga-zirgar tsakanin subnet ɗin yana isa wutar bango domin a nan ne ake yin tuƙi. Da IRB da aka raba, leaf switches suna tuƙi a gida kuma wutar bango ba ta ganin komai sai ka shigar da ita da gangan. Babu wani zane da ba daidai ba. Abin da ba daidai ba shi ne haɗa wutar bango a kan iyaka da ɗauka cewa fabric ɗin zai kai mata zirga-zirgar.
Zane biyu, wuraren bincike biyu daban-daban
Da farko faɗi zurfafan da suke buƙatar bincike, domin zanen biyu suna kula da su daban.
| Flow class | Centralized gateway | Distributed IRB |
|---|---|---|
| Same subnet | Bridged, not routed | Bridged, not routed |
| Inter-subnet | Routed at the firewall | Routed at the leaf |
| Inter-VRF | At the firewall | Needs leaking or service insertion |
| External | Border firewall | Border firewall |
Zirga-zirgar cikin subnet ɗaya ita ce layin da mutane suke mantawa. Hosts biyu a VLAN ɗaya suna magana ta gada, kuma babu wutar bango mai tuƙi a wannan hanya sai wani zanen bincike na Layer 2 daban ya tsare ta. Wannan gaskiya ne a zanen biyu, don haka rami ne na zane ba kwatance tsakaninsu ba.
Sauran layuka uku su ne inda zanen biyu suka bambanta da gaske.
Ƙofa ta tsakiya: bincike mai sauƙi, ainihin kuɗin wucewa
Riƙe VLAN ɗin mai haya a matsayin ayyukan Layer 2 kuma sanya ƙofofin tuƙinsu a kan wutar bango. Zirga-zirgar tsakanin subnet ɗin sai ta tafi wannan ƙofar ta dawo, wataƙila ko da lokacin da hosts ɗin biyu suke kan leaf ɗaya. Wurin binciken ba shi da ruɗani, kuma wannan ita ce dukan hujjar zanen. Kuɗin shi ne nauyin wucewa a kan wutar bango da kuma dogaro na tsakiya kan ƙarfi da samuwa wanda yanzu dole ka injiniya.
Iyakance canjin ga ƙofofin mai haya da kake nufi. Cire kowane adireshin VLAN ya yi faɗi sosai yayin da gudanarwa, underlay da mu'amalar dandamali suke da ayyuka daban. Duba ƙofa ta biyu mai aiki kuma, domin wadda har yanzu take tuƙi a kewayen wutar bango tana lalata zanen a hankali.
Wannan zane ya fi sauƙin bayyanawa ga mai bincike. Ba ya zama mai rahusa don gudanarwa kai tsaye.
IRB da aka raba: hanya mai sauri, babu bincike ta asali
Da ƙofofin anycast da aka raba, kowane leaf yana tuƙi zirga-zirgar mai haya a gida, kuma RFC 9135 ya bayyana dalilin da ya sa hakan ke guje wa komawa ta ƙofar tsakiya. Amfanin gaskiya ne, kuma yana da sakamako kai tsaye: ba za a iya gano bincike daga inda aka toshe wutar bango ba. Wutar bango da aka haɗa da leaf na iyaka tana ganin zirga-zirgar waje da duk abin da ka kai mata a bayyane.
Shigar da ayyukan da hanyar da dandamali ke goyan bayanta da gaske: juyar da aka dogara kan manufa, node ɗin aiki, ko tuƙin da aka sarrafa tsakanin VRF ta wutar bango. Daidaita zirga-zirgar da ake nufi a ainihin wurin shigarta. Manufar da aka rubuta a mu'amalar da ke fuskantar hosts ba ta rufe fakitin da ke zuwa daga overlay.
Karanta hanyoyin da aka sanya maimakon tsohuwar da ake nufi. Fiye da takamaiman prefix ɗin mai haya da aka shigo da shi kai tsaye na iya wuce hanyar da ke nuna wutar bango, kuma babu abin da zai yi kama da kuskure a cikin tsarin.
Daidaito sifa ce ta tuƙi, ba tabbacin bincike ba
IRB mai daidaito yana bayyana yadda nodes ɗin provider edge na shiga da fita suke kula da tuƙi da gada don wata hanya. Ba ya faɗin komai game da ko dukan kwatance biyu suna isa wannan na'ura mai yanayi. ECMP, anycast da babban samuwar wutar bango duk suna shafar wane node ke ganin zirga-zirgar dawowa, kuma tsarin yanayin da aka goyi bayan cluster ɗin ke yanke shawara ko hakan abin karɓa ne.
Bi hanyar dawowa a bayyane ga kowace hanya da ta shafe ka. NAT ba shine madadin gama gari na wannan aikin ba, kuma zanen da suka dogara da shi yawanci suna samun ramin a lokacin failover ba a lokacin ginawa ba.
Bi hanyar da ake buƙata ɗaya da hanyar da aka ware da gangan, a dukan kwatance biyu, kafin ka amince da zanen.
Yadda za a zaɓa, da abin da za a gwada a kowane hali
Zaɓi ƙofar tsakiya lokacin da rufin bincike ya fi ƙarfin wucewa muhimmanci kuma za ka iya biyan dogaron tsakiya. Zaɓi IRB da aka raba lokacin da tuƙi na gida shine manufa, kuma ka tanadi kasafin shigar da ayyuka a bayyane maimakon ɗauka.
Sannan gwada tuƙin da ka sanya da gaske, domin a nan ne zanen biyu suka fi bambanta:
show ip route vrf TENANT 10.20.0.0/16
show bgp l2vpn evpn route-type prefixHaɗa gazawar node ɗin aiki da murmurewa a cikin gwajin. Hanyar ajiya da ke wuce bincike a hankali yanke shawara ce daban da manufar fail-open da aka tsara, kuma yawanci ɗaya ne kawai a cikinsu ake nufi. Kammalallen zanen yana faɗin inda kowane rukunin zirga-zirga yake tuƙi, inda ake bincike, da abin da ke faruwa lokacin da wannan hanyar bincike ba ta samuwa.