IPv6 a cikin VPN na MPLS: zaɓi uku, ba dangi ɗaya na adireshi ba
Hanyoyin VPN na abokin ciniki, zaman BGP tsakanin PE da jigilar cibiya zaɓuka ne daban. Zama na iya gudana a wani dangi yayin ɗaukar wani.
Idan ka ce „gudanar da IPv6 L3VPN a kan IPv6 BGP“ a wani bita na ƙira, zaɓuka uku daban suna ɓoye a cikin wannan jumla ɗaya. Waɗanne prefixes suka shafi VPN na abokin ciniki, waɗanne adireshi ke ɗaukar zaman tuƙi tsakanin gefunan mai samarwa, da wace cibiya ke motsa fakitin da aka yi wa alama, zaɓuka ne masu zaman kansu. Dukansu na iya zama IPv6, suna iya kasancewa gauraye, kuma an yarda da gaurayawa da gangan. Raba waɗannan ukun ne ke mai da buƙata marar tabbas wani abu da za a iya gwada dandali da shi.
Raba ayyukan guda uku
Aiki na farko shi ne hanyar abokin ciniki: prefixes na IPv6 waɗanda suka shafi mahallin tuƙi ɗaya na VPN kuma dole su kasance a wajen kowane wani mahalli. Na biyu shi ne haɗin tuƙi tsakanin na'urorin gefen mai samarwa waɗanda ke musayar waɗannan prefixes. Na uku shi ne jigila da ke ɗaukar fakitin abokin ciniki da aka yi wa alama ta cikin cibiya zuwa gefen nesa. Ambaton ɗaya kawai daga cikinsu ba ƙira ba ce tukuna.
| Job | The question it answers | What confusion looks like |
|---|---|---|
| Customer VPN routes | Which IPv6 prefixes belong to each VPN context, and how are they kept apart? | Prefixes leak into the global table and between customers |
| PE-to-PE BGP session | Which addresses carry the routing connection between the two edges? | A session-family mismatch gets chased as a core transport fault |
| Transport to the remote PE | How does the chosen core move the labelled packet to the far edge? | A route is present and unforwardable in the same moment |
Kowane aiki yana da nasa dangin adireshi, nasa hanyoyin gazawa, kuma sau da yawa nasa ƙungiyar. Tebur ɗin yana da amfani domin kuwa jumla ɗaya a cikin takardar ƙira tana son murƙushe duk layuka uku cikin ɗaya.
Dangin hanyar shi ne VPN-IPv6, ba IPv6 unicast ba
RFC 4659 yana bayyana dangin BGP/MPLS IPv6 VPN, kuma kasancewa cikinsa ya fi ƙayyadaddun abin da kalmar IPv6 ke nunawa. Hanya a can ita ce mai bambanta hanya da aka haɗa da prefix na IPv6, wanda aka ƙididdige a ƙarƙashin AFI 2 da SAFI 128. IPv6 unicast na yau da kullum wani dangi ne dabam, don haka sanarwar da ta yi kama da prefix a looking glass watakila ba ita ce wannan abu ba kwata-kwata. Karanta dangin da kuskure ita ce hanya ta farko da wannan ƙira ke ɓarna.
Bambancin yana tasowa a gefe, inda hanya dole ta sauka cikin mahallin VPN daidai kafin ta yi wani abu. Karɓar prefix yana tabbatar da musayar ta faru kuma ba ya faɗin komai game da shigarwa. Wannan gibin yana haifar da sanannen rahoto inda zaman yake aiki amma abokin ciniki har yanzu cikin duhu.
Zaman na iya gudana a wani dangi dabam da na VPN
Babu abin da ke tilasta haɗin BGP tsakanin gefuna biyu ya yi amfani da dangin VPN ɗin kansa. Ƙayyadaddun suna ba da izinin zaman IPv4 ko IPv6, kuma jigilar IPv6 VPN ita kanta an bayyana ta a kan kowane nau'in cibiya guda biyu. Don haka zaman IPv6 ba ya faɗin komai game da dangin abin da yake ɗauka, kuma ba ya zaɓar jirgin bayanai. Ragowar bits uku masu zaman kansu, kuma ƙira ya kamata ta ɗauke su duka uku daban.
Wannan yana 'yantarwa kuma ana iya karanta shi da kuskure a lokaci ɗaya. Hanyoyin abokin ciniki na IPv6 na iya tafiya a kan zaman da ke da adireshin IPv4, hanyoyin IPv4 kuma a kan na IPv6, muddin dandali ya goyi bayan haɗin kuma an warware mataki na gaba. Abin da bai kamata ya faru ba shi ne barin zaman ya nuna kayan da ake ɗauka, a cikin takardar ƙira ko a cikin sa ido da ke tabbatar da sabis ɗin daga baya.
Mataki na gaba a cibiyar IPv4 yana da nasa ƙididdigar
Lokacin da cibiyar da ke ƙarƙashin VPN ita ce IPv4, hanyar ba ta bayyana da mataki na gaba da gefen shiga zai iya amfani da shi kai tsaye. Tana zuwa a sigar IPv6 da aka yi wa taswirar IPv4, kuma haka ƙayyadaddun ke bayyana gefen fita lokacin da jigilar da ke ƙasa ita ce IPv4. Sai na'urar tuƙi ta shiga ta juya wannan adireshin da aka yi taswira zuwa wani abu da zai iya isa da gaske a cikin cibiya, kuma warwarewa ita ce matakin da ke gaza a hankali.
Karanta shi a matsayin dogaron turawa ba igiyar da za a kwafa tsakanin na'urori ba. Tabbatar da abubuwa uku a kan dandalin da kuke gudanarwa da gaske: mataki na gaba da aka sanar yana warwarewa zuwa hanya mai amfani, ana karɓar tarin alamar, kuma makoma tana sauka cikin mahallin VPN da aka yi niyya. Duk ɗaya daga cikinsu da ya gaza yana barin zaman da ke kama da lafiya kuma ba ya tura komai, shi ya sa binciken ya shafi gwajin karɓa ba wani abin da ya faru daga baya ba.
Rubuta buƙatar a cikin layuka huɗu
Buƙatar da ta cancanci a gwada tana ambaton abubuwa huɗu: dangin VPN, jigilar zaman, ƙididdigar mataki na gaba da tsarin cibiya. Sannan ta ambaci prefix ɗaya na abokin ciniki don a bi shi daga farko zuwa ƙarshe: ta hanyar musayar, shigarwa, warware alama da hanyar dawowa. „Yana goyon bayan IPv6 BGP“ ba ya rufe ɗaya daga cikin huɗun kuma yana ɓoye inda rashin daidaituwa yake da gaske.
Zaman lafiya ba tare da musayar VPN-IPv6 ba bai cika ba, kuma hanyar VPN da aka karɓa ba tare da turawa mai aiki ba ita ma ba ta cika ba. Riƙe waɗannan a matsayin layukan karɓa daban yana mai da tattaunawar magance matsala ta gaba gajere, domin layin da ke gaza an riga an rubuta shi.