I-ECMP eya ku-VTEP eyodwa: i-entropy ye-VXLAN ivela kuphi
I-VTEP ekude ingaba nezigaba ezilandelayo ezimbalwa ezinesilinganiso esilinganayo, kodwa i-/32 ayizifaki ekusetshenzisweni. Ukusatshalaliswa kuncike ku-tuple yangaphandle kanye ne-hash yephothi yomthombo.
Isimangalo sokuthi i-multipath enezindleko ezilinganayo ayinamsebenzi kumzila womsingathi siphindwa kaningi ngokwanele ukuba sizwakale siyiqiniso. I-/32 ikhetha ikheli lendawo okuyiwa kuyo, futhi akukho lutho kulokho kukhetha okubeka iphakethe kuxhumano olulodwa lomzimba. Lapho indawo okuyiwa kuyo iyiphetho elikude lethungo le-VXLAN, izigaba ezilandelayo eziningi zingathwala imigudu ehlukene ye-overlay, futhi ukuthi ziyakwenza yini kuncike kulokho i-hash yokudlulisela evunyelwe ukukubona. Okusele i-arithmetic ekhasini langaphandle, hhayi isici se-prefix.
Umzila unquma ukufinyeleleka; i-hash inquma ukusatshalaliswa.
Inganekwane: i-/32 isho umzila owodwa
I-OSPF ingabika ukufinyeleleka kwezindleko ezilinganayo ku-loopback ye-VTEP kuyilapho ithebula lokudlulisela lifaka iqembu lezigaba ezilandelayo kuleyo prefix efanayo. Iphrothokholi inikeza abazongenela ukhetho; inkundla inquma ukuthi yikuphi kubo okusebenzisekayo nokuthi iphakethe labelwa kanjani. Ayikho iphrothokholi yomzila ebala i-hash entsha yefreyimu ngayinye ehlanganisiwe. Lokho kwehlukanisa kuyisizathu sokuthi ama-router amabili anemizila efanayo angakwazi ukusabalalisa ithrafikhi ngendlela ehlukile.
Bheka ukungena kokudlulisela okufakiwe hhayi kuphela isibonisi somzila, ngoba imikhawulo ye-hardware noma yenqubomgomo ingase ikhiphe abazongenela ukhetho abasakhishwa yindawo yokulawula.
I-entropy kufanele ivele kuphi
Phakathi kwama-VTEP amabili amakheli angaphandle omsuka nendawo okuyiwa kuyo ahlala eqinile, futhi iphothi lendawo okuyiwa kuyo ye-UDP ingu-4789 ekusetshenzisweni okujwayelekile. I-hash efunda lawo manani kuphela ibona okokufaka okungaguquki futhi ibuyisela umzila ongaguquki. Kukhona okuthile ekhasini langaphandle okufanele kuguquke, futhi i-VTEP iyona divayisi engakwenza lokho.
RFC 7348 iphakamisa ukuthi iphothi lomsuka le-UDP lithathwe emikhakheni engaphakathi kwefreyimu ehlanganisiwe. Khona-ke izingxoxo zangaphakathi ezihlukene zikhiqiza ama-tuple angaphandle ahlukene, lokho okunikeza i-hash yokuthutha evamile into yokwenza ngayo.
Uma i-hardware yokudlulisela ikwazi ukubheka ejulile ephaketheni, hlola ukuthi imiphi imikhakha yangaphakathi okwenziwa kwayo i-hash eyisekelayo. Lokho kujula akufanele kuthathwe njengemfuneko yayo yonke idivayisi ye-underlay, ngoba ukwehluka kwephothi lomsuka kuphela sekuvele kuveza umehluko owusizo.
Hlola i-hash oyitholayo ngempela
Linganisa esikhundleni sokuqagela. Thwebula isampula yethrafikhi ehlanganisiwe bese ubheka amaphothi omsuka angaphandle, bese uqhathanisa umphumela nokungena kokudlulisela nezibali zexhumano ngalinye.
show ip route 10.255.0.5/32 show ip cef 10.255.0.5 internal ip route show 10.255.0.5 tcpdump -ni eth0 -c 200 'udp port 4789' -vv
Iphothi lomsuka elilodwa elivela ezingxoxweni eziningi zangaphakathi ezihlukene lisho ukuthi i-VTEP ayiguquki leyo mikhakha, futhi akukho kulungiswa kwe-underlay okuzosabalalisa umthwalo. Amaphothi amaningi ahlukene ngesigaba esisodwa esilandelayo esisetshenziswayo akhomba eqenjini lokudlulisela esikhundleni salokho.
Rekhoda izibali ngaphambi nangemva kwesampula, futhi qaphela ithrafikhi engahlobene eyabelana ngama-uplink, ngaphandle kwalokho izinombolo zizobonakala zimbi kakhulu kunalokho i-hash ekufanele.
Ukusatshalaliswa okulinganayo akusho ukuthini
I-hash yokugeleza ngakunye yenzelwe ukugcina ingxoxo eyodwa emzileni owodwa uma nje okokufaka kwayo kanye nesethi yemizila etholakalayo kungaguquki. Ngakho-ke ukudluliselwa okukodwa okukhulu kwe-TCP akuhlanganisi wonke ama-uplink, futhi ukwengeza izixhumanisi ngeke kusheshise lowo mfuduko. Lokhu kuwukuziphatha okuvamile, hhayi iphutha.
Imifuduko eminingi ingase futhi ingqubuzane esigabeni esisodwa esilandelayo ngengozi. Isampula elifushane lingabonakala litsheka kakhulu kuyilapho i-hash yenza kahle lokho eyayilungiselelwe kona, futhi ukwehluleka koxhumano noma ukushintsha kwesethi yemizila kungahambisa imifuduko esunguliwe phakathi nokudlulisela.
Hlola ngamabhangqa amakheli amelela, izinto zokuthutha namazinga ngaphansi kohlelo olugunyaziwe, futhi wehlukanise ukukhethwa kwamalungu okuhlanganiswa kwezixhumanisi nokukhethwa kwemizila eminingi ehlelwe, ngoba izigaba ezimbili ze-hashing zakha iphethini yazo. Iqembu lesigaba esilandelayo eligcwele kanye ne-entropy yangaphandle ebonakalayo kuchaza umphumela; ubude be-prefix akukuchazi.