IPv6 ku-VPN ye-MPLS: izinqumo ezintathu, hhayi umndeni owodwa wamakheli
Imizila ye-VPN yekhasimende, iseshini ye-BGP phakathi kwama-PE kanye nokuthuthwa esisekelweni yizinqumo ezihlukene. Iseshini ingasebenza emndenini owodwa futhi ithwale omunye.
Ithi esivivinyweni somklamo „gijimisa i-L3VPN ye-IPv6 phezu kwe-BGP ye-IPv6“, futhi kuleso sigwe esisodwa kucashile izinqumo ezintathu ezihlukene. Yimaphi amaphrefikhi angawase-VPN yekhasimende, yimaphi amakheli athwala iseshini yokuhlela phakathi kwemiphetho yomhlinzeki, futhi iyiphi ingqikithi ehambisa iphakethe elilebuliwe — lezi yizinqumo ezizimele. Konke kungaba yi-IPv6, kungaxutshwa, futhi ukuxutshwa kuvunyelwe ngamabomu. Ukwehlukanisa lezi zinto ezintathu yikho okuguqula isidingo esingacacile sibe into okungahlolwa ngayo ipulatifomu.
Hlukanisa imisebenzi emithathu
Umsebenzi wokuqala umzila wekhasimende: amaphrefikhi e-IPv6 angaphansi komongo owodwa wokuhlela we-VPN futhi okufanele ahlale ngaphandle kwawo wonke omunye umongo. Eyesibili ukuxhumana kokuhlela phakathi kwamarutha omngcele womhlinzeki ashintshanisa lawo maphrefikhi. Eyesithathu ukuthuthwa okuthwala iphakethe lekhasimende elilebuliwe linqamula ingqikithi liye emngceleni okude. Ukusho eyodwa kuphela kuzo akukona umklamo okwamanje.
| Job | The question it answers | What confusion looks like |
|---|---|---|
| Customer VPN routes | Which IPv6 prefixes belong to each VPN context, and how are they kept apart? | Prefixes leak into the global table and between customers |
| PE-to-PE BGP session | Which addresses carry the routing connection between the two edges? | A session-family mismatch gets chased as a core transport fault |
| Transport to the remote PE | How does the chosen core move the labelled packet to the far edge? | A route is present and unforwardable in the same moment |
Umsebenzi ngamunye unomndeni wawo wamakheli, izindlela zawo zokwehluleka futhi ngokuvamile neqembu lalo. Ithebula liwusizo ngenxa yokuthi umusho owodwa kudokhumenti yomklamo uvame ukucindezela imigqa emithathu ibe owodwa.
Umndeni womzila yi-VPN-IPv6, hhayi i-IPv6 unicast
RFC 4659 ichaza umndeni we-BGP/MPLS IPv6 VPN, futhi ubulungu kubona bucacile kunalokho okushiwo yigama elithi IPv6. Umzila lapho uyisihlukanisi somzila esixhunywe kuphrefikhi ye-IPv6, sifakwe ikhodi ngaphansi kwe-AFI 2 ne-SAFI 128. I-IPv6 unicast evamile ingomunye umndeni, ngakho isimemezelo esibonakala njengephrefikhi ku-looking glass kungenzeka ukuthi asiyona into efanayo neze. Ukufunda kabi umndeni iyona ndlela yokuqala le mklamo ehamba ngayo kabi.
Umehluko uluma emngceleni, lapho umzila kufanele uqale wehlele emongweni ofanele we-VPN ngaphambi kokwenza noma yini. Ukuthola iphrefikhi kufakazela ukuthi ukushintshana kwenzeka futhi akusho lutho ngokufakwa. Leyo gebe yikho okukhiqiza umbiko ojwayelekile lapho iseshini iphakeme kodwa ikhasimende lisemnyameni.
Iseshini ingasebenza emndenini ohlukile kweye-VPN
Akukho okucindezela ukuxhumana kwe-BGP phakathi kwemiphetho emibili ukuthi kusebenzise umndeni we-VPN uqobo. Ukucaciswa kuvumela iseshini ye-IPv4 noma ye-IPv6, futhi ukuthuthwa kwe-IPv6 VPN ngokwako kuchazwa phezu kwezinhlobo zombili zengqikithi. Ngakho iseshini ye-IPv6 ayisho lutho ngomndeni walokho ekuthwalayo, futhi ayikhethi nendawo yedatha. Amabhithi amathathu azimele, futhi umklamo kufanele uthwale womathathu ngokwehlukana.
Lokho kuyakhulula futhi ngesikhathi esifanayo kulula ukufundwa kabi. Imizila yekhasimende ye-IPv6 ingagibela iseshini enamakheli e-IPv4, futhi imizila ye-IPv4 igibele eyase-IPv6, inqobo nje uma ipulatifomu isekela leyo nhlanganisela futhi ihophu elilandelayo lixazululwa. Okungafanele kwenzeke ukuthi iseshini isho umthwalo, kudokhumenti yomklamo noma ekuqapheni okufakazela isevisi kamuva.
Ihophu elilandelayo engqikithini ye-IPv4 inekhodi yalo
Uma ingqikithi ngaphansi kwe-VPN iyi-IPv4, umzila awuveli nehophu elilandelayo umngcele wokungena ongalisebenzisa ngqo. Ufika ngesimo se-IPv6 esihlelwe ku-IPv4, futhi yileyo ndlela ukucaciswa okuchaza ngayo umngcele wokuphuma uma ukuthuthwa ngaphansi kwayo kuyi-IPv4. Ngemuva kwalokho irutha yokungena kufanele iguqule lelo kheli elihlelwe libe into engayifinyelela ngempela ngenqikithi, futhi ukuxazulula yisona sinyathelo esihluleka buthule.
Kufunda lokhu njengokuncika kokudluliswa, hhayi njengochungechunge lokukopisha phakathi kwamadivayisi. Qinisekisa izinto ezintathu epulatifomuni oyisebenzisayo ngempela: ihophu elilandelayo elimenyezelwe lixazululeka endleleni esebenzisekayo, isitaki samalebula siyamukelwa, futhi indawo ekuyiwa kuyo iwela emongweni we-VPN obekiwe. Uma kwephulwa okukodwa kwayo, kusala iseshini ebukeka iphilile futhi engadlulisi lutho, ngakho lokhu kuhlola kungokwaho lokwamukela hhayi okwesigameko sakamuva.
Bhala isidingo emigqeni emine
Isidingo esifanele ukuhlolwa sisho izinto ezine: umndeni we-VPN, ukuthuthwa kwesehini, ikhodi yehophu elilandelayo kanye nokuhlelwa kwengqikithi. Bese sisho iphrefikhi eyodwa yekhasimende okufanele ilandelwe kusukela ekuqaleni kuze kube sekupheleni: ngokushintshana, ukufakwa, ukuxazululwa kwamalebula kanye nomzila wokubuyela. „Isekela i-BGP ye-IPv6“ ayimbo ze kwezine futhi ifihla lapho ukungafani kukhona khona ngempela.
Iseshini ephilile ngaphandle kokushintshana kwe-VPN-IPv6 ayiphelele, futhi umzila we-VPN owamukelwe ngaphandle kokudluliswa okusebenzayo nawo awuphelele. Ukugcina lokhu njengemigqa yokwamukela ehlukene kwenza ingxoxo elandelayo yokuxazulula izinkinga ibe mfushane, ngoba umugqa ohlulekayo usubhaliwe.