MPLS ku-UDP: i-entropy yesendlalelo, imithetho yesizinda

Abahlinzeki ababili bachaza ilebula lensiza efanayo, futhi eyodwa kuphela yabo ekhuluma ngekhanda le-UDP. Umehluko awuwona wokuhlobisa: ukubeka i-MPLS ngaphakathi kwe-UDP kushintsha lokho umrele wangaphandle we-IP ongakubona, ngakho-ke nalokho ongakwenza i-hash kuzo izixhumanisi ezihambisanayo. Kushintsha futhi ukuthi ubani ovunyelwe ukuyisebenzisa.

Izendlalelo zifushane ngokwanele ukuthi zikhunjulwe: i-IP yangaphandle, bese kuba i-UDP, bese kuba isitaki samalebula e-MPLS, bese kuba umthwalo wensiza. Isitaki samalebula asinyamalali; sisagcina ukudluliswa endaweni yokugcina eqala kabusha ukushintshwa kwamalebula.

Okungezwa i-envelope ye-UDP

I-RFC 7510 ichaza lokhu kufakwa nge-port yendawo ekuyiwa kuyo ye-UDP engu-6635 futhi isebenzisa inkambu ye-port yomthombo ukuthwala i-entropy yokuhamba. Idivayisi efaka ihlanganisa inquma ukuthi yini ethathwa njengokuhamba nokuthi inani litholakala kanjani; isimiso ngamabomu asiphoqi i-hash eyodwa ethile. Lokhu kushiya isikhala sokuziphatha komthengisi, futhi kusho ukuthi izinto ezimbili zokusebenza zingakhiqiza ukusabalalisa okuhlukile kwengxube yethrafikhi efanayo. Funda inani njengeseluleko esinikezwa isendlalelo esingezansi, hhayi njengesinqumo somzila esithathwe yisimiso.

Inzuzo ayiqondile. Umrele wokudlula obhalansisa umthwalo phezu kwe-five-tuple yangaphandle manje unokuthile kokwenza i-hash, kuyilapho iphakethe le-MPLS elinqunu kungenzeka linikeze kuphela ilebula ephezulu. Ukuthi lokho kuyasiza noma cha kuncike endaweni eyenza ukubhalansisa nakumakhambu ewabhekayo ngempela.

I-entropy akuwona umkhawulo webhendi

Ukusabalalisa ukugeleza ngokulingana kakhulu kuzo izixhumanisi ezikhona akufani nokuzihlanganisa zibe yindlela eyodwa esheshayo. Ukugeleza kohlelo lokusebenza okukodwa kusahamba indlela eyodwa, futhi ukubhalansisa ngakunye ukugeleza akukwazi ukudlula umthamo wesixhumanisi esihlala kuso. Lo mshini awuqinisekisi nokusabalalisa okulinganayo; unikeza umsebenzi we-hash kuphela izinto zokufaka ezingcono.

Gcina i-envelope izinzile ekugelezeni okuthile ngaphandle uma ukuhlela kabusha kwamukelekile. Uma i-port yomthombo ishintsha iphakethe ngalinye, isendlalelo esingezansi sizosabalalisa ngokuzimisela ingxoxo eyodwa ezindleni ezimbalwa futhi ukuhlanganisa kabusha kuzoba inkinga yohlelo lokusebenza. Umgomo i-entropy engaguquki ngakunye ukugeleza, hhayi ubusha obungapheli.

Umngcele wokuphakwa uyingxenye yesimiso

I-RFC 7510 ikhawulela ukuphakwa kumrele womsebenzisi oyedwa noma iqoqo eliseduze labasebenzisi ababambisanayo, ngethrafikhi elawulwa ukuze kugwenywe ukuminyana. Iphinde ifune ukuhlunga okuvimbela ithrafikhi efakiwe ukuba iphume kuleso sizinda. Lezi akuzona izimo zokuhlobisa; zivela eqinisweni lokuthi ukufaka akungezi ukuphepha kwako. Zithathe njengezimfuneko zokuphakwa okusemthethweni, hhayi njengeziphakamiso encwadini yokuklama.

Akukho lutho ekhanda le-UDP oluqinisekisa umthumeli, futhi akukho lutho kulo olunikeza imfihlo noma ubuqotho kumthwalo. Uma ithrafikhi idinga ukuvikelwa, iza kums hini ohlukile onokuphathwa kokhiye kwawo. Ukukhetha i-MPLS-in-UDP akukhuphuli imodeli yokuthembela.

Qaphela okwenziwa ukuvikelwa kwi-hash oyifunayo

Engeza i-IPsec noma okunye ukufaka kokuphepha, futhi ikhanda langaphandle elenziwa i-hash ngamadivayisi okudlula lingashintsha isimo ngokuphelele. Imodi yomhubhe ingafihla i-port yomthombo ye-UDP yangaphakathi ngemuva kwekhanda elisha langaphandle, okusho ukuthi i-entropy oyinikeze ngokucophelela kungenzeka ingabonakali lapho ukubhalansisa kwenzeka. Ukubethela kuqala bese kufakwa kamuva kuwukuklama okuhlukile kunokulandelana okuphambene, futhi umehluko ubonakala njengesixhumanisi esithwala ithrafikhi eningi kakhulu kunomakhelwane baso.

Hlola iphakethe eliphelele njengoba livela ocingweni, hhayi kuphela isendlalelo esichazwa yisimiso. Leli futhi yiphuzu lokucabanga kabusha i-MTU nomthamo wendawo yokugcina, ngoba ikhanda le-UDP kanye nanoma yikuphi ukusetshenziswa okwengeziwe kokuphepha kunciphisa umthwalo ongenayo.

Nquma ngokubona indlela yonke

Qhathanisa i-MPLS-in-UDP nezinye izindlela ezifana ne-GRE ngemibandela ebalulekile kumrele wakho: yimaphi amakhambu isendlalelo esingezansi esibhalansisa kuwo, ingakanani imali eyengeziwe ongayikhokha, iyiphi indlela yokuphepha edingekayo, nokuthi umngcele wesizinda ungaqinisekiswa yini. Ukunikeza yona inzuzo yokusebenza engenamibandela phezu kwe-GRE yisiphetho esingasekelwa yizimiso.

Bese uhlola ngengxube yethrafikhi yangempela futhi uhlole ukusetshenziswa kwesixhumanisi selungu ngalinye, ngoba i-hash ebukeka kahle elebhu ingawa esixhumanisini esisodwa lapho konke ukugeleza kwabelana nge-tuple efanayo. Isifinyezo esithembekile siwukuthi ukufaka kudalula ulwazi isendlalelo esingezansi esingalusebenzisa, ngaphakathi kwesizinda esivumile ukusilawula.