Ithuluzi elivame kakhulu lokuqapha inethiwekhi nokuxazulula izinkinga namuhla i-Switch Port Analyzer (SPAN), eyaziwa nangokuthi i-Port mirroring. Kusivumela ukuthi siqaphe ithrafikhi yenethiwekhi ngokudlula ngaphandle kwemodi yebhendi ngaphandle kokuphazamisa amasevisi kunethiwekhi ebukhoma, futhi ithumela ikhophi yethrafikhi egadiwe kumadivayisi asendaweni noma akude, okuhlanganisa i-Sniffer, IDS, noma ezinye izinhlobo zamathuluzi okuhlaziya inethiwekhi.
Okunye ukusetshenziswa okujwayelekile yilezi:
• Xazulula izinkinga zenethiwekhi ngokulandela umkhondo/amafreyimu edatha;
• Hlaziya ukubambezeleka kanye ne-jitter ngokuqapha amaphakethe e-VoIP;
• Hlaziya ukubambezeleka ngokuqapha ukusebenzisana kwenethiwekhi;
• Thola okudidayo ngokuqapha ithrafikhi yenethiwekhi.
Ithrafikhi ye-SPAN ingafananiswa ngokwendawo kwezinye izimbobo kudivayisi yomthombo ofanayo, noma ifaniswe ngesilawuli kude kwamanye amadivayisi enethiwekhi aseduze Nesendlalelo 2 sedivayisi yomthombo (RSPAN).
Namuhla sizokhuluma ngobuchwepheshe bokuqapha ithrafikhi ye-inthanethi yesilawuli kude obubizwa ngokuthi i-ERSPAN (I-Encapsulated Remote Switch Port Analyzer) engasakazwa kuzo zonke izendlalelo ezintathu ze-IP. Lesi isandiso se-SPAN kusilawuli kude Esihlanganisiwe.
Izimiso zokusebenza eziyisisekelo ze-ERSPAN
Okokuqala, ake sibheke izici ze-ERSPAN:
• Ikhophi yephakethe elisuka embobeni yomthombo ithunyelwa kuseva yendawo ukuze ihlaziywe nge-Generic Routing Encapsulation (GRE). Indawo yangempela yeseva ayikhawulelwe.
• Ngosizo lwesici se-User Defined Field (UDF) se-chip, noma yikuphi ukuguqulwa kwamabhayithi angu-1 kuye kwayi-126 kwenziwa ngokusekelwe kusizinda se-Base ngohlu olunwetshiwe lwezinga lochwepheshe, futhi amagama angukhiye weseshini ayafaniswa ukuze kubonakale ukubonakala. yeseshini, njengokuxhawula izindlela ezintathu kwe-TCP kanye neseshini ye-RDMA;
• Ukusekela ukusetha izinga lamasampula;
• Isekela ubude bokunqamuka kwephakethe(Ukusika Kwephakethe), kunciphisa ukucindezela kuseva eqondiwe.
Ngalezi zici, ungabona ukuthi kungani i-ERSPAN iyithuluzi elibalulekile lokuqapha amanethiwekhi ngaphakathi kwezikhungo zedatha namuhla.
Imisebenzi eyinhloko ye-ERSPAN ingafingqwa ngezici ezimbili:
• Ukubonakala Kweseshini: Sebenzisa i-ERSPAN ukuze uqoqe zonke izikhathi ezidaliwe ze-TCP ne-Remote Direct Memory Access (RDMA) kuseva engemuva ukuze ziboniswe;
• Ukuxazulula inkinga yenethiwekhi: Ithwebula ithrafikhi yenethiwekhi ukuze ihlaziywe amaphutha uma kwenzeka inkinga yenethiwekhi.
Ukwenza lokhu, idivayisi yenethiwekhi yomthombo idinga ukuhlunga ithrafikhi enentshisekelo kumsebenzisi kusuka ekusakazweni kwedatha okukhulu, yenze ikhophi, futhi ihlanganise uhlaka lwekhophi ngalunye lube "isiqukathi sozimele omkhulu" esithwala ulwazi olwanele olwengeziwe ukuze lukwazi. kuhanjiswe ngendlela efanele kudivayisi eyamukelayo. Ngaphezu kwalokho, vumela idivayisi eyamukelayo ukuthi ikhiphe futhi ithole ngokugcwele ithrafikhi yoqobo egadiwe.
Idivayisi eyamukelayo ingaba enye iseva esekela ukuqaqa amaphakethe e-ERSPAN.
Uhlobo lwe-ERSPAN Nokuhlaziywa Kwefomethi Yephakheji
Amaphakethe e-ERSPAN ambozwe kusetshenziswa i-GRE futhi adluliselwe kunoma iyiphi indawo ekheli le-IP nge-Ethernet. I-ERSPAN okwamanje isetshenziswa kakhulu kumanethiwekhi e-IPv4, futhi usekelo lwe-IPv6 luzoba yimfuneko esikhathini esizayo.
Ngokwakheka okujwayelekile kwe-encapsulation kwe-ERSAPN, okulandelayo ukuthathwa kwephakethe lesibuko lamaphakethe e-ICMP:
Iphrothokholi ye-ERSPAN ithuthukiswe isikhathi eside, futhi ngokuthuthukiswa kwamandla ayo, kuye kwasungulwa izinguqulo ezimbalwa, ezibizwa ngokuthi "Izinhlobo ze-ERSPAN". Izinhlobo ezihlukene zinamafomethi eheda yozimele ehlukene.
Ichazwe kunkambu Yenguqulo yokuqala yesihloko se-ERSPAN:
Ngaphezu kwalokho, inkambu Yohlobo Lwephrothokholi kunhlokweni ye-GRE iphinda ibonise Uhlobo lwangaphakathi lwe-ERSPAN. Inkambu Yohlobo Lwephrothokholi ethi 0x88BE ibonisa Uhlobo lwe-ERSPAN II, futhi u-0x22EB ubonisa Uhlobo Lwe-ERSPAN III.
1. Thayipha I
Uhlaka lwe-ERSPAN loHlobo I luhlanganisa i-IP ne-GRE ngokuqondile phezu kwenhlokweni yesibuko sangempela sozimele. Lokhu kuhlanganisa kwengeza amabhayithi angu-38 ngaphezu kohlaka lwangempela: 14(MAC) + 20 (IP) + 4(GRE). Inzuzo yale fomethi ukuthi inosayizi wekhanda ohlangene futhi inciphisa izindleko zokudlulisela. Kodwa-ke, ngenxa yokuthi isetha izinkambu ze-GRE Flag kanye nenguqulo ku-0, ayithwali noma yiziphi izinkambu ezinwetshiwe futhi Uhlobo I alusetshenziswa kabanzi, ngakho-ke asikho isidingo sokwandisa okwengeziwe.
Ifomethi kanhlokweni ye-GRE yoHlobo I ime kanje:
2. Uhlobo II
Ku-Type II, izinkambu C, R, K, S, S, Recur, Flags, kanye Nenguqulo kunhlokweni ye-GRE zonke zingu-0 ngaphandle kwenkambu ka-S. Ngakho-ke, inkambu Yenombolo Yokulandelana iboniswa kunhlokweni ye-GRE Yohlobo II. Okusho ukuthi, Uhlobo lwe-II lungaqinisekisa ukuhleleka kokwamukela amaphakethe e-GRE, ukuze inani elikhulu lamaphakethe e-GRE angaphandle kwe-oda alikwazi ukuhlelwa ngenxa yephutha lenethiwekhi.
Ifomethi kanhlokweni ye-GRE yoHlobo lwe-II imi kanje:
Ngaphezu kwalokho, ifomethi yohlaka lwe-ERSPAN Type II yengeza unhlokweni we-ERSPAN we-8-byte phakathi kwenhlokweni ye-GRE kanye nohlaka lwangempela lwesibuko.
Ifomethi kanhlokweni ye-ERSPAN yoHlobo II imi kanje:
Okokugcina, ngokushesha kulandela uhlaka lwesithombe sokuqala, ikhodi ejwayelekile ye-4-byte Ethernet cyclic redundancy check (CRC).
Kubalulekile ukuqaphela ukuthi ekusetshenzisweni, ifreyimu yesibuko ayinayo inkambu ye-FCS yohlaka lwangempela, kunalokho inani elisha le-CRC libalwa kabusha ngokusekelwe kuyo yonke i-ERSPAN. Lokhu kusho ukuthi idivayisi eyamukelayo ayikwazi ukuqinisekisa ukulunga kwe-CRC yozimele wokuqala, futhi singaphetha ngokuthi amafreyimu angonakalisiwe kuphela afakwe esibukweni.
3. Uhlobo III
I-Type III yethula inhlokweni eyinhlanganisela enkulu futhi evumelana nezimo ukuze ibhekane nezimo ezikhulayo zokuqapha zenethiwekhi, ezihlanganisa kodwa ezingakhawulelwe ekuphathweni kwenethiwekhi, ukutholwa kokungena, ukuhlaziya ukusebenza nokubambezeleka, nokuningi. Lezi zigcawu zidinga ukwazi yonke imingcele yasekuqaleni yohlaka lwesibuko futhi zihlanganisa lezo ezingekho kuhlaka lwangempela ngokwalo.
Inhlokweni eyinhlanganisela yohlobo lwe-ERSPAN III ihlanganisa unhlokweni oyisibopho ongu-12-byte kanye nesihlokwana esikhethekile sengxenyekazi esingu-8-byte.
Ifomethi kanhlokweni ye-ERSPAN yoHlobo lwe-III imi kanje:
Futhi, ngemva kohlaka lwesibuko lwangempela yi-CRC engu-4-byte.
Njengoba kungabonakala kufomethi kanhlokweni yoHlobo lwe-III, ngaphezu kokugcina izinkambu ze-Ver, VLAN, COS, T kanye ne-Session ID ngesisekelo sohlobo lwe-II, izinkambu eziningi ezikhethekile ziyengezwa, njenge:
• I-BSO: isetshenziselwa ukukhombisa ubuqotho bomthwalo wamafreyimu wedatha ahanjiswa nge-ERSPAN. 00 luhlaka oluhle, 11 luhlaka olubi, 01 luhlaka olufushane, 11 luhlaka olukhulu;
• Isitembu sesikhathi: sikhishelwe ewashi lezingxenyekazi zekhompyutha elivunyelaniswe nesikhathi sohlelo. Le nkambu ye-32-bit isekela okungenani ama-microseconds ayi-100 we-Timestamp granularity;
• Uhlobo Lozimele (P) Nohlobo Lozimele (FT) : olwangaphambili lusetshenziselwa ukucacisa ukuthi i-ERSPAN iphethe ozimele bephrothokholi ye-Ethernet (ozimele be-PDU), kanti eyakamuva isetshenziselwa ukucacisa ukuthi i-ERSPAN iphethe ozimele be-Ethernet noma amaphakethe e-IP.
• I-ID ye-HW: isihlonzi esiyingqayizivele senjini ye-ERSPAN ngaphakathi kwesistimu;
• I-Gra (Ubumbumbu besitembu sesikhathi) : Icacisa ubumbudumbudu besitembu sesikhathi. Isibonelo, i-00B imele i-100 microsecond Granularity, 01B 100 nanosecond Granularity, 10B IEEE 1588 Granularity, kanye no-11B idinga izihloko ezincane zenkundla ethile ukuze kuzuzwe ubumbudumbudu obuphakeme.
• I-ID ye-Platf vs. Ulwazi Olucacile Lwenkundla: Izinkambu zolwazi oluqondile lwe-Platf zinamafomethi ahlukene nokuqukethwe kuye ngevelu ye-ID ye-Platf.
Kufanele kuqashelwe ukuthi izinkambu ezihlukahlukene zikanhlokweni ezisekelwe ngenhla zingasetshenziswa ezinhlelweni ezivamile ze-ERSPAN, ngisho namafreyimu amaphutha okwenza isibuko noma amafreyimu e-BPDU, kuyilapho kugcinwa iphakheji ye-Trunk yangempela kanye ne-VLAN ID. Ngaphezu kwalokho, ulwazi lwesitembu sesikhathi esingukhiye nezinye izinkambu zolwazi zingangezwa kuzimele ngamunye we-ERSPAN ngesikhathi sokubukisa.
Ngezici zezihloko ze-ERSPAN, singakwazi ukuzuza ukuhlaziya okucwengisiswe kakhudlwana kwethrafikhi yenethiwekhi, bese simane sifaka i-ACL ehambisanayo kunqubo ye-ERSPAN ukuze ifane nethrafikhi yenethiwekhi esiyithandayo.
I-ERSPAN Isebenzisa Ukubonakala Kweseshini ye-RDMA
Ake sithathe isibonelo sokusebenzisa ubuchwepheshe be-ERSPAN ukuze sifinyelele ukubonakala kweseshini ye-RDMA esimweni se-RDMA:
I-RDMA: Ukufinyelela Kwenkumbulo Eqondile Ekude kuvumela i-adaptha yenethiwekhi yeseva A ukuthi ifunde futhi ibhale Inkumbulo yeseva B ngokusebenzisa amakhadi okusebenza enethiwekhi ahlakaniphile (ama-ics) namaswishi, ukuzuza umkhawulokudonsa ophezulu, ukubambezeleka okuphansi, kanye nokusetshenziswa kwezinsiza eziphansi. Isetshenziswa kabanzi kudatha enkulu kanye nezimo zesitoreji esabalalisiwe ezisebenza kahle kakhulu.
I-RoCEv2: I-RDMA phezu kwe-Converged Ethernet Version 2. Idatha ye-RDMA ifakwe kusihloko se-UDP. Inombolo yembobo okuyiwa kuyo ngu-4791.
Ukusebenza nokugcinwa kwansuku zonke kwe-RDMA kudinga ukuqoqa idatha eningi, esetshenziselwa ukuqoqa imigqa yereferensi yezinga lamanzi nsuku zonke nama-alamu angavamile, kanye nesisekelo sokuthola izinkinga ezingavamile. Kuhlanganiswe ne-ERSPAN, idatha enkulu ingathwetshulwa ngokushesha ukuze kutholwe idatha yekhwalithi yokudlulisela i-microsecond kanye nesimo sokusebenzisana kwephrothokholi yokushintsha i-chip. Ngezibalo zedatha nokuhlaziywa, ukuhlolwa kwekhwalithi yokudlulisela phambili ekupheleni kwe-RDMA nokubikezela kungatholakala.
Ukuze sifinyelele ukubonakala kweseshini ye-RDAM, sidinga i-ERSPAN ukuze ifane namagama angukhiye ezikhathi zokusebenzisana ze-RDMA lapho sibonisa ithrafikhi, futhi sidinga ukusebenzisa uhlu olunwetshiwe lochwepheshe.
Incazelo yenkambu yohlu olunwetshiwe lwezinga lochwepheshe:
I-UDF iqukethe izinkambu ezinhlanu: igama elingukhiye le-UDF, inkambu yesisekelo, inkambu ye-offset, inkambu yenani, kanye nenkambu yemaski. Inqunyelwe umthamo wokufakwa kwehadiwe, isamba sama-UDF ayisishiyagalombili angasetshenziswa. I-UDF eyodwa ingafana nobuningi bamabhayithi amabili.
• Igama elingukhiye le-UDF: UDF1... I-UDF8 Iqukethe amagama angukhiye ayisishiyagalombili esizinda esifanayo se-UDF
• Inkambu yesisekelo: ikhomba indawo yokuqala yenkambu yokufanisa ye-UDF. Okulandelayo
L4_header (isebenza ku-RG-S6520-64CQ)
I-L5_header (ye-RG-S6510-48VS8Cq)
• I-offset: ikhombisa i-offset ngokusekelwe kunkambu yesisekelo. Inani lisukela ku-0 kuye ku-126
• Inkundla yenani: inani elifanayo. Ingasetshenziswa kanye nenkambu yemaski ukuze kumiswe inani elithile elizofaniswa. Ibhithi elivumelekile lingamabhayithi amabili
• Inkambu yemaski: imaski, ibhithi elivumelekile lingamabhayithi amabili
(Engeza: Uma okufakiwe okuningi kusetshenziswa kunkambu efanayo yokufanisa ye-UDF, izinkambu zesisekelo ne-offset kufanele zifane.)
Amaphakethe amabili abalulekile ahlotshaniswa nesimo seseshini ye-RDMA Iphakethe Lezaziso Zokuminyana (CNP) kanye Nokuvuma Okubi (NAK):
Okwangaphambili kukhiqizwa umamukeli we-RDMA ngemva kokuthola umlayezo we-ECN othunyelwe ukushintsha (lapho i-eout Buffer ifinyelela embundwini), equkethe ulwazi mayelana nokugeleza noma i-QP ebangela ukuminyana. Lesi sakamuva sisetshenziselwa ukukhombisa ukuthi ukuhanjiswa kwe-RDMA kunomlayezo wokuphendula ukulahleka kwephakethe.
Ake sibheke indlela yokufanisa le milayezo emibili kusetshenziswa uhlu olunwetshiwe lwezinga lochwepheshe:
Uhlu lokufinyelela olunwetshiwe lwe-rdma
vumela udp noma iyiphi noma iyiphi i-eq 4791udf 1 l4_header 8 0x8100 0xFF00(Ukufanisa i-RG-S6520-64CQ)
vumela udp noma iyiphi noma iyiphi i-eq 4791udf 1 l5_header 0 0x8100 0xFF00(Ukumatanisa i-RG-S6510-48VS8CQ)
Uhlu lokufinyelela olunwetshiwe lwe-rdma
vumela udp noma iyiphi noma iyiphi i-eq 4791udf 1 l4_header 8 0x1100 0xFF00 udf 2 l4_header 20 0x6000 0xFF00(Ukufanisa i-RG-S6520-64CQ)
vumela udp noma iyiphi noma iyiphi i-eq 4791udf 1 l5_header 0 0x1100 0xFF00 udf 2 l5_header 12 0x6000 0xFF00(Ukumatanisa i-RG-S6510-48VS8CQ)
Njengesinyathelo sokugcina, ungakwazi ukubona ngeso lengqondo iseshini ye-RDMA ngokukhweza uhlu lwesandiso sochwepheshe kunqubo efanele ye-ERSPAN.
Bhala okokugcina
I-ERSPAN ingelinye lamathuluzi abalulekile kumanethiwekhi anamuhla esikhungo sedatha akhulayo, ithrafikhi yenethiwekhi eyandayo, kanye nokusebenza kwenethiwekhi okuyinkimbinkimbi nezidingo zokuyilungisa.
Ngezinga elikhulayo le-O&M automation, ubuchwepheshe obufana ne-Netconf, i-RESTconf, ne-gRPC budumile phakathi kwabafundi be-O&M kunethiwekhi ye-O&M ezenzakalelayo. Ukusebenzisa i-gRPC njengephrothokholi eyisisekelo yokubuyisela ithrafikhi yesibuko nakho kunezinzuzo eziningi. Isibonelo, ngokusekelwe kuphrothokholi ye-HTTP/2, ingasekela indlela yokusakaza yokusakaza ngaphansi koxhumano olufanayo. Ngombhalo wekhodi we-ProtoBuf, usayizi wolwazi wehliswa ngohhafu uma uqhathaniswa nefomethi ye-JSON, okwenza ukudluliswa kwedatha kusheshe futhi kusebenze kahle. Cabanga nje, uma usebenzisa i-ERSPAN ukuze ubuke ukusakazwa okuthakaselayo bese uyithumela kuseva yokuhlaziya ku-gRPC, ingabe izothuthukisa kakhulu ikhono nokusebenza kahle kwenethiwekhi nokusebenza okuzenzakalelayo nokugcinwa kwayo?
Isikhathi sokuthumela: May-10-2022
