I te wā o te rorohiko kapua me te marikotanga whatunga, kua noho a VXLAN (Virtual Extensible LAN) hei hangarau matua mō te hanga whatunga tauine, ngāwari hoki. Kei te ngākau o te hoahoanga VXLAN ko te VTEP (VXLAN Tunnel Endpoint), he wāhanga nui e āhei ai te tuku pai o te waka paparanga 2 puta noa i ngā whatunga paparanga 3. I te mea ka piki haere te uaua o te waka whatunga me ngā kawa whakakī maha, kua noho te tūranga o ngā Network Packet Brokers (NPB) me ngā āheinga Tunnel Encapsulation Stripping hei mea nui ki te arotau i ngā mahi VTEP. Ka tūhuratia e tēnei tuhinga ngā kaupapa matua o VTEP me tōna whanaungatanga ki a VXLAN, kātahi ka ruku hohonu ki te whakapai ake i te mahi whakakī kauhanga a ngā NPB i te mahi VTEP me te tirohanga whatunga.
Te Mārama ki te VTEP me tōna Hononga ki te VXLAN
Tuatahi, me whakamārama tātou i ngā ariā matua: Ko te VTEP, he whakarāpopototanga mō te VXLAN Tunnel Endpoint, he hinonga whatunga e kawenga ana mō te whakakōpaki me te wetewete i ngā mōkihi VXLAN i roto i te whatunga VXLAN overlay. Koia te tīmatanga me te mutunga o ngā kauhanga VXLAN, e mahi ana hei "kuaha" e hono ana i te whatunga mariko overlay me te whatunga tūāpapa tinana. Ka taea te whakatinana i ngā VTEP hei taputapu tinana (pēnei i ngā pana, i ngā pouara rānei e taea ana e te VXLAN) hei hinonga pūmanawa rānei (pēnei i ngā pana mariko, i ngā kaihautū ipu, i ngā takawaenga rānei i runga i ngā mīhini mariko).
He hononga tahi te whanaungatanga i waenga i te VTEP me te VXLAN—ka whakawhirinaki te VXLAN ki ngā VTEP hei whakatutuki i ana mahi matua, ko ngā VTEP ia hei tautoko i ngā mahi a te VXLAN. Ko te uara matua o te VXLAN he waihanga i tētahi whatunga paparanga 2 mariko i runga i tētahi whatunga IP paparanga 3 mā te whakakī MAC-in-UDP, ka hinga i ngā herenga tauine o ngā VLAN tuku iho (e tautoko ana i ngā VLAN ID 4096 anake) me tētahi Tautuhi Whatunga VXLAN 24-moka (VNI) e āhei ai te 16 miriona whatunga mariko. Anei me pēhea te whakahohe a ngā VTEP i tēnei: Ina tukuna he waka e tētahi mīhini mariko (VM), ka whakakī te VTEP ā-rohe i te anga Ethernet paparanga 2 taketake mā te tāpiri i tētahi pane VXLAN (kei roto ko te VNI), he pane UDP (mā te whakamahi i te tauranga 4789 hei taunoa), he pane IP o waho (me te IP VTEP pūtake me te IP VTEP ūnga), me tētahi pane Ethernet o waho. Kātahi ka tukuna te mōkihi kua whakakīia ki roto i te whatunga paparanga 3 ki te VTEP ūnga, ka wetewetehia te mōkihi mā te tango i ngā pane o waho katoa, ka whakahokia mai te anga Ethernet taketake, ka tukuna atu ki te VM ūnga i runga i te VNI.
Hei tāpiritanga, ka whakahaerehia e ngā VTEP ngā mahi nui pēnei i te ako i ngā wāhitau MAC (te mahere hihiri i ngā wāhitau MAC o ngā kaihautū ā-rohe me ngā kaihautū mamao ki ngā IP VTEP) me te tukatuka i ngā waka Broadcast, Unknown Unicast, me Multicast (BUM)—mā roto i ngā rōpū multicast, i te tāruatanga pane-mutunga rānei i te aratau unicast-anake. Ko te tikanga, ko ngā VTEP ngā poraka hanga e taea ai te mariko whatunga a VXLAN me te wehe i ngā kainoho maha.
Te Wero o te Waka Kua Kōpakihia mō ngā VTEP
I roto i ngā taiao pokapū raraunga hou, kāore i te maha ngā wā ka herea te waka VTEP ki te whakakī VXLAN parakore. He maha ngā paparanga o ngā pane whakakī e mau ana i ngā waka e haere ana i roto i ngā VTEP, tae atu ki te VLAN, GRE, GTP, MPLS, IPIP rānei, hei tāpiri atu ki te VXLAN. He nui ngā wero o tēnei uauatanga whakakī mō ngā mahi VTEP me te aroturuki whatunga, te tātari, me te whakatinanatanga haumarutanga i muri mai:
○ - Te Whakaiti i te TirohangaKo te nuinga o ngā taputapu aroturuki me te haumarutanga whatunga (pēnei i te IDS/IPS, ngā tātari rere, me ngā kaiwhakarongo mōkihi) he mea hanga hei tukatuka i ngā waka paparanga 2/paparanga 3 taketake. Ka huna e ngā pane kua whakakīia te kawenga taketake, ā, kāore e taea e ēnei taputapu te tātari tika i ngā ihirangi waka, te kite rānei i ngā hapa.
○ - Te pikinga o te utu tukatukaMe whakapau kaha ngā VTEP ki te tukatuka i ngā mōkihi paparanga maha, inā koa i ngā taiao e nui ana te haere o te raraunga. Ka taea e tēnei te arahi ki te pikinga o te whakaroa, te whakahekenga o te putanga raraunga, me ngā arai pea mō te mahi.
○ - Ngā Take Taunekeneke: Tērā pea ka whakamahia ngā kawa whakakī rerekē e ngā wāhanga whatunga rerekē, e ngā taiao maha-kaihoko rānei. Ki te kore e tika te tango pane, kāore pea e tika te tuku, te tukatuka rānei i ngā waka ina haere ana i roto i ngā VTEP, ka puta ai ngā raruraru mahi tahi.
Me pēhea te whakamana a te tango i ngā arai o te kauhanga o ngā NPB i ngā VTEP
Mā ngā Mylinking™ Network Packet Brokers (NPB) me ngā āheinga Tunnel Encapsulation Stripping ka aro atu ki ēnei wero mā te mahi hei "Tukatuka-mua mō ngā waka" mō ngā VTEP. Ka taea e ngā NPB te tango i ngā pane encapsulation (tae atu ki te VXLAN, VLAN, GRE, GTP, MPLS, me te IPIP) mai i ngā pākete raraunga taketake i mua i te tuku i ngā waka ki ngā VTEP, ki ngā taputapu aroturuki/haumarutanga rānei. E toru ngā painga matua o tēnei mahi mō ngā mahi VTEP:
1. Te Tirohanga me te Haumarutanga Whatunga Whakapai Ake
Mā te tango i ngā pane whakauru, ka whakaatuhia e ngā NPB te kawenga taketake o ngā mōkihi, ka taea ai e ngā taputapu aroturuki me te haumarutanga te "kite" i te ihirangi o te waka. Hei tauira, ina tukuna te waka VTEP ki tētahi IDS/IPS, ka tangohia tuatahitia e te NPB ngā pane VXLAN me te MPLS, ka taea ai e te IDS/IPS te kite i ngā mahi kino (pēnei i te pūmanawa kino, i ngā nganatanga urunga kore whakamanatanga rānei) i roto i te anga taketake. He mea tino nui tēnei i roto i ngā taiao maha-kainoho e whakahaere ana ngā VTEP i te waka mai i ngā kainoho maha—ka whakarite ngā NPB ka taea e ngā taputapu haumarutanga te tirotiro i te waka motuhake ki te kainoho me te kore e araia e te whakauru.
Heoi anō, ka taea e ngā NPB te tango i ngā pane i runga i ngā momo waka, i te VNI rānei, kia kitea ai ngā whatunga mariko motuhake. Mā tēnei ka āwhina i ngā kaiwhakahaere whatunga ki te whakatau i ngā take (pēnei i te ngaronga o te mōkihi, te whakaroa rānei) mā te whakahohe i te tātari tika o te waka i roto i ngā wāhanga VXLAN takitahi.
2. Te Mahi VTEP Arotau
Ka tangohia e ngā NPB te kawenga o te mahi tango pane mai i ngā VTEP, ka whakaitihia te utu tukatuka i runga i ngā taputapu VTEP. Engari ko ngā VTEP e whakapau ana i ngā rauemi CPU ki te tango i ngā paparanga pane maha (hei tauira, VLAN + GRE + VXLAN), ka whakahaerehia e ngā NPB tēnei taahiraa tukatuka-mua, ka taea ai e ngā VTEP te arotahi ki ā rātou kawenga matua: te whakakī/te tango i ngā mōkihi VXLAN me te whakahaere kauhanga. Ko te hua o tēnei he iti ake te whakaroa, he nui ake te putanga, me te whakapai ake i te mahi whānui o te whatunga paparua VXLAN—ina koa i roto i ngā taiao mariko kiato teitei me ngā mano tini VM me ngā kawenga waka nui.
Hei tauira, i roto i tētahi pokapū raraunga me ngā NPB me ngā Switch e mahi ana hei VTEP, ka taea e tētahi NPB (pēnei i a Mylinking™ Network Packet Brokers) te tango i ngā pane VLAN me ngā MPLS mai i ngā waka e haere mai ana i mua i te taenga atu ki ngā VTEP. Ka whakaitihia te maha o ngā mahi tukatuka pane e hiahiatia ana e ngā VTEP, ka taea ai e rātou te whakahaere i ngā kauhanga me ngā rerenga waka i te wā kotahi.
3. Te Whakapai Ake i te Mahi Tahi puta noa i ngā Whatunga Rerekē
I roto i ngā whatunga maha-kaihoko, maha-wāhanga rānei, ka whakamahia pea e ngā wāhanga rerekē o te hanganga ngā kawa whakakī rerekē. Hei tauira, ka tae pea ngā waka mai i tētahi pokapū raraunga mamao ki tētahi VTEP ā-rohe me te whakakī GRE, ko ngā waka ā-rohe ia e whakamahi ana i te VXLAN. Ka taea e te NPB te tango i ēnei pane kanorau (GRE, VXLAN, IPIP, me ētahi atu) ka tuku i tētahi rerenga waka taketake ōrite ki te VTEP, ka whakakore i ngā take mahi tahi. He mea tino whai hua tēnei i roto i ngā taiao kapua ranu, me whakauru ngā waka mai i ngā ratonga kapua tūmatanui (e whakamahi ana i te whakakī GTP, IPIP rānei) ki ngā whatunga VXLAN i runga i te papa mā roto i ngā VTEP.
Hei tāpiritanga, ka taea e ngā NPB te tuku i ngā pane kua tangohia hei raraunga raraunga ki ngā taputapu aroturuki, kia mau tonu ai te horopaki o te whakaurunga taketake (pēnei i te tapanga VNI, MPLS rānei) e ngā kaiwhakahaere, me te whakahohe tonu i te tātaritanga o te kawenga taketake. Ko tēnei taurite i waenga i te tangohanga pane me te tiakitanga horopaki te mea nui ki te whakahaere whatunga whai hua.
Me pēhea te whakatinana i te mahi tango i te mōkihi kauhanga i roto i te VTEP?
Ka taea te whakatinana i te tango i ngā arai i roto i te VTEP mā te whirihoranga taumata-pūmārō, ngā kaupapa here kua tautuhia e te pūmanawa, me te mahi tahi me ngā kaiwhakahaere SDN, me te arorau matua e arotahi ana ki te tautuhi i ngā pane arai → te whakahaere i ngā mahi tango → te tuku i ngā kawenga taketake. He rerekē ngā tikanga whakatinanatanga motuhake i runga i ngā momo VTEP (tinana/pūmanawa), ā, ko ngā huarahi matua e whai ake nei:
Ināianei, e kōrero ana mātou mō te Whakatinanatanga i runga i ngā VTEP ā-tinana (hei tauira,Ngā Kaihokohoko Mōkihi Whatunga e āhei ana ki te Mylinking™ VXLAN) i konei.
Ka whakawhirinaki ngā VTEP ā-tinana (pērā i ngā Mylinking™ VXLAN-capable Network Packet Brokers) ki ngā maramara taputapu me ngā whakahau whirihoranga motuhake hei whakatutuki i te tangohanga encapsulation whai hua, e tika ana mō ngā horopaki pokapū raraunga e nui ana te haere:
Te whakataurite i te whakakī ā-atanga: Waihangahia ngā atanga iti ki ngā tauranga urunga ā-tinana o ngā VTEP, ā, whirihorahia ngā momo whakakī kia ōrite, kia tangohia hoki ngā pane kauhanga motuhake. Hei tauira, i runga i ngā Kaihokohoko Pakete Whatunga Mylinking™ VXLAN, whirihorahia ngā atanga iti o te Papa 2 kia mōhio ki ngā tohu VLAN 802.1Q, ngā anga kāore anō kia tohua rānei, ā, tangohia ngā pane VLAN i mua i te tuku i ngā waka ki te kauhanga VXLAN. Mō ngā waka kua whakakīia ki te GRE/MPLS, whakahohehia te tātari kawa e rite ana ki te atanga iti kia tangohia ngā pane o waho.
Te tango pane e hangai ana ki ngā kaupapa here: Whakamahia te ACL (Rārangi Mana Uru) te kaupapa here waka rānei hei tautuhi i ngā ture taurite (hei tauira, te taurite i te tauranga UDP 4789 mō VXLAN, te momo kawa 47 mō GRE) me te here i ngā mahi tango. Ina taurite te waka ki ngā ture, ka tangohia aunoatia e te maramara taputapu VTEP ngā pane kauhanga kua tohua (ngā pane o waho VXLAN/UDP/IP, ngā tapanga MPLS, me ētahi atu) ka tukuna te kawenga Papa 2 taketake.
Te mahi tahi a te kuwaha tohatoha: I roto i ngā hoahoa VXLAN Spine-Leaf, ka taea e ngā VTEP ā-tinana (ngā pūnga Rau) te mahi tahi me ngā kuwaha Layer 3 hei whakaoti i te tango paparanga maha. Hei tauira, i muri i te tukunga a ngā pūnga Spine i ngā waka VXLAN kua whakakīia ki te MPLS ki ngā VTEP Rau, ka tangohia tuatahitia e ngā VTEP ngā tapanga MPLS, kātahi ka mahi i te tango VXLAN.
Me hiahia koe ki tētahi tauira whirihoranga mō te pūrere VTEP a tētahi kaihoko motuhake (pēnei iNgā Kaihokohoko Mōkihi Whatunga e āhei ana ki te Mylinking™ VXLAN) hei whakatinana i te tango i ngā arai o te kauhanga?
Te Whakatakotoranga Whaihua
Whakaarohia he pokapū raraunga umanga nui e whakatinana ana i tētahi whatunga VXLAN overlay me ngā pana H3C hei VTEP, e tautoko ana i ngā VM kairihi maha. Ka whakamahia e te pokapū raraunga te MPLS mō te tuku waka i waenga i ngā pana matua me te VXLAN mō te whakawhitiwhiti VM-ki-VM. Hei tāpiri, ka tukuna e ngā tari peka mamao ngā waka ki te pokapū raraunga mā roto i ngā kauhanga GRE. Hei whakarite i te haumarutanga me te tirohanga, ka whakatinanahia e te umanga he NPB me te Tunnel Encapsulation Stripping i waenga i te whatunga matua me ngā VTEP.
Ina tae mai ngā waka ki te pokapū raraunga:
(1) Ka tangohia tuatahitia e te NPB ngā pane MPLS mai i ngā rerenga mai i te whatunga matua me ngā pane GRE mai i ngā rerenga mai i ngā tari peka.
(2) Mō ngā waka VXLAN i waenga i ngā VTEP, ka taea e te NPB te tango i ngā pane VXLAN o waho ina tukuna ana ngā waka ki ngā taputapu aroturuki, ā, ka taea e ngā taputapu te tirotiro i ngā waka VM taketake.
(3) Ka tukuna e te NPB te waka kua tukatukahia i mua (kua tangohia te pane) ki ngā VTEP, e hiahia ana kia whakahaerea noa te whakakī/te tango i te VXLAN mō te kawenga taketake. Ka whakaitihia e tēnei tatūnga te kawenga tukatuka VTEP, ka taea te tātari waka whānui, ā, ka whakarite kia pai te mahi tahi i waenga i ngā wāhanga MPLS, GRE, me VXLAN.
Ko ngā VTEP te pou tuarā o ngā whatunga VXLAN, e āhei ai te marikotanga tauine me te whakawhitiwhiti kōrero maha-kaiwhakahaere. Heoi, ko te uaua haere o te hokohoko kua whakakīia ki roto i ngā whatunga hou he wero nui ki te mahi a te VTEP me te tirohanga whatunga. Ka arohia e ngā Kaihokohoko Pakeke Whatunga me ngā āheinga Tunnel Encapsulation Stripping ēnei wero mā te tukatuka i mua i te hokohoko, te tango i ngā pane rerekē (VXLAN, VLAN, GRE, GTP, MPLS, IPIP) i mua i te taenga atu ki ngā VTEP, ki ngā taputapu aroturuki rānei. Ehara i te mea ka arotau noa i te mahi a te VTEP mā te whakaiti i te utu tukatuka engari ka whakarei ake i te tirohanga whatunga, ka whakapakari i te haumarutanga, ka whakapai ake i te mahi tahi puta noa i ngā taiao rerekē.
I te mea kei te whakamahi tonu ngā whakahaere i ngā hoahoa kapua-taketake me ngā whakatinanatanga kapua ranu, ka nui haere te hiranga o te mahi tahi i waenga i ngā NPB me ngā VTEP. Mā te whakamahi i te mahi tango encapsulation tunnel a ngā NPB, ka taea e ngā kaiwhakahaere whatunga te iriti i te pūmanawa katoa o ngā whatunga VXLAN, me te whakarite kia whai hua, kia haumaru, kia urutau hoki ki ngā hiahia pakihi e whanake haere ana.
Wā tuku: Hanuere-09-2026
