Inethiwekhi echazwe yisoftware (i-SDN): umlando, ukwakheka kwezakhiwo, kanye nokusetshenziswa

Informatec Digital » Izinsiza » Inethiwekhi echazwe yisoftware (i-SDN): umlando, ukwakheka kwezakhiwo, kanye nokusetshenziswa

Inethiwekhi echazwe yisoftware (i-SDN) ishintshe ngokuphelele indlela ingqalasizinda yezokuxhumana eklanywa ngayo, isetshenziswa futhi iphathwa ngayo . Lokho okwakuyisakhiwo esiqinile semishini ebonakalayo kanye nokucushwa ngesandla manje kungaphathwa cishe njengekhodi, ngesivinini esikhulu kakhulu, ukuguquguquka, kanye nokubonakala kulokho okwenzekayo kuwo wonke amagumbi enethiwekhi.

Le ndlela entsha ayizange ivele ndawo: ingumphumela wamashumi eminyaka ocwaningo kanye nezinyathelo eziningana zobuchwepheshe , kusukela kumanethiwekhi asebenzayo ngawo-90 kuya ekulinganisweni kwe-OpenFlow kanye nokudalwa kwesimiso esiphelele sabalawuli, ama-API, kanye nezinhlelo zokusebenza. Ake sibheke isinyathelo ngesinyathelo ukuthi sifike kanjani lapha, yiziphi izinkinga i-SDN ezixazulula, ukuthi isebenza kanjani ngaphakathi, nokuthi isetshenziswa kanjani namuhla.

Umsuka nomlando wamanethiwekhi achazwe yisofthiwe (i-SDN)

Indaba ye-SDN iqala eminyakeni engaba ngu-20 eyedlule, ekuqaleni kwe-inthanethi yezohwebo , lapho impumelelo yenethiwekhi yomhlaba wonke ikwenza kwacaca ukuthi ingqalasizinda yezokuxhumana idinga ukukwazi ukuguqulwa nokuthuthuka kalula kakhulu. Kusukela ngaleso sikhathi kuqhubeke, izigaba ezintathu ezinkulu zingahlukaniswa ezavula indlela yalokho esikubiza ngokuthi i-SDN manje.

Isigaba sokuqala sihambisana namanethiwekhi asebenzayo (cishe ngo-1995-2000) . Umqondo kwakuwukuvula inethiwekhi ukuze ihlele izinhlelo, ngendlela efanayo nendlela i-PC ehlelwe ngayo, kodwa esetshenziswa kuyo yonke i-node yokuxhumana. Ukuze kufezwe lokhu, kwachazwa i-API kumadivayisi enethiwekhi aveza izinsiza ezifana namandla okusebenzisa ikhompyutha, isitoreji, imigqa yamaphakethe, kanye nemisebenzi yokucubungula, okuvumela ikhodi ukuthi ilayishwe esebenzisa ukuziphatha okwenziwe ngokwezifiso ekugelezeni kwethrafikhi ethile.

Le ndlela yayingqubuzana nombono walabo ababephikisana ngokuthi okuwukuphela kwendlela i-inthanethi yokukhula nokuhlala isebenza kwakuwukugcina inethiwekhi ilula ngangokunokwenzeka. Noma kunjalo, uhlelo lokuxhumana olusebenzayo lwakhuthaza intuthuko ebalulekile: izindleko zokubala ezincishisiwe, ukuthuthuka kwezilimi zokuhlela, ukwanda kwemishini ebonakalayo , futhi, ngaphezu kwakho konke, umqondo wokuthi inethiwekhi ingaphathwa njengeplatifomu ehlelekayo hhayi nje iqoqo lamabhokisi avaliwe.

Isisusa esibalulekile saleso sikhathi kwakuwukusekelwa kwezikhungo ezifana ne-DARPA, eyasungula uhlelo lwe-Active Networks , olwalusebenza kusukela maphakathi nawo-90 kuya ekuqaleni kwawo-2000. Nakuba amanethiwekhi asebenzayo engakaze afinyelele ekusetshenzisweni okukhulu, ahlwanyela imiqondo eyayizoba yisisekelo kamuva ku-SDN: imisebenzi ehlelekayo kunethiwekhi, ukubonwa kwezinsizakusebenza, kanye nombono ohlangene wamadivayisi ahlukene (izicishamlilo, ama-IDS, i-NAT, njll.).

Ngokuqala kweminyaka eyishumi kanye nokukhula okukhulu kwethrafikhi, isigaba sesibili saqala, sigxile ekuhlukanisweni kwendiza yokulawula kanye nendiza yedatha (2001-2007) . Ama-router nama-switch endabuko ahlanganisa i-logic yokulawula (ukukhethwa komzila, amaphrothokholi okuhambisa) kanye nendiza yedatha (ukudluliselwa kwangempela kwephakethe) kudivayisi efanayo, okwenza kube nzima kakhulu ukulungisa amaphutha, ukulungisa ubunjiniyela bethrafikhi, noma ukwethula izinsizakalo ezintsha.

Ukuze babhekane nalesi simo, opharetha baqala ukusebenzisa ukudluliselwa kwephakethe kuhadiwe ekhethekile , kuyilapho ukulawula kwahlala kuhlukile, futhi ngesikhathi esifanayo bafuna izindlela zokuphatha amanethiwekhi amakhulu futhi ayinkimbinkimbi, ngezinsizakalo ezifana nama-VPN nezinye izici ezithuthukisiwe. Kulokhu kwavela imigqa emibili yokusungula izinto ezintsha: ngakolunye uhlangothi, izixhumanisi ezivulekile phakathi kokulawula nokudlulisela, njenge-ForCES (IETF) noma i-Netlink ku-Linux; ngakolunye uhlangothi, izakhiwo ezinokulawula okunengqondo okuphakathi, njenge-RCP, i-SoftRouter, noma iphrothokholi ye-PCE, evumela izinqumo zokuhambisa ukuthi zenziwe ngombono womhlaba wonke.

Isigaba sesithathu safika neProjekthi 4D kanye ne-Ethane eyalandela , eyaqinisa umqondo wesilawuli se-logic esiphakathi esinezinhlelo ezine ezichazwe ngokucacile: idatha (ukucubungula iphakethe ngokwemithetho), ukutholwa (ukuqoqwa kolwazi lwe-topological kanye ne-traffic), ukusatshalaliswa (ukufakwa kwemithetho yokucubungula), kanye nesinqumo (izinqubomgomo zomhlaba wonke ezihunyushwe emithethweni ethile). I-Ethane, esetshenziswe ezindaweni zangempela njengeStanford University, inikele ngomklamo wokushintsha olula kakhulu owawuzoba yisisekelo salokho esikwaziyo manje njenge- OpenFlow.

Phakathi naleso sikhathi, uhlelo lokuhlola lwaluthuthuka: ingqalasizinda efana ne-PlanetLab kanye ne-Emulab, amaphrojekthi afana ne-GENI kanye nohlelo lwe-European FIRE, kanye ne- Stanford's Clean Slate Program kwakhuthaza ukuhlolwa okukhulu kwezakhiwo zenethiwekhi ezihlukile. Kwakukule ndawo lapho i-OpenFlow yavela khona njengendlela ewusizo yokuveza amakhono okudlulisela ukushintshwa kumlawuli wangaphandle kusetshenziswa i-API ejwayelekile.

Ingqophamlando ebalulekile embonini kwaba ukuboniswa kuka-Avaya ngo-2014 , okwahlanganisa i-Shortest Path Bridgeing ne-OpenStack ukwakha amanethiwekhi achazwe yisofthiwe anokucushwa okuncane okwenziwa ngesandla. Futhi, kancane kancane, ngenxa yezibuyekezo ezilula ze-firmware, izinkinobho eziningi zezentengiselwano zaqala ukusekela i-OpenFlow ngaphandle kokudinga izinguquko zehadiwe.

Izinkinga zamanethiwekhi endabuko ezixazululwa yi-SDN

Amanethiwekhi avamile, asekelwe cishe kuphela emishinini ehlelwe ngokwawo , afinyelela imikhawulo yawo ngenxa yezidingo zamanje ezivela emabhizinisini, abahlinzeki bezinsizakalo, kanye nabasebenzisi bokugcina. Isithende sabo esiyinhloko sokungasebenzi kahle okuqongelelwe eminyakeni edlule.

Ukuze kuhlangatshezwane nazo zonke izimo ezingaba khona, imboni ibilokhu inezela izinqubo zenethiwekhi eziqondile ezixazulula izinkinga ezithile (ukuphepha, ukusebenza kahle, ukuphindaphinda, njll.), kodwa lezi zivame ukwakheka zodwa. Umphumela uba uchungechunge oluxubile lwezindlela okumele zihlanganiswe ngesandla, ngaphandle kwesendlalelo esivamile sokuthatha izinto ukuze kube lula konke.

Uma inhlangano ifuna ukuphoqelela izinqubomgomo ezihambisanayo kuyo yonke inethiwekhi yayo—isibonelo, ukunquma ukuthi ubani ongafinyelela kuziphi izinsiza—abaphathi kufanele bashintshe amakhulu noma izinkulungwane zamadivayisi . Into elula njengokwengeza umshini omusha obonakalayo ingabandakanya izinguquko ohlwini oluningi lokulawula ukufinyelela (ama-ACL) olusakazeke kuyo yonke indawo, kanye nengozi yamaphutha abantu kanye nokubambezeleka kwamahora.

Ukuntuleka kokukhuliswa kungenye inkinga enkulu. Ukwanda kwezikhungo zedatha, ukukhula kwabasebenzisi, kanye nokwanda kwethrafikhi kudinga ukwengeza amadivayisi amaningi. Ingxenye ngayinye eyengeziwe yemishini isho ukucushwa okwengeziwe, ukuphathwa okwengeziwe, kanye namaphuzu amaningi okwehluleka. Ukugcina konke lokhu kuhambisana nezidingo zebhizinisi kuba umsebenzi onzima kakhulu.

Ngokombono wezomnotho, izinhlangano zihlushwa ukuthembela kakhulu emijikelezweni yemikhiqizo yabakhiqizi . Uma kudingeka ukusebenza okusha kwenethiwekhi, ukuvuselela isofthiwe nje akwanele: izinhlangano kumele zilinde umthengisi ukuthi akhiphe imodeli efanele, ukuze kuqedwe izitifiketi zangaphakathi, ukuze kutholakale imishini, ukuze kusetshenziswe—inqubo engathatha iminyaka futhi ivimbele ukusungula izinto ezintsha.

Okwenza izinto zibe zimbi kakhulu, izitayela zakamuva zenza isimo sibe nzima nakakhulu: kuvela amaphethini ethrafikhi ahlukahlukene kakhulu , ngokugeleza komshini kuya komshini, izizindalwazi ezisatshalalisiwe, izinsizakalo ezincane, kanye nabasebenzisi abaxhuma noma kuphi ngamaselula, amathebhulethi, nama-laptop. Umsebenzi wabaphathi uyanda njengoba bezama ukuvikela idatha ebucayi kuyilapho umngcele wenethiwekhi wendabuko unyamalala cishe.

Okungeziwe kulokhu ukukhula kwezinsizakalo zamafu (SaaS, IaaS, PaaS) , ezidinga ukuhlinzekwa okusheshayo, ukukalwa okuguquguqukayo kwekhompyutha, isitoreji, kanye nenethiwekhi, kanye nezidingo zokuphepha eziyinkimbinkimbi kakhulu. Ukwanda kwedatha enkulu kudinga i-bandwidth enkulu kanye nomthamo wokuthutha ezinkulungwaneni zamaseva amanethiwekhi endabuko angenakukwazi ukuwahambisana nawo njalo.

Iyini ngempela i-SDN futhi iyixazulula kanjani?

I-SDN ivela njengomklamo omusha oklanyelwe ukuhlinzeka ngokuguquguquka, ukulawula okuphakathi, kanye nokukwazi ukuhlela inethiwekhi, ishintshele ubunzima kusofthiwe bese iyisusa kuhadiwe. Akusekho mayelana nokuphatha idivayisi ngayinye ngayinye, kodwa mayelana nokuchaza ukuziphatha kwenethiwekhi okufiswayo kusuka kungqimba enengqondo ephezulu.

Isimiso esiyinhloko ukuhlukaniswa kwendiza yokulawula kanye nendiza yedatha . Indiza yedatha inesibopho sokuhambisa amaphakethe ngesivinini esikhulu phakathi kwama-endpoints; indiza yokulawula inquma ukuthi lawo maphakethe kufanele ahambe kanjani futhi kuphi, isebenzisa izinqubomgomo, imizila, kanye nemithetho. Ku-SDN, la mazindiza ayahlukaniswa, futhi ukulawula kugxilwe kumlawuli oyedwa noma ngaphezulu onengqondo.

Kusungulwa isikhombikubona esichazwe kahle phakathi kwalokhu okubili, ngokuvamile ngephrothokholi ejwayelekile efana ne-OpenFlow . Ngenxa yalesi sikhombikubona, isilawuli singafaka, siguqule, noma sisuse imithetho yokudlulisela kuma-switch nama-router, abese esebenza njengamadivayisi angahlelwa esikhundleni sezinhlelo ezivaliwe. I-OpenFlow akuyona yodwa iphrothokholi engenzeka, kodwa iyona esakazeke kakhulu futhi isibe yindinganiso yangempela.

Ngaphezu kwabalawuli, izinhlelo zokusebenza ze-SDN zisebenzisa ama-API asenyakatho ukuveza ukuthi yikuphi ukuziphatha ezikudingayo kunethiwekhi : ukubeka phambili ithrafikhi ethile, ukuhlukanisa iminyango, ukulinganisela umthwalo, ukuthuthukisa ikhwalithi yesevisi, ukusabela ekuhlaselweni kokunqatshelwa kwenkonzo, njll. Isilawuli sihumusha lezi zicelo zezinga eliphezulu zibe imithetho yokudlulisa eqondile esetshenziswa endizeni yedatha.

Ngamanye amazwi, i-SDN iguqula inethiwekhi ibe yipulatifomu lapho izinhlelo zokusebenza nezinsizakalo zingathuthukiswa khona njengokungathi ziyisofthiwe emsulwa , kunganakwa imininingwane yemodeli ngayinye yemishini noma iphrothokholi esezingeni eliphansi. Lokhu kufinyezwa kwenza kube lula ukuzenzakalela, kunciphisa amaphutha, futhi kuvumela ukuzivumelanisa okusheshayo nezinguquko zesidingo.

Ukwakhiwa kwe-SDN: Abalawuli, ama-API, kanye Nezingxenye Eziyinhloko

Inethiwekhi evamile ye-SDN ihlelwe ngezingqimba eziningana ezinengqondo kanye nezingxenye ezihlukaniswe kahle. Enhliziyweni yayo kukhona isilawuli se-SDN , esisebenza njengobuchopho benethiwekhi, siqoqa ulwazi kusuka kudatha futhi sisebenzise izinqumo zohlelo lokusebenza.

Isilawuli sigcina umbono ongabonakali wenethiwekhi: i-topology, amakhono edivayisi ngayinye, izibalo zethrafikhi, izimo zezixhumanisi, njll. Ngalolu lwazi, futhi sithembele kumamojula e-plug-in angasetshenziswa noma angasebenzi (ukuphathwa kwempahla, ukuqoqwa kwezibalo, amamojula okuphepha, ukulinganisela umthwalo, njll.), senza izinqumo futhi sizidlulisele kumadivayisi nge-API eya eningizimu, ngokuvamile i-OpenFlow noma ezinye izinqubo ezifana ne-OVSDB noma i-Cisco OpFlex.

Amadivayisi endiza yedatha—izishintshi ezingokoqobo, izishintshi ezingokoqobo, ama-router—asebenzisa lokho i-ONF ekubiza ngokuthi i-SDN Datapath : isethi yezinjini zokudlulisa kanye nemisebenzi yokucubungula ithrafikhi evezwe ngokunengqondo. Ngaphakathi kwe-datapath ngayinye kukhona i-Control Interface Processing Agent (i-CDPI agent) ethola imiyalelo evela kumlawuli futhi iyihumushe ibe yimithetho kumathebula okugeleza noma izenzo ezithile zehadiwe.

Phezulu komklamo kukhona izinhlelo zokusebenza ze-SDN . Lezi izinhlelo ezixhumana nomlawuli ngama-API aseNyakatho (ama-NBI) futhi ziveza izidingo zebhizinisi noma zobuchwepheshe: ukuphathwa kwekheli le-IP (i-IPAM), ukuhlelwa kwesevisi, ukulawulwa kwekhwalithi yesevisi (i-QoS), izinhlelo zokuzivikela zokuhlasela ze-DoS, amathuluzi okuhlaziya athuthukile, njll. Uhlelo ngalunye luqukethe i-logic yalo kanye ne-NBI eyodwa noma ngaphezulu ukuze zisebenzisane nomlawuli.

Phakathi kwala mabhulokhi kukhona i -Control-to-Data Plane Interface (CDPI) , enesibopho sokuhlinzeka ngokuhleleka kokudlulisa, amakhono okukhangisa amadivayisi, ukudalula izibalo, kanye nokwazisa imicimbi. Abalawuli basebenzisa abashayeli balesi sikhombimsebenzisi, futhi amadivayisi asebenzisa ama-ejenti, ngakho-ke umbhangqwana ngamunye womshayeli/we-ejenti usungula ubudlelwano obuthile phakathi kwengqalasizinda ebonakalayo kanye nezinhlelo zokusebenza.

Ngaphezu kwalezi zigaba ezintathu eziyinhloko, i-ONF ikhomba ungqimba lokuphatha nokuphatha oluhlanganisa imisebenzi engaguquki kakhulu: ukwabiwa kwezinsiza kumakhasimende, ukumiswa okuyisisekelo kwemishini ebonakalayo, ukuphathwa kweziqinisekiso, kanye nobudlelwano phakathi kwezinhlangano ezinengqondo nezibonakalayo. Le misebenzi ivame ukuphathwa ngaphandle komjikelezo wokulawula ithrafikhi onamandla.

Izixhumi zaseNyakatho naseNingizimu, kanye namamodeli wokuhlela ukugeleza

I-API eya eningizimu ixhumanisa isilawuli ne-hardware noma izindlela zedatha . I-OpenFlow kwakuyi-interface yokuqala eyamukelwa kabanzi: ichaza indlela isilawuli esifaka ngayo okufakiwe kumathebula okugeleza kwamaswishi, indlela esiqoqa ngayo izibalo, indlela imicimbi efana namaphakethe angalingani ebikwa ngayo, njalo njalo. Ezinye izindlela, njenge-Cisco OpFlex, ziphakamisa amamodeli ahlukene, kodwa ngomqondo ofanayo oyisisekelo wokuvumela isici esiyinhloko ukuthi sithonye ukuziphatha kwedivayisi.

I-API eya enyakatho ivumela izinhlelo zokusebenza ukuthi zixhumane nomlawuli futhi zithole umbono ongaqondakali wenethiwekhi. Ayikho indinganiso esungulwe njenge-OpenFlow lapha: kuneziphakamiso eziningi kanye nemitapo yolwazi etholakala ezingqimbeni ezahlukene zesitaki (i-REST, i-gRPC, ama-SDK athile, amamodeli asekelwe ekuhlosweni, njll.), futhi kungenxa yalokhu kuhlukahluka ukuthi i-ONF igcizelele kakhulu ekuchazeni imikhuba emihle kakhulu kanye nokuhlangana ngezindlela ezihambisanayo.

Ezingeni lokusebenza, abalawuli bangalandela imodeli esebenzayo, ephendulayo, noma exubile ukuze basebenzise imithetho yokugeleza kumadivayisi. Ngendlela yokusabela, iswishi ibuza isilawuli uma sithola iphakethe elingahambisani nanoma yikuphi okufakiwe etafuleni laso; isilawuli siphendula ngemiyalelo futhi, uma kudingeka, sidala umthetho omusha wamaphakethe afanayo esikhathi esizayo.

Kumodeli yokuqapha, isilawuli sifaka kusengaphambili imithetho yokuhamba kwethrafikhi okulindelekile , ngendlela efana nendlela amatafula okuqondisa avamile agcwaliswa ngayo. Lokhu kunciphisa imibuzo yesikhathi sangempela futhi kunciphisa ukubambezeleka kokuxhumana kokuqala. Ukufakwa okuningi kwezwe langempela kuhlanganisa womabili amamodeli, kuba nomthelela kuthrafikhi engalindelekile futhi kube nomthelela ekugelezeni okwaziwayo.

Amandla eqiniso e-SDN alele ekuhlelekeni okunikezwa yilawa ma-API avulekile . Ngenxa yawo, kungenzeka ukulungisa imizila ngokuguquguqukayo ngokusekelwe kumthwalo, ukubeka phambili ithrafikhi ebalulekile, ukwenza ngokuzenzakalelayo impendulo yokwehluleka noma izehlakalo zokuphepha, futhi kuvumele izinhlelo zokusebenza ngokwazo ukuthi zixoxisane ngezimo ezizidingayo nenethiwekhi (ububanzi be-bandwidth, ukubambezeleka okuphezulu, izinga lokuphindaphinda, njll.).

Sebenzisa izimo zokuhleleka ku-SDN

Ukuze kuboniswe umqondo wokuhleleka kwenethiwekhi, kuvame ukuxoxwa ngezimo ezintathu ezinkulu zokusetshenziswa ukuze kuboniswe ukuthi i-SDN isetshenziswa kanjani ekusebenzeni . Eyokuqala ukulungiswa kahle kokugeleza kwethrafikhi: ngamaphrothokholi afana ne-OpenFlow, umlawuli anganquma, cishe ngokushesha, ukuthi yiziphi izindlela okufanele zilandelwe izinhlobo ezithile zethrafikhi, ukulinganisela umthwalo phakathi kwezixhumanisi, ukugwema ukuminyana, noma ukusebenzisa izinqubomgomo zokuphepha eziqinile lapho kudingeka khona.

Icala lesibili elikhulu lisekusekelweni kwezinhlelo zokusebenza ezithuthukisiwe . Esikhundleni sokuba inethiwekhi ingaboni ukuthi izinhlelo zokusebenza zenzani, zingadalula izidingo zazo (isibonelo, ukubambezeleka okuphansi kwezwi noma ividiyo, i-bandwidth ephezulu yokudluliselwa okuthile, ukuhlukaniswa okuqinile phakathi kwamakhasimende), futhi isilawuli sivumelanisa ukucushwa ukuze kuhlangatshezwane nazo. Ngaphezu kwalokho, ukuthunyelwa okuzenzakalelayo—ikakhulukazi ezindaweni zamafu kanye ne-virtualization enkulu—kuvumela ukuthunyelwa okusheshayo kwezinsizakalo ezintsha ngaphandle kokuthi umphathi ashintshe amapharamitha ngesandla.

Isici sesithathu esiyinhloko ukwenza ngokuzenzakalela imisebenzi yenethiwekhi . Esimweni se-SDN esiklanywe kahle, inethiwekhi ingasabela ngokuzimela ezenzakalweni eziningi: uma isixhumanisi sihluleka, imizila ibalwa kabusha; uma kuvela iphethini yethrafikhi esolisayo, kusetshenziswa imithetho yokuvimba noma ukuqondisa kabusha ezinhlelweni zokuhlaziya; uma kuqaliswa uhlelo olusha, inethiwekhi yabela izinsiza ngokuzenzakalelayo. Indima yomlawuli ishintsha kusukela "ekushintsheni imiyalo" iye ekuchazeni izinqubomgomo zezinga eliphezulu nokuqinisekisa ukulandelwa kwemithetho.

Izinzuzo ze-SDN zezinhlangano

Isiphakamiso senani le-SDN sihumusha sibe uchungechunge lwezinzuzo ezicacile kakhulu zezinkampani kanye nabahlinzeki bezinsizakalo . Esinye seziphawuleka kakhulu ukuphathwa okuhlanganisiwe: kusukela kumlawuli, izinqubomgomo zokufinyelela, imithetho yokuphepha, izinto eziza kuqala kuthrafikhi, kanye nokuhlinzekwa kwezinsizakalo kungachazwa kuyo yonke inethiwekhi, ngaphandle kokuphatha idivayisi ngayinye ngayinye noma ukuncika esibonakalayo esithile somkhiqizi ngamunye.

Ngokuphathelene nokukhula, i-SDN inikeza ukuguquguquka okukhulu. Abaphathi bangangeza noma basuse izinto ezisetshenziswayo ezibonakalayo, bahlukanise amanethiwekhi, baxhumanise amahhovisi amagatsha noma izikhungo zedatha , futhi balungise imizila ngesikhathi sangempela, ngokuvamile ehlanganiswe namapulatifomu okuhlelwa kwamafu. Konke lokhu kufezwa ngomthelela omncane engqalasizinda engaphansi, ehlala iyi-substrate ezinzile.

Enye inzuzo ebalulekile ukubonakala okuphelele kokuziphatha kwenethiwekhi . Ngokuhlanganisa ulwazi kumlawuli noma isizinda sabalawuli abahlanganisiwe, kutholakala isithombe esiphelele sokusebenza, izithiyo, ukugeleza okusebenzayo, kanye nezinsongo ezingaba khona. Lokhu kubonakala akwenzi kube lula ukusebenza kwansuku zonke kuphela kodwa futhi nokuhlela amandla kanye nokutholakala kwezinkinga kusenesikhathi.

Ngokombono wezomnotho, i-SDN isiza ekunciphiseni i-CAPEX kanye ne-OPEX. Ngakolunye uhlangothi, ivumela ukusetshenziswa kabusha kwezingxenyekazi eziningi zehadiwe ezikhona , njengoba izinkinobho eziningi zingavumela imisebenzi ye-SDN ngezibuyekezo ezilula ze-firmware. Ngakolunye uhlangothi, ukuzenzakalela kunciphisa isikhathi abasebenzi abasichitha emisebenzini yokucushwa ephindaphindwayo, kunciphisa amaphutha abantu, futhi kwenza kube lula ukugcinwa nokuthuthukiswa.

Isethi yokugcina yezinzuzo ezinkulu ihlobene nokusungula izinto ezintsha kanye nesivinini sokuphendula . Ngokuhlanganisa ihadiwe nesofthiwe, izinhlangano zingadala izinsizakalo ezintsha, zizame amamodeli ebhizinisi ahlukene, noma zivumelanise inethiwekhi nezidingo ezintsha (i-hybrid cloud, i-IoT, i-edge computing, i-big data) ngaphandle kokuboshwa ohlelweni lokwethulwa komkhiqizo lomkhiqizi othile.

Izinkinga kanye nezinselele zamanethiwekhi e-SDN

I-SDN ayilona ikhambi futhi iletha nezinselele okumele zikhunjulwe lapho kuklanywa futhi kusetshenziswa lolu hlobo lwamanethiwekhi. Enye yezinto ezivame ukucashunwa kakhulu ubuthakathaka obungaba khona bomlawuli: ngokugxila kakhulu ekucabangeni nasekuthatheni izinqumo, iba yiphuzu elibalulekile lapho ukwehluleka noma ukuyekethisa kungawisa lonke uhlelo.

Lokhu kudinga ukusetshenziswa kwezindlela zokutholakala okuphezulu, ukuphindaphinda, kanye nokwehluleka , kanye nezilawuli zokufinyelela eziqinile kakhulu. Ukuhlaselwa kwe-Denial-of-service (DDoS) ngokumelene nomlawuli, isibonelo, kumele kuncishiswe ngomthamo owanele ukuvimbela inethiwekhi ekubeni "izimpumputhe" ezimweni ezibalulekile.

Enye inselele ukwanda okungenzeka kokulibaziseka kanye nobunzima njengoba inani lamadivayisi kanye nokugeleza kukhula. Uma isilawuli kufanele siphathe ukusebenzisana okuningi kakhulu nedatha, singaba nzima kakhulu. Ukwakheka kwe-SDN okuklanywe kahle kufanele kusabalalise imisebenzi, kugcine ukulawula okuthile ezintweni ezisatshalaliswe lapho kunengqondo (isibonelo, ukuze kutholakale ngokushesha ukwehluleka kwendawo), kanye nabalawuli besikali ngokuvundlile.

Ngokuphathelene nokuphepha, yize i-SDN inikeza ukubonakala okuthuthukisiwe, ayinazo nezindlela ezithile ezazihlanganiswe ngaphambilini kuma-router endabuko, amaswishi, noma ama-firewall angokoqobo. Kubalulekile ukuvikela ukuxhumana phakathi kwabalawuli, izinhlelo zokusebenza, namadivayisi, ukuqinisekisa ubuqiniso nobuqotho, nokuklama indawo eqinile yenqubomgomo evumela ukuqinisekiswa ukuthi izinqubomgomo zisetshenziswa njengoba kuhlosiwe.

Ngaphezu kwalokho, kubalulekile ukusungula izinqubo ze- network forensics : ukubhalwa kwemicimbi okuningiliziwe, ukulandelelwa kwezinguquko, kanye nekhono lokwakha kabusha okwenzekile uma kwenzeka isigameko. Konke lokhu kumele kuhambisane namandla angaphakathi e-SDN, kuvimbele ukuphepha ukuthi kube yisithiyo ngenkathi kuqinisekiswa ukuthi akukho ubuthakathaka obusele.

Izindima ze-ONF kanye nabanye abadlali ohlelweni lwe-SDN

I -Open Networking Foundation (ONF) idlala indima ebalulekile ekuthuthukisweni kwe-SDN. Iyinhlangano eqhutshwa abasebenzisi bokugcina (abaqhubi, izinkampani ezinkulu) ngenhloso yokukhuthaza ukwamukelwa kwamanethiwekhi achazwe yisoftware ngezindinganiso ezivulekile kanye nezinqubo zokubambisana.

I-ONF ibilokhu inesibopho sokuchaza, ukugcina, nokuthuthukisa indinganiso ye-OpenFlow , eyayiyindinganiso yokuqala ye-SDN eyaziwayo futhi isalokhu iyisici esiyinhloko ekwakhiweni kwezakhiwo eziningi. Kodwa umsebenzi wayo udlulela ngale kwalokho: ihola amaqembu asebenzayo ahlaziya izidingo zokusetshenziswa kwezentengiselwano, aphakamise izixhumi ezintsha, amamodeli wedatha, kanye namagama, futhi akhuthaze uhlelo lwe-ecosystem olunabathengisi abaningi.

Ngesikhathi esifanayo, izinkampani zobuchwepheshe kanye nabakhiqizi bemishini bathuthukise amapulatifomu abo e-SDN kanye nezindlela ezihlanganisiwe. Ezinye, njengezixazululo ezisekelwe kubalawuli abaphakathi ngokwengqondo njenge-Ciena's Blue Planet, zihlanganisa imisebenzi ephakathi (ukubonakala kusukela ekuqaleni kuya ekugcineni, izinqubomgomo, i-bandwidth) namakhono asatshalaliswa kuzo zonke izakhi zenethiwekhi zokubuyisa amaphutha, ukuqapha kwendawo, noma ukuphepha.

Le ndlela ehlanganisiwe ibonisa iqiniso elingokoqobo: akuwona wonke amandla okulawula okumele abekwe kumlawuli ophakathi, futhi kulula ukuthi izindlela ezithile zokusabela okusheshayo zihlale ziseduze nethrafikhi, kuyilapho ubuhlakani kanye nokuhleleka okuyinkimbinkimbi kuphathwa ngendlela ehlanganisiwe nehlelekile.

I-SDN, i-network virtualization, kanye namacala okusetshenziswa emhlabeni wangempela

Ezinhlanganweni eziningi, i-SDN isetshenziswa kanye namasu okusebenzisa inethiwekhi ukuze kudalwe amanethiwekhi ambozayo phezu kwengqalasizinda ebonakalayo ekhona. Lawa manethiwekhi abonakalayo angahlukanisa izindawo ezahlukene (ukukhiqiza, ukuthuthukiswa, amakhasimende ahlukile) ngokusebenzisa ihadiwe efanayo eyisisekelo, noma angaxhuma amanethiwekhi amaningi angokoqobo njengokungathi ayinhlangano eyodwa enengqondo.

Le ndlela inamandla kakhulu uma ihlanganiswa nezinsizakalo zokubala amafu njenge-SaaS, i-IaaS, ne-PaaS . Inethiwekhi echazwe yisofthiwe ihlanganiswa namapulatifomu okuhlanganisa ukuze wonke umjikelezo wokuhlinzeka—imishini ebonakalayo, isitoreji, inethiwekhi, ukuphepha—wenziwe njalo, ngokushesha, nangokuzenzakalela, ngokuvamile ngama-API.

Emabhizinisini amakhulu kanye nabaqhubi, i-SDN isetshenziselwa ukwakha ama-WAN ezinkampani ahlakaniphile , lapho ithrafikhi phakathi kwendlunkulu, izikhungo zedatha, kanye namafu omphakathi iphathwa kahle. I-Google, isibonelo, ibilokhu isebenzisa i-SDN iminyaka eminingi ukuxhumanisa izikhungo zayo zedatha zomhlaba wonke futhi ibambisene ne-ONF ekuchazeni izixhumi ezintsha zokulawula ngale kwe-OpenFlow.

Esimweni sesikhungo sedatha, i-SDN iyisici esibalulekile sokufeza ukukala okusheshayo nokusebenza kahle : ukuvumela isikhungo sedatha esisha ukuthi sisebenze ngamahora kanye nezinsiza zenethiwekhi ukuthi zinikezwe ngemizuzu. Iphinde ikhuthaze ukuthunyelwa kwezindawo ezinkulu ze-IoT, iphatha izinkulungwane zamadivayisi asakazwe kanye nezinzwa ngaphandle kobunzima obukhulu.

Okokugcina, i-SDN iyingxenye yomkhuba obanzi oya engqalasizinda echazwe yisofthiwe , lapho kungekuphela nje inethiwekhi kodwa nesitoreji (i-SDS) kanye nezinye izinsiza kulawulwa kusuka ezindizeni zokulawula ezinengqondo, ngaphandle kwehadiwe ethile. Lokhu kunikeza izinhlangano ukuphatheka okukhulu, ukuguquguquka, kanye nekhono lokuhambisa umthwalo womsebenzi phakathi kwefu kanye nendawo njengoba kudingeka.

Ngalo lonke lolu lwazi lomlando, lobuchwepheshe kanye nolusebenzayo, i-SDN izihlanganisa njengendlela ehlukile yokuqonda amanethiwekhi: eduze nomhlaba wesofthiwe, igxile ekuzenzakalelayo nasekuhleleni, futhi ikwazi ukuphendula inselele yokukhula kwethrafikhi, ifu, idatha enkulu kanye ne-IoT ngaphandle kokuphoqa ukuphindaphindwa okungenamkhawulo kwehadiwe noma ubunzima bokusebenza.