Ukuqhathaniswa kwe-KVM vs VMware kwe-Enterprise Virtualization

Informatec Digital » Izinsiza » Ukuqhathaniswa kwe-KVM vs VMware kwe-Enterprise Virtualization

Uma unqikaza phakathi kokusetha ingqalasizinda yakho ku-KVM noma i-VMware (noma ufuna nje ukuqonda kangcono ukuthi ngayinye inikeza ini), lo mhlahlandlela unikeza ukuqhathanisa okujulile: ukusebenza, ukuphepha, ilayisense, ukwesekwa, ukuhambisana kwesitsha, isipele, ukuhlanganisa, ukuxhumana, amafomethi ediski, ukuhlanganiswa nezinye izingxenye ezifana ne-OpenStack noma i-Active Directory… umqondo uwukuthi, ngesikhathi uqeda ukufunda, uzoba nokuqonda okucacile ukuthi iyiphi inketho ngayinye ehamba phambili kuyo.

Yini i-KVM ne-VMware futhi zifana kanjani?

I-VMware, ngakolunye uhlangothi, iyinkampani ephethe umndeni wonke wemikhiqizo ye-virtualization. Ngokuphathelene nezikhungo zedatha, umdlali oyinhloko yi -VMware ESXi , i-hypervisor yohlobo 1 eyakha umongo weplatifomu ye -VMware vSphere . Eduze kwe-ESXi kuzungeza i-vCenter, i-vSAN, i-NSX, i-Horizon, i-Tanzu, nezinye izingxenye eziningi ezakha uhlelo oluvuthiwe kakhulu lwezindawo zebhizinisi ezidinga kakhulu.

Kokubili i-KVM ne-ESXi ziyi -Type 1 bare-metal hypervisors ezikwazi ukusebenzisa imishini eminingi ebonakalayo (ama-VM) enezinhlelo zokusebenza zezivakashi ezifana ne-Windows, i-Linux, i-BSD, noma i-Solaris, ngokusekelwa kwe-hardware-assisted virtualization (Intel VT-x, AMD-V). Ngomqondo, zombili zivumela ukuhlinzekwa kwe-VM, ukuhlukaniswa, ukufuduka okubukhoma , izithombe ezimfushane, kanye nokuphathwa kwamaqoqo amakhulu. Umehluko usekutheni lezi zici zifinyelelwa kanjani, izindleko zazo, ukuguquguquka kwazo, kanye namakhono okuphatha anikezwa yilowo nalowo.

Izinhlobo ze-Hypervisor kanye nokwakheka kwangaphakathi

Ku-virtualization, ngokuvamile kwenziwa umehluko phakathi kwama-hypervisor ohlobo 1 (angenansimbi) kanye nohlobo 2 (olufakwe phezu kwesistimu yokusebenza ye-host). I-KVM kanye ne-ESXi ziyi-Type 1, kanti imikhiqizo efana ne-VMware Workstation, i-VMware Player, i-VMware Fusion, kanye ne-VirtualBox ziyi-Type 2.

Endabeni ye- KVM , yize ifakiwe njengengxenye ye-Linux host, ibhekwa njenge-hypervisor yohlobo 1 ngoba i -kernel ye-Linux isebenza njenge-hypervisor eqondile kwihadiwe. Ngakho-ke i-KVM izuza i -CPU scheduler, ukuphathwa kwememori, kanye ne-network stack evela ku-Linux uqobo, iyinika ukuguquguquka okukhulu kanye nokuhambisana kwehadiwe.

I-ESXi iyisistimu yokusebenza encane kakhulu ye-VMware, eyenzelwe ngqo njenge-hypervisor. Ine- kernel evaliwe , ehlanganiswe nabashayeli abaqinisekisiwe nabathuthukisiwe, futhi isebenzisa indiza yokuphatha i-VMware ukuze isebenzisane nehadiwe kanye nayo yonke enye ingxenye (i-vCenter, i-NSX, njll.). Le ndlela yehlisa umthelela wesofthiwe kulokho kuphela okudingekayo ukuze kwenziwe i-virtualization.

Ngaphezu kokwehluka kohlobo 1/uhlobo 2, kubalulekile ukuqonda umehluko phakathi kwe-virtualization ephelele "engenalutho" kanye ne-virtualization esizwa yihadiwe . Ku-virtualization egcwele esekelwe kwisofthiwe kuphela, i-hypervisor ilingisa yonke ihadiwe futhi ihumushe imiyalelo ye-CPU (ukuhumusha okubili), okuhamba kancane kodwa kuyivumela ukuthi isebenze ngaphandle kwe-VT-x/AMD-V. Nge-virtualization esizwa yihadiwe, eminye imiyalelo ye-vCPU isetshenziswa ngqo kwi-CPU ebonakalayo, okunciphisa kakhulu izindleko. I-KVM ne-ESXi zithembele kule ndlela yokugcina ukuze zilethe ukusebenza okuphezulu.

Ukusebenza: Ingabe i-KVM noma i-VMware zisebenza kangcono?

Ukusebenza okuluhlaza kwe-KVM ne-ESXi kufana kakhulu ezimweni eziningi zokukhiqiza. I-KVM yakhelwe emigqeni yekhodi ecishe ibe yi-10,000 elungiselelwe kahle ngaphakathi kwe-kernel ye-Linux, okunciphisa izindleko, futhi nge -QEMU kanye ne-virtio, ifinyelela ukusebenza okuseduze kwe-CPU, idiski, kanye nenethiwekhi.

Endabeni ye -VMware ESXi , ikhodi yomthombo iyimpahla eyimfihlo, kodwa umkhiqizo ophelele kulinganiselwa ukuthi usezinyangeni ezingamashumi ezigidi lapho zonke izingxenye zemvelo zifakiwe. Ezilinganisweni ezithile zokwenziwa, ama-VM abonakale eshesha kancane ku-KVM kunaku-ESXi, kodwa ezindaweni zamabhizinisi zangempela, umehluko uvame ukuba mfushane uma uqhathaniswa nezinye izinkinga ezifana nokugcina noma ukuxhumana.

I-VMware ithola inzuzo ezimweni ezihilela ukulungiswa kokuhlela, i-DRS, i-vMotion, kanye ne-Storage vMotion , okuvumela ukulinganisela umthwalo kanye nama-VM ahamba ngokushisa ngomthelela omncane, okugcina ukusebenza okuzinzile ngisho nalapho iqembu ligcwele kakhulu.

Ngakolunye uhlangothi, i-KVM ikhanya ikakhulukazi ezindaweni lapho i-Linux isivele izinzile khona futhi i-kernel (i-CPU governor, i-I/O scheduler, i-hugepages, i-NUMA, njll.) kanye ne-network stack kungalungiswa kahle. Ngokwabelana nge-kernel ne-host, isheshe isebenzise ukuthuthukiswa kwehadiwe okufakwe abakhiqizi ku-Linux kernel.

Ukufakwa, ukuxaka, kanye namathuluzi okuphatha

Ijika lokufunda lingenye yezindawo lapho umehluko phakathi kwe-KVM ne-VMware ubonakala khona kakhulu. Nge-KVM, ukufakwa kuhilela ukusetha kuqala uhlelo lwe-Linux (Ubuntu, RHEL, CentOS, Oracle Linux, SUSE, njll.) nokufaka amaphakheji adingekayo: i-KVM/QEMU, i-libvirt , amathuluzi okuphatha afana ne-virt-manager noma i-virt-install, futhi, uma kudingeka, ukulungisa ngesandla i- virtual switch, amabhuloho, kanye ne-bonding . Iguquguquka kakhulu, kodwa idinga ukuqonda okukhulu nge-ecosystem ye-Linux.

Ku-VMware ESXi, ukuhamba komsebenzi kuqondiswa kakhudlwana: ulanda isithombe se-ISO, usishise ku-USB drive noma i-CD, uvule iseva, bese ulandela i- graphical wizard elula kakhulu . Isinyathelo esilandelayo ngokuvamile ukufaka i-vCenter Server Appliance (i-VM elungiselelwe kusengaphambili) kusuka kuleyo ISO, futhi kusukela ngaleso sikhathi kuqhubeke, cishe konke kuphathwa nge-interface yewebhu ye-vSphere Client.

Nsuku zonke, i-KVM iphathwa ngamathuluzi anjenge -virsh (i-CLI ye-libvirt) kanye ne-virt-manager (i-desktop GUI yokuphatha ama-host amaningi e-KVM), kanye ne-SSH, i-VNC, noma i-SPICE yokuxhuma kuma-consoles e-VM. Izixhumi zewebhu ezifana ne-Kimchi ne-Foreman ziyatholakala, futhi amaphrojekthi anjenge-oVirt kanye ne-Red Hat Virtualization anezela ungqimba olubonakalayo oluthuthukisiwe phezu kwe-KVM.

Ku -VMware vSphere , itshe eliyinhloko lokuphatha yi-vCenter, eneklayenti layo lewebhu le-vSphere Client lapho kulawulwa khona ama-ESXi hosts, amaqoqo, amanethiwekhi abonakalayo, izitolo zedatha, i-HA, i-DRS, i-vSAN, i-NSX, nokuningi. Ngaphezu kwalokho, kukhona i-ESXCLI yomugqa womyalo, i-PowerCLI (esekelwe ku-PowerShell) yokwenza cishe yonke into ngokuzenzakalela, kanye ne-interface ye-Host Client yama-hosts e-ESXi azimele ngaphandle kwe-vCenter.

Izindleko, amalayisense kanye nemodeli yokusekela

Ngokuphathelene nezindleko, umehluko ucacile: I-KVM iyisofthiwe yomthombo ovulekile ehlanganiswe ne-Linux futhi ayidingi amalayisense e-hypervisor kanjalo. Itholakala kunoma yikuphi ukusatshalaliswa kwe-Linux yesimanje selokhu yahlanganiswa ne-kernel ngo-2007. Izindleko zivela ekusekelweni kwezentengiselwano (i-Red Hat, i-SUSE, i-Oracle, njll.) kanye nanoma yimaphi amathuluzi okuphatha engeziwe ongase ufune ukuwangeza, kodwa ukusebenza okuyinhloko kumahhala.

I-VMware vSphere iyisisombululo sezentengiselwano esivame ukuba nelayisensi ngokwe-CPU/core kanye nohlelo (Standard, Enterprise Plus, njll.). Ifaka amalayisense e-ESXi kanye ne-vCenter, futhi uma ufuna ukwengeza imikhiqizo efana ne -NSX, vSAN, Tanzu, Horizon, noma i-vRealize , ngayinye idinga ilayisensi yayo eyengeziwe. Kukhona uhlelo lwamahhala lwe-ESXi (vSphere Hypervisor), kodwa inemikhawulo ebalulekile : ama-API okufunda kuphela, akukho ukuphathwa kwe-vCenter, akukho ukwesekwa kobuchwepheshe, futhi akukho khono lokusebenzisa izixazululo zesipele ezithembele kuma-API.

Ngokuphathelene nosekelo, i-VMware inikeza usekelo lwebhizinisi amahora angama-24 ngosuku, izinsuku eziyi-7 ngesonto ngokwenkontileka, kanye nokufinyelela olwazini lwayo, izibuyekezo, ama-patches, kanye nosizo oluqondile. Nge-KVM, usekelo "olusemthethweni" luncike kumhlinzeki wakho wokusabalalisa (i-Red Hat, i-Oracle, i-SUSE, njll.) noma eqenjini lakho le-IT, futhi uhlala unosekelo lomphakathi okhuthele kakhulu, kodwa akekho nomthengisi we-KVM ongathumela kuye ithikithi losekelo ngaphandle kokuthi unkontileka nomthengisi othile.

Ukuhambisana kwehadiwe kanye nemikhawulo yokulinganisa

Ukuhambisana kwehadiwe kungenye into ehlukanisayo. Njengoba i-KVM isekelwe ku-Linux , ithola uhlu olubanzi lwehadiwe olusekelwa yi-kernel: ama-CPU angu-x86 ane- VT-x/AMD-V , izinhlobo eziningi zabalawuli bediski, ama-adapter enethiwekhi, izakhiwo ezifana ne-ARM noma i-PowerPC kwezinye izinhlobo, njalo njalo. Uma nje i-kernel inomshayeli, i-KVM ivame ukusebenza kulowo msingathi ngaphandle kwezinkinga eziningi kakhulu.

I-VMware ESXi idinga ukuthi iseva kanye nezingxenye zibe kuhlu lwayo lokuhambisana kwehadiwe (i-HCL) . Lokhu kuqinisekisa abashayeli abaqinisekisiwe kanye nokusebenza kahle, kodwa kunciphisa ukusetshenziswa kwayo kwihadiwe endala noma yakamuva kakhulu engakayitholi inqubo yokuqinisekiswa. Kumaphrojekthi amakhulu, lokhu kungandisa izindleko zepulatifomu ngenxa yesidingo sokuthenga ihadiwe ethile enconywe yi-VMware.

Ngokuphathelene nemikhawulo, ukusatshalaliswa kwezentengiselwano okuhlanganisa i-KVM kunikeza izibalo ezibonisayo. Isibonelo, ezindaweni ezithile, amanani afinyelela kuma -cores e-CPU angu-384 kanye ne-6 TB ye-RAM ngomsingathi ngamunye asekelwa, ngama-VM angaba ngu-600 ngesikhathi esisodwa, kanye nama-vCPU afinyelela ku-256 (noma ngaphezulu ezinguqulweni zakamuva) kanye nama-terabytes amaningana e-RAM ebonakalayo angafinyelelwa nge-VM ngayinye . Lokhu kuncike ekusatshalalisweni (i-Red Hat, i-Oracle Linux, i-SUSE) kanye nokuhlolwa kokuqinisekisa okwenziwa ngumthengisi ngamunye.

Ku- VMware vSphere , imibhalo esemthethweni ibeka imikhawulo ephezulu kakhulu: kufika kuma -CPU anengqondo angu-896 kanye nama-TB angu-24 e-RAM nge-host ye-ESXi , ama-VM angu-1,024 nge-host, ama-vCPU angu-4,096 ahlanganisiwe, ama-vCPU angu-256 nge-VM, ngaphezu kwama-TB angu-6 e-RAM nge-VM, amadiski abonakalayo afika ku-62 TB, kanye namaqoqo ama- host afika ku-64 kanye nama-VM angu-8,000 . Ezingeni le-vCenter, kufika kuma-host e-ESXi angu-2,500 kanye nama-VM angu-40,000 ngesibonelo ngasinye kungaphathwa, okushiya isikhala esikhulu sokukhula.

Ukuphepha: ukuhlukaniswa, ukubethela, kanye nokuthobela imithetho

Ukuphepha kwe-Hypervisor kubalulekile: uma othile ebeka engcupheni i-host, unomnyango ovulekile kuwo wonke ama-VM kanye nedatha yawo. I-KVM isebenzisa uhlelo lokuphepha lwe-Linux ukuqinisa ukuhlukaniswa. Isici sayo esiyinhloko ukusetshenziswa okuhlangene kwe -SELinux (Security-Enhanced Linux) kanye ne-sVirt (Secure Virtualization) . I-SELinux ichaza izinqubomgomo zokulawula ukufinyelela okuphoqelekile (MAC), kanti i-sVirt yandisa lezi zinqubomgomo kuma-VM, imaka izinqubo kanye nezithombe zediski ukuze zihlukaniswe.

Ngaphezu kwalokho, ungasebenzisa ama-iptables/nftables ukuze uvikele i-firewall ethuthukisiwe, i-UEFI secure boot kumishini yezivakashi (ngokucushwa okuthile ngesandla), kanye nobuchwepheshe bokubethela imemori njenge-TME/MKTME kuhadiwe ehambisanayo. Ezingeni lediski, i-KVM ikuvumela ukuthi ubethele izithombe ze-QCOW2 nge-128-bit AES ngokusobala kusivakashi, noma udlulisele ukubethela ohlelweni lwefayela lomsingathi noma ohlelweni lokusebenza lwesivakashi uqobo.

I-VMware vSphere nayo iyazikhandla kule ndawo, inesethi yezici ezenzelwe izindawo ezilawulwayo (i-HIPAA, i-PCI DSS, njll.). Inikeza i- firewall ehlanganisiwe ku-ESXi , ukwesekwa kwe-Secure Boot UEFI, ukuhlanganiswa ne-TPM kanye ne-vSphere Trust Authority, ukuphathwa kwe-granular kwezimvume nezindima, kanye nokubethela komshini obonakalayo ngokuhlanganiswa ne-KMS yangaphandle noma umhlinzeki wokhiye we-vSphere wasendaweni.

Ama-VM ku-VMware angasebenzisa ukuphepha okusekelwe ku -vTPM kanye ne-virtualization, kanti i-NSX inikeza ukuphepha okuseceleni okusatshalaliswe (i-microsegmentation, i-firewall esatshalaliswe, i-IDS/IPS kuye ngohlobo). Ngaphezu kwalokho, i-VMware inikeza amathuluzi okuqapha ukuhambisana nomthetho kanye nokuqinisekisa ukucushwa kwe-hypervisor, okwenza kube lula ukuvumelanisa ipulatifomu nemithetho eqinile.

Amanethiwekhi abonakalayo kanye nokuxhumeka

Ezingeni lenethiwekhi, i-KVM incike emandleni e-kernel ye-Linux namathuluzi athile. Kuma-switch abonakalayo, i-Open vSwitch (OVS) ivame ukusetshenziswa , ivumela amabhuloho abonakalayo omphakathi noma angasese, ukushintshana okusatshalaliswa phakathi kwama-host, kanye nokusekelwa kwama-VLAN, ama-VXLAN, ama-QoS, nezinye izici ezithuthukisiwe. Amabhuloho e-Linux ajwayelekile nawo angadalwa, futhi ukubopha noma ukusebenzisana kungasetshenziswa ukwengeza izixhumanisi noma ukumisa i-redundancy.

Izixhumi zenethiwekhi ze-Virtio zisekela ama-VLAN futhi zingahlelwa nge -libvirt , okuhlanganisa ukuphathwa kwenethiwekhi ebonakalayo kanye neseva ye-DHCP ehlanganiswe ne-QEMU. Amandla e-firewall abanzi njenge-stack yenethiwekhi ye-Linux uqobo, futhi ama-VXLAN, ama-tunnel, ama-VPN, nokuningi kungamiswa kusetshenziswa amathuluzi ajwayelekile e-ecosystem.

Ku -VMware vSphere, inethiwekhi isekelwe ezinhlotsheni ezimbili zokushintsha: i -vSwitch ejwayelekile (elungiselelwe ngomsingathi ngamunye) kanye ne- Distributed vSwitch (ephethwe phakathi nendawo kusuka ku-vCenter). Zombili zisekela ama-VLAN, i-NIC isebenzisana ekulinganiseni umthwalo kanye nokwehluleka, kanye nezinqubomgomo zokuphepha eziyisisekelo. Kunethiwekhi ethuthukisiwe echazwe yisoftware (i-microsegmentation, i-VXLAN, i-load balancers, izinqubomgomo ezisatshalaliswa), kusetshenziswa i-VMware NSX.

Ukulungiselela ukuhlanganiswa kwezixhumanisi, amaqembu echweba, izinqubomgomo zethrafikhi, noma amanethiwekhi e-vMotion kanye nesitoreji ngokuvamile kulula kakhulu ukuyisebenzisa ku-vSphere GUI kunokukwenza konke nge-CLI ku-Linux, yize i-KVM inikeza inkululeko eyengeziwe yezimo "ezingavamile" uma ukhululekile nge-iproute2, i-OVS, nokunye okunjalo.

Isitoreji, amafomethi ediski, kanye nokufuduka

Nge -KVM , cishe noma yini i-Linux engayibeka njengesitoreji esingokoqobo noma esinengqondo ingasetshenziswa: ama-SAS, SATA, NVMe disks, LVM volumes, NFS, iSCSI, SAN, NAS, njll. Ama-VM angasebenzisa izithombe zediski ezibonakalayo noma i-Raw Device Mapping (i-device noma i-volume passthrough). Kungenzeka futhi ukunamathisela ngqo ivolumu ye-LVM ku-VM.

Amafomethi ezithombe zomdabu angama -raw (img) kanye ne -qcow2 . Ifomethi eluhlaza ilula kakhulu futhi iyashesha (cishe i-10% ngokushesha kunefomethi enezendlalelo ezengeziwe), kodwa ayisekeli izifinyezo zangaphakathi noma ama-backups akhuphukayo ezingeni le-block. I-Qcow2, ngakolunye uhlangothi, inikeza izifinyezo, ukucindezela, ukubethela, ukuhlinzeka okuncane, kanye nokusekelwa kwe-TRIM/UNMAP , okuvumela ukuthi ubuyisele isikhala esingasetshenziswanga ngamathuluzi afana ne-virt-sparsify. Ngaphezu kwalokho, i-KVM iyaqonda amanye amafomethi afana ne-VMDK (kusuka ku-VMware), i-VDI (VirtualBox), i-VHDX (Hyper-V), nezinye eziningi, okwenza kube lula ukufuduka phakathi kwamapulatifomu.

Ku -VMware ESXi , ifomethi yediski ezenzakalelayo yi -VMDK . Idiski ngayinye ngokuvamile inesichazi se-.vmdk kanye nefayela eliyisicaba le-.vmdk eliqukethe idatha. Ukunikezwa okuncane nokujiyile kuyasekelwa, futhi isitolo sedatha sivame ukubanjwa ku- VMFS noma ku-NFS. Amadiski angasebenzisa i-unmaps ezenzakalelayo ukuze abuyisele isikhala, kanti i-Raw Device Mapping (RDM) ingasetshenziswa ukumepha ama-LUN ngqo kuma-VM.

Ngokuthuthwa kwe-VM , i-KVM inikeza ukuthuthwa bukhoma phakathi kwama-host inqobo nje uma abelana ngesitoreji, kanye nokuthuthwa kwesitoreji (ukuhambisa amafayela e-VM komunye umnikazi) ezimweni ezithile, ngezinhlelo zokwandisa ukuthuthwa kwesitoreji bukhoma. I-VMware inikeze i-vMotion (ukuthuthwa kwe-VM bukhoma phakathi kwama-host) kanye ne-Storage vMotion (ukuthutha amadiski phakathi kwezitolo zedatha ngaphandle kokuvala i-VM) iminyaka eminingi, kokubili kupholishwe kakhulu futhi kuhlanganiswe kahle ekuphathweni kweqembu.

Ukuhlanganisa, ukutholakala okuphezulu kanye nokulinganisela umthwalo

Ekuhlanganiseni, i-KVM inikeza izingxenye, kodwa hhayi umkhiqizo "ovaliwe" ofana ne-vSphere. Ukuze kube nokutholakala okuphezulu, amathuluzi afana ne -DRBD (ukuphindaphindwa kwe-block kunethiwekhi), i-Heartbeat, kanye ne-Pacemaker asetshenziswa njengabaphathi bezinsiza zeqembu. Ukucushwa kwe-failover phakathi kwama-node kungenzeka , kodwa ngokuvamile kudinga imisebenzi eminingi yesandla kanye nobuchwepheshe obukhulu.

Ukulinganisela umthwalo okuzenzakalelayo akuyona into ejwayelekile; ngokuvamile kuncike kumaphrojekthi afana ne -oVirt noma i-Red Hat Virtualization , akha ungqimba lokuphatha oluthuthukisiwe phezu kwe-KVM ukuze ahlinzeke ngokufuduka okuzenzakalelayo ngokusekelwe kumthwalo, ukutholakala okuphezulu (HA), izinqubomgomo, nezinye izici. Ngokuvamile, ukusetha iqoqo le-KVM elilungiswe kahle ne-HA akulula ngaphandle kwesisombululo sezentengiselwano esihlanganisa naso.

Ngokuphambene nalokho, i-VMware vSphere ivelele ngokufanele ngamakhono ayo okuhlanganisa. Izici ezifana ne -vSphere HA zivumela ama-VM ukuthi aqalwe kabusha ngokuzenzakalelayo kwamanye ama-host uma i-node yehluleka, futhi i-DRS (Distributed Resource Scheduler) ilinganisa kabusha umthwalo ngokuhambisa ama-VM phakathi kwama-host esebenzisa i-vMotion ngokusekelwe ezinqubomgomo zokusetshenziswa kwe-CPU ne-RAM. Ukubekezelelana Kwephutha kuyatholakala nakwamanye ama-VM, kugcina ikhophi yesikhathi sangempela futhi kuqinisekisa ukuqhubeka okungenamthungo uma kwenzeka ukwehluleka kwe-host.

Ngaphezu kwalokho, i-Distributed Power Management ingavala ama-host lapho umthwalo uphansi bese iwaqala kabusha uma kudingeka, igcine amandla ngaphandle kokulahlekelwa amandla. Ukulungiselela lezi zindlela kulula kakhulu kusuka ku-vSphere Client, okwenza i-VMware ibe inketho elula kakhulu uma udinga ukuhlanganiswa okuyinkimbinkimbi ngaphandle kokubhekana nekhonsoli.

Ukuhambisana kwesistimu yezivakashi kanye nesitsha

Kokubili i-KVM kanye ne-VMware ESXi zisekela izinhlobo eziningi zezinhlelo zokusebenza zezivakashi: i-Windows (kusukela ezinguqulweni ezindala kakhulu njenge-NT noma i-95 kuya kwezikhona manje), ukusatshalaliswa okuningi kwe-Linux (Ubuntu, i-Debian, i-RHEL, i-CentOS, i-Fedora, i-Oracle Linux, i-SUSE, i-Kali, njll.), ama-derivatives e-BSD (i-FreeBSD, i-OpenBSD), i-Solaris, i-OpenSolaris, i-NetWare, i-MS-DOS kanye ne-macOS enezinguquko ezithile kanye nemikhawulo.

Lapho kukhona umehluko khona kusekuhlanganisweni nomhlaba weziqukathi . Nge-KVM, ungasebenzisa i-Docker noma i-Kubernetes ngaphakathi kwama-VM, njenganoma iyiphi enye i-hypervisor, kodwa kukhona nabashayeli abathile (i-docker-machine-driver-kvm) abakuvumela ukuthi udale imishini ye-Docker phezu kwe-KVM ngokusobala, uthuthukise ukuhlukaniswa nokusebenza uma kuqhathaniswa nokusetha ama-VM ngesandla. Ngaphezu kwalokho, i-KVM ihlangana kahle kakhulu ne -OpenStack , lapho ihlukaniswa khona njengeQembu A (ukuhambisana okuphezulu) futhi ivame ukuba yi-hypervisor ethandwayo emafwini angasese e-Linux.

I-VMware, ngakolunye uhlangothi, yenze umkhankaso wokuqala ne -vSphere Integrated Containers (esebenzisa izitsha njenge-VM ezilula isebenzisa i-Photon OS), futhi ithathe igxathu elikhulu phambili nge -VMware Tanzu , ehlanganisa ama-Kubernetes nezitsha ngqo ku-ESXi. I-Tanzu iguqula ama-host e-ESXi abe ama-node e-Kubernetes (isebenzisa i-Spherelet), iveza indiza yokulawula ye-DevOps, iphathwa kusuka ku-vCenter, futhi isebenzisa i-NSX-T kanye nesitoreji esabiwe ukuze ilethe indawo ephelele yezitsha zebhizinisi (naphezu kwezindleko ezengeziwe zelayisensi).

Ngamafuphi, uma uhileleke kakhulu ezindaweni zemvelo zamafu ezisekelwe ku-Linux, i-KVM + OpenStack/Kubernetes ifanelekile; uma usuvele unemali eningi ku-VMware futhi ufuna izitsha ezihlanganiswe nepulatifomu yakho ye-vSphere nazo zonke izinto zokuxhumana kanye nokuphepha ezengeziwe, i-Tanzu iyindlela enamandla.

Ukuhlanganiswa nezinye izingxenye: i-AD, i-OpenStack kanye ne-ecosystem

I-VMware vSphere ihlangana ngokwendabuko ne -Microsoft Active Directory ukuze kuqinisekiswe futhi kulawulwe ukufinyelela okusekelwe ezindimeni. Abasebenzisi bangangena ngemvume ku-vSphere Client ngemininingwane yabo yesizinda bese babela izimvume ze-granular ezintweni (ama-VM, izitolo zedatha, amaqoqo, njll.). Ngaphezu kwalokho, i-VMware suite ihlangana kalula: i-NSX yokuxhumana, i-vSAN yokugcinwa okuchazwe yisofthiwe, i-Horizon ye-VDI, i-vRealize yokwenza izinto ngokuzenzakalela kanye nokuqapha, nokuningi.

Ezweni le -KVM , ukuhlanganiswa kwe-Active Directory kungenzeka ngokuphelele ngokujoyina i-Linux host (noma ama-VM) kusizinda, kodwa ukucushwa kuhilela ukubhekana namathuluzi afana ne-sssd, i-winbind, noma i-realmd. Ngokuhlela amafu, i-KVM ikhanya nge -OpenStack , lapho kuyisinqumo esikhethwayo (iQembu A), kuyilapho i-ESXi ihlukaniswa njengeQembu B: elisekelwayo, kodwa kancane kancane liyinto ebalulekile ohlelweni lwe-OpenStack.

Ngokuphathelene ne-vendor lock-in, i-KVM, njengoba ingumthombo ovulekile futhi ingenayo i-vendor lock-in , ivumela ukuhlanganiswa cishe nanoma iyiphi isofthiwe yezentengiselwano noma yomthombo ovulekile, okuvumelanisa i-stack nezidingo zakho. Nge-VMware, ngokuklama, uvame ukwakha ikhambi elizungeze uhlelo lwayo lokulawula kanye nemikhiqizo, okunikeza ukuvumelana okuningi, kodwa futhi okukubopha kumalayisense ayo kanye nohlelo lomgwaqo.

Isipele, ukukopisha kanye nokuvikelwa kwedatha

Indlela ama-VM agcinwa ngayo yenza umehluko omkhulu. Ku-KVM, izindlela eziyisisekelo zihilela ukusebenzisa ama-virsh kanye nama-disk snapshots. Uma amavolumu e-LVM esetshenziswa kuma-VM, ama-snapshots e-LVM angadalwa futhi agcinwe kusukela kulawo mavolumu, okunikeza ukusebenza okuhle kakhulu kodwa okwenza ukufuduka kanye nokuphathwa kwesikhala kube nzima kakhulu.

Ngezithombe ezingavuthiwe , ukwenza amakhophi angemuva kungenzeka kuphela uma i-VM ivuliwe, njengoba kungekho ukwesekwa kwesithombe sendawo. Nge -qcow2 , amakhophi angemuva angadalwa ku-VM esebenzayo (edinga i-ejenti yezivakashi ye-QEMU ohlelweni lokusebenza lwezivakashi kanye nokucushwa kwesiteshi se-org.qemu.guest_agent.0), bese idatha ingakopishwa njalo. Kunezixazululo ezisebenzisa i-libvirt kanye ne-oVirt ukuze kuqaliswe amakhophi angemuva asekelwe ekushintsheni kwebhulokhi.

Ukuze kuphindaphindwe, i-KVM ingasebenzisa i-DRBD ezingeni le-Linux kernel block, iphindaphinde amadiski phakathi kwama-node ukuze ifake amaqoqo atholakala kalula, yize ngokuvamile ngaphandle kokubethela ngaphandle kokuthi ithrafikhi ifakiwe kuma-VPN noma okufanayo.

Ku -VMware vSphere , ukuvikelwa kwedatha kuqinile ngenxa yama -API okuvikela idatha e-vStorage . Abathengisi bezipele (i-Veeam, i-NAKIVO, njll.) basebenzisa lawa ma-API ukudala izithombe ezihambisanayo zama-VM asebenzayo, ngokuthula kohlelo lokusebenza nge-VMware Tools, kanye nokusebenzisa i- Changed Block Tracking (CBT) , evumela izipele ezikhushulwayo ezisebenza kahle kakhulu ngokukopisha amabhulokhi aguquliwe kuphela.

Izixazululo zesipele ze-VMware zivame ukusekela ukubuyiselwa kwe-VM okusheshayo , ukubuyiselwa kwe-granular kwamafayela noma izinto zohlelo lokusebenza (i-Exchange, i-SQL, i-AD, njll.), kanye nokukopishwa phakathi kwama-host noma amasayithi e-ESXi. Uhlelo lwamahhala lwe-ESXi aluzivezi lezi API, ngakho-ke kuleso simo, uzodinga izikripthi kanye nama-backups ngesandla ama-VM asebenza ngamandla, okuyinto engamukeleki ngokuvamile ekukhiqizweni.

Ekugcineni, uma ukuvikelwa kwedatha yezinga le-hypervisor kanye nokuhlanganiswa nezixazululo eziningi zokusekelayo kwezentengiselwano kubalulekile, i-vSphere inikeza uhlelo oluvuthiwe nolufanayo. I-KVM ivumela amasu aqinile, kodwa ngezindlela ezahlukahlukene kanye nokuthembela okukhulu kobuchwepheshe bethimba kanye namathuluzi akhethiwe.

I-KVM ibaluleke nini futhi i-VMware ibaluleke nini?

Ukukhetha phakathi kwe -KVM ne-VMware akukhona ukuthi umuntu "ungcono" ngokuphelele, kodwa kunalokho kukhetha ithuluzi elifanele umongo. Ezinhlanganweni ezinesabelomali esincane , isiko eliqinile le-Linux, kanye nesifiso sokwenza ngokwezifiso ipulatifomu, i-KVM iyakhanga kakhulu: ayidingi amalayisense e-hypervisor, inikeza ukuhambisana okubanzi kwehadiwe, futhi inikeza amakhono amaningi okulungisa. Ilungele izinkampani ezintsha, abahlinzeki be-VPS abancane, amalabhorethri okuhlola, izindawo ezigxile kwi-Linux, noma amafu azimele asekelwe ku-OpenStack.

I-VMware ESXi kanye ne-vSphere zifaneleka kakhulu ezindaweni ezidinga indlela ehlanganisiwe kakhulu, ukwesekwa okuqinile kwezentengiselwano, kanye nokuphathwa okulula kwamaqoqo amakhulu. Izinkampani esezisebenzisa imikhiqizo ye-VMware (i-Horizon, i-NSX, i-vSAN, i-Tanzu), ezinokutholakala okuqinile, ukuthobela imithetho, kanye nezidingo zokusekela ezingama-24/7, noma ezihlonipha ikhonsoli ephucuziwe kakhulu, ephakathi, ngokuvamile zikhetha ukutshala imali kumalayisense e-vSphere futhi zakhe isu lazo lokwenza izinto nge-virtualization kuleyo ndawo yokusebenza.

Ngamagama asebenzayo kakhulu, i-KVM iyisisombululo esisebenza kahle kakhulu, esingabizi kakhulu esivuza amaqembu anolwazi lwe-Linux kanye nokubekezelela ubunzima obuthile. Ngakolunye uhlangothi, i-VMware inikeza ulwazi "oluvaliwe kodwa olulula": ukhokhela amalayisense kanye nokugcinwa, kodwa ngokubuyisela uthola ipulatifomu ye-virtualization evuthiwe kakhulu ene-clustering ethuthukisiwe, amathuluzi okusekelayo ahlelwe kahle, kanye nokuhlanganiswa okuqinile kakhulu ne-stack yayo yonke.

I-athikili ehlobene:

Ukwenziwa kwe-server virtualization: umhlahlandlela ophelele, izinzuzo, kanye nokuphepha