Mu miterere ya none y’imiyoboro ya interineti, VLAN (Virtual Local Area Network) na VXLAN (Virtual Extended Local Area Network) ni byo ikoranabuhanga rikoreshwa cyane mu gukora virtualization y’imiyoboro ya interineti. Bishobora gusa nkaho bisa, ariko mu by’ukuri hari itandukaniro ry’ingenzi.
VLAN (Umuyoboro w'Akarere k'Ikoranabuhanga)
VLAN ni ikoranabuhanga rihinnye ry’urubuga rwa interineti (Virtual Local Area Network). Ni uburyo bugabanya ibikoresho bifatika muri LAN mu miyoboro myinshi hakurikijwe isano ishingiye ku ikoranabuhanga. VLAN ishyirwaho ku buryo bwo gusimburanya ibikoresho bya interineti mu matsinda atandukanye ashingiye ku ikoranabuhanga. Nubwo ibyo bikoresho bishobora kuba biri ahantu hatandukanye, VLAN ibafasha kuba mu itsinda rimwe, bigatuma habaho imicungire ihindagurika kandi ikavangwa.
Ishingiro ry'ikoranabuhanga rya VLAN riri mu kugabanya imiyoboro y'itumanaho. Swichi zicunga urujya n'uruza rw'abantu hashingiwe ku kimenyetso cya VLAN (ikimenyetso cya VLAN). Ama-ID ya VLAN ari hagati ya 1 na 4095 kandi ubusanzwe aba afite imibare 12 y'ibinyabiziga bibiri (ni ukuvuga hagati ya 0 na 4095), bivuze ko swichi ishobora kwakira VLans zigera ku 4.096.
Imikorere
○ Irangamimerere rya VLAN: Iyo paki yinjiye muri switch, switch ifata VLAN paki igomba koherezwa hashingiwe ku makuru ya VLAN ID ari muri paki. Ubusanzwe, protocole ya IEEE 802.1Q ikoreshwa mu gushyira VLAN ikimenyetso ku rufatiro rw'amakuru.
○ Urubuga rwa VLAN Broadcast: Buri VLAN ni urubuga rwigenga rwo gusakaza. Nubwo VLans nyinshi zaba ziri kuri switch imwe, gusakaza kwazo biratandukanye, bigagabanya urujya n'uruza rw'amajwi atari ngombwa.
○ Kohereza Amakuru: Iyi swichi yohereza amakuru kuri port ijyanye nayo hakurikijwe tagi zitandukanye za VLAN. Niba ibikoresho biri hagati ya VLans zitandukanye bikeneye kuvugana, bigomba koherezwa binyuze mu bikoresho bya layer 3, nka routers.
Tuvuge ko ufite ikigo gifite amashami menshi, buri kimwe muri byo gikoresha VLAN itandukanye. Ukoresheje iyi mashini, ushobora kugabanya ibikoresho byose biri mu ishami ry'imari muri VLAN 10, ibyo mu ishami ry'ubucuruzi muri VLAN 20, n'ibyo mu ishami rya tekiniki muri VLAN 30. Muri ubu buryo, umuyoboro hagati y'amashami uba waratandukanye burundu.
Ibyiza
○ Umutekano Unoze: VLAN ishobora gukumira byimazeyo kwinjira mu buryo butemewe hagati ya VLans zitandukanye igabanya serivisi zitandukanye mu miyoboro itandukanye.
○ Imicungire y'Urubuga rw'Ikoranabuhanga: Mu gutanga VLans, inkubi z'umuyaga zishobora kwirindwa kandi urubuga rushobora gukora neza kurushaho. Paketi z'itumanaho zizakwirakwizwa gusa muri VLAN, bigabanye ikoreshwa rya bandwidth.
○ Guhuza imiyoboro y'itumanaho: VLAN ishobora kugabanya imiyoboro y'itumanaho mu buryo bworoshye bitewe n'ibyo ubucuruzi bukeneye. Urugero, ibikoresho byo mu ishami ry'imari bishobora gushyirwa kuri VLAN imwe nubwo byaba biri ku igorofa ritandukanye.
Imbibi
○ Uburyo bwo kwagura amakuru: Kubera ko VLans zishingikiriza ku buryo busanzwe bwo gusimbuza amakuru no gushyigikira VLans zigera kuri 4096, ibi bishobora kuba imbogamizi ku miyoboro minini cyangwa ibidukikije binini bya virtualized.
○ Ikibazo cyo guhuza urubuga rwa interineti: VLAN ni umuyoboro w’aho uherereye, itumanaho rya interineti rya interineti rigomba gukorwa binyuze muri switch cyangwa router y’urwego rutatu, bishobora kongera ubukana bw’umuyoboro.
Ishusho y'Ikoreshwa
○ Kwishyira mu kato no mu mutekano mu miyoboro y’ibigo: VLans zikoreshwa cyane mu miyoboro y’ibigo, cyane cyane mu bigo binini cyangwa mu nzego zitandukanye. Umutekano no kugenzura uburyo umuyoboro winjira bishobora kwemezwa no kugabanya amashami atandukanye cyangwa sisitemu z’ubucuruzi binyuze muri VLAN. Urugero, ishami ry’imari rikunze kuba riri mu yindi VLAN n’ishami ry’ubushakashatsi n’iterambere kugira ngo hirindwe ko abantu batabigeraho batabifitiye uburenganzira.
○ Kugabanya inkubi y'umuyaga mu isakazwa ry'amakuru: VLAN ifasha kugabanya urujya n'uruza rw'amakuru. Ubusanzwe, amapaki y'amakuru azakwirakwizwa mu miyoboro yose, ariko mu bidukikije bya VLAN, urujya n'uruza rw'amakuru ruzakwirakwizwa gusa muri VLAN, ibi bikagabanya umutwaro w'amakuru uterwa n'inkubi y'umuyaga mu isakazwa ry'amakuru.
○ Umuyoboro Muto cyangwa Uciriritse: Ku bigo bimwe na bimwe bito n'ibiciriritse, VLAN itanga uburyo bworoshye kandi bufite akamaro bwo kubaka umuyoboro wihariye, bigatuma imicungire y'umuyoboro irushaho kuba myiza.
VXLAN (Umuyoboro wagutse w’ahantu nyaburanga)
VXLAN (Virtual Extensible LAN) ni ikoranabuhanga rishya ryateguwe kugira ngo rikemure imbogamizi za VLAN isanzwe mu miyoboro minini y’amakuru no mu buryo bwa virtualization. Ikoresha ikoranabuhanga rya encapsulation kugira ngo yohereze amakuru ya layer 2 (L2) binyuze mu muyoboro wa Layer 3 (L3) usanzweho, uca mu mupaka wa VLAN wo kwaguka.
Binyuze mu ikoranabuhanga ryo gukurura amakuru no gukoresha uburyo bwo gukurura amakuru, VXLAN "ipfunyika" amakuru y’ibanze ya paki ya 2 mu ma paki ya 3 ya IP, kugira ngo amakuru ashobore koherezwa mu muyoboro wa IP usanzweho. Ishingiro rya VXLAN riri mu buryo bwayo bwo gukurura amakuru no kuyakuramo, ni ukuvuga ko imiterere y’amakuru ya L2 isanzwe ipfunyikwa na protocole ya UDP kandi yoherezwa binyuze mu muyoboro wa IP.
Imikorere
○ Gushyira mu bikorwa VXLAN Header Encapsulation: Mu gushyira mu bikorwa VXLAN, buri paki ya 2 izaba ifunze nk'ipaki ya UDP. Gushyira mu bikorwa VXLAN birimo: VXLAN network identifier (VNI), UDP header, IP header n'andi makuru.
○ Tunnel Terminal (VTEP): VXLAN ikoresha ikoranabuhanga ryo gukurura imiyoboro y'amazi kandi amapaki ashyirwa mu mfuruka kandi nta mfuruka binyuze mu bikoresho bibiri bya VTEP. VTEP, VXLAN Tunnel Endpoint, ni ikiraro gihuza VLAN na VXLAN. VTEP ishyira mu mfuruka amapaki ya L2 yakiriwe nk'amapaki ya VXLAN hanyuma ikayohereza kuri VTEP, nayo igashyira mu mfuruka amapaki yashyizwe mu mfuruka y'umwimerere ya L2.
○ Uburyo bwo gushyira VXLAN mu kabati: Nyuma yo gushyira umutwe wa VXLAN ku gasanduku k'amakuru k'umwimerere, agasanduku k'amakuru kazoherezwa kuri VTEP y'aho kagenewe binyuze kuri interineti ya IP. Agasanduku k'amakuru ka VTEP gakuraho kabati k'amakuru hanyuma kakayohereza ku mukiriya ukwiye hashingiwe ku makuru ya VNI.
Ibyiza
○ Ishobora kwaguka: VXLAN ishyigikira imiyoboro ya virtual networks (VNI) igera kuri miliyoni 16, ikaba iruta cyane indangamuntu za VLAN 4096, bigatuma iba nziza cyane ku bigo binini by'amakuru n'ibidukikije byo mu bicu.
○ Inkunga y'Ikigo cy'amakuru atandukanye: VXLAN ishobora kwagura umuyoboro wa interineti hagati y'ibigo byinshi by'amakuru ahantu hatandukanye, ikagabanya inzitizi za VLAN isanzwe, kandi ikwiriye ahantu hagezweho ho gukoresha ikoranabuhanga rya cloud computing na virtualization.
○ Koroshya Umuyoboro w’Amakuru: Binyuze muri VXLAN, ibikoresho by’ikoranabuhanga biva mu nganda zitandukanye bishobora gukorana, bigashyigikira ibidukikije bikodeshwa n’abantu benshi, kandi byoroshya imiterere y’amakuru manini.
Imbibi
○ Igoye cyane: Imiterere ya VXLAN iragoye cyane, irimo gufunga imiyoboro y'amazi, imikoreshereze ya VTEP, nibindi, bisaba inkunga y'inyongera ya tekiniki kandi byongera imiterere y'imikorere n'iy'ubuziranenge.
○ Ubutinde bwa Network: Bitewe n'uburyo bwo kongera gutunganya busabwa n'uburyo bwo gufunga no gukuramo udupapuro, VXLAN ishobora guteza ubutinde bwa network, nubwo ubu buryo busanzwe ari buto, ariko bugomba kwitabwaho mu bihe bisaba imikorere myinshi.
Uburyo bwo Gukoresha VXLAN
○ Gukoresha ikoranabuhanga rya interineti mu kigo cy’amakuru: VXLAN ikoreshwa cyane mu bigo binini by’amakuru. Seriveri zo mu kigo cy’amakuru zikoresha ikoranabuhanga rya virtualization, VXLAN ishobora gufasha mu gukora umuyoboro wa virtualization hagati ya seriveri zitandukanye, birinda ko VLAN ishobora kwaguka.
○ Ibidukikije by'ibicu by'abakodesha benshi: Mu bicu bya leta cyangwa iby'abantu ku giti cyabo, VXLAN ishobora gutanga umuyoboro wigenga kuri buri mukodesha no kumenya umuyoboro wa buri mukodesha binyuze muri VNI. Iyi miterere ya VXLAN ikwiriye cyane mu bijyanye na mudasobwa igezweho y'ibicu n'ahantu hakodesha benshi.
○ Gupima Umuyoboro mu Bigo by'Amakuru: VXLAN ikwiriye cyane cyane mu bihe aho imiyoboro ya interineti igomba gushyirwa mu bigo byinshi by'amakuru cyangwa mu turere twinshi. Kubera ko VXLAN ikoresha imiyoboro ya IP mu gukusanya amakuru, ishobora gukoresha mu buryo bworoshye amashami atandukanye y'amakuru n'ahantu nyaburanga kugira ngo igere ku kwaguka kw'umuyoboro wa interineti ku rwego rw'isi.
VLAN vs VxLAN
VLAN na VXLAN byombi ni ikoranabuhanga rya virtualization kuri network, ariko bikwiranye n'uburyo butandukanye bwo gukoresha porogaramu. VLAN ikwiranye n'ibidukikije by'umuyoboro muto cyangwa uciriritse, kandi ishobora gutanga uburyo bw'ibanze bwo kwitandukanya no kurinda umuyoboro. Imbaraga zayo zishingiye ku buryo bworoshye, uburyo bworoshye bwo kuyishyiraho, ndetse n'ubufasha bwagutse.
VXLAN ni ikoranabuhanga ryagenewe guhangana n’ikibazo cyo kwagura umuyoboro mugari mu bigo bigezweho by’amakuru n’ibidukikije bya mudasobwa bikoresha ibicu. Imbaraga za VXLAN zishingiye ku bushobozi bwayo bwo gushyigikira amamiliyoni y’imiyoboro ikoresha ibicu, bigatuma iba nziza mu gushyira imiyoboro ikoresha ibicu mu bigo by’amakuru. Inyura mu nzitizi za VLAN mu kwaguka, kandi ikwiriye igishushanyo mbonera cy’umuyoboro kiruhije.
Nubwo izina rya VXLAN risa nkaho ari protocole yo kongera VLAN, mu by'ukuri, VXLAN itandukanye cyane na VLAN bitewe n'ubushobozi bwayo bwo kubaka imiyoboro ya virtual tunnels. Itandukaniro rikomeye hagati yazo ni iri rikurikira:
Ikiranga | VLAN | VXLAN |
|---|---|---|
| Igisanzwe | IEEE 802.1Q | RFC 7348 (IETF) |
| Icyiciro | Icyiciro cya 2 (Umuyoboro w'amakuru) | Urwego rwa 2 hejuru y'Urwego rwa 3 (L2oL3) |
| Gufunga | Umutwe wa Ethernet wa 802.1Q | MAC-muri-UDP (ishyizwe muri IP) |
| Ingano y'indangamuntu | 12-bit (0-4095 VLAN) | 24-bit (VNI miliyoni 16.7) |
| Gushobora kwaguka | Ifite imipaka (VLAN 4094 zikoreshwa) | Irakwirakwira cyane (ishyigikira ibicu by'abakodesha benshi) |
| Gucunga isakazwa | Imyuzure gakondo (muri VLAN) | Ikoresha IP multicast cyangwa head-end replication |
| Hejuru | Hasi (ikimenyetso cya VLAN cya byte 4) | Hejuru (~ 50 bytes: UDP + IP + VXLAN headers) |
| Gushyira mu kato imodoka | Yego (kuri VLAN) | Yego (kuri VNI) |
| Gutwara imiyoboro y'amazi | Nta gufunga imiyoboro (L2 y'ubutaka) | Ikoresha VTEPs (VXLAN Tunnel Endpoints) |
| Ibikoresho byo Gukoresha | LAN nto/ziciriritse, imiyoboro y'ibigo | Ibigo by'amakuru byo mu bicu, SDN, VMware NSX, Cisco ACI |
| Ubushingizi bw'igiti gitandukanya (STP) | Yego (kugira ngo hirindwe ko habaho imiyoboro) | Oya (ikoresha Layer 3 routing, yirinda ibibazo bya STP) |
| Inkunga y'ibikoresho | Bishyigikiwe ku ma swichi yose | Isaba swichi/NICs zikoresha VXLAN (cyangwa software VTEPs) |
| Inkunga y'Ingendo | Bifite imipaka (muri domaine imwe ya L2) | Birushaho kuba byiza (VM zishobora kugenda mu miyoboro mito) |
Ni iki Mylinking™ Network Packet Broker ashobora gukora kuri Network Virtual Technology?
VLAN ifite tagi, VLAN idashyizwemo tagi, VLAN yasimbuwe:
Yashyigikiye guhuza urufunguzo urwo arirwo rwose muri bytes 128 za mbere z'ipaki. Umukoresha ashobora guhindura agaciro k'urufunguzo n'uburebure bw'urufunguzo n'ibikubiye murirwo, no kugena politiki y'umusaruro w'abakoresha hakurikijwe imiterere y'umukoresha.
Gukuraho imiyoboro y'amazi mu muyoboro w'amazi:
Yashyigikiye umutwe wa VxLAN, VLAN, GRE, GTP, MPLS, IPIP wakuwe mu ipaki y'amakuru y'umwimerere hanyuma woherezwa.
Igenzura rya Protocole y'Uburyo bwo Kunyura mu Muyoboro w'Amatafari
Ishyigikiwe ihita igaragaza protocole zitandukanye zo gukurura imiyoboro nka GTP / GRE / PPTP / L2TP / PPPOE / IPIP. Dukurikije imiterere y'umukoresha, ingamba zo gusohora ibicuruzwa zishobora gushyirwa mu bikorwa hakurikijwe urwego rw'imbere cyangwa rw'inyuma rw'imiyoboro
Ushobora kureba hano kugira ngo umenye byinshi ku bijyanye n'ibiUmuhuzabikorwa w'amapaki y'itumanaho.
Igihe cyo kohereza: Kamena-25-2025
