Ƙirƙirar Ma'ajiya Mai Tsaro ta Tsakiya ta amfani da iSCSI Target/Mai ƙaddamarwa akan RHEL/CentOS 7 - Kashi na 12


iSCSI yarjejeniya ce ta toshewa don sarrafa na'urorin ajiya akan hanyoyin sadarwa na TCP/IP, musamman akan nesa mai nisa. iSCSI manufa babban faifai ne mai nisa wanda aka gabatar daga sabar iSCSI mai nisa (ko) manufa. A gefe guda, abokin ciniki na iSCSI ana kiransa Initiator, kuma zai shiga wurin ajiyar da aka raba a cikin na'urar Target.

Anyi amfani da injina masu zuwa a cikin wannan labarin:

Operating System – Red Hat Enterprise Linux 7
iSCSI Target IP – 192.168.0.29
Ports Used : TCP 860, 3260
Operating System – Red Hat Enterprise Linux 7
iSCSI Target IP – 192.168.0.30
Ports Used : TCP 3260

Mataki 1: Sanya Fakiti akan iSCSI Target

Don shigar da fakitin da ake buƙata don manufa (za mu yi hulɗa da abokin ciniki daga baya), yi:

# yum install targetcli -y

Lokacin da shigarwa ya kammala, za mu fara da kunna sabis kamar haka:

# systemctl start target
# systemctl enable target

A ƙarshe, muna buƙatar ƙyale sabis ɗin a cikin firewalld:

# firewall-cmd --add-service=iscsi-target
# firewall-cmd --add-service=iscsi-target --permanent

Kuma ƙarshe amma ba kalla ba, kada mu manta da ba da izinin gano maƙasudin iSCSI:

# firewall-cmd --add-port=860/tcp
# firewall-cmd --add-port=860/tcp --permanent
# firewall-cmd --reload

Mataki 2: Ma'anar LUNs a cikin Target Server

Kafin ci gaba da ma'anar LUNs a cikin Target, muna buƙatar ƙirƙirar kundin ma'ana guda biyu kamar yadda aka yi bayani a cikin Sashe na 6 na jerin RHCSA (Tsarin tsarin ajiya).

A wannan karon za mu sanya musu suna vol_projects da vol_backups sannan mu sanya su cikin rukunin juzu'i mai suna vg00, kamar yadda aka nuna a cikin siffa 1. Ka ji daɗi don zaɓi wurin da aka ware wa kowane LV:

Bayan ƙirƙirar LVs, muna shirye don ayyana LUNs a cikin Target don samar da su don injin abokin ciniki.

Kamar yadda aka nuna a cikin siffa 2, za mu buɗe harsashi targetcli kuma mu ba da umarni masu zuwa, wanda zai haifar da shingen baya biyu (albarkatun ajiya na gida waɗanda ke wakiltar LUN mai farawa zai yi amfani da shi a zahiri) da Iscsi Qualified. Suna (IQN), hanya ce ta magance uwar garken manufa.

Da fatan za a duba shafi na 32 na RFC 3720 don ƙarin bayani kan tsarin IQN. Musamman ma, rubutun da ke bayan alamar alamar (:tgt1) yana ƙayyadaddun sunan manufa, yayin da rubutun da ke gaban (server:) yana nuna sunan mai masaukin manufa a cikin yankin.

# targetcli
# cd backstores
# cd block
# create server.backups /dev/vg00/vol_backups
# create server.projects /dev/vg00/vol_projects
# cd /iscsi
# create iqn.2016-02.com.tecmint.server:tgt1

Tare da matakin da ke sama, an ƙirƙiri sabon TPG (Ƙungiyoyin Target Portal) tare da tsoho portal (wasu biyu da suka ƙunshi adireshin IP da tashar jiragen ruwa wanda shine hanyar da masu farawa zasu iya kaiwa ga manufa) sauraron tashar 3260 na duk adiresoshin IP.

Idan kana so ka ɗaure portal ɗinka zuwa takamaiman IP (ainihin IP na Target, alal misali), share tsohuwar portal ɗin kuma ƙirƙirar sabo kamar haka (in ba haka ba, tsallake waɗannan umarni masu zuwa. Lura cewa don sauƙi mun tsallake su kamar haka. da kyau):

# cd /iscsi/iqn.2016-02.com.tecmint.server:tgt1/tpg1/portals
# delete 0.0.0.0 3260
# create 192.168.0.29 3260

Yanzu muna shirye don ci gaba da ƙirƙirar LUNs. Lura cewa muna amfani da wuraren ajiyar baya da muka ƙirƙira a baya (server.backups da server.projects). An kwatanta wannan tsari a cikin siffa 3:

# cd iqn.2016-02.com.tecmint.server:tgt1/tpg1/luns
# create /backstores/block/server.backups
# create /backstores/block/server.projects

Bangare na ƙarshe a cikin daidaitawar Target ɗin ya ƙunshi ƙirƙirar Jerin Sarrafa Hannu don taƙaita isa ga kowane mai farawa. Tunda sunan na'urar abokin cinikinmu \abokin ciniki, za mu saka wannan rubutun zuwa IQN. Koma hoto 4 don cikakkun bayanai:

# cd ../acls
# create iqn.2016-02.com.tecmint.server:client

A wannan lokaci za mu iya harsashi targetcli don nuna duk abubuwan da aka tsara, kamar yadda muke iya gani a cikin siffa 5:

# targetcli
# cd /
# ls

Don barin harsashi na targetcli, kawai rubuta fita kuma danna Shigar. Za a adana saitin ta atomatik zuwa /etc/target/saveconfig.json.

Kamar yadda kake gani a hoto na 5 a sama, muna da tashar tashar tashar tashar jiragen ruwa 3260 na duk adiresoshin IP kamar yadda aka sa ran. Za mu iya tabbatar da hakan ta amfani da umarnin netstat (duba Hoto 6):

# netstat -npltu | grep 3260

Wannan yana ƙaddamar da daidaitawar Target. Jin kyauta don sake kunna tsarin kuma tabbatar da cewa duk saituna sun tsira daga sake yi. Idan ba haka ba, tabbatar da buɗe tashar jiragen ruwa masu mahimmanci a cikin tsarin Tacewar zaɓi kuma don fara sabis ɗin manufa akan taya. Yanzu muna shirye don saita Mai farawa kuma don haɗawa da abokin ciniki.

Mataki na 3: Saita Ƙaddamarwa Abokin Ciniki

A cikin abokin ciniki za mu buƙaci shigar da kunshin iscsi-initiator-utils, wanda ke ba da daemon uwar garken don ka'idar iSCSI (iscsid) da iscsiadm, mai amfani na gudanarwa:

# yum update && yum install iscsi-initiator-utils

Da zarar an gama shigarwa, buɗe /etc/iscsi/initiatorname.iscsi kuma maye gurbin tsohuwar sunan mai farawa (wanda aka yi sharhi a cikin siffa 7) tare da sunan da aka saita a baya a cikin ACL akan uwar garken (iqn.2016-02.com.tecmint). .server: abokin ciniki).

Sannan ajiye fayil ɗin kuma gudanar da iscsiadm a yanayin ganowa yana nuna maƙasudi. Idan ya yi nasara, wannan umarni zai dawo da bayanin da aka yi niyya kamar yadda aka nuna a hoto 7:

# iscsiadm -m discovery -t st -p 192.168.0.29

Mataki na gaba ya ƙunshi sake farawa da kunna sabis na iscsid:

# systemctl start iscsid
# systemctl enable iscsid

da tuntuɓar manufa a yanayin kumburi. Wannan yakamata ya haifar da saƙon matakin kernel, wanda idan aka kama ta dmesg yana nuna alamar na'urar cewa an ba da LUNs masu nisa a cikin tsarin gida (sde da sdf a cikin siffa 8):

# iscsiadm -m node -T iqn.2016-02.com.tecmint.server:tgt1 -p 192.168.0.29 -l
# dmesg | tail

Daga wannan gaba, zaku iya ƙirƙirar ɓangarori, ko ma LVs (da tsarin fayiloli a saman su) kamar yadda zaku yi da kowace na'urar ajiya. Don sauƙi, za mu ƙirƙiri partition na farko akan kowane faifai wanda zai mamaye sararin samaniya gaba ɗaya, kuma mu tsara shi da ext4.

A ƙarshe, bari mu hau/dev/sde1 da/dev/sdf1 akan/ayyuka da/bayanan baya, bi da bi (lura cewa dole ne a fara ƙirƙirar waɗannan kundayen adireshi):

# mount /dev/sde1 /projects
# mount /dev/sdf1 /backups

Bugu da ƙari, za ka iya ƙara shigarwar guda biyu a/sauransu/fstab domin duka tsarin fayiloli su kasance a sanya su ta atomatik a taya ta amfani da UUID na kowane tsarin fayil kamar yadda blkid ya dawo.

Lura cewa dole ne a yi amfani da zaɓin Dutsen _netdev don jinkirta hawan waɗannan tsarin fayil har sai an fara sabis na cibiyar sadarwa:

Kuna iya amfani da waɗannan na'urori yanzu kamar yadda kuke yi da kowane kafofin watsa labarai na ajiya.

Takaitawa

A cikin wannan labarin mun rufe yadda ake saitawa da daidaita iSCSI Target da Mai farawa a cikin RHEL/CentOS 7 rarrabawa. Kodayake aikin farko baya cikin abubuwan da ake buƙata na jarabawar EX300 (RHCE), ana buƙatar shi don aiwatar da jigo na biyu.

Kada ku yi jinkiri don sanar da mu idan kuna da wasu tambayoyi ko sharhi game da wannan labarin - jin daɗin sauke mu layi ta amfani da fam ɗin sharhi a ƙasa.

Neman saitin iSCSI Target da Client Initiator akan RHEL/CentOS 6, bi wannan jagorar: Saita Ma'ajiya ta iSCSI ta Tsakiya tare da Mai gabatarwa Abokin ciniki.