Ƙirƙirar Ma'ajiya Mai Tsaro ta Tsakiya ta amfani da iSCSI Target akan RHEL/CentOS/Fedora Part -I

iSCSI shine ka'idar matakin toshe don raba na'urorin Ajiye RAW akan hanyoyin sadarwa na TCP/IP, Rabawa da samun dama ga Ma'aji akan iSCSI, ana iya amfani da su tare da cibiyoyin sadarwar IP da Ethernet na yanzu kamar NICs, Switched, Routers da sauransu iSCSI. Nisa shine babban diski mai nisa wanda aka gabatar daga sabar iSCSI (ko) manufa mai nisa.

Ba ma buƙatar babban albarkatu don ingantaccen haɗin kai da aiki a ɓangaren Abokin ciniki. iSCSI Server da ake kira da Target, wannan rabon shine ma'ajiyar uwar garken. Abokin ciniki na iSCSI ana kiransa da Mafakarwa, wannan zai sami dama ga ma'ajiyar da aka raba daga Sabar Target. Akwai adaftar iSCSI a kasuwa don manyan ayyuka kamar SAN Storage's.

Ethernet adaftan (NIC) an tsara su don canja wurin fakitin bayanan matakin fayil tsakanin tsarin, sabobin da na'urorin ajiya kamar ajiya na NAS, ba su da ikon canja wurin bayanan matakin toshe akan Intanet.

  1. Yiwuwar aiwatar da maƙasudin iSCSI da yawa akan na'ura ɗaya.
  2. Na'ura guda ɗaya da ke samar da maƙasudin iscsi da yawa akan iSCSI SAN
  3. Maƙasudin shine Adana kuma yana sanya shi don mai farawa (Client) akan hanyar sadarwa
  4. Waɗannan Ma'ajiya an haɗa su tare don samar da su ga hanyar sadarwa shine iSCSI LUNs (Lambar Ƙirar Ma'ana).
  5. iSCSI yana goyan bayan haɗe-haɗe da yawa a cikin zama ɗaya
  6. iSCSI initiator ya gano makasudin a cikin hanyar sadarwa sannan ya tabbatar da shiga tare da LUNs, don samun ma'ajiyar nesa a gida.
    7. Za mu iya shigar da kowane tsarin aiki a cikin waɗancan LUN na gida kamar yadda muka saba shigar da su a cikin tsarin mu.

A cikin Virtualization muna buƙatar ajiya tare da babban sakewa, kwanciyar hankali, iSCSI yana ba da duk waɗanda ke cikin ƙananan farashi. Ƙirƙirar SAN Storage a cikin ƙananan farashi yayin kwatanta da Fiber Channel SANs, Za mu iya amfani da daidaitattun kayan aiki don gina SAN ta amfani da kayan aiki na yanzu kamar NIC, Ethernet Switched da dai sauransu.

Bari mu fara shigarwa kuma saita Ma'ajiyar Tsaro ta tsakiya ta amfani da iSCSI Target. Don wannan jagorar, Na yi amfani da saiti masu zuwa.

  1. Muna buƙatar keɓance tsarin 1 don Kafa ISCSI Target Server and Initiator (Client).
  2. Ana iya ƙara lambobi da yawa na Hard disk a cikin babban wurin ajiya, Amma mu a nan muna amfani da ƙarin faifai 1 kawai ban da Tushen shigarwa faifai.
    3. Anan muna amfani da faifai guda 2 kacal, Daya don shigarwar uwar garken Base, Wani kuma don Storage (LUNs) wanda zamu ƙirƙira a PART-II na wannan jerin.

  1. Tsarin Aiki - Sakin CentOS 6.5 (Na ƙarshe)
  2. iSCSI Target IP - 192.168.0.200
  3. Ana amfani da tashar jiragen ruwa: TCP 860, 3260
  4. Fayil ɗin Kanfigareshan: /etc/tgt/targets.conf

Wannan silsilar za ta kasance mai taken Shiri don kafa Ma'ajiyar Tsaro ta Tsakiya ta hanyar amfani da iSCSI ta Sashe na 1-3 kuma ya ƙunshi batutuwa masu zuwa.

Shigar da iSCSI Target

Buɗe tasha kuma yi amfani da umarnin yum don bincika sunan fakitin wanda ke buƙatar shigarwa don manufa ta iscsi.

# yum search iscsi
========================== N/S matched: iscsi =======================
iscsi-initiator-utils.x86_64 : iSCSI daemon and utility programs
iscsi-initiator-utils-devel.x86_64 : Development files for iscsi-initiator-utils
lsscsi.x86_64 : List SCSI devices (or hosts) and associated information
scsi-target-utils.x86_64 : The SCSI target daemon and utility programs

Mun sami sakamakon bincike kamar yadda yake sama, zaɓi fakitin Target kuma shigar don yin wasa.

# yum install scsi-target-utils -y

Jera fakitin da aka shigar don sanin saitunan tsoho, sabis, da wurin shafin mutum.

# rpm -ql scsi-target-utils.x86_64

Bari mu fara Sabis na iSCSI, kuma mu duba matsayin Sabis yana ci gaba da gudana, sabis na iSCSI mai suna tgtd.

# /etc/init.d/tgtd start
# /etc/init.d/tgtd status

Yanzu muna buƙatar saita shi don farawa ta atomatik yayin farawa tsarin.

# chkconfig tgtd on

Na gaba, tabbatar da cewa an daidaita matakin gudu daidai don sabis ɗin tgtd.

# chkconfig --list tgtd

Bari mu yi amfani da tgtadm don lissafta abin da ake hari da LUNS a halin yanzu an daidaita mu a cikin Sabar mu.

# tgtadm --mode target --op show

tgtd yana aiki yana gudana, amma babu fitarwa daga umarnin da ke sama saboda har yanzu ba mu ayyana LUNs a cikin Target Server ba. Don shafin hannu, Run 'man' umurnin.

# man tgtadm

A ƙarshe muna buƙatar ƙara ƙa'idodin iptables don iSCSI idan akwai iptables da aka tura a cikin uwar garken manufa. Na farko, nemo lambar tashar tashar iscsi manufa ta amfani da bin umarnin netstat, Maƙasudin koyaushe yana sauraron tashar TCP 3260.

# netstat -tulnp | grep tgtd

Na gaba ƙara waɗannan ƙa'idodi don ba da damar iptables su Watsa binciken binciken iSCSI.

# iptables -A INPUT -i eth0 -p tcp --dport 860 -m state --state NEW,ESTABLISHED -j ACCEPT
# iptables -A INPUT -i eth0 -p tcp --dport 3260 -m state --state NEW,ESTABLISHED -j ACCEPT

Lura: Doka na iya bambanta bisa ga Tsohuwar Manufofin CHAIN ɗin ku. Sannan ajiye Iptables kuma sake kunna iptables.

# iptables-save
# /etc/init.d/iptables restart

Anan mun tura sabar da aka yi niyya don raba LUNs ga kowane mai ƙaddamarwa wanda ke tabbatar da manufa akan TCP/IP, Wannan ya dace da ƙananan zuwa manyan wuraren samarwa kuma.

A cikin kasidu na masu zuwa, zan nuna muku yadda ake ƙirƙirar LUN ta amfani da LVM a cikin Target Server da yadda ake raba LUN akan injunan Client, har sai ku kasance tare da TecMint don ƙarin irin waɗannan sabuntawa kuma kar ku manta da bayar da sharhi masu mahimmanci.