Juniper NETWORKS Haɓaka Cibiyar Kulawa daga Shafin 2.34
Gabatarwa
Wannan daftarin aiki ya shafi haɓaka Cibiyar Kula da Assurance Active Paragon daga sigar 2.34 zuwa sigar ta gaba. Haɓakawa ya ƙunshi matakai na musamman kamar yadda ya haɗa da haɓaka Ubuntu OS daga 16.04 zuwa 18.04. Takardar ta ƙunshi yanayi guda biyu:
- Haɓakawa na Ubuntu 16.04 (tare da shigar da Cibiyar Kulawa) zuwa Ubuntu 18.04.
- Sabbin shigarwa na Ubuntu 18.04 yana biye da shigarwar Cibiyar Sarrafa da canja wurin bayanan wariyar ajiya daga tsohuwar Cibiyar Gudanarwa zuwa sabon misali.
Don wasu haɓakawa, da fatan za a koma zuwa Jagoran haɓakawa.
Scenario A: Haɓaka Ubuntu 16.04 zuwa Ubuntu 18.04
- Fara ta hanyar kashe apache2 da net round-kiran aiwatar da ayyuka:
- Dakatar da duk sabis na Tabbataccen Aiki na Paragon:
- Ɗauki madadin bayanan samfur na Tabbacin Active Paragon.
NOTE: Wannan ita ce hanyar wariyar ajiya da aka siffanta a cikin Jagorar Ayyuka, babin Tallafawa Bayanan Samfura, kawai a taƙaice.
Gudanar da waɗannan umarni:
NOTE: Umurnin pg_dump zai nemi kalmar sirri wacce za a iya samu a /etc/netrounds/netrounds.conf a karkashin “database postgres”. Tsoffin kalmar sirri ita ce “netrounds”.
NOTE: Don saitin babban sikelin (> 50 GB), yin kwalta na RRD files na iya ɗaukar tsayi da yawa, kuma ɗaukar hoton ƙarar na iya zama mafi kyawun tunani. Matsaloli masu yiwuwa don yin haka sun haɗa da: amfani da a file tsarin da ke goyan bayan ɗaukar hoto, ko ɗaukar hoto na ƙarar kama-da-wane idan uwar garken yana gudana a cikin yanayin kama-da-wane.
- Bincika amincin bayanan bayanan ta amfani da rubutun da aka kawo netrounds_2.35_validate_db.sh.
GARGADI: Idan wannan rubutun ya fitar da gargadi, kar a gwada tsarin ƙaura na bayanai da aka siffanta "a ƙasa" a shafi na 5. Tuntuɓi tallafin Juniper ta hanyar shigar da tikiti a https://support.juniper.net/support/requesting-support (samar da fitarwa daga rubutun) don samun matsaloli tare da bayanan bayanan da aka warware kafin ku ci gaba da haɓakawa.
- Ɗauki madogara na daidaitawar Cibiyar Kulawa files:
Don misaliampda:
- Haɓaka Ubuntu zuwa sigar 18.04. Tsarin haɓakawa na yau da kullun shine kamar haka (an daidaita shi daga https://wiki.ubuntu.com/BionicBeaver/ReleaseNotes):
- Don haɓakawa akan tsarin uwar garken:
- Shigar update-manager-core idan ba a riga an shigar dashi ba.
- Tabbatar cewa an saita layin gaggawa a /etc/update-manager/release-upgrades zuwa 'lts' (don tabbatar da cewa OS ta inganta zuwa 18.04, sigar LTS na gaba bayan 16.04).
- Kaddamar da kayan aikin haɓakawa tare da umarnin sudo do-release-upgrade.
- Bi umarnin kan allo. Dangane da Assurance Active Paragon, zaku iya kiyaye abubuwan da basu dace ba gaba ɗaya. (Yana iya yiwuwa ya faru cewa kuna buƙatar yin zaɓi daban-daban don dalilan da ba su da alaƙa da Tabbacin Active Paragon.)
- Da zarar an inganta Ubuntu, sake kunna tsarin. Sannan aiwatar da matakai masu zuwa:
- Haɓaka PostgreSQL.
- Sabunta bayanan bayanan PostgreSQL files daga sigar 9.5 zuwa sigar 10:
- Cire tsohuwar sigar PostgreSQL:
- Sabunta fakitin Tabbacin Active Paragon.
- Yi ƙididdige adadin kuɗin kwal ɗin da ke ɗauke da sabon sigar Cibiyar Kulawa kuma tabbatar da cewa daidai yake da SHA256 checksum da aka bayar akan shafin zazzagewa:
- Cire fakitin kwalta na Cibiyar Kulawa:
- Sanya sabbin fakitin Cibiyar Kulawa:
- Cire fakitin da aka daina amfani da su:
NOTE: Yana da mahimmanci a cire waɗannan fakitin.
- Kafin yin hijirar bayanai, kuna buƙatar yin wasu ƙarin matakai. Je zuwa wannan labarin tushen Ilimi, gungura ƙasa zuwa sashin Ayyuka idan an shigar da sakin, kuma aiwatar da matakai na 1 zuwa 4 na waɗannan umarnin.
NOTE: Kada ku yi mataki na 5 a wannan lokacin.
- Gudanar da ƙaura na bayanai:
NOTE: Kafin yin ƙaura, dole ne ka tabbatar da cewa binciken amincin bayanan bayanan da aka siffanta "sama" a shafi na 2 ya cika ba tare da kuskure ba.
Umurnin ƙaura na ncc yana ɗaukar lokaci mai yawa don aiwatarwa (mintuna da yawa). Ya kamata ya buga waɗannan (bayanan da aka cire a ƙasa):
- (Na zaɓi) Sabunta kunshin ConfD idan kuna buƙatar ConfD:
- Kwatanta tsarin da aka samu a baya files tare da sabbin shigar, kuma da hannu haɗa abubuwan da ke cikin saiti biyu na files (ya kamata su kasance a wurare iri ɗaya).
- Kunna apache2, Kafka, da net round-kiran aiwatar da ayyuka:
- Fara sabis na Tabbataccen Active Paragon:
- Don kunna sabon saitin, kuna buƙatar gudu:
- Sanya sabon ma'ajiyar Agent na Gwaji:
- Tunda an jefar da goyan bayan Agent Lite a cikin sigar 2.35, yakamata ku cire tsoffin fakitin Agent Lite idan kun shigar dasu:
NOTE: Lokacin da kuka haɓaka zuwa 3.x daga baya, dole ne ku fara da gudanar da wannan umarni: sudo apt-mark unhold python-django python-django-common
Scenario B: Sabuntawar Ubuntu 18.04
- A kan misalin Ubuntu 16.04, ɗauki madadin bayanan samfur na Active Assurance.
NOTE: Wannan ita ce hanyar wariyar ajiya da aka siffanta a cikin Jagorar Ayyuka, babin “Ajiye Bayanan Samfura”, kawai a takaice.
Gudanar da waɗannan umarni:
NOTE: Umurnin pg_dump zai nemi kalmar sirri wacce za a iya samu a /etc/netrounds/netrounds.conf a karkashin “database postgres”. Tsoffin kalmar sirri ita ce “netrounds”.
NOTE: Don saitin babban sikelin (> 50 GB), yin kwalta na RRD files na iya ɗaukar tsayi da yawa, kuma ɗaukar hoton ƙarar na iya zama mafi kyawun tunani. Matsaloli masu yiwuwa don yin haka sun haɗa da: amfani da a file tsarin da ke goyan bayan ɗaukar hoto, ko ɗaukar hoto na ƙarar kama-da-wane idan uwar garken yana gudana a cikin yanayin kama-da-wane.
- A kan misalin Ubuntu 16.04, ɗauki madogara na daidaitawar Cibiyar Kulawa files:
- /etc/apache2/sites-available/netrounds-ssl.conf
- /etc/apache2/sites-available/netrounds.conf
- /etc/netrounds/netrounds.conf
- /etc/netrounds/probe-connect.conf
- /etc/openvpn/netrounds.conf
Don misaliampda:
- A kan misalin Ubuntu 16.04, ajiye lasisin file.
- Sabon misalin yana buƙatar biyan aƙalla buƙatun kayan masarufi iri ɗaya kamar na tsohon.
- A sabon misali, shigar da Ubuntu 18.04. Muna ba da shawarar koyawa mai zuwa:
- https://ubuntu.com/tutorials/install-ubuntu-server
Dangane da Tabbacin Ayyuka na Paragon Active, zaku iya kiyaye abubuwan da ba a cika su ba gaba ɗaya. (Hakika yana iya faruwa cewa kuna buƙatar yin zaɓi daban-daban don dalilan da ba su da alaƙa da Tabbacin Active Paragon.)
- Da zarar an shigar da Ubuntu 18.04, sake kunna tsarin.
- Ana ba da shawarar rarrabuwar faifai mai zuwa, musamman don ɗaukar hoto na hoto (amma ya rage naka a matsayin mai amfani don yanke shawara):
- Rarraba da aka ba da shawarar don saitin lab:
- /: Cikakken diski, ext4.
- Rarraba da aka ba da shawarar don saitin samarwa:
- /: 10% na sarari diski, ext4.
- /var: 10% na sarari diski, ext4.
- /var/lib/netrounds/rrd: 80% na sararin diski, ext4.
- Babu boye-boye
- Saita yankin lokaci zuwa UTC, misaliample kamar haka:
- Saita duk wuraren zuwa en_US.UTF-8.
- Hanya ɗaya don yin wannan ita ce yin gyara da hannu file /etc/default/locale. Exampda:
- Tabbatar cewa ba a yi sharhi akan layi na gaba a cikin /etc/locale.gen:
- Sake sabunta wurin files don tabbatar da harshen da aka zaɓa yana samuwa:
- Tabbatar cewa an ba da izinin zirga-zirga a kan tashoshin jiragen ruwa masu zuwa zuwa kuma daga Cibiyar Kulawa:
- Mai shigowa:
- TCP tashar jiragen ruwa 443 (HTTPS): Web dubawa
- TCP tashar jiragen ruwa 80 (HTTP): Web dubawa (wanda Speedtest ke amfani dashi, yana turawa wani URLs zuwa HTTPS)
- TCP tashar jiragen ruwa 830: ConfD (na zaɓi)
- TCP tashar jiragen ruwa 6000: Rufaffen haɗin yanar gizo na OpenVPN don Kayan Aikin Wakilin Gwaji
- TCP tashar jiragen ruwa 6800: Rufewa WebHaɗin soket don Aikace-aikacen Wakilin Gwaji
- Fitowa:
- TCP tashar jiragen ruwa 25 (SMTP): Isar da sako
- UDP tashar jiragen ruwa 162 (SNMP): Aika tarkon SNMP don ƙararrawa
- UDP tashar jiragen ruwa 123 (NTP): Aiki tare lokaci
- Shigar NTP:
- Na farko, kashe timedatectl:
- A cikin fitowar, ƙimar "isa" don sabobin NTP ƙima ce ta octal da ke nuna sakamakon ma'amalar NTP takwas na ƙarshe. Idan duk takwas sun yi nasara, ƙimar za ta zama octal 377 (= binary
- Sanya PostgreSQL kuma saita mai amfani don Cibiyar Sarrafa:
Amfani da uwar garken PostgreSQL na waje ba a ba da shawarar ba. - Shigar kuma saita sabar imel.
- Cibiyar Kulawa za ta aika imel zuwa masu amfani:
- idan aka gayyace su zuwa wani asusu.
- lokacin aika ƙararrawa ta imel (watau idan an yi amfani da imel maimakon SNMP don wannan dalili), da
- lokacin aika rahotannin lokaci-lokaci.
- Gudanar da umarnin
- Don saitin mai sauƙi inda postfix zai iya aikawa kai tsaye zuwa uwar garken imel ɗin da aka nufa, za ka iya saita Gabaɗaya nau'in daidaitawar saƙo zuwa "Shafin Intanet", kuma ana iya barin sunan tsarin kamar yadda yake. In ba haka ba, postfix yana buƙatar saita shi bisa ga muhalli. Don jagora, koma zuwa takaddun Ubuntu na hukuma a https://help.ubuntu.com/lts/serverguide/postfix.html.
- Sanya Cibiyar Kulawa akan misalin Ubuntu 18.04. Wannan hanya kuma tana shigar da Paragon Active Assurance REST API.
- Sanya PostgreSQL kuma saita mai amfani don Cibiyar Sarrafa:
0b11111111). Duk da haka, lokacin da ka shigar da NTP kawai, yana yiwuwa a kasa da takwas NTP ma'amaloli sun faru, ta yadda darajar za ta zama karami: daya daga 1, 3, 7, 17, 37, 77, ko 177 idan duk ma'amaloli sun yi nasara. .
- Dakatar da duk sabis na Tabbataccen Aiki na Paragon:
- Mayar da madadin bayanai:
- Kafin yin hijirar bayanai, kuna buƙatar yin wasu ƙarin matakai. Je zuwa wannan labarin tushen Ilimi, gungura ƙasa zuwa sashin Ayyuka idan an shigar da sakin, kuma aiwatar da matakai na 1 zuwa 4 na waɗannan umarnin.
NOTE: Kada ku yi mataki na 5 a wannan lokacin. - Gudanar da ƙaura na bayanai:
NOTE: Wannan umarni ne mai mahimmanci, kuma yakamata a kula yayin aiwatar da shi akan na'ura mai nisa. A cikin irin wannan yanayin ana ba da shawarar sosai cewa kayi amfani da shirin kamar allo ko tmux domin umarnin ƙaura ya ci gaba da gudana koda kuwa zaman ssh ya karye.
Umurnin ƙaura na ncc yana ɗaukar lokaci mai yawa don aiwatarwa (mintuna da yawa). Ya kamata ya buga waɗannan (bayanan da aka cire a ƙasa):
- Canja wurin bayanan madadin zuwa misalin 18.04 ta amfani da scp ko wani kayan aiki.
- Mayar da maɓallan OpenVPN:
- Mayar da bayanan RRD:
- Kwatanta tsarin da aka goyi baya files tare da sabbin shigar, kuma da hannu haɗa abubuwan da ke cikin saiti biyu na files (ya kamata su kasance a wurare iri ɗaya).
- Kunna lasisin samfur ta amfani da lasisin file An samo daga tsohon misali:
- Fara sabis na Tabbataccen Active Paragon:
- Don kunna sabon saitin, kuna buƙatar gudu:
- Sanya sabon ma'ajiyar Agent na Gwaji:
- (Na zaɓi) Bi NETCONF & YANG API Jagorar Orchestration don shigarwa da daidaita ConfD idan kuna buƙatarsa.
NOTE: Lokacin da kuka haɓaka zuwa 3.x daga baya, dole ne ku fara da gudanar da wannan umarni: sudo apt-mark unhold python-django python-django-common
Shirya matsala
Matsalolin Fara ConfD
Idan kuna da matsalolin farawa ConfD bayan haɓakawa, tuntuɓi abokin tarayya na Juniper ko manajan asusun Juniper na gida ko wakilin tallace-tallace don samun sabon biyan kuɗi.
Matsalolin Fara kira aiwatarwa
Duba rajistan ayyukan callexecuter tare da umarni
Kuna iya ganin kuskure kamar haka:
Abin da ya faru shi ne cewa net round-kiran kashe * .deb kunshin an inganta ba tare da tabbatar da net zagaye-kira aiwatar da tsarin sabis da aka dakatar da kuma kashe. Rumbun bayanan yana cikin yanayin da ba daidai ba; yana buƙatar dawo da shi daga ajiyar, kuma haɓaka yana buƙatar maimaitawa. Yi abubuwan da ke biyowa don kashewa da dakatar da sabis ɗin aiwatar da zagaye-kira:
Web Sabar Bata Amsa
Bincika rajistan ayyukan apache tare da umarni
Idan kun ga kuskuren da ke gaba, yana nufin cewa sigar Cibiyar Kulawa ta 2.34 tana gudana akan Ubuntu 18.04, wato, Cibiyar Gudanarwa ba ta sami nasarar haɓakawa ba. Maganin shine haɓaka Cibiyar Sarrafa zuwa sigar gaba kamar yadda aka bayyana a cikin wannan takaddar.
Sake kunna Ayyukan Tabbatattun Ayyukan Paragon Aiki ya kasa
- Sake kunna hanyoyin sadarwa-* tare da
- yana fitar da sako kamar haka:
- Wannan yana nufin cewa ayyukan da aka ambata an rufe su a yayin aiwatar da cire kunshin kuma suna buƙatar tsaftace hannu. Ana nuna hanyar tsaftacewa a ƙasa:
Juniper Networks, alamar Juniper Networks, Juniper, da Junos alamun kasuwanci ne masu rijista na Juniper Networks, Inc. a Amurka da wasu ƙasashe. Duk sauran alamun kasuwanci, alamun sabis, alamun rajista, ko alamun sabis masu rijista mallakin masu su ne. Juniper Networks ba ta da alhakin kowane kuskure a cikin wannan takaddar. Juniper Networks suna da haƙƙin canzawa, gyaggyarawa, canja wuri, ko kuma sake duba wannan ɗaba'ar ba tare da sanarwa ba. Haƙƙin mallaka © 2022 Juniper Networks, Inc. Duk haƙƙin mallaka.
Takardu / Albarkatu
 |
Juniper NETWORKS Haɓaka Cibiyar Kulawa daga Shafin 2.34 [pdf] Jagorar mai amfani Cibiyar Haɓakawa Daga Shafin 2.34, Cibiyar Sarrafa daga Siffar 2.34, Cibiyar daga Siffar 2.34, Shafin 2.34 |
