Chifukwa cha kusintha kwa digito, maukonde amakampani salinso "zingwe zochepa zolumikizira makompyuta." Chifukwa cha kuchuluka kwa zida za IoT, kusamuka kwa mautumiki kupita kumtambo, komanso kugwiritsa ntchito ntchito zakutali, kuchuluka kwa magalimoto pa intaneti kwakula kwambiri, monga magalimoto pamsewu waukulu. Komabe, kuchuluka kwa magalimoto kumeneku kumabweretsanso mavuto: zida zachitetezo sizingathe kujambula deta yofunika, makina owunikira amadzaza ndi chidziwitso chosafunikira, ndipo ziwopsezo zobisika mumsewu wobisika sizipezeka. Apa ndi pomwe "wogwira ntchito wosawoneka" wotchedwa Network Packet Broker (NPB) amakhala wothandiza. Pogwira ntchito ngati mlatho wanzeru pakati pa magalimoto pa intaneti ndi zida zowunikira, imasamalira kuyenda kwa magalimoto mosokonezeka pa netiweki yonse pomwe ikupereka molondola zida zowunikira deta yomwe ikufunika, kuthandiza mabizinesi kuthetsa mavuto a netiweki "osawoneka, osatheka". Lero, tipereka kumvetsetsa kwathunthu kwa gawo lofunika kwambiri pakugwira ntchito ndi kukonza netiweki.
1. N’chifukwa chiyani makampani akufunafuna ma NPB tsopano? — "Kufunika Kowonekera" kwa Ma Network Ovuta
Taganizirani izi: Pamene netiweki yanu ikugwiritsa ntchito zipangizo zambirimbiri za IoT, ma seva ambirimbiri a mitambo, ndi antchito omwe akugwiritsa ntchito intanetiyi kutali, kodi mungatsimikizire bwanji kuti palibe anthu ambiri omwe angalowe? Kodi mungadziwe bwanji maulalo omwe ali ndi anthu ambiri komanso kuchepetsa ntchito zamabizinesi?
Njira zowunikira zakale zakhala zosakwanira kwa nthawi yayitali: zida zowunikira zimatha kungoyang'ana magawo enaake a magalimoto, ma key nodes omwe akusowa; kapena zimapatsa magalimoto onse ku chida nthawi imodzi, zomwe zimapangitsa kuti chisathe kumvetsetsa zomwe zili mkati ndikuchepetsa kusanthula bwino. Kuphatikiza apo, popeza magalimoto opitilira 70% tsopano atsekedwa, zida zachikhalidwe sizingathe kuwona zomwe zili mkati mwake.
Kubwera kwa ma NPB kukuthandizani kuthetsa vuto la "kusowa kwa mawonekedwe a netiweki." Amakhala pakati pa malo olowera magalimoto ndi zida zowunikira, kuphatikiza magalimoto omwazikana, kusefa deta yosafunikira, ndikugawa magalimoto olondola ku IDS (Intrusion Detection Systems), SIEMs (Security Information Management Platforms), zida zowunikira magwiridwe antchito, ndi zina zambiri. Izi zimatsimikizira kuti zida zowunikira sizikusowa chakudya kapena kukhuta kwambiri. Ma NPB amathanso kuchotsa ndikusunga ma traffic, kuteteza deta yachinsinsi ndikupatsa mabizinesi chithunzithunzi chomveka bwino cha momwe netiweki yawo ilili.
Tikhoza kunena kuti bola ngati bizinesi ili ndi chitetezo cha netiweki, kukonza magwiridwe antchito kapena zosowa zotsata malamulo, NPB yakhala gawo lofunika kwambiri.
Kodi NPB ndi chiyani? — Kusanthula Kosavuta Kuchokera ku Zomangamanga Kupita ku Mphamvu Zapakati
Anthu ambiri amaganiza kuti mawu oti "packet broker" ali ndi cholepheretsa chachikulu chaukadaulo kuti munthu alowe. Komabe, fanizo losavuta kugwiritsa ntchito ndikugwiritsa ntchito "malo osinthira kutumiza mwachangu": kuchuluka kwa magalimoto pa intaneti ndi "mapaketi othamanga," NPB ndi "malo osinthira," ndipo chida chowunikira ndi "malo olandirira." Ntchito ya NPB ndikusonkhanitsa mapaketi omwazikana (kuphatikiza), kuchotsa mapaketi osavomerezeka (kusefa), ndikusankha ndi adilesi (kugawa). Imathanso kutsegula ndikuyang'ana mapaketi apadera (kuchotsa kubisa) ndikuchotsa zambiri zachinsinsi (kusambitsa) - njira yonseyi ndi yothandiza komanso yolondola.
1. Choyamba, tiyeni tiwone "chigoba" cha NPB: ma module atatu ofunikira omanga
Njira yogwirira ntchito ya NPB imadalira kwathunthu mgwirizano wa ma module atatuwa; palibe chomwe chikusowa:
○Gawo Lolowera Magalimoto: Ndi yofanana ndi "doko lotumizira mwachangu" ndipo imagwiritsidwa ntchito makamaka kulandira magalimoto a pa intaneti kuchokera ku doko lagalasi losinthira (SPAN) kapena splitter (TAP). Kaya ndi magalimoto ochokera ku ulalo weniweni kapena netiweki yeniyeni, imatha kusonkhanitsidwa mwanjira yogwirizana.
○Injini Yopangira Zinthu:Uwu ndiye "ubongo waukulu wa malo osonkhanitsira" ndipo umayang'anira "kukonza" kofunikira kwambiri - monga kuphatikiza magalimoto ambiri (kuphatikiza), kusefa magalimoto kuchokera ku mtundu wina wa IP (kusefa), kukopera magalimoto omwewo ndikutumiza ku zida zosiyanasiyana (kukopera), kuchotsa ma encryption a SSL/TLS (kuchotsa ma encryption), ndi zina zotero. "Ntchito zabwino" zonse zimamalizidwa apa.
○Gawo Logawa: Zili ngati "mtumiki" amene amagawa molondola magalimoto okonzedwa ku zida zowunikira zomwe zikugwirizana nazo ndipo amathanso kuchita zinthu zowongolera katundu - mwachitsanzo, ngati chida chowunikira magwiridwe antchito chili chotanganidwa kwambiri, gawo la magalimoto lidzagawidwa ku chida chosungira kuti apewe kudzaza chida chimodzi.
2. "Kutha kwa Ma Core Ovuta" a NPB: ntchito 12 zapakati zimathetsa 90% ya mavuto a netiweki
NPB ili ndi ntchito zambiri, koma tiyeni tiyang'ane kwambiri pa zomwe zimagwiritsidwa ntchito kwambiri ndi makampani. Chilichonse chikugwirizana ndi vuto lake:
○Kubwerezabwereza kwa Magalimoto / Kusonkhanitsa + KusefaMwachitsanzo, ngati kampani ili ndi maulalo 10 a netiweki, NPB choyamba imaphatikiza kuchuluka kwa anthu omwe ali ndi maulalo 10, kenako imasefa "ma packet a data obwerezabwereza" ndi "ma traffic osafunikira" (monga kuchuluka kwa anthu omwe amagwira ntchito akuonera makanema), ndipo imatumiza kuchuluka kwa anthu omwe amakumana ndi bizinesi ku chida chowunikira - zomwe zimapangitsa kuti magwiridwe antchito azigwira ntchito bwino ndi 300%.
○Kuchotsa Kubisa kwa SSL/TLSMasiku ano, ziwopsezo zambiri zoyipa zimabisika mu HTTPS encrypted traffic. NPB imatha kuchotsa ma traffic awa mosamala, zomwe zimathandiza zida monga IDS ndi IPS "kuwona" zomwe zili mu encrypted ndikujambula ziwopsezo zobisika monga maulalo a phishing ndi ma code oyipa.
○Kubisa Deta / Kuchepetsa Kuzindikira: Ngati anthu ambiri akupeza zambiri zokhudza chinsinsi monga manambala a kirediti kadi ndi manambala a chitetezo cha anthu, NPB idzachotsa zokha zambirizi isanazitumize ku chida chowunikira. Izi sizikhudza kusanthula kwa chidacho, komanso zidzatsatira zofunikira za PCI-DSS (kutsata malamulo olipira) ndi HIPAA (kutsata malamulo azaumoyo) kuti deta isatayike.
○Kulinganiza Katundu + KulepheraNgati bizinesi ili ndi zida zitatu za SIEM, NPB idzagawa magalimoto mofanana pakati pawo kuti chida chilichonse chisawonongeke. Ngati chida chimodzi chalephera, NPB idzasintha nthawi yomweyo magalimoto kupita ku chida chosungira kuti zitsimikizire kuti zikuyang'aniridwa mosalekeza. Izi ndizofunikira makamaka m'mafakitale monga zachuma ndi chisamaliro chaumoyo komwe nthawi yopuma siivomerezeka.
○Kutha kwa Ngalande: VXLAN, GRE ndi "Tunnel Protocols" zina tsopano zimagwiritsidwa ntchito kwambiri mu maukonde a mitambo. Zida zachikhalidwe sizingamvetse ma protocol awa. NPB ikhoza "kusokoneza" ma tunnel awa ndikutulutsa magalimoto enieni mkati, zomwe zimalola zida zakale kukonza magalimoto m'malo amtambo.
Kuphatikiza kwa zinthuzi kumathandiza NPB osati kungowona "kudutsa" kwa anthu omwe ali ndi ma encryption traffic, komanso "kuteteza" deta yachinsinsi ndi "kusintha" kuti igwirizane ndi malo osiyanasiyana ovuta a netiweki - ichi ndichifukwa chake imatha kukhala gawo lofunikira.
III. Kodi NPB imagwiritsidwa ntchito kuti? — Zochitika zisanu zofunika kwambiri zomwe zimakwaniritsa zosowa zenizeni zamabizinesi
NPB si chida chogwiritsidwa ntchito ndi aliyense; m'malo mwake, imasintha mosavuta malinga ndi zochitika zosiyanasiyana. Kaya ndi malo osungira deta, netiweki ya 5G, kapena malo amtambo, imapeza mapulogalamu enieni. Tiyeni tiwone zitsanzo zingapo zachizolowezi kuti tifotokoze mfundo iyi:
1. Deta Center: Chinsinsi Choyang'anira Magalimoto a Kum'mawa ndi Kumadzulo
Malo osungira deta achikhalidwe amayang'ana kwambiri kuchuluka kwa magalimoto ochokera kumpoto kupita kum'mwera (magalimoto ochokera ku ma seva kupita kudziko lakunja). Komabe, m'malo osungira deta a virtualized, 80% ya magalimoto amapezeka kum'mawa kupita kumadzulo (magalimoto pakati pa makina a virtual), omwe zida zachikhalidwe sizingathe kuwagwira. Apa ndi pomwe ma NPB amathandiza:
Mwachitsanzo, kampani yayikulu ya intaneti imagwiritsa ntchito VMware kuti ipange malo osungira deta opangidwa mwaluso. NPB imalumikizidwa mwachindunji ndi vSphere (pulatifomu yoyang'anira ya VMware) kuti igwire molondola kuchuluka kwa magalimoto pakati pa makina osungira deta ndikugawa ku IDS ndi zida zogwirira ntchito. Izi sizimangochotsa "kuyang'anira malo osawoneka bwino," komanso zimawonjezera magwiridwe antchito a zida ndi 40% kudzera mu kusefa magalimoto, ndikudula mwachindunji pakati pa nthawi yokonzanso deta (MTTR).
Kuphatikiza apo, NPB imatha kuyang'anira kuchuluka kwa seva ndikuwonetsetsa kuti deta yolipira ikugwirizana ndi PCI-DSS, kukhala "chofunikira pakugwira ntchito ndi kukonza" malo osungira deta.
2. SDN/NFV Environment: Maudindo Osinthasintha Ogwirizana ndi Ma Networking Ofotokozedwa ndi Mapulogalamu
Makampani ambiri tsopano akugwiritsa ntchito SDN (Software Defined Networking) kapena NFV (Network Function Virtualization). Ma network si ma hardware okhazikika, koma ndi mautumiki a mapulogalamu osinthasintha. Izi zimafuna kuti ma NPB akhale osinthasintha:
Mwachitsanzo, yunivesite imagwiritsa ntchito SDN kukhazikitsa "Bring Your Own Device (BYOD)" kuti ophunzira ndi aphunzitsi athe kulumikizana ndi netiweki ya pasukulupo pogwiritsa ntchito mafoni ndi makompyuta awo. NPB imalumikizidwa ndi chowongolera cha SDN (monga OpenDaylight) kuti zitsimikizire kuti magalimoto ali pakati pa malo ophunzitsira ndi maofesi pomwe akugawa molondola magalimoto kuchokera m'dera lililonse kupita ku zida zowunikira. Njirayi sikhudza momwe ophunzira ndi aphunzitsi amagwiritsira ntchito, ndipo imalola kuzindikira nthawi yake kulumikizana kosazolowereka, monga kupeza ma adilesi oyipa a IP kunja kwa sukulupo.
Izi ndi zomwe zimachitikanso m'malo a NFV. NPB imatha kuyang'anira kuchuluka kwa ma firewall (vFWs) ndi ma virtual load balancers (vLBs) kuti iwonetsetse kuti "zipangizo zamapulogalamu" izi zikugwira ntchito bwino, zomwe zimakhala zosavuta kuzigwiritsa ntchito kuposa kuyang'anira zida zachikhalidwe.
3. Ma Network a 5G: Kusamalira Magalimoto Odulidwa ndi Ma Edge Nodes
Zinthu zazikulu za 5G ndi "liwiro lapamwamba, kuchedwa kochepa, ndi kulumikizana kwakukulu", koma izi zimabweretsanso zovuta zatsopano pakuwunika: mwachitsanzo, ukadaulo wa "network slicing" wa 5G ukhoza kugawa netiweki yomweyo m'ma network angapo olondola (mwachitsanzo, gawo locheperako la kuchedwa kwa kuyendetsa lokha ndi gawo lalikulu la kulumikizana kwa IoT), ndipo kuchuluka kwa magalimoto mu gawo lililonse kuyenera kuyang'aniridwa payekha.
Wogwiritsa ntchito wina adagwiritsa ntchito NPB kuthetsa vutoli: adayika kuwunika kodziyimira pawokha kwa NPB pa gawo lililonse la 5G, lomwe silingathe kungowona kuchedwa ndi kufalikira kwa gawo lililonse nthawi yeniyeni, komanso kuletsa magalimoto osazolowereka (monga kulowa kosaloledwa pakati pa magawo) munthawi yake, kuonetsetsa kuti mabizinesi ofunikira monga kuyendetsa galimoto okha ndi omwe amafunikira kuchedwa kochepa.
Kuphatikiza apo, ma node a 5G edge computing ali m'dziko lonselo, ndipo NPB ingaperekenso "mtundu wopepuka" womwe umayikidwa pama node a edge kuti uwonetse kuchuluka kwa magalimoto omwe amagawidwa ndikupewa kuchedwa komwe kumachitika chifukwa cha kutumiza deta mobwerezabwereza.
4. Malo Osungira Mitambo/Hybrid IT: Kuthetsa Zopinga za Kuyang'anira Mitambo ya Anthu Onse ndi Yachinsinsi
Mabizinesi ambiri tsopano amagwiritsa ntchito kapangidwe ka mitambo yosakanikirana—machitidwe ena amakhala pa Alibaba Cloud kapena Tencent Cloud (ma cloud a anthu onse), ena pa mitambo yawoyawo, ndipo ena pa ma seva am'deralo. Pankhaniyi, magalimoto amafalikira m'malo osiyanasiyana, zomwe zimapangitsa kuti kuyang'anira kusokonezedwe mosavuta.
Banki ya China Minsheng imagwiritsa ntchito NPB kuthetsa vutoli: bizinesi yake imagwiritsa ntchito Kubernetes poika zinthu mu makontena. NPB imatha kujambula mwachindunji kuchuluka kwa magalimoto pakati pa makontena (Pods) ndikugwirizanitsa kuchuluka kwa magalimoto pakati pa ma seva amtambo ndi mitambo yachinsinsi kuti ipange "kuwunika kuyambira kumapeto mpaka kumapeto" - mosasamala kanthu kuti bizinesiyo ili mumtambo wa anthu onse kapena mtambo wachinsinsi, bola ngati pali vuto la magwiridwe antchito, gulu loyendetsa ntchito ndi kukonza lingagwiritse ntchito deta ya magalimoto a NPB kuti lipeze mwachangu ngati ndi vuto la mafoni apakati pa makontena kapena kuchuluka kwa maulumikizidwe amtambo, zomwe zimapangitsa kuti magwiridwe antchito azizindikira ndi 60%.
Kwa anthu ambiri okhala ndi malo obwereketsa anthu, NPB ikhozanso kuonetsetsa kuti magalimoto akuyenda pakati pa mabizinesi osiyanasiyana, kupewa kutayikira kwa deta, komanso kukwaniritsa zofunikira za makampani azachuma.
Pomaliza: NPB si "njira" koma "yofunikira"
Mukayang'ana zochitika izi, mupeza kuti NPB si ukadaulo wapadera koma chida chokhazikika cha mabizinesi kuti athe kuthana ndi ma netiweki ovuta. Kuyambira malo osungira deta mpaka 5G, kuyambira mitambo yachinsinsi mpaka IT yosakanikirana, NPB ikhoza kukhala ndi gawo kulikonse komwe kukufunika kuwonekera kwa netiweki.
Chifukwa cha kuchuluka kwa AI ndi makompyuta a m'mphepete, kuchuluka kwa magalimoto pa intaneti kudzakhala kovuta kwambiri, ndipo luso la NPB lidzakulitsidwa kwambiri (mwachitsanzo, kugwiritsa ntchito AI kuti izindikire kuchuluka kwa magalimoto osazolowereka ndikulola kuti zinthu zisinthe mosavuta ku ma node a m'mphepete). Kwa mabizinesi, kumvetsetsa ndi kugwiritsa ntchito ma NPB koyambirira kudzawathandiza kuyamba kugwiritsa ntchito njira ya netiweki ndikupewa njira zopatuka pakusintha kwawo kwa digito.
Kodi mudakumanapo ndi mavuto okhudzana ndi kuyang'anira maukonde mumakampani anu? Mwachitsanzo, simukuwona kuchuluka kwa magalimoto omwe amasungidwa, kapena kuyang'anira mitambo yosakanikirana kukulepheretsedwa? Khalani omasuka kugawana malingaliro anu mu gawo la ndemanga ndipo tiyeni tifufuze mayankho pamodzi.
Nthawi yotumizira: Seputembala 23-2025

