Chida cha Intrusion Detection System (IDS) chikatumizidwa, doko loyang'ana pa switch pazidziwitso za gulu la anzawo sikokwanira (mwachitsanzo, doko limodzi loyang'ana magalasi limaloledwa, ndipo doko loyang'ana pagalasi lakhala ndi zida zina).
Panthawi imeneyi, pamene sitiwonjezera madoko ambiri mirroring, tikhoza kugwiritsa ntchito kugawanika maukonde, aggregation ndi kutumiza chipangizo kugawira kuchuluka kwa deta mirroring chipangizo wathu.
Kodi Network TAP ndi chiyani?
Mwinamwake mudamvapo dzina la TAP losintha. TAP (Terminal Access Point), yomwe imadziwikanso kuti NPB (Network Packet Broker), kapena Tap Aggregator?
Ntchito yayikulu ya TAP ndikukhazikitsa pakati pa doko loyang'ana pamaneti opanga ndi gulu la zida zowunikira. TAP imasonkhanitsa magalimoto owoneka ngati magalasi kapena olekanitsidwa kuchokera ku chipangizo chimodzi kapena zingapo zopangira netiweki ndikugawa kuchuluka kwa anthu ku chipangizo chimodzi kapena zingapo zowunikira deta.
Common Network TAP network deployment scenarios
Network Tap ili ndi zilembo zodziwikiratu, monga:
Independent Hardware
TAP ndi gawo lapadera la hardware zomwe sizimakhudza katundu pazida zomwe zilipo kale, zomwe ndi chimodzi mwa ubwino pa galasi loyang'ana doko.
Kusintha?
Network Tap?
Network Transparent
TAP ikalumikizidwa ndi netiweki, zida zina zonse pamaneti sizikhudzidwa. Kwa iwo, TAP imawonekera ngati mpweya, ndipo zida zowunikira zomwe zimalumikizidwa ndi TAP zimawonekera pa intaneti yonse.
TAP ili ngati Port Mirroring pa switch. Ndiye bwanji mutumize TAP yosiyana? Tiyeni tiwone zina mwazosiyana pakati pa Network TAP ndi Network Port Mirroring motsatira.
Kusiyana 1: Network TAP ndiyosavuta kuyisintha kuposa kuyang'ana padoko
Port mirroring iyenera kukhazikitsidwa pa switch. Ngati kuwunika kukufunika kusinthidwa, chosinthiracho chiyenera kukonzedwanso ZONSE. Komabe, TAP imangofunika kusinthidwa pomwe idapempha, zomwe sizikhudza zida zomwe zilipo kale.
Kusiyana 2: Network TAP sichimakhudza magwiridwe antchito a netiweki pokhudzana ndi kuwonetsera kwa doko
Kuyika magalasi pa doko kumasokoneza magwiridwe antchito a switch ndipo kumakhudza kuthekera kosinthira. Makamaka, ngati kusinthaku kulumikizidwa ndi netiweki motsatizana monga mozungulira, kuthekera kotumizira maukonde onse kumakhudzidwa kwambiri. TAP ndi chida chodziyimira pawokha ndipo sichisokoneza magwiridwe antchito a chipangizocho chifukwa chakuwonetsa magalimoto. Choncho, alibe zimakhudza katundu wa zipangizo alipo maukonde, amene ali ndi ubwino waukulu pa doko mirroring.
Kusiyana 3: Network TAP imapereka njira yokwanira yamagalimoto kuposa kubwereza kwa doko
Kuwona pa doko sikungatsimikizire kuti magalimoto onse atha kupezeka chifukwa chosinthira chokhacho chimasefa mapaketi olakwika kapena mapaketi ang'onoang'ono. Komabe, TAP imatsimikizira kukhulupirika kwa data chifukwa ndi "kubwereza" kwathunthu pagawo lakuthupi.
Kusiyana 4: Kuchedwa kutumiza kwa TAP ndikocheperako kuposa kwa Port Mirroring
Pa zosintha zina zotsika, kuyang'ana pa doko kumatha kuyambitsa latency potengera kuchuluka kwa magalimoto kumalo owonera magalasi, komanso pokopera madoko a 10/100m kumadoko a Giga Ethernet.
Ngakhale izi zalembedwa mofala, tikukhulupirira kuti kusanthula kuwiri komalizaku kulibe chithandizo champhamvu chaukadaulo.
Ndiye, muzochitika ziti, tiyenera kugwiritsa ntchito TAP pakugawa kwa magalimoto pamaneti? Mwachidule, ngati muli ndi zotsatirazi, ndiye kuti Network TAP ndiye chisankho chanu chabwino.
Network TAP Technologies
Mvetserani zomwe zili pamwambapa, imvani kuti TAP network shunt ndi chida chamatsenga, msika wamakono wa TAP shunt pogwiritsa ntchito zomangamanga zamagulu atatu:
FPGA
- Kuchita bwino kwambiri
- Zovuta kukula
- Mtengo wapamwamba
MIPS
- Zosinthika komanso zosavuta
- Kuvuta kwachitukuko pang'ono
- Ogulitsa akuluakulu a RMI ndi Cavium anasiya chitukuko ndipo analephera pambuyo pake
Mtengo wa ASIC
- Kuchita bwino kwambiri
- Kukula kwa ntchito ndikovuta, makamaka chifukwa cha kuchepa kwa chip palokha
- Mawonekedwe ndi mafotokozedwe amachepetsedwa ndi chip palokha, zomwe zimapangitsa kuti pakhale kusachita bwino pakukulitsa
Chifukwa chake, kachulukidwe kwambiri komanso kuthamanga kwa Network TAP yomwe ikuwoneka pamsika ili ndi malo ambiri osinthira kusinthika pakugwiritsa ntchito moyenera. TAP network shunters imagwiritsidwa ntchito potembenuza ma protocol, kusonkhanitsa deta, kubisa deta, kuyang'ana ma data, komanso kusefa magalimoto. Mitundu yayikulu yodziwika bwino yamadoko ikuphatikizapo 100G, 40G, 10G, 2.5G POS, GE, ndi zina zotero.
Nthawi yotumiza: May-25-2022
