TheWogulitsa Mapaketi a Pakompyuta(NPB), yomwe ikuphatikizapo 1G NPB, 10G NPB, 25G NPB, 40G NPB, 100G NPB, 400G NPB, ndiDoko Lolowera Kuyesa kwa Netiweki (TAP), ndi chipangizo cha hardware chomwe chimalumikizidwa mwachindunji mu chingwe cha netiweki ndikutumiza gawo la kulumikizana kwa netiweki kuzipangizo zina.
Ma Network Packet Brokers amagwiritsidwa ntchito kwambiri mu ma network intrusion detection systems (IDS), ma network detectors, ndi ma profiler. Port mirroring session. Mu shunting mode, ulalo wa UTP woyang'aniridwa (unmasked link) umagawidwa m'magawo awiri ndi chipangizo cha TAP shunting. Deta yolumikizidwa imalumikizidwa ku mawonekedwe osonkhanitsira deta kuti isonkhanitse deta ya intaneti yowunikira chitetezo cha chidziwitso.
Kodi Network Packet Broker (NPB) imakuchitirani chiyani?
Zinthu Zofunika Kwambiri:
1. Wodziyimira pawokha
Ndi chipangizo chodziyimira pawokha ndipo sichikhudza katundu wa zida zomwe zilipo kale, zomwe zili ndi ubwino waukulu kuposa ma port mirroring.
Ndi chipangizo chomwe chili pa intaneti, zomwe zikutanthauza kuti chiyenera kulumikizidwa mu netiweki. Komabe, izi zilinso ndi vuto loyambitsa vuto, ndipo chifukwa ndi chipangizo cha pa intaneti, netiweki yomwe ilipo iyenera kusokonezedwa nthawi yogwiritsira ntchito, kutengera komwe yagwiritsidwa ntchito.
2. Chowonekera
Transparent imatanthauza cholozera ku netiweki yomwe ilipo. Pambuyo polowa mu netiweki ya shunt, sichikhudza zipangizo zonse zomwe zili mu netiweki yomwe ilipo, ndipo chimawonekera bwino kwa iwo. Zachidziwikire, izi zikuphatikizaponso kuchuluka kwa magalimoto omwe amatumizidwa ndi netiweki ya shunt kupita ku chipangizo chowunikira, chomwe chimawonekeranso bwino kwa netiweki.
Mfundo yogwirira ntchito:
Kusuntha kwa magalimoto (kugawa) kutengera deta yolowera, kubwerezabwereza, kusonkhanitsa, kusefa, kusintha kwa deta ya 10G POS kudzera mu kusintha kwa protocol kukhala makumi a megabytes LAN deta, malinga ndi njira yeniyeni yolumikizira zotulutsa, kutulutsa nthawi yomweyo kuonetsetsa kuti mapaketi onse a gawo lomwelo, kapena IP yomweyo amatulutsa mapaketi onse kuchokera ku mawonekedwe omwewo a ogwiritsa ntchito.
Zinthu Zogwira Ntchito:
1. Kusintha kwa protocol
Ma interface olumikizirana deta pa intaneti omwe amagwiritsidwa ntchito ndi ma ISP ndi awa: 40G POS, 10G POS/WAN/LAN, 2.5G POS, ndi GE, pomwe ma interface olandila deta omwe amagwiritsidwa ntchito ndi ma seva ogwiritsira ntchito ndi ma interface a GE ndi 10GE LAN. Chifukwa chake, kusintha kwa protocol komwe kumatchulidwa nthawi zambiri pama interface olumikizirana pa intaneti kumatanthauza kusintha pakati pa 40G POS, 10G POS, ndi 2.5G POS kukhala 10GE LAN kapena GE, komanso kusinthana kwa magawo awiri pakati pa 10GE WAN ndi 10GE LAN ndi GE.
2. Kusonkhanitsa ndi kugawa deta.
Mapulogalamu ambiri osonkhanitsira deta amachotsa kuchuluka kwa anthu omwe amawakonda ndikutaya kuchuluka kwa anthu omwe samawakonda. Kuchuluka kwa anthu omwe amawakonda adilesi ya IP, protocol, ndi port kumachotsedwa ndi kulumikizana kwa ma tuple asanu (adilesi ya IP yoyambira, adilesi ya IP yoyambira, doko loyambira, doko loyambira, ndi protocol). Mukatulutsa, gwero lomwelo, malo omwewo ndi kuchuluka kwa katundu zimatsimikiziridwa motsatira njira ya HASH.
3. Kusefa ma code a zinthu
Pa kusonkhanitsa anthu pa P2P, makina ogwiritsira ntchito angangoyang'ana kwambiri anthu enaake, monga PPStream, BT, Thunderbolt, ndi mawu ofunikira pa HTTP monga GET ndi POST, ndi zina zotero. Njira yofananira ma code a feature ingagwiritsidwe ntchito pochotsa ndi kusonkhanitsa. Chosinthira chimathandizira kusefa ma code a feature-position ndi kusefa ma code a feature. Ma code a feature oyandama ndi offset yotchulidwa pamaziko a code ya feature yokhazikika. Ndi yoyenera mapulogalamu omwe amatchula ma code a feature kuti asefedwe, koma osatchula malo enieni a code ya feature.
4. Kuyang'anira gawo
Imazindikira kuchuluka kwa anthu omwe akuyenda pa session ndipo imasinthasintha kusintha kwa mtengo wa N wotumizira session (N=1 mpaka 1024). Izi zikutanthauza kuti, ma N packets oyamba a session iliyonse amachotsedwa ndikutumizidwa ku back-end application analysis system, ndipo ma packets pambuyo pa N amatayidwa, zomwe zimasunga ndalama zoyendetsera pulogalamu yotsikira. Kawirikawiri, mukagwiritsa ntchito IDS kuyang'anira zochitika, simuyenera kukonza ma packets onse a session yonse; m'malo mwake, mumangofunika kuchotsa ma N packets oyamba a session iliyonse kuti mumalize kusanthula ndi kuyang'anira zochitika.
5. Kuyerekeza deta ndi kubwerezabwereza
Chogawaniza chimatha kuzindikira momwe deta imaonekera komanso momwe imabwerezedwera pa mawonekedwe otulutsira, zomwe zimatsimikizira kuti mapulogalamu ambiri azitha kupeza deta.
6. Kupeza ndi kutumiza deta ya netiweki ya 3G
Kusonkhanitsa ndi kugawa deta pa maukonde a 3G n'kosiyana ndi njira zachikhalidwe zowunikira maukonde. Mapaketi pa maukonde a 3G amatumizidwa pa maulalo amsana kudzera m'magawo angapo a encapsulation. Kutalika kwa paketi ndi mawonekedwe a encapsulation ndi zosiyana ndi za mapaketi pa maukonde wamba. Splitter imatha kuzindikira molondola ndikukonza ma protocol a tunnel monga mapaketi a GTP ndi GRE, mapaketi a MPLS okhala ndi zigawo zambiri, ndi mapaketi a VLAN. Imatha kutulutsa mapaketi a signaling a IUPS, mapaketi a signaling a GTP, ndi mapaketi a Radius kupita kumadoko otchulidwa kutengera mawonekedwe a paketi. Kuphatikiza apo, imatha kugawa mapaketi malinga ndi adilesi yamkati ya IP. Chithandizo cha ma phukusi akuluakulu (MTU> 1522 Byte) processing, imatha kukwaniritsa bwino kusonkhanitsa deta ya netiweki ya 3G ndi ntchito ya shunt.
Zofunikira pa Nkhani:
- Imathandizira kugawa kwa magalimoto pogwiritsa ntchito njira ya L2-L7.
- Imathandizira kusefa kwa ma 5-tuple pogwiritsa ntchito adilesi yeniyeni ya IP, adilesi ya IP yopita, doko loyambira, doko lopita, ndi protocol komanso ndi chigoba.
- Imathandizira kulinganiza katundu wotuluka ndi homology yotuluka ndi homology.
- Imathandizira kusefa ndi kutumiza zinthu pogwiritsa ntchito zilembo.
- Imathandizira kasamalidwe ka gawo. Tumizani mapaketi oyamba a N a gawo lililonse. Mtengo wa N ukhoza kufotokozedwa.
- Imathandizira ogwiritsa ntchito ambiri. Mapaketi a data ofanana ndi lamulo lomweli angaperekedwe kwa munthu wina nthawi imodzi, kapena deta yomwe ili pa mawonekedwe otulutsira ikhoza kujambulidwa ndikubwerezedwa, kuonetsetsa kuti deta ya machitidwe angapo ogwiritsira ntchito ikupezeka.
Mayankho a Makampani Azachuma Mayankho Abwino
Ndi chitukuko chachangu cha ukadaulo wapadziko lonse lapansi komanso kukulirakulira kwa chidziwitso, kukula kwa netiweki yamabizinesi kwakulitsidwa pang'onopang'ono, ndipo kudalira kwa mafakitale osiyanasiyana pamakina azidziwitso kwakhala kwakukulu kwambiri. Nthawi yomweyo, netiweki yamabizinesi ya ziwopsezo zamkati ndi zakunja, kusakhazikika, ndi ziwopsezo zachitetezo cha chidziwitso zikukulirakulira, ndi chitetezo cha netiweki chochuluka, njira yowunikira mabizinesi yogwiritsira ntchito ikugwiritsidwa ntchito motsatizana, mitundu yonse ya kuwunika mabizinesi, zida zoteteza chitetezo zomwe zayikidwa pa netiweki yonse, padzakhala kuwononga zinthu zambiri, kuyang'anira malo osawoneka, kuyang'anira mobwerezabwereza, topology yama netiweki ndi mavuto osakhazikika monga kulephera kupeza bwino deta yolunjika, zomwe zimapangitsa kuti zida zizigwira ntchito bwino, ndalama zambiri, ndalama zochepa, mavuto okonza ndi kuyang'anira mochedwa, zinthu za data n'zovuta kuzilamulira.
Nthawi yotumizira: Sep-08-2022
