Uburyo bwo guhindura ML-BYPASS-200 bwo gukoresha uburyo bwa Mylinking™ Network Tap Bypass

1-Incamake

Mu gukoresha Mylinking™ Smart Bypass Switch:

• Abakoresha bashobora gushyiraho/gukuramo ibikoresho by'umutekano mu buryo bworoshye kandi ntibizagira ingaruka ku muyoboro uriho no guhagarika;
• Mylinking™ Network Tap Bypass Switch ifite ubushobozi bwo kugenzura ubuzima mu buryo bwihuse imikorere isanzwe y'igikoresho cy'umutekano w'uruhererekane, iyo igikoresho cy'umutekano w'uruhererekane gikora, uburinzi buzahita bunyura kugira ngo bukomeze itumanaho risanzwe ry'umuyoboro;
• Ikoranabuhanga ryo kurengera ibinyabiziga rishobora gukoreshwa mu gushyiraho ibikoresho byihariye byo gusukura umutekano w'ibinyabiziga, ikoranabuhanga ryo gukingira ibinyabiziga rishingiye ku bikoresho byo kugenzura. Gukora neza uburyo bwo kurinda uburyo bwo kwinjira mu buryo bw'uruhererekane ku bwoko bwihariye bw'ibinyabiziga, gukuramo umuvuduko w'icyuma gitwara amazi;
• Ikoranabuhanga ryo kurinda ibinyabiziga mu buryo bungana rishobora gukoreshwa mu gushyira ibikoresho by’uruhererekane mu buryo butekanye kugira ngo habeho umutekano w’uruhererekane mu bidukikije bifite umuvuduko munini w’itumanaho.

Kubera iterambere ryihuse rya interineti, ikibazo cy’umutekano w’amakuru kuri interineti kirushaho gukomera, bityo porogaramu zitandukanye zo kurinda umutekano w’amakuru zikoreshwa cyane. Byaba ibikoresho bisanzwe byo kugenzura uburyo bwo kwinjira (firewall) cyangwa ubwoko bushya bw’uburyo bwo kurinda bugezweho nka sisitemu yo gukumira kwinjira (IPS), urubuga rw’imicungire y’ibitero by’iterabwoba (UTM), sisitemu yo kurwanya ibitero by’ibanga (Anti-DDoS), Anti-span Gateway, Sisitemu yo Kumenya no Kugenzura Ibinyabiziga bya DPI, hamwe n’ibikoresho byinshi by’umutekano bishyirwa mu buryo bukurikiranye mu ngingo z’urusobe rw’amakuru, ishyirwa mu bikorwa rya politiki y’umutekano w’amakuru ijyanye nayo kugira ngo hamenyekane kandi hakorwe n’ibijyanye n’urusobe rw’amakuru rwemewe n’amategeko / rutemewe n’amategeko. Ariko, muri icyo gihe kimwe, umuyoboro wa mudasobwa uzatera gutinda gukomeye kwa interineti cyangwa ndetse no guhungabana kwa interineti mu gihe habayeho kwangirika, kubungabunga, kuvugurura, gusimbuza ibikoresho n’ibindi mu buryo bwizewe cyane bwo gukora umuyoboro w’amakuru, abakoresha ntibashobora kwihanganira.

2-Network Tap Bypass Switch Ibiranga n'ikoranabuhanga bigezweho

Uburyo bwo Kurinda bwa Mylinking™ “SpecFlow” n'ikoranabuhanga rya “FullLink”
Ikoranabuhanga ryo Kurinda Guhindura Inzira mu Buryo bwihuse bwa Mylinking™
Ikoranabuhanga rya Mylinking™ “LinkSafeSwitch”
Ikoranabuhanga rya Mylinking™ “WebService” rijyanye n'ingamba zihindagurika zo kohereza no gutanga amakuru
Ikoranabuhanga ryo Gutahura Ubutumwa bw'Umutima rya Mylinking™
Ikoranabuhanga rya Mylinking™ Definible Heartbeat Ubutumwa
Ikoranabuhanga ryo Kugabanya Umutwaro rya Mylinking™ Multi-link
Ikoranabuhanga ryo gukwirakwiza ibinyabiziga mu buryo bw'ubwenge bwa Mylinking™
Ikoranabuhanga rya Mylinking™ Dynamic Load Balancing
Ikoranabuhanga rya Mylinking™ ryo gucunga kure (HTTP/WEB, TELNET/SSH, "EasyConfig/AdvanceConfig")

Ubuyobozi bwo Guhindura Uburyo bwo Gukoresha Tap Bypass ya Network 3

BURYO BWO KUNYURAHOAgace k'Umuyoboro w'Uburinzi:
Uyu mwanya ushobora gushyirwa muri module y’uburinzi bwa BYPASS hamwe n’umuvuduko/umubare w’uburinzi butandukanye. Mu gusimbuza ubwoko butandukanye bwa module, ushobora gushyigikira uburinzi bwa BYPASS bw’amasano menshi ya 10G/40G/100G.

UMUKURIKIRANYOAgace k'Umuyoboro w'Imbuga;
Uyu mwanya ushobora gushyirwa muri module ya MONITOR port hamwe n'umuvuduko/port zitandukanye. Ushobora gushyigikira ishyirwa ry'ibikoresho byinshi byo kugenzura 10G/40G/100G kuri interineti binyuze mu gusimbuza moderi zitandukanye.

Amategeko yo Guhitamo Module
Ukurikije uburyo butandukanye bwo gushyira ibikoresho mu bikorwa hamwe n'ibisabwa mu kugenzura uburyo ibikoresho bishyirwa mu bikorwa, ushobora guhitamo mu buryo bworoshye imiterere itandukanye ya module kugira ngo ihuze n'ibyo ukeneye mu by'ukuri; nyamuneka kurikiza amategeko akurikira mugihe uhitamo:
1. Ibice bya chassis ni itegeko kandi ugomba guhitamo ibice bya chassis mbere yo guhitamo izindi modules. Muri icyo gihe, nyamuneka hitamo uburyo butandukanye bwo gutanga amashanyarazi (AC/DC) bitewe n'ibyo ukeneye.
2. Imashini yose ishyigikira imiyoboro ya module ya BYPASS igera kuri 2 n'umuyoboro umwe wa MONITOR; ntushobora guhitamo imiyoboro irenze umubare w'imiyoboro yo gushyiraho. Hashingiwe ku mubare w'imiyoboro n'icyitegererezo cya module, igikoresho gishobora gushyigikira uburinzi bugera kuri bune bwa 10GE; cyangwa gishobora gushyigikira imiyoboro ine ya 40GE; cyangwa gishobora gushyigikira umuyoboro umwe wa 100GE.
3. Icyitegererezo cya module "BYP-MOD-L1CG" gishobora gushyirwa muri SLOT1 gusa kugira ngo gikore neza.
4. Ubwoko bwa module "BYP-MOD-XXX" bushobora gushyirwa gusa mu mwanya wa module ya BYPASS; ubwoko bwa module "MON-MOD-XXX" bushobora gushyirwa gusa mu mwanya wa module ya MONITOR kugira ngo ikore neza.

Ibisobanuro bya Switch ya TAP Bypass ya 4-Network

Porogaramu ya 5-Network TAP Bypass Switch (nk'uko bikurikira)

Ibi bikurikira ni uburyo busanzwe bwa IPS (Intrusion Prevention System), uburyo bwa FW (Firewall), IPS / FW ishyirwa ku bikoresho bya interineti (routers, switches, nibindi) hagati y’urujya n’uruza rw’abantu binyuze mu ishyirwa mu bikorwa ry’igenzura ry’umutekano, hakurikijwe politiki y’umutekano ijyanye nabyo kugira ngo hamenyekane uburyo bwo kurekura cyangwa guhagarika urujya n’uruza rw’abantu, kugira ngo hagerwe ku ngaruka zo kurinda umutekano.

Muri icyo gihe, dushobora kubona IPS / FW nk'uburyo ibikoresho bishyirwa mu buryo bw'uruhererekane, akenshi bigashyirwa ahantu fatizo h'umuyoboro w'ikigo kugira ngo bishyire mu bikorwa umutekano w'uruhererekane, ubwizerwe bw'ibikoresho byayo bihujwe bigira ingaruka zitaziguye ku mikoreshereze y'umuyoboro w'ikigo muri rusange. Iyo ibikoresho bishyirwa mu buryo bw'uruhererekane byuzuye, bigacika, bigahinduka porogaramu, bigavugurura politiki, nibindi, imikoreshereze y'umuyoboro w'ikigo cyose izahinduka cyane. Muri iki gihe, binyuze gusa mu gukata umuyoboro, dukoresha uburyo bwa "physical bypass jumper" dushobora gutuma umuyoboro usubizwamo, bigira ingaruka zikomeye ku bwizerwe bw'umuyoboro. IPS / FW n'ibindi bikoresho bishyirwa mu buryo bw'uruhererekane ku ruhande rumwe binoza uburyo umutekano w'umuyoboro w'ikigo ushyirwa mu bikorwa, ku rundi ruhande bigabanya kandi uburyo imiyoboro y'ikigo ishyirwa mu bikorwa, bikongera ibyago byo kuba umuyoboro utaboneka.

5.2 Uburinzi bw'ibikoresho bya Inline Link Series

"Bypass Switch" ya Mylinking™ ishyirwa mu byiciro hagati y'ibikoresho bya interineti (routers, switches, nibindi), kandi urujya n'uruza rw'amakuru hagati y'ibikoresho bya interineti ntiruzongera kugera kuri IPS / FW, "Bypass Switch" kuri IPS / FW, iyo IPS / FW bitewe no kurenza urugero, kugwa, kuvugurura porogaramu, kuvugurura politiki n'izindi mpamvu zo gutsindwa, "Bypass Switch" binyuze mu buryo bw'ubwenge bwo kumenya ubutumwa bw'umutima. Imikorere yo kuvumbura ubutumwa ku gihe, bityo ikarenga igikoresho gifite ikibazo, idahagaritse intego y'umuyoboro, ibikoresho byihuse bya interineti bihujwe neza kugira ngo birinde umuyoboro usanzwe w'itumanaho; iyo IPS / FW inaniwe gusubirana, ariko nanone binyuze mu mapaki y'ubwenge yo kumenya imikorere. Kumenya imikorere ku gihe, umurongo w'umwimerere wo kugarura umutekano w'igenzura ry'umutekano w'umuyoboro w'ikigo.

"Bypass Switch" ya Mylinking™ ifite ubushobozi bwo kumenya ubutumwa bw'umutima bukoresha ubwenge, umukoresha ashobora guhindura igihe umutima utera n'umubare ntarengwa w'ibizamini byo gusubiramo, binyuze mu butumwa bwihariye bw'umutima kuri IPS / FW kugira ngo habeho isuzuma ry'ubuzima, nko kohereza ubutumwa bwo gusuzuma umutima kuri IPS / FW, hanyuma ukabona ubutumwa buturutse kuri IPS / FW, hanyuma ugasuzuma niba IPS / FW ikora neza binyuze mu kohereza no kwakira ubutumwa bw'umutima.

5.3 Politiki ya "SpecFlow" yo kurinda uruhererekane rw'imiyoboro y'amashanyarazi

Iyo igikoresho cy’umutekano gikeneye gusa guhangana n’umutekano wihariye w’urujya n’uruza rw’imodoka, binyuze mu buryo bwa Mylinking™ "Bypass Switch" bwo kugenzura urujya n’uruza rw’imodoka buri gihe, binyuze mu ngamba zo gusuzuma urujya n’uruza rw’imodoka kugira ngo igikoresho cy’umutekano "Byitayeho" cyohererezwa ku murongo w’itumanaho, kandi igice cy’imodoka "kireba" ni ugufata igikoresho cy’umutekano kiri ku murongo kugira ngo gikore igenzura ry’umutekano. Ibi ntibizakomeza gusa gukoresha neza imikorere y’igikoresho cy’umutekano, ahubwo bizanagabanya urujya n’uruza rw’ibikoresho by’umutekano kugira ngo bihangane n’umuvuduko; icyarimwe, "Bypass Switch" ishobora kumenya imikorere y’igikoresho cy’umutekano mu gihe nyacyo. Igikoresho cy’umutekano gikora mu buryo budasanzwe kinyura mu buryo butaziguye urujya n’uruza rw’amakuru kugira ngo hirindwe ko serivisi y’umuyoboro yahungabanywa.

Mylinking™ Traffic Bypass Protector ishobora kumenya traffic traffic hashingiwe ku kimenyetso cy’umutwe wa L2-L4, nka VLAN tag, aderesi ya MAC y’aho iherereye/aho iherereye, aderesi ya IP y’aho iherereye, ubwoko bwa paki ya IP, port ya protocol y’urwego rwo gutwara, protocol header key tag, n'ibindi. Uburyo butandukanye bwo guhuza ibintu bushobora gusobanurwa mu buryo bworoshye kugira ngo hamenyekane traffic types zihariye zifitiye akamaro igikoresho runaka cy’umutekano kandi zishobora gukoreshwa cyane mu gushyiraho ibikoresho byihariye byo kugenzura umutekano (RDP, SSH, database auditing, nibindi).

5.4 Uburinzi bw'uruhererekane rw'imizigo buringaniye

"Bypass Switch" ya Mylinking™ ishyirwa mu buryo butandukanye hagati y’ibikoresho bya interineti (routers, switches, nibindi). Iyo imikorere imwe ya IPS / FW idahagije kugira ngo ihangane n’urujya n’uruza rw’itumanaho, imikorere yo kuringaniza umutwaro w’urujya n’uruza rw’itumanaho rya interineti, "guhuza" urujya n’uruza rw’itumanaho rya interineti rya IPS / FW, bishobora kugabanya neza igitutu cyo gutunganya IPS / FW, kunoza imikorere rusange yo gutunganya kugira ngo ihuze n’umuvuduko munini w’ahantu ho kohereza.

"Bypass Switch" ya Mylinking™ ifite imikorere ikomeye yo kuringaniza umutwaro, hakurikijwe ikirango cya VLAN, amakuru ya MAC, amakuru ya IP, nimero ya port, protocole n'andi makuru ku ikwirakwizwa rya Hash ry'umutwaro mu kuringaniza umutwaro kugira ngo buri IPS / FW yakiriye ubuziranenge bwa Session y'umuvuduko w'amakuru.

5.5 Uburinzi bw'ibikoresho byinshi biri mu murongo (Hindura umurongo uhuza ibikoresho kuri parallel connection)
Muri zimwe mu mbuga z'ingenzi (nk'amasoko ya interineti, umurongo wo guhanahana amakuru ku gace ka seriveri), aho hantu akenshi haterwa n'ibikenewe ku bikoresho by'umutekano no gushyiraho ibikoresho byinshi byo gupima umutekano (nk'umuriro, ibikoresho byo kurwanya DDOS, umuriro wo kwirinda kwinjira muri porogaramu ya WEB, ibikoresho byo gukumira kwinjira, nibindi), ibikoresho byinshi byo kumenya umutekano icyarimwe mu buryo bukurikiranye kuri uwo murongo kugira ngo byongere umurongo w'aho ikintu kimwe cyangiritse, bigabanye icyizere rusange cy'umuyoboro. Kandi muri ibyo bikoresho by'umutekano byavuzwe haruguru byo gushyira ahagaragara kuri interineti, kuvugurura ibikoresho, gusimbuza ibikoresho n'ibindi bikorwa, bizatuma umuyoboro uhagarara igihe kirekire kandi umushinga munini ugahagarika ibikorwa byo kurangiza ishyirwa mu bikorwa ry'iyo mishinga neza.

Mu gushyira "Bypass Switch" mu buryo bumwe, uburyo bwo gushyiraho ibikoresho byinshi by’umutekano bihujwe mu buryo bukurikiranye ku murongo umwe bushobora guhinduka kuva kuri "uburyo bwo guhuza imiterere" kugera kuri "uburyo bwo guhuza imiterere, uburyo bwo guhuza imiterere". Umurongo uri ku murongo w’ingingo imwe yo kunanirwa kunoza ubwizigirwa bw’umurongo, mu gihe "bypass switch" ku murongo igenda ku buryo bwo gukurura, kugira ngo hagerwe ku murongo umwe n’uburyo bw’umwimerere bwo gutunganya neza.

Ibikoresho by'umutekano birenze kimwe icyarimwe mu mbonerahamwe yo gushyira mu bikorwa:

Ishusho yo Gukoresha Switch ya Mylinking™ Network TAP Bypass:

5.6 Hashingiwe ku ngamba zihamye zo kurinda umutekano wo gushakisha inzira z'imodoka
"Bypass Switch" Indi porogaramu igezweho ishingiye ku ngamba zihamye zo kurinda umutekano w'imodoka, uburyo bwo kuyikoresha nk'uko bigaragara hano hasi:

Fata ibikoresho byo gupima umutekano bya "Anti-DDoS attack protection and detection", urugero, binyuze mu gushyira imbere "Bypass Switch" hanyuma ibikoresho byo kurinda anti-DDOS hanyuma ugahuzwa na "Bypass Switch", mu "Traction protector" isanzwe, kugeza ku muvuduko wose w'umuvuduko w'inzira icyarimwe, indorerwamo y'amazi ijya kuri "anti-DDOS attack protection", iyo imaze kugaragara kuri seriveri ya IP (cyangwa segiteri ya IP network) nyuma y'igitero, igikoresho cyo kurinda ibitero cya anti-DDOS "kizatanga amategeko ajyanye n'inzira y'umuhanda kandi kiyohereze kuri "Bypass Switch" binyuze mu buryo bwo gutanga politiki ihindagurika. "Bypass Switch" ishobora kuvugurura "traffic traction dynamic" nyuma yo kwakira amategeko agenga politiki ihindagurika. Itegeko ritangira "kandi ako kanya" rigahita rikubita ibikoresho byo kurinda ibitero bya seriveri "traction to the" anti-DDoS attack protection and detection "yo gutunganya, kugira ngo bikore neza nyuma y'ibitero hanyuma bikongere gushyirwa mu muyoboro.

Gahunda yo gukoresha ishingiye kuri "Bypass Switch" iroroshye kuyishyira mu bikorwa kurusha gahunda isanzwe yo gushyira inzira ya BGP cyangwa indi gahunda yo gukurura abantu, kandi ibidukikije ntibishingira cyane ku muyoboro w'itumanaho kandi icyizere kiri hejuru.

"Bypass Switch" ifite ibi bikurikira kugira ngo ishyigikire uburinzi bw'umutekano buhindagurika bwa politiki:
1, "Bypass Switch" kugira ngo bitange ibintu bitari amategeko ashingiye kuri interface ya WEBSERIVCE, byoroshye guhuza n'ibikoresho by'umutekano by'abandi.
2, "Bypass Switch" ishingiye kuri chip ya ASIC yohereza ubutumwa bugufi kugeza kuri paki za 10Gbps nta gufunga uburyo bwo kohereza ubutumwa, na "ububiko bw'amategeko agenga traffic traction dynamic rule" hatitawe ku mubare.
3, "Bypass Switch" imikorere ya BYPASS yubatswemo n'umwuga, nubwo umurinzi ubwe yananirwa, ashobora no guhita anyura ku murongo w'ibanze w'itsinda ry ...