Menya uburyo bwo gukora Mylinking y'umwugaTMNetwork Packet Broker yoroshya uburyo bwo kugenzura imiyoboro kuva ku mpera kugeza ku mpera, ikuraho imyanda y'ibikoresho, igabanya igihombo cya paki, kandi yongereye inyungu ku igenzura ry'imiyoboro yawe n'ibikorwa remezo by'umutekano w'imiyoboro mu bidukikije by'amakuru byihuta cyane.
Intangiriro: Ikibazo cy’imikorere myiza cyihishe mu igenzura rya none ry’imiyoboro y’itumanaho
Imiyoboro ya none y’ibigo ikomeje gutera imbere vuba cyane hamwe n’imiyoboro yihuta ya 10G, 25G, 40G, na 100G, imiyoboro igaragara hejuru y’amakuru, imirimo myinshi yo mu bicu, hamwe n’urujya n’uruza rw’abantu benshi banyuze mu buryo buhishe. Kugira ngo bikomeze guhindagurika.Gukurikirana Umuyoborokandi ikomeyeUmutekano w'Umuyoboro, ibigo byinshi bikoresha ibikoresho byinshi byo gusesengura, birimo Network Performance Monitors (NPM), Application Performance Monitors (APM), Intrusion Detection Systems (IDS), na platforms zo kugenzura ubugenzuzi. Ariko, amatsinda menshi ya IT na SecOps yirengagiza ikibazo gikomeye cyihishe: ibikoresho byo kugenzura bikunze gukoreshwa cyane, gukoreshwa nabi, cyangwa byuzuyemo urujya n'uruza rw'abantu rudakora neza, bigatuma habaho imikorere mike, gutakaza kenshi paki, gutanga amakuru adafite ishingiro, hamwe n'ibiciro bitari ngombwa byo kuvugurura ibikoresho.
Imiterere gakondo yo kugenzura ishingiye gusa ku mbuga za switch SPAN na TAP za passive network kugira ngo abantu bakusanye amakuru. Ubu buryo bw'ibanze butanga amakuru adafunguye kandi adakozwe neza ku bikoresho byo hasi, bigatuma habaho imbogamizi nyinshi mu mikorere. Amapaki menshi agizwe n'amakuru, amakuru adafite aho ahuriye n'inyuma, amafaranga menshi cyane, umuvuduko utaringaniye, n'urusaku rw'amakuru acukuwe mu buryo buhora bitwara CPU, ububiko, n'ububiko bw'ibikoresho by'umutekano n'igenzura. Kubera iyo mpamvu, amakuru y'ingenzi y'ibyago n'ibipimo by'imikorere bikunze gupfukwa mu mubare munini w'abantu badakora neza, bigatera ibibazo bikomeye.Umutekano w'Umuyoborouburyo bwo kumenya neza noGukurikirana Umuyoborokwizerwa.
Aha niho umuhangaKwandika kuri interinetiTM Umuhuzabikorwa w'amapaketi y'umuyoboro (NPB)Ihinduka igice cy'ingenzi cy'ingenzi mu bikorwa remezo bigezweho byo kubona amakuru. Nk'igikoresho cyo guhuza uburyo ibintu bikorerwa mu buryo bw'ikoranabuhanga, Network Packet Broker iri hagati y'ahantu ho gukusanya amakuru (TAPs, SPAN ports, virtual cloud taps) n'ibikoresho byo gusesengura. Ikora uburyo bwo gutunganya amakuru ku rwego rwa hardware, gutunganya neza no gukwirakwiza amakuru mu buryo bw'ubwenge, ikemura ibibazo by'imikorere y'ibikoresho no gukoresha neza ibikoresho bihari byo kugenzura no kurinda umutekano. Iyi ngingo isesengura uburyo Network Packet Broker ikoresha neza ibikoresho byo kugenzura amakuru mu buryo bw'ikoranabuhanga ihereye ku mahame ya tekiniki, imikorere y'ingenzi, n'agaciro k'ibikorwa byo gushyiraho amakuru.
Imbogamizi z'imikorere myiza y'inyubako gakondo zo kugenzura imiyoboro y'itumanaho
Mbere yo gusuzuma ubushobozi bwo kunoza NPB, ni ngombwa gusobanura impamvu nyamukuru zituma ibikoresho byo kugenzura bidakora neza mu buryo busanzwe bwo kubikoresha. Ibi bibazo bikunze kugaragara mu bigo bito n'ibiciriritse by'amakuru ndetse no mu bidukikije binini by'ibicu bivanze, bibangamira mu buryo butaziguye imikorere yabyo.Gukurikirana UmuyoboronaUmutekano w'Umuyoborosisitemu.
1. Gukoresha ibikoresho byinshi biterwa n'urujya n'uruza rw'abantu batabisukuye
Gukusanya amakuru hifashishijwe SPAN na TAP bifata amakuru yose anyura mu muyoboro w’itumanaho, harimo umubare munini w’amapaki y’inyuma adakora neza, amapaki y’amatangazo, n’urujya n’uruza rw’ubucuruzi rudashyirwa imbere cyane. Ibikoresho byo kugenzura no kurinda umutekano bihatirwa gutunganya amakuru yose adashunguwe, bigatuma umutungo wose ukoreshwa. Iyo urujya n’uruza rw’abantu rubaye rwinshi mu masaha y’akazi, ibikoresho ntibishobora kwibanda ku gusesengura amakuru y’ingenzi y’ibitero n’imikorere, bigatuma isesengura ritinda, ibimenyetso bitari byo, ndetse n’ibihombo bikomeye by’amapaki.
2. Imyanda y'umutungo ituruka ku mapaki akomeye ya kopi
Mu buryo bwo gushakisha amakuru hakoreshejwe uburyo bwinshi butandukanye (multi-switch) no mu buryo bwinshi butandukanye (multi-node mirroring), ahantu ho gukusanya amakuru hahurirana hatanga umubare munini w’amapaki abiri. Aya makuru ntatanga igenzura cyangwa umutekano uhagije ariko afata umwanya munini wo gutunganya ibikoresho n’ububiko. Nk’imwe mu miterere y’ingenzi ya Network Packet Broker igezweho yo kunoza imiyoboro, gukuraho imyanda nk’iyo y’imodoka kandi bigatuza imikorere y’igenzura ry’igihe kirekire. Gukusanya amakuru abiri menshi mu buryo buhoraho bigabanya imikorere myiza y’ibikoresho kandi byongera ingorane zo gusesengura amakuru no gukemura ibibazo.
3. Kugabanya ubushobozi bw'ibikoresho by'umuvuduko n'imikoranire
Ibigo byinshi byazamuye umuyoboro wabyo w’ibanze ukagera ku miterere y’umuvuduko wa 40G/100G ariko biracyafite ibikoresho byo kugenzura 1G/10G bigezweho kandi byihuse. Uburyo bwo kugera ku muvuduko wa 1G/10G mu buryo butaziguye butera kunanirwa kwumvikana ku muvuduko wa ikoranabuhanga cyangwa gukoresha ibikoresho byinshi cyane. Hagati aho, uburyo buke bwo kugenzura ikoranabuhanga budashobora guhaza icyifuzo cyo gukusanya ikoranabuhanga mu buryo butandukanye, bigatuma ibikoresho bidakora neza kandi umutungo w’ibikoresho upfushwa ubusa.
4. Umutwaro utari wo n'urusaku rw'imiyoboro y'amazi bibangamira isesengura
Uburyo bwinshi bwo kugenzura imikorere ya network busaba gusa amakuru y’umutwe wa L2-L4 kugira ngo hamenyekane imibare ya bandwidth, isesengura ry’igihe gito, n’aho amakosa aherereye. Kohereza amafaranga yose mu ipaki bitera gutakaza imbaraga cyane. Byongeye kandi, urujya n’uruza rw’urubuga rwa interineti rugizwe na VXLAN, GRE, na MPLS rufite imitwe ya tunnel idakora. Ibikoresho gakondo ntibishobora gukuraho iyi mitwe, bigatuma abantu bananirwa kumenya urujya n’uruza rw’imbere kandi bigatuma habaho ahantu hatagaragara ho kugenzura.
Uburyo bwo guhuza ibitekerezo byanjyeTMUmuhuzabikorwa wa Network Packets ni we wongera ubushobozi bwo kugenzura ibikoresho mu buryo bwiza?
UmuhangaUmuhuzabikorwa w'amapaki y'itumanahoishingiye ku buryo bwo gutunganya vuba ibikoresho kugira ngo ishyire mu bikorwa uburyo bwo kunoza urusaku rw'itumanaho. Iyungurura urusaku, igakuraho amakuru adafite akamaro, ikaringaniza umuvuduko w'urujya n'uruza rw'abantu, igena imiterere y'amakuru, kandi igakwirakwiza urujya n'uruza rw'abantu ku bikoresho bihuye, binongera cyane imikorere yaGukurikirana UmuyoboronaUmutekano w'Umuyoboroibikoresho bitagize ingaruka ku muvuduko w'umusaruro.
1. Gushungura ibinyabiziga mu buryo bw'ubwenge: Gukingira urusaku rudakwiye no kunoza amakuru yemewe
Intego nyamukuru yo kunoza imikorere y'ibikoresho ni ukugabanya uburyo bwo gutunganya amakuru butari bwo. Network Packet Broker ishyigikira uburyo bwo kuyungurura politiki bufite imiterere myinshi bushingiye kuri protocole za Ethernet, tags za VLAN, IP seven-tuples, TCP flags, hamwe n'ahantu ho gushungura packet za byte 128. Abayobozi bashobora gushyiraho amategeko anonosoye yo kuyungurura hakurikijwe imiterere y'ubucuruzi, bakinga urujya n'uruza rw'amajwi rudakwiye, urujya n'uruza rw'amajwi rudakenewe, ndetse n'urusaku rw'amajwi rudakenewe mu bucuruzi.
Ku bwoko butandukanye bw'ibikoresho byo kugenzura, NPB itanga ibice byihariye by'ibigenda ku muhanda: kohereza inzira z'ingenzi zijyanye n'ubucuruzi ku bikoresho byo gusesengura imikorere ya APM, kohereza ibigenda ku mipaka ku bikoresho byo gushakisha umutekano wa IDS, no gutandukanya ibigenda ku muhanda byemewe n'amategeko ku bikoresho byo kugenzura. Iri kwirakwiza ry'ibigenda ku muhanda rigamije gutuma buri gikoresho gitunganya gusa amakuru ajyanye n'aho giherereye, birinda ko umutungo winjira mu muhanda utari wo kandi bikanoza cyane uburyo bwo gusesengura no gukora neza mu gihe nyacyo.
2. Gukuraho Paketi y'ibikoresho: Kuraho imyanda idasanzwe y'amakuru
Ikoranabuhanga ryo gukuraho ibikoresho by’ikoranabuhanga ryubatswemo ni bumwe mu bushobozi bw’ingenzi bwo kunoza imikorere ya Network Packet Broker. Ku mapaki abiri yakozwe hakoreshejwe uburyo bwinshi bwo kureba no gukusanya ibikoresho bitandukanye, NPB igereranya amakuru y’ibiranga paki nka IP z’aho iherereye n’aho ijya, nimero za port, n’imibare ya TCP ku muvuduko w’umurongo, igumana gusa paki zihariye kandi igakuraho burundu amakuru abiri asanzwe.
Amakuru afatika agaragaza ko gukuraho amakuru muri NPB bishobora kugabanya umubare w’abakoresha ibikoresho byo kugenzura ku kigero cya 40%–60%. Uku gukora neza bigabanya cyane umuvuduko wa CPU n’ububiko bw’ibikoresho, bikuraho amakosa yo gusesengura n’amatangazo atari yo aterwa n’amakuru abiri, kandi bigatuma ibikoresho byo kugenzura n’umutekano byibanda ku bintu bidasobanutse neza ku miyoboro nyayo n’imyitwarire y’iterabwoba, bigatera imbere muri rusange.Umutekano w'Umuyoboroubushobozi bwo kwirwanaho naGukurikirana Umuyoboroubuziranenge.
3. Kugenzura Imitwaro y'Ibiganiro: Irinde Gukoresha Ibikoresho Birenze Ubushobozi no Kugabanya Imikoreshereze y'Umutungo
Ikwirakwizwa ry’urujya n’uruza rw’abantu ritaringaniye ni ikintu cy’ingenzi gituma ibikoresho bidakora neza. Network Packet Broker ishyigikira uburyo bwa L2-L7 bwo guhuza imitwaro bw’ubwenge, bukwirakwiza urujya n’uruza rw’abantu ku buryo bungana mu buryo bungana mu bikoresho byinshi cyangwa mu matsinda y’ibikoresho. Ikemura neza ikibazo cy’umutwaro w’ibikoresho bimwe kandi ikirinda kudakoresha neza ibikoresho. Ihujwe n’ubushobozi bw’ibanze bwo gutunganya amakuru harimo kuyungurura, gukata no gusibanganya amakuru, ubu buryo bwo guhuza imitwaro bwubatse urufatiro rwuzuye rwo kumenya amakuru ku mutekano w’ikigo cy’amakuru.
Ku bikoresho byo kugenzura byihuta cyane byakoreshejwe mu miyoboro ya 100G yihuta cyane, NPB ikora nk'igikoresho cy'umwuga cyo guhindura umuvuduko no guhindura ubwiyongere bw'imigendere. Ihuza kandi igakwirakwiza ubwiyongere bw'umuvuduko mwinshi kugira ngo ihuze n'imiterere y'ibikoresho byihuta cyane, bigatuma ibikoresho bishaje bikomeza gukora neza nta kuvugurura ibikoresho kenshi. Iyi mikorere yongera cyane igihe cyo gukora cy'igihe gisanzwe.Gukurikirana UmuyoboronaUmutekano w'Umuyoboroibikoresho no kugabanya amafaranga akoreshwa mu ikoranabuhanga mu bigo.
4. Gukata Paketi Ishingiye kuri Politiki: Kugabanya Ubugari bwa Bandwidth n'Ububiko
Kohereza amafaranga yose mu ipaki ni impamvu ikomeye itera umuvuduko mwinshi w’umuvuduko w’ibikoresho. Network Packet Broker ishyigikira uburyo bwo gukata amapaki bushingiye kuri politiki, bushobora gufata amakuru y’amapaki mu rugero rwa byte rudahinduka (byte 64–1518) hakurikijwe ibisabwa mu igenzura. Ku mibare ya buri munsi ya byte mu ipaki, gukurikirana igihe cyo gutinda, no gusesengura uko urujya n’uruza rugenda, NPB igumana gusa amakuru y’ibanze ya L2-L4 kandi igakuraho imitwaro y’imitwaro idafite akamaro mu ipaki.
Uku kunoza imikorere bigabanya ikoreshwa ry’umurongo w’itumanaho kugeza kuri 90%, bigabanya cyane uburyo bwo kubika amakuru n’ikwirakwizwa ry’ibikoresho byo kugenzura. Ku bibazo bikomeye nko kumenya umutekano w’imipaka no gusesengura impanuka, abayobozi bashobora guhagarika uburyo bwo gukata kugira ngo babike amakuru yose, bakareba ko amakuru ahagije yo gusesengura impanuka yimbitse. Ingamba zo gukata zihuza neza imikorere y’ibikoresho no kugenzura neza.
5. Gukuraho Umutwe w'Umuyoboro w'Amakuru no Gushyiraho Imiterere y'Amakuru: Kuraho Inzitizi zo Gusesengura
Urujya n'uruza rw'amakuru rwashyizwe mu buryo bwa virtualized data center rugizwe na VXLAN, GRE, MPLS, na GTP akenshi ntirushobora kumenyekana neza no gusesengurwa hakoreshejwe ibikoresho bisanzwe byo kugenzura. Network Packet Broker ishyigikira uburyo bwo gukuraho uduce duto tw'ibikoresho no gukuraho umutwe, igakuraho amakuru yo gufunga uduce duto tw'inyuma no kugarura urujya n'uruza rw'imbere mu bucuruzi.
Nyuma yo gutunganya NPB, imiterere y'amakuru ajyanye n'urugendo irahuzwa, bikuraho aho amakuru agaragara aturuka bitewe no gufunga inzira. Muri icyo gihe, NPB ishyigikira kongeramo, gusiba no gusimbuza VLAN tag, igakora uburyo bwo guhuza imiterere y'urujya n'uruza rw'abantu ku bikoresho bitandukanye byo gukurikirana, igenzura neza kandi neza, kandi ikirinda gutakaza ubushobozi buterwa no kudahuza neza kw'imiterere y'amakuru.
Ubushobozi bw'inyongera bwa NPB bwo kongera imikorere myiza mu kugenzura igihe kirekire
Uretse imirimo y'ingenzi yo kunoza uburyo abantu basura urubuga rwabo, ubushobozi bwinshi bwa Network Packet Broker bufasha ibigo mu kunoza imikorere myiza y'igihe kirekire.Gukurikirana UmuyoboronaUmutekano w'Umuyoborosisitemu, kugabanya ikiguzi cyo gukoresha intoki no kubungabunga, no kwirinda kwangirika k'imikorere guterwa n'ibintu bitari urujya n'uruza rw'abantu.
1. Guteranya urujya n'uruza rw'abantu mu buryo buhuriweho byoroshya imiterere y'igenzura
NPB ikusanya urujya n'uruza rw'abantu bava kuri TAP nyinshi zikwirakwijwe, ibyambu bya SPAN, n'uduce tw'ubugenzuzi bw'ikoranabuhanga mu buryo bw'ikoranabuhanga, bigakemura ikibazo cy'urujya n'uruza rw'abantu benshi batatanye. Yirinda uburyo bwo guhuza imiyoboro y'itumanaho hagati y'ahantu henshi ho gukusanya amakuru n'ibikoresho byinshi, yoroshya imiterere rusange y'ubugenzuzi, igabanya akazi ko gusana hakoreshejwe intoki, kandi ikagabanya igipimo cyo gutsindwa kwa sisitemu yo kugenzura. Imiterere yoroshye ituma ibikoresho byo kugenzura bihora bikora neza kandi mu buryo burambye.
2. Gushyiraho isaha neza binoza imikorere myiza mu gusesengura amakosa
Network Packet Broker itanga uburyo bwo gupima igihe buhamye bw’ibikoresho, ihuza na seriveri za NTP kugira ngo igaragaze amapaki yose yafashwe mu buryo bumwe. Mu buryo busanzwe bwo kugenzura, uburyo bwo gupima igihe buhindagurika bw’amakuru y’ibigenda mu muhanda bitandukanye butuma habaho isano ikomeye y’ibyabaye no gutinda aho ikibazo kiri. Uburyo bwo gupima igihe buhuriweho bwa NPB bufasha abakozi bakora n’abashinzwe kubungabunga ibikorwa byabo gukosora vuba urukurikirane rw’ibikorwa by’umuhanda, kumenya neza amakosa y’umuyoboro w’itumanaho n’inkomoko y’ibibazo by’umutekano, no kugabanya cyane igihe cyo gukemura (MTTR).
3. Kuramo ibikoresho bigezweho kugira ngo ugabanye umutwaro w'ibikoresho
NPB ikuramo imirimo isaba ibikoresho byinshi nko gusiba SSL/TLS no gupfuka amakuru y’ingenzi ku giti cyayo binyuze mu miyoboro ya mudasobwa. Iyi mirimo isanzwe ikoresha ibikoresho byinshi by’umutekano bya CPU. Nyuma yo gukuramo amakuru, ibikoresho byo kugenzura no gucunga umutekano bigomba kurangiza isesengura ry’amakuru no gucira imanza ibitero, birinda kwangirika kw’imikorere guterwa n’umuvuduko ukabije wa mudasobwa no kwemeza ko ibikoresho bikomeza gukora neza mu gihe kirekire.
Agaciro k'ubucuruzi bufatika: Kunoza imikorere myiza y'ibikoresho no kugabanya ikiguzi
GukoreshaUmuhuzabikorwa w'amapaki y'itumanahobizana iterambere rifatika mu mikorere myiza n'inyungu mu bukungu ku bigoGukurikirana UmuyoboronaUmutekano w'Umuyoboroubwubatsi. Ubwa mbere, byongera umuvuduko w'ikoreshwa ry'ibikoresho bikoreshwa mu kugenzura, birinda gukuraho ibikoresho bishobora gukoreshwa mbere y'igihe, kandi bigabanya ikiguzi cyo kugura no kuvugurura ibikoresho. Icya kabiri, gutunganya neza uburyo bwo kugenzura amakuru bikuraho ihungabana ry'amakuru ritari ryo, byongera uburyo bwo kumenya no kumenya ibibangamiye imiyoboro y'itumanaho, kandi bigabanya igihombo giterwa n'amatangazo atari yo n'amakuru atari yo.
Icya gatatu, imicungire y’ikoranabuhanga mu micungire y’ibinyabiziga igabanya akazi ko gukoresha intoki no kubungabunga, yongera imikorere myiza y’amatsinda ya NetOps na SecOps, kandi igagabanya imikorere yo gukemura ibibazo by’amakosa ya interineti no guhangana n’ibibazo by’umutekano. Amaherezo, amakuru asanzwe kandi agezweho atanga inkunga y’amakuru nyayo kandi yuzuye yo gutegura ubushobozi bw’itumanaho, gusesengura urujya n’uruza rw’ubucuruzi, no gusuzuma ingaruka z’umutekano, bifasha ibigo kugera ku mikorere myiza no kubungabunga umurongo w’itumanaho.
Rero,Mu gihe cy'imiyoboro y'ibigo yihuta cyane, ifite ikoranabuhanga rya virtual, kandi ikoresha uburyo bwa "encrypted", imikorere myiza yaGukurikirana UmuyoboronaUmutekano w'UmuyoboroIbikoresho bigena ubushobozi rusange bwo kubona no kurinda umuyoboro. Imiterere gakondo yo kugenzura SPAN na TAP ntabwo izongera kumenyera ibidukikije bigoye, kandi ibibazo nko gucurika ibikoresho, gusibanganya amakuru, kudahuza neza imiterere, no gusesagura umutungo byabaye imbogamizi zikomeye zibangamira imikorere myiza yo kugenzura.
Nk'ibikoresho by'ingenzi by'ibikorwa remezo bigezweho byo kubonana n'imiyoboro,Umuhuzabikorwa w'amapaki y'itumanahoInoza imikorere y'ibikoresho byo kugenzura mu buryo bwose binyuze mu kuyungurura imiyoboro, gukuramo uduce duto, kuringaniza imizigo, gukata uduce duto, gutandukanya uduce duto tw'amashanyarazi, no gushyiraho uburyo bwo gupima amakuru. Ntabwo ikemura gusa ibibazo bitandukanye by'imiterere gakondo yo kugenzura, ahubwo inanongera inyungu y'amafaranga aturuka ku bikoresho byo kugenzura no gucunga umutekano, yoroshya imicungire y'imikorere n'imicungire y'ibikoresho, kandi igashyiraho urufatiro rukomeye ku bigo kugira ngo byubake sisitemu nziza, iboneye kandi yuzuye yo kugenzura no kurinda umutekano.
Ku bigo biharanira imikorere myiza ya network, gukurikirana imikorere ihamye, no kugenzura ikiguzi mu gihe kirekire, gushyiraho Network Packet Broker w’umwuga ni cyo gisubizo gihendutse cyane cyo kunoza uburyo network igaragara n’imikorere myiza y’ibikoresho. Kugira ngo umenye byinshi ku mikorere y’ingenzi, uburyo bwo gushyiraho porogaramu mu buryo bufatika, n’agaciro k’umutekano wa NPB, sura urukurikirane rwacu rwuzuye rwa blog z’umwuga zivuga kuriUmuhuzabikorwa w'amapaki y'itumanaho, Gukurikirana Umuyoboro, naUmutekano w'Umuyoboroibisubizo byo kunoza imikorere y'ibigo bigezweho by'amakuru.
Igihe cyo kohereza: Kanama-20-2026
