Network Packet Broker (NPB) ni igikoresho cy’itumanaho kimeze nk’imashini ihuza ingano kuva ku bikoresho bitwarwa kugeza ku byuma bya 1U na 2U kugeza ku byuma binini na sisitemu z’amabaruwa. Bitandukanye na switch, NPB ntabwo ihindura urujya n’uruza rw’abantu runyuramo mu buryo ubwo aribwo bwose keretse iyo bisabwe neza. NPB ishobora kwakira urujya n’uruza rw’abantu kuri interineti imwe cyangwa nyinshi, igakora imirimo imwe n’imwe yagenwe kuri iyo nzira, hanyuma ikayishyira kuri interineti imwe cyangwa nyinshi.
Ibi bikunze kwitwa "any-to-any, many-to-any, and any-to-mapping" ya port. Imirimo ishobora gukorwa iva ku byoroshye, nko kohereza cyangwa guta umurongo w'itumanaho, kugeza ku bintu bigoye, nko gushungura amakuru ari hejuru y'icyiciro cya 5 kugira ngo hamenyekane igihe runaka. Interfaces kuri NPB zishobora kuba imiyoboro y'umuringa, ariko akenshi ni SFP/SFP + na QSFP frames, zemerera abakoresha gukoresha uburyo butandukanye bwo gukoresha itangazamakuru n'umuvuduko wa bandwidth. Imiterere ya NPB yubakiye ku ihame ryo kongera imikorere y'ibikoresho bya network, cyane cyane ibikoresho byo kugenzura, gusesengura, n'umutekano.
Ni iyihe mirimo umuhuzabikorwa wa Network Packet atanga?
Ubushobozi bwa NPB ni bwinshi kandi bushobora gutandukana bitewe n'ikirango n'icyitegererezo cy'igikoresho, nubwo umuhuza wese w'ibikoresho by'ingenzi agomba kuba afite ubushobozi bw'ibanze. NPB nyinshi (NPB isanzwe cyane) ikora ku byiciro bya OSI kuva kuri 2 kugeza kuri 4.
Muri rusange, ushobora gusanga ibi bikurikira kuri NPB ya L2-4: kwimura urujya n'uruza rw'abantu (cyangwa ibice byarwo byihariye), kuyungurura urujya n'uruza rw'abantu, gukoporora urujya n'uruza rw'abantu, gukuraho protocole, gukata packet (gukata), gutangiza cyangwa guhagarika protocole zitandukanye za network tunnel, no kuringaniza load kuri traffic. Nkuko byitezwe, NPB ya L2-4 ishobora gushungura VLAN, MPLS labels, aderesi za MAC (isoko n'intego), aderesi za IP (isoko n'intego), imiyoboro ya TCP na UDP (isoko n'intego), ndetse n'amabendera ya TCP, ndetse na ICMP, SCTP, na ARP traffic. Iki si ikintu cyo gukoreshwa na gato, ahubwo gitanga igitekerezo cy'uburyo NPB ikora ku byiciro kuva kuri 2 kugeza kuri 4 ishobora gutandukanya no kumenya ibice by'urujya n'uruza rw'abantu. Ikintu cy'ingenzi abakiriya bagomba kureba muri NPB ni backplane idahagarika.
Umuhuza w’amapaketi ya interineti agomba kuba ashobora kugera ku muvuduko wose w’urujya n’uruza rwa buri cyambu kuri igikoresho. Muri sisitemu ya chassis, guhuza n’inyuma bigomba kandi kuba bishobora kugera ku muvuduko wose w’urujya n’uruza rwa modules zihujwe. Iyo NPB itaye paki, ibi bikoresho ntibizasobanukirwa neza umuyoboro.
Nubwo igice kinini cya NPB gishingiye kuri ASIC cyangwa FPGA, bitewe n'uko imikorere ya paki ihamye, uzasanga uburyo bwinshi bwo guhuza cyangwa CPU bwemewe (binyuze muri modules). Mylinking™ Network Packet Brokers (NPB) ishingiye kuri ASIC. Ubusanzwe iki ni ikintu gitanga uburyo bworoshye bwo gutunganya, bityo ntigishobora gukorwa gusa muri hardware. Ibi birimo gusohora paki, ibihe, gusiba SSL/TLS, gushakisha amagambo y'ingenzi, no gushakisha imvugo isanzwe. Ni ngombwa kumenya ko imikorere yayo iterwa n'imikorere ya CPU. (Urugero, gushakisha imvugo isanzwe y'uburyo bumwe bishobora gutanga umusaruro utandukanye cyane bitewe n'ubwoko bw'abagenda, igipimo cyo guhuza, na bandwidth), bityo ntibyoroshye kumenya mbere yo gushyira mu bikorwa nyabyo.
Iyo ibikoresho bishingiye kuri CPU bifunguye, biba imbogamizi mu mikorere rusange ya NPB. Kuza kwa cpus na chips zishobora guhindurwa, nka Cavium Xpliant, Barefoot Tofino na Innovium Teralynx, nabyo byashinze ishingiro ry'ubushobozi bwagutse ku bikoresho bya paki zo mu gisekuru gikurikira, Ibi bikoresho bishobora gucunga urujya n'uruza rw'abantu hejuru ya L4 (bikunze kwitwa L7 paki agents). Mu bintu byavuzwe haruguru, amagambo y'ingenzi n'ishakisha risanzwe ni ingero nziza z'ubushobozi bwa next-generation. Ubushobozi bwo gushakisha paki zitanga amahirwe yo kuyungurura urujya n'uruza rw'abantu ku rwego rw'isomo n'ikoreshwa, kandi bigatanga ubuyobozi bwiza ku muyoboro ugenda uhinduka kurusha L2-4.
Umuhuzabikorwa wa Network Packet ahura ate n'ibikorwa remezo?
NPB ishobora gushyirwa mu bikorwa remezo by'umuyoboro mu buryo bubiri butandukanye:
1- Umurongo
2- Kutagaragara mu itsinda ry'abaririmbyi.
Buri buryo bufite ibyiza n'ibibi kandi butuma habaho uburyo bwo guhindura traffic mu buryo ubundi buryo budashobora. Umuhuza wa packet ya network ufite uburyo bwo guhindura traffic mu buryo bwihuse bunyura muri igikoresho kijya aho kijya. Ibi bitanga amahirwe yo guhindura traffic mu buryo bwihuse. Urugero, iyo wongeyeho, uhindura, cyangwa usibye tagi za VLAN cyangwa uhindura aderesi za IP, traffic ishyirwa kuri link ya kabiri. Nk'uburyo bwo guhindura traffic, NPB ishobora kandi gutanga uburyo bwo kongera traffic ku bindi bikoresho bya inline, nka IDS, IPS, cyangwa firewalls. NPB ishobora gukurikirana imiterere y'ibyo bikoresho no gusubiza traffic mu buryo butunguranye mu gihe habayeho ikibazo.
Itanga uburyo bworoshye bwo gukoresha uburyo abantu basura urubuga kandi bagakoresha ibikoresho byinshi byo kugenzura no kurinda umutekano nta ngaruka ku muyoboro w’itumanaho ugezweho. Itanga kandi uburyo bwo kureba umuyoboro w’itumanaho budasanzwe kandi ikemeza ko ibikoresho byose bibona kopi y’umuyoboro ukenewe kugira ngo bikore neza inshingano zabyo. Ntabwo gusa ikemeza ko ibikoresho byawe byo kugenzura, umutekano, no gusesengura bibona umuyoboro ukeneye, ahubwo inagaragaza ko umuyoboro wawe uri mu mutekano. Ikemeza kandi ko igikoresho kidakoresha umutungo ku muyoboro utari wifuzwa. Birashoboka ko umuyoboro wawe w’itumanaho udakeneye kwandika umuyoboro w’itumanaho kuko ufata umwanya w’agaciro ka disiki mu gihe cyo gukora kopi. Ibi bintu byoroshye kubivana muri umuyoboro w’itumanaho mugihe ubitse izindi modoka zose zo gukoresha igikoresho. Birashoboka ko ufite umuyoboro wose w’itumanaho ushaka kubika ibanga ku yindi sisitemu; nanone, ibi bikurwaho byoroshye kuri pouvoir yatoranijwe. Mu by’ukuri, NPB imwe ishobora gutunganya zimwe mu nzira zo gukoresha urubuga mu gihe itunganya izindi modoka zisohoka hanze y’umurongo w’itumanaho.
Igihe cyo kohereza: Werurwe-09-2022
