Umuyoboro wa Packet Broker (NPB) nuguhindura nkigikoresho cyurusobe rufite ubunini kuva mubikoresho bigendanwa kugeza 1U na 2U byimanza kugeza kubibazo binini hamwe na sisitemu yubuyobozi. Bitandukanye na switch, NPB ntabwo ihindura traffic inyuramo muburyo ubwo aribwo bwose keretse byateganijwe neza. NPB irashobora kwakira traffic kuri interineti imwe cyangwa nyinshi, igakora imirimo yateganijwe kuri iyo traffic, hanyuma ikayisohora kuri interineti imwe cyangwa nyinshi.
Ibi bikunze kuvugwa nka buri-kuri-icyaricyo cyose, byinshi-kuri-byose, na buri-kuri-byinshi byerekana ikarita. Imikorere ishobora gukorwa itandukanijwe kuva byoroshye, nko kohereza cyangwa guta traffic, kugeza kumurongo, nko gushungura amakuru hejuru ya 5 kugirango umenye isomo runaka. Ihuriro kuri NPB rishobora kuba insinga z'umuringa, ariko mubisanzwe ni SFP / SFP + na QSFP, zemerera abakoresha gukoresha itangazamakuru ritandukanye n'umuvuduko mwinshi. Imiterere ya NPB yubatswe ku ihame ryo kongera ubushobozi bwibikoresho byurusobe, cyane cyane gukurikirana, gusesengura, nibikoresho byumutekano.
Nibihe bikorwa umuyoboro wa Network Packet Broker atanga?
Ubushobozi bwa NPB ni bwinshi kandi burashobora gutandukana bitewe nikirangantego nicyitegererezo cyibikoresho, nubwo umukozi wese wapakira agaciro umunyu we azashaka kugira urwego rwibanze rwubushobozi. Ibikorwa byinshi bya NPB (NPB isanzwe) kumikorere ya OSI ibice 2 kugeza 4.
Muri rusange, urashobora gusanga ibintu bikurikira kuri NPB ya L2-4: urujya n'uruza (cyangwa ibice byihariye byarwo) kwerekera, gushungura ibinyabiziga, kwigana ibinyabiziga, kwambura protocole, gukata paki (gutemagura), gutangira cyangwa guhagarika protocole zitandukanye za tunnel, n'umutwaro uringaniye kuri traffic. Nkuko byari byitezwe, NPB ya L2-4 irashobora gushungura VLAN, ibirango bya MPLS, aderesi ya MAC (inkomoko nintego), aderesi ya IP (isoko nintego), ibyambu bya TCP na UDP (isoko nintego), ndetse nibendera rya TCP, kimwe na ICMP, SCTP, na traffic ya ARP. Ibi ntabwo aribyo biranga gukoreshwa, ahubwo bitanga igitekerezo cyukuntu NPB ikorera kumurongo wa 2 kugeza kuri 4 ishobora gutandukanya no kumenya ibice byumuhanda. Icyangombwa cyingenzi abakiriya bagomba gushakisha muri NPB nindege idahagarika.
Umuyoboro wumuyoboro Broker agomba kuba ashoboye guhura numuhanda wuzuye wa buri cyambu kubikoresho. Muri sisitemu ya chassis, guhuza hamwe ninyuma yinyuma bigomba nanone kuba byujuje umutwaro wuzuye wumuhanda wahujwe. Niba NPB ita paki, ibyo bikoresho ntabwo bizaba byunvikana neza kumurongo.
Nubwo umubare munini wa NPB ushingiye kuri ASIC cyangwa FPGA, kubera ubwizerwe bwimikorere yo gutunganya paki, uzasangamo byinshi cyangwa CPU byemewe (binyuze muri module). Mylinking ™ Network Packet Brokers (NPB) ishingiye kubisubizo bya ASIC. Mubisanzwe nibintu bitanga gutunganya byoroshye bityo ntibishobora gukorwa gusa mubyuma. Ibi birimo kugabanwa paki, igihe cyerekana, SSL / TLS kubanga, gushakisha ijambo ryibanze, no gushakisha imvugo isanzwe. Ni ngombwa kumenya ko imikorere yayo iterwa n'imikorere ya CPU. .
Niba CPU-ishingiye kumikorere ishoboye, ihinduka ikintu kigabanya imikorere rusange ya NPB. Kuza kwa cpus hamwe na progaramu zishobora guhinduranya chip, nka Cavium Xpliant, Barefoot Tofino na Innovium Teralynx, nazo zashizeho ishingiro ryagutse ryubushobozi bwibisekuruza bizaza bikurikirana, Ibi bice bikora birashobora gutwara traffic hejuru ya L4 (bikunze kuvugwa) nkibikoresho bya L7). Mubintu byateye imbere byavuzwe haruguru, ijambo ryibanze hamwe nubushakashatsi busanzwe ni ingero nziza zubushobozi bwibisekuruza bizaza. Ubushobozi bwo gushakisha paki yipakurura butanga amahirwe yo gushungura traffic mumasomo no murwego rwo gusaba, kandi itanga igenzura ryiza kumurongo ugenda uhinduka kuruta L2-4.
Nigute Network Packet Broker ihuye nibikorwa remezo?
NPB irashobora gushyirwaho mubikorwa remezo byurusobe muburyo bubiri butandukanye:
1- Umurongo
2- Hanze ya bande.
Buri buryo bufite ibyiza nibibi kandi bigafasha gukoresha traffic traffic muburyo ubundi buryo budashobora. Umuyoboro wa inline packet broker ufite igihe nyacyo cyumuyoboro uhuza igikoresho munzira igana iyo igana. Ibi bitanga amahirwe yo gukoresha traffic mugihe nyacyo. Kurugero, mugihe wongeyeho, guhindura, cyangwa gusiba ibirango bya VLAN cyangwa guhindura aderesi ya IP, traffic yimuwe kumurongo wa kabiri. Nuburyo bwo kumurongo, NPB irashobora kandi gutanga ibirenze kubindi bikoresho byo kumurongo, nka IDS, IPS, cyangwa firewall. NPB irashobora gukurikirana imiterere yibyo bikoresho hanyuma igahinduka inzira igana inzira igana guhagarara mugihe habaye kunanirwa.
Itanga ihinduka ryinshi muburyo traffic itunganywa kandi igakopororwa mubikoresho byinshi byo kugenzura no kubungabunga umutekano bitagize ingaruka kumurongo nyarwo. Itanga kandi imiyoboro itigeze ibaho kandi ikanemeza ko ibikoresho byose byakira kopi yumuhanda ukenewe kugirango ukore neza inshingano zabo. Ntabwo yemeza gusa ko ibikoresho byawe byo gukurikirana, umutekano, hamwe nisesengura bibona traffic bakeneye, ariko kandi numuyoboro wawe ufite umutekano. Iremeza kandi ko igikoresho kidakoresha umutungo kumuhanda udashaka. Ahari isesengura ryurusobe rwawe ntirukeneye kwandika traffic traffic kuko ifata umwanya wa disiki yagaciro mugihe cyo gusubira inyuma. Ibi bintu byungururwa byoroshye mubisesengura mugihe uzigama izindi traffic zose kubikoresho. Birashoboka ko ufite subnet yose ushaka guhisha mubindi sisitemu; na none, ibi bivanwaho byoroshye kubisohoka byatoranijwe. Mubyukuri, NPB imwe irashobora gutunganya inzira zimwe zumuhanda mugihe zitunganya izindi traffic zitari muri bande.
Igihe cyo kohereza: Werurwe-09-2022
