Umuhuzabikorwa wa Network Tap and Network Packet ni iki?

Iyo igikoresho cya Sisitemu yo Gushakisha Ubwinjira (IDS) gishyizwe ahagaragara, aho gushyira indorerwamo kuri switch mu kigo cy’amakuru cy’uwo mukorana ntabwo bihagije (urugero, aho gushyira indorerwamo imwe gusa niho hemerewe, kandi aho gushyira indorerwamo hari ibindi bikoresho).

Muri iki gihe, iyo tudashyizeho imiyoboro myinshi yo kureba amashusho, dushobora gukoresha igikoresho cyo gukoporora, guteranya no kohereza amakuru kuri interineti kugira ngo dukwirakwize umubare ungana w'amakuru yo kureba amashusho kuri igikoresho cyacu.

Network TAP ni iki?

Wenda wabanje kumva izina TAP switch. TAP (Terminal Access Point), izwi kandi nka NPB (Network Packet Broker), cyangwa Tap Aggregator?

Inshingano y'ingenzi ya TAP ni ugushyira hagati y'aho indorerwamo igaragara ku muyoboro w'ibikorwa n'itsinda ry'ibikoresho byo gusesengura. TAP ikusanya urujya n'uruza rw'ibikoresho cyangwa ibitandukanya n'igikoresho kimwe cyangwa byinshi byo gusesengura amakuru hanyuma igakwirakwiza urujya n'uruza rw'ibikoresho bimwe cyangwa byinshi byo gusesengura amakuru.

Porogaramu yo guhuza hanze y'itsinda ryanjye

Uburyo bwo gushyiramo umuyoboro wa TAP usanzwe kuri Network Common

Network Tap ifite ibirango bigaragara, nka:

Ibikoresho byigenga

TAP ni igikoresho cyihariye kidahindura umutwaro ku bikoresho bya interineti bihari, kikaba ari kimwe mu byiza kuruta indorerwamo za port.

ML-TAP-2810 Network TapHindura?

Umuhuzabikorwa wa ML-NPB-5410+ w'amapake y'umuyoboroGukoresha interineti?

Urusobe rw'itumanaho rubonerana

Iyo TAP imaze guhuzwa n'umuyoboro, ibindi bikoresho byose biri kuri uwo muyoboro ntibigira ingaruka. Kuri bo, TAP iba ​​ibonerana nk'umwuka, kandi ibikoresho byo kugenzura bihujwe na TAP bibonerana n'umuyoboro wose.

TAP ni nk'aho Port Mirroring iri kuri switch. None se kuki washyiraho TAP itandukanye? Reka turebe itandukaniro riri hagati ya Network TAP na Network Port Mirroring.

Itandukaniro rya 1: Network TAP biroroshye kuyishyiraho kurusha gukora indorerwamo za port

Indorerwamo ya port igomba gushyirwaho kuri switch. Niba igenzura rigomba guhindurwa, switch igomba kongera gushyirwaho ALL. Ariko, TAP igomba guhindurwa gusa aho yasabwe, ibyo bikaba nta ngaruka bigira ku bikoresho bya network bihari.

Itandukaniro rya 2: Network TAP ntabwo igira ingaruka ku mikorere ya network ugereranyije no kureba port mirroring

Gushyira indorerwamo ku muyoboro w'amakuru kuri switch byangiza imikorere ya switch kandi bigira ingaruka ku bushobozi bwo kuyihindura. By'umwihariko, iyo switch ihujwe n'umuyoboro w'amakuru mu buryo bukurikiranye nk'umurongo, ubushobozi bwo kohereza amakuru ku muyoboro wose burangirika cyane. TAP ni hardware yigenga kandi ntibangamira imikorere y'igikoresho bitewe no kureba amakuru ku muyoboro w'amakuru. Kubwibyo, nta ngaruka igira ku mutwaro w'ibikoresho bya network bihari, bifite ibyiza byinshi kuruta kureba amakuru ku muyoboro w'amakuru.

Itandukaniro rya 3: Network TAP itanga inzira yuzuye y'urujya n'uruza rw'abantu kurusha uko ikora isuzuma ry'ibyambu rikorwa.

Gupima imbuga ntibishobora kwemeza ko abantu bose bashobora kubona amakuru kuko urubuga rwo guhindura amakuru ubwarwo ruzayungurura amapaki amwe n'amwe y'amakosa cyangwa amapaki mato cyane. Ariko, TAP igenzura ubuziranenge bw'amakuru kuko ari "ikopi" yuzuye ku rwego rw'umubiri.

Itandukaniro rya 4: Gutinda kohereza kwa TAP ni gato ugereranyije n'uko Port Mirroring ikora

Ku mashini zimwe na zimwe zo mu rwego rwo hasi, gukora indorerwamo y’aho hantu bishobora gutuma habaho gutinda mu gihe cyo gukoporora traffic kuri mirroring ports, ndetse no mu gihe cyo gukoporora ports za 10/100m kuri mirroring ports za Giga Ethernet.

Nubwo ibi byanditseho byinshi, twemera ko isesengura rya nyuma ridafite ubufasha bukomeye mu bya tekiniki.

None se, ni mu bihe bihe rusange, tugomba gukoresha TAP mu gukwirakwiza urujya n'uruza rw'itumanaho? Mu buryo bworoheje, niba ufite ibi bikurikira, Network TAP ni yo mahitamo yawe meza.

Ikoranabuhanga rya TAP rya Network

Umva ibivuzwe haruguru, wumve ko shunt ya TAP network ari igikoresho cy'amayobera, shunt ya TAP isanzwe ku isoko ikoresha imiterere y'ibanze y'ibyiciro bitatu:

FPGA

- Imikorere myiza cyane

- Kugorana guteza imbere

- Igiciro kiri hejuru

MIPS

- Yoroshye kandi yoroshye

- Ingorane z'iterambere ziri hagati

- Abacuruzi bakomeye RMI na Cavium bahagaritse iterambere nyuma barananirwa

ASIC

- Imikorere myiza cyane

- Guteza imbere imikorere yo kwagura biragoye, ahanini bitewe n'imbogamizi za chip ubwayo

- Interineti n'ibipimo byayo bigengwa na chip ubwayo, bigatuma imikorere yayo idakora neza

Kubwibyo, Network TAP ifite ubucucike bwinshi n'umuvuduko mwinshi igaragara ku isoko ifite umwanya munini wo kunoza uburyo bworoshye bwo kuyikoresha mu buryo bufatika. TAP network shunters zikoreshwa mu guhindura protocole, gukusanya amakuru, gukusanya amakuru, gukora isuzuma ry'amakuru, no kuyungurura traffic. Ubwoko bw'ingenzi bw'imiyoboro busanzwe burimo 100G, 40G, 10G, 2.5G POS, GE, nibindi. Bitewe no gukuraho buhoro buhoro ibicuruzwa bya SDH, Network TAP shunters zikoreshwa cyane cyane mu miyoboro ya Ethernet yose.


Igihe cyo kohereza: Gicurasi-25-2022