Iyo hashyizweho igikoresho cyo kwinjira (IDS), icyambu cyerekana indorerwamo kuri switch mu kigo cyamakuru cy’urungano ntigihagije (urugero, icyambu kimwe gusa cyerekana indorerwamo, kandi icyambu cyerekana indorerwamo cyafashe ibindi bikoresho).
Muri iki gihe, mugihe tutongeyeho ibyambu byinshi byerekana indorerwamo, turashobora gukoresha imiyoboro yo kwigana, guteranya hamwe no kohereza ibikoresho kugirango dukwirakwize umubare munini wamakuru yindorerwamo kubikoresho byacu.
Umuyoboro TAP ni iki?
Birashoboka ko wabanje kumva izina TAP switch. TAP (Terminal Access Point), izwi kandi nka NPB (Umuyoboro wa Packet Broker), cyangwa Kanda Aggregator?
Igikorwa cyibanze cya TAP nugushiraho hagati yicyerekezo cyindorerwamo kumurongo wibikorwa hamwe nisesengura ryibikoresho. TAP ikusanya ibinyabiziga byerekanwe cyangwa bitandukanijwe nigikoresho kimwe cyangwa byinshi byurusobe rukora kandi ikwirakwiza traffic kubikoresho kimwe cyangwa byinshi byo gusesengura amakuru.
Umuyoboro Mucyo
Nyuma yuko TAP ihujwe numuyoboro, ibindi bikoresho byose kurusobe ntabwo bigira ingaruka. Kuri bo, TAP iragaragara nkumwuka, kandi ibikoresho byo kugenzura bihujwe na TAP biragaragara mumurongo muri rusange.
TAP ni nka Port Mirroring kuri switch. None se kuki wohereza TAP itandukanye? Reka turebe bimwe mubitandukanya Network TAP na Network Port Mirroring muburyo bumwe.
Itandukaniro 1: Umuyoboro TAP biroroshye gushiraho kuruta indorerwamo
Indorerwamo yicyambu igomba gushyirwaho kuri switch. Niba igenzura rikeneye guhinduka, switch igomba guhindurwa BOSE. Ariko, TAP ikeneye gusa guhinduka aho yasabye, idafite ingaruka kubikoresho byurusobe bihari.
Itandukaniro 2: Umuyoboro TAP ntabwo uhindura imikorere yumurongo ugereranije nindorerwamo
Icyerekezo cy'icyambu kuri switch cyangiza imikorere ya switch kandi bigira ingaruka kubushobozi bwo guhinduranya. By'umwihariko, niba switch ihujwe numuyoboro murukurikirane nkumurongo, ubushobozi bwo kohereza imiyoboro yose bigira ingaruka zikomeye. TAP ni ibyuma byigenga kandi ntibibuza imikorere yimikorere kubera indorerwamo zumuhanda. Kubwibyo, ntabwo bigira ingaruka kumutwaro wibikoresho byurusobe bihari, bifite ibyiza byinshi kurenza indorerwamo.
Itandukaniro 3: Umuyoboro TAP utanga inzira yuzuye yumuhanda kuruta kwigana ibyambu
Indorerwamo yicyambu ntishobora kwemeza ko traffic yose ishobora kuboneka kubera ko icyambu cyahinduwe ubwacyo kizungurura udupaki twibeshya cyangwa udupaki duto cyane. Ariko, TAP yemeza ubudakemwa bwamakuru kuko ni "kwigana" byuzuye kurwego rwumubiri.
Itandukaniro 4: Gutinda kohereza kwa TAP ni bito kurenza Port Mirroring
Kuri sisitemu zimwe na zimwe zo hasi, indorerwamo irashobora kwerekana ubukererwe mugihe wandukuye traffic ku byambu byerekana indorerwamo, kimwe no kwimura ibyambu 10 / 100m ku byambu bya Giga Ethernet.
Nubwo ibi byanditswe cyane, twizera ko isesengura ryibiri ryanyuma ridafite ubufasha bukomeye bwa tekiniki.
None, mubihe bimeze muri rusange, dukeneye gukoresha TAP mugukwirakwiza traffic traffic? Byoroshye, niba ufite ibisabwa bikurikira, noneho Network TAP niyo ihitamo ryiza.
Umuyoboro wa TAP
Umva ibyavuzwe haruguru, umva umuyoboro wa TAP mubyukuri nigikoresho cyubumaji, isoko iriho ubu TAP shunt ukoresheje ubwubatsi bwibanze bwibyiciro bitatu:
FPGA
- Imikorere yo hejuru
- Biragoye kwiteza imbere
- Igiciro kinini
MIPS
- Biroroshye kandi byoroshye
- Gutezimbere bigoye
- Abacuruzi nyamukuru RMI na Cavium bahagaritse iterambere birananirana nyuma
ASIC
- Imikorere yo hejuru
- Kwagura imikorere yimikorere biragoye, cyane cyane kubera imipaka ya chip ubwayo
- Imigaragarire nibisobanuro bigarukira kuri chip ubwayo, bivamo imikorere mibi yo kwaguka
Kubwibyo, ubucucike buri hejuru kandi bwihuse Network TAP igaragara kumasoko ifite ibyumba byinshi byo kunoza imikorere mugukoresha neza. TAP umuyoboro wa TAP ukoreshwa muguhindura protocole, gukusanya amakuru, guhagarika amakuru, kwerekana indorerwamo, no kuyungurura umuhanda. Ubwoko nyamukuru bwicyambu burimo 100G, 40G, 10G, 2.5G POS, GE, nibindi. Kubera gukuramo buhoro buhoro ibicuruzwa bya SDH, imiyoboro ya TAP ya TAP ikoreshwa cyane mubidukikije byose bya Ethernet.
Igihe cyo kohereza: Gicurasi-25-2022