Ni ibihe bintu biranga Network Packet Broker (NPB) na Test Access Port (TAP)?

ItsindaUmuhuzabikorwa w'amapaki y'itumanaho(NPB), irimo 1G NPB ikoreshwa cyane, 10G NPB, 25G NPB, 40G NPB, 100G NPB, 400G NPB, naUmuyoboro wo kugera ku igeragezwa ry'umuyoboro (TAP), ni igikoresho cya mudasobwa gishyirwa mu mugozi w'umuyoboro w'itumanaho hanyuma cyohereza itumanaho ry'umuyoboro w'itumanaho ku bindi bikoresho.

Abahuza ba Network Packet bakunze gukoreshwa muri sisitemu zo gushakisha abinjira mu miyoboro (IDS), abapima imiyoboro, na ba profil. Itsinda ryo kureba aho ibintu biherereye. Mu buryo bwo gushakisha, umurongo wa UTP ugenzurwa (umurongo udafite ipfuko) ugabanyijwemo ibice bibiri n'igikoresho cya TAP shunting. Amakuru ya shunting ahuzwa n'umurongo wo gukusanya amakuru kugira ngo akusanyirize sisitemu yo kugenzura umutekano w'amakuru kuri interineti.

ML-TAP-2810 Network Tap

Ni iki umuhuzabikorwa wa Network Packet (NPB) agufasha?

Ibiranga by'ingenzi:

1. Kwigenga

Ni igikoresho cyigenga kandi ntigihindura umutwaro w'ibikoresho bya interineti bihari, bifite inyungu nyinshi kurusha indorerwamo za port.

Ni igikoresho kiri kuri interineti, bivuze gusa ko kigomba gushyirwa mu muyoboro w’itumanaho. Ariko, ibi bifite n’imbogamizi zo guteza ikibazo, kandi kubera ko ari igikoresho kiri kuri interineti, umuyoboro uriho ubu ugomba guhagarara mu gihe cyo kuwushyira mu bikorwa, bitewe n’aho ushyizwe mu bikorwa.

2. Gukoresha uburyo bworoshye

Transparent bisobanura ikimenyetso cyerekana umuyoboro uriho ubu. Nyuma yo kwinjira muri network shunt, nta ngaruka igira ku bikoresho byose biri muri network iriho ubu, kandi iragaragara neza kuri byo. Birumvikana ko ibi birimo n'urujya n'uruza rw'itumanaho rwoherezwa na network shunt ku gikoresho cyo kugenzura, nacyo kigaragara ku muyoboro.

Ihame ry'imikorere:

Gukwirakwiza amakuru hakoreshejwe uburyo bwa "traffic shunt" bishingiye ku makuru yinjiye, gukoporora, gukusanya, kuyungurura, guhindura amakuru ya 10G POS binyuze mu guhindura amakuru ya protocole kugeza kuri megabytes icumi za LAN, hakurikijwe uburyo bwihariye bwo guhuza umusaruro, umusaruro icyarimwe kugira ngo hamenyekane ko amapaki yose y’igihe kimwe, cyangwa IP imwe asohora amapaki yose aturutse ku buryo bumwe bw’umukoresha.

ML-TAP-2401B 混合采集 - 应用部署

Ibiranga imikorere:

1. Guhindura porotoli

Imiyoboro ikoreshwa cyane mu itumanaho rya interineti ikoreshwa n’abatanga serivisi z’ikoranabuhanga irimo 40G POS, 10G POS/WAN/LAN, 2.5G POS, na GE, mu gihe imiyoboro yakira amakuru ikoreshwa na seriveri za porogaramu ari imiyoboro ya GE na 10GE LAN. Kubwibyo, guhindura protocole bikunze kuvugwa ku miyoboro y’itumanaho rya interineti ahanini bivuga guhindura hagati ya 40G POS, 10G POS, na 2.5G POS kuri 10GE LAN cyangwa GE, hamwe no kohereza amakuru hagati ya 10GE WAN na 10GE LAN na GE.

2. Gukusanya no gukwirakwiza amakuru.

Porogaramu nyinshi zo gukusanya amakuru zikuramo urujya n'uruza rw'abantu ziyitaho hanyuma zigata urujya n'uruza rw'abantu batitayeho. Urujya n'uruza rw'amakuru rwa aderesi ya IP, protocole, na port runaka rukurwamo hakoreshejwe uburyo bwa "five-tuple" (aderesi ya IP y'isoko, aderesi ya IP y'aho uherereye, port y'aho uherereye, port y'aho uherereye, na protocole). Iyo hasohotse, isoko rimwe, ahantu hamwe n'umusaruro w'ibicuruzwa byemezwa hakurikijwe algorithme yihariye ya HASH.

3. Gushungura kode y'ibintu

Ku bijyanye no gukusanya amakuru kuri P2P, sisitemu ya porogaramu ishobora kwibanda gusa ku bantu bamwe na bamwe binjira mu buryo runaka, nka PPStream, BT, Thunderbolt, n'amagambo asanzwe kuri HTTP nka GET na POST, nibindi. Uburyo bwo guhuza kode y'imiterere bushobora gukoreshwa mu gukuramo no guhuza. Iyi diverter ishyigikira filtering ya kode y'imiterere ihamye no kuyungurura kode y'imiterere ihamye. Kode y'imiterere ihamye ni iy'inyuma igenwa hashingiwe ku kode y'imiterere ihamye. Ikwiriye porogaramu zigaragaza kode y'imiterere igomba kuyungururwa, ariko ntizigaragaze aho kode y'imiterere iherereye.

4. Imicungire y'inama

Igaragaza uburyo abantu basurana kandi igashyiraho neza agaciro ka N (N = 1 kugeza 1024). Ni ukuvuga ko paki za mbere za N za buri gice zikurwamo zikoherezwa kuri sisitemu yo gusesengura porogaramu inyuma, hanyuma paki za nyuma ya N zigatabwa, bigatuma umutungo ukoreshwa mu gusesengura porogaramu. Muri rusange, iyo ukoresha IDS mu gukurikirana ibikorwa, ntukeneye gutunganya paki zose z'igihe cyose; ahubwo, ukeneye gusa gukuramo paki za mbere za N za buri gice kugira ngo urangize isesengura ry'ibyabaye no kubikurikirana.

5. Gushushanya no gukoporora amakuru

Itsinda rikoresha porogaramu rishobora gukora isuzuma n'isubiramo ry'amakuru ari ku rubuga rusohoka, ibyo bikaba byemeza ko sisitemu nyinshi za porogaramu zishobora kubona amakuru.

6. Gukusanya no kohereza amakuru ya interineti ya 3G

Gukusanya no gukwirakwiza amakuru ku miyoboro ya 3G bitandukanye n'uburyo busanzwe bwo gusesengura imiyoboro. Paketi ku miyoboro ya 3G zoherezwa ku miyoboro y'inyuma binyuze mu byiciro byinshi bya encapsulation. Uburebure bwa paketi n'imiterere ya encapsulation bitandukanye n'iby'amapaketi ku miyoboro isanzwe. Icapa gishobora kumenya neza no gutunganya protocole za tunnel nka pakiti za GTP na GRE, pakiti za MPLS z'urwego rwinshi, na pakiti za VLAN. Gishobora gukuramo pakiti za IUPS signaling, pakiti za GTP signaling, na pakiti za Radius ku mbuga zagenwe hashingiwe ku miterere ya pakiti. Byongeye kandi, gishobora kugabanya pakiti hakurikijwe aderesi ya IP y'imbere. Inkunga ya paki nini cyane (MTU> 1522 Byte) itunganywa, ishobora gukora neza ikusanyirizo ry'amakuru ya 3G network na shunt application.

Ibisabwa ku bintu bikurura:

- Ishyigikira ikwirakwizwa ry'abagenda n'abasohoka hakoreshejwe porogaramu ya L2-L7.

- Ishyigikira uburyo bwo kuyungurura bwa 5-tuple ukoresheje aderesi ya IP y’aho uherereye nyayo, aderesi ya IP y’aho uherereye, aho uherereye, aho uherereye, na protocole ndetse ikoresheje mask.

- Ishyigikira kuringaniza umutwaro w'ibisohoka n'uburyo bwo guhuza umusaruro n'uburyo bwo guhuza.

- Ishyigikira gushungura no kohereza ubutumwa hakurikijwe imigozi y'inyuguti.

- Ishyigikira imicungire y'ibyiciro. Ohereza paki za mbere za N kuri buri cyiciro. Agaciro ka N gashobora kugaragazwa.

- Ifasha abakoresha benshi. Paki z'amakuru zihuye n'itegeko rimwe zishobora gutangwa ku muntu wa gatatu icyarimwe, cyangwa amakuru ari ku rubuga rw'ibisohoka ashobora gushushanywa no gukopwa, bigatuma sisitemu nyinshi za porogaramu zibasha kubona amakuru.

Igisubizo cy'Inganda z'Imari ku Bisubizo by'Ibyiza
Bitewe n’iterambere ryihuse ry’ikoranabuhanga ku isi no kwiyongera k’amakuru, urwego rw’imiyoboro y’ibigo rwagiye rwongerwa buhoro buhoro, kandi kwishingikiriza kw’inganda zitandukanye ku buryo bw’amakuru byarushijeho kwiyongera. Muri icyo gihe, urusobe rw’ibitero by’imbere mu kigo n’inyuma, amakosa, n’ibibazo by’umutekano w’amakuru nabyo biriyongera, hamwe n’ubwinshi bw’uburyo bwo kurinda imiyoboro, uburyo bwo kugenzura ubucuruzi bushyirwa mu bikorwa uko bwije n’uko bukeye, ubwoko bwose bw’uburyo bwo kugenzura ubucuruzi, ibikoresho byo kurinda umutekano bishyirwa mu miyoboro yose, hazabaho gusesagura umutungo w’amakuru, gukurikirana ahantu hatazwi, gukurikirana kenshi, imiterere y’imiyoboro n’ibibazo by’akajagari nko kudashobora kubona neza amakuru y’ingenzi, bigatuma ibikoresho bigenzura imikorere idahwitse, ishoramari rinini, amafaranga make, ibibazo byo kubungabunga no gucunga bitinda, imicungire y’amakuru biragoye kubigenzura.

Telefoni igendanwa


Igihe cyo kohereza ubutumwa: Nzeri-08-2022