Ni iyihe nshingano ya Bypass ya Network Security Device?

Bypass ni iki?

Ibikoresho by'umutekano w'umuyoboro bikunze gukoreshwa hagati y'imiyoboro ibiri cyangwa myinshi, nko hagati y'umuyoboro w'imbere n'umuyoboro wo hanze. Ibikoresho by'umutekano w'umuyoboro binyuze mu isesengura ryabyo ry'imiyoboro, kugira ngo harebwe niba hari ikibazo, nyuma yo gutunganywa hakurikijwe amategeko amwe n'amwe yo kohereza ipaki kugira ngo ihagarare, kandi niba ibikoresho by'umutekano w'umuyoboro byagize ikibazo, Urugero, nyuma y'ibura ry'amashanyarazi cyangwa impanuka, ibice by'umuyoboro bihujwe n'igikoresho biratandukana. Muri iki gihe, niba buri muyoboro ukeneye guhuzwa, noneho Bypass igomba kugaragara.

Uburyo bwa Bypass, nk'uko izina ribisobanura, butuma imiyoboro yombi ihuza neza idaciye muri sisitemu y'igikoresho cy'umutekano w'umuyoboro binyuze mu buryo runaka bwo gutera (gucika kw'amashanyarazi cyangwa kugwa). Kubwibyo, iyo igikoresho cy'umutekano w'umuyoboro kinaniwe, umuyoboro uhujwe n'igikoresho cya Bypass ushobora kuvugana. Birumvikana ko igikoresho cy'umuyoboro kidatunganya amapaki kuri umuyoboro.

Uburyo bwo Gukoresha Bypass bushyirwa mu byiciro bute?

Bypass igabanyijemo uburyo bwo kugenzura cyangwa gutera, aribwo ubu bukurikira:
1. Biterwa n'amashanyarazi. Muri ubu buryo, imikorere ya Bypass irakora iyo igikoresho kizimye. Iyo igikoresho kizimye, imikorere ya Bypass izahita ihagarikwa.
2. Igenzurwa na GPIO. Nyuma yo kwinjira muri OS, ushobora gukoresha GPIO kugira ngo ukoreshe imiyoboro yihariye kugira ngo ugenzure switch ya Bypass.
3. Kugenzura hakoreshejwe Watchdog. Iyi ni inyongera ya mode ya 2. Ushobora gukoresha Watchdog kugira ngo ugenzure uburyo bwo gushyiraho no guhagarika porogaramu ya GPIO Bypass kugira ngo ugenzure status ya Bypass. Muri ubu buryo, niba urubuga rupfuye, Bypass ishobora gufungurwa na Watchdog.
Mu bikorwa bifatika, izi mimerere itatu zikunze kubaho icyarimwe, cyane cyane uburyo bubiri bwa 1 na 2. Uburyo rusange bwo gukoresha ni ubu: iyo igikoresho kizimye, Bypass iba ifunguye. Nyuma y'uko igikoresho gifunguye, Bypass iba ifunguye na BIOS. Nyuma y'uko BIOS ifata igikoresho, Bypass iba ifunguye. Zimya Bypass kugira ngo porogaramu ikore. Mu gihe cyose cyo gutangira, nta gusiba umuyoboro wa interineti bibaho.

Ihame ryo gushyira mu bikorwa Bypass ni irihe?

1. Urwego rw'ibikoresho
Ku rwego rw'ibikoresho, relays zikoreshwa cyane cyane kugira ngo habeho Bypass. Izi relays zihujwe n'insinga z'ibimenyetso z'imiyoboro ibiri ya Bypass. Ishusho ikurikira igaragaza uburyo relays ikora hakoreshejwe insinga imwe y'ibimenyetso.
Fata urugero rw'icyuma gitanga umuriro. Mu gihe umuriro wabuze, switch iri muri relay izahita igera kuri 1, ni ukuvuga ko Rx iri kuri interface ya RJ45 ya LAN1 izahita ihuza na RJ45 Tx ya LAN2, kandi iyo igikoresho gifunguye, switch izahita ihuza na 2. Muri ubu buryo, niba itumanaho rya interineti hagati ya LAN1 na LAN2 rikenewe, ugomba kubikora ukoresheje porogaramu iri kuri igikoresho.
2. Urwego rwa Porogaramu
Mu cyiciro cya Bypass, GPIO na Watchdog bivugwa ko bigenzura kandi bigatera Bypass. Mu by'ukuri, ubu buryo bwombi bukoresha GPIO, hanyuma GPIO ikagenzura relay iri ku bikoresho kugira ngo ikore gusimbuka bihuye. By'umwihariko, niba GPIO ihuye ishyizwe ku rwego rwo hejuru, relay izasimbuka ijya ku mwanya wa 1 mu buryo buhuye, mu gihe niba igikombe cya GPIO gishyizwe ku rwego rwo hasi, relay izasimbuka ijya ku mwanya wa 2 mu buryo buhuye.

Kuri Watchdog Bypass, mu by'ukuri hongerwaho Watchdog control Bypass hashingiwe ku igenzura rya GPIO ryavuzwe haruguru. Nyuma yuko watchdog itangiye gukora, shyira igikorwa cyo kunyura kuri BIOS. Sisitemu ikora imikorere ya watchdog. Nyuma yuko watchdog itangiye gukora, umuyoboro wa interineti ujyanye nayo urafunguka maze igikoresho kikinjira muri state ya bypass. Mu by'ukuri, Bypass nayo igenzurwa na GPIO, ariko muri iki gihe, kwandika urwego rwo hasi kuri GPIO bikorwa na Watchdog, kandi nta porogaramu y'inyongera isabwa kugira ngo wandike GPIO.

Igikorwa cya "hardware Bypass" ni inshingano isabwa ku bikoresho by'umutekano w'umuyoboro. Iyo igikoresho kizimye cyangwa cyangiritse, imiyoboro y'imbere n'iy'inyuma ihuzwa neza kugira ngo ikore insinga y'umuyoboro. Muri ubu buryo, urujya n'uruza rw'amakuru rushobora kunyura mu gikoresho mu buryo butaziguye nta ngaruka igikoresho gihari.

Uburyo bwo gukoresha serivisi ziboneka cyane (HA):

Mylinking™ itanga ibisubizo bibiri bifatika (HA), Active/Standby na Active/Active. Gushyiraho Active Standby (cyangwa active/passive) ku bikoresho by'inyongera kugira ngo bitange failover kuva ku bikoresho by'ibanze kugeza ku bikoresho by'inyuma. Kandi Active/Active Yoherezwa ku mahuza adafite aho ahuriye kugira ngo itange failover iyo igikoresho icyo ari cyo cyose cyananiwe.

Mylinking™ Bypass TAP ishyigikira ibikoresho bibiri bishya, bishobora gushyirwa mu gisubizo cya Active/Standby. Kimwe kigira uruhare mu gukora cyangwa "Active". Igikoresho cya Standby cyangwa "Passive" kiracyakira abantu benshi mu buryo butunguranye binyuze muri Bypass series ariko ntigifatwa nk'igikoresho cya inline. Ibi bitanga "Hot Standby" redundancy. Iyo igikoresho cyakora kinaniwe kandi Bypass TAP ihagaritse kwakira amajwi y'umutima, igikoresho cya standby gihita kiyisimbura nk'igikoresho cya mbere kandi kigahita kiyikoresha.

Ni izihe nyungu ushobora kubona ukurikije Bypass yacu?

1- Shyira abantu imbere na nyuma y'igikoresho kiri mu murongo (nka WAF, NGFW, cyangwa IPS) ku gikoresho kiri hanze y'umurongo
2-Gucunga ibikoresho byinshi icyarimwe byoroshya umutekano kandi bigabanya ubukana bw'umuyoboro
3-Itanga uburyo bwo kuyungurura, guteranya no kuringaniza imitwaro ku bijyanye n'amahuza ari ku murongo
4-Gabanya ibyago byo kuruhuka mu gihe kitateganijwe
5-Kunanirwa, kuboneka cyane [HA]