Ni ukubera iki ukeneye imiyoboro y'urusobekerane hamwe nu muyoboro wapakiye umuyoboro wawe wo gufata traffic traffic? (Igice cya 2)

Intangiriro

Urusobe rwumuhanda wo gukusanya hamwe nisesengura nuburyo bwiza cyane bwo kubona umurongo wambere wumukoresha ukoresha imyitwarire nibipimo. Hamwe nogukomeza kunoza amakuru yikigo Q imikorere no kuyitaho, gukusanya imiyoboro yumuhanda no gusesengura byabaye igice cyingenzi mubikorwa remezo byikigo. Uhereye kubikorwa byinganda zikoreshwa, ikusanyamakuru ryumuhanda ahanini rikorwa nibikoresho byurusobekerane bypass by mirror traffic. Ikusanyirizo ry’imodoka rigomba gushyiraho uburyo bwuzuye bwo gukwirakwiza ibinyabiziga, gushyira mu gaciro kandi neza, gukusanya ibinyabiziga bishobora gufasha guhuza ibipimo ngenderwaho n’ibikorwa by’ubucuruzi no kugabanya amahirwe yo gutsindwa.

Urusobe rwo gukusanya ibinyabiziga rushobora gufatwa nkumuyoboro wigenga ugizwe nibikoresho byo gukusanya ibinyabiziga kandi bigashyirwa hamwe nu murongo w’ibikorwa. Ikusanya amashusho yimodoka ya buri gikoresho cyurusobe kandi igahuza urujya n'uruza rw'amashusho ukurikije urwego rw'akarere n'ubwubatsi. Ikoresha ibinyabiziga byungurura ibinyabiziga mubikoresho byo kugura ibinyabiziga kugirango imenye umuvuduko wuzuye wamakuru kuri 2-4 ibice byo kuyungurura ibintu, kuvanaho udupaki duplicate, gutemagura udupaki nibindi bikorwa byiterambere bikora, hanyuma wohereze amakuru kuri buri traffic sisitemu yo gusesengura. Umuyoboro wo gukusanya ibinyabiziga urashobora kohereza neza amakuru yihariye kuri buri gikoresho ukurikije amakuru asabwa muri buri sisitemu, kandi ugakemura ikibazo ko amakuru yindorerwamo gakondo adashobora kuyungurura no koherezwa, bitwara imikorere yo gutunganya imiyoboro. Muri icyo gihe, moteri yo kuyungurura no guhanahana moteri yumurongo wo gukusanya ibinyabiziga imenya gushungura no kohereza amakuru hamwe nubukererwe buke n'umuvuduko mwinshi, byemeza ubwiza bwamakuru yakusanyijwe numuyoboro wo gukusanya ibinyabiziga, kandi bitanga umusingi mwiza wamakuru kuri ibikoresho byo gusesengura ibinyabiziga nyuma.

ikibazo cyo gukurikirana ibinyabiziga

Kugirango ugabanye ingaruka kumurongo wambere, kopi yumuhanda wambere uboneka muburyo bwo kugabana ibiti, SPAN cyangwa TAP.

Kanda Umuyoboro wa Passive (Optical Splitter)

Inzira yo gukoresha urumuri kugirango ubone kopi yumuhanda bisaba ubufasha bwibikoresho bitandukanya urumuri. Gutandukanya urumuri nigikoresho cyiza cya optique gishobora kugabana imbaraga zingufu za signal optique ukurikije igipimo gikenewe. Gutandukanya birashobora kugabanya urumuri kuva kuri 1 kugeza kuri 2,1 kugeza kuri 4 na 1 kumiyoboro myinshi. Kugirango ugabanye ingaruka kumurongo wambere, ikigo cyamakuru gikunze kugereranya igipimo cyo gutandukanya optique ya 80:20, 70:30, aho 70,80 byikimenyetso cya optique cyoherejwe kumurongo wambere. Kugeza ubu, amacakubiri ya optique akoreshwa cyane mu isesengura ry'imikorere y'urusobe (NPM / APM), sisitemu y'ubugenzuzi, isesengura ry'imyitwarire y'abakoresha, gutahura kwinjira mu muyoboro n'ibindi bintu.

Gufata Agashusho

Ibyiza:

1. Kwizerwa cyane, igikoresho cyiza cya optique;

2. Ntabwo ifata icyambu, ibikoresho byigenga, ibikurikira birashobora kwaguka neza;

3. Ntabwo ari ngombwa guhindura iboneza rya switch, nta ngaruka kubindi bikoresho;

4. Ikusanyirizo ryuzuye ryumuhanda, nta guhinduranya paki yogushungura, harimo udupaki twibeshya, nibindi.

Ibibi:

1.

SPAN (Indorerwamo ya Port)

SPAN ni ikintu kizana na switch ubwayo, bityo rero ikeneye gushyirwaho kuri switch. Nyamara, iyi mikorere izagira ingaruka kumikorere ya switch kandi itera igihombo mugihe amakuru aremerewe.

umuyoboro uhinduranya indorerwamo

Ibyiza:

1. Ntabwo ari ngombwa kongeramo ibikoresho byongeweho, shiraho uburyo bwo kongera amashusho ajyanye no kwigana ibyasohotse

Ibibi:

1. Koresha icyambu

2. Guhindura bigomba gushyirwaho, bikubiyemo guhuza hamwe nabandi bantu bakora, byongera ibyago byo gutsindwa kwurusobe

3. Kwigana ibinyabiziga byindorerwamo bigira ingaruka kumyambu no guhindura imikorere.

Umuyoboro ukora TAP (TAP Aggregator)

Umuyoboro TAP nigikoresho cyurusobe rwo hanze rushoboza indorerwamo yicyambu kandi ikora kopi yimodoka kugirango ikoreshwe nibikoresho bitandukanye byo gukurikirana. Ibi bikoresho byamenyekanye ahantu munzira y'urusobekerane rugomba kubahirizwa, kandi ikoporora amakuru IP packets ikohereza mubikoresho byo gukurikirana imiyoboro. Guhitamo aho bigera kubikoresho bya Network TAP biterwa nokwibanda kumurongo wumuhanda -impamvu zo gukusanya amakuru, kugenzura buri gihe isesengura no gutinda, gutahura kwinjira, nibindi. 100G.

Ibi bikoresho byinjira mumodoka idafite umuyoboro TAP igikoresho gihindura paki muburyo ubwo aribwo bwose, hatitawe ku gipimo cy’imodoka. Ibi bivuze ko umuyoboro wurubuga utagengwa no gukurikirana no kwerekana indorerwamo, nibyingenzi mukubungabunga ubusugire bwamakuru mugihe uyijyana mubikoresho byumutekano nisesengura.

Iremeza ko ibikoresho bya rezo ya peripheri ikurikirana kopi yumuhanda kugirango ibikoresho bya TAP bikora nkindorerezi. Mugaburira kopi yamakuru yawe kubikoresho byose / bihujwe, urabona neza kugaragara kumurongo. Mugihe mugihe umuyoboro wa TAP cyangwa igikoresho cyo kugenzura cyananiranye, uzi ko traffic itazagira ingaruka, ukemeza ko sisitemu y'imikorere ikomeza kuba umutekano kandi irahari.

Mugihe kimwe, bihinduka intego rusange yibikoresho bya TAP. Kugera kumapaki birashobora gutangwa buri gihe bitabangamiye traffic murusobe, kandi ibisubizo biboneka birashobora kandi gukemura ibibazo byinshi byateye imbere. Igenzura rikeneye ibikoresho kuva kumurongo wibisekuruza bizaza kugeza kurinda amakuru kumeneka, kugenzura imikorere ya porogaramu, SIEM, ubutabera bwa digitale, IPS, IDS nibindi byinshi, guhatira ibikoresho bya TAP ibikoresho byiterambere.

Usibye gutanga kopi yuzuye yumuhanda no gukomeza kuboneka, ibikoresho bya TAP birashobora gutanga ibi bikurikira.

1. Akayunguruzo k'ibipapuro kugirango ugabanye imikorere yo gukurikirana imiyoboro

Kuberako igikoresho cya Network TAP gishobora gukora 100% kopi yipaki mugihe runaka ntabwo bivuze ko buri gikoresho cyo kugenzura nigikoresho cyumutekano gikeneye kubona ibintu byose. Kugenda kwimodoka kumurongo wose ukurikirana nibikoresho byumutekano mugihe nyacyo bizavamo kurenza urugero, bityo bikomeretsa imikorere yibikoresho hamwe numuyoboro mubikorwa.

Gushyira iburyo bwa TAP igikoresho gishobora gufasha gushungura paki mugihe uyoboye igikoresho cyo kugenzura, gukwirakwiza amakuru yukuri kubikoresho byiza. Ingero z'ibyo bikoresho zirimo sisitemu yo gutahura (IDS), gukumira amakuru (DLP), amakuru y'umutekano no gucunga ibyabaye (SIEM), isesengura ry'ubucamanza, n'ibindi byinshi.

2. Guhuriza hamwe Amahuriro yo Guhuza neza

Mugihe Igenzura rya Network hamwe nibisabwa byumutekano byiyongera, abashinzwe imiyoboro bagomba gushakisha uburyo bwo gukoresha ingengo yimari ya IT ihari kugirango bakore imirimo myinshi. Ariko aho bigeze, ntushobora gukomeza kongeramo ibikoresho bishya kumurongo no kongera ubunini bwurusobe rwawe. Ni ngombwa gukoresha cyane ikoreshwa ryikurikiranwa nibikoresho byumutekano.

Ibikoresho bya Network TAP birashobora gufasha mugukusanya urujya n'uruza rwinshi, iburasirazuba no muburengerazuba, kugirango utange paki kubikoresho bihujwe binyuze ku cyambu kimwe. Kohereza ibikoresho bigaragara muri ubu buryo bizagabanya umubare wibikoresho byo gukurikirana bisabwa. Mugihe urujya n'uruza rwiburasirazuba rwiburengerazuba rukomeje kwiyongera mubigo byamakuru no hagati yamakuru, ibisabwa kubikoresho bya neti ya TAP nibyingenzi kugirango bigumane kugaragara kwingendo zose zingana mubice byinshi byamakuru.

ML-NPB-5690 (8)

Ingingo ijyanye nayo ushobora gushimisha, nyamuneka sura hano:Nigute wafata traffic traffic? Umuyoboro Kanda vs Port Mirror


Igihe cyo kohereza: Ukwakira-24-2024