Chii chingaitwa neIntelligent Network Inline Bypass Switch kwauri?

1- Chii chinotsanangudza Heartbeat Packet?

Mapaketi ekurova kwemoyo eMylinking™ Network Tap Bypass Chinja default kuenda kuEthernet Layer 2 mafuremu.Kana uchitumira yakajeka Layer 2 bridging mode (senge IPS / FW), Layer 2 Ethernet mafuremu anowanzo kuendeswa mberi, kuvharwa kana kuraswa.Panguva imwecheteyo, Mylinking ™ Network Tap Bypass Switch inotsigira tsika yekurova meseji fomati kuti isangane nemamiriro ezvinhu ayo mamwe akakosha serial chengetedzo maturusi haawanzo kuendesa akajairwa Layer 2 Ethernet mafuremu.

Uye Mylinking ™ Network Tap Bypass Switch inotsigirawo kurova kwemoyo packet kutariswa kwakavakirwa paVLAN tag, Layer 3 uye Layer 4 tsika meseji mhando.Zvichienderana nemuchina uyu, mushandisi anogona kuita sevhisi yekuchengetedza bvunzo basa rekubatanidza kuchengetedza mudziyo kuita kuti inyatso shanda kuona kuti inoenderana masevhisi ekuchengetedza anoshanda nemazvo.

Mylinking™ Network Tap Bypass Shandura inogona kutsigira iyo yekutarisa kuti itumire akasiyana mapikisi emoyo mumativi ese.Semuenzaniso, TCP uye UDP mhando yekurova kwemoyo mapaketi akagadziridzwa pa "Strategy Traffic Traction Protector", zvichienderana nekunyanya kweiyo serial mudziyo.Iwe unogona kugadzirisa kutumira kweTCP kurova kwemoyo mapaketi pauplink monitor A port uye kutumira kweUDP heartbeat packets pane downlink monitor B port kuti igamuchire meseji yekutumira meseji yeserial kuchengetedza mudziyo.Basa iri rinogona kunyatsovimbisa tambo.Batanidza midziyo yekuchengetedza kune yakajairika kushanda.

Mylinking ™ Network Inline Bypass Switch inotsvagirwa uye yakagadziridzwa kuti ishandiswe kuchinjika kutumirwa kwemhando dzakasiyana dzeserial kuchengetedza michina uku ichipa yakakwirira network kuvimbika.

2-Network Inline Bypass Switch Advanced Features uye Technologies
Mylinking ™ "SpecFlow" Dziviriro Mode uye "FullLink" Dziviriro Mode Tekinoroji
Mylinking™ Fast Bypass Kuchinja Dziviriro Technology
Mylinking™ "LinkSafeSwitch" Tekinoroji
Mylinking™ "WebService" Dynamic Strategy Forwarding/Issue Technology
Mylinking™ Intelligent Heartbeat Message Detection Technology
Mylinking™ Definable Heartbeat Messages Technology
Mylinking™ Multi-link Load Balancing Technology
Mylinking™ Intelligent Traffic Distribution Technology
Mylinking™ Dynamic Load Balancing Technology
Mylinking™ Remote Management Technology (HTTP/WEB, TELNET/SSH, “EasyConfig/AdvanceConfig” Hunhu)

3-Network Inline Bypass Shandura Chishandiso (sezvinotevera)

3.1 Ngozi yeInline Chengetedzo Equipment (IPS / FW)
Inotevera ndiyo yakajairika IPS (Intrusion Prevention System), FW (Firewall) deployment mode, IPS / FW inoiswa munhevedzano kune network michina (routers, switch, nezvimwewo) pakati petraffic kuburikidza nekuitwa kwekuchengetedza cheki, zvinoenderana ne iyo inoenderana yekuchengetedza mutemo wekuona kuburitswa kana kuvharira inoenderana traffic, kuzadzisa mhedzisiro yekuchengetedza kuchengetedza.

Panguva imwecheteyo, isu tinokwanisa kuona IPS / FW seye serial deployment yemidziyo, inowanzoiswa munzvimbo yakakosha yebhizinesi network kuti iite serial chengetedzo, kuvimbika kwemidziyo yayo yakabatana inokanganisa iyo yakazara bhizinesi network kuwanikwa.Kana iyo serial zvishandiso zvakawandisa, kuparara, kugadziridzwa kwesoftware, zvigadziriso zvepolicy, nezvimwewo, kuwanikwa kwese bhizinesi network kuchakanganiswa zvakanyanya.Panguva ino, isu chete kuburikidza netiweki yekucheka, yepanyama bypass jumper inogona kuita kuti network idzorerwe, zvichikanganisa zvakanyanya kuvimbika kwetiweki.IPS / FW uye zvimwe serial zvishandiso kune rumwe rutivi zvinovandudza kutumirwa kwebhizinesi network chengetedzo, kune rumwe rutivi zvakare inoderedza kuvimbika kwemabhizinesi network, kuwedzera njodzi yetiweki haisipo.

3.2 Inline Link Series Equipment Dziviriro

Mylinking ™ "Network Inline Bypass" inoiswa munhevedzano pakati petiweki zvishandiso (marouter, switch, nezvimwewo), uye kuyerera kwedata pakati petiweki zvishandiso hakuchatungamira zvakananga kuIPS / FW, "Network Inline Bypass" kune IPS / FW, apo iyo IPS / FW nekuda kwekuremerwa, kuparara, kugadziridzwa kwesoftware, kugadziridzwa kwepolicy uye mamwe mamiriro ekutadza, iyo "Network Inline Bypass" kuburikidza nehungwaru hwekuona meseji yekurova kwemoyo Basa rekuwanikwa panguva, uye nekudaro svetuka chishandiso chinokanganisa, pasina kukanganisa mamiriro e. network, iyo inokurumidza network michina yakabatana zvakananga kuchengetedza yakajairika yekutaurirana network;apo IPS / FW kukundikana kupora, asiwo kuburikidza nehungwaru kurova kwemwoyo mapaketi Kuonekwa kwekuonekwa panguva yebasa, iyo yekutanga link yekudzorera kuchengetedzwa kwebhizinesi network kuchengetedza macheki.

Mylinking ™ "Network Inline Bypass" ine simba rakangwara rekuona meseji yekurova kwemoyo, mushandisi anogona kugadzirisa nguva yekurova kwemoyo uye huwandu hwakanyanya hwekuedzazve, kuburikidza neyakajairwa kurova kwemoyo meseji paIPS / FW yekuongororwa hutano, sekutumira cheki yekurova kwemoyo. meseji kuenda kumusoro / kuzasi kwechiteshi che IPS / FW, wobva wagashira kubva kumusoro / kuzasi kwechiteshi che IPS / FW, uye tonga kana IPS / FW iri kushanda zvakajairika nekutumira uye kugamuchira meseji yekurova kwemoyo.

3.3 "SpecFlow" Policy Flow Inline Traction Series Dziviriro

Kana iyo yekuchengetedza network mudziyo unongoda kubata neiyo chaiyo traffic mukuchengetedza kuchengetedza, kuburikidza neMylinking ™ "Network Inline Bypass" traffic per-processing basa, kuburikidza netraffic yekuongorora zano rekubatanidza mudziyo wekuchengetedza ”Kunetsekana "traffic inodzoserwa kumashure yakananga kunetiweki link, uye iyo" ine chekuita netraffic chikamu "inokwevera kune in-line yekuchengetedza mudziyo kuti uite cheki chekuchengetedza.Izvi hazvizongochengetedza kushandiswa kwakajairwa kwekuchengetedza kuchengetedza basa rekuchengetedza mudziyo, asi zvakare kuderedza kuyerera kusingashande kwemidziyo yekuchengetedza kutarisana nekumanikidza;panguva imwecheteyo, iyo "Network Inline Bypass" inogona kuona mamiriro ekushanda echigadzirwa chekuchengetedza munguva chaiyo.Chishandiso chekuchengetedza chinoshanda zvisingaite chinonzvenga traffic yedata zvakananga kudzivirira kukanganisa kwesevhisi yetiweki.

3.4 Rodha yakaenzana Series Dziviriro

Iyo Mylinking ™ "Network Inline Bypass" inoiswa munhevedzano pakati petiweki zvishandiso (routers, switch, nezvimwewo).Kana imwe chete IPS / FW yekugadzirisa mashandiro asina kukwana kubata netiweki yekubatanidza peak traffic, Iyo traffic mitoro yekuenzanisa basa remudziviriri, iyo "bundling" yeakawanda IPS / FW cluster processing network network traffic, inogona kunyatso kudzikisa imwechete IPS / FW kugadzirisa kudzvanywa, kunatsiridza iyo yese yekugadzirisa kuita kuti isangane neiyo yakakwira bandwidth yenzvimbo yekuendesa Claim.
Mylinking ™ "Network Inline Bypass" ine simba rekuenzanisa basa rekuenzanisa, zvinoenderana nefuremu VLAN tag, ruzivo rweMAC, ruzivo rweIP, nhamba yechiteshi, protocol uye rumwe ruzivo rweHash load balancing kugovera traffic kuona kuti yega yega IPS / FW yakagamuchira. data flow Session kutendeseka.

3.5 Multi-series Inline Equipment Flow Traction Dziviriro (Shandura Serial Connection kune Parallel Connection)
Mune mamwe makiyi ekubatanidza (akadai seInternet outlets, server area exchange link) nzvimbo inowanzoitika nekuda kwezvinodiwa zvekuchengetedza maficha uye kuiswa kweakawanda in-line chengetedzo yekuongorora michina (senge firewall, anti-DDOS kurwisa midziyo, WEB application firewall. , Intrusion Equipment Equipment, nezvimwewo), michina yakawanda yekudzivirira kuchengetedza panguva imwe chete mumutsara pane chinongedzo kuti uwedzere hukama hweimwe pfungwa yekukundikana, kuderedza kuvimbika kwese kweseti.Uye mune yataurwa pamusoro chengetedzo midziyo pa-line deployment, midziyo upgraded, midziyo yokutsiva uye mamwe mashandiro, zvichaita kuti network kwenguva refu kukanganiswa basa uye yakakura purojekiti kucheka chiito kupedza kubudirira kuitisa mapurojekiti akadaro.
Nekuisa iyo "Network Inline Bypass" nenzira yakabatana, nzira yekuendesa yezvishandiso zvakawanda zvekuchengetedza zvakabatanidzwa munhevedzano pane imwechete link inogona kuchinjwa kubva ku "physical concatenation mode" kuenda ku "physical concatenation, inonzwisisika concatenation mode" Iyo link pane chinongedzo. yechinhu chimwe chekutadza kuvandudza kuvimbika kwechibatanidzo, nepo "Network Inline Bypass" pane inoyerera inoyerera painoda traction, kuti iwane kuyerera kwakafanana neyekutanga maitiro ekuchengetedza akachengeteka maitiro.

Inopfuura imwe chengetedzo mudziyo panguva imwe chete mune akateedzana deployment dhayagiramu:

Network Inline Bypass Switch Deployment Diagram:

3.6 Kubva paDynamic Strategy yeTraffic Traction Security Detection Dziviriro
"Network Inline Bypass" Chimwe chiitiko chepamberi chekushandisa chakavakirwa pane inosimba nzira yetraffic traction kuchengetedza yekudzivirira yekudzivirira maapplication, kutumirwa kwenzira sezvakaratidzwa pazasi:

Tora iyo "Anti-DDoS kurwisa kudzivirirwa uye yekuona" chengetedzo yekuongorora michina, semuenzaniso, kuburikidza nekumberi-kuguma kutumirwa kwe "Network Inline Bypass" uyezve anti-DDOS kudzivirira michina uye wozobatana ne "Network Inline Bypass", mu yakajairwa ” Traction mudziviriri "kusvika huwandu hwakazara hwetraffic waya-kumhanyisa kutumira panguva imwe chete inoyerera girazi inobuda kune" anti-DDOS kurwisa kudzivirira mudziyo ", yakamboonekwa kune server IP (kana IP network segment) mushure mekurwiswa, "Anti-DDOS kurwisa kurwisa mudziyo" ichagadzira iyo inonangwa yetraffic inoyerera inoenderana mitemo uye yoitumira kune "Network Inline Bypass" kuburikidza neiyo ine simba dhizaini yekutumira interface.Iyo "Network Inline Bypass" inogona kugadzirisa iyo "traffic traction dynamic" mushure mekugamuchira iyo ine simba yemitemo yemitemo Rule dziva "uye nekukurumidza" mutemo unorova kurwisa server traffic "kukwevera kune" anti-DDoS kurwisa kudzivirira uye kuona "midziyo yekugadzirisa, kusvika shanda mushure mekurwisa kuyerera uye wozoiswazve mumambure.

Iyo application scheme yakavakirwa pa "Network Inline Bypass" iri nyore kuita pane yechinyakare BGP nzira jekiseni kana imwe traffic traffic scheme, uye nharaunda haina kutsamira pane network uye kuvimbika kwakakwira.

"Network Inline Bypass" ine anotevera maitiro ekutsigira ane simba chengetedzo yekuona kuchengetedza:
1, "Network Inline Bypass" kupa kunze kwemitemo yakavakirwa paWEBSERIVCE interface, nyore kusanganisa neyechitatu-bato rekuchengetedza zvishandiso.
2, ” Network Inline Bypass ” yakavakirwa pahardware yakachena ASIC chip inoendesa kusvika ku10Gbps waya-yekumhanyisa mapaketi pasina kuvharira kufambisa kwekuchinja, uye "traffic traction dynamic rule library" zvisinei nenhamba.
3, "Network Inline Bypass" yakavakirwa-mukati nyanzvi BYPASS basa, kunyangwe kana mudziviriri pachayo akatadza, anogona zvakare kunzvenga iyo yekutanga serial link nekukasira, haikanganisi yekutanga link yekutaurirana kwakajairwa.