Indlela yokuBamba iTrafikhi yeNethiwekhi?Itephu yeNethiwekhi vs Port Mirror

Ukuze uhlalutye i-traffic yenethiwekhi, kuyimfuneko ukuthumela ipakethi yenethiwekhi kwi-NTOP/NPROBE okanye i-Out-of-band Network Security and Monitoring Tools.Kukho izisombululo ezibini kule ngxaki:

Isibuko sePort(ekwaziwa njenge-SPAN)

Itephu yeNethiwekhi(ekwabizwa ngokuba yiReplication Tap, aggregation tap, Active Tap, Copper Tap, Ethernet Tap, njl.)

Phambi kokuchaza umahluko phakathi kwezisombululo ezimbini (Port Mirror kunye Network Tap), kubalulekile ukuqonda ukuba isebenza njani Ethernet.Kwi-100Mbit nangaphezulu, ababuki zindwendwe baqhele ukuthetha nge-duplex epheleleyo, okuthetha ukuba umamkeli omnye angathumela(Tx) kwaye afumane(Rx) ngaxeshanye.Oku kuthetha ukuba kwi-cable ye-100 ye-Mbit exhunywe kwi-host host enye, inani elipheleleyo le-traffic yenethiwekhi enye i-host host ingathumela / ifumane (Tx / Rx)) yi-2 × 100 Mbit = 200 Mbit.

I-Port mirroring kukuphindwa kwepakethi esebenzayo, okuthetha ukuba isixhobo sothungelwano sinoxanduva ngokwasemzimbeni lokukopa ipakethi kwizibuko elibonisiweyo.

isibuko sokutshintsha kwenethiwekhi

Oku kuthetha ukuba isixhobo kufuneka senze lo msebenzi ngokusebenzisa isibonelelo esithile (esifana ne-CPU), kwaye zombini izikhokelo zendlela ziya kuphinda-phindwa kwizibuko elinye.Njengoko bekutshiwo ngaphambili, kwikhonkco elipheleleyo le-duplex, oku kuthetha ukuba

A - > B kunye no-B -> A

Isixa se-A asiyi kudlula isantya sothungelwano phambi kokuba ilahleko yepakethe yenzeke.Oku kungenxa yokuba akukho ndawo ngokwasemzimbeni yokukopa iipakethi.Kuyavela ukuba isibuko sesibuko bubuchule obukhulu njengoko bunokwenziwa ngotshintsho oluninzi (kodwa ayilulo lonke), kuba uninzi lokutshintsha kunye ne-drawback yelahleko yepakethi, ukuba ubeka iliso kwikhonkco elinomthwalo ongaphezulu kwe-50%, okanye isipili izibuko kwizibuko elikhawulezayo (umzekelo isibuko se-100 Mbit kwizibuko le-Gbit).Singasathethi ke ukuba i-packet mirroring inokufuna ukutshintshiselana ngezixhobo zokutshintsha, ezinokuthi zilayishe isixhobo kwaye zibangele ukusebenza kotshintshiselwano ukuthotywa.Qaphela ukuba ungaqhagamshela izibuko eli-1 kwizibuko elinye, okanye i-1 VLAN kwizibuko elinye, kodwa ngokubanzi awukwazi ukukhuphela izibuko ezininzi ku 1. (Ke njengesibuko sepakethe) ilahlekile.

I-TAP yeNethiwekhi (iNdawo yoFikelelo lweterminal)sisixhobo sehardware esenziwa ngokupheleleyo, esinokuthi sibambe itrafikhi kuthungelwano.Ngokuqhelekileyo isetyenziselwa ukujonga i-traffic phakathi kwamanqaku amabini kwinethiwekhi.Ukuba uthungelwano phakathi kwala manqaku mabini lubandakanya intambo yomzimba, i-TAP yenethiwekhi inokuba yeyona ndlela ilungileyo yokubamba i-traffic.

I-TAP yenethiwekhi inamazibuko amathathu ubuncinane: i-port, i-B port, kunye ne-monitor port.Ukubeka impompo phakathi kwamanqaku A kunye no-B, intambo yenethiwekhi phakathi kwenqaku A kunye nenqaku B iyatshintshwa ngeentambo ezimbini, enye iya kwizibuko le-TAP's A, enye iya kwizibuko le-TAP's B.I-TAP idlula zonke iitrafikhi phakathi kwamanqaku amabini othungelwano, ngoko ke zisaqhagamshelwe omnye komnye.I-TAP iphinda ikhuphele i-traffic kwizibuko layo lokujonga, ngaloo ndlela ivumela isixhobo sokuhlalutya ukumamela.

Ii-TAP zeNethiwekhi ziqhele ukusetyenziswa ngokubeka iliso kunye nokuqokelela izixhobo ezifana ne-APS.Ii-TAPs zisenokusetyenziswa kwizicelo zokhuseleko kuba azinamqobo, azibonakali kuthungelwano, zinokujongana ne-full-duplex kunye ne-non-shared networks, kwaye ngokuqhelekileyo ziya kudlula kwi-traffic nokuba impompo iyeka ukusebenza okanye ilahlekelwe ngamandla. .

ukudibanisa impompo yenethiwekhi

Njengoko i-Network taps izibuko zingafumani kodwa zihambisa kuphela, iswitshi ayinamkhondo ukuba ngubani ohleli emva kwamazibuko.Isiphumo kukuba isasaza iipakethi kuwo onke amazibuko.Ke ngoko, ukuba uqhagamshela isixhobo sakho esweni kwiswitshi, eso sixhobo siya kufumana zonke iipakethi.Qaphela ukuba lo matshini uyasebenza ukuba isixhobo sokubeka iliso asithumeli nayiphi na ipakethi kwisitshixo;ngenye indlela, iswitshi iyakucinga ukuba iipakethi ezicofayo azikho kweso sixhobo.Ukuze ufezekise oko, ungasebenzisa intambo yenethiwekhi ongakhange uqhagamshele kuyo iingcingo ze-TX, okanye usebenzise i-IP-less (kunye ne-DHCP-ngaphantsi) ujongano lwenethiwekhi olungathumeli iipakethi kwaphela.Okokugqibela qaphela ukuba ufuna ukusebenzisa itephu ukuze ungalahleki iipakethi, ngoko mhlawumbi ungadibanisi izikhombisi-ndlela okanye usebenzise iswitshi apho izalathiso ezicofayo zicotha khona (umz. 100 Mbit) ukuba izibuko zokudibanisa (umz. 1 Gbit).

inethiwekhi yempompo yophindaphindo

Ke, ungabanjwa njani iTrafikhi yeNethiwekhi?Iimpompo zeNethiwekhi vs Isibuko sokutshintsha amaZibuko

I-1- Ulungelelwaniso olulula: Itephu yeNethiwekhi> Isibuko sePort

I-2- Impembelelo yoMsebenzi womnatha: Itephu yeNethiwekhi < Isibuko sePort

I-3-Thatha, ukuphindaphinda, ukuHlanganisa, amandla oThutho: Itephu yenethiwekhi > Isibuko sePort

I-4- ILatency yoThutho lweTrafikhi: Itephu yeNethiwekhi < Isibuko sesibuko

I-5- Ubuchule bokwenza kwangaphambili iTrafikhi: Itephu yenethiwekhi > Isibuko sesibuko

iitephu zenethiwekhi vs isipili samazibuko


Ixesha lokuposa: Mar-30-2022