Yiziphi izici ze-Network Packet Broker(NPB) & Test Access Port (TAP)?

II-Network Packet Broker(NPB), ehlanganisa i-1G NPB evame ukusetshenziswa, 10G NPB, 25G NPB, 40G NPB, 100G NPB, 400G NPB, kanyeImbobo yokufinyelela yokuhlola inethiwekhi (TAP), iyidivayisi yehadiwe exhuma ngqo kukhebuli yenethiwekhi futhi ithumele ucezu lokuxhumana kwenethiwekhi kwamanye amadivaysi.

Ama-Network Packet Brokers ajwayele ukusetshenziswa ezinhlelweni zokutholwa kokungena kwenethiwekhi (IDS), izitholi zenethiwekhi, namaphrofayili.Iseshini yesibuko sembobo.Kumodi ye-shunting, isixhumanisi se-UTP esigadiwe (isixhumanisi esingafihliwe) sihlukaniswa izingxenye ezimbili ngedivayisi ye-TAP shunting.Idatha efihliwe ixhunywe kusixhumi esibonakalayo sokuqoqwa ukuze kuqoqwe idatha yesistimu yokuqapha ukuphepha kolwazi lwe-inthanethi.

I-ML-TAP-2810 Network Tap

Ikwenzelani i-Network Packet Broker(NPB)?

Izici Eziyinhloko:

1. Ezizimele

Iyingxenye ezimele ye-hardware futhi ayithinti umthwalo wamadivayisi enethiwekhi akhona, anezinzuzo ezinhle ngaphezu kwesibuko se-port.

Kuyidivayisi esemgqeni, okusho nje ukuthi idinga ukuxhunywa kunethiwekhi.Kodwa-ke, lokhu nakho kunobubi bokwethula iphuzu lokwehluleka, futhi ngenxa yokuthi kuyidivayisi eku-inthanethi, inethiwekhi yamanje idinga ukuphazanyiswa ngesikhathi sokuphakelwa, kuye ngokuthi isetshenziswa kuphi.

2. Okusobala

I-Transparent isho isikhombisi senethiwekhi yamanje.Ngemva kokufinyelela i-shunt yenethiwekhi, ayinawo umthelela kuwo wonke amadivayisi akunethiwekhi yamanje, futhi ibonakala ngokuphelele kuwo.Yiqiniso, lokhu kufaka phakathi ithrafikhi ethunyelwe yi-shunt yenethiwekhi kudivayisi yokuqapha, ephinde ibe sobala kunethiwekhi.

Umgomo wokusebenza:

I-traffic shunting(ukusabalalisa) okusekelwe kudatha yokufaka, ukuphindaphinda, ukuqoqa, ukuhlunga, ukuguqulwa kwedatha ye-10G POS ngokuguqulwa kwephrothokholi kumashumi ama-megabytes edatha ye-LAN, ngokusho kwe-algorithm ethile yokukhishwa kokulinganisa komthwalo, okukhiphayo ngesikhathi esifanayo ukuqinisekisa ukuthi wonke amaphakethe eseshini efanayo, noma i-IP efanayo ikhipha wonke amaphakethe asuka kusixhumi esibonakalayo somsebenzisi esifanayo.

I-ML-TAP-2401B 混合采集-应用部署

Izici ezisebenzayo:

1. Ukuguqulwa kwephrothokholi

Izixhumanisi ezijwayelekile zokuxhumana kwedatha ye-inthanethi ezisetshenziswa ama-ISP zifaka i-40G POS, i-10G POS/WAN/LAN, i-2.5G POS, ne-GE, kuyilapho izixhumanisi zokuthola idatha ezisetshenziswa amaseva ohlelo lokusebenza ziyi-GE kanye ne-10GE LAN.Ngakho-ke, ukuguqulwa kwephrothokholi okuvame ukushiwo ezindaweni zokuxhumana ze-inthanethi ikakhulukazi kubhekisela ekuguquleni phakathi kwe-40G POS, 10G POS, ne-2.5G POS kuya ku-10GE LAN noma i-GE, kanye ne-cotransfer ye-bidirectional phakathi kwe-10GE WAN ne-10GE LAN ne-GE.

2. Ukuqoqwa nokusabalalisa idatha.

Iningi lezinhlelo zokusebenza zokuqoqa idatha ngokuyisisekelo zikhipha ithrafikhi ezizikhathalelayo futhi zilahle ithrafikhi ezingenandaba nayo.Ithrafikhi yedatha yekheli le-IP elithile, iphrothokholi, kanye nembobo ikhishwa ngamapheshana amahlanu (ikheli le-IP lomthombo, ikheli le-IP okuyiwa kulo, imbobo yomthombo, imbobo okuyiwa kuyo, kanye nephrothokholi) ukuhlangana.Lapho okukhiphayo, umthombo ofanayo, indawo efanayo kanye nokukhishwa kwebhalansi yomthwalo kuqinisekiswa ngokuvumelana ne-algorithm ethize ye-HASH.

3. Ukuhlunga ikhodi yesici

Ekuqoqweni kwethrafikhi ye-P2P, uhlelo lohlelo lokusebenza lungagxila kuphela kuthrafikhi ethile, njengokusakaza-bukhoma imidiya i-PPStream, BT, Thunderbolt, namagama angukhiye avamile ku-HTTP afana ne-GET ne-POST, njll. Indlela yokufanisa ikhodi yesici ingasetshenziselwa ukukhipha. kanye nokuhlangana.I-diverter isekela ukuhlunga ikhodi yesici sokuma okugxilile kanye nokuhlunga ikhodi yesici esintantayo.Ikhodi yesici esintantayo iyi-offset ecaciswe ngesisekelo sekhodi yesici esimisiwe.Ilungele izinhlelo zokusebenza ezicacisa ikhodi yesici okufanele ihlungwe, kodwa ingacacisi indawo ethile yekhodi yesici.

4. Ukuphathwa kweseshini

Ihlonza ithrafikhi yeseshini futhi ilungise ngokuguquguqukayo inani lokudlulisela iseshini engu-N (N=1 ukuya ku-1024).Okusho ukuthi, amaphakethe angu-N okuqala eseshini ngayinye ayakhishwa futhi adluliselwe ohlelweni lokuhlaziya uhlelo lokusebenza olungemuva, futhi amaphakethe ngemva kuka-N ayalahlwa, okulondoloza insiza engaphezulu yenkundla yokuhlaziya isicelo esingezansi.Ngokuvamile, uma usebenzisa i-IDS ukuqapha imicimbi, awudingi ukucubungula wonke amaphakethe esikhathi sonke;esikhundleni salokho, udinga nje ukukhipha amaphakethe okuqala e-N yeseshini ngayinye ukuze uqedele ukuhlaziya nokuqapha umcimbi.

5. Ukwenza isibuko sedatha nokuphindaphinda

Isihlukanisi singabona isibuko nokuphindaphindwa kwedatha kusixhumi esibonakalayo esikhiphayo, okuqinisekisa ukufinyelela kwedatha yezinhlelo zokusebenza eziningi.

6. Ukuthola nokudlulisa idatha yenethiwekhi ye-3G

Ukuqoqwa nokusabalalisa idatha kumanethiwekhi e-3G kuhlukile ezindleleni zendabuko zokuhlaziya inethiwekhi.Amaphakethe kumanethiwekhi e-3G adluliselwa kuzixhumanisi zomgogodla ngokusebenzisa izendlalelo eziningi ze-encapsulation.Ubude bephakethe kanye nefomethi ye-encapsulation ihlukile kunaleyo yamaphakethe akunethiwekhi evamile.Isihlukanisi singakwazi ukuhlonza ngokunembile futhi sicubungule izivumelwano zomhubhe njengamaphakethe e-GTP ne-GRE, amaphakethe e-MPLS anezingqimba eziningi, namaphakethe e-VLAN.Ingakwazi ukukhipha amaphakethe esignali e-IUPS, amaphakethe esignali e-GTP, namaphakethe eRadius kumachweba acacisiwe asekelwe kuzici zephakethe.Ngaphezu kwalokho, ingahlukanisa amaphakethe ngokuya ngekheli le-IP langaphakathi.Ukusekelwa kokucutshungulwa kwamaphakheji amakhulu (MTU> 1522 Byte), kungaqaphela ngokuphelele ukuqoqwa kwedatha yenethiwekhi ye-3G kanye nohlelo lokusebenza lwe-shunt.

Izidingo zesici:

- Isekela ukusatshalaliswa kwethrafikhi ngephrothokholi yohlelo lokusebenza ye-L2-L7.

- Isekela ukuhlunga okungu-5 ngekheli le-IP eliwumthombo oqondile, ikheli le-IP okuyiwa kulo, imbobo yomthombo, imbobo okuyiwa kuyo, nephrothokholi kanye nemaski.

- Isekela ukulinganisa komthwalo okukhiphayo kanye ne-homology ephumayo kanye ne-homology.

- Isekela ukuhlunga nokudlulisa ngezinhlamvu zezinhlamvu.

- Isekela ukuphathwa kweseshini.Dlulisela phambili amaphakethe angu-N wokuqala weseshini ngayinye.Inani lika-N lingacaciswa.

- Isekela abasebenzisi abaningi.Amaphakethe wedatha afana nomthetho ofanayo anganikezwa inkampani yangaphandle ngesikhathi esifanayo, noma idatha ekusixhumi esibonakalayo okukhiphayo ingenziwa isibuko futhi iphindaphindwe, iqinisekise ukufinyelela kwedatha yezinhlelo zokusebenza eziningi.

Isixazululo Senzuzo Yemboni Yezezimali
Ngokuthuthuka okusheshayo kobuchwepheshe bolwazi bomhlaba wonke kanye nokujula kolwazi, izinga lenethiwekhi yebhizinisi liye landiswa kancane kancane, futhi ukuncika kwezimboni ezihlukahlukene ohlelweni lolwazi kuye kwaba phezulu kakhulu.Ngasikhathi sinye, inethiwekhi yebhizinisi yokuhlaselwa kwangaphakathi nangaphandle, okungahambi kahle, kanye nezinsongo zokuphepha kolwazi nazo ziyakhula, ngobuningi bokuvikela inethiwekhi, uhlelo lokuqapha ibhizinisi lezicelo olusetshenziswa ngokulandelana, zonke izinhlobo zokuqapha kwebhizinisi, imishini yokuvikela ukuphepha. kutshalwe kuyo yonke inethiwekhi, kuzoba nokumoshakala kwezinsiza zolwazi, ukuqapha indawo eyimpumputhe, ukuqapha okuphindaphindiwe, i-topology yenethiwekhi kanye nenkinga ehlelekile njengokungakwazi ukuthola ngempumelelo idatha ehlosiwe, okuholela ekuqapheni ukusebenza kahle kwemishini, ukutshalwa kwezimali okuphezulu, imali engenayo ephansi. , ukugcinwa sekwephuzile kanye nobunzima bokuphatha, izinsiza zedatha kunzima ukuzilawula.

Iselula


Isikhathi sokuthumela: Sep-08-2022