Mylinking™ Network Packet Broker tinyere Inline Bypass Switch ML-NPB-M2000
Modulu ngafe: 8*10G SFP+ na 4*100GE, Modulu nlekota: 16*10GE SFP+ na 4*100GE, Kachasị 2.4Tbps
1-Nchịkọta
Site na mmepe ngwa ngwa nke ịntanetị, ihe iyi egwu nke nchekwa ozi netwọk na-aghọwanye njọ, yabụ a na-eji ọtụtụ ngwa nchekwa nchekwa ozi eme ihe n'ọtụtụ ebe. Ma ọ bụ ngwa njikwa ohere ọdịnala (firewall) ma ọ bụ ụdị ụzọ nchekwa ọhụrụ dị elu dịka sistemụ mgbochi intrusion (IPS), ikpo okwu njikwa ihe iyi egwu dị n'otu (UTM), sistemụ mwakpo ọrụ mgbochi-mgbochi (Anti-DDoS), Ọnụ ụzọ ámá mgbochi-spam, Sistemụ njirimara okporo ụzọ DPI na njikwa, na ọtụtụ ngwaọrụ nchekwa ka etinyere n'usoro na isi igodo netwọkụ, mmejuputa iwu nchekwa data kwekọrọ na ya iji chọpụta ma jikwaa okporo ụzọ iwu kwadoro / iwu na-akwadoghị. Agbanyeghị, n'otu oge ahụ, netwọk kọmputa ga-emepụta nnukwu igbu oge netwọk ma ọ bụ ọbụna nsogbu netwọk ma ọ bụrụ na ọdịda agafe, mmezi, mmelite, nnọchi akụrụngwa na ihe ndị ọzọ na gburugburu ngwa netwọkụ mmepụta a pụrụ ịtụkwasị obi nke ukwuu, ndị ọrụ agaghị enwe ike idi ya.
A na-eme nnyocha ma mepụta ML-NPB-M2000 Mylinking™ Network Packet Broker tinyere Inline Bypass Switch ka e jiri ya mee ihe maka itinye ụdị ngwa nchekwa usoro dị iche iche n'ọnọdụ dị iche iche ma na-enye ntụkwasị obi netwọk dị elu.
Site na iji Mylinking™ Network Packet Broker tinyere Inline Bypass Switch:
●Ndị ọrụ nwere ike itinye/iwepụ ngwaọrụ nchekwa n'ụzọ dị mfe n'enweghị nsogbu ma ọ bụ ịkwụsị netwọk dị ugbu a;
● O nwere ọrụ nchọpụta ahụike nwere ọgụgụ isi iji nyochaa ọnọdụ ọrụ nkịtị nke ngwaọrụ nchekwa ejikọtara n'oge. Ozugbo ngwaọrụ nchekwa ejikọtara mebiri emebi, onye nchebe ahụ ga-agafe na akpaghị aka iji nọgide na-enwe nkwukọrịta netwọk nkịtị.
●Enwere ike iji teknụzụ nchekwa okporo ụzọ họrọ iji tinye ngwa nchekwa nhicha okporo ụzọ kpọmkwem, ngwa nyocha dabere na nzuzo, wdg. Ọ na-etinye nchekwa nnweta n'ime ahịrị nke ọma maka ụdị okporo ụzọ ụfọdụ, na-ewepụ ibu nhazi okporo ụzọ nke ngwaọrụ dị n'ime ahịrị.
● Enwere ike iji teknụzụ nchekwa okporo ụzọ nhazi ibu iji tinye ngwaọrụ dị n'ime ahịrị dị nchebe n'ime otu iji mezuo mkpa nke nchekwa nchekwa n'ahịrị n'okpuru gburugburu nrụgide bandwidth dị elu.
●O nwere ikike SSL proxy, na-emezu ihe achọrọ maka nlekota na nyocha nke ngwaọrụ nchekwa maka ọdịnaya data ederede nkịtị.
● O nwere ikike nhazi okporo ụzọ dị mkpa dịka mmegharị okporo ụzọ, nchịkọta, nzacha, na akara, yana ikike nhazi okporo ụzọ dị elu dịka mwepụ, ikpuchi, njirimara usoro ngwa, na nhazi okporo ụzọ.
2-Mylinking™ Network Packet Broker tinyere Inline Bypass Switch Atụmatụ na Teknụzụ Dị Elu
Usoro Nchedo Mylinking™ "SpecFlow" na Teknụzụ Usoro Nchedo "FullLink"
Teknụzụ Nchedo Mgbanwe Mfe Mylinking™
Teknụzụ Mylinking™ “LinkSafeSwitch”
Teknụzụ Mbugharị/Nsogbu Atumatu Mylinking™ "WebService"
Teknụzụ Nchọpụta Packet Obi Mylinking™ Intelligent
Njikọ m™ Teknụzụ Ngwugwu Obi A Na-akọwapụta
Njikọ m™ Teknụzụ Nhazi Ibu Ibu dị iche iche
Njikọ m™ Teknụzụ nkesa okporo ụzọ nwere ọgụgụ isi
Njikọ m™ Teknụzụ Nhazi Ibu Ike
Njikọ m™ Teknụzụ Njikwa Ime Obodo (HTTP/WEB, TELNET/SSH, njirimara "EasyConfig/AdvanceConfig")
3-Mylinking™ Network Packet Broker tinyere Ntuziaka Nhazi Mgbanwe Inline Bypass
Dịka egosiri na eserese dị n'elu, otu ahụ dum nwere oghere modular anọ:
Oghere modulu SLOT1, SLOT2, SLOT3, na SLOT4 niile nwere ike ịnabata modulu ọdụ ụgbọ mmiri nchekwa BYPASS ma ọ bụ modulu ọdụ ụgbọ mmiri MONITOR nwere ọnụego na nọmba ọdụ ụgbọ mmiri dị iche iche. Site na iji dochie ụdị modulu dị iche iche, ọ ga-ekwe omume ịkwado nchedo BYPASS maka ọtụtụ njikọ 10G/40G/100G, yana itinye akụrụngwa nlekota Inline Bypass maka ọtụtụ njikọ 10G/40G/100G.
Rịba ama: Ma modulu BYPASS na modulu MONITOR na-akwado mgbanwe ọkụ.
3.1-Ndepụta Nkọwapụta Modulu
| Ụdị Ngwaahịa | ỌrụParamita |
| Chasis | |
| ML-NPB-M2000-CHS/AC | Rackmount nke 2U ọkọlọtọ nke dị sentimita iri na itoolu; oke oriri ike kachasị 300W; isi ihe nchekwa BYPASS modular; oghere modulu anọ; 1 * RS232 interface njikwa, 1 * 10/100/1000M RJ45 interface yana njikwa netwọkụ mpụga; ike abụọ AC-220V; |
| NT-BYPASS-M2000-CHS/DC | Rackmount ọkọlọtọ 2U nke dị sentimita iri na itoolu; oke oriri ike 300W; isi ihe nchekwa BYPASS modular; oghere modulu anọ; 1 * RS232 interface njikwa, 1 * 10/100/1000M RJ45 interface yana njikwa netwọkụ mpụga; ọkọnọ ike abụọ DC-48V; |
| BỤGHỊ ỌZỌModule | |
| INL-I8XM8X(LM/SM) | Na-akwado nchekwa njikọ usoro njikọ 4-ụzọ 10GE (dakọtara na 1G), yana mkpokọta njikọ 8 * 10GE; na-akwado ọdụ ụgbọ mmiri nlekota 8 * 10G SFP+ (ewezuga modulu anya). |
| INL-I4HM2H (LM/SM) | Na-akwado nchekwa usoro njikọ 100GE (40GE dakọtara) nke nwere njikọ abụọ, yana mkpokọta njikọ 4 * 100GE; na-akwado ọdụ ụgbọ mmiri nlekota 2 * 100GE QSFP28 (ewezuga modulu anya). |
| Modulu Nlele | |
| MỌN-M16X | Ọdụ ụgbọ mmiri nlekota 16 * 10GE SFP+ (ewezuga modulu anya); |
| MỌN-M16X-CN98 | Ọdụ ụgbọ mmiri nlekota 16*10GE SFP+ (anaghị etinye modulu anya); nwere injin ọrụ dị elu, na-akwado ọrụ nhazi okporo ụzọ dị elu dịka nkewa SSL, proxy SSL, na nkewa okporo ụzọ; |
| MỌN-M4H | Ọdụ ụgbọ mmiri nlekota 4 * 100GE QSFP28 (anaghị etinye modulu anya); |
| MỌN-M4H-CN98 | Ọdụ ụgbọ mmiri nlekota 4 * 100GE QSFP28 (anaghị etinye modulu anya); nwere injin ọrụ dị elu, na-akwado ọrụ nhazi okporo ụzọ dị elu dịka nkewa SSL, proxy SSL, na nkewa okporo ụzọ; |
3.2-Iwu Nhọrọ Modul
Dabere na njikọ dị iche iche echekwara na ihe achọrọ maka ntinye ngwa nlekota, ị nwere ike ịhọrọ nhazi modulu dị iche iche n'ụzọ dị mfe iji mezuo mkpa gburugburu gị n'ezie; biko soro iwu ndị a mgbe ị na-ahọrọ:
1) Mgbakọ chassis bụ ihe dị mkpa ma a ga-ahọrọ ya tupu ịhọrọ modulu ndị ọzọ. Biko họrọkwa usoro ọkọnọ ike kwesịrị ekwesị (AC/DC) dịka mkpa gị si dị.
2) Ngalaba ahụ na-akwado oghere modulu anọ kachasị; ị nweghị ike ịhọrọ modulu karịa ọnụọgụ oghere maka nhazi. Dabere na njikọta mgbanwe nke ụdị modulu dị iche iche, ngwaọrụ ahụ nwere ike ịkwado nchekwa usoro maka njikọ 10GE/GE ruru 16 ma ọ bụ njikọ 8 100GE/40GE.
4-Ikike Nhazi Okporo ụzọ Nwere Ọgụgụ Isi
4.1-Ntinye n'ime ahịrị
Nchedo Inline nke Okporo ụzọ kpọmkwem
Ọ na-akwadoN'ahịrị(usoro)ụdị nchekwa maka ụdị okporo ụzọ kpọmkwem na nke ọ bụlan'ahịrịnjikọ.Tozipu ụfọdụ ụdị okporo ụzọ akọwapụtara nke onye ọrụ nan'ahịrịnjikọ naN'ahịrị Snchebengwaọrụmaka nhazi, a na-ebufekwa okporo ụzọ ndị ọzọ ozugbo na-agafeghịN'ahịrị Snchebengwaọrụ. N'otu oge ahụ,itna-eme nlekota oge n'ezie na ọnọdụ na-agba ọsọ nkeN'ahịrị SnchebengwaọrụOzugbo achọpụtara ọnọdụ nhazi okporo ụzọ na-adịghị mma,ita ga-ewepụ ya na ụzọ mbufe okporo ụzọ na akpaghị aka iji hụ na ọrụ netwọk na-aga n'ihu.
Nchedo Inline Okporo ụzọ niile
Ọ na-akwadoN'ahịrị(usoro)ọnọdụ nchekwa maka ụdị okporo ụzọ niile na nke ọ bụlan'ahịrịnjikọ.Tozipu okporo ụzọ niile nan'ahịrịnjikọ naN'ahịrị Snchebengwaọrụmaka nhazi, na inyocha ọnọdụ ọrụ nke Inline Securityngwaọrụozugbo ahụtara ọnọdụ nhazi okporo ụzọ na-adịghị mma,ita ga-ewepụ ya na ụzọ mbufe okporo ụzọ na akpaghị aka iji hụ na ọrụ netwọk na-aga n'ihu.
Nguzozi Ibu
Ọ nwere ikike nhazi ibu okporo ụzọ nwere ọgụgụ isi. Mgbe arụmọrụ nhazi nke otuN'ahịrị Snchebengwaọrụezughi oke iji merie yan'ahịrịnjikọ okporo ụzọ nkwukọrịta, ọ nwere ike kenye yan'ahịrịjikọọ okporo ụzọ na njikọ N Monitor site na ịhazi otu nhazi ibu. Dịka MAC si kwuo, ozi IP, nọmba ọdụ ụgbọ mmiri, protocol na ozi ndị ọzọ,itna-arụ ọrụ mmepụta nhazi ibu nke algọridim Hash nhọrọ, ka o wee nwee iken'ahịrịA na-ekesa okporo ụzọ njikọ n'otu aka ahụ ruo ọtụtụn'ahịrịnchekwangwaọrụs maka nhazi klọsta, nke na-eme ka arụmọrụ nhazi zuru oke nke ọman'ahịrịnchekwangwaọrụs. Iji mee mgbanwe dịka ihe achọrọ maka oke bandwit na nnukwu ọnọdụ ngwa okporo ụzọ.
Nchọpụta Ngwugwu Obi
Ọ na-akwadoTxnaRxngwugwu nchọpụta obi site na njikọ elu na njikọ ala nke njikọn'ahịrịngwaọrụ nchekwa, ma chọpụtangwaọrụ dị n'imeọnọdụ ọrụ na ma usoro nhazi okporo ụzọ ọ bụ ihe nkịtị.ngwugwuusoro nchọpụta nwere ike igosi nke ọma ọnọdụ ọrụ ugbu a nken'ahịrịnchekwangwaọrụ, ma hụ na ọrụ netwọk ahụ na-arụ ọrụ nke ọma karịa.
Ọ nwere ike ịhazi paramita obi nke ihe ọ bụlan'ahịrịngwaọrụ nchekwa, dịka obi mgbawaTxoge etiti oge, oge nnwale obi kachasị elu, obi mgbawaTxntụziaka, wdg. Ọ nwere ike ịchọpụta ma kpee ikpe ọnọdụ mmejọ nken'ahịrịngwaọrụ nchekwa n'oge, ma hụ na ị ga-agbanwe njikọ nchekwa ngwa ngwa.
Ngwugwu nchọpụta obi bụ nke ndabara nke etiti Ethernet nke abụọ. Mgbe etinyere ọnọdụ akwa akwa Layer nke abụọ (dịka IPS/FW), a ga-ebufe etiti Ethernet nke etiti oyi akwa nke abụọ n'enweghị mgbochi ma ọ bụ ịda. N'otu oge ahụ, ọ nwekwara ike ịkwado ngwugwu nchọpụta obi Ethernet nke etiti oyi akwa nke abụọ, etiti atọ na etiti anọ iji mee ka ọ dabara na ụfọdụ ihe pụrụ iche.n'ahịrịNgwaọrụ nchekwa anaghị enwekarị ike ibugharị etiti Ethernet oyi akwa 2 nkịtị.
Dabere na usoro dị n'elu, ndị ọrụ nwere ike ịghọta mmetụta nchọpụta ahụike nke ngwaọrụ nchekwa ejikọtara, ka o wee hụ na ọrụ nchekwa nkịtị na-arụ ọrụ nke ọma karịa.
Mgbanwe Ngafe
Ọ na-akwado ụzọ mgbochi dị oke alamgbanweigbu oge (<8ms), ndị ọrụ enweghịkwa ike ịhụ mmetụta dị na netwọk ahụ mgbe ngwaọrụ ahụ na-eme bypassmgbanweN'otu oge ahụ, teknụzụ mgbanwe njikọ kpọmkwem nke ngwaọrụ nwere ike ijide n'aka na ọnọdụ njikọ nke njikọ mbụ anaghị emetụta n'oge ngagharị.mgbanweTeknụzụ a ga-eme ka ụzọ ahụ dị mfemgbanweọ dịkwa nchebe karịa, ọ gaghịkwa eme ka usoro topology oyi akwa 2 / Layer 3 nke njikọ echekwara gbanwee ma zukọta, ka o wee belata mmetụta na netwọk onye ọrụ n'ogemgbanwe.
Mgbochi okporo ụzọ
Mgbe ngwaọrụ nchekwa ahụ chọpụtara njikọ nnọkọ iwu na-akwadoghị ma ọ bụ nke na-adịghị mma n'okporo ụzọ ahụ ma chọọ igbochi ha n'oge, ngwaọrụ ahụ nwere ike igbochi ngwugwu ọ bụla akọwapụtara na okporo ụzọ na-arị elu ma na-agbada nken'ahịrịnjikọ dabere na ọnọdụ nzacha dakọtara tuple iji hụ na ọrụ netwọk dị nchebe.
Enyo okporo ụzọ
Na mgbakwunye na nchekwa okporo ụzọ nke njikọ inline na ngwaọrụ Inline Security (dịka IPS, WAF), enwere ike ịpụta okporo ụzọ SPAN ọ bụla nke enyo enyo na sistemụ nlekota nchekwa SPAN (dịka IDS, APT), iji mezuo ihe achọrọ maka ntinye nke nlekota SPAN nke data okporo ụzọ ma ọ bụ nnwale na nkwenye okporo ụzọ.
SSL Proxy
Site na ọrụ SSL proxy, a na-ewepụ ngwugwu ezoro ezo mbụ ma ziga ya na sistemụ nchekwa inline, wee weghachite data ezoro ezo ma ziga ya na njikọ mbụ, ka o wee nye data ezoro ezo na sistemụ nchekwa inline na-enweghị mmetụta nke nnyefe data ezoro ezo na njikọ mbụ nke onye ọrụ, ma hụ na sistemụ nyocha ahụ na-enyocha ma na-enyocha data ezoro ezo site na sistemụ nyocha.
4.2-Ntinye SPAN
Mmegharị Okporo ụzọ Netwọk
Ọ na-akwadoN'ahịrị(usoro)ụdị nchekwa maka ụdị okporo ụzọ kpọmkwem na nke ọ bụlan'ahịrịnjikọ.Tozipu ụfọdụ ụdị okporo ụzọ akọwapụtara nke onye ọrụ nan'ahịrịnjikọ naN'ahịrị Snchebengwaọrụmaka nhazi, a na-ebufekwa okporo ụzọ ndị ọzọ ozugbo na-agafeghịN'ahịrị Snchebengwaọrụ. N'otu oge ahụ,itna-eme nlekota oge n'ezie na ọnọdụ na-agba ọsọ nkeN'ahịrị SnchebengwaọrụOzugbo achọpụtara ọnọdụ nhazi okporo ụzọ na-adịghị mma,ita ga-ewepụ ya na ụzọ mbufe okporo ụzọ na akpaghị aka iji hụ na ọrụ netwọk na-aga n'ihu.
Nchịkọta Okporo ụzọ netwọkụ
Enwere ike idetuo okporo ụzọ ntinye mbụ na okporo ụzọ e mebere tupu oge eruo na akara ọwa N dịka akara ọwa 1 si dị ma ọ bụ depụtaghachi ya na akara ọwa M mgbe njikọta akara ọwa N na GE, 10GE, 40G na 100G na-ebufe ọsọ ahịrị, nke na-edozi mkpa nke itinye ihe karịrị ngwaọrụ abụọ na-agafe ọtụtụ ọdụ na netwọk n'otu oge.
Nkesa/Nzipu Data
Kewaa metadata na-abata nke ọma ma tụfuo ma ọ bụ ziga ọrụ data dị iche iche na ọtụtụ ihe ngosi interface dịka iwu onye ọrụ si dị.
Nzacha Data Ngwugwu
Data ntinyeokporo ụzọenwere ike kewaa ya nke ọma, ọrụ data dị iche iche nwekwara ike ịbụ iwu ndị ọcha ma ọ bụ ndị ojii, enwere ike ịtụfu ma ọ bụ zipu ọtụtụ ihe ngosi interface. Ọ na-akwado njikọta mgbanwe dabere na ụdị Ethernet, vlan tag, IP five-tuple,TCPnjirimara, njirimara ngwugwu na ihe ndị ọzọ iji mezuo ihe achọrọ maka ntinye nke ngwa nchekwa netwọk dị iche iche, nyocha usoro, nyocha mgbaama, na nlekota okporo ụzọ ndị ọzọ.
Nguzozi Ibu
Enwere ike ime nhazi ibu nke algọridim Hash nhọrọ dịka njirimara oyi akwa dị n'ime na nke mpụta nke L2-L4 si dị iji hụ na usoro nnọkọ ahụ ziri ezi nke usoro data natara.SPANngwaọrụ nlekota. Mgbe ọnọdụ njikọ gbanwere, ndị otu ọdụ ụgbọ mmiri na-ebupụ ihe nwere ike ịpụ (njikọ ala) ma ọ bụ jikọọ (njikọ elu) n'ụzọ dị mfe, otu na-ebupụ ihe nwekwara ike kesaa okporo ụzọ ahụ na akpaghị aka iji hụ na ibu dị iche iche na-agbanwe agbanwe nke okporo ụzọ mmepụta nke ọdụ ụgbọ mmiri ahụ.
Etinyere VLAN
Akpọghị VLAN akara
Edochiri VLAN
Nkwado maka ndakọrịta nke ubi igodo ọ bụla na byte 128 mbụ nke ngwugwu. Onye ọrụ nwere ike ịhazi uru mwepụ na ogologo na ọdịnaya nke ubi igodo, ma chọpụta amụma mmepụta okporo ụzọ dịka nhazi onye ọrụ si dị.
Ịmepụta Oge
A na-akwado ya mekọrịta sava NTP iji dozie oge ahụ ma dee ozi ahụ n'ime ngwugwu ahụ n'ụdị akara oge dị mkpirikpi yana akara akara oge na njedebe nke etiti ahụ, yana izi ezi nke nanoseconds
Mwepụ nke Ọwara Encapsulation
E tinyere isi VxLAN, VLAN, GRE, GTP, MPLS, na IPIP n'ime ngwugwu data mbụ ma ziga mmepụta.
Ịcha Data/Ngwugwu ngwugwu
Ọ na-akwadoMpekere ngwugwuiji data mbụ dabere na njikọ ntinye okporo ụzọ na njikọ mmepụta ọkwa amụma (64, 96, 128, 160, 192, 224, 256, 288, 320, 384, 512, 640, 768, 896, 960 byte bụ nhọrọ), enwere ike itinye amụma mmepụta okporo ụzọ n'ọrụ dịka nhazi onye ọrụ si dị.
Nchọpụta Usoro Ọwara Ọwara
A na-akwado ya ịchọpụta usoro nhazi ọwara dị iche iche na akpaghị aka dịka GTP / GRE / VxLAN / PPTP / L2TP / PPPOE / IPIP. Dịka nhazi onye ọrụ si dị, enwere ike itinye atụmatụ mmepụta okporo ụzọ dịka oyi akwa dị n'ime ma ọ bụ mpụta nke ọwara ahụ si dị.
Ibu Ọrụ Nbugharị Ngwugwu
Ọ na-akwado nkọwa nke mkpa nke ngwugwu data dịka mkpa ọrụ dị na ọdụ ụgbọ mmiri na-abata si dị, a na-ezigakwa ngwugwu ndị dị mkpa karịa mgbe a na-ewepụta ha. Mgbe e zigara ngwugwu ndị dị mkpa, a na-eziga ngwugwu ndị ọzọ dị ọkara na nke dị ala. Zere mkpu sistemụ nyocha nke ngwugwu data dị mkpa na-efu.
Ihe Mgbagwoju Anya Na-adịghị Mma
Ọ na-akwado mkpu nlekota oge na ndekọ mkpu akụkọ ihe mere eme nke usoro okporo ụzọ interface dabere na ntọala oke. Ọ na-akwado mkpu nlekota oge na ndekọ mkpu akụkọ ihe mere eme dabere na ọnọdụ ahụike nke ngwaike ngwaọrụ (cpu, ebe nchekwa, okpomọkụ, fan, ọkọnọ ike, wdg).
Nkwado ndabere na-ekpo ọkụ nke interface
Ọ na-akwado nhazi nhazi nke isi/nchekwa 1+1 interface ntinye, nhazi mmepụta nke isi/nchekwa 1+1 interface, na nhazi nhazi nke otu nhazi ibu N+1 primary/nchekwa iji nweta ntụkwasị obi dị elu na usoro nke okporo ụzọ site na ntinye ruo na mmepụta.
Nha Mbugharị Okporo ụzọ
Ọ nwere ike ịchọpụta oge, oge na ọnụego mgbawa nke obere mgbawa okporo ụzọ n'oge dị adị, ma nye njigide ndekọ nha akụkọ ihe mere eme, nke na-enye ụzọ a pụrụ ịtụle ma hụ anya na ntọala maka ọrụ na ndozi nsogbu na nchọpụta mfu ngwugwu.
Nchedo Oscillation Interface
Ọ na-akwado nchọpụta na nchekwa nke ihe omume njikọ elu/ala nke njikọ ọ bụla, iji zere mfu nke okporo ụzọ ntinye na mmepụta nke njikọ elu/ala na-akpata, ma melite nkwụsi ike nke nchịkọta okporo ụzọ na mbugharị.
Mmepụta Nkwụnye Ọwara
Ọ na-akwado mkpuchi ọwara ụdị ERSPAN2, GRE, VXLAN, NVGRE nke okporo ụzọ na mmepụta ọ bụla anakọtara iji mezuo ihe achọrọ maka nnyefe okporo ụzọ anakọtara na sistemụ nyocha dịpụrụ adịpụ.
Nkwụsị Ngwugwu Ọwara
Ọ na-akwado ọrụ nkwụsị ozi ọwara. Ọrụ a na-enye ohere ịhazi adreesị IP/ihe mkpuchi ihu na adreesị MAC na ọdụ ụgbọ mmiri ntinye okporo ụzọ. Ọ na-enye ohere ka nnyefe okporo ụzọ ozugbo nke kwesịrị ịnakọta na netwọk onye ọrụ site na ụzọ mkpuchi ọwara dịka GRE, GTP, na VXLAN gaa na ọdụ ụgbọ mmiri nchịkọta ngwaọrụ ahụ.
Nkọwapụta SSL nke SPAN
A na-akwado ibugo nkọwapụta asambodo SSL kwekọrọ. Mgbe emechara nkọwapụta nke data HTTPS ezoro ezo maka okporo ụzọ akọwapụtara, a ga-eziga ya na sistemụ nlekota na nyocha azụ dịka ọ dị mkpa. TLS1.0, TLS1.2 na SSL3.0 na-akwado ya
Mwepụ nke Data/Ngwugwu
A na-akwado ọnụọgụgụ ọnụọgụgụ dabere na ọdụ ụgbọ mmiri ma ọ bụ ọkwa amụma iji tụnyere ọtụtụ data isi mmalite nchịkọta na ugboro ugboro nke otu ngwugwu data n'otu oge akọwapụtara. Ndị ọrụ nwere ike ịhọrọ njirimara ngwugwu dị iche iche (dst.ip, src.port, dst.port, tcp.seq, tcp.ack, dst.mac, src.mac, vlan.id)
Ikpuchi Ụbọchị E Kpọrọ Iche
Akwadoro nhazi dabere na amụma iji dochie isi ihe ọ bụla dị na data nkịtị iji mezuo ebumnuche nke ichebe ozi dị mkpa. Dịka nhazi onye ọrụ si dị, enwere ike itinye iwu mmepụta okporo ụzọ n'ọrụ.
Nchọpụta Usoro Oyi akwa APP
Ọ na-akwado njirimara, mmepụta na ịtụfu Usoro Ngwa Layer dabere na ọnọdụ ndakọrịta DNS/URL. Enwere ike itinye ọbá akwụkwọ atụmatụ DPI iji mata, wepụta ma tụfuo ụdị atụmatụ ngwa 1800 (dịka ọdịyo na vidiyo, egwuregwu, ozi ngwa ngwa, nchekwa data, email, P2P, wdg), enwere ike ịkwalite ma melite ọbá akwụkwọ atụmatụ DPI. Ọ bụrụ na enwere mkpa pụrụ iche, enwere ike ime mmepe nke abụọ.
Ngwugwu nke onye ọrụ kọwara
Ọ na-akwado ọrụ nke enweghị mgbakwụnye ngwugwu nkeonwe, nke nwere ike iwepụ mpaghara na ọdịnaya nke encapsulation n'ọnọdụ ọ bụla nke byte 128 mbụ nke ngwugwu ahụ wee wepụta ya.
Ịhazi okporo ụzọ
N'otu oge ahụ, a na-eji teknụzụ nhazi okporo ụzọ eme ihe na njikọ mmepụta iji wepụta usoro data nke ọma na ngwaọrụ nyocha, nke na-edozi ihe kpatara mfu ngwugwu nke obere mgbawa kpatara ma na-ezere mkpu na-adịghị mma nke mfu okporo ụzọ na sistemụ nyocha kpatara.
Ndakọrịta Okwu Ndị Dị na Paket
Mgbe emechara ma kụọ ọdịnaya ubi ọ bụla dị na akụkụ ibu nke ngwugwu ahụ, a na-eziga ngwugwu ma ọ bụ usoro nnọkọ metụtara ya ma wepụta ma ọ bụ tụfuo ya iji mezuo ihe achọrọ tupu nhazi nke data okporo ụzọ kpọmkwem.
Mwepụ nke Ọwara Encapsulation
Ọ na-akwado mmepụta nke VXLAN, MPLS, GRE, SRV6, FABRICPATCH, GENEVE na isi ihe ndị ọzọ dị na ngwugwu data mbụ mgbe ewepụsịrị ya.
Ibudata njikọ ogologo oge
Dịka mkpa onye ọrụ si dị, enwere ike ibugharị ma wepụta usoro nnọkọ ọ bụla dịka ọnụọgụgụ byte ebufere na ọnụọgụ nke ngwugwu ebufere si dị, a pụkwara ịtụfu usoro nnọkọ na-esote, ka o wee mezuo ihe achọrọ na sistemụ nyocha azụ-njedebe n'ọnọdụ ụfọdụ, nke naanị ihe dị mkpa bụ inweta akụkụ nke okporo ụzọ nke usoro nnọkọ, belata nrụgide nke nyocha okporo ụzọ ma melite arụmọrụ nke sistemụ nyocha.
Nyocha Ọnụọgụ Okporo ụzọ
Ọ na-akwado ọnụọgụgụ nke ihe ndị dị na okporo ụzọ njikọ ntinye ọ bụla, ma nwee ike igosi nha usoro okporo ụzọ ya, nha okporo ụzọ/oke TOPN nke adreesị IP, nha okporo ụzọ/oke TOPN nke ụdị usoro ngwa, nha okporo ụzọ/oke TOPN nke aha usoro ngwa na ozi nnọkọ okporo ụzọ n'ụdị eserese n'oge, ma na-enye mbupu nke nsonaazụ ọnụọgụgụ na faịlụ mpaghara. Ya mere, ndị ọrụ nwere ike ịghọta nke ọma usoro nhazi nke okporo ụzọ ọ bụla anakọtara, ma nye ntọala nkwado data kacha kpọmkwem maka ịhazi atụmatụ okporo ụzọ na mgbanwe achọrọ azụmaahịa.
Nlele Okporo ụzọ - Nyocha Data Isi
Mọdụl nyocha bụ isi nke ọrụ nchọpụta anya okporo ụzọ nwere ike igosi ozi bụ isi nke data okporo ụzọ ejidere, dị ka ọnụọgụ ngwugwu, nkesa ngwugwu unicast/multicast/agbasa ozi, nọmba njikọ nnọkọ, nkesa usoro ngwugwu, na nha okporo ụzọ ejidere.
Nlele Okporo ụzọ - Nnyocha miri emi nke DPI
Mọdụl nyocha miri emi nke DPI nke ọrụ nchọpụta visibiliti okporo ụzọ nwere ike ime nyocha miri emi nke data okporo ụzọ ebudatara site na ọtụtụ echiche, ma gosipụta ọnụ ọgụgụ zuru ezu n'ụdị eserese na tebụl.
Ọdịdị Okporo ụzọ - Nyocha nke Oke Okporo ụzọ
● Nyocha nkezi nke usoro njem oyi akwa: dịka TCP, UDP, ICMP, IGMP, ARP na ndị ọzọ nkezi nke ngwugwu na ọnụ ọgụgụ okporo ụzọ na ngosipụta eserese achịcha
● Nyocha nkezi okporo ụzọ IP: dịka ọnụọgụgụ okporo ụzọ nke adreesị IP dị iche iche mepụtara, ọkwa okporo ụzọ dabere na IP TOP N na ngosipụta chaatị mmanya
● Nyocha nkezi ngwa DPI: dịka HTTP, QQ, FTP na usoro ngwa ndị ọzọ, ọnụọgụ nke bytes, nkesa ọnụọgụgụ okporo ụzọ nkwukọrịta na ngosipụta chaatị achịcha
Nlele Okporo ụzọ - Nyocha Oge Okporo ụzọ
Dịka ọnọdụ nzacha dị iche iche si dị, dịka IP, ọdụ ụgbọ mmiri, usoro nchekwa oyi akwa njem, usoro nchekwa oyi akwa ngwa na ọdịnaya ndị ọzọ akọwapụtara, enwere ike inyocha ma gosipụta data okporo ụzọ njide ebumnuche dị ugbu a dabere na oge nlele, enwere ike ịjụ nha na usoro okporo ụzọ site na ịkwaga ihe mmịfe oge na nhazi ọnụọgụgụ, izi ezi ahụ nwekwara ike iru ruo 1 millisecond.
Nlele Okporo ụzọ - Nyocha Tebụl Mmiri
Dịka ọnọdụ nzacha dị iche iche si dị, dịka ID flow, IP, ọdụ ụgbọ mmiri, protocol transport layer, protocol ngwa oyi akwa na ọdịnaya ndị ọzọ akọwapụtara, enwere ike inyocha ma gụọ data okporo ụzọ e jidere ugbu a dabere na ụdị flow session, ya bụ, ngosipụta zuru ezu nke ozi flow session, gụnyere ozi flow ise nke flow ọ bụla, ụdị ngwa ebu, ọnụọgụ na bytes nke nnyefe ngwugwu, na flow data metụtara ya. Ma nwee ngosipụta ọkwa dabere na ozi dị n'elu. Dabere na ozi a, ndị ọrụ nwere ike ịhọrọ ụdị okporo ụzọ ha na-echebara echiche ngwa ngwa, nke na-enye ntọala kacha mma maka ndị ọrụ iji mepụta amụma mbugharị okporo ụzọ.
Nlele Okporo ụzọ - Nyocha nke ngwugwu
Dabere na njirisi nzacha dị iche iche, dịka NJ ngwugwu, IP, ọdụ ụgbọ mmiri, usoro nchekwa oyi akwa njem, usoro nchekwa oyi akwa ngwa na ọdịnaya ndị ọzọ akọwapụtara, enwere ike inye data okporo ụzọ ebumnuche ejidere na ngosipụta nyocha ọkwa ngwugwu ọ bụla, gụnyere:
● Nyocha nke oge nchịkọta ngwugwu
● Nyocha ozi dị mkpa na ngwugwu, dịka sip, dip, smac, dmac, protocol, ọkọlọtọ, TTL, ogologo ozi, ihe omume dị mkpa
● Nyocha na ngosipụta nke ụzọ nnyefe ngwugwu, dịka: oge nnyefe, igbu oge mbufe, ụdị mbufe (njem, mgbanwe, firewall, nhazi ibu, NAT)
● Nchịkọta ozi ngwugwu na ngosipụta nhazi zuru ezu
● Nyocha nke ọnụọgụgụ nke nchịkọta ngwugwu ugboro ugboro
Nlele Okporo ụzọ - Nyocha Mmejọ Kpọmkwem
Modulu nyocha mmejọ nke ọrụ nchọpụta visibiliti okporo ụzọ nwere ike inye ọnọdụ nyocha mmejọ anya dị iche iche maka data okporo ụzọ ebudatara, gụnyere:
● Nchịkọta ihe na-adịghị mma, dịka: nsonaazụ nyocha ọrụ netwọk, nsonaazụ nyocha ihe omume na-adịghị mma, usoro netwọk dabere na nyocha omume (dịka ọnụọgụ ngwaọrụ nhazi, ngwaọrụ NAT, ngwaọrụ firewall, ngwaọrụ nhazi ibu nke nnyefe ngwugwu gafere)
● Nyocha ọdịda na ọkwa tebụl mmiri, dị ka ụdị ihe omume na-adịghị mma (njikọ a jụrụ/njikọ anaghị anabata/njikọ enweghị nnyefe data/njikọ ọkara mepere emepe/ụzọ nnọkọ enweghị ike iru, wdg.), ● Nyocha ọdịda ọkwa ngwugwu, dị ka: ụdị ihe omume na-adịghị mma (njehie packet checksum /TTL 0/ njehie na-enweghị ike iru /emehie checksum FCS, wdg.), nkọwa zuru ezu nke ozi na-adịghị mma, na nkọwa nke usoro data metụtara ya
● Nyocha nsogbu nchekwa, dịka: ụdị ihe omume na-adịghị mma (mwakpo DDOS/mgbochi firewall /mwakpo ARP/mwakpo UDP/mmiri SYN, wdg), nkọwa zuru ezu nke ozi na-adịghị mma, yana nkọwa nke usoro data metụtara ya.
● Nyocha nsogbu netwọk, dịka: ụdị ihe omume na-adịghị mma (mgbanwe loop/routing loop/ụzọ a na-apụghị iru/nkwụsị njikọ, wdg), nkọwa zuru ezu nke ozi na-adịghị mma, na nkọwa nke usoro data metụtara ya
5-Mylinking™ Network Packet Broker tinyere nkọwapụta Inline Bypass Switch
| ML-NPB-M2000 Onye na-ere ahịa Mylinking™ Network Packet Broker tinyere Inline Bypass Switch Nkọwapụta Ọrụ | ||||
| Njikọ netwọkụ | Oghere modulu | Oghere modulu BYPASS ma ọ bụ MONITOR anọ | ||
| Ọnụọgụ nke njikọ dị n'ime ahịrị | Na-akwado nchekwa maka njikọ anya ruru 16 1G/10G ma ọ bụ njikọ anya 8 40G/100G. | |||
| Nyochaa nlekota anya interface | Na-akwado ọnụọgụgụ kachasị elu nke 64*1G/10GE nlekota ma ọ bụ ọnụọgụgụ nlekota 16*40G/100G. | |||
| Njikọ njikwa nke na-abụghị nke band | Ọdụ Ethernet 1 * 10/100/1000M; | |||
| Ụdị mbugharị | Ntinye n'ime ahịrị | Nkwado | ||
| Ntinye SPAN | Nkwado | |||
| Ọrụ Sistemụ | Ụdị ntinye n'ime ahịrị | Nchedo njikọta mmiri kpọmkwem | Nkwado | |
| Nchedo usoro usoro niile nke eruba | Nkwado | |||
| Nhazi ibu | Nkwado | |||
| Nchọpụta obi | Nkwado | |||
| Mgbanwe BYPASS | Nkwado | |||
| Mgbochi okporo ụzọ | Nkwado | |||
| Ngosipụta okporo ụzọ | Nkwado | |||
| SSL Proxy | Nkwado | |||
| Ụdị ntinye SPAN | Nhazi okporo ụzọ bụ isi | Mmegharị/nchịkọta/nkesa okporo ụzọ | Nkwado | |
| Nhazi ibu | Nkwado | |||
| Nzacha okporo ụzọ dabere na njirimara IP/protocol/ọdụ ụgbọ mmiri 5-tuple | Nkwado | |||
| Mkpado/mgbanwe/nhichapụ VLAN | Nkwado | |||
| Ndekọ oge | Nkwado | |||
| Iwepụ ihe mkpuchi ọwara | Nkwado | |||
| Ịchacha Data | Nkwado | |||
| Nchọpụta Usoro Ọwara Ọwara | Nkwado | |||
| Ibufe ngwugwu dị mkpa | Nkwado | |||
| Ịdọ aka ná ntị na-adịghị mma | Nkwado | |||
| Nchekwa ọkụ dị ọkụ nke interface | Nkwado | |||
| Nha obere mgbawa | Nkwado | |||
| Nchedo oscillation nke interface | Nkwado | |||
| Mmepụta Nkwụnye Ọwara | Nkwado | |||
| Nkwụsị ngwugwu ọwara | Nkwado | |||
| Nhazi okporo ụzọ dị elu | Gbaa SSL Decryption | Nkwado | ||
| Ntinye data | Nkwado | |||
| Ikpuchi data | Nkwado | |||
| Nchọpụta usoro nke ngwa oyi akwa | Nkwado | |||
| Nhazi nke aka gị | Nkwado | |||
| Nhazi usoro mmiri | Nkwado | |||
| Ndakọrịta okwu isi | Nkwado | |||
| Iwepụ ihe mkpuchi ọwara | Nkwado | |||
| Ibudata njikọ ogologo oge | Nkwado | |||
| Nleba anya nke akụkụ mmiri na-asọ asọ | Nkwado | |||
| Nchọpụta na nlekota | Nlekota oge n'ezie | Nkwado | ||
| Ajụjụ gbasara okporo ụzọ akụkọ ihe mere eme | Nkwado | |||
| Njide okporo ụzọ | Nkwado | |||
| Nchọpụta anya okporo ụzọ | Nnyocha Dị Mkpa | Na-akwado ngosipụta ọnụọgụgụ nchịkọta dabere na ozi ndị bụ isi dịka ọnụọgụgụ ngwugwu, nkesa ụdị ngwugwu, ọnụọgụ njikọ nnọkọ, na nkesa usoro ngwugwu. | ||
| Nyocha miri emi nke DPI | Ọ na-akwado nyocha nke oke nke usoro nchekwa data njem, oke nke unicast, mgbasa ozi na multicast, oke nke okporo ụzọ IP, na oke nke ngwa DPI. Ọ na-akwado nyocha na ngosipụta nke ọdịnaya data dabere na oge nlele na olu nke data. Ọ na-akwado nyocha data na ọnụ ọgụgụ dabere na iyi nnọkọ. | |||
| Nyocha Mmejọ Kpọmkwem | Na-akwado nyocha na nhazi nsogbu site na iji data okporo ụzọ site n'ọtụtụ ụzọ, gụnyere: Nyocha omume nnyefe ngwugwu, nyocha nsogbu ọkwa iyi data, nyocha nsogbu ọkwa ngwugwu data, nyocha nsogbu metụtara nchekwa, na nyocha nsogbu metụtara netwọk. | |||
| Ike nhazi | 2.4Tbps | |||
| Jikwaa | Njikwa netwọkụ CONSOLE | Nkwado | ||
| Njikwa netwọk IP/WEB | Nkwado | |||
| Njikwa netwọk SNMP | Nkwado | |||
| Njikwa netwọk TELNET/SSH | Nkwado | |||
| Usoro SYSLOG | Nkwado | |||
| Nyocha ikike etiti RADIUS ma ọ bụ TADACS+ | Nkwado | |||
| Ọrụ nyocha onye ọrụ | Nyocha aha njirimara na paswọọdụ | |||
| Eletriki | Voltaji ọkọnọ ike enyere ọkwa | AC-220V/DC-48V [Nhọrọ] | ||
| Ugboro ike enyere ọkwa | AC-50HZ | |||
| Ntinye dị ugbu a enyere ọkwa | AC-3A / DC-10A | |||
| Ike ọrụ enyere ọkwa | Oke kachasị: 300W | |||
| Gburugburu Ebe Obibi | Okpomọkụ ọrụ | 0-50℃ | ||
| Okpomọkụ nchekwa | -20-70℃ | |||
| Iru mmiri ọrụ | 10%-95%, anaghị agbakọta | |||
| Nhazi Onye Ọrụ | Nhazi njikwa | Njikọta RS232, 115200, 8, N, 1 | ||
| Nyocha paswọọdụ | Snkwado | |||
| Nha ebe a na-adọba ụgbọala | Oghere ebe a na-adọba ụgbọala (U) | 2U 444mm*88mm*670mm | ||
6-Mylinking™ Network Packet Broker tinyere Ngwa Inline Bypass Switch
6.1IheRaha nkeInline SnchebeEngwa ọrụ (IPS / FW)
Ihe ndị a bụ ụdị IPS (Sistemụ Mgbochi Mbugharị), ụdị FW (Firewall), a na-etinye IPS / FW n'usoro na akụrụngwa netwọk (rawụta, swiitị, wdg) n'etiti okporo ụzọ ahụ site na mmejuputa nyocha nchekwa, dịka amụma nchekwa kwekọrọ si dị iji chọpụta ntọhapụ ma ọ bụ igbochi okporo ụzọ kwekọrọ, iji nweta mmetụta nke nchekwa nchekwa.
Ihe ndị a bụ ụdị IPS (Sistemụ Mgbochi Mbugharị), ụdị FW (Firewall), a na-etinye IPS / FW n'usoro na akụrụngwa netwọk (rawụta, swiitị, wdg) n'etiti okporo ụzọ ahụ site na mmejuputa nyocha nchekwa, dịka amụma nchekwa kwekọrọ si dị iji chọpụta ntọhapụ ma ọ bụ igbochi okporo ụzọ kwekọrọ, iji nweta mmetụta nke nchekwa nchekwa.
6.2 Nchedo Ngwaọrụ Usoro Njikọ Inline
A na-etinye Mylinking™ Network Packet Broker tinyere Inline Bypass Switch n'usoro n'etiti ngwaọrụ netwọk (rawụta, swiitị, wdg), na mgbasa data n'etiti ngwaọrụ netwọk anaghịzi ebute ozugbo na IPS / FW, "Smart Inline Bypass Switch" gaa na IPS / FW, mgbe IPS / FW n'ihi oke ibu, ọdịda, mmelite ngwanrọ, mmelite amụma na ọnọdụ ndị ọzọ nke ọdịda, "Smart Inline Bypass Switch" site na nchọpụta ozi obi ọgụgụ isi Ọrụ nke nchọpụta oge, wee si otú a wụfuo ngwaọrụ ahụ mebiri emebi, na-enweghị ịkwụsị ntọala nke netwọk ahụ, ngwa netwọk ngwa ngwa ejikọtara ozugbo iji chebe netwọk nkwukọrịta nkịtị; mgbe mgbake ọdịda IPS / FW gasịrị, kamakwa site na ngwugwu obi ọgụgụ isi Nchọpụta nke nchọpụta oge nke ọrụ ahụ, njikọ mbụ iji weghachite nchekwa nke nyocha nchekwa netwọkụ ụlọ ọrụ.
Mylinking™ Network Packet Broker tinyere Inline Bypass Switch nwere ọrụ nchọpụta ozi obi nwere ọgụgụ isi, onye ọrụ nwere ike ịhazi oge obi na ọnụọgụ kachasị nke nnwale, site na ozi obi omenala na IPS / FW maka nnwale ahụike, dịka izipu ozi nlele obi na ọdụ ụgbọ mmiri IPS / FW dị elu / dị ala, wee nata site na ọdụ ụgbọ mmiri IPS / FW dị elu / dị ala, ma kpebie ma IPS / FW na-arụ ọrụ nke ọma site na izipu na ịnweta ozi obi.
6.3 Usoro Usoro Atumatu "SpecFlow"NchekwaNchedo Usoro
Mgbe ngwaọrụ netwọk nchekwa chọrọ naanị ijikwa okporo ụzọ kpọmkwem na nchekwa nchekwa usoro, site na Mylinking™ Network Packet Broker tinyere ọrụ nhazi Inline Bypass Switch traffic kwa nhazi, site na amụma nyocha okporo ụzọ iji jikọọ ngwaọrụ nchekwa inline "Concerned" a na-ezigaghachi okporo ụzọ ozugbo na njikọ netwọk, "ngalaba okporo ụzọ echebara echiche" na-abanye na ngwaọrụ nchekwa in-line iji mee nyocha nchekwa. Nke a agaghị anọgide na-eji ọrụ nchọpụta nchekwa nkịtị nke ngwaọrụ nchekwa ahụ, kamakwa ọ ga-ebelata usoro na-adịghị mma nke ngwaọrụ nchekwa iji merie nrụgide; n'otu oge ahụ, "Smart Inline Bypass Switch" nwere ike ịchọpụta ọnọdụ ọrụ nke ngwaọrụ nchekwa n'oge. Ngwaọrụ nchekwa ahụ na-agafe okporo ụzọ data ozugbo iji zere mmebi nke ọrụ netwọk.
Onye na-ere ahịa Mylinking™ Network Packet Broker tinyere Inline Bypass Switch nwere ike ịchọpụta okporo ụzọ dabere na njirimara isi ihe dị n'ime oyi akwa L2-L4, dịka akara VLAN, adreesị MAC isi mmalite / ebe a na-aga, adreesị IP isi mmalite, ụdị ngwugwu IP, ọdụ ụgbọ mmiri protocol transport, akara igodo isi ihe dị na protocol, na ndị ọzọ. Enwere ike ịkọwa ọtụtụ njikọta mgbanwe dị iche iche nke ọnọdụ dakọtara n'ụzọ dị mfe iji kọwaa ụdị okporo ụzọ kpọmkwem nke na-amasị ngwaọrụ nchekwa ụfọdụ ma enwere ike iji ya mee ihe nke ukwuu maka itinye ngwaọrụ nyocha nchekwa pụrụ iche (RDP, SSH, nyocha nchekwa data, wdg).
6.4Lnhazi oadNchekwa InlineNchedo Usoro
A na-etinye Mylinking™ Network Packet Broker tinyere Inline Bypass Switch n'usoro n'etiti ngwaọrụ netwọk (rawụta, swiitị, wdg). Mgbe otu arụmọrụ nhazi IPS / FW ezughi oke iji nagide okporo ụzọ kacha elu nke njikọ netwọk, ọrụ nhazi ibu okporo ụzọ nke onye nchebe, "njikọta" nke ọtụtụ okporo ụzọ njikọ netwọk nhazi IPS / FW, nwere ike ibelata nrụgide nhazi otu IPS / FW nke ọma, melite arụmọrụ nhazi zuru oke iji zute oke bandwit nke gburugburu ebe a na-etinye ihe.
Mylinking™ Network Packet Broker tinyere Inline Bypass Switch nwere ọrụ nhazi ibu dị ike, dịka mkpado VLAN etiti, ozi MAC, ozi IP, nọmba ọdụ ụgbọ mmiri, protocol na ozi ndị ọzọ gbasara nkesa nhazi ibu nke okporo ụzọ Hash iji hụ na IPS / FW ọ bụla natara usoro data.
6.5Ọtụtụ usoroNgwa dị n'ime Fdị alaTmkpaliPntụgharị(Mgbanwe)Ahụ́ anụ ahụNjikọ Serial naEzi ucheNjikọ Parallel)
N'ụfọdụ njikọ dị mkpa (dịka ebe ntanetị, njikọ mgbanwe mpaghara sava), ọnọdụ na-abụkarị n'ihi mkpa nke atụmatụ nchekwa na ntinye nke ọtụtụ ngwa nnwale nchekwa n'ịntanetị (dịka firewall, ngwa mwakpo mgbochi DDOS, firewall ngwa WEB, ngwa mgbochi intrusion, wdg), ọtụtụ ngwa nchọpụta nchekwa n'otu oge n'usoro na njikọ ahụ iji mee ka njikọ nke otu isi ihe dara ada dịkwuo elu, na-ebelata ntụkwasị obi zuru oke nke netwọk ahụ. Na ntinye akụrụngwa nchekwa n'ịntanetị nke a kpọtụrụ aha n'elu, mmelite akụrụngwa, nnọchi akụrụngwa na ọrụ ndị ọzọ, ga-eme ka netwọk ahụ kwụsị ọrụ ogologo oge na nnukwu ọrụ ịbelata ọrụ iji mezue mmejuputa nke ọrụ ndị dị otú ahụ nke ọma.
Site n'iji Mylinking™ Network Packet Broker tinyere Inline Bypass Switch n'ụzọ jikọtara ọnụ, enwere ike ịgbanwe ụdị ntinye nke ọtụtụ ngwaọrụ nchekwa ejikọtara na usoro na otu njikọ ahụ site na "Physical Serial Connection Mode" gaa na "Physical Parallel Connection Mode mana Logical Serial Connection". Nke a na-ebelata isi mmalite nke otu isi ihe na-ada ada na njikọ usoro ahụ ma na-eme ka ntụkwasị obi nke njikọ ahụ ka mma. N'otu oge ahụ, Mylinking™ Network Packet Broker tinyere Inline Bypass Switch nwere ike iduzi okporo ụzọ njikọ ahụ mgbe achọrọ ya, na-enweta otu mmetụta nhazi nchekwa okporo ụzọ dị ka ụdị njikọ usoro mbụ.
Ihe karịrị otu ngwaọrụ Inline Security n'otu oge n'usoro eserese nhazi usoro:
Mylinking™ Network Packet Broker tinyere Inline Bypass Switch Deployment Chapter:
(Gbanwee njikọ Pysical Serial ka ọ bụrụ njikọ Logical Parallel)
6.6Dabere naDAmụma mmekọrịta nkeTRaffi InlineSnchebeDntuli akaPntụgharị
Mylinking™ Network Packet Broker tinyere Inline Bypass Switch, ihe ọzọ dị elu ngwa dabere na amụma siri ike nke ngwa nchekwa nchọpụta nchekwa traction traffic, ntinye nke ụzọ ahụ dịka egosiri n'okpuru:
Were ngwa nnwale nchekwa "Nchedo na nchọpụta mwakpo mgbochi DDoS", dịka ọmụmaatụ, site na ntinye ihu nke "Smart Bypass Switch" wee jikọọ na ngwa nchedo mgbochi DDOS wee jikọọ na "Smart Bypass Switch", na "Smart Bypass Switch" nkịtị na oke ọsọ okporo ụzọ zuru oke nke mbugharị ọsọ waya n'otu oge ahụ na-apụta na "ngwa nchedo mwakpo mgbochi DDOS", ozugbo achọpụtara maka IP sava (ma ọ bụ akụkụ netwọk IP) mgbe mwakpo ahụ gasịrị, "ngwa nchedo mwakpo mgbochi DDOS" ga-emepụta iwu dakọtara okporo ụzọ ebumnuche ma ziga ha na "Smart Bypass Switch" site na interface nnyefe amụma ike. "Switch Bypass" nwere ike imelite "mmegharị traffic traffic dynamic" mgbe ọ natara iwu amụma ike Iwu ọdọ mmiri "na ozugbo" iwu kụrụ okporo ụzọ sava mwakpo "traction na" nchekwa na nchọpụta mwakpo mgbochi DDoS "ngwa maka nhazi, ka ọ dị irè mgbe mwakpo ahụ gasịrị wee gbanye ọzọ na netwọk ahụ.
Usoro ngwa dabere na "Smart Bypass Switch" dị mfe itinye n'ọrụ karịa usoro BGP ọdịnala ma ọ bụ usoro traction traffic ndị ọzọ, gburugburu ebe obibi anaghị adabere na netwọk ahụ ma ntụkwasị obi ya dị elu.
"Smart Bypass Switch" nwere njirimara ndị a iji kwado nchedo nchọpụta nchekwa amụma ike:
1. "Smart Bypass Switch" iji nye ihe ndị ọzọ na-abụghị iwu dabere na WEBSERIVCE interface, njikọta dị mfe na ngwaọrụ nchekwa ndị ọzọ.
2. "Switch Smart Bypass" dabere na ngwaike dị ọcha nke ASIC chip na-ebufe ruo ngwugwu ọsọ waya 100Gbps na-egbochi mbugharị swiichi, yana "ọbá akwụkwọ iwu traffic dynamic traction" n'agbanyeghị ọnụọgụgụ ahụ.
3. Ọrụ BYPASS ọkachamara nke "Smart Bypass Switch", ọbụlagodi na onye nchebe ahụ dara ada, nwekwara ike ịgafe njikọ usoro mbụ ozugbo, anaghị emetụta njikọ mbụ nke nkwukọrịta nkịtị.
6.7Ngosipụta okporo ụzọ Inline Serialmaka Nchekwa Ndị Na-abụghị Band (Inline + SPAN)
A na-etinyekarị Mylinking™ Network Packet Broker tinyere Inline Bypass Switch na netwọk IT nke onye ahịa ma ọ bụ netwọk ikpo okwu igwe ojii iji nye nchekwa dị n'ịntanetị maka ngwaọrụ WAF/IPS na njikọ mbụ ahụ. Ndị ọrụ nwekwara ike ịnwe ihe ndị ọzọ achọrọ maka nnwale, nkwenye, ma ọ bụ itinye ngwaọrụ nlekota nke gafere, nke chọrọ inweta data okporo ụzọ na njikọ a.
Ya mere, site na iji ọrụ mirroring traffic nke Mylinking™ Network Packet Broker tinyere Inline Bypass Switch, enwere ike iṅomi okporo ụzọ nke njikọ usoro inline site na ọdụ ụgbọ mmiri nlekota, dịka egosiri na eserese a:
Ihe osise dị n'okpuru na-egosi ọnọdụ ngwa sara mbara nke okporo ụzọ njikọ inline na okporo ụzọ ọdụ ụgbọ mmiri enyo switch. Nke a na-enye ohere maka nchekwa okporo ụzọ njikọ inline na-enweghị mmetụta site na okporo ụzọ ọdụ ụgbọ mmiri enyo switch. Sistemụ nyocha IDS nwere ike inweta okporo ụzọ njikọ inline na okporo ụzọ ọdụ ụgbọ mmiri enyo switch n'otu oge. E gosiri usoro ntinye na eserese dị n'okpuru:
6.8Mwepụ nke Data/NgwugwuNgwa
Dịka egosiri na nhazi ntinye ngwa dị n'elu, iji hụ na nchịkọta data mbụ ahụ ziri ezi n'akụkụ njikọ ahụ dum, enwere ike ịnakọta ụfọdụ ngwugwu data yiri ya ọtụtụ ugboro n'ime otu ụzọ. Nke a na-eduga na mmụba nke mkpu ụgha na nnyefe ọzọ na sistemụ azụ, na-eme ka ọrụ sistemụ nyocha dịkwuo elu ma na-emetụta izi ezi na ịdị irè nke nyocha ahụ. Dabere na ngwọta ahụ, buru ụzọ, ngwugwu data abụọ nke ewepụtara na nodes njide dị iche iche. Naanị otu ngwugwu data ka a na-eziga na sistemụ nyocha arụmọrụ netwọk NPM azụ na sistemụ nyocha arụmọrụ ngwa APM, si otú a na-azọpụta arụmọrụ nke sistemụ nyocha ma na-eme ka arụmọrụ na izi ezi nke nyocha dịkwuo mma.
6.9Data/NgwugwuMkpado VLANna-emeNgwa
N'ebe netwọk egosiri na eserese dị n'elu, a na-eji ngwọta ahụ akara data sitere na ngwaọrụ netwọk dị iche iche na njikọ njikọ. Mgbe okporo ụzọ ma ọ bụ ngwugwu data na-adịghị mma mere na netwọk ahụ, akụrụngwa nyocha azụ nwere ike ịchọta isi iyi nke data na-adịghị mma ngwa ngwa na nke ziri ezi site na ịchọta azụ dabere na akara data.
6.10 Okporo ụzọ netwọkUsoro Ihe Omume Ejikọtara ỌnụNgwa
N'ebe netwọk egosiri na eserese dị n'elu, a na-etinye ọtụtụ data njikọ isi mmalite 10GE, 25GE, 40GE na 100GE nke ọma na Mylinking™ Network Packet Broker tinyere Inline Bypass Switch site na iji kewaa optical ma ọ bụ enyo ọdụ ụgbọ mmiri. Mgbe ahụ, a na-eji nzacha na nkewa okporo ụzọ ewepụta okporo ụzọ data ọrụ dị iche iche na ngwaọrụ nlekota netwọk na sistemụ nchekwa dị iche iche. Mgbe nsogbu ngwugwu netwọk ma ọ bụ mgbanwe okporo ụzọ na-adịghị mma chọrọ ntinye aka, enwere ike ịme njide ngwugwu na nyocha nke ngwugwu data mbụ ozugbo iji nyere ndị ọrụ aka nyochaa ngwa ngwa ma chọta mmejọ ahụ.
6.11NetwọkNyocha nke Data Okporo ụzọNgwa
Ọ nwere ike igosi data ọ bụla achọpụtara ma jide n'ụzọ dị iche iche na nke nwere ọtụtụ echiche site na njikọ eserese na ederede dị mfe iji, gụnyere nhazi nhazi okporo ụzọ, nkesa usoro ngwa, nkesa okporo ụzọ nke nodes netwọk niile, ụzọ nnyefe data, nchọpụta ihe omume na-adịghị mma, ebe kpọmkwem nke mmejọ ihe netwọk/njikọ, ọnọdụ mmekọrịta ozi, usoro mmepe okporo ụzọ na akụkụ ndị ọzọ maka nlekota na nyocha, iji guzobe ikpo okwu nchịkọta data zuru oke, nke a na-ahụ anya na nke a na-achịkwa maka netwọk ụlọ ọrụ.
Ngwaahịa dị iche iche
-
Mylinking™ Network Packet Broker (NPB) ML-NPB-5690
-
Mylinking™ Netwọk Packet Broker (NPB) ML-NPB-5410+
-
Mylinking™ Netwọk Packet Broker(NPB) ML-NPB-54...
-
Mylinking™ Netwọk Packet Broker (NPB) ML-NPB-3440L
-
Mylinking™ Netwọk Packet Broker (NPB) ML-NPB-2410
-
Mylinking™ Netwọk Packet Broker (NPB) ML-NPB-4810L
