N'oge a na-enwe njikọ dị elu na mgbanwe dijitalụ, akụrụngwa netwọkụ ụlọ ọrụ na-eche mmụba a na-ahụtụbeghị mbụ na iyi egwu cyber—site na mwakpo DDoS na mwakpo ọjọọ ruo na mwepụ data na adịghị ike okporo ụzọ ezoro ezo. Iji chebe ọrụ azụmaahịa dị mkpa, òtù dị iche iche na-etinye usoro nchekwa Inline na isi netwọkụ, gụnyere firewalls (FW), sistemụ mgbochi intrusion (IPS), ikpo okwu mgbochi DDoS, firewalls ngwa weebụ (WAF), na ngwaọrụ njikwa ihe iyi egwu dị n'otu (UTM). N'otu oge ahụ, nlekota netwọk aghọwo ihe a na-apụghị ịgbagha agbagha maka ịnọgide na-ahụ anya okporo ụzọ, idozi nsogbu, na ijide n'aka na nrubeisi. Agbanyeghị, ntinye ọdịnala nke ngwọta Network Packet Broker (NPB) na Inline Bypass Switch na-emepụta isi ihe mgbu ọrụ dị mkpa: otu isi ihe nke ọdịda (SPOF) na agbụ nchekwa inline, nkwụsị netwọk na-emeghị atụmatụ n'oge mmezi/mmelite ngwaọrụ, nhazi okporo ụzọ na-adịghị arụ ọrụ nke ọma, enweghị ike inyocha okporo ụzọ SSL/TLS ezoro ezo, na nsogbu arụmọrụ na gburugburu 10/40/100GE dị elu.
Mylinking na-edozi nsogbu ndị a n'ofe ụlọ ọrụ na ML-NPB-M2000—ngwaọrụ agbadoro agbagọ nke na-ejikọta ikike nhazi okporo ụzọ nwere ọgụgụ isi nke Network Packet Broker (NPB) ọgbọ na-abịa yana ndidi na nchedo njehie na-enweghị nkwụsị nke Inline Bypass Switch dị elu, Network Bypass Tap, na Smart Bypass Switch. Ejiri ya mee ihe maka ntụkwasị obi na arụmọrụ ọkwa ụlọ ọrụ, ML-NPB-M2000 na-enye ikike nhazi zuru oke nke 2.4Tbps, imewe ọkụ-swappable modul, modulu 810G SFP+ / 4100GE Bypass, modulu 1610GE SFP+ / 4100GE Monitor, na atụmatụ nhazi okporo ụzọ dị elu gụnyere SSL proxy/decryption, deduplication okporo ụzọ, nyocha ngwugwu miri emi nke DPI, na mbufe amụma ike. Dịka Inline Bypass Tap na NPB niile dị n'otu, ọ na-akọwagharị Nchebe na nlekota Netwọk site na ijikọ ntinye nchekwa n'ime ahịrị anụ ahụ na nke ezi uche dị na ya, na-ewepụ SPOFs, na-ahụ na oge ọrụ netwọk efu adịghị, na-emepe visibiliti okporo ụzọ n'oge a maka ụlọ ọrụ ọgbara ọhụrụ, ebe data, na nyiwe igwe ojii.
Ngwuputa miri emi teknụzụ a zuru oke na-enyocha teknụzụ isi nke ML-NPB-M2000, mgbanwe modular, ikike nhazi okporo ụzọ nwere ọgụgụ isi, nkọwapụta teknụzụ, ọnọdụ ngwa n'ezie, na uru asọmpi - na-etinye ya dị ka ngwọta zuru oke maka ụlọ ọrụ Network Packet Broker (NPB), Inline Bypass Switch, na mkpa nchekwa/nlekota netwọk.
1. Nchekwa na Nlekota Netwọk Omenala: Isi Ihe Mgbu Ụlọ Ọrụ A Na-edozibeghị
Tupu anyị eleba anya n'ike ọhụrụ nke ML-NPB-M2000, ọ dị mkpa ịtụle oke nke nnyefe Netwọk Nchekwa na Nlekota Netwọk ọdịnala - mmejọ ndị e wuru na Netwọk Packet Broker (NPB) na Inline Bypass Switch iji dozie. Ihe mgbu ndị a na-akpaghasị òtù dị iche iche, na-emetụta ọganihu azụmaahịa, arụmọrụ ọrụ, na nloghachi na itinye ego (ROI) nke akụrụngwa nchekwa na nlekota, ha na-elekwasị anya na njikọ dị n'etiti NPB na ngwọta inline bypass:
1.1 Isi Ihe Ndị Na-adaba n'Otu (SPOF) n'ime Agbụ Nchekwa Inline
Ntinye ngwaọrụ Inline Security (FW/IPS/Anti-DDoS) n'usoro na-emepụta SPOF ndị na-agbawa agbawa: otu nsogbu ngwaọrụ (ibufe oke ibu, mgbawa, nrụrụ aka firmware) ma ọ bụ mmezi oge niile na-akwụsị njikọ netwọk dum, na-eduga na oge nkwụsị na-efu oke. Ngwọta Inline Bypass Tap ọdịnala enweghị ọgụgụ isi iji jikọta ya na ngwaọrụ nlekota okporo ụzọ, na-emepụta nchebe na visibiliti.
1.2 Mmebi nke netwọkụ a na-apụghị izere ezere n'oge mmezi na nkwalite
Imelite firmware, dochie ngwaike, ma ọ bụ imelite iwu nchekwa maka ngwaọrụ nchekwa inline chọrọ nkwụsịtụ netwọk aka na ihe mgbochi nke na-agafe agafe. Mmechi ndị a a haziri ahazi na-emebi ngwa azụmaahịa dị mkpa ma na-emebi ntụkwasị obi netwọk - nkwekọrịta a na-anabataghị na gburugburu ebe azụmaahịa na ebe nchekwa data awa 24/7.
1.3 Nhazi Okporo ụzọ na Oghere A Na-anaghị Ahụ Anya nke Ọma
Ngwọta nke Standalone Network Packet Broker (NPB) anaghị enwe nchebe siri ike n'ime ahịrị, ebe ngwaọrụ Smart Bypass Switch ọdịnala na-enye obere ikike nhazi okporo ụzọ (dịka ọmụmaatụ, mmegharị/nzacha bụ isi). Nke a na-ebute nkesa okporo ụzọ na-adịghị mma, ijide ngwugwu na-enweghị isi, ntụpọ kpuru ìsì na nlekota okporo ụzọ ezoro ezo, na enweghị ike ịhazi nyocha okporo ụzọ ka ọ dabara na ihe achọrọ maka ngwaọrụ nchekwa - imefusị akụrụngwa nhazi na ibelata izi ezi nlekota.
1.4 Mmachi Nleba Anya Okporo ụzọ Ezoro Ezo
Nzochi ozi SSL/TLS bụ ọkọlọtọ maka nnyefe data echekwara, mana ọ na-emepụta ebe dị oke mkpa maka Nlekota netwọkụ na ngwaọrụ Nchekwa Inline. Ngwọta ọdịnala enweghị ikike proxy/decryption SSL nkeonwe, na-eme ka òtù dị iche iche ghara inwe ike inyocha okporo ụzọ ezoro ezo maka ihe omume ọjọọ na-enweghị imebi nchekwa site na njedebe ruo na njedebe.
Mbelata arụmọrụ 1.5 na gburugburu ebe dị elu nke bandwidth
Njikọ bandwidth dị elu nke 10/40/100GE na-emepụta oke okporo ụzọ nke na-akarị ngwaọrụ nchekwa/nlekọta otu. Ngwọta ndị na-anọ naanị ha enweghị ike ịhazi ibu dị ike iji kesaa okporo ụzọ n'ofe ngwaọrụ ndị a chịkọtara, na-eduga na mmụba nke oge, mfu ngwugwu, na arụmọrụ ngwa mebiri emebi.
1.6 Njikwa Mgbakwunye Ngwaọrụ Dị Mfe na Njikwa Siloed
Iji NPB dị iche, Inline Bypass Switch, na ngwaọrụ nhazi okporo ụzọ chọrọ ka waya anụ ahụ dị mgbagwoju anya, nhazi aka, na njikwa siloed. Nke a na-eme ka ọrụ ndị otu IT dịkwuo elu, na-egbu oge idozi nsogbu, ma na-emepụta enweghị nkwekọ na mmanye iwu okporo ụzọ n'ofe netwọk ahụ.
1.7 Nlele Okporo ụzọ na Mbelata Nsogbu
Ngwọta nlekota ọdịnala na-enye naanị ọnụọgụgụ okporo ụzọ dị mkpa, na-enweghị nyocha miri emi (DPI) ma ọ bụ nyocha nsogbu anya. Nke a na-eme ka òtù dị iche iche ghara ịchọpụta ngwa ngwa ihe kpatara nsogbu netwọk, mmebi nchekwa, ma ọ bụ nsogbu arụmọrụ - ịgbatị oge mkpebi na ịbawanye ihe egwu azụmaahịa.
Ihe mgbu ndị a abụghị naanị nsogbu teknụzụ; ha na-emetụta ikike otu ụlọ ọrụ nwere iji nọgide na-enwe netwọk dị nchebe, a pụrụ ịtụkwasị obi, na nke a na-ahụ anya. Mylinking ML-NPB-M2000 na-edozi nsogbu ndị a niile site n'ịjikọta ọrụ Network Packet Broker (NPB) na Inline Bypass Switch ka ọ bụrụ otu ikpo okwu nwere ọgụgụ isi, nke a na-agbanwe agbanwe, ma na-agbanwe agbanwe—na-ewepụ silos, na-emeghe ọrụ efu-oge nkwụsị, na inye nchekwa na nlekota netwọk zuru oke.
2. Mylinking ML-NPB-M2000: NPB agbakwunyere + Inline Bypass Switch – Mgbanwe Usoro na Nchekwa na Nlekota Netwọk
Mylinking ML-NPB-M2000 bụ ngwọta mbụ nke ụlọ ọrụ ahụ iji jikọta ike nhazi okporo ụzọ nke Network Packet Broker (NPB) n'enweghị nsogbu yana nnabata njehie nke Smart Bypass Switch, Network Bypass Tap, na Inline Bypass Tap. Emebere ya maka ntinye ngwa nchekwa Inline dị mfe yana nlekota netwọkụ siri ike, e mepụtara ya iji dozie isi ihe mgbu nke ntinye ọdịnala ebe ọ na-enye arụmọrụ, nhazi, na ntụkwasị obi na-enweghị nsogbu.
N'isi ya, ML-NPB-M2000 bụ ngwaọrụ rackmount nke dị sentimita iri na itoolu, nke nwere modulu 2U nke na-ejikọta nchedo nsogbu Inline Bypass Switch na nhazi okporo ụzọ NPB dị elu—gụnyere SSL proxy/decryption, deduplication traffic, DPI, nhazi ibu dị ike, na visibiliti okporo ụzọ n'oge. Ogidi nhazi ya bụ isi kwekọrọ na ihe achọrọ maka ụlọ ọrụ na ebe data kacha achọ:
○ Njikọta: Na-ejikọta NPB, Inline Bypass Switch, Network Bypass Tap, na nhazi okporo ụzọ n'ime otu ikpo okwu, na-ewepụ ntinye siloed na mgbagwoju anya ọrụ.
○ Ọrụ Enweghị Oge Nkwụsị: Nchọpụta obi dị nkọ na mgbanwe ọsọ ọsọ na-eme ka nkwukọrịta netwọk na-akwụsị akwụsị, ọbụlagodi na ngwaọrụ nchekwa inline ma ọ bụ ML-NPB-M2000 n'onwe ya nwere nsogbu.
○ Nhazi Modular: Oghere modulu anọ a na-agbanwe agbanwe na-akwado ngwakọta nke modulu Bypass na Monitor, na-eme ka nhazi omenala maka njikọ 10/40/100GE na-agbanwe agbanwe ma na-agbanwe agbanwe na mkpa netwọk na-enweghị nnọchi ngwaike zuru oke.
○ Nhazi okporo ụzọ dị elu: Native SSL proxy/decryption, DPI maka usoro ngwa 1800+, mwepụ okporo ụzọ, ikpuchi, na nhazi - na-emepe visibiliti zuru oke na okporo ụzọ ezoro ezo na nke a na-ezochighị.
○ Ụdị Nhazi Abụọ: Na-akwado ntinye Inline (serial) maka nchekwa ngwaọrụ nchekwa na ntinye SPAN (switched port analyzer) maka nlekota netwọk na-adịghị arụ ọrụ nke ọma - na-enye mgbanwe maka isi ihe netwọk niile (ọnụ ụzọ ámá ịntanetị, isi switches, ubi sava data center).
○ Ntụkwasị obi na ọkwa azụmaahịa: Ọkụ eletrik abụọ nke AC/DC, nnabata gburugburu ebe obibi nke ọkwa ụlọ ọrụ mmepụta ihe, na njikọ njikwa na-enweghị ọrụ na-eme ka ọrụ 24/7 na ebe nchekwa data siri ike na gburugburu ụlọ ọrụ.
ML-NPB-M2000 abụghị naanị Network Packet Broker (NPB) ma ọ bụ Inline Bypass Switch—ọ bụ ebe nhazi okporo ụzọ na nchekwa etiti nke na-akọwagharị otu òtù si etinye ngwọta Inline Security na Network Monitoring Solutions. Site n'ijikọta ọrụ ndị a dị mkpa, ọ na-ebelata oke ọrụ, na-ewepụ SPOFs, ma na-enye visibiliti okporo ụzọ na njikwa dị mkpa maka azụmaahịa dijitalụ nke oge a.
3. Teknụzụ Dị Elu nke Isi na Atụmatụ Nkọwapụta
Ọrụ na ntụkwasị obi nke Mylinking ML-NPB-M2000 nke ụlọ ọrụ ahụ sitere na teknụzụ nke ụlọ ọrụ nwe na nke ụlọ ọrụ gosipụtara—nke ọ bụla ka mma iji dozie nsogbu pụrụ iche nke Nchekwa Netwọk na Nlekota Netwọk na gburugburu ebe bandwidth dị elu. Teknụzụ ndị a na-eme ML-NPB-M2000 ka ọ bụrụ Network Packet Broker (NPB) na Smart Bypass Switch kachasị elu n'ahịa, na-enye ndidi maka mmejọ, ọgụgụ isi okporo ụzọ, na njikwa na-enweghị nsogbu. E mere atụmatụ niile dị mkpa ka ha rụọ ọrụ n'otu n'otu, na-ahụ na akụrụngwa netwọk dị n'otu, dị nchebe, na nke a na-ahụ anya.
3.1 Ụdị Nchedo SpecFlow™ na FullLink™
ML-NPB-M2000 nwere ụzọ nchekwa abụọ a na-ahazi maka ntinye Inline Security, nke kwekọrọ na ọtụtụ nchekwa nzukọ na mkpa nhazi okporo ụzọ:
○ Ụdị Nchedo SpecFlow™: Na-eme ka nchekwa okporo ụzọ dị iche iche dị mfe site n'ịchọpụta na ịtụgharị naanị ụdị okporo ụzọ akọwapụtara (dịka ọmụmaatụ, RDP, SSH, okporo ụzọ nchekwa data, okporo ụzọ SSL/TLS ezoro ezo) gaa na ngwaọrụ nchekwa dị n'ime site na njirimara isi oyi akwa L2-L4 (akara VLAN, adreesị MAC/IP, ọdụ ụgbọ mmiri njem). A na-ebufe okporo ụzọ na-enweghị njikọ ozugbo na njikọ netwọk, na-ebelata ibu nhazi na ngwaọrụ nchekwa ma na-ebelata oge.
○ Ụdị Nchedo FullLink™: Maka ọnọdụ ndị chọrọ nyocha nchekwa zuru oke, ụdị a na-ebuga okporo ụzọ netwọk niile site na ngwaọrụ Inline Security usoro - na-ahụ na e rubere iwu nchekwa ụlọ ọrụ isi ma na-echekwa nnabata nsogbu Inline Bypass Switch na nchekwa oge na-adịghị mma.
Ụdị abụọ a na-ejikọta nke ọma na ikike nhazi okporo ụzọ NPB nke ML-NPB-M2000, na-enye ohere ka nzacha okporo ụzọ buru ibu na mmanye iwu maka ntinye Inline na SPAN.
3.2 Nchọpụta ngwugwu obi nwere ọgụgụ isi na nke a pụrụ ịkọwa
Isi ihe dị mkpa n'ịnagide mmejọ nke ML-NPB-M2000 (ike Smart Bypass Switch bụ isi) bụ nchọpụta ngwugwu obi ya nke nwere ọgụgụ isi—teknụzụ nlekota dị nro nke na-ewepụ ntụpọ kpuru ìsì na nyocha ahụike ngwaọrụ nchekwa n'ime ahịrị. ML-NPB-M2000 na-eziga ngwugwu obi nke enwere ike ịhazi na ọdụ ụgbọ elu elu/ala nke ngwaọrụ Inline Security ejikọtara ma na-akwado nloghachi ha iji chọpụta ọnọdụ ọrụ n'oge, yana atụmatụ ndị dị mkpa gụnyere:
○ Paramita obi a na-akọwapụta nke ọma: Ndị nchịkwa nwere ike ịhazi oge nnyefe obi, ọnụọgụ nnwale kachasị elu, na ntụziaka nnyefe iji kwekọọ na njirimara latency na ntụkwasị obi nke ngwaọrụ nchekwa ha.
○ Nchọpụta nsogbu abụọ: Usoro obi Tx/Rx na-egosipụta nke ọma ụzọ nhazi okporo ụzọ zuru oke nke ngwaọrụ nchekwa inline, na-ahụ na enweghị ihe akaebe ụgha ma ọ bụ ihe na-adịghị mma na nchọpụta mmejọ.
○ Mkpọchi akpaka ozugbo: Ọ bụrụ na ngwugwu obi adaghị azụ (na-egosi ọdịda ngwaọrụ, oke ibu, ma ọ bụ nkwụsị), ML-NPB-M2000 na-agafe ngwaọrụ ahụ mebiri emebi n'ime <8ms—na-emegharị okporo ụzọ ozugbo n'etiti ngwaọrụ netwọk iji hụ na enweghị oge ọrụ netwọk.
○ Mgbake akpaka na-enweghị ntụpọ: Ozugbo ngwaọrụ nchekwa mebiri emebi malitere ịrụ ọrụ nkịtị, sistemụ nchọpụta obi na-akpali njikọghachi na usoro nchekwa ahụ nke ọma—ọ dịghị mkpa itinye aka n'aka.
○ Ụdị ngwugwu obi obi a pụrụ ịhazi: Na-akwado ngwugwu obi nke Layer 2, 3, na 4, na-agbanwe agbanwe na ngwaọrụ nchekwa dị n'ime ahịrị pụrụ iche nke na-enweghị ike ibugharị etiti Ethernet nke Layer 2 ọkọlọtọ (dịka ọmụmaatụ, IPS/FW nke ụdị akwa na-acha ọcha).
Teknụzụ a na-eme ka ML-NPB-M2000 na-arụ ọrụ dị ka onye nche nke usoro nchekwa dị n'ime, na-ewepụ SPOFs ma na-ahụ na nkwukọrịta netwọk na-aga n'ihu - ikike dị mkpa maka gburugburu ụlọ ọrụ na ebe nchekwa data awa 24/7.
3.3 Ngbanwe Ngwa Ngwa na Teknụzụ LinkSafeSwitch™
Iji kwado nchọpụta obi nwere ọgụgụ isi, ML-NPB-M2000 na-ejikọta Nchedo Mgbanwe Ngwa Ngwa na teknụzụ LinkSafeSwitch™ nke nwere ikike—ngwaọrụ ngwangwa nke na-akọwa ikike Inline Bypass Tap na Network Bypass Tap ya:
○ Nkwụsị mgbanwe nke sub-8ms: ML-NPB-M2000 na-enye nkwụsịtụ mgbanwe obere ụzọ nke na-eduga n'ahịa, na-eme ka ndị ọrụ ghara inwe mmetụta netwọk a na-ahụ anya n'oge ihe mberede.
○ Nchekwa steeti njikọ: Teknụzụ LinkSafeSwitch™ na-ahụ na ọnọdụ njikọ netwọk bụ isi anaghị agbanwe agbanwe n'oge mgbanwe bypass, na-egbochi usoro topology Layer 2/3 ka ha ghara ịgbakọ ma ọ bụ gbakọta - na-ebelata nsogbu netwọk.
○ Ọrụ mepere emepe na-ada ada: Ọ bụrụgodị na ML-NPB-M2000 n'onwe ya enweta nsogbu ngwaike ma ọ bụ ngwanrọ, ọ na-agafe oyi akwa nhazi nke ya na akpaghị aka, na-ejigide njikọ kpọmkwem n'etiti ngwaọrụ netwọk. Nke a na-ewepụ ML-NPB-M2000 dị ka SPOF nwere ike - uru dị oke mkpa karịa ngwọta Inline Bypass Switch nke na-anọghị n'otu ebe.
3.4 WebService™ Sistemụ Mgbasa/Mmegide Atumatu Na-agbanwe agbanwe
Ihe dị mkpa nke ọrụ ML-NPB-M2000's Network Packet Broker (NPB) bụ teknụzụ WebService™ Dynamic Policy Forwarding/Issue—nke na-enye ohere ijikọta oge na ngwaọrụ nchekwa Inline na nlekota nke ndị ọzọ (dịka ọmụmaatụ, ikpo okwu Anti-DDoS, sistemụ SIEM). Atụmatụ a na-agbanwe ML-NPB-M2000 ka ọ bụrụ ebe njikwa okporo ụzọ etiti, yana ikike ndị bụ isi:
○ Mmelite amụma na-agbanwe agbanwe n'oge dị adị: Ngwaọrụ nchekwa nke ndị ọzọ nwere ike izipu iwu ndị dabara na okporo ụzọ na ML-NPB-M2000 site na WebService API ọkọlọtọ, nke na-emelite ọdọ mmiri iwu ike ndọda okporo ụzọ ya ozugbo—ọ dịghị mkpa nhazi aka.
○ Ntugharị okporo ụzọ ọjọọ mgbe achọrọ yaDịka ọmụmaatụ, ọ bụrụ na ngwaọrụ Anti-DDoS achọpụta mwakpo na IP/ngalaba sava kpọmkwem, ọ na-akpali ML-NPB-M2000 ka ọ tụgharịa naanị okporo ụzọ ọjọọ gaa na ngwa Anti-DDoS maka nhicha - na-eme ka okporo ụzọ nkịtị ghara imetụta ma belata oge.
○ Ndabere netwọk dị alaN'adịghị ka ngwọta traction traction ọdịnala (dịka ọmụmaatụ, ntinye ụzọ BGP), mbugharị amụma na-agbanwe agbanwe achọghị mgbanwe ọ bụla na topology netwọk dị n'okpuru - na-eme ka ọ dịkwuo mfe itinye n'ọrụ, idobe, na ịbawanye.
○ Nzipu ọsọ waya nke ASIC na-eme ngwa ngwa: ML-NPB-M2000 na-eji nnyefe chip ASIC dị ọcha maka okporo ụzọ ọsọ waya ruru 100Gbps, na-enweghị mgbochi - ọbụlagodi mgbe a na-ahazi ọtụtụ narị iwu amụma na-agbanwe agbanwe.
3.5 SSL Proxy & Decryption - Ịkpọghe Visibiliti okporo ụzọ ezoro ezo
Otu n'ime ihe ịma aka kachasị mkpa maka nlekota netwọk na nchekwa Inline na netwọk ọgbara ọhụrụ bụ okporo ụzọ SSL/TLS ezoro ezo. ML-NPB-M2000 na-aza nke a site na iji ikike SSL Proxy na SPAN SSL Decryption - iwepụ ntụpọ okporo ụzọ ezoro ezo na-enweghị imebi nchekwa site na njedebe ruo na njedebe:
○ Proxy SSL doro anya: Na-ewepụ ihe ndị e zoro ezo na ngwugwu mbụ, na-eziga ihe ndị dị mfe na ngwaọrụ nchekwa/nlekota dị n'ime maka nyocha, wee zoo data ahụ ọzọ ma ziga ya na njikọ netwọk mbụ - na-ahụ na nnyefe data dị nchebe ebe ọ na-eme ka nyocha okporo ụzọ zuru oke.
○ Nkwado nzuzo sara mbara: Na-akwado TLS1.0, TLS1.2, na SSL3.0, dakọtara na usoro nzuzo azụmaahịa niile.
○ Nkọwapụta dabere na asambodo: Na-ebu asambodo SSL omenala maka nkọwapụta nke ụdị okporo ụzọ ụfọdụ, na-ahụ na e rubere iwu nzuzo data (dịka ọmụmaatụ, GDPR, CCPA).
○ Kpachapụ anya maka nkọwapụta SSL: Maka ntinye SPAN, na-ewepụ okporo ụzọ HTTPS ezoro ezo maka sistemụ nlekota/nnyocha azụ-na-emeghe visibiliti n'ime ihe omume ọjọọ zoro ezo na okporo ụzọ ezoro ezo.
Ike a bụ ihe na-agbanwe agbanwe maka òtù dị iche iche nke chọrọ ịhazi nnyefe data ezoro ezo echekwara na nlekota netwọkụ siri ike na nchekwa Inline.
3.6 Nhazi Ibu Dị Ike nke Ọtụtụ Njikọta
Maka gburugburu 10/40/100GE nke nwere bandwidth dị elu ebe otu ngwaọrụ Inline Security ma ọ bụ nlekota enweghị ike ijikwa okporo ụzọ kachasị elu, teknụzụ Multi-link Load Balance na Intelligent Traffic Distribution nke ML-NPB-M2000 na-enye ohere itinye ngwaọrụ n'otu ebe - imeghe nhazi ahịrị maka ikike nhazi:
○ Nkesa okporo ụzọ dabere na Hash: Na-ekesa okporo ụzọ n'ofe ngwaọrụ nchekwa/nlekọta nke a na-ejikọta ọnụ dabere na njirimara oyi akwa L2-L4 (akara VLAN, adreesị MAC/IP, nọmba ọdụ ụgbọ mmiri, ozi protocol) - na-ahụ na nnọkọ ahụ ziri ezi ma na-ezere nhazi ngwugwu.
○ Mgbanwe ibu dị ike: Nlekota ngwa ọrụ nke ngwaọrụ ọ bụla n'oge kwesịrị ekwesị, yana nhazigharị okporo ụzọ akpaka iji gbochie oke ibu ma melite ojiji akụrụngwa.
○ Nkwado maka nchịkọta njupụta dị elu: Na-eme ka a na-ahazi ngwaọrụ nchekwa dị n'ime 1610GE ma ọ bụ 8100GE, na-emezu ihe achọrọ nke netwọk isi bandwidth dị elu, ọnụ ụzọ ámá ịntanetị, na ubi sava data center.
○ Ndị otu otu ọdụ ụgbọ mmiri Dynamic: Otu ọdụ ụgbọ mmiri nhazi ibu na-agbanwe agbanwe na akpaghị aka iji jikọta mgbanwe ọnọdụ (njikọ UP/DOWN), na-ekesagharị okporo ụzọ iji hụ na nhazi na-aga n'ihu - achọghị ntinye aka.
3.7 Teknụzụ Njikwa Ime Ebe Zuru Oke
E mere ML-NPB-M2000 maka ijikwa ihe dị n'ime ya nke ọma—dị oke mkpa maka nnukwu netwọk ụlọ ọrụ, ebe data gbasaara n'ebe dị iche iche, na ikpo okwu igwe ojii. Dịka ọkachamara na Network Packet Broker (NPB) na Smart Bypass Switch, ọ na-akwado usoro na ngwaọrụ njikwa ọkọlọtọ ụlọ ọrụ zuru oke, yana njikwa ohere dabere na ọrụ (RBAC) iji hụ na nchekwa nchịkwa:
○ Njikwa eserese: HTTP/WEB GUI maka nlekota oge dị mfe nghọta, nhazi, nsogbu mmejọ, na nlele okporo ụzọ.
○ Njikwa akara iwu: TELNET/SSH CLI nwere EasyConfig (ntọala bụ isi maka ndị nchịkwa na-abụghị teknụzụ) na ụdị AdvanceConfig (ntọala teknụzụ granular maka ndị injinia netwọk).
○ Njikọta njikwa netwọkụ: SNMP V1/V2C maka ijikọ ya na sistemụ njikwa netwọkụ ụlọ ọrụ (NMS) na SYSLOG maka nchịkọta na nyocha ndekọ etiti.
○ Nkwenye nchekwa: Nyocha dabere na paswọọdụ, ikike etiti AAA, na TACACS+/RADIUS - na-eme ka naanị ndị ọrụ enyere ikike nwee ike ịnweta ma hazie ngwaọrụ ahụ.
○ Njikwa ndị na-anaghị arụ ọrụ: Njikọ njikwa RJ45 nke 1 * 10/100/1000M raara onwe ya nye na-eme ka ohere dị anya dịgide ọbụlagodi na ụgbọelu data ahụ nwere nsogbu.
○ Nhazi mpaghara: Njikọ njikwa RS232 (115200,8,N,1) maka nhazi na nchọpụta nsogbu n'ebe ahụ.
Nchịkọta njikwa zuru oke a na-ebelata ibu ọrụ dị n'ahụ ndị otu IT, na-eme ka nhazi na idozi njehie dị mfe, ma na-ahụ na mmejuputa iwu na-aga n'ihu n'ofe netwọk ahụ dum.
4. Mgbanwe Nhazi Modular - Nhazi maka Mkpa Netwọk Ọ bụla
Ihe pụrụ iche nke Mylinking ML-NPB-M2000 bụ nhazi ya nke nwere ike ịgbanwe agbanwe nke ukwuu—ihe e ji mara ya dịka Network Packet Broker (NPB) na Inline Bypass Switch. Ngwaọrụ ahụ nwere chassis a chọrọ (nwere nhọrọ ike AC/DC) na oghere modulu anọ zuru ụwa ọnụ nke na-akwado njikọta ọ bụla nke modulu Bypass na Monitor—na-enye òtù ohere ịhazi ML-NPB-M2000 ka ọ dabara na ọsọ njikọ 10/40/100GE ha kpọmkwem, nchedo Inline Security, na ihe achọrọ maka nlekota netwọkụ. Modulu niile na-akwado mgbanwe ọkụ, na-enye ohere maka mmezi na nkwalite na-enweghị oge nkwụsị netwọk—na-eme ka ụkpụrụ nhazi oge efu nke ML-NPB-M2000 sikwuo ike.
4.1 Nkọwapụta Chassis (ML-NPB-M2000)
Chassis ahụ bụ ntọala nke ML-NPB-M2000, na-enye akụrụngwa anụ ahụ, eletriki, na njikwa maka njikọta modulu. Ụdị chassis abụọ dị, dị iche naanị na ọkọnọ ike (AC/DC) iji kwekọọ na gburugburu ike ụlọ ọrụ na ebe nchekwa data dị iche iche:
| Ụdị Chassis | Nkọwapụta Nkà na ụzụ dị mkpa |
|---|---|
| ML-NPB-M2000-CHS/AC | Mkpọchi rackmount nke 2U nke dị sentimita iri na itoolu; oghere modulu anọ a na-agbanwe ọkụ; 1Njikwa RS232, 110/100/1000M RJ45 mgmt; ike AC-220V abụọ; oke oriri ike 300W; akụkụ 444mm88mm670mm |
| ML-NPB-M2000-CHS/DC | Mkpọchi rackmount nke 2U nke dị sentimita iri na itoolu; oghere modulu anọ a na-agbanwe ọkụ; 1Njikwa RS232, 110/100/1000M RJ45 mgmt; ike DC-48V abụọ; oke oriri ike 300W; akụkụ 444mm88mm670mm |
4.2 Modulu Ngafe - Nchedo Nsogbu Nchekwa Inline
Modulu Bypass bụ isi ihe dị na Inline Bypass Switch, Network Bypass Tap, na Inline Bypass Tap nke ML-NPB-M2000, na-enye nchekwa usoro maka njikọ 10/40/100GE ma na-ejikọta ozugbo na nchọpụta obi nwere ọgụgụ isi na mgbanwe ngwa ngwa nke ngwaọrụ ahụ. Modulu Bypass niile na-akwado ndakọrịta 1G/10GE (INL-I8XM8X) ma ọ bụ 40GE/100GE (INL-I4HM2H), na-ahụ na ndakọrịta azụ na n'ihu na akụrụngwa netwọk dị adị:
| Ụdị Modulu Ngafe | Nkọwapụta Nkà na ụzụ dị mkpa |
|---|---|
| INL-I8XM8X (LM/SM) | Nchedo usoro njikọ 4-ụzọ 10GE (dakọtara na 1G); 8Njikọta 10GE; 8Ọdụ ụgbọ mmiri nlekota 10G SFP+ (enweghị modulu anya); nkwado otu/ọtụtụ ụdị |
| INL-I4HM2H (LM/SM) | Nchekwa usoro njikọ 100GE nke ụzọ abụọ (40GE dakọtara); 4Njikọta 100GE; 2Ọdụ ụgbọ mmiri nlekota 100GE QSFP28 (enweghị modulu anya); nkwado otu/ọtụtụ ụdị |
4.3 Modulu Nyocha - Nhazi na Nlekota Okporo ụzọ NPB dị elu
Modulu nlekota oru na-enye ọrụ ML-NPB-M2000's Network Packet Broker (NPB), na-enye nhazi okporo ụzọ dị mfe na nke dị elu maka ntinye SPAN na nlekota netwọk. E nwere ọkwa abụọ nke modulu nlekota oru: modulu ọkọlọtọ (nhazi okporo ụzọ bụ isi) na modulu injin ọrụ dị elu (nhazi SSL/nhazi, mwepụ okporo ụzọ, DPI). Modulu nlekota oru niile anaghị etinye modulu anya, na-enye òtù ohere iji transceivers ha dị ugbu a maka arụmọrụ ọnụ ahịa:
| Ụdị Modulu Nyocha | Nkọwapụta Nkà na ụzụ dị mkpa |
|---|---|
| MỌN-M16X | Ọdụ ụgbọ mmiri nlekota SFP+ 16*10GE (enweghị modulu anya); nhazi okporo ụzọ bụ isi (mmegharị/nchịkọta/nzacha) |
| MỌN-M16X-CN98 | Ọdụ ụgbọ mmiri nlekota 16 * 10GE SFP+ (enweghị modulu anya); injin ọrụ dị elu (nnọchi anya SSL/nkọwapụta, mwepụgharị okporo ụzọ, DPI) |
| MỌN-M4H | Ọdụ ụgbọ mmiri nlekota 4 * 100GE QSFP28 (enweghị modulu anya); nhazi okporo ụzọ bụ isi (mmegharị/nchịkọta/nzacha) |
| MỌN-M4H-CN98 | Ọdụ ụgbọ mmiri nlekota 4 * 100GE QSFP28 (enweghị modulu anya); injin ọrụ dị elu (nnọchi anya SSL/nkọwapụta, mwepụ okporo ụzọ, DPI) |
4.4 Iwu Nhazi Modulu Dị Mkpa
Iji hụ na arụmọrụ, ndakọrịta, na ike nhazi kachasị mma, ML-NPB-M2000 na-agbaso usoro iwu nhazi modulu doro anya, dị mfe iji mee ihe—e mere iji mee ka mgbanwe dịkwuo elu ma zere njehie nhazi:
○ Chassis mbụ: Chassis ML-NPB-M2000 (AC/DC) bụ ihe dị mkpa; modulu Bypass/Monitor niile bụ nke abụọ ma a ga-ahọrọ ha mgbe chassis ahụ gasịrị.
○ Mgbanwe oghere na-akparaghị ókè: Oghere modulu anọ ahụ na-akwado njikọta ọ bụla nke modulu Bypass na Monitor (dịka ọmụmaatụ, 4 Bypass, 4 Monitor, 2 Bypass + 2 Monitor)—enweghị mkpọchi oghere maka ụdị modulu ụfọdụ.
○ Nkwado njikọ dị elu: Dabere na njikọta modulu, ngwaọrụ ahụ na-akwado nchekwa usoro maka njikọ anya ruo 161G/10GE ma ọ bụ njikọ anya 840G/100GE—na-egbo mkpa nke netwọk ụlọ ọrụ na ebe nchekwa data dị elu.
○ Nlekota njupụta dị elu: Ngwaọrụ a na-akwado ruo 641G/10GE nlekota ihe ma ọ bụ 1640G/100GE nlekota ihe—na-eme ka e nwee ike itinye ngwaọrụ nlekota ihe na nchekwa n'ìgwè buru ibu.
○ Emere mgbanwe ọkụ: Modulu niile nke Bypass na Monitor na-akwado mgbanwe ọkụ ọkụ—na-enye ohere maka nnọchi modulu, mmelite, ma ọ bụ ndozi na-enweghị oge nkwụsị netwọk ma ọ bụ mgbanwe nhazi.
Mgbanwe a na-eme ka ML-NPB-M2000 bụrụ ihe ntinye ego na-egosi ọdịnihu—òtù dị iche iche nwere ike ịkwalite ọsọ njikọ ha, nchekwa nchekwa, ma ọ bụ ikike nlekota site na ịgbanwe modulu (ọ bụghị dochie chassis ahụ dum), belata ọnụ ahịa nke onye nwe ya (TCO) ma gbanwee ya ka ọ na-agbanwe agbanwe maka mkpa netwọk maka afọ ndị na-abịa.
5. Ike Nhazi Okporo ụzọ Nwere Ọgụgụ Isi: Ụdị Ntinye Inline na SPAN
Ihe kachasị ike nke Mylinking ML-NPB-M2000 bụ nkwado ya maka ụdị nhazi abụọ: Ntinye Inline (serial) maka nchekwa ngwaọrụ Inline Security na nnabata njehie (iji ikike Inline Bypass Switch ya, Network Bypass Tap, na Smart Bypass Switch) na ntinye SPAN (passive) maka nlekota netwọk na nhazi okporo ụzọ dị elu (iji ọrụ Network Packet Broker (NPB) ya rụọ ọrụ). Ụdị abụọ a na-arụ ọrụ n'adabereghị onwe ya ma ọ bụ na tandem (Inline + SPAN), na-eme ka ML-NPB-M2000 nwee ike idozi mkpa nchekwa netwọk na nlekota ọ bụla na isi ihe netwọk niile - site na ọnụ ụzọ ámá ịntanetị na isi switches ruo na ubi sava data center na njikọ ikpo okwu igwe ojii.
5.1 Ụdị Ntinye Inline - Nchedo Nchekwa Inline Zero-Dinting Time
Ntinye Inline bụ ụdị mbụ maka nchekwa ngwaọrụ Inline Security, ebe a na-etinye ML-NPB-M2000 n'usoro n'etiti ngwaọrụ netwọk (rawụta, swiitị) na ngwaọrụ nchekwa inline (FW/IPS/Anti-DDoS/WAF). N'ụdị a, ọ na-arụ ọrụ dị ka Smart Bypass Switch na Inline Bypass Tap, na-enye ndidi maka mmejọ, ọrụ efu-downtime, na nhọrọ traction traffic - ebe ọ na-ejikọta ikike nhazi okporo ụzọ NPB bụ isi. Atụmatụ ntinye Key Inline gụnyere:
○ Nchedo nke okporo ụzọ kpọmkwem/n'ịntanetị niile: Ụdị SpecFlow™/FullLink™ maka inyocha nchekwa ezubere iche ma ọ bụ zuru oke (njikọta okporo ụzọ L2-L4).
○ Nhazi Ibu Ọgụgụ Isi: Kesaa okporo ụzọ n'ofe ngwaọrụ nchekwa dị iche iche iji jikwaa okporo ụzọ dị elu nke bandwidth (echekwara iguzosi ike n'ezi ihe nke nnọkọ).
○ <8ms Mgbanwe Ngafe Ngwa Ngwa: Njehie akpaka nke ngwaọrụ nchekwa nwere nsogbu na obere mmetụta netwọk (LinkSafeSwitch™ Technology).
○ Nchọpụta Obi Abụọ: Nlekota ahụike n'oge a nke ngwaọrụ nchekwa dị n'ime ya nwere paramita enwere ike ịhazi.
○ Mgbochi okporo ụzọ: Na-ejide ngwugwu iwu na-akwadoghị/ndị na-adịghị mma dabere na ọnọdụ nzacha nke nwere okpukpu ise dabara—na-ahụ na nchekwa netwọk dị.
○ Ngosipụta okporo ụzọ: Enyo njikọ okporo ụzọ dị n'ime na ngwaọrụ nlekota nke na-abụghị nke band (IDS/NPM/APM) maka nlekota netwọk na-anaghị arụ ọrụ nke ọma—enweghị mmetụta na nhazi nchekwa dị n'ime.
○ Proxy SSL Transparent: Detuo okporo ụzọ ezoro ezo maka nyocha nchekwa, wee detuo ya ọzọ maka nnyefe - imeghe visibiliti okporo ụzọ ezoro ezo.
5.2 Ụdị Mbugharị SPAN - Nhazi Okporo ụzọ NPB dị elu maka Nlekota Netwọk
Ntinye SPAN bụ ụdị ọrụ na-anaghị arụ ọrụ maka nlekota netwọk, ebe a na-etinye ML-NPB-M2000 iji chịkọta, hazie, ma kesaa okporo ụzọ site na ọdụ ụgbọ mmiri SPAN netwọk ruo na ngwaọrụ nlekota/nyocha (IDS, NPM, APM, SIEM). N'ụdị a, ọ na-arụ ọrụ dị ka Network Packet Broker (NPB) zuru oke, na-enye ikike nhazi okporo ụzọ dị mkpa na nke dị elu - imeghe visibiliti okporo ụzọ dị iche iche, ibelata njide ngwugwu na-adịghị arụ ọrụ, na ime ka arụmọrụ ngwaọrụ nlekota dịkwuo mma. Ike nhazi SPAN nke ML-NPB-M2000 enweghị atụ na ụlọ ọrụ ahụ, yana ihe karịrị atụmatụ 30 dị elu kewara n'ime nhazi okporo ụzọ bụ isi na nhazi okporo ụzọ dị elu:
5.2.1 Nhazi Okporo ụzọ Dị Mkpa (SPAN)
Ike NPB dị mkpa maka ime ka nkesa okporo ụzọ dịkwuo mma na nlekota netwọk bụ isi:
○ Mmegharị/Mkpokọta/Nkesa Okporo ụzọ: 1:N emegharị, nchịkọta N:M, na nkesa okporo ụzọ kpọmkwem na ngwaọrụ nlekota - iwepụ njide ngwugwu na-enweghị isi.
○ Nzacha okporo ụzọ 5-Tuple: Nzacha okporo ụzọ Granular dabere na IP/protocol/ọdụ ụgbọ mmiri 5-tuple, ụdị Ethernet, akara VLAN, na njirimara ngwugwu (iwu whitelist/blacklist).
○ Njikwa VLAN: Ịkpado, mgbanwe, na nhichapụ VLAN—na-eme ka nkewa okporo ụzọ na nhazi mpaghara dị.
○ Nhazi oge nanosekọnd: NTP-mekọrịtara oge stampụ nke ngwugwu (nzizi nanosecond) maka nsogbu nsogbu na njikọ ndekọ.
○ Ịkpụcha Ọwara: Strip VXLAN, GRE, GTP, MPLS, IPIP, na SRV6 ọwara isi—na-emepe visibiliti n'ime okporo ụzọ ndị nwere ọwara.
○ Ịcha ngwugwu: Ịbechapụ ngwugwu ahaziri ahazi (64–960 bytes) iji belata nnyefe data na-enweghị isi na ngwaọrụ nlekota - ibelata ojiji bandwidth.
○ Nchọpụta Usoro Ọwara: Nchọpụta akpaka nke GTP/GRE/VXLAN/PPTP/L2TP/PPPOE/IPIP—na-eme ka mbugharị okporo ụzọ dabere na iwu.
○ Ibu Ọrụ Nbugharị Ngwugwu: Kọwaa mkpa okporo ụzọ dabere na mkpa ọrụ—hụ na e buru ụzọ ziga ngwugwu ndị dị mkpa iji zere mkpu ngwaọrụ nlekota.
5.2.2 Nhazi Okporo ụzọ Dị Elu (SPAN)
Ike NPB nke ọkwa ụlọ ọrụ maka idozi nsogbu Nlekota netwọkụ na nchekwa dị mgbagwoju anya (dị naanị na modulu Nlekota ọrụ CN98 dị elu):
○ Nkọwapụta SSL: Detuo okporo ụzọ HTTPS/SSL/TLS maka nlekota/nnyocha (nkwado TLS1.0/TLS1.2/SSL3.0).
○ Mwepụgharị okporo ụzọ: Mwepụ nke ngwugwu abụọ dabere na ọdụ ụgbọ mmiri/iwu—na-ebelata mkpu ụgha na ibu nhazi ngwaọrụ nlekota.
○ Ịkpuchi Data: Ikpuchi ebe data dị mkpa dabere na amụma (dịka ọmụmaatụ, nọmba kaadị kredit, ozi nkeonwe)—iji hụ na e rubere iwu nzuzo data.
○ Nnyocha ngwugwu miri emi nke DPI: Chọpụta usoro ngwa 1800+ (ọdịyo/vidiyo, egwuregwu, IM, nchekwa data, email, P2P) site na iji ọbá akwụkwọ atụmatụ DPI emelitere - na-emepe visibiliti okporo ụzọ ọkwa ngwa.
○ Nhazi ngwugwu ahaziri ahazi: Wepụ ubi nchekwa omenala site na byte 128 mbụ nke ngwugwu - na-agbanwe agbanwe na usoro netwọk nkeonwe.
○ Ịkpụzi okporo ụzọ: Mwepụta okporo ụzọ dị mfe na ngwaọrụ nlekota site na iji teknụzụ na-akpụzi - na-ewepụ mfu ngwugwu site na obere mgbawa okporo ụzọ.
○ Ndakọrịta Okwu Okwu na ngwugwu: Dakọtara ọdịnaya ubi ibu ọrụ ma tụfuo/tụfuo ngwugwu/nzukọ ndị metụtara ya—na-eme ka nchọpụta ihe iyi egwu ezubere iche.
○ Ịkwụsị njikọ ogologo oge: Tụfuo okporo ụzọ njikọ ogologo oge na-adịghị arụ ọrụ mgbe ejidechara ya mbụ—na-ebelata ibu nhazi ngwaọrụ nlekota.
○ Mmepụta Encapsulation Ọwara: Kpọchie okporo ụzọ ndị a na-anakọta n'ime ọwara ERSPAN2/GRE/VXLAN/NVGRE—na-ebufe okporo ụzọ gaa na sistemụ nlekota/nyocha dị anya.
○ Nkwụsị Ngwugwu Ọwara: Hazie adreesị IP/MAC maka ọdụ ụgbọ mmiri ntinye okporo ụzọ iji nata okporo ụzọ nwere ọwara (GRE/GTP/VXLAN) ozugbo—na-eme ka nchịkọta okporo ụzọ dị anya dị mfe.
5.3 Ntinye Ngwakọta Inline + SPAN - Nchekwa na Nlekota Dị n'Otu
A na-emepe ike ML-NPB-M2000 n'ime Inline + SPAN hybrid deployment, ebe ọ na-enye nchekwa Inline Security (Inline mode) na nlekota netwọk passive n'otu oge (SPAN mode). N'ụdị a, ngwaọrụ ahụ na-egosipụta njikọ okporo ụzọ n'ime ahịrị na ngwaọrụ nlekota mpụga ebe ọ na-echebe ngwaọrụ nchekwa inline site na ọdịda - na-enye ngwọta nchekwa Netwọk jikọtara ọnụ na nlekota na-enweghị silos, enweghị ngwaike ọzọ, na enweghị mmetụta arụmọrụ netwọk. Ụdị ngwakọ a bụ ntinye zuru oke maka isi ihe netwọk dị mkpa (dịka ọmụmaatụ, ọnụ ụzọ ámá ịntanetị, mgba ọkụ isi data), ebe nchekwa nchekwa na-aga n'ihu na visibiliti okporo ụzọ n'oge adịghị mma.
5.4 Nyocha zuru oke nke Nlele na Mmejọ Okporo ụzọ
Isi ihe dị mkpa na ọrụ ML-NPB-M2000's Network Packet Broker (NPB) bụ njikọta ya na modul nyocha njehie—njikọ eserese enyi na enyi nke na-enye ọtụtụ akụkụ, nleba anya netwọk n'oge na ebe a na-ahụ maka njehie kpọmkwem. Modulu a na-agbanwe data okporo ụzọ raw ka ọ bụrụ nghọta a na-eme, yana ikike nyocha atọ dị mkpa:
○ Nnyocha okporo ụzọ bụ isi: Nchịkọta ọnụọgụgụ (ọnụọgụ ngwugwu, nkesa unicast/multicast/agbasa ozi, ọnụọgụ nnọkọ, nkesa protocol) na chaatị usoro okporo ụzọ n'oge.
○ Nnyocha miri emi nke DPI: Oke usoro nhazi nke oyi akwa njem, ọkwa okporo ụzọ IP, nkesa usoro ngwa DPI, na nyocha okporo ụzọ dabere na usoro oge (nhazi 1ms) yana ihe mmịfe oge mmekọrịta.
○ Nyocha Mmejọ Kpọmkwem: Nchọta nsogbu dị iche iche gụnyere nkọwa na-adịghị mma, nyocha nsogbu dị na tebụl na-asọfe (njikọ jụrụ/anaghị anabata), nyocha nsogbu dị na ngwugwu (njehie nlele/TTL 0), nyocha nsogbu nchekwa (mwakpo DDoS/ARP/mgbochi firewall), na nyocha nsogbu dị na netwọk (mgbagharị/ụzọ ntụgharị/nkwụsị njikọ).
○ Nyocha Ọnụọgụgụ Okporo ụzọ: Nhazi TOPN nke adreesị IP, usoro ngwa, na nnọkọ okporo ụzọ n'oge a na-ahụ anya—na eserese eserese na mbupụ faịlụ mpaghara maka nnabata na akụkọ.
Modulu visibiliti okporo ụzọ a na-ewepụ mkpa ọ dị maka ngwaọrụ nlekota onwe ya, na-ebelata mgbagwoju anya ọrụ ma na-enye ndị otu IT ohere ịchọpụta, dozie nsogbu netwọk na nchekwa ngwa ngwa - na-ebelata oge ọrụ na ihe egwu azụmaahịa.
6. Nkọwapụta Nkà na ụzụ zuru oke nke ML-NPB-M2000
Emebere Mylinking ML-NPB-M2000 iji mezuo ihe kachasị mkpa teknụzụ nke ụlọ ọrụ, ebe data, na netwọk ikpo okwu igwe ojii - na-enye arụmọrụ, ntụkwasị obi, na nhazi dị mfe dịka Network Packet Broker (NPB) na Inline Bypass Switch. N'okpuru ebe a bụ nkọwapụta teknụzụ ya zuru oke, nke a haziri site na ngalaba ọrụ maka ntụaka dị mfe:
6.1 Nkọwapụta Netwọk Isi na Njikọta
| Paramita | Nkọwapụta |
|---|---|
| Ụdị Ngwaahịa | Mylinking ML-NPB-M2000 Network Packet Broker (NPB) + Inline Bypass Switch |
| Ihe Nhazi Ụdị | Ihe nkwado rackmount nke dị sentimita iri na itoolu (444mm) nke 2U ọkọlọtọ88mm670mm) |
| Oghere modulu | Oghere anọ a na-agbanwe agbanwe nke ọma (Ngwakọta Bypass/Monitor) |
| Njikọ Kachasị Echekwara | 16Njikọ anya 1G/10GE ma ọ bụ 8Njikọ anya 40G/100GE |
| Njikọ nlekota kachasị elu | 641G/10GE ma ọ bụ 1640G/100GE |
| Njikwa Njikọta | 1RS232 Console (115200,8,N,1); 110/100/1000M RJ45 nke na-anaghị agba ọsọ mgmt |
| Ike nhazi | 2.4Tbps full-duplex (Nzipu ọsọ waya ASIC na-eme ngwa ngwa) |
| Nkwụsị Mgbanwe Ngafe | <8ms (ndị na-eduga n'ụlọ ọrụ) |
6.2 Ọrụ Ntinye na Sistemụ
| Ụdị Ọrụ | Atụmatụ Akwadoro |
|---|---|
| Ụdị Mbugharị | Inline (usoro), SPAN (anaghị agafe agafe), Inline + SPAN ngwakọ |
| Ọrụ Ụdị Inline | Nchedo SpecFlow™/FullLink™, nhazi ibu, nchọpụta obi, ịgafe ngwa ngwa, igbochi/nyogharị okporo ụzọ, SSL proxy |
| Ọrụ Ndị Dị Mkpa nke Ọnọdụ SPAN | Mmụgharị/nchịkọta/nkesa okporo ụzọ, nzacha nke okpukpu ise, njikwa VLAN, stampụ oge, iwepụ ọwara, ịkpụ ngwugwu |
| Ọrụ Dị Elu nke Ọnọdụ SPAN | Nkọwapụta SSL, mwepụ okporo ụzọ, ikpuchi data, DPI (protocols 1800+), nhazi okporo ụzọ, ndakọrịta okwu, iwepụ njikọ ogologo oge |
| Nlele okporo ụzọ | Nyocha bụ isi, nyocha miri emi nke DPI, nyocha njehie ziri ezi, nyocha ọnụọgụgụ (nlele eserese/mbupụ) |
| Atụmatụ ntụkwasị obi | Mgbanwe ọkụ-modulu, ọdịda-emeghe ụzọ, nkwado ọkụ-njikọ (1+1), nchebe oscillation interface, nha microburst traffic |
6.3 Njikwa na Nyocha
| Ngalaba Njikwa | Usoro/Ngwaọrụ akwadoro |
|---|---|
| Njikwa Ime Obodo | GUI HTTP/WEB, TELNET/SSH CLI (EasyConfig/AdvanceConfig), SNMP V1/V2C, SYSLOG |
| Nyocha | Nkwenye dabere na paswọọdụ, ikike etiti nke AAA, TACACS+/RADIUS |
| Ndekọ na Akụkọ | Nlekota mkpu oge, ndekọ mkpu akụkọ ihe mere eme, mbupụ ọnụọgụgụ okporo ụzọ |
6.4 Nkọwapụta Ọkụ Eletriki na Gburugburu Ebe Obibi (Ọkwa Ụlọ Ọrụ)
| Nkewa | Nkọwapụta |
|---|---|
| Ịnye ọkụ | AC-220V ma ọ bụ DC-48V (ike abụọ, nhọrọ) |
| Ugboro Ike | AC-50Hz |
| Ntinye Ugbu a | AC-3A / DC-10A |
| Oke Oriri Ike | 300W |
| Okpomọkụ Ọrụ | 0℃ – 50℃ (32°F – 122°F) |
| Okpomọkụ Nchekwa | -20℃ – 70℃ (-4°F – 158°F) |
| Iru mmiri na-arụ ọrụ | 10% – 95% (anaghị agwakọta) |
| Iru mmiri nchekwa | 5% – 95% (anaghị agwakọta mmiri) |
Nkọwapụta ndị a na-akwado ML-NPB-M2000 dị ka NPB na Inline Bypass Switch nke nwere arụmọrụ dị elu, nke nwere ọkwa ụlọ ọrụ mmepụta ihe dị elu—nke e mepụtara maka ọrụ awa 24/7 n'ime ụlọ ọrụ kachasị achọ ọrụ, ebe data, na gburugburu ikpo okwu igwe ojii.
7. Ihe ngosi Ngwa Ụlọ Ọrụ Dị n'Ezigbo Ụwa
Ụdị nhazi abụọ nke Mylinking ML-NPB-M2000, mgbanwe modular, na ikike nhazi okporo ụzọ dị elu na-eme ka ọ dabara adaba maka isi ihe dị na netwọk ụlọ ọrụ niile—site na ọnụ ụzọ ámá ịntanetị na isi switches ruo na ubi sava data center, njikọ ikpo okwu igwe ojii, na njikọ ụlọ ọrụ alaka. N'okpuru ebe a bụ ọnọdụ ngwa ụwa iri dị mkpa ebe ML-NPB-M2000 na-enye uru kachasị ukwuu, na-edozi nsogbu ụfọdụ gbasara Nchebe Netwọk na Nlekota Netwọk ma na-eji ikike ya niile dị ka Netwọk Packet Broker (NPB), Smart Bypass Switch, Network Bypass Tap, na Inline Bypass Tap:
7.1 Nchedo Ngwaọrụ Nchekwa Usoro Njikọ Inline
○ Ihe ịma aka: Ọdachi ma ọ bụ mmezi nke ngwaọrụ nchekwa inline (FW/IPS) na-akpata nsogbu netwọk.
○ Ngwọta: Tinye ML-NPB-M2000 n'ụdị Inline n'etiti ngwaọrụ netwọk na ngwaọrụ nchekwa—nchọpụta obi nwere ọgụgụ isi na <8ms bypass switching na-eme ka oge nkwụsị ghara ịdị ma ọ bụrụ na ngwaọrụ nchekwa ahụ ada ada ma ọ bụ ewepụ ya na offline maka ndozi.
○ Uru Dị Mkpa: Nkwukọrịta netwọk na-enweghị nkwụsị na nchekwa nchekwa 24/7.
7.2 Nchedo Nchekwa Inline nke Usoro SpecFlow™
○ Ihe ịma aka: A na-amanye okporo ụzọ niile site na ngwaọrụ nchekwa, na-emefusị akụrụngwa nhazi na ịbawanye oge.
○ Ngwọta: Jiri ụdị SpecFlow™ iji tụgharịa naanị ụdị okporo ụzọ akọwapụtara (dịka ọmụmaatụ, nchekwa data/SSH/okporo ụzọ ezoro ezo) gaa na ngwaọrụ nchekwa—a na-eziga okporo ụzọ na-enweghị njikọ ozugbo.
○ Uru Dị Mkpa: Mbelata ibu ngwa nchekwa, obere oge, na nyocha nchekwa ezubere iche.
7.3 Nchekwa Nchekwa Inline nke Ibu Nhazi (Bandwit Dị Elu)
○ Ihe ịma aka: Ngwaọrụ nchekwa otu enweghị ike ijikwa okporo ụzọ kachasị elu nke 10/40/100GE, nke na-ebute mfu nke latency/packet.
○ Ngwọta: Tinye nhazi ibu dị ike nke ML-NPB-M2000 iji chịkọta ọtụtụ ngwaọrụ nchekwa—Nkesa okporo ụzọ dabere na Hash na-eme ka iguzosi ike n'ezi ihe na ojiji akụrụngwa kacha mma.
○ Uru Dị Mkpa: Nha nhata kwụ ọtọ maka ikike nhazi nchekwa na nkwado maka okporo ụzọ elu-bandwidth dị elu.
7.4 Mgbanwe Njikọ Serial nke Ahụ-na-Eziokwu
○ Ihe ịma aka: Ọtụtụ ngwaọrụ nchekwa usoro anụ ahụ na-emepụta ọtụtụ SPOF na nnukwu latency.
○ Ngwọta: ML-NPB-M2000 na-agbanwe nhazi usoro anụ ahụ ka ọ bụrụ usoro nhazi nke anụ ahụ na nke ezi uche dị na ya + nke ezi uche dị na ya—ngwaọrụ nchekwa niile na-ejikọ na ML-NPB-M2000, nke na-adọkpụ okporo ụzọ gaa na ngwaọrụ ọ bụla dịka achọrọ.
○ Uru Dị Mkpa: Na-ewepụ ọtụtụ SPOF, na-ebelata oge nkwụsị, ma na-enye ohere ka ngwaọrụ nchekwa nkeonwe na-enweghị oge nkwụsị netwọk.
7.5 Njem okporo ụzọ dabere na amụma siri ike (Mgbochi DDoS)
○ Ihe ịma aka: Usoro mgbochi okporo ụzọ ọdịnala (BGP) dị mgbagwoju anya ma chọọ mgbanwe na nhazi netwọk.
○ Ngwọta: Jikọta ML-NPB-M2000 na ngwaọrụ Anti-DDoS site na WebService™ dynamic policy transfer—a na-ebugharị okporo ụzọ ọjọọ gaa na ngwaọrụ Anti-DDoS n'oge, na-enweghị mgbanwe netwọk.
○ Uru Dị Mkpa: Nzaghachi ihe iyi egwu n'oge, obere ndabere netwọk, na obere oge maka okporo ụzọ nkịtị.
7.6 Nlekota Nchekwa nke Inline + SPAN Ngwakọta
○ Ihe ịma aka: Mkpa maka nchekwa nchekwa inline n'otu oge na nlekota netwọk na-enweghị ngwaike ọzọ.
○ Ngwọta: Ntinye ngwakọ Inline + SPAN—ML-NPB-M2000 na-echebe ngwaọrụ nchekwa dị n'ime ebe ọ na-egosipụta okporo ụzọ na ngwaọrụ nlekota ndị na-abụghị nke band (IDS/NPM/APM).
○ Uru Dị Mkpa: Nchekwa na nlekota nke ejikọtara ọnụ, enweghị silos, enweghị ọnụ ahịa ngwaike ọzọ.
7.7 Mwepụ Okporo ụzọ maka Nhazi Ngwaọrụ Nleba Anya
○ Ihe ịma aka: Ngwugwu abụọ na-akpata mkpu ụgha nke ngwaọrụ nlekota na ibu ọrụ nhazi.
○ Ngwọta: Jiri mwepụ okporo ụzọ nke ML-NPB-M2000 site na ọdụ ụgbọ mmiri/iwu iji wepụ ngwugwu abụọ tupu ha erute ngwaọrụ nlekota.
○ Uru Dị Mkpa: Mbelata mkpu ụgha, mbelata ibu ngwaọrụ nlekota, na mmezi nyocha ka mma.
7.8 Ndekọ VLAN maka Ọnọdụ Nsogbu Okporo ụzọ
○ Ihe ịma aka: Enweghị ike ịchọta ngwa ngwa ebe nsogbu netwọk/mmebi nchekwa si abịa.
○ Ngwọta: Jiri akara VLAN nke ML-NPB-M2000 iji kpọọ okporo ụzọ sitere na nodes netwọk dị iche iche aha—ngwaọrụ backend nwere ike ịchọpụta ihe ndị na-adịghị mma na isi mmalite kpọmkwem site na akara VLAN.
○ Uru Dị Mkpa: Nchọpụta nsogbu ngwa ngwa, mbelata oge nchọpụta nsogbu, na mmụba nke ịhụ ụzọ netwọk.
7.9 Nhazi Okporo ụzọ Netwọk Ejikọtara ọnụ (Ebe Data)
○ Ihe ịma aka: Ọ na-esiri ike ịchịkọta ma kesaa okporo ụzọ njikọ 10/40/100GE dị iche iche na ngwaọrụ nlekota/nchekwa.
○ Ngwọta: Tinye ML-NPB-M2000 dị ka onye na-ahazi okporo ụzọ etiti—chịkọta okporo ụzọ njikọ niile, yochaa/bepụ ya, ma kesaa ya na ngwaọrụ kwesịrị ekwesị.
○ Uru Dị Mkpa: Njikwa okporo ụzọ etiti, mbelata mgbagwoju anya ọrụ, yana iji ngwaọrụ eme ihe nke ọma.
7.10 Nyocha zuru oke nke Nlele Anya Okporo ụzọ Netwọk
○ Ihe ịma aka: Enweghị ike ịhụ ụzọ n'oge, nke nwere ọtụtụ akụkụ na ikike nyocha mmejọ.
○ Ngwọta: Jiri modulu visibiliti okporo ụzọ agbakwunyere nke ML-NPB-M2000—nnyocha miri emi/DPI na nyocha njehie ziri ezi na-enye nghọta ndị a pụrụ ime site na interface eserese enyi na enyi.
○ Uru Dị Mkpa: Nlekota netwọk n'oge, idozi nsogbu ngwa ngwa, na ọnụọgụgụ okporo ụzọ dị njikere maka nrubeisi.
8. Uru asọmpi nke Mylinking ML-NPB-M2000
N'ahịa jupụtara na Network Packet Broker (NPB) na Inline Bypass Switch ngwọta, Mylinking ML-NPB-M2000 pụtara ìhè dị ka ikpo okwu nchekwa netwọkụ kachasị mma na nlekota maka ụlọ ọrụ, ebe data, na netwọk igwe ojii. Nchikota pụrụ iche ya nke njikọta, arụmọrụ, mgbanwe, na ọgụgụ isi na-enye uru asọmpi nke enweghị ngwọta onwe ya nwere ike ịha nhata - na-eme ka ọ bụrụ nhọrọ kachasị elu maka òtù ndị na-ebute ntụkwasị obi netwọk, nchekwa, na visibiliti ụzọ. N'okpuru ebe a bụ uru asọmpi iri dị mkpa nke na-akọwa ML-NPB-M2000:
8.1 Njikọta A Na-ahụtụbeghị mbụ: NPB + Mgbanwe Ngafe n'Intanet n'otu Ikpo Okwu
ML-NPB-M2000 bụ ngwọta mbụ nke ụlọ ọrụ ahụ iji jikọta nhazi okporo ụzọ Network Packet Broker (NPB) na nnabata nsogbu Inline Bypass Switch - na-ewepụ ntinye siloed, na-ebelata cabling anụ ahụ, na-ebelata mgbagwoju anya ọrụ. Enweghị ngwọta ọzọ na-enye ọkwa njikọta a, na-eme ka ML-NPB-M2000 bụrụ ebe a na-anọdụ otu ebe maka Nchebe Netwọk na Nlekota Netwọk.
8.2 Ike nhazi 2.4Tbps nke kachasị elu n'ụlọ ọrụ mmepụta ihe
Site na ikike nhazi ASIC nke nwere ike ime ngwa ngwa nke 2.4Tbps na nkwado maka njikọ 10/40/100GE, ML-NPB-M2000 na-emezu ihe achọrọ maka arụmọrụ nke ebe data bandwidth dị elu na netwọk isi ụlọ ọrụ kacha achọ—na-ebuga nnyefe waya ọsọ na-enweghị mgbochi, ọbụlagodi mgbe a na-ahazi iwu okporo ụzọ dị mgbagwoju anya.
8.3 Nhazi Modular zuru oke na nke a na-agbanwe agbanwe
Oghere modulu anọ a na-agbanwe agbanwe nke zuru ụwa ọnụ na-akwado njikọta ọ bụla nke modulu Bypass na Monitor - na-eme ka nhazi omenala maka mkpa netwọk na mmezi/mmelite ọ bụla na-enweghị oge nkwụsị netwọk. Mgbanwe modul a na-eme ka ML-NPB-M2000 ghara ịdị irè n'ọdịnihu, na-enweghị ngwaike na-agba ọsọ ka mkpa netwọk na-agbanwe.
8.4 Ụdị Nhazi Abụọ (Inline/SPAN) + Inline Ngwakọta + SPAN
Nkwado maka ụdị nhazi Inline, SPAN, na ngwakọ Inline + SPAN na-enye mgbanwe dị iche iche - na-agbanwe agbanwe na node igodo netwọk na ọnọdụ ojiji ọ bụla, site na nchekwa nchekwa inline ruo na nlekota na-adịghị mma. Enweghị NPB ma ọ bụ Inline Bypass Switch nke na-enye ọkwa mgbanwe nhazi a.
8.5 Native SSL Proxy/Decryption – Na-ewepụ ntụpọ ndị zoro ezo na okporo ụzọ
Ike proxy SSL nke Native na decryption (TLS1.0/TLS1.2/SSL3.0) na-emeghe visibiliti n'ime okporo ụzọ ezoro ezo — ihe dị mkpa na-efu na ọtụtụ NPB na ngwọta mgbochi. Nke a na-eme ka òtù dị iche iche nwee ike inyocha okporo ụzọ ezoro ezo maka ihe omume ọjọọ na-enweghị imebi nchekwa site na njedebe ruo na njedebe.
8.6 Sub-8ms Ngwa ngwa Ngbanwe na Ọrụ Mmeghe nke Mmeghe
Ọrụ nke na-eduga n'ụlọ ọrụ mmepụta ihe <8ms nke na-egbochi mgbanwe latency na ọrụ mepere emepe na-eme ka oge ọrụ netwọk ghara ịdị mma—ọbụlagodi na ngwaọrụ nchekwa inline ma ọ bụ ML-NPB-M2000 n'onwe ya enwee nsogbu. Ndochi nsogbu a enweghị atụ site na ngwọta NPB nke na-enweghị ikike bypass nke obodo.
8.7 DPI maka Usoro Ngwa 1800+ (Ọbá Akwụkwọ A Na-emelite)
Nnyocha ngwugwu miri emi nke DPI agbakwunyere maka usoro oyi akwa ngwa 1800+ (yana ọbá akwụkwọ atụmatụ a na-emelite) na-enye ọhụụ okporo ụzọ ọkwa ngwa - na-eme ka nyocha nchekwa ezubere iche na nlekota netwọkụ maka netwọk ndị nwere nnukwu ngwa ọgbara ọhụrụ.
8.8 Nlele Okporo ụzọ zuru oke na Nyocha Mmejọ Kpọmkwem
Modulu a na-ejikọta ọnụ, nke na-egosi na ọ na-enye nyocha miri emi nke isi/DPI na nhazi nsogbu kpọmkwem - na-ewepụ mkpa ọ dị maka ngwaọrụ nlekota onwe ya ma na-ebelata oke ọrụ.
8.9 Njikọta Ndị Ọzọ Na-enweghị Nsogbu (Amụma Mgbanwe WebService™)
Nbugharị amụma WebService™ na-eme ka njikọta oge na ngwaọrụ nchekwa Inline na nlekota nke ndị ọzọ niile (FW/IPS/Anti-DDoS/SIEM) - na-eme ka onye na-ere ahịa ML-NPB-M2000 ghara ịghọta ihe ọ bụ ma dakọtara na nchekwa ndị dị adị (ntinye kachasị mma n'ụdị).
8.10 Ntụkwasị Obi na Ọkwa Ụlọ Ọrụ na Nnagide Gburugburu Ebe Obibi nke Ụlọ Ọrụ
Ọkụ ike abụọ nke AC/DC, mgbanwe ọkụ modulu, nkwado ọkụ na-ekpo ọkụ, na nnabata okpomọkụ/iru mmiri nke ọkwa ụlọ ọrụ na-eme ka ọrụ 24/7 na ebe data siri ike na gburugburu ụlọ ọrụ - na-enye ntụkwasị obi dị mkpa maka akụrụngwa netwọkụ dị mkpa.
Ya mere, n'oge a ebe ọrụ netwọk na-efu ọtụtụ puku dollar (ma ọ bụ nde) kwa nkeji, ihe iyi egwu cyber na-etowanye nke ọma kwa ụbọchị, Mylinking ML-NPB-M2000 karịrị naanị Network Packet Broker (NPB) ma ọ bụ Inline Bypass Switch—ọ bụ itinye ego atụmatụ na Nchekwa Netwọk, ntụkwasị obi, na visibiliti. Site n'ijikọta nhazi okporo ụzọ NPB na ndidi nke Smart Bypass Switch, Network Bypass Tap, na Inline Bypass Tap, ọ na-edozi isi ihe mgbu nke ọrụ ndị a na-enye n'onwe ha: iwepụ SPOFs, hụ na oge ọrụ netwọk efu, imeghe visibiliti okporo ụzọ ezoro ezo, na inye nlekota netwọk dị nkọ, n'ezie maka ụlọ ọrụ ọgbara ọhụrụ, ebe data, na netwọk igwe ojii.
Site na ikike nhazi ya nke 2.4Tbps, nhazi modular hot-scanppable, ụdị ntinye Inline/SPAN abụọ, proxy/decryption SSL nke obodo, nyocha ngwugwu miri emi nke DPI, na visibiliti okporo ụzọ zuru oke, ML-NPB-M2000 bụ ngwọta nchekwa na nlekota netwọk agbakwunyere nke ọma maka òtù ndị chọrọ arụmọrụ na-enweghị nkwekọrịta, nhazi, na ntụkwasị obi. Emebere ya ka ọ gboo mkpa nke azụmaahịa dijitalụ nke oge a - ebe nnweta netwọk 24/7, nchekwa siri ike, na visibiliti okporo ụzọ zuru oke enweghị nkwekọrịta.
Mee Nzọụkwụ Na-esote site na iji Mylinking ML-NPB-M2000
Ị dị njikere ịgbanwe ọrụ nchekwa netwọkụ gị na nlekota netwọkụ gị, wepụ ihe ndị na-adịghị mkpa, ma hụ na enweghị oge ọrụ netwọk?
○ Chọpụta ibe ngwaahịa Mylinking ML-NPB-M2000:https://www.mylinking.com/mylinking-network-packet-broker-plus-inline-bypass-switch-ml-npb-m2000-product/
○ Kpọtụrụ ndị otu teknụzụ MylinkingHazie nhazi modular nke dabara na ọsọ njikọ 10/40/100GE gị kpọmkwem, Nchekwa Inline, na Nlekota Netwọk.
○ Rịọ maka ngosi dị ndụ: Lee ikike NPB-M2000 nke ML-NPB-M2000 jikọtara na-arụ ọrụ—gụnyere mmebi oge efu, nkọwapụta SSL, DPI, na visibiliti okporo ụzọ—maka ọnọdụ netwọk gị kpọmkwem.
○ Nweta ọnụahịa: Mụta otu ML-NPB-M2000 si ebelata ọnụ ahịa nke onye nwe ya (TCO) site na iwepụ NPB na-anọpụ iche na ngwaike, ibelata oke ọrụ, na inye ngwọta netwọk nke ga-echebe ọdịnihu.
Site na Mylinking ML-NPB-M2000, ị nwere ike itinye nchekwa na nlekota netwọkụ siri ike, nke a na-agbanwe agbanwe, ma dịkwa n'otu—na-emebighị ntụkwasị obi netwọk, arụmọrụ, ma ọ bụ visibiliti.
Oge ozi: Maachị-26-2026



