Ama-TAP e-Mylinking™ Active Network Bypass ane-10/40/100G Bypass Module

Inqubekelaphambili yethu incike emikhiqizweni ethuthukisiwe, amathalente amahle namandla obuchwepheshe aqiniswa ngokuqhubekayo e-Mylinking™ Active Network Bypass TAPs ene-10/40/100G Bypass Module, Ngemibuzo eyengeziwe qiniseka ukuthi ngeke ulinde ukuxhumana nathi. Siyabonga - Usizo lwakho luhlala lusikhuthaza.
Inqubekelaphambili yethu incike emikhiqizweni ethuthukisiwe, amathalente amahle kanye namandla obuchwepheshe aqiniswe ngokuqhubekayo10/40/100G I-Bypass Tap, Ukuthepha Okusebenzayo, I-Bypass Taps, I-Ethernet Tap, inethiwekhi kampompi, Sibheke ngabomvu ukuzwa okuvela kuwe, kungakhathaliseki ukuthi uyikhasimende elibuyayo noma elisha. Sithemba ukuthi uzothola okufunayo lapha, uma kungenjalo, sicela usithinte ngokushesha. Siyaziqhenya ngesevisi yamakhasimende esezingeni eliphezulu kanye nokusabela. Siyabonga ngebhizinisi lakho nokusekela!

Uhlolojikelele

I-Mylinking™ Network Tap Bypass Switch iyacwaningwa futhi yathuthukiswa ukuze isetshenziselwe ukuthunyelwa okuvumelana nezimo kwezinhlobo ezihlukahlukene zemishini yokuphepha esemgqeni kuyilapho inikeza ukwethembeka okuphezulu kwenethiwekhi.
Ngokusebenzisa i-Mylinking™ Smart Bypass Switch Tap:

• Abasebenzisi bangafaka/bakhiphe amathuluzi okuvikeleka kalula futhi ngeke kuthinte futhi kuphazamise inethiwekhi yamanje;
• I-Mylinking™ Network Tap Bypass Shintshela ngomsebenzi wokuthola impilo ehlakaniphile uye ekuqapheni ngesikhathi sangempela isimo esivamile sokusebenza samadivayisi okuphepha asemgqeni. Uma amadivaysi okuphepha asemgqeni esebenza ngokuhlukile, umsebenzi wokuvikela uzozidlula ngokuzenzakalelayo ukuze kugcinwe ukuxhumana kwenethiwekhi okuvamile;
• Ubuchwepheshe obukhethekile bokuvikela ithrafikhi bungasetshenziswa ukufaka imishini ethile yokuphepha yokuhlanza ithrafikhi, ubuchwepheshe bokubethela obususelwa kumishini yokucwaninga. Yenza ngokuphumelelayo ukuvikelwa kokufinyelela okusemgqeni kohlobo oluthile lwethrafikhi, wehlise ingcindezi yokubamba ukugeleza kwedivayisi esemgqeni;
• Ubuchwepheshe bokuvikela i-Traffic Balanced Load bungasetshenziselwa ukuthunyelwa okuyiqoqo kwamadivayisi okuphepha avikelekile asemgqeni ukuze kuhlangatshezwane nokuvikeleka okusemgqeni ezindaweni ezinomkhawulokudonsa ophezulu.

I-Network Tap Bypass Shintsha Izici Ezithuthukile Nobuchwepheshe

I-Mylinking™ “SpecFlow” Protection Mode kanye ne-“FullLink” Protection Mode
I-Mylinking™ Fast Bypass Switching Protection
I-Mylinking™ “LinkSafeSwitch”
I-Mylinking™ “WebService” I-Dynamic Strategy Forwarding/Idaba
Ukutholwa komlayezo we-Mylinking™ Intelligent Heartbeat
Imilayezo ye-Mylinking™ Echaza Ukushaya Kwenhliziyo(Amaphakethe Okushaya Kwenhliziyo)
I-Mylinking™ Multi-link Load Balancing
I-Mylinking™ Intelligent Traffic Distribution
I-Mylinking™ Dynamic Load Balancing
I-Mylinking™ Remote Management Technology(HTTP/WEB, TELNET/SSH, “EasyConfig/AdvanceConfig” Isici)

I-Network Tap Bypass Switch Optional Configuration Guide

BYPASS ModuleIsikhala Semodyuli Yembobo yokuvikela:
Lesi sikhala singafakwa kumojuli yembobo yokuvikela ye-BYPASS enenombolo ehlukile yesivinini/yembobo. Ngokushintsha izinhlobo ezahlukene zamamojula, ingakwazi ukusekela ukuvikelwa kwe-BYPASS kwezidingo eziningi zezixhumanisi ze-10G/40G/100G.

QAPHELA ImojuliI-Port Module Slot;
Lesi sikhala singafakwa imojuli ye-MONITOR enezivinini/izimbobo ezihlukene. Ingakwazi ukusekela izixhumanisi eziningi ze-10G/40G/100G zokusetshenziswa kwedivayisi yokuqapha elandelanayo ngokushintsha amamojula ahlukene.

Imithetho Yokukhetha Imojuli
Ngokusekelwe kuzixhumanisi ezihlukene ezisetshenzisiwe kanye nezidingo zokuqapha zokuphakelwa kwemishini, ungakhetha kalula ukucushwa kwamamojula ahlukene ukuze uhlangabezane nesicelo sakho sangempela sendawo; sicela ulandele le mithetho elandelayo ngesikhathi sokukhetha imojuli yakho:
1. Izingxenye ze-chassis ziyisibopho futhi kufanele ukhethe izingxenye ze-chassis ngaphambi kokukhetha noma yimaphi amanye amamojula. Ngesikhathi esifanayo, sicela ukhethe izindlela ezihlukene zokuphakelwa kwamandla (AC/DC) ngokwezidingo zakho.
2. Lonke idivayisi isekela izikhala zemojuli ye-BYPASS ezingafika kwezi-2 kanye ne-slot yemojuli ye-MONITOR engu-1; awukwazi ukukhetha ngaphezu kwenani lezikhala ozozilungiselela. Ngokusekelwe ekuhlanganisweni kwenombolo yezikhala kanye nemodeli yemojuli, idivayisi ingasekela ukuvikelwa kwezixhumanisi ezine ze-10GE; noma ingakwazi ukusekela izixhumanisi ezine ze-40GE; noma ingakwazi ukusekela isixhumanisi esisodwa se-100GE.
3. Imodeli yemojuli “BYP-MOD-L1CG” ingafakwa kuphela ku-SLOT1 ukuze isebenze kahle.
4. Uhlobo lwemojula “BYP-MOD-XXX” lungafakwa kuphela kusikhala semojuli ye-BYPASS; uhlobo lwemojuli “MON-MOD-XXX” lungafakwa kuphela kumojuli ye-MONITOR slot ukuze isebenze okuvamile.

I-Network TAP Bypass Switch Specifications

I-Network TAP Bypass Switch Application(njengokulandelayo)

5.1 Ingozi Yezisetshenziswa Zokuvikeleka Ezixhumene Nelayini (IPS/FW)
Okulandelayo kuyisimo esivamile se-IPS (I-Intrusion Prevention System), imodi yokuthumela ye-FW (Firewall), i-IPS/FW isetshenziswa njengemishini yenethiwekhi esemgqeni (njengamarutha, amaswishi, njll.) phakathi kwethrafikhi ngokusebenzisa amasheke okuphepha, ngokuya ngenqubomgomo yokuphepha ehambisanayo yokunquma ukukhululwa noma ukuvimba ithrafikhi ehambisanayo, ukuze kuzuzwe umphumela wokuvikela ukuphepha.

Ngasikhathi sinye, singabona i-IPS(Intrusion Prevention System)/FW(Firewall) njengokusatshalaliswa okungaphakathi kwemishini, evamise ukuthunyelwa endaweni ebalulekile yenethiwekhi yebhizinisi ukuze kusetshenziswe ukuphepha okuxhumene nomugqa, ukuthembeka kwamadivayisi ayo axhunyiwe kuthinta ngqo ukutholakala kwenethiwekhi yebhizinisi iyonke. Uma idivayisi yokuphepha esemgqeni igcwele ngokweqile, ukuphahlazeka, izibuyekezo zesofthiwe, izibuyekezo zenqubomgomo, njll., konke ukutholakala kwenethiwekhi yebhizinisi kuzothinteka kakhulu. Kuleli qophelo, thina kuphela ngokusikwa kwenethiwekhi, i-bypass jumper ebonakalayo ingenza inethiwekhi ukuthi ibuyiselwe, kodwa ithinta kakhulu ukwethembeka kwenethiwekhi. I-IPS(Intrusion Prevention System)/FW(Firewall) namanye amadivaysi asemgqeni ngakolunye uhlangothi athuthukisa ukuthunyelwa kokuphepha kwenethiwekhi yebhizinisi, ngakolunye uhlangothi futhi kunciphisa ukuthembeka kwamanethiwekhi ebhizinisi, okwandisa ubungozi benethiwekhi ayitholakali.

5.2 I-Inline Link Series Ukuvikelwa Kwezisetshenziswa

I-Mylinking™ ” Bypass Switch ” isetshenziswa njengokusemgqeni phakathi kwamadivayisi enethiwekhi (amarutha, amaswishi, njll.), futhi ukugeleza kwedatha phakathi kwamadivayisi enethiwekhi akusaholeli ngokuqondile ku-IPS(Intrusion Prevention System) / FW(Firewall), ” Bypass Switch ” kuya ku-IPS / FW, lapho i-IPS / FW ngenxa yokugcwala, ukuphahlazeka, ukushintsha isoftware, isibuyekezo sesoftware. ukutholwa komlayezo wokushaya kwenhliziyo okuhlakaniphile Umsebenzi wokutholwa ngesikhathi, futhi ngaleyo ndlela weqe idivayisi enephutha, ngaphandle kokuphazamisa isisekelo senethiwekhi, imishini yenethiwekhi esheshayo exhunywe ngokuqondile ukuvikela inethiwekhi evamile yokuxhumana; lapho i-IPS / FW alulame ukwehluleka, kodwa futhi ngokusebenzisa ezihlakaniphile Heartbeat Packets Ukutholwa kokutholwa ngesikhathi umsebenzi, isixhumanisi sokuqala ukubuyisela ukuphepha amasheke ezokuphepha kwenethiwekhi yebhizinisi.

I-Mylinking™ “Bypass Switch” inomsebenzi onamandla okhaliphile wokutholwa komlayezo we-Heartbeat, umsebenzisi angakwazi ukwenza ngokwezifiso isikhawu sokushaya kwenhliziyo kanye nenani eliphakeme lokuzama futhi, ngomlayezo wokushaya kwenhliziyo ongokwezifiso ku-IPS / FW ukuze kuhlolwe impilo, njengokuthumela umlayezo wokuhlola ukushaya kwenhliziyo echwebeni elikhuphukayo / eliphansi le-IPS / FW, bese uthola usuka echwebeni le-IPW elikhuphukayo / i-IPW ukusebenza ngokujwayelekile ngokuthumela nokwamukela umlayezo wokushaya kwenhliziyo.

5.3 “SpecFlow” Policy Flow Inline Traction Series Protection

Uma idivayisi yenethiwekhi yezokuphepha idinga kuphela ukubhekana nethrafikhi ethile ekuvikelweni kokuvikeleka kochungechunge, ngokusebenzisa umsebenzi we-Mylinking™ “Network Tap Bypass switch ” wokucubungula ngakunye, ngesu lokuhlola ithrafikhi ukuze kuxhunywe idivayisi yezokuphepha ” Okukhathazekayo “ithrafikhi ibuyiselwa ngqo kusixhumanisi senethiwekhi, futhi” isigaba sethrafikhi esithintekayo “sidonsela kudivayisi yokuphepha ekulayini ukuze wenze ukuhlola kokuphepha. Lokhu ngeke nje kugcine ukusetshenziswa okuvamile komsebenzi wokuthola ukuphepha kwedivayisi yokuphepha, kodwa futhi kunciphise ukugeleza okungasebenzi kahle kwemishini yokuphepha ukubhekana nokucindezela; ngesikhathi esifanayo, "I-Network Tap Bypass Switch" ingathola isimo sokusebenza sedivayisi yokuphepha ngesikhathi sangempela. Idivayisi yokuphepha isebenza ngendlela engavamile idlula ithrafikhi yedatha ngokuqondile ukuze igweme ukuphazamiseka kwesevisi yenethiwekhi.

I-Mylinking™ Inline Traffic Bypass Tap ingakwazi ukuhlonza ithrafikhi ngokusekelwe kusihlonzi sesihloko sesendlalelo se-L2-L4, esifana nethegi ye-VLAN, ikheli le-MAC lomthombo, ikheli le-IP eliwumthombo, uhlobo lwephakethe le-IP, imbobo yephrothokholi yesendlalelo sokuthutha, umaka wokhiye wesihloko sephrothokholi, nokunye. Izinhlobonhlobo zezimo ezifanayo inhlanganisela evumelana nezimo zingachazwa ngendlela eguquguqukayo ukuze kuchazwe izinhlobo ezithile zethrafikhi ezithakaselwayo kudivayisi ethile yokuvikela futhi zingasetshenziswa kabanzi ukuthunyelwa kwamadivayisi akhethekile okuhlola ukuvikeleka (RDP, SSH, database auditing, njll.).

5.4 Layisha ibhalansi yochungechunge lokuvikela

I-Mylinking™ “Network Tap Bypass Switch” isetshenziswa njenge-inline phakathi kwamadivayisi enethiwekhi (amarutha, amaswishi, njll.). Lapho ukucubungula okukodwa kwe-IPS/FW ukusebenza kunganele ukubhekana nenani eliphakeme lethrafikhi yesixhumanisi, Umsebenzi wokulinganisa umthamo wethrafikhi wesivikeli, “ukuhlanganisa” kwethrafikhi yesixhumanisi se-IPS/FW cluster processingnetwork network, kunganciphisa ngempumelelo ingcindezi yokucubungula eyodwa ye-IPS/FW, kuthuthukise ukusebenza okuphelele kokusebenza ukuze kuhlangatshezwane nomkhawulokudonsa ophezulu wesimangalo sendawo yokuphakela.

I-Mylinking™ “Network Tap Bypass Switch” inomsebenzi onamandla wokulinganisa umthwalo, ngokuya ngethegi ye-VLAN yohlaka, ulwazi lwe-MAC, ulwazi lwe-IP, inombolo yembobo, iphrothokholi nolunye ulwazi lokusatshalaliswa kokulinganisa kwe-Hash komthwalo wethrafikhi ukuze kuqinisekiswe ukuthi i-IPS/FW ngayinye ithola ubuqotho beSeshini yokugeleza kwedatha.

5.5 I-Multi-series Inline Equipment Flow Traction Protection (Shintsha Uxhumano Lwe-Serial lube Ukuxhumana Okufanayo)
Kwezinye izixhumanisi ezibalulekile (njengezitolo ze-inthanethi, isixhumanisi sokushintshana kwendawo yeseva) indawo ivamise ukuba ngenxa yezidingo zezici zokuphepha kanye nokusetshenziswa kwemishini eminingi yokuhlola ukuphepha okusemgqeni (njenge-firewall(FW), imishini yokuhlasela emelene ne-DDOS, i-WEB Application Firewall(WAF), I-Intrusion Prevention System(IPS), njll.), izinto eziningi zokuphepha ezitholakala ngesikhathi esisodwa ekuhlulekeni kochungechunge lwephuzu elilodwa, ukuncishiswa kwephuzu elilodwa kusixhumanisi esincishisiwe. inethiwekhi. Futhi kulokhu okushiwo ngenhla kwemishini yokuvikela ukuthunyelwa ku-inthanethi, ukuthuthukiswa kwemishini, ukushintshwa kwemishini nokunye ukusebenza, kuzobangela inethiwekhi ukuphazamiseka kwesevisi isikhathi eside kanye nesenzo esikhulu sokusika iphrojekthi ukuze kuqedelwe ukuqaliswa ngempumelelo kwamaphrojekthi anjalo.

Ngokukhipha “I-Network Tap Bypass Switch” ngendlela ebumbene, imodi yokuphakelwa yamadivayisi amaningi okuvikela axhunywe ochungechungeni kusixhumanisi esifanayo ingashintshwa isuke kokuthi “imodi yokuhlanganisa ngokomzimba” iye “ekuhlanganiseni ngokomzimba, imodi yokuhlanganisa enengqondo” Isixhumanisi esikusixhumanisi sephuzu elilodwa lokwehluleka ukuthuthukisa ukuthembeka kwesixhumanisi, kuyilapho “ukugeleza okuphephile kumodi yokudlula” efanayo ukucubungula umphumela.

Idivayisi yokuvikela engaphezu kweyodwa ngesikhathi esifanayo njengomdwebo wokuphakelwa okukulayini:

I-Mylinking™ Network TAP Bypass Switch Deployment Diagram:

5.6 Ngokusekelwe Kusu Elinamandla Lokuvikelwa Kokuthola Ukuvikeleka Kokuhamba Kwethrafikhi
“I-Network Tap Bypass Switch” Esinye isimo sohlelo lokusebenza esithuthukisiwe sisekelwe kuhlelo oluguquguqukayo lwezinhlelo zokusebenza zokuvikela ukutholwa kokuphepha kokudonsa kwethrafikhi, ukusetshenziswa kwendlela njengoba kuboniswe ngezansi:

Thatha "Ukuvikeleka kokuhlasela nokutholwa kwe-Anti-DDoS" okokusebenza kokuhlola kokuphepha, isibonelo, ngokusetshenziswa kwe-“Network Tap Bypass Switch” bese kuba okokuvikela okulwa ne-DDOS bese uxhunywa “Ku-Network Tap Bypass Switch “, ngokujwayelekile ” Isivikeli se-Traction “inani eligcwele lokudlulisela phambili kwe-wire-speed ngesikhathi esifanayo isivikelo se-DD esiphumayo sokuhlasela iseva ye-IP kanye nokubona iseva ye-IP. (noma ingxenye yenethiwekhi ye-IP) ngemva kokuhlasela,” idivayisi yokuvikela ukuhlasela kwe-DDOS ” izokhiqiza imithetho eqondiwe yokufanisa ukugeleza kwethrafikhi futhi iyithumele “Ekushintsheni Kwenethiwekhi Ye-Tap Bypass ” ngohlelo olusebenzayo lokulethwa kwenqubomgomo. I-"Network Tap Bypass Switch ” ingabuyekeza "i-traffic traction dynamic" ngemva kokuthola imithetho eguqukayo yemithetho yenqubomgomo "futhi ngokushesha" umthetho ushaye ithrafikhi yeseva yokuhlasela "ukudonsela" ekuvikelweni kokuhlasela kwe-DDoS kanye nokutholwa "kokusebenza ukuze kucutshungulwe, ukuze kusebenze ngemva kokugeleza kokuhlasela bese iphinda ijovwe kunethiwekhi.

Uhlelo lohlelo lokusebenza olususelwe “Ku-Network Tap Bypass Switch ” kulula ukulusebenzisa kunomjovo ovamile womzila we-BGP noma esinye isikimu sokudonsa kwethrafikhi, futhi indawo ezungezile ayincikile kunethiwekhi futhi ukwethembeka kuphezulu.

"I-Network Tap Bypass Switch" inezici ezilandelayo zokusekela ukuvikelwa kokutholwa kokuphepha kwenqubomgomo:
1, “ I-Network Tap Bypass Switch ” ukuze unikeze ngaphandle kwemithetho esekelwe kusixhumi esibonakalayo se-WEBSERIVCE, ukuhlanganiswa okulula namadivayisi okuphepha enkampani yangaphandle.
2, ” I-BNetwork Tap Bypass Switch ” esekelwe ku-hardware ehlanzekile ye-ASIC chip edlulisela phambili amaphakethe esivinini sentambo angu-10Gbps ngaphandle kokuvimbela ukudluliselwa kweswishi, kanye “nelabhulali yomthetho oshukumisayo wethrafikhi” kungakhathaliseki inombolo.
3, ”I-Network Tap Bypass Switch” umsebenzi owakhelwe ngaphakathi we-BYPASS wobungcweti, noma ngabe isivikelo ngokwaso singaphumeleli, singaphinda sidlule isixhumanisi somkhiqizo wangempela ngokushesha, asithinti isixhumanisi sokuqala sokuxhumana okuvamile.