Ukuhlaziywa Okujulile Nokuqhathaniswa Kohlelo Lokusebenza kwe-TAP kanye Nezindlela Zokutholwa Kwedatha Yethrafikhi Yenethiwekhi ye-SPAN

Emkhakheni wokusebenza nokugcinwa kwenethiwekhi, ukuxazulula izinkinga, nokuhlaziya ukuphepha, ukuthola ngokunembe nangempumelelo imifudlana yedatha yenethiwekhi kuyisisekelo sokwenza imisebenzi eyahlukene. Njengobuchwepheshe obubili bokutholwa kwedatha yenethiwekhi, i-TAP (Indawo Yokufinyelela Yokuhlola) kanye ne-SPAN (I-Switched Port Analyzer, evame ukubizwa ngokuthi i-port mirroring) idlala indima ebalulekile ezimeni ezahlukene ngenxa yezici zabo zobuchwepheshe ezihlukile. Ukuqonda okujulile kwezici zabo, izinzuzo, imikhawulo, nezimo ezisebenzayo kubalulekile ukuze onjiniyela benethiwekhi benze izinhlelo eziphusile zokuqoqa idatha futhi bathuthukise ukusebenza kahle kokuphathwa kwenethiwekhi.

I-TAP: Isixazululo Sokuthwebula Idatha Esiphelele futhi Esibonakalayo "Esingalahleki".

I-TAP iyidivayisi yezingxenyekazi zekhompuyutha esebenza kusendlalelo esibonakalayo noma sesixhumanisi sedatha. Umsebenzi wayo oyinhloko ukuzuza ukuphindaphinda okungu-100% nokuthwebula imifudlana yedatha yenethiwekhi ngaphandle kokuphazamisa ithrafikhi yokuqala yenethiwekhi. Ngokuxhunywa ngochungechunge kusixhumanisi senethiwekhi (isb, phakathi kweswishi neseva, noma irutha kanye neswishi), iphindaphinda wonke amaphakethe edatha akhuphukayo naphansi omfula adlula kusixhumanisi esiya embobeni yokuqapha kusetshenziswa izindlela "zokuhlukaniswa kwe-optical" noma "zokuhlukaniswa kwethrafikhi", ukuze kucutshungulwe okulandelayo ngamadivayisi okuhlaziya (njengabahlaziyi benethiwekhi kanye ne-IDS Detection Systems).

Izici ezibalulekile: Kugxile kokuthi "Ubuqotho" kanye "Nozinzo"

1. 100% Ukuthwebula Iphakethe Ledatha Ngaphandle Kwengozi Yokulahlekelwa

Lena inzuzo evelele kakhulu ye-TAP. Njengoba i-TAP isebenza kungqimba olubonakalayo futhi iphindaphinda ngokuqondile amasiginali kagesi noma okubona kusixhumanisi, ayincikile kuzinsiza ze-CPU yokushintsha ukuze kudluliselwe iphakethe ledatha noma ukuphindaphinda. Ngakho-ke, kungakhathaliseki ukuthi ithrafikhi yenethiwekhi isezingeni eliphezulu noma iqukethe amaphakethe edatha anosayizi omkhulu (njengama-Jumbo Frames anenani elikhulu le-MTU), wonke amaphakethe wedatha angathathwa ngokuphelele ngaphandle kokulahlekelwa kwephakethe okubangelwa izinsiza zokushintsha ezinganele. Lesi sici "sokuthwebula okungenakulahlekelwa" sikwenza kube yisixazululo esithandwayo sezimo ezidinga ukusekelwa okunembile kwedatha (njengesizinda sesizinda sendawo kanye nokuhlaziywa kwesisekelo sokusebenza kwenethiwekhi).

2. Awukho Umthelela Ekusebenzeni Kwangempela Kwenethiwekhi

Imodi yokusebenza ye-TAP iqinisekisa ukuthi ayibangeli ukuphazamiseka kusixhumanisi sokuqala senethiwekhi. Ayikuguquli okuqukethwe, amakheli omthombo/indawo, noma isikhathi samaphakethe wedatha futhi ayisebenzisi umkhawulokudonsa wembobo yokushintsha, inqolobane, noma izinsiza zokucubungula. Ngisho noma idivayisi ye-TAP ngokwayo ingasebenzi kahle (njengokuhluleka kwamandla noma ukulimala kwezingxenyekazi zekhompuyutha), izoholela kuphela ekungaphumi kwedatha embobeni yokuqapha, kuyilapho ukuxhumana kwesixhumanisi senethiwekhi sangempela kuhlala kuyinto evamile, kugwema ubungozi bokuphazamiseka kwenethiwekhi okubangelwa ukwehluleka kwamadivayisi wokuqoqa idatha.

3. Ukusekelwa Kwezixhumanisi Ezigcwele Ezimbili Nezindawo Zenethiwekhi Eziyinkimbinkimbi

Amanethiwekhi esimanje ngokuvamile asebenzisa imodi yokuxhumana eyi-full-duplex (okungukuthi, idatha ekhuphukayo nephansi komfula ingadluliswa kanyekanye). I-TAP ingathwebula ukusakazwa kwedatha kuzo zombili izinkomba zesixhumanisi se-duplex egcwele futhi ikhiphe ngezimbobo zokuqapha ezizimele, iqinisekise ukuthi idivayisi yokuhlaziya ingabuyisela ngokugcwele inqubo yokuxhumana yezindlela ezimbili. Ngaphezu kwalokho, i-TAP isekela amanani enethiwekhi ahlukahlukene (afana ne-100M, 1G, 10G, 40G, ngisho ne-100G) kanye nezinhlobo zemidiya (ipheya elisontekile, i-fiber yemodi eyodwa, i-fiber enemodi eminingi), futhi ingashintshwa ukuze ivumelane nezimo zenethiwekhi eziyinkimbinkimbi ehlukene njengezikhungo zedatha, amanethiwekhi omgogodla ayisisekelo, namanethiwekhi e-campus.

Izimo Zohlelo Lokusebenza: Ukugxila "Ekuhlaziyweni Okunembile" kanye "Nokuqapha Isixhumanisi Esibalulekile"

1. Ukuxazulula izinkinga zenethiwekhi kanye nendawo ye-Root Cause

Uma izinkinga ezinjengokulahleka kwephakethe, ukubambezeleka, i-jitter, noma ukunethezeka kohlelo lokusebenza kwenzeka kunethiwekhi, kuyadingeka ukubuyisela isimo lapho iphutha lenzeka ngokusakaza kwephakethe ledatha eliphelele. Isibonelo, uma amasistimu ayinhloko ebhizinisi ebhizinisi (njenge-ERP ne-CRM) ehlangabezana nokuvala kwesikhathi sokufinyelela kwezikhawu, izisebenzi nezokulungisa zingasebenzisa i-TAP phakathi kweseva neswishi eyinhloko ukuze ithwebule wonke amaphakethe edatha ohambo oluya nokubuya, ihlaziye ukuthi azikho yini izinkinga ezifana nokuthunyelwa kabusha kwe-TCP, ukulahlekelwa kwephakethe, ukubambezeleka kokulungiswa kwe-DNS, noma umugqa wohlelo bese udala amaphutha ngokushesha njengoba iphrothokholi ixhunyaniswa. izinkinga, impendulo yeseva enensayo, noma amaphutha okumisa i-middleware).

2. Ukusungulwa kwesisekelo sokusebenza kwenethiwekhi kanye nokuqapha okungaqondakali

Ekusebenzeni nasekulungiseni inethiwekhi, ukusungula isisekelo sokusebenza ngaphansi kwemithwalo yebhizinisi evamile (njengokusetshenziswa komkhawulokudonsa omaphakathi, ukubambezeleka kokudlulisa iphakethe ledatha, kanye nezinga lempumelelo yokusungulwa koxhumano lwe-TCP) kuyisisekelo sokuqapha okungaqondakali. I-TAP ingakwazi ukuthwebula ngokuzinzile idatha yevolumu egcwele yezixhumanisi eziyinhloko (njengaphakathi kokushintsha okuyinhloko naphakathi kwama-egress routers nama-ISP) isikhathi eside, isiza abasebenzi bomsebenzi nokunakekela ukubala izinkomba zokusebenza ezihlukahlukene futhi isungule imodeli yesisekelo esinembile. Uma kwenzeka okudidayo okulandelayo njengokwanda kwethrafikhi okungazelelwe, ukubambezeleka okungavamile, noma ukuphambana kwephrothokholi (njengezicelo ezingavamile ze-ARP nenani elikhulu lamaphakethe e-ICMP) kwenzeka, okudidayo kungatholwa ngokushesha ngokuqhathanisa nesisekelo, futhi ukungenelela okufika ngesikhathi kungenziwa.

3. Ukuhlola Ukuthobelana Nokutholwa Kosongo Ngezimfuneko Zokuphepha Eziphakeme

Ezimbonini ezinezidingo eziphezulu zokuphepha kwedatha nokuthobelana njengezezimali, izindaba zikahulumeni, namandla, kuyadingeka ukwenza ukucubungula okuphelele kwenqubo yokudlulisela idatha ebucayi noma ukuthola ngokunembile izinsongo zenethiwekhi ezingaba khona (njengokuhlaselwa kwe-APT, ukuvuza kwedatha, nokusakazwa kwekhodi enonya). Isici sokuthwebula okungenakulahlekelwa se-TAP siqinisekisa ubuqotho nokunemba kwedatha yokucwaninga, engahlangabezana nezimfuneko zemithetho nemithethonqubo efana "noMthetho Wokuphepha Kwenethiwekhi" kanye "Nomthetho Wokuphepha Kwedatha" ukuze kugcinwe idatha nokuhlolwa; ngesikhathi esifanayo, amaphakethe edatha evolumu egcwele aphinde anikeze amasampula okuhlaziya anothile ezinhlelo zokuthola usongo (njenge-IDS/IPS namadivayisi e-sandbox), esiza ukuthola imvamisa ephansi nezinsongo ezifihliwe ezifihliwe kuthrafikhi evamile (njengekhodi enonya kuthrafikhi ebethelwe kanye nokuhlasela kokungena okufihliwe njengebhizinisi elivamile).

Imikhawulo: Ukuhwebelana phakathi Kwezindleko Nokuguquguquka Kokuthunyelwa

Imikhawulo eyinhloko ye-TAP ilele ezindlekweni zayo eziphezulu zehadiwe kanye nokuguquguquka okuphansi kokuthunyelwa. Ngakolunye uhlangothi, i-TAP iyidivayisi ye-hardware ezinikele, futhi ikakhulukazi, ama-TAP asekela amanani aphezulu (afana ne-40G ne-100G) noma imidiya ye-fiber optical zibiza kakhulu kunomsebenzi we-SPAN we-software; ngakolunye uhlangothi, i-TAP idinga ukuxhunywa ngochungechunge kusixhumanisi sokuqala senethiwekhi, futhi isixhumanisi sidinga ukuphazanyiswa okwesikhashana ngesikhathi sokuphakelwa (njengokuxhuma nokukhipha izintambo zenethiwekhi noma ama-optical fibers). Kwezinye izixhumanisi ezibalulekile ezingakuvumeli ukuphazamiseka (njengezixhumanisi zomsebenzi wezezimali ezisebenza ngo-24/7), ukuphakwa kunzima, futhi izindawo zokufinyelela ze-TAP ngokuvamile zidinga ukugodlwa kusengaphambili phakathi nesigaba sokuhlela inethiwekhi.

I-SPAN: Isixazululo Esibizayo Nesiguquguqukayo "I-Multi-Port" Yokuhlanganiswa Kwedatha

I-SPAN iwumsebenzi wesofthiwe eyakhelwe kumaswishi (amanye amarutha asezingeni eliphezulu nawo ayawusekela). Umgomo wayo uwukumisa iswishi ngaphakathi ukuze iphindaphinde ithrafikhi evela embotsheni yomthombo eyodwa noma ngaphezulu (Izimbobo Zomthombo) noma umthombo wama-VLAN ukuya endaweni yokuqapha eqokiwe (Imbobo Yendawo, eyaziwa nangokuthi imbobo yesibuko) ukuze yamukelwe futhi icutshungulwe ngedivayisi yokuhlaziya. Ngokungafani ne-TAP, i-SPAN ayidingi izisetshenziswa zehadiwe ezengeziwe futhi ingabona ukuqoqwa kwedatha kuphela ngokuncika ekucushweni kwesofthiwe yeswishi.

Izici Eziyinhloko: Kugxile kokuthi "Ukusebenza Ngezindleko" kanye "Nokuvumelana nezimo"

1. Zero Izindleko Ezengeziwe Zezingxenyekazi Zekhompuyutha kanye Nokuthunyelwa Kalula

Njengoba i-SPAN iwumsebenzi owakhelwe ku-firmware yokushintsha, asikho isidingo sokuthenga amadivayisi ehadiwe azinikele. Ukuqoqwa kwedatha kungenziwa ngokushesha kuphela ngokuhlela nge-CLI (Command Line Interface) noma isikhombimsebenzisi sokuphatha iwebhu (njengokucacisa imbobo yomthombo, imbobo yokuqapha, kanye nesiqondiso sesibuko (esingenayo, esiphumayo, noma esikabili)). Lesi sici "sezindleko zehadiwe ezingenalutho" senza kube ukukhetha okuhle kwezimo ezinesabelomali esilinganiselwe noma izidingo zokuqapha zesikhashana (njengokuhlolwa kohlelo lokusebenza lwesikhashana kanye nokuxazulula izinkinga zesikhashana).

2. Ukusekelwa kwe-Multi-Source Port / Multi-VLAN Traffic Aggregation

Inzuzo enkulu ye-SPAN ukuthi ingakwazi ukuphindaphinda ithrafikhi evela ezimbobeni eziningi zemithombo (njengamachweba abasebenzisi okushintsha kwezendlalelo eziningi zokufinyelela) noma ama-VLAN amaningi aye endaweni eyodwa yokuqapha ngesikhathi esisodwa. Isibonelo, uma ukusebenza kwebhizinisi nokunakekela izisebenzi zidinga ukuqapha ithrafikhi yamatheminali ezisebenzi eminyangweni eminingi (okuhambisana nama-VLAN ahlukene) abafinyelela ku-inthanethi, asikho isidingo sokuphakela amadivaysi okuqoqa ahlukene ekuphumeni kwe-VLAN ngayinye. Ngokuhlanganisa ithrafikhi yalawa ma-VLAN endaweni eyodwa yokuqapha nge-SPAN, ukuhlaziya okumaphakathi kungenziwa, okuthuthukisa kakhulu ukuguquguquka nokusebenza kahle kokuqoqwa kwedatha.

3. Asikho Isidingo Sokuphazamisa Isixhumanisi Senethiwekhi Yokuqala

Ihlukile kuchungechunge lokuphakelwa kwe-TAP, kokubili imbobo yomthombo kanye nembobo yokuqapha ye-SPAN kuyizimbobo ezivamile zeswishi. Phakathi nenqubo yokumisa, asikho isidingo sokuxhuma nokukhipha izintambo zenethiwekhi zesixhumanisi sokuqala, futhi awukho umthelela ekudlulisweni kwethrafikhi yokuqala. Ngisho noma kudingekile ukulungisa imbobo yomthombo noma ukukhubaza umsebenzi we-SPAN kamuva, kungenziwa kuphela ngokushintsha ukucushwa ngomugqa womyalo, okulula ukuwusebenza futhi ongenakho ukuphazamiseka nezinsizakalo zenethiwekhi.

Izimo zohlelo lokusebenza: Ukugxila "Ekugadweni Kwezindleko Eziphansi" kanye "Nokuhlaziya Okumaphakathi"

1. Ukuqapha Ukuziphatha Kwabasebenzisi Kumanethiwekhi Ekhampasi / Amanethiwekhi Ebhizinisi

Kumanethiwekhi ekhampasi noma amanethiwekhi ezinkampani, abalawuli bavame ukudinga ukuqapha ukuthi amatheminali ezisebenzi anokufinyelela okungekho emthethweni (njengokufinyelela kumawebhusayithi angekho emthethweni kanye nokulanda isofthiwe ebunjiwe) nokuthi ingabe kunenani elikhulu lokulandwa kwe-P2P noma imifudlana yevidiyo ethatha umkhawulokudonsa. Ngokuhlanganisa ithrafikhi yamachweba wabasebenzisi bokushintshwa kwesendlalelo sokufinyelela kuchweba lokuqapha nge-SPAN, kuhlanganiswe nesofthiwe yokuhlaziya ithrafikhi (njenge-Wireshark ne-NetFlow Analyzer), ukuqapha kwesikhathi sangempela sokuziphatha kwabasebenzisi kanye nezibalo zomsebenzi womkhawulokudonsa kungabonakala ngaphandle kokutshalwa kwezimali okwengeziwe kwezingxenyekazi zekhompyutha.

2. Ukuxazulula Izinkinga Zesikhashana kanye Nokuhlolwa Kwesicelo Sesikhathi Esifushane

Uma kwenzeka iphutha lesikhashana noma ngezikhathi ezithile kunethiwekhi, noma uma kudingekile ukwenza ukuhlolwa kwethrafikhi ohlelweni olusanda kufakwa (njengesistimu ye-OA yangaphakathi kanye nesistimu yenkomfa ngevidiyo), i-SPAN ingasetshenziswa ukwakha ngokushesha indawo yokuqoqa idatha. Isibonelo, uma umnyango ubika ukubanda okuvama kweqhwa ezingqungqutheleni zevidiyo, izisebenzi ezisebenzayo nezokulungisa zingamisa okwesikhashana i-SPAN ukuze ifane nethrafikhi yechweba lapho iseva yenkomfa yevidiyo itholakala embobeni yokuqapha. Ngokuhlaziya ukubambezeleka kwephakethe ledatha, izinga lokulahlekelwa kwephakethe, kanye nomsebenzi womkhawulokudonsa, kunganqunywa ukuthi iphutha libangelwa umkhawulokudonsa wenethiwekhi onganele noma ukulahlekelwa kwephakethe ledatha. Ngemuva kokuthi ukuxazulula inkinga sekuqediwe, ukucushwa kwe-SPAN kungakhutshazwa ngaphandle kokuphazamisa ukusebenza kwenethiwekhi okulandelayo.

3. Izibalo Zethrafikhi Nokuhlolwa Okulula Kumanethiwekhi Amancane Naphakathi

Kumanethiwekhi amancane naphakathi nendawo (njengamabhizinisi amancane namalabhorethri ekhampasi), uma imfuneko yobuqotho bokuqoqwa kwedatha ingekho phezulu, futhi izibalo zethrafikhi ezilula kuphela (ezifana nokusetshenziswa komkhawulokudonsa wechweba ngalinye nengxenye yethrafikhi yezinhlelo zokusebenza ze-Top N) noma ukuhlola okuyisisekelo kokuthobela (njengokurekhoda amagama esizinda sewebhusayithi afinyelelwe abasebenzisi) kuyadingeka, i-SPAN ingahlangabezana ngokugcwele nezidingo. Izici zayo ezingabizi kakhulu nezisebenziseka kalula zenza kube ukukhetha okubiza izindleko zezimo ezinjalo.

Imikhawulo: Amaphutha Kubuqotho Bedatha kanye Nomphumela Wokusebenza

1. Ingozi Yokulahlekelwa Kwephakethe Ledatha kanye Nokuthwebula Okungaphelele

Ukuphindwaphindwa kwamaphakethe wedatha nge-SPAN kuncike ku-CPU nezisetshenziswa zenqolobane yeswishi. Uma ithrafikhi yembobo yomthombo isiphezulu kakhulu (okufana nokudlula umthamo wenqolobane yeswishi) noma iswishi icubungula inombolo enkulu yemisebenzi yokudlulisela ngesikhathi esifanayo, i-CPU izobeka kuqala ukuze iqinisekise ukudluliselwa kwethrafikhi yoqobo, futhi yehlise noma imise ukuphindaphinda kwethrafikhi ye-SPAN, okuholela ekulahlekeni kwephakethe embobeni yokuqapha. Ukwengeza, amanye amaswishi anemikhawulo esilinganisweni sokubukisa se-SPAN (njengokusekela kuphela ukuphindaphinda okungu-80% wethrafikhi) noma awasekeli ukuphindaphinda okuphelele kwamaphakethe edatha anosayizi omkhulu (njenge-Jumbo Frames). Konke lokhu kuzoholela kudatha eqoqiwe engaphelele futhi kuthinte ukunemba kwemiphumela yokuhlaziya elandelayo.

2. Ukusebenzisa Izinsiza Zokushintsha kanye Nomthelela Ongaba Khona Ekusebenzeni Kwenethiwekhi

Nakuba i-SPAN ingasiphazamisi ngokuqondile isixhumanisi sangempela, uma inombolo yezimbobo zomthombo inkulu noma ithrafikhi isinda, inqubo yokuphindaphinda iphakethe ledatha izosebenzisa izinsiza ze-CPU kanye nomkhawulokudonsa wangaphakathi weswishi. Isibonelo, uma ithrafikhi yezimbobo eziningi ze-10G iboniswa embobeni yokuqapha engu-10G, lapho isamba sethrafikhi sezimbobo zomthombo sidlula u-10G, ngeke nje kuphela ukuthi imbobo yokuqapha izohlupheka ngenxa yokulahlekelwa kwephakethe ngenxa yomkhawulokudonsa onganele, kodwa ukusetshenziswa kwe-CPU kweswishi kungase kukhuphuke kakhulu, ngaleyo ndlela kuthinte ukusebenza kahle kokudlulisela iphakethe ledatha kwezinye izimbobo futhi kubangele ngisho nokwehla kokusebenza kweswishi kukonke.

3. Ukuncika Komsebenzi Kumodeli Yokushintsha kanye Nokuhambisana Okulinganiselwe

Izinga losekelo lomsebenzi we-SPAN liyahluka kakhulu phakathi kwamaswishi abakhiqizi abahlukene namamodeli. Isibonelo, amaswishi asezingeni eliphansi angasekela kuphela imbobo yokuqapha eyodwa futhi awasekeli isibuko se-VLAN noma isibuko sethrafikhi esiyiduplex egcwele; umsebenzi we-SPAN wamanye amaswishi unomkhawulo "wokwenza isibuko sendlela eyodwa" (okungukuthi, ukwenza isibuko kuphela ithrafikhi yangaphakathi noma ephumayo, futhi ayikwazi ukubukisa ithrafikhi eqondiswa kabili ngesikhathi esifanayo); ngaphezu kwalokho, i-SPAN-switch cross (njengokwenza isibuko ithrafikhi yembobo yeswishi A ukuya embotsheni yokuqapha yeswishi B) idinga ukuncika kuzivumelwano ezithile (ezifana ne-Cisco's RSPAN kanye ne-Huawei's ERSPAN), enokucushwa okuyinkimbinkimbi nokuhambisana okuphansi, futhi okunzima ukuzivumelanisa nemvelo yokuxhumana okuxubile kwabakhiqizi abaningi.

Ukuqhathaniswa Komehluko Oyinhloko kanye Neziphakamiso Zokukhetha phakathi kwe-TAP ne-SPAN

I-Core Difference Comparison

Ukuze sibonise ngokucacile umehluko phakathi kwakho kokubili, siyakuqhathanisa kusukela kubukhulu bezici zobuchwepheshe, umthelela wokusebenza, izindleko, nezimo ezisebenzayo:

Iziphakamiso Zokukhetha: "Ukufanisa Okunembile" Ngokusekelwe Ezimfuneko Zesimo

1. Izimo Lapho I-TAP Ikhethwa khona

○Ukuqapha izixhumanisi zebhizinisi eziwumongo (njengamaswishi ayinhloko esikhungo sedatha nezixhumanisi zerutha ye-egress), okudinga ukuqinisekisa ubuqotho bokuthwebula idatha;

○Indawo yezimpande zephutha lenethiwekhi (efana nokudluliswa kabusha kwe-TCP kanye ne-application lag), edinga ukuhlaziywa okunembile okusekelwe kumaphakethe wedatha wevolumu egcwele;

○Izimboni ezinokuvikeleka okuphezulu nezimfuneko zokuthobela (ezezimali, izindaba zikahulumeni, amandla), ezidinga ukuhlangabezana nobuqotho nokungaphazamisi idatha yocwaningomabhuku;

○Izimo zenethiwekhi ezinezinga eliphezulu (i-10G nangaphezulu) noma izimo ezinamaphakethe edatha anosayizi omkhulu, ezidinga ukugwema ukulahleka kwephakethe ku-SPAN.

2. Izimo Lapho I-SPAN Ikhethwa khona

○Amanethiwekhi amancane naphakathi nendawo anesabelomali esilinganiselwe, noma izimo ezidinga kuphela izibalo zethrafikhi ezilula (njengomsebenzi womkhawulokudonsa kanye nezinhlelo zokusebenza eziphezulu);

○Ukuxazulula inkinga yesikhashana noma ukuhlolwa kohlelo lokusebenza lwesikhashana (njengokuhlola ukuqaliswa kwesistimu entsha), okudinga ukuthunyelwa okusheshayo ngaphandle komsebenzi wesikhathi eside wensiza;

○Ukuqapha okubekwe endaweni eyodwa kwamachweba anemithombo eminingi/ama-VLAN amaningi (njengokuqapha ukuziphatha kwabasebenzisi benethiwekhi yekhampasi), okudinga ukuhlanganiswa kwethrafikhi okuguquguqukayo;

○Ukuqapha izixhumanisi ezingezona ezibalulekile (njengamachweba wabasebenzisi bokushintsha kwesendlalelo sokufinyelela), okunezidingo eziphansi zobuqotho bokuthwebula idatha.

3. Izimo Zokusebenzisa Ezihlanganisiwe

Kwezinye izindawo zenethiwekhi eziyinkimbinkimbi, indlela yokuphakelwa eyingxube ye-"TAP + SPAN" nayo ingatholwa. Isibonelo, sebenzisa i-TAP kuzixhumanisi eziyinhloko zesikhungo sedatha ukuze uqinisekise ukuthwebula idatha yevolumu ephelele ukuze kuxazululwe izinkinga nokuhlolwa kokuvikela; lungisa i-SPAN kumaswishi esendlalelo sokufinyelela noma esendlalelo sokuhlanganisa ukuze uhlanganise ithrafikhi yabasebenzisi ehlakazekile yokuhlaziywa kokuziphatha nezibalo zomkhawulokudonsa. Lokhu akuhlangabezani kuphela nezidingo zokuqapha ezinembile zezixhumanisi ezibalulekile kodwa futhi kunciphisa izindleko zokuthunyelwa zizonke.

Ngakho-ke, njengobuchwepheshe obubili obuyinhloko bokutholwa kwedatha yenethiwekhi, i-TAP ne-SPAN ayinakho ngokuphelele "izinto ezinhle noma ezimbi" kodwa kuphela "umehluko esimweni sokujwayela". I-TAP igxile "ekuthwebuleni okungenakulahlekelwa" kanye "nokuthembeka okuzinzile", futhi ifanele izimo ezibalulekile ezinezidingo eziphezulu zobuqotho bedatha nokuzinza kwenethiwekhi, kodwa inezindleko eziphezulu kanye nokuguquguquka okuphansi kokuthunyelwa; I-SPAN inezinzuzo "zokuthi azikho izindleko" kanye "nokuvumelana nezimo nokuba lula", futhi ifanele izimo ezingabizi kakhulu, zesikhashana, noma ezingabalulekile, kodwa inezingozi zokulahleka kwedatha nomthelela wokusebenza.

Ekusebenzeni nasekugcinweni kwenethiwekhi kwangempela, onjiniyela benethiwekhi badinga ukukhetha ikhambi lobuchwepheshe elifanele kakhulu ngokusekelwe ezidingweni zabo zebhizinisi (njengokuthi ngabe liyisixhumanisi esiyinhloko nokuthi ngabe kudingeka yini ukuhlaziywa okunembile), izindleko zesabelomali, isikali senethiwekhi, kanye nezidingo zokuthobela imithetho. Ngesikhathi esifanayo, ngokuthuthukiswa kwamanani enethiwekhi (njenge-25G, 100G, kanye ne-400G) kanye nokuthuthukiswa kwezidingo zokuphepha kwenethiwekhi, ubuchwepheshe be-TAP buhlala buthuthuka (njengokusekela ukuhlukaniswa kwethrafikhi okuhlakaniphile kanye nokuhlanganiswa kwamachweba amaningi), futhi abakhiqizi beswishi nabo baqhubeka nokwenza ngcono umsebenzi we-SPAN (njengokuthuthukisa umthamo we-cache kanye nokusekela i-mirroring engenakulahlekelwa). Esikhathini esizayo, ubuchwepheshe obubili buzoqhubeka nokudlala indima yabo emikhakheni yabo futhi buhlinzeke ngokusekelwa kwedatha okusebenzayo nokunembile kokuphathwa kwenethiwekhi.