Ukuhlaziywa Okujulile Nokuqhathaniswa Kokusetshenziswa Kwezindlela Zokuthola Idatha Yethrafikhi Yenethiwekhi ye-TAP kanye ne-SPAN

Emikhakheni yokusebenza nokugcinwa kwenethiwekhi, ukuxazulula izinkinga, kanye nokuhlaziywa kokuphepha, ukuthola imifudlana yedatha yenethiwekhi ngokunembile nangokuphumelelayo kuyisisekelo sokwenza imisebenzi eyahlukahlukene. Njengoba ubuchwepheshe obubili obujwayelekile bokuthola idatha yenethiwekhi, i-TAP (Test Access Point) kanye ne-SPAN (Switched Port Analyzer, evame ukubizwa ngokuthi i-port mirroring) zidlala indima ebalulekile ezimweni ezahlukene ngenxa yezici zazo zobuchwepheshe ezihlukile. Ukuqonda okujulile ngezici zazo, izinzuzo, imikhawulo, kanye nezimo ezifanele kubalulekile konjiniyela benethiwekhi ukwakha izinhlelo zokuqoqa idatha ezifanele futhi bathuthukise ukusebenza kahle kokuphathwa kwenethiwekhi.

I-TAP: Isixazululo Esiphelele Nesibonakalayo Sokubamba Idatha "Engenakulahlekelwa"

I-TAP iyidivayisi yehadiwe esebenza kungqimba lokuxhumana ngokomzimba noma kwedatha. Umsebenzi wayo oyinhloko ukufeza ukuphindaphindwa okungu-100% nokuthwebula imifudlana yedatha yenethiwekhi ngaphandle kokuphazamisa ithrafikhi yenethiwekhi yokuqala. Ngokuxhunywa ochungechungeni kusixhumanisi senethiwekhi (isb., phakathi kweswishi neseva, noma i-router neswishi), iphinda wonke amaphakethe edatha angenhla naphansi adlula kusixhumanisi esiya echwebeni lokuqapha kusetshenziswa izindlela "zokuhlukanisa okubonakalayo" noma "zokuhlukanisa ithrafikhi", ukuze kucutshungulwe okulandelayo ngamadivayisi okuhlaziya (njengezihlaziyi zenethiwekhi kanye ne-Intrusion Detection Systems - IDS).

Izici Eziyinhloko: Kugxile "Ebuqothweni" kanye "Nokuzinza"

1. Ukuthwebula Iphakethe Ledatha Eliyi-100% Ngaphandle Kwengozi Yokulahlekelwa

Lena inzuzo evelele kakhulu ye-TAP. Njengoba i-TAP isebenza kungqimba olungokoqobo futhi iphinda ngqo izimpawu zikagesi noma ze-optical kusixhumanisi, ayithembeli ezinsizeni ze-CPU zeswishi zokudlulisa noma ukukopisha iphakethe ledatha. Ngakho-ke, kungakhathaliseki ukuthi ithrafikhi yenethiwekhi isezingeni eliphezulu noma iqukethe amaphakethe edatha amakhulu (njenge-Jumbo Frames enenani elikhulu le-MTU), wonke amaphakethe edatha angabanjwa ngokuphelele ngaphandle kokulahleka kwephakethe okubangelwa izinsiza zokushintsha ezinganele. Lesi sici "sokubamba okungenakulahlekelwa" senza kube yisisombululo esithandwayo sezimo ezidinga ukwesekwa kwedatha okunembile (njengendawo yenkinga yempande yephutha kanye nokuhlaziywa kwesisekelo sokusebenza kwenethiwekhi).

2. Akukho Mthelela Ekusebenzeni Kwenethiwekhi Yasekuqaleni

Imodi yokusebenza ye-TAP iqinisekisa ukuthi ayibangeli ukuphazamiseka esixhumanisini sokuqala senethiwekhi. Ayishintshi okuqukethwe, amakheli omthombo/indawo okuya kuyo, noma isikhathi samaphakethe edatha futhi ayithathi umkhawulokudonsa wembobo yeswishi, i-cache, noma izinsiza zokucubungula. Ngisho noma idivayisi ye-TAP ngokwayo ingasebenzi kahle (njengokuhluleka kwamandla noma ukulimala kwehadiwe), ngeke iholele kuphela ekungaphumeni kwedatha kusuka echwebeni lokuqapha, kuyilapho ukuxhumana kwesixhumanisi sokuqala senethiwekhi kuhlala kujwayelekile, kugwema ingozi yokuphazamiseka kwenethiwekhi okubangelwa ukwehluleka kwamadivayisi okuqoqwa kwedatha.

3. Ukusekelwa kwezixhumanisi ze-Full-Duplex kanye nezindawo zenethiwekhi eziyinkimbinkimbi

Amanethiwekhi anamuhla asebenzisa kakhulu imodi yokuxhumana egcwele kabili (okungukuthi, idatha ephezulu nephansi ingadluliselwa ngasikhathi sinye). I-TAP ingabamba imifudlana yedatha kuzo zombili izinhlangothi zesixhumanisi esigcwele kabili bese iyikhipha ngamachweba okuqapha azimele, iqinisekise ukuthi idivayisi yokuhlaziya ingabuyisela ngokuphelele inqubo yokuxhumana enezindlela ezimbili. Ngaphezu kwalokho, i-TAP isekela amazinga ahlukahlukene enethiwekhi (njenge-100M, 1G, 10G, 40G, ngisho ne-100G) kanye nezinhlobo zemidiya (i-twisted pair, i-single-mode fiber, i-multi-mode fiber), futhi ingashintshwa ukuze ivumelane nezimo zenethiwekhi ezinobunzima obuhlukahlukene njengezikhungo zedatha, amanethiwekhi ayisisekelo, kanye namanethiwekhi ekhampasi.

Izimo Zokusebenza: Ukugxila "Ekuhlaziyweni Okunembile" kanye "Nokuqapha Izixhumanisi Eziyinhloko"

1. Ukuxazulula Izinkinga Zenethiwekhi kanye Nendawo Yembangela Eyinhloko

Uma izinkinga ezifana nokulahleka kwephakethe, ukubambezeleka, ukushaqeka, noma ukubambezeleka kohlelo lokusebenza kuvela kunethiwekhi, kubalulekile ukubuyisela isimo lapho iphutha lenzeke khona ngokusakazwa okuphelele kwephakethe ledatha. Isibonelo, uma izinhlelo zebhizinisi eziyinhloko zebhizinisi (njenge-ERP ne-CRM) zithola isikhathi sokuphelelwa yisikhathi sokufinyelela, abasebenzi bokusebenza nokulungisa bangathumela i-TAP phakathi kweseva kanye neswishi eyinhloko ukuze babambe wonke amaphakethe edatha ajikelezayo, bahlaziye ukuthi ngabe kunezinkinga ezifana nokudluliselwa kabusha kwe-TCP, ukulahleka kwephakethe, ukubambezeleka kokulungiswa kwe-DNS, noma amaphutha ephrothokholi yesigaba sohlelo lokusebenza, futhi ngaleyo ndlela bathole ngokushesha imbangela yephutha (njengezinkinga zekhwalithi yesixhumanisi, impendulo yeseva ehamba kancane, noma amaphutha okucushwa kwe-middleware).

2. Ukusungulwa Kwesisekelo Sokusebenza Kwenethiwekhi kanye Nokuqapha Okungavamile

Ekusebenzeni nasekugcinweni kwenethiwekhi, ukusungula isisekelo sokusebenza ngaphansi kwemithwalo yebhizinisi evamile (njengokusetshenziswa kwe-bandwidth okujwayelekile, ukubambezeleka kokudluliselwa kwephakethe ledatha, kanye nesilinganiso sempumelelo sokusungulwa kokuxhumeka kwe-TCP) kuyisisekelo sokuqapha ukungalingani. I-TAP ingakwazi ukubamba idatha egcwele yezixhumanisi ezibalulekile (njengokuphakathi kokushintshana okuyinhloko naphakathi kwama-router okuphuma kanye nama-ISP) isikhathi eside, isiza abasebenzi bokusebenza nokulungisa ukubala izinkomba zokusebenza ezahlukahlukene futhi basungule imodeli eyisisekelo enembile. Lapho ukungalingani okulandelayo njengokwanda kwethrafikhi okungazelelwe, ukubambezeleka okungavamile, noma ukungalingani kwephrothokholi (njengezicelo ze-ARP ezingavamile kanye nenani elikhulu lamaphakethe e-ICMP) kwenzeka, ukungalingani kungatholakala ngokushesha ngokuqhathanisa nesisekelo, futhi ukungenelela okufika ngesikhathi kungenziwa.

3. Ukuhlolwa Kokuhambisana Nomthetho kanye Nokutholwa Kwezinsongo Ezinezidingo Eziphezulu Zokuphepha

Kumamboni anezidingo eziphezulu zokuphepha kwedatha nokuthobela imithetho njengezezimali, izindaba zikahulumeni, kanye namandla, kuyadingeka ukwenza ukuhlolwa kwenqubo ephelele yenqubo yokudlulisa idatha ebucayi noma ukuthola ngokunembile izinsongo ezingaba khona zenethiwekhi (njengokuhlaselwa kwe-APT, ukuvuza kwedatha, kanye nokusakazwa kwekhodi enonya). Isici sokubamba esingenakulahlekelwa se-TAP siqinisekisa ubuqotho nokunemba kwedatha yokuhlolwa, engahlangabezana nezidingo zemithetho nemigomo efana "noMthetho Wokuphepha Kwenethiwekhi" kanye "noMthetho Wokuphepha Kwedatha" wokugcinwa kwedatha nokuhlolwa; ngesikhathi esifanayo, amaphakethe edatha egcwele ahlinzeka ngamasampula okuhlaziya acebile ezinhlelo zokuthola izinsongo (njenge-IDS/IPS kanye namadivayisi e-sandbox), okusiza ukuthola izinsongo eziphansi nezifihliwe ezifihliwe kuthrafikhi evamile (njengekhodi enonya kuthrafikhi ebethelwe kanye nokuhlaselwa kokungena okufihliwe njengebhizinisi elivamile).

Imikhawulo: Ukuhwebelana phakathi kwezindleko kanye nokuguquguquka kokusetshenziswa

Imikhawulo eyinhloko ye-TAP isekubizeni kwayo okuphezulu kwehadiwe kanye nokuguquguquka okuphansi kokufakwa. Ngakolunye uhlangothi, i-TAP iyidivayisi yehadiwe ezinikele, futhi ikakhulukazi, ama-TAP asekela amazinga aphezulu (njenge-40G ne-100G) noma imidiya ye-optical fiber ibiza kakhulu kunomsebenzi we-SPAN osuselwe kusofthiwe; ngakolunye uhlangothi, i-TAP idinga ukuxhunywa ngochungechunge kusixhumanisi sokuqala senethiwekhi, futhi isixhumanisi sidinga ukuphazanyiswa okwesikhashana ngesikhathi sokufakwa (njengokuxhuma nokukhipha izintambo zenethiwekhi noma imicu ye-optical). Kwezinye izixhumanisi eziyinhloko ezingavumeli ukuphazamiseka (njengezixhumanisi zokuthengiselana kwezezimali ezisebenza amahora angama-24 ngosuku, izinsuku eziyi-7 ngesonto), ukuthunyelwa kunzima, futhi izindawo zokufinyelela ze-TAP ngokuvamile zidinga ukubhukwa kusenesikhathi ngesikhathi sesigaba sokuhlela inethiwekhi.

I-SPAN: Isixazululo Sokuhlanganisa Idatha "Esisebenza Kahle Futhi Esiguquguqukayo"

I-SPAN iwumsebenzi wesofthiwe owakhelwe kumaswishi (amanye ama-router aphezulu nawo ayawusekela). Umgomo wayo ukumisa iswishi ngaphakathi ukuze iphindaphinde ithrafikhi kusuka kumachweba omthombo owodwa noma ngaphezulu (amachweba omthombo) noma ama-VLAN omthombo aye echwebeni lokuqapha eliqokiwe (i-Destination Port, eyaziwa nangokuthi ichweba lesibuko) ukuze yamukelwe futhi icutshungulwe yidivayisi yokuhlaziya. Ngokungafani ne-TAP, i-SPAN ayidingi amadivayisi e-hardware engeziwe futhi ingaqoqa idatha kuphela ngokuthembela ekucushweni kwesofthiwe yeswishi.

Izici Eziyinhloko: Kugxile "Ekusebenziseni Izindleko Ngokuphumelelayo" kanye "Nokuguquguquka"

1. Akukho Zindleko Ezingeziwe Zehadiwe kanye Nokusetshenziswa Okulula

Njengoba i-SPAN iwumsebenzi owakhelwe ku-firmware yokushintsha, asikho isidingo sokuthenga amadivayisi ehadiwe azinikele. Ukuqoqwa kwedatha kungenziwa ngokushesha kuphela ngokuhlela nge-CLI (Command Line Interface) noma isikhombimsebenzisi sokuphatha iwebhu (njengokucacisa imbobo yomthombo, imbobo yokuqapha, kanye nesiqondiso sesibuko (esingenayo, esiphumayo, noma esikabili)). Lesi sici "sezindleko zehadiwe ezingenalutho" senza kube ukukhetha okuhle kwezimo ezinesabelomali esilinganiselwe noma izidingo zokuqapha zesikhashana (njengokuhlolwa kohlelo lokusebenza lwesikhashana kanye nokuxazulula izinkinga zesikhashana).

2. Ukusekelwa kwe-Multi-Source Port / Multi-VLAN Traffic Aggregation

Inzuzo enkulu ye-SPAN ukuthi ingaphinda ithrafikhi kusuka kumachweba amaningi emithombo (njengezimbobo zomsebenzisi zamaswishi amaningi okufinyelela) noma ama-VLAN amaningi aye echwebeni elifanayo lokuqapha ngesikhathi esisodwa. Isibonelo, uma abasebenzi bokusebenza nokulungisa ibhizinisi bedinga ukuqapha ithrafikhi yamatheminali abasebenzi eminyangweni eminingi (ehambisana nama-VLAN ahlukene) befinyelela i-inthanethi, asikho isidingo sokufaka amadivayisi okuqoqa ahlukene ekuphumeni kwe-VLAN ngayinye. Ngokuhlanganisa ithrafikhi yala ma-VLAN aye echwebeni elilodwa lokuqapha nge-SPAN, ukuhlaziywa okuhlanganisiwe kungabonakala, kuthuthukise kakhulu ukuguquguquka nokusebenza kahle kokuqoqwa kwedatha.

3. Asikho Isidingo Sokuphazamisa Isixhumanisi Senethiwekhi Yokuqala

Ngokungafani nokusetshenziswa kochungechunge lwe-TAP, kokubili imbobo yomthombo kanye nembobo yokuqapha ye-SPAN kuyimbobo evamile yeswishi. Ngesikhathi senqubo yokucushwa, asikho isidingo sokuxhuma nokukhumula izintambo zenethiwekhi zesixhumanisi sokuqala, futhi akukho mthelela ekudlulisweni kwethrafikhi yokuqala. Ngisho noma kudingeka ukulungisa imbobo yomthombo noma ukukhubaza umsebenzi we-SPAN kamuva, kungenziwa kuphela ngokushintsha ukucushwa ngomugqa womyalo, okulula ukuwusebenzisa futhi ongenazo iziphazamiso nezinsizakalo zenethiwekhi.

Izimo Zokusebenza: Ukugxila "Ekuqapheni Okuphansi" kanye "Nokuhlaziywa Okuphakathi"

1. Ukuqapha Ukuziphatha Kwabasebenzisi Kumanethiwekhi Ekhampasi / Amanethiwekhi Ebhizinisi

Kumanethiwekhi ekhampasi noma amanethiwekhi ebhizinisi, abaphathi bavame ukudinga ukuqapha ukuthi ama-terminal abasebenzi anokufinyelela okungekho emthethweni (njengokufinyelela amawebhusayithi angekho emthethweni nokulanda isofthiwe ephangiwe) nokuthi ngabe kunenani elikhulu lokulandwa kwe-P2P noma ukusakazwa kwamavidiyo okuthatha i-bandwidth. Ngokuhlanganisa ithrafikhi yamachweba abasebenzisi okushintsha kwe-access-layer kuya echwebeni lokuqapha nge-SPAN, kuhlanganiswe nesofthiwe yokuhlaziya ithrafikhi (njenge-Wireshark kanye ne-NetFlow Analyzer), ukuqapha ukuziphatha komsebenzisi ngesikhathi sangempela kanye nezibalo zomsebenzi we-bandwidth kungafezwa ngaphandle kokutshalwa kwezimali okwengeziwe kwehadiwe.

2. Ukuxazulula Izinkinga Zesikhashana kanye Nokuhlolwa Kwesicelo Sesikhathi Esifushane

Uma kwenzeka amaphutha esikhashana nangokwesikhashana kunethiwekhi, noma uma kudingeka ukwenza ukuhlolwa kwethrafikhi kuhlelo lokusebenza olusha olusetshenzisiwe (njengesistimu yangaphakathi ye-OA kanye nesistimu yemihlangano yevidiyo), i-SPAN ingasetshenziswa ukwakha ngokushesha indawo yokuqoqwa kwedatha. Isibonelo, uma umnyango ubika ukumiswa okuvamile emihlanganweni yevidiyo, abasebenzi bokusebenza nokulungisa bangalungiselela i-SPAN okwesikhashana ukuze ifane nethrafikhi yechweba lapho iseva yengqungquthela yevidiyo itholakala khona echwebeni lokuqapha. Ngokuhlaziya ukubambezeleka kwephakethe ledatha, izinga lokulahleka kwephakethe, kanye nokusebenza kwe-bandwidth, kunganqunywa ukuthi iphutha libangelwa yi-bandwidth enganele yenethiwekhi noma ukulahleka kwephakethe ledatha. Ngemva kokuthi ukuxazulula izinkinga sekuqediwe, ukucushwa kwe-SPAN kungakhutshazwa ngaphandle kokuthinta imisebenzi yenethiwekhi elandelayo.

3. Izibalo Zethrafikhi Nokuhlolwa Okulula Kumanethiwekhi Amancane Naphakathi

Kumanethiwekhi amancane naphakathi nendawo (njengamabhizinisi amancane nama-laboratory asekhempasini), uma isidingo sobuqotho bokuqoqwa kwedatha singephezulu, futhi kudingeka izibalo zethrafikhi ezilula kuphela (njengokusetshenziswa komkhawulokudonsa we-port ngayinye kanye nengxenye yethrafikhi yezinhlelo zokusebenza ze-Top N) noma ukuhlolwa kokuhambisana okuyisisekelo (njengokurekhoda amagama ezizinda zewebhusayithi afinyelelwe ngabasebenzisi), i-SPAN ingahlangabezana ngokugcwele nezidingo. Izici zayo ezishibhile nezilula ukuzisebenzisa zenza kube ukukhetha okungabizi kakhulu kwezimo ezinjalo.

Imikhawulo: Amaphutha Ekuthembekeni Kwedatha kanye Nomthelela Wokusebenza

1. Ingozi Yokulahleka Kwephakethe Ledatha Nokubanjwa Okungaphelele

Ukuphindaphindwa kwamaphakethe edatha yi-SPAN kuncike ku-CPU kanye nezinsiza ze-cache zeswishi. Uma ithrafikhi yechweba lomthombo isezingeni eliphezulu (njengokudlula umthamo we-cache yeswishi) noma iswishi icubungula inani elikhulu lemisebenzi yokudlulisa ngesikhathi esisodwa, i-CPU izobeka phambili ukuqinisekisa ukudluliswa kwethrafikhi yokuqala, futhi inciphise noma imise ukuphindaphindwa kwethrafikhi ye-SPAN, okuholela ekulahlekelweni kwamaphakethe echwebeni lokuqapha. Ngaphezu kwalokho, amanye amaswishi anemikhawulo kusilinganiso sokubukisa se-SPAN (njengokusekela kuphela ukuphindaphindwa kwama-80% wethrafikhi) noma awasekeli ukuphindaphindwa okuphelele kwamaphakethe edatha amakhulu (njenge-Jumbo Frames). Konke lokhu kuzoholela kudatha eqoqwe engaphelele futhi kuthinte ukunemba kwemiphumela yokuhlaziya elandelayo.

2. Ukusebenzisa Izinsiza Zokushintsha kanye Nomthelela Ongaba Khona Ekusebenzeni Kwenethiwekhi

Nakuba i-SPAN ingaphazamisi ngokuqondile isixhumanisi sokuqala, lapho inani lamachweba omthombo likhulu noma ithrafikhi inzima, inqubo yokuphindaphinda iphakethe ledatha izothatha izinsiza ze-CPU kanye nomkhawulokudonsa wangaphakathi weswishi. Isibonelo, uma ithrafikhi yamachweba amaningi e-10G ifaniswa nechweba lokuqapha le-10G, lapho ithrafikhi iyonke yamachweba omthombo idlula i-10G, hhayi nje kuphela ukuthi ichweba lokuqapha lizolahlekelwa yiphakethe ngenxa yomkhawulokudonsa onganele, kodwa ukusetshenziswa kwe-CPU kweswishi nakho kunganda kakhulu, ngaleyo ndlela kuthinte ukusebenza kahle kokudlulisa iphakethe ledatha kwamanye amachweba futhi kubangele ngisho nokwehla kokusebenza kweswishi iyonke.

3. Ukuncika Komsebenzi Kumodeli Yokushintsha kanye Nokuhambisana Okulinganiselwe

Izinga lokusekelwa komsebenzi we-SPAN liyahlukahluka kakhulu phakathi kokushintsha kwabakhiqizi namamodeli ahlukene. Isibonelo, ukushintsha okuphansi kungasekela imbobo eyodwa yokuqapha futhi akusekeli ukulinganisa kwe-VLAN noma ukulinganisa kwethrafikhi okugcwele kabili; umsebenzi we-SPAN wamanye amaswishi unomkhawulo "wokulinganisa ngendlela eyodwa" (okungukuthi, ukulinganisa ithrafikhi engenayo noma ephumayo kuphela, futhi awukwazi ukulinganisa ithrafikhi yezinhlangothi ezimbili ngesikhathi esisodwa); ngaphezu kwalokho, i-SPAN ye-cross-switch (njengokulinganisa ithrafikhi yembobo yeswishi A kuya embobeni yokuqapha yeswishi B) idinga ukuthembela kumaphrothokholi athile (njenge-RSPAN ye-Cisco kanye ne-ERSPAN ye-Huawei), enokulungiswa okuyinkimbinkimbi kanye nokuhambisana okuphansi, futhi kunzima ukuzivumelanisa nendawo yokuxhumana okuxubile kwabakhiqizi abaningi.

Ukuqhathanisa Umehluko Oyinhloko kanye Neziphakamiso Zokukhetha phakathi kwe-TAP ne-SPAN

Ukuqhathaniswa Komehluko Oyinhloko

Ukuze sibonise ngokucacile umehluko phakathi kwalokhu okubili, sikuqhathanisa nobukhulu bezimpawu zobuchwepheshe, umthelela wokusebenza, izindleko, kanye nezimo ezifanele:

Iziphakamiso Zokukhetha: "Ukufaniswa Okunembile" Ngokusekelwe Ezidingweni Zesimo

1. Izimo Lapho I-TAP Ikhethwa Khona

○Ukuqapha izixhumanisi zebhizinisi eziyinhloko (njengezishintshi ze-data center core kanye nezixhumanisi ze-egress router), okudinga ukuqinisekisa ubuqotho bokuthwebula idatha;

○Indawo yenkinga yenethiwekhi (njengokudluliselwa kabusha kwe-TCP kanye nokubambezeleka kohlelo lokusebenza), okudinga ukuhlaziywa okunembile okusekelwe kumaphakethe edatha egcwele;

○Izimboni ezinezidingo zokuphepha eziphezulu kanye nokuthobela imithetho (ezezimali, izindaba zikahulumeni, ezamandla), ezidinga ukuhlangabezana nobuqotho kanye nokungaphazanyiswa kwedatha yokuhlolwa kwezimali;

○Izindawo zenethiwekhi ezisezingeni eliphezulu (10G nangaphezulu) noma izimo ezinamaphakethe edatha amakhulu, okudinga ukugwema ukulahleka kwamaphakethe ku-SPAN.

2. Izimo Lapho I-SPAN Ithandwa Khona

○Amanethiwekhi amancane naphakathi anesabelomali esilinganiselwe, noma izimo ezidinga izibalo ezilula zethrafikhi kuphela (njengokusebenza kwe-bandwidth kanye nezinhlelo zokusebenza eziphezulu);

○Ukuxazulula izinkinga zesikhashana noma ukuhlolwa kwesicelo sesikhashana (njengokuhlolwa kokuqaliswa kwesistimu entsha), okudinga ukuthunyelwa okusheshayo ngaphandle kokusetshenziswa kwezinsiza zesikhathi eside;

○Ukuqapha okuhlanganisiwe kwamachweba/ama-VLAN amaningi anemithombo eminingi (njengokuqapha ukuziphatha kwabasebenzisi benethiwekhi yekhampasi), okudinga ukuhlanganiswa kwethrafikhi okuguquguqukayo;

○Ukuqapha izixhumanisi ezingezona eziyinhloko (njengezimbobo zomsebenzisi zamaswishi okufinyelela-ungqimba), ngezidingo eziphansi zobuqotho bokuthwebula idatha.

3. Izimo Zokusetshenziswa Okuhlanganisiwe

Kwezinye izindawo eziyinkimbinkimbi zenethiwekhi, indlela yokusabalalisa ehlanganisiwe ye-"TAP + SPAN" nayo ingasetshenziswa. Isibonelo, sebenzisa i-TAP ezixhumanisini eziyinhloko zesikhungo sedatha ukuqinisekisa ukuthi idatha iqoqwa yonke ukuze kuxazululwe izinkinga kanye nokuhlolwa kokuphepha; lungiselela i-SPAN ekushintsheni kwe-access-layer noma kwe-aggregation-layer ukuze kuhlanganiswe ithrafikhi yabasebenzisi abahlakazekile ukuze kuhlaziywe ukuziphatha kanye nezibalo ze-bandwidth. Lokhu akugcini nje ngokuhlangabezana nezidingo zokuqapha ezinembile zezixhumanisi ezibalulekile kodwa futhi kunciphisa izindleko zokusabalalisa zizonke.

Ngakho-ke, njengobuchwepheshe obubili obuyinhloko bokuthola idatha yenethiwekhi, i-TAP ne-SPAN azinazo "izinzuzo noma ukungalungi" okuphelele kodwa "umehluko ekuzivumelaniseni nezimo" kuphela. I-TAP igxile "ekubambeni okungenakulahlekelwa" kanye "nokuthembeka okuzinzile", futhi ifanele izimo ezibalulekile ezinezidingo eziphezulu zobuqotho bedatha kanye nokuqina kwenethiwekhi, kodwa inezindleko eziphezulu kanye nokuguquguquka okuphansi kokuthunyelwa; i-SPAN inezinzuzo "zokubiza okungenalutho" kanye "nokuguquguquka kanye nokulula", futhi ifanele izimo ezingabizi kakhulu, zesikhashana, noma ezingezona eziyinhloko, kodwa inezingozi zokulahleka kwedatha kanye nomthelela wokusebenza.

Ekusebenzeni nasekugcinweni kwenethiwekhi kwangempela, onjiniyela benethiwekhi badinga ukukhetha ikhambi lobuchwepheshe elifanele kakhulu ngokusekelwe ezidingweni zabo zebhizinisi (njengokuthi ngabe liyisixhumanisi esiyinhloko nokuthi ngabe kudingeka yini ukuhlaziywa okunembile), izindleko zesabelomali, isikali senethiwekhi, kanye nezidingo zokuthobela imithetho. Ngesikhathi esifanayo, ngokuthuthukiswa kwamanani enethiwekhi (njenge-25G, 100G, kanye ne-400G) kanye nokuthuthukiswa kwezidingo zokuphepha kwenethiwekhi, ubuchwepheshe be-TAP buhlala buthuthuka (njengokusekela ukuhlukaniswa kwethrafikhi okuhlakaniphile kanye nokuhlanganiswa kwamachweba amaningi), futhi abakhiqizi beswishi nabo baqhubeka nokwenza ngcono umsebenzi we-SPAN (njengokuthuthukisa umthamo we-cache kanye nokusekela i-mirroring engenakulahlekelwa). Esikhathini esizayo, ubuchwepheshe obubili buzoqhubeka nokudlala indima yabo emikhakheni yabo futhi buhlinzeke ngokusekelwa kwedatha okusebenzayo nokunembile kokuphathwa kwenethiwekhi.