Thola i-Mylinking ML-NPB-5690 1.8Tbps high-density Network Packet Broker, eyakhelwe izikhungo zedatha ze-hyperscale, ukuqapha inethiwekhi ye-100G, ukubonakala kwenethiwekhi kusukela ekuqaleni kuya ekugcineni, kanye nokucutshungulwa kwethrafikhi yokuphepha kwe-cyber yezinga lebhizinisi.
Izakhiwo zezikhungo zedatha zomhlaba wonke kanye ne-hyperscale ziye zashintsha ngendlela engakaze ibonwe eminyakeni emihlanu edlule. Ziqhutshwa ukufuduka kwamafu, ama-microservices, i-AI computing, i-5G backhaul, kanye nethrafikhi enkulu yebhizinisi ebethelwe, izidingo ze-bandwidth yenethiwekhi ziye zanda kusukela ku-10GE/25GE zaya kuma-uplink angu-40GE kanye ne-100GE atholakala yonke indawo, okudala indawo enkulu yokungaboni kahle kwamaqembu e-IT kanye nezokuphepha: ukuntuleka kokubonakala kwenethiwekhi okuphelele, okungenakulahlekelwa kuyo yonke i-empumalanga-ntshonalanga kanye ne-enyakatho-ningizimu.
Ezikhungweni zokusebenza kwezokuphepha kwe-inthanethi (ama-SOC), amaqembu okuqapha inethiwekhi, kanye nabaphathi bezikhungo zedatha, ukubonakala okuyingxenye kulingana nengozi engancishisiwe. Ukubukwa kwechweba le-SPAN lendabuko, ama-tap enethiwekhi azimele, kanye nezihlukanisi zethrafikhi eziyisisekelo azikwazi ukubhekana namaphuzu ayinhloko ahlupha amanethiwekhi esimanje e-100G: amaphakethe aphindaphindiwe agcwele amathuluzi e-IDS/NDR, ithrafikhi engahlungiwe efihliwe izinsongo zokuhamba eceleni, imithwalo egcwele yamaphakethe engalawuleki edla isitoreji, ukugeleza kwesivinini esiphezulu okungamakiwe okungenazo izitembu zesikhathi eziqondile, kanye nokuqoqwa kwethrafikhi okuhlukanisiwe kuwo wonke ama-switching asakazwe, i-routing, kanye nama-node e-BRAS. Ngaphandle kwe-Network Packet Broker ehlangene ehlela konke ukuthwebula ithrafikhi, ukucubungula kwangaphambili, kanye nokusabalalisa okuhlakaniphile, izinhlangano zichitha imali enkulu kwihadiwe yokuqapha ukuphepha engasetshenziswa kahle ngenkathi zishiya izindawo zokuhlasela ezibalulekile zingahlolwanga.
Ucwaningo lokuphepha kwe-cyber embonini luqinisekisa ukuthi ukwephulwa kwenethiwekhi okungaphezu kuka-70% kusebenzisa ukunyakaza okuseceleni ngaphakathi kwezindwangu zesikhungo sedatha, ezifihliwe ngaphakathi kwezingqimba zokufakwa kwe-VXLAN, MPLS, GRE, kanye ne-GTP ezingatholakali kalula noma zikhishwe ukuze zihlaziywe. Ukuze kulwiwe nalezi zinsongo ezishintshayo, amabhizinisi adinga i-Network Packet Broker esebenza kahle kakhulu, esheshayo yehadiwe ekwazi ukucubungula ithrafikhi exubile yesivinini esiningi, enikeza ukubonakala kwenethiwekhi okusebenzayo kuwo wonke amathuluzi okuphepha, ukuhlaziya, kanye nokubona esitokisini sawo.
Le bhulogi yethula i-Mylinking ML-NPB-5690, i-Mylinking's flagship 1.8Tbps high-density Network Packet Broker eyenzelwe kuphela izikhungo zedatha ze-hyperscale, ukuqapha inethiwekhi ye-100G, kanye nokubonakala kokuphepha kwe-cyber kwebanga lebhizinisi. Yakhelwe kusakhiwo se-ASIC esihleliwe se-P4 esihambisana nama-CPU okucubungula ahlakaniphile amaningi, i-ML-NPB-5690 ihlanganisa yonke imisebenzi yokusebenza kwethrafikhi ngaphambi kokucubungula - ukuhlanganiswa, ukukopisha, ukuhlunga, ukuhlukaniswa, ukudluliselwa, ukusika, kanye nokususwa kokubethela - ibe yithuluzi elilodwa le-rackmount le-1U, isusa isidingo sezinqwaba zehadiwe yokubamba ithrafikhi engahlangene ngenkathi ithuthukisa kakhulu i-ROI yamathuluzi. Njengomkhiqizi ohamba phambili wengqalasizinda yobuchwepheshe bokubonakala kwenethiwekhi, i-Mylinking iklama i-ML-NPB-5690 ukuxazulula zonke izindawo ezibuhlungu zokubonakala ezibhekene nabaqhubi bezikhungo zedatha zesimanje, ibeka le NPB njengesendlalelo esiyisisekelo sokubonakala kwenethiwekhi okuphelele, okuqondiswe yi-zero-trust.
Kuyo yonke le ndatshana, sizochaza imininingwane yehadiwe ye-ML-NPB-5690, izici zokucubungula ithrafikhi yehadiwe enelungelo lobunikazi, izakhiwo eziyisikhombisa zokuthunyelwa komkhiqizo eziqinisekisiwe, amathuluzi okuphatha kude aphelele, kanye nezinzuzo zebhizinisi nezokuphepha ezitholakala ezinhlanganweni eziphethe izindwangu zesikhungo sedatha se-multi-100G. Lo mhlahlandlela usebenza njengereferensi yobuchwepheshe yabakhi benethiwekhi, onjiniyela be-SOC, abaholi bengqalasizinda yesikhungo sedatha, kanye namaqembu okuthenga acwaninga izixazululo ze-Network Packet Broker yebhizinisi ukuze athuthukise ukubonakala kwawo kwenethiwekhi kanye nesimo sokuphepha kwe-cyber.
Uyini Umthengisi Wephakethe Lenethiwekhi (NPB) nokuthi Kungani Kubalulekile Ukuphepha Kwe-Cyber Nokuqapha Inethiwekhi?
Ngaphambi kokujula emkhiqizweni we-Mylinking ML-NPB-5690, kubalulekile ukusungula umsebenzi oyinhloko we-Network Packet Broker kanye nendima yayo engaxoxiswana ngayo ekuqapheni kwenethiwekhi yesimanje kanye nezinhlelo zokuphepha kwe-cyber—umongo oyisisekelo wokuqonda ukuthi le NPB enamandla e-100G ixazulula kanjani imikhawulo yokubonakala ebalulekile.
I-Network Packet Broker (NPB) isebenza njengesikhungo sokuqondisa ithrafikhi esibekwe emgqeni ngaphakathi kwesendlalelo sokubonakala kwesikhungo sedatha, esibekwe phakathi kwama-taps enethiwekhi, ama-switch SPAN mirror ports, kanye namathuluzi okuphepha/ukuhlaziya angezansi (i-IDS, i-NPM, i-APM, i-SIEM, abahlaziyi bephrothokholi, amapulatifomu ethrafikhi yedatha enkulu). Ngokungafani nama-splitter alula angasebenzi akopisha nje ithrafikhi eluhlaza, ama-NPB ebanga lebhizinisi aletha ukucubungula kwangaphambili okusheshisiwe kwehadiwe ukuze kuhlungwe, kuhlungwe, futhi kuqondiswe ngobuhlakani amaphakethe athwetshuliwe ngaphambi kokulethwa kumathuluzi okuqapha, kuxazululwe imikhawulo eyisithupha eyisisekelo yokulinganisa okuluhlaza:
1- Umthamo wethrafikhi ongalawulwa: Ukusakazwa kwamaphakethe agcwele okungahlungiwe kugcwele kakhulu imishini yokuhlaziya ebizayo, okuphazamisayo ukudlula kanye nezimpawu zosongo ezingekho ngaphansi komthwalo ophezulu.
2- Umsindo wephakethe ophindwe kabili: Ukulinganisa nge-cross-switch kukhiqiza amaphakethe afanayo avela ezindaweni eziningi zokuqoqa, okuchitha i-CPU yamathuluzi kanye nezinsiza zokugcina.
3- Ubumpumputhe bemihubhe evalekile: Ama-header emihubhe ye-VXLAN, MPLS, GRE, ERSPAN, kanye ne-GTP afihla ithrafikhi yosongo olungaphakathi engabonakali kumathuluzi okuqapha ayisisekelo.
4- Ukuntuleka kokuhlukaniswa kwethrafikhi: Ithrafikhi yesivinini esixubile engu-10G/25G/40G/100G ayikwazi ukuhlukaniswa ngokuguquguqukayo, ukuhlanganiswa, noma ukulinganisela umthwalo kuzo zonke izimbobo zamathuluzi zesivinini esiningi ngaphandle kwe-NPB.
5- Azikho izilawuli zokuthobela imithetho ezakhelwe ngaphakathi: Imithwalo yokukhokha engakalungiswa idlulisela i-PII engakalungiswa, idatha yamakhadi ezezimali, kanye nolwazi lomuntu siqu olulawulwayo ezinhlelweni zokuqapha, okwephula imiyalo ye-GDPR, PCI-DSS, HIPAA, kanye ne-SOX.
6- Ukungabikho kwemethadatha yokugeleza enembile: Ukulinganisa okujwayelekile akunazo izitembu zesikhathi ze-nanosecond, ukumaka kwephrothokholi yezendlalelo zohlelo lokusebenza, kanye nokuqhathaniswa kwe-packet offset okwenziwe ngezifiso kwe-deep forensics.
Umthengisi Wephakethe Lenethiwekhi Njengomgogodla Wokubonakala Kwenethiwekhi Kusukela Ekupheleni Kuya Ekupheleni
Ukubonakala kwenethiwekhi—ikhono lokubamba, ukuhlola, ukuhlanganisa, nokuhlaziya yonke iphakethe edlula esikhungweni sedatha enyakatho-eningizimu kanye nezixhumanisi zasempumalanga-entshonalanga—kuyisisekelo sokuphepha kwe-cyber okusebenzayo. Ngaphandle kokubonakala okuhlanganisiwe, okungenakulahlekelwa, amaqembu okuphepha awakwazi ukubona ukusabalala kwe-malware eseceleni, izandulela zokuhlasela ze-DDoS, ukukhishwa kwedatha okungagunyaziwe, ukuhlukaniswa kwe-VLAN okungahleliwe kahle, noma ukwanda kwethrafikhi yohlelo lokusebenza okungavamile. I-NPB esebenza kahle njenge-Mylinking ML-NPB-5690 iguqula ithrafikhi engahluziwe, engahlelekile ibe ukusakazwa kwedatha okukhethiwe, okulungele amathuluzi, ukuqinisekisa ukuthi yonke ipulatifomu yokuphepha nokuqapha ithola kuphela amaphakethe afanele, anenani eliphezulu ngaphandle kokuchithwa kwe-bandwidth.
Ezindaweni zenethiwekhi ye-100G, leli khono liba bucayi kakhulu. Izindwangu ze-Hyperscale ezithwala ithrafikhi yansuku zonke ye-terabit eziningi azikwazi ukuthembela kuma-NPB aphansi, angenawo amandla amaningi aletha ukulahlekelwa kwephakethe noma ukucubungula izinga lomugqa we-bottleneck. Ama-NPB asheshisiwe yihadiwe kuphela anomthamo wokushintsha wekilasi le-terabit angagcina isivinini somugqa wembobo we-100G ogcwele ngenkathi esebenzisa izinqubomgomo eziningi zokuphatha ithrafikhi ngasikhathi sinye ngesikhathi esifanayo.
I-Mylinking ML-NPB-5690 imelela isiqongo somugqa womkhiqizo we-NPB we-Mylinking, owakhelwe izikhungo zedatha ezisezingeni eliphezulu, ukuqapha inethiwekhi yebanga labathwali, izitaki zokubonakala kwe-SOC yebhizinisi, kanye nengqalasizinda ye-cloud hybrid edinga ukuhlanganiswa nokucutshungulwa kwethrafikhi ye-10GE/25GE/40GE/100GE exubile. Ibanjwe ekhasini lomkhiqizo elisemthethweni le-Mylinking (https://www.mylinking.com/mylinking-network-packet-brokernpb-ml-npb-5690-product/), le 1U rackmount Network Packet Broker ihlanganisa indwangu yokushintsha ye-ASIC ehlelwe yi-P4 ehlanganiswe neprosesa yethrafikhi ehlakaniphile ezinikele enezinsika eziningi, iletha i-transmission ephelele yokushintsha i-bidirectional engu-1.8Tbps ngepayipi lehadiwe elizinikele le-200Gbps le-DPI ethuthukisiwe, ukuqaqa, kanye nokuphathwa kwethrafikhi okusekelwe kunqubomgomo.
Amandla Okucubungula Ithrafikhi Aphelele Akhiwe Ku-Mylinking ML-NPB-5690
Inzuzo eyinhloko yokuncintisana ye-Mylinking ML-NPB-5690 ilele kusethi yayo ephelele yemisebenzi yokucubungula ithrafikhi esheshiswa yihadiwe, yonke yenziwa ngesivinini esigcwele ngaphandle kokwethula ukulahleka kwephakethe noma ukubambezeleka. Lawa makhono ahlukaniswe ngokuhlelwa kwethrafikhi okuyisisekelo, ukuphathwa okuhlakaniphile okuthuthukisiwe, ukuhlanza idatha okugxile ekulandeleni imithetho, kanye namamojula okuhlaziya ukuphepha kwe-DPI, ngalinye lichazwe ngezansi ngokuphepha kwe-cyber kwangempela kanye nokusetshenziswa kokuqapha inethiwekhi.
1. Umzila Oyisisekelo Wethrafikhi Yezinga Lomugqa, Ukuphindaphinda, Ukuhlanganisa kanye Nokulinganisa Imithwalo
Imisebenzi ye-NPB eyisisekelo yakha umgogodla wazo zonke izindlela zokusebenza ezibonakalayo zenethiwekhi, ihadiwe egcwele elayishwe ku-ASIC eshintshayo ye-ML-NPB-5690:
1- Ukuphindaphindwa Kwethrafikhi: Kopisha amaphakethe okungena kusuka echwebeni elilodwa lomthombo kuya emachwebeni amaningi okuqapha indawo, okuvumela ukulethwa ngasikhathi sinye kwemithombo yethrafikhi efanayo kumathuluzi okuhlola ukuhambisana ne-IDS, NPM, kanye nokuhambisana ngaphandle kokuphinda ihadiwe yokuthepha ebonakalayo.
2- Ukuhlanganiswa Kwethrafikhi Yemithombo Eminingi: Hlanganisa ithrafikhi ehlanganisiwe evela kumachweba amaningi e-SPAN ahlukene, ama-optical taps, nama-node e-BRAS abe yimifudlana ehlungiwe ehlanganisiwe, kuqedwe ukubonakala okuqhekekile okuhlukaniswe kuzo zonke izingxenye zesikhungo sedatha esatshalalisiwe.
3- Ukulinganisa Umthwalo Okusekelwe Enqubomgomo: Ama-algorithm amabili okulinganisela umthwalo alungisekayo asabalalisa ithrafikhi kumachweba amaningi amathuluzi okuphuma ukuze kuvinjelwe ukugcwala ngokweqile kwensiza ngayinye:
○Ukulinganisa umthwalo okusekelwe ku-hash kusetshenziswa imethadatha yepakethe ye-L2-L7 (i-MAC, i-IP seven-tuple, amafulegi e-TCP, amathegi e-VLAN) ukuze kufakwe ukugeleza okuqhubekayo.
○Ukulinganisela umthwalo osindayo oqaphela isikhathi ukuze kwabelwe umthamo we-bandwidth owengeziwe kumathuluzi okuphepha abaluleke kakhulu njengamapulatifomu e-NDR okuzingela izinsongo.
4- Ukuhlunga Amaphakethe Ezinezilinganiso Eziningi: Dala imithetho yokufanisa ithrafikhi ehlanganisiwe ehlanganisa uhlobo lwe-Ethernet, amathegi e-VLAN, amanani e-TTL, i-IP egcwele eyisikhombisa (i-IP yomthombo, i-IP yendawo, i-port yomthombo, i-port yendawo, i-protocol, amafulegi e-TCP, ukuhlukaniswa kwe-IP), kanye nezinkambu ze-offset ezenziwe ngokwezifiso ngaphakathi kwama-byte angu-128 okuqala kwanoma yiliphi iphakethe. Abaphathi bachaza ubude be-offset kanye nokufaniswa kwenani ukuze babambe ithrafikhi yephrothokholi yomnikazi, izihloko ze-tunnel yangokwezifiso, noma amasignesha okulayisha aqondene nohlelo lokusebenza avela endaweni yabo yebhizinisi.
5- Ukuphathwa Kwethegi ye-VLAN: Imisebenzi ye-VLAN esezingeni lehadiwe efaka phakathi ukufakwa kwethegi, ukususwa kwethegi, kanye nokubhalwa kabusha kwe-ID ye-VLAN ukuze kulungiswe ukugeleza kwethrafikhi ngaphambi kokudlulisela kumathuluzi okuqapha anezidingo eziqinile zokuhlukanisa i-VLAN.
Yonke le misebenzi eyisisekelo isebenza ngomkhawulo ophelele wokushintshana we-1.8Tbps, ngaphandle kokulahlekelwa yiphakethe ngisho nangaphansi kwemithwalo yethrafikhi ye-100G egcwele.
2. Ukususwa Kwe-Tunnel Okusheshisiwe Ngehadiwe kanye Nokuhlunga Ithrafikhi Yezingqimba Eziningi
Izikhungo zedatha zesimanje zamafu kanye ne-virtualized zithembele kakhulu kumaphrothokholi e-overlay tunneling ukwakha indwangu eqasha abantu abaningi, okudala izindawo ezibalulekile zamathuluzi okuphepha angakwazi ukuhlola izihloko ze-tunnel zangaphandle ukuhlola ithrafikhi eyingozi yangaphakathi. I-ML-NPB-5690 inikeza ukuhlonza i-tunnel ezingeni lehadiwe kanye nokususwa kwe-header kuzo zonke izindinganiso ze-tunneling zebhizinisi ezivelele, okususa umthwalo wokucubungula kusuka kumishini yokuphepha engezansi:
○Ukususwa kwe-tunnel okusekelwe: VXLAN, ERSPAN, GRE, MPLS, GTP, IPIP, PPTP, L2TP, PPPOE
○Ukususwa kwe-capsulation okuchazwe ngumsebenzisi ngokwezifiso: Abaphathi balungiselela imithetho ye-offset ye-header yangokwezifiso ukuze basuse izendlalelo ze-encapsulation ezizimele ngaphakathi kwama-byte angu-128 okuqala amaphakethe, besekela amaphrothokholi e-niche tunnel avelayo ngaphandle kokulinda izibuyekezo ze-firmware.
Uma izihloko ze-tunnel zangaphandle sezisusiwe, i-NPB isebenzisa imithetho yokuhlunga ye-L2-L7 ngokumelene nomthwalo wephakethe langaphakathi lokuqala, okuvumela amaqembu e-SOC ukuthi athole i-ransomware yokunyakaza kwe-lateral, ukukhishwa kwedatha ye-cross-VLAN, kanye nethrafikhi yokuhlasela esekelwe emhubheni ebethelwe izinhlelo ezijwayelekile zokulinganisa ezingayifihla ngokuphelele. Lesi sici sokususa i-hardware siyikhono eliyimpoqo lezinhlangano ezisebenzisa izakhiwo zokuphepha kwenethiwekhi ye-Zero Trust, lapho kudingeka ukuhlolwa okuphelele kokugeleza ngakunye okuhlanganisiwe kwe-east-west ukuze kuqinisekiswe ithrafikhi okuqhubekayo.
3. Ukunyathelisa Isikhathi Ngokucophelela kwe-Nanosecond, Ukusikwa Kwephakethe Nokukopishwa Kwedatha
Izici ezintathu zokuthuthukisa ithrafikhi ezibiza kakhulu zinciphisa kakhulu ukusetshenziswa kwezinsizakusebenza zamathuluzi futhi zithuthukise ukunemba kokuphenywa kwezehlakalo ze-forensic; zonke ihadiwe zisheshiswa kuphayiphi yokucubungula ehlakaniphile ye-200G ye-ML-NPB-5690:
1- Ukunyathelisa Isikhathi Kwehadiwe Ye-Nanosecond: Vumelanisa iwashi langaphakathi le-NPB namaseva e-NTP ebhizinisi, bese ufaka izitembu zesikhathi zesisombululo se-nanosecond ezinembile ku-trailer yohlaka lwephakethe ngalinye elithwetshuliwe. Le metadata ivumela ukuhlangana kwezehlakalo ezisongelayo kuzo zonke izishintshi zesikhungo sedatha, ama-router, namathuluzi okuphepha, kususwe ukungalungi kwesikhathi kwezinga le-millisecond okuphazamisa ukusebenza kokwakhiwa kabusha kwezehlakalo. Ukumakwa kwezitembu zesikhathi kusebenza ngesivinini somugqa ogcwele ngaphandle kokonakala kokuphuma.
2- Ukusikwa Kwephakethe Okusekelwe Kunqubomgomo: Nciphisa imithwalo yephakethe eluhlaza ibe ubude obungaguquki obulungisekayo (ama-byte angu-64 kuya kuma-byte angu-1518) ngenqubomgomo ngayinye yethrafikhi. Ezimweni zokusetshenziswa kokuqapha inethiwekhi okuyisisekelo, abaphathi basika amaphakethe ukuze bagcine idatha yekhanda le-L2-L4 kuphela ngenkathi belahla imithwalo yesicelo ephelele, benciphisa ukusetshenziswa kwe-bandwidth yokugcina ngo-70%–90% kumaqoqo okuhlaziya ithrafikhi yedatha enkulu. Ukuthwebula imithwalo yenkokhelo ephelele kusatholakala kumaqembu enqubomgomo yokuphepha anobungozi obukhulu njengezixhumanisi zomngcele we-inthanethi kanye nama-VLAN okucubungula izinkokhelo.
3- Ukususwa Kokuphindaphindwa Kwedatha Okune-Multi-Granularity: Susa amaphakethe afanayo aphindaphindwayo aqoqwe emithonjeni ye-tap/SPAN edlulanayo ukuze kuncishiswe umthwalo we-CPU yethuluzi lokuqapha. Imithetho yokususwa kokuphinda isebenza ezingeni le-port ebonakalayo noma ezingeni leqembu lenqubomgomo yangokwezifiso, ngezihlonzi zokufanisa ezilungisekayo ezifaka phakathi i-IP yendawo, i-port yomthombo, i-port yendawo, inombolo yokulandelana kwe-TCP, kanye namanani okuvuma kwe-TCP. Izinhlangano ezine-cross-switch mirroring deployments enkulu zivame ukubona ukwehla okungu-40%–60% kwevolumu yenani lethrafikhi elilethwa kumathuluzi angezansi ngemuva kokuvumela izinqubomgomo zokususwa kokuphinda.
4. Ukufihla Idatha Esekelwe Enqubomgomoni Ukuze Kulandelwe Imithetho Nokunciphisa Ukwehliswa Kwethrafikhi Okubucayi
Izinhlaka zomthetho zomhlaba wonke ezifaka phakathi i-PCI-DSS (idatha yamakhadi okukhokha), i-HIPAA (amarekhodi eziguli zezempilo), i-GDPR (idatha yomuntu siqu ye-EU), kanye ne-SOX zigunyaza ukuhlelwa kabusha okuqinile kolwazi oluyimfihlo olubonakalayo lomuntu siqu (PII) ngaphambi kokudlulisela ithrafikhi ebanjiwe kumapulatifomu okuqapha eqembu lesithathu noma okuhlaziya amafu. I-Mylinking ML-NPB-5690 ihlanganisa ukusebenza kokufihla idatha yehadiwe ukuze kuhlangatshezwane nezidingo zokuthobela imithetho ngaphandle kokusebenzisa imali eningi ngemuva kokucutshungulwa kumaseva angaphandle:
○I-Masking isebenza nge-granularity yenqubomgomo elungisekayo, ifanisa izintambo zomthwalo ezenziwe ngokwezifiso ngaphakathi kwedatha yepakethe (isb., izinombolo zamakhadi esikweletu, izihlonzi ze-ID kazwelonke, izinombolo zamarekhodi ezokwelapha zesiguli).
○Abaphathi bachaza amanani aqinile okufaka esikhundleni ukuze babhale kabusha amasimu abucayi afanayo, okwenza i-PII ingafundeki kunoma ubani ofinyelela amalogi okuthwebula ithrafikhi agciniwe.
○Imithetho yokumboza ingabhekisa kungqimba ye-MAC, ungqimba lwe-IP, ungqimba lwezokuthutha, noma izinkambu zokulayisha okujulile kohlelo lokusebenza ngaphakathi kwama-byte okuqala angu-128 kwanoma yiliphi iphakethe, ngezinqubomgomo ezihlukile zokumboza ezisetshenziswa kuma-VLAN ebhizinisi ahlukene noma emachwebeni omthombo wethrafikhi.
Leli khono lokususa ukusabela okwakhelwe ngaphakathi lisusa isidingo sokuhlanza imishini yomgwaqo ezimele ezimbonini ezilawulwayo, lihlanganisa ukuhamba komsebenzi kokuthobela imithetho kungqimba lokubonakala kwe-ML-NPB-5690 futhi linciphise umthelela wehadiwe yesikhungo sedatha iyonke.
5. Ukuhlolwa Kwephakethe Elijulile le-DPI, Ukususwa Kwe-SSL kanye Nokuthunyelwa Kwe-NetFlow Kwezinguqulo Eziningi
Ukuphepha okuthuthukisiwe kanye nokusebenza kokubuka kuncike ekuhlakanipheni kwethrafikhi okujulile kwesicelo, okulethwa ngenjini yokuhlaziya ye-DPI ehlanganisiwe ye-ML-NPB-5690 esebenza kuphrosesa yethrafikhi ehlakaniphile ye-200Gbps:
1- Ukuhlonza Iphrothokholi Yesilayidi Sesicelo Esiphelele: Ngokusebenzisa izigxivizo zeminwe ezingamakhulu ezinhlelo zokusebenza zebhizinisi ezivamile, kufaka phakathi i-FTP, i-HTTP, i-POP, i-SMTP, i-DNS, i-NTP, i-BitTorrent, i-Syslog, i-MySQL, kanye ne-Microsoft SQL Server. Amasignesha ephrothokholi enziwe ngokwezifiso angalayishwa ukuze kutholakale izinhlelo zokusebenza zebhizinisi zangaphakathi ezizimele. Injini ye-DPI ithola futhi amaphethini ethrafikhi yokusakaza ividiyo, okuvumela ukuhlunga okukhethiwe kokusakazwa kwamavidiyo okungewona awebhizinisi ukuze kubekwe phambili ithrafikhi ebalulekile yokuhlolwa kokuphepha.
2- Ukuqedwa Kwe-SSL/TLS Okusheshisiwe Ngehadiwe: Layisha izitifiketi zokuhlola ze-SSL zebhizinisi ku-NPB ukuze uqedwe ukubethela ithrafikhi yomthwalo okhokhelwayo ebethelwe ye-HTTPS uma kudingeka, kusekela ama-TLS 1.0, TLS 1.2, kanye nama-cipher suites e-SSL 3.0 akudala. Amaphakethe acacile akhishwe ukubethela athunyelwa ku-IDS kanye namathuluzi okuzingela izinsongo ukuze adalule i-malware efihliwe ngaphakathi kwezikhathi ze-HTTPS ezibethelwe, ikhono elibalulekile lokuphepha kwe-cyber njengoba ithrafikhi ye-inthanethi yesimanje engaphezu kuka-95% isebenza ngokubethela kwe-TLS. Ukulayisha ukuqedwa kokubethela ku-NPB kugwema ukulimaza amandla e-CPU emishini yokuphepha ebizayo.
Ukukhiqizwa kwe-NetFlow/IPFIX Yezinguqulo Eziningi Ezi-3: Guqula ithrafikhi engakabanjwa ibe amarekhodi okugeleza ajwayelekile okuthunyelwa ku-SIEM, ukubonwa kwenethiwekhi, kanye namapulatifomu okuhlela amandla. I-ML-NPB-5690 isekela amafomethi e-NetFlow V5, NetFlow V9, kanye ne-IPFIX ngamazinga okusampula angenziwa ngokwezifiso ngokugcwele ukuze kulinganiswe ubuncane berekhodi lokugeleza kanye ne-bandwidth overhead. Idatha yokuthunyelwa kokugeleza inikeza izibalo zethrafikhi zezinga eliphezulu zokubikezela amandla esikhungo sedatha yesikhathi eside kanye nokutholwa kwe-anomaly yokuphepha okuyisisekelo.
Kungani Ukhetha i-Mylinking Njengomthengisi Wephakethe Lenethiwekhi Othembekile kanye Nomthengisi Wesixazululo Sokubonakala Kwenethiwekhi?
Emakethe egcwele abathengisi behadiwe be-NPB abajwayelekile, i-Mylinking izihlukanisa njengomkhiqizi okhethekile ogxile kuphela kwingqalasizinda yokubonakala kwenethiwekhi—kufaka phakathi ama-Network Packet Brokers, ama-optical network taps, ama-traffic analyzers, kanye namapulatifomu okuphatha ukubonakala okuhlangene—enesipiliyoni sobunjiniyela esingamashumi eminyaka sikhonza izikhungo zedatha zebhizinisi, inkampani, ezezimali, ezempilo, kanye namakhasimende okuphepha kwe-cyber kahulumeni emhlabeni jikelele. Izinzuzo ezibalulekile zokuncintisana zokukhetha i-Mylinking ML-NPB-5690 ye-100G network visuality stack yakho zifaka:
1- Ubunjiniyela Bokuqala Behadiwe Bemithwalo Yomsebenzi Ye-Terabit 100G: Ngokungafani nabancintisani be-NPB abasebenzisa isofthiwe abaningi abalayisha ukucubungula okuthuthukisiwe ezinsizeni ze-CPU ezabiwe (okudala ukulahlekelwa kwephakethe ngaphansi komthwalo ophezulu), i-Mylinking iklama zonke izici zokuphathwa kwethrafikhi eyinhloko zibe amapayipi ehadiwe e-ASIC azinikele, okuqinisekisa ukusebenza kwesilinganiso somugqa okungenakulahlekelwa ophahleni oluphelele lwe-1.8Tbps lwe-ML-NPB-5690.
Ukuhlela kwe-P4 okungu-2 ukuze kubonakale njengobufakazi besikhathi esizayo: Ukwakhiwa kwe-chip ye-P4 ehlelwe yi-ML-NPB-5690 kususa ingozi yokuphelelwa yisikhathi kwehadiwe. Njengoba kuvela amaphrothokholi amasha okuhambisa i-tunnel, amazinga ethrafikhi abethelwe, kanye namafomethi ezicelo zebhizinisi elizimele, onjiniyela be-Mylinking basebenzisa amasethi emithetho yokuhlonza amaphakethe ngokwezifiso ngezibuyekezo ze-firmware ngaphandle kokudinga ukushintshwa kwemishini yehadiwe ebizayo.
3- Ilayisense Yezici Ehlanganisa Konke: Azikho izimali zelayisensi ezengeziwe ezilinganisiwe zamakhono abalulekile okuhlanganisa ukubethela kwe-SSL, ukufihla idatha, ukudlulisa idatha, ukuqhekeka kwechweba, noma ukuthunyelwa kwe-NetFlow—zonke izici ezichazwe kulesi sihloko zithunyelwa ngendlela ejwayelekile neyunithi yesisekelo ye-ML-NPB-5690, okususa izindleko zobunikazi zesikhathi eside ezifihliwe ezivamile nabathengisi be-NPB bebhizinisi abancintisanayo.
4- Ukusekelwa Kobuchwepheshe Bomhlaba Wonke kanye Nezinsizakalo Zokwenza Ngokwezifiso: I-Mylinking inikeza ukwesekwa kobunjiniyela obukude amahora angama-24 ngosuku, izinsuku eziyi-7 ngesonto kumakhasimende ebhizinisi aphesheya kwezilwandle, kanye nezinsizakalo zokuguqulwa kwehadiwe ngokwezifiso kanye ne-firmware yokufakwa kwamafu ebanga lenkampani, uhulumeni ohlukanisiwe, kanye ne-hyperscale edinga ukuthuthukiswa kwemithetho yokucubungula ithrafikhi ekhethekile.
5- Ukuhambisana Kokubonakala Okuhlanganisiwe Kwesistimu Yezinto Eziphilayo: I-ML-NPB-5690 ihlangana kahle nephothifoliyo yomkhiqizo ephelele ye-Mylinking, kufaka phakathi ama-optical taps angasebenzi, ama-test access matrix switches, kanye neplatifomu yokulawula ukubonakala ephakathi ye-Matrix-SDN, okuvumela ukuthunyelwa kokubonakala kwenethiwekhi yomthengisi oyedwa kusukela ekuqaleni kuya ekugcineni okwenza kube lula ukuxazulula izinkinga nokugcinwa kwemikhiqizo ehlukahlukene.
6- Ukusebenza Kwendabuko Okuhambisana Nokuthobela Umthetho: Ukufihla idatha okwakhelwe ngaphakathi, ukunqunywa kwamaphakethe, kanye ne-forensics yesikhathi kususa ihadiwe eyengeziwe evela eceleni edingekayo ukuze kuhlangatshezwane nezidingo zokuhlolwa kwe-PCI-DSS, HIPAA, GDPR, kanye ne-SOX, kunciphisa umthelela wehadiwe yesikhungo sedatha kanye nobunzima bokuhlanganiswa.
7- Kwenzelwe Ukwakhiwa Kwesikhungo Sedatha Esihlanganisiwe Namafu: I-VXLAN, i-GTP, kanye ne-MPLS Tunnel decapsulation, ehlanganiswe ne-flexible port breakout kanye nokusekelwa kwe-single-fiber optical, ibeka i-ML-NPB-5690 njengesendlalelo sokubonakala esifanele sezindwangu ze-hybrid on-prem/cloud, amanethiwekhi e-backhaul e-5G carrier, kanye nezindawo zesikhungo sedatha eziqashiwe eziningi.
Kwabakhi bezinhlelo zenethiwekhi, abaphathi be-SOC, kanye nabaphathi bezingqalasizinda zesikhungo sedatha abahlela ukuthuthukiswa kokubonakala kwenethiwekhi ye-100G noma ukulungiswa okugcwele kokwakhiwa kokuphepha kwe-Zero Trust, i-Mylinking ML-NPB-5690 imele isisombululo se-Network Packet Broker esiqinisekisa ikusasa, esingabizi kakhulu, esisebenza kahle kakhulu esakhelwe injongo yezidingo zethrafikhi zesilinganiso se-terabit sezinhlelo zedatha ezishintshayo zanamuhla. Ukuze ubuyekeze amashidi edatha ehadiwe aphelele, imidwebo yokwakhiwa kokuthunyelwa, kanye nezinketho zesilinganiso esenziwe ngokwezifiso, vakashela ikhasi lomkhiqizo elisemthethweni le-Mylinking ML-NPB-5690:https://www.mylinking.com/mylinking-network-packet-brokernpb-ml-npb-5690-product/
Isikhathi sokuthunyelwe: Julayi-07-2026
