I-Network Tap vs SPAN Port Mirror, yikuphi ukuthwebula ithrafikhi yenethiwekhi okungcono kakhulu ekuqapheni nasekuvikelekeni kwenethiwekhi yakho?

Ama-TAP (Hlola Amaphuzu Okufinyelela), eyaziwa nangokuthiI-Replication Tap, Ukuthepha Kokuhlanganisa, Ukuthepha Okusebenzayo, Ithephu yethusi, I-Ethernet Tap, I-Optical Tap, Ukuthepha Okungokoqobo, njll. Ama-tap ayindlela ethandwayo yokuthola idatha yenethiwekhi. Anikeza ukubonakala okuphelele kokugeleza kwedatha yenethiwekhi futhi aqapha ngokunembile izingxoxo zezinhlangothi ezimbili ngesivinini esigcwele somugqa, ngaphandle kokulahleka kwephakethe noma ukubambezeleka. Ukuvela kwama-TAP kushintshe kakhulu insimu yokuqapha nokuqapha inethiwekhi, okushintsha kakhulu izindlela zokufinyelela zezinhlelo zokuqapha nokuhlaziya futhi kuhlinzeka ngesisombululo esiphelele nesiguquguqukayo sohlelo lonke lokuqapha.

Intuthuko yamanje yezobuchwepheshe ikhiqize izinhlobo eziningi ze-tap: ama-tap ahlanganisa izixhumanisi eziningi, ama-regeneration tap ahlukanisa ithrafikhi yesixhumanisi ibe izingxenye eziningana, ama-bypass tap, kanye nama-matrix tap switch.

Njengamanje, izinhlobo ze-Tap ezithandwa kakhulu embonini zifaka phakathi i-NetTAP kanye ne-Mylinking, phakathi kwazo i-Mylinking iqashelwa njengophawu oluhle kakhulu lwe-Tap kanye ne-NPB embonini yaseShayina, olunesabelo semakethe esiphezulu, ukuzinza kanye nokusebenza okuhle.

Izinzuzo ze-TAP

1. Bamba amaphakethe edatha angu-100% ngaphandle kokulahlekelwa yiphakethe.

2. Amaphakethe edatha angajwayelekile angaqashwa, okwenza kube lula ukuxazulula izinkinga.

3. Izitembu zesikhathi ezinembile, akukho ukubambezeleka nokushintsha isikhathi.

4. Ukufakwa kanye kuphela kwenza kube lula ukuxhuma nokuhambisa i-analyzer.

Izinkinga ze-TAP

1. Udinga ukusebenzisa imali eyengeziwe ukuthenga i-splitter TAP, ebiza kakhulu futhi ethatha isikhala se-rack.

2. Isixhumanisi esisodwa kuphela esingabukwa ngesikhathi.

Izicelo Ezijwayelekile ze-TAP

1. Izixhumanisi zezentengiselwano: Lezi zixhumanisi zidinga izikhathi ezimfushane kakhulu zokuxazulula izinkinga. Ngokufaka ama-TAP kulezi zixhumanisi, onjiniyela benethiwekhi bangathola futhi baxazulule izinkinga ezingazelelwe ngokushesha.

2. Izixhumanisi eziyinhloko noma ezingemuva. Lezi zinokusetshenziswa okuphezulu kwe-bandwidth futhi azikwazi ukuphazanyiswa lapho kuxhuma noma kuhambisa i-analyzer. I-TAP iqinisekisa ukuthuthwa kwedatha okungu-100% ngaphandle kokulahleka kwephakethe, okunikeza isiqinisekiso sokusebenza sokuhlaziywa okunembile kwalezi zixhumanisi.

3. I-VoIP ne-QoS: Ikhwalithi yesevisi ye-VoIP idinga ukulinganiswa okunembile kwe-jitter kanye nokulahlekelwa yiphakethe. Ama-TAP aqinisekisa ngokugcwele lokhu kuhlolwa, kodwa ama-port ahlanganisiwe angashintsha amanani e-jitter futhi anikeze amazinga okulahlekelwa yiphakethe angenangqondo.

4. Ukuxazulula izinkinga: Qinisekisa ukuthi amaphakethe edatha angajwayelekile nanephutha ayatholwa. Ama-port anezibuko azohlunga lawa maphakethe, avimbele onjiniyela ekuhlinzekeni ngolwazi olubalulekile noluphelele lwedatha lokuxazulula izinkinga.

5. Uhlelo lokusebenza lwe-IDS: I-IDS incike olwazini oluphelele lwedatha ukuze ibone amaphethini okungena, futhi i-TAP ingahlinzeka ngemithombo yedatha ethembekile nephelele ohlelweni lokuthola ukungena.

6. Iqoqo leseva: I-splitter enamachweba amaningi ingaxhuma izixhumanisi ze-8/12 ngesikhathi esisodwa, ivumela ukushintsha okukude nokukhululekile, okulula ukuqapha nokuhlaziya nganoma yisiphi isikhathi.

Ukuthwebula Iphakethe le-PCAP

I-SPAN (Ukuhlaziywa Kwembobo Yokushintsha)yaziwa nangokuthi i-Mirrored Port noma i-Port Mirror. Amaswishi athuthukisiwe angakopisha amaphakethe edatha kusuka kwelinye noma ngaphezulu amachweba aye kwelinye ichweba eliqokiwe, elibizwa ngokuthi "i-mirror port" noma "i-destination port." I-analyzer ingaxhuma echwebeni eli-mirrored ukuze yamukele idatha. Kodwa-ke, lesi sici singathinta ukusebenza kweswishi futhi sibangele ukulahleka kwephakethe lapho idatha igcwele ngokweqile.

Izinzuzo ze-SPAN

1. Kuyonga, akukho mishini eyengeziwe edingekayo.

2. Yonke ithrafikhi ku-VLAN kuswishi ingaqashwa ngasikhathi sinye.

3. Umhlaziyi oyedwa angaqapha izixhumanisi eziningi.

Izinkinga ze-SPAN

1. Ukulinganisa ithrafikhi kusuka emachwebeni amaningi kuya echwebeni elilodwa kungabangela ukugcwala kwe-cache kanye nokulahleka kwephakethe.

2. Amaphakethe ahlelwa kabusha njengoba edlula ku-cache, okwenza kube nzima ukunquma ngokunembile izikali zesikhathi ezifana ne-jitter, ukuhlaziywa kwezikhawu zamaphakethe, kanye nokubambezeleka.

3. Ayikwazi ukuqapha amaphakethe amaphutha e-OSI layer 1.2. Amachweba amaningi okulinganisa idatha ahlunga amaphakethe edatha angajwayelekile, angakwazi ukunikeza ulwazi oluningiliziwe noluwusizo lwedatha lokuxazulula izinkinga.

4. Ngenxa yokuthi ithrafikhi yembobo ebonisiwe yandisa umthwalo we-CPU weswishi, kuzobangela ukuthi ukusebenza kweswishi kwehle.

Izicelo Ezijwayelekile ze-SPAN

1. Ukuze uthole izixhumanisi ezine-bandwidth ephansi kanye namakhono amahle okulinganisa, ukulinganisa ngamachweba amaningi kungasetshenziswa ekuhlaziyeni nasekuqapheni okuguquguqukayo.

2. Ukuqapha izitayela: Uma ukuqapha okunembile kungadingeki, izibalo zedatha ezingajwayelekile kuphela ezanele.

3. Ukuhlaziywa kwephrothokholi kanye nesicelo: ulwazi olufanele lwedatha lunganikezwa kalula futhi ngokonga kusuka echwebeni lesibuko

4. Ukuqapha kwe-VLAN okuphelele: Ubuchwepheshe bokubukisa obunamachweba amaningi bungasetshenziswa ukuqapha kalula yonke i-VLAN kuswishi.

Isingeniso ku-VLAN:

Okokuqala, ake sethule umqondo oyisisekelo wesizinda sokusakaza. Lokhu kubhekisela ebangeni lapho ozimele bokusakaza (amakheli e-MAC okuya kuwo wonke angu-1) bangadluliselwa khona, futhi ngamanye amazwi, ububanzi lapho ukuxhumana okuqondile kungenzeka khona. Empeleni, hhayi ozimele bokusakaza kuphela, kodwa futhi nozimele be-multicast kanye nozimele be-unicast abangaziwa bangahamba ngokukhululeka ngaphakathi kwesizinda sokusakaza esifanayo.

Ekuqaleni, iswishi ye-Layer 2 yayingasungula isizinda esisodwa sokusakaza. Kuswishi ye-Layer 2 ngaphandle kwama-VLAN alungiselelwe, noma yiluphi uhlaka lokusakaza lwaluzothunyelwa kuzo zonke izimbobo ngaphandle kwe-port eyamukelayo (ukukhukhuleka). Kodwa-ke, ukusebenzisa ama-VLAN kuvumela inethiwekhi ukuthi ihlukaniswe ibe yizizinda eziningi zokusakaza. Ama-VLAN ubuchwepheshe obusetshenziswa ukuhlukanisa izizinda zokusakaza kuswishi ye-Layer 2. Ngokusebenzisa ama-VLAN, singaklama ngokukhululeka ukwakheka kwezizinda zokusakaza, sandise ukuguquguquka komklamo wenethiwekhi.

Ama-TAP enethiwekhi


Isikhathi sokuthunyelwe: Septhemba-04-2025