Ukuthwebula Kwethrafikhi Yenethiwekhi Yokuqapha Inethiwekhi, Ukuhlaziya Nokuphepha: I-TAP iqhudelana ne-SPAN

Umehluko omkhulu phakathi kokuthwebula amaphakethe usebenzisa i-Network TAP kanye nezimbobo ze-SPAN.

I-Port Mirroring(eyaziwa nangokuthi i-SPAN)

I-Network Tap(okwaziwa nangokuthi Tap Replication, Tap Aggregation, Active Tap, Copper Tap, Ethernet Tap, njll.)I-TAP (Indawo yokufinyelela yesikhumulo)iyidivayisi yezingxenyekazi zekhompuyutha engenzi lutho ngokuphelele, engathwebula ithrafikhi kunethiwekhi. Ngokuvamile isetshenziselwa ukuqapha ithrafikhi phakathi kwamaphoyinti amabili kunethiwekhi. Uma inethiwekhi phakathi kwalawa maphoyinti amabili iqukethe ikhebula eliphathekayo, i-TAP yenethiwekhi ingaba indlela engcono kakhulu yokuthwebula ithrafikhi.

Ngaphambi kokuchaza umehluko phakathi kwezixazululo ezimbili(I-Port Mirror ne-Network Tap), kubalulekile ukuqonda ukuthi i-Ethernet isebenza kanjani. Ku-100Mbit nangaphezulu, abasingathi bavamise ukukhuluma nge-duplex egcwele, okusho ukuthi usokhaya oyedwa angathumela(Tx) futhi amukele(Rx) kanyekanye. Lokhu kusho ukuthi kukhebula engu-100 Mbit exhunywe kumsingathi oyedwa, inani eliphelele lethrafikhi yenethiwekhi umsingathi oyedwa angathumela/amukele(Tx/Rx)) ngu-2 × 100 Mbit = 200 Mbit.

I-Port mirroring iwukuphindaphinda kwephakethe elisebenzayo, okusho ukuthi idivayisi yenethiwekhi inomthwalo wemfanelo wokukopisha iphakethe embobeni yesibuko.

THEPHA I-SPAN

Ithwebula ithrafikhi: TAP vs SPAN
Uma uqapha ithrafikhi yenethiwekhi, uma ungafuni ukusebenzisa ukwesekwa ngokuqondile ngenkathi umsebenzisi ecubungula okwenziwayo, unezinketho ezimbili eziyinhloko. Esihlokweni esilandelayo, sizonikeza isifinyezo se-TAP (Iphoyinti Lokufinyelela Lokuhlola) kanye ne-SPAN (Shintsha Isihlaziyi Sembobo). Ukuze uthole ukuhlaziya okujulile, uchwepheshe wokuhlola amaphakethe u-Timo'Neill unendatshana ezimbalwa ku-lovemytool.com ezichaza kabanzi, kodwa lapha, sizothatha indlela evamile.

I-SPAN
Ukubukisa ngembobo kuyindlela yokuqapha ithrafikhi yenethiwekhi ngokudlulisela phambili ikhophi yephakethe ngalinye engenayo kanye/noma eliphumayo lisuka embotsheni eyodwa noma ngaphezulu (noma i-VLans) yokushintshela kwenye imbobo exhunywe kusihlaziyi sethrafikhi yenethiwekhi. Ama-span avame ukusetshenziswa ezinhlelweni ezilula ukuqapha amasayithi amaningi ngesikhathi esisodwa. Inani eliqondile lokudluliswa kwenethiwekhi ekwaziyo ukuliqapha lincike ekutheni i-SPAN ifakwe kuphi uma kuqhathaniswa nempahla yesikhungo sedatha. Cishe uzothola okufunayo, kodwa kulula ukuzithola unedatha eningi kakhulu. Isibonelo, kungenzeka ukuthola amakhophi amaningi edatha efanayo kuyo yonke i-VLAN. Lokhu kwenza ukuxazulula inkinga kwe-LAN kube nzima kakhulu, futhi kuphinde kuthinte isivinini sokushintsha i-cpus noma kuthinte i-Ethernet ngokutholwa kokubekwa. Ngokuyisisekelo, i-spans eyengeziwe, kungenzeka ukuthi ulahlekelwe amaphakethe. Uma kuqhathaniswa nompompi, ama-spans angaphathwa ukude, okusho ukuthi kuchithwa isikhathi esincane sishintsha izilungiselelo, kodwa onjiniyela benethiwekhi basadingeka.

Izimbobo ze-SPAN akubona ubuchwepheshe bokungenzi lutho, njengoba abanye besho, ngoba zingaba neminye imiphumela elinganisekayo kuthrafikhi yenethiwekhi, okuhlanganisa:
- Isikhathi sokushintsha ukuxhumana kohlaka

- Ukulahla amaphakethe ngenxa yokubheka ngokweqile

- Amaphakethe awonakele alahlwa ngaphandle kwesaziso, okuvimbela ukuhlaziya
Ngakho-ke, izimbobo ze-SPAN zifaneleka kakhulu ezimweni lapho ukulahla amaphakethe kungathinti ukuhlaziya, noma lapho izindleko zicatshangelwa khona.

TAP
Ngokuphambene, ompompi badinga ukuchitha imali ku-hardware ngaphambili, kodwa abadingi ukusetha okuningi. Ngempela, njengoba bengenzi lutho, bangaxhunywa futhi banqanyulwe kunethiwekhi ngaphandle kokuyithinta. Opopayo amadivayisi ezingxenyekazi zekhompuyutha ahlinzeka ngendlela yokufinyelela idatha egeleza ngenethiwekhi yekhompiyutha futhi avame ukusetshenziselwa ukuphepha kwenethiwekhi nezinjongo zokuqapha ukusebenza. Ithrafikhi egadiwe ibizwa ngethrafikhi "yokudlula" futhi ichweba elisetshenziselwa ukuqapha libizwa nge-"monitoring port". Ukuze uphenye inethiwekhi ngokucace kakhudlwana, ompompi bangabekwa phakathi kwamarutha namaswishi.
Ngenxa yokuthi i-TAP ayiwathinti amaphakethe, ingabukwa njengendlela yokubuka ithrafikhi yenethiwekhi.
Kunezinhlobo ezintathu zezixazululo ze-TAP:

- Isihlukanisi senethiwekhi (1 : 1)

- I-TAP ehlanganisiwe (okuningi: 1)

- Ukuvuselelwa kwe-TAP (1: okuningi)

I-TAP iphindaphinda ithrafikhi ethuluzini elilodwa lokuqapha lokungenzi lutho, noma kudivayisi yephakethe yenethiwekhi enokuminyana okuphezulu, futhi inikezela ngamathuluzi okuhlola ama-QOS amaningi (okuvame ukuphindaphindeka), amathuluzi okuqapha inethiwekhi, namathuluzi okuhogela kwenethiwekhi njenge-wireshark.
Ngaphezu kwalokho, izinhlobo ze-TAP ziyahlukahluka kuye ngohlobo lwekhebula, okuhlanganisa i-fiber TAP ne-gigabit copper TAP, zombili zisebenza ngendlela efanayo ngokukhipha ingxenye yesiginali kusihlaziyi sethrafikhi yenethiwekhi, kuyilapho imodeli eyinhloko iqhubeka nokudlulisa ngaphandle kokuphazamiseka. Ku-TAP ye-fiber, iwukuhlukanisa ugodo kabili, kuyilapho ohlelweni lwekhebula lethusi, kuwukuphindaphinda isignali kagesi.

Ukuqhathanisa i-TAP ne-SPAN

Okokuqala, imbobo ye-SPAN ayifaneleki isixhumanisi esiphelele se-1G, futhi ngisho nalapho ingaphansi komthamo wayo omkhulu, iwisa ngokushesha amaphakethe ngenxa yokuthi isindwa kakhulu, noma ngenxa nje yokuthi iswishi ibeka kuqala izinsuku ezivamile zokusuka embobeni kuya echwebeni kunedatha yembobo ye-SPAN. Ngokungafani nompompi benethiwekhi, izimbobo ze-SPAN zihlunga amaphutha ezendlalelo ezibonakalayo, okwenza ezinye izinhlobo zokuhlaziya zibe nzima kakhulu, futhi njengoba sibonile, izikhathi zokwenyuka ezingalungile nozimele abashintshile kungabangela ezinye izinkinga. Ngakolunye uhlangothi, i-TAP ingasebenzisa isixhumanisi se-1G esiyiduplex esigcwele.

I-TAP ingakwazi futhi ukuthatha iphakethe eliphelele futhi yenze ukuhlola okujulile kwephakethe kwezivumelwano, ukwephulwa komthetho, ukungenela, njll. Ngakho, idatha ye-TAP ingasetshenziswa njengobufakazi enkantolo, kanti idatha yembobo ye-SPAN ayikwazi.
Ukuvikeleka kungesinye isici lapho kunomehluko phakathi kwamasu amabili. Izimbobo ze-SPAN ngokuvamile zilungiselelwa ukuxhumana kwendlela eyodwa, kodwa futhi zingathola ukuxhumana kwezinye izimo, okubangela ubungozi obukhulu. Ngokuphambene, i-TAP ayilungiseki futhi ayinalo ikheli le-IP, ngakho ayikwazi ukugqekezwa.

Izimbobo ze-SPAN ngokuvamile azidluli omaka be-VLAN, okungenza kube nzima ukuthola ukwehluleka kwe-VLAN, kodwa ukuthepha akukwazi ukubona yonke inethiwekhi ye-VLAN ngesikhathi esisodwa. Uma ompompi abahlanganisiwe bengasetshenziswa, i-TAP ngeke inikeze umkhondo ofanayo kuzo zombili iziteshi, kodwa kufanele kuqikelelwe lapho kutholwa ukuthi usudlulelwe yisikhathi. Kukhona ompompi abahlanganisiwe, njenge-Booster ye-Profitap, ehlanganisa izimbobo eziyisishiyagalombili ze-10/100/1G kokuphumayo kwe-1G-10G.

I-Booster iyakwazi ukufaka amaphakethe ngokufaka amathegi e-VLAN. Ngale ndlela, ulwazi lwembobo yomthombo lwephakethe ngalinye luzodluliselwa kumhlaziyi.

Izimbobo ze-SPAN ziseyithuluzi abaphathi benethiwekhi abazolisebenzisa, kodwa uma isivinini nokufinyelela okuthembekile kuyo yonke idatha yenethiwekhi kubalulekile, i-TAP iyinketho engcono. Uma kunqunywa ukuthi iyiphi indlela okufanele ithathwe, izimbobo ze-SPAN zifaneleka kakhulu kumanethiwekhi asebenzisa kancane, njengoba amaphakethe alahlekile awathinti ukuhlaziya noma engakukhetha ezimeni lapho izindleko ziyinkinga. Kodwa-ke, kumanethiwekhi anethrafikhi ephezulu, amandla e-TAP, ukuvikeleka, nokuthembeka kuzonikeza ukubonakala okugcwele kuthrafikhi kunethiwekhi yakho ngaphandle kokwesaba ukulahleka kwephakethe noma ukuhlunga amaphutha ongqimba obonakalayo.

TAP

 

○ Ibonakala ngokugcwele

○ Phinda futhi yonke ithrafikhi (wonke amaphakethe abo bonke osayizi nezinhlobo)

○ Akwenzi lutho, akuphazamisi (ayishintshi idatha)

○ Ochungechungeni, azikho izimbobo zokushintshwa ezisetshenziselwa ukuphindaphinda ithrafikhi eyi-duplex egcwele kumahhanisi Ukusethwa okulula (plug futhi udlale)

○ Ayinabungozi kubageli (idivayisi yokuqapha engabonakali, eyodwa evela kunethiwekhi, alikho ikheli le-IP/MAC)

○ Kuyakaleka

○ Ifanele noma yisiphi isimo

I-SPAN

 

○ Ukubonakala kancane

○ Ukungakopishi yonke ithrafikhi (ukwehlisa osayizi abathile nezinhlobo zamaphakethe)

○ Okungakwenzi (ukushintsha isikhathi sephakethe, ukukhulisa ukubambezeleka)

○ Sebenzisa imbobo yokushintsha (imbobo ngayinye ye-SPAN isebenzisa imbobo yokushintsha)

○ Ayikwazi ukuphatha ukuxhumana kwe-full-duplex (amaphakethe awehliswayo lapho egcwele kakhulu, angase futhi aphazamise ukusebenza kweswishi eyinhloko)

○ Onjiniyela badinga ukulungisa

○ Akuphephile (Isistimu yokuqapha iyingxenye yenethiwekhi, izinkinga zokuphepha ezingaba khona)

○ Ayinakulinganiswa

○ Kwenzeka kuphela ngaphansi kwezimo ezithile

Ungase ube nentshisekelo ngesihloko esihlobene: Ungathwebula kanjani ithrafikhi yenethiwekhi? I-Network Tap vs Port Mirror


Isikhathi sokuthumela: Jun-09-2025