Esikhathini samanethiwekhi asheshayo kanye nengqalasizinda yefu, ukuqapha ithrafikhi yenethiwekhi ngesikhathi sangempela futhi esebenza kahle kube yitshe lesisekelo semisebenzi ye-IT ethembekile. Njengoba amanethiwekhi ekhula ukuze asekele izixhumanisi ze-10 Gbps+, izinhlelo zokusebenza ezifakwe ezitsheni, kanye nezakhiwo ezisatshalaliswa, izindlela zokuqapha ithrafikhi zendabuko—njengokubamba amaphakethe aphelele—azisasebenzi ngenxa yokusetshenziswa kwazo okuphezulu kwezinsiza. Yilapho i-sFlow (i-sampled Flow) iqala khona ukusebenza: iphrothokholi ye-telemetry yenethiwekhi elula, ejwayelekile eyenzelwe ukunikeza ukubonakala okuphelele kuthrafikhi yenethiwekhi ngaphandle kwamadivayisi enethiwekhi akhubazayo. Kule bhulogi, sizophendula imibuzo ebaluleke kakhulu mayelana ne-sFlow, kusukela encazelweni yayo eyisisekelo kuya ekusebenzeni kwayo okusebenzayo kuma-Network Packet Brokers (NPBs).
1. Kuyini i-sFlow?
I-sFlow iyiphrothokholi yokuqapha ithrafikhi yenethiwekhi evulekile, ejwayelekile embonini eyakhiwe yi-Inmon Corporation, echazwe ku-RFC 3176. Ngokuphambene nalokho igama layo elingakusho, i-sFlow ayinalo i-logic "yokulandelela ukugeleza" engokwemvelo—iwubuchwepheshe be-telemetry obusekelwe kumasampula obuqoqa futhi buthumele izibalo zethrafikhi yenethiwekhi kumqoqi ophakathi ukuze buhlaziywe. Ngokungafani nephrothokholi enesimo esifana ne-NetFlow, i-sFlow ayigcini amarekhodi okugeleza kumadivayisi enethiwekhi; esikhundleni salokho, ibamba amasampula amancane, amele ama-trafikhi kanye nama-device counters, bese ithumela ngokushesha le datha kumqoqi ukuze icutshungulwe.
Emongweni wayo, i-sFlow yenzelwe ukukhuliswa kanye nokusetshenziswa kwezinsiza okuphansi. Ifakwe kumadivayisi enethiwekhi (amaswishi, ama-router, ama-firewall) njenge-sFlow Agent, okuvumela ukuqapha ngesikhathi sangempela kwezixhumanisi zesivinini esiphezulu (kufika ku-10 Gbps nangaphezulu) ngaphandle kokwehlisa ukusebenza kwedivayisi noma ukudluliselwa kwenethiwekhi. Ukumiswa kwayo kuqinisekisa ukuhambisana phakathi kwabathengisi, okwenza kube ukukhetha okubanzi kwezindawo zenethiwekhi ezingafani.
2. Isebenza Kanjani i-sFlow?
I-sFlow isebenza ngokwakhiwa okulula, okunezingxenye ezimbili: i-sFlow Agent (efakwe kumadivayisi enethiwekhi) kanye ne-sFlow Collector (iseva ephakathi yokuhlanganiswa kwedatha nokuhlaziywa). Ukuhamba komsebenzi kuzungeze izindlela ezimbili ezibalulekile zokuthatha amasampula—ukuthatha amasampula ephaketheni kanye nokuthatha amasampula aphikisayo—kanye nokuthumela idatha ngaphandle, njengoba kuchazwe ngezansi:
2.1 Izingxenye Eziyinhloko
- I-Agent ye-sFlow: Imojula yesofthiwe elula eyakhelwe kumadivayisi enethiwekhi (isb., amaswishi e-Cisco, ama-router e-Huawei). Inesibopho sokuqoqa amasampula ethrafikhi kanye nedatha ephikisayo, ihlanganise le datha kuma-Datagram e-sFlow, bese iwathumela kumqoqi nge-UDP (imbobo ezenzakalelayo 6343).
- Umqoqi we-sFlow: Uhlelo oluhlanganisiwe (olungokoqobo noma olubonakalayo) oluthola, luhlaziye, lugcine, futhi luhlaziye ama-sFlow Datagrams. Ngokungafani nabaqoqi be-NetFlow, abaqoqi be-sFlow kumele baphathe ama-packet header angavuthiwe (ngokuvamile ama-byte angu-60-140 ngesampula ngayinye) futhi bawahlaziye ukuze bakhiphe ukuqonda okunengqondo—lokhu kuguquguquka kuvumela ukwesekwa kwama-packet angewona ajwayelekile njenge-MPLS, i-VXLAN, ne-GRE.
2.2 Izindlela Eziyinhloko Zokwenza Amasampula
I-sFlow isebenzisa izindlela ezimbili zokuthatha amasampula ezihambisanayo ukuze ilinganisele ukubonakala kanye nokusebenza kahle kwezinsizakusebenza:
1- Ukusampula Iphakethe: I-Agent isampula ngokungahleliwe amaphakethe angenayo/aphumayo kuma-interface aqashwe. Isibonelo, izinga lokusampula elingu-1:2048 lisho ukuthi i-Agent ibamba iphakethe elilodwa kuwo wonke angu-2048 (izinga lokusampula elizenzakalelayo lamadivayisi amaningi). Esikhundleni sokuthwebula amaphakethe aphelele, iqoqa amabhayithi ambalwa okuqala kuphela ekhanda lephakethe (ngokuvamile amabhayithi angu-60–140), aqukethe ulwazi olubalulekile (umthombo/indawo ye-IP, imbobo, iphrothokholi) ngenkathi inciphisa izindleko ezingaphezulu. Izinga lokusampula lingalungiselelwa futhi kufanele lilungiswe ngokusekelwe kumthamo wethrafikhi yenethiwekhi—amanani aphezulu (amasampula amaningi) athuthukisa ukunemba kodwa andisa ukusetshenziswa kwezinsiza, kuyilapho amazinga aphansi ehlisa izindleko ezingaphezulu kodwa angase aphuthelwe amaphethini ethrafikhi angavamile.
2- Ukusampula Okuphikisayo: Ngaphezu kwamasampula ephakethe, i-Agent iqoqa njalo idatha ephikisayo kusuka kuzixhumi zenethiwekhi (isb., amabhayithi adluliselwe/atholiwe, ukwehla kwephakethe, amazinga amaphutha) ngezikhathi ezihleliwe (okuzenzakalelayo: imizuzwana eyi-10). Le datha inikeza umongo mayelana nempilo yedivayisi kanye nesixhumanisi, igcwalisa amasampula ephakethe ukuze inikeze isithombe esiphelele sokusebenza kwenethiwekhi.
2.3 Ukuthunyelwa Nokuhlaziywa Kwedatha
Uma isiqoqiwe, i-Agent ihlanganisa amasampula ephakethe kanye nedatha ephikisanayo kuma-sFlow Datagrams (amaphakethe e-UDP) bese iwathumela kumqoqi. Umqoqi uhlaziya lawa ma-datagram, ahlanganise idatha, futhi akhiqize imiboniso, imibiko, noma izexwayiso. Isibonelo, ingakhomba abakhuluma kakhulu, ithole amaphethini ethrafikhi angajwayelekile (isb., ukuhlaselwa kwe-DDoS), noma ilandelele ukusetshenziswa kwe-bandwidth ngokuhamba kwesikhathi. Izinga lokusampula lifakiwe ku-datagram ngayinye, okuvumela umqoqi ukuthi ahlukanise idatha ukuze alinganisele ivolumu yethrafikhi iyonke (isb., isampula eli-1 kwangu-2048 lisho ukuthi ithrafikhi ebonwe idlula izikhathi ezingu-~2048).
3. Iyini Inani Eliyinhloko le-sFlow?
Inani le-sFlow livela enhlanganisela yalo eyingqayizivele yokukwazi ukukhulisa, ukusebenza kahle okuphezulu, kanye nokulinganisa—okubhekana nezinkinga ezibalulekile zokuqapha inethiwekhi yesimanje. Iziphakamiso zayo ezibalulekile yilezi:
3.1 Izinsiza Eziphansi Zokusebenzisa Imali Eningi
Ngokungafani nokubamba amaphakethe agcwele (okudinga ukugcinwa nokucubungula wonke amaphakethe) noma amaphrothokholi anesimo njenge-NetFlow (egcina amathebula okugeleza kumadivayisi), i-sFlow isebenzisa amasampula futhi igwema isitoreji sedatha sendawo. Lokhu kunciphisa ukusetshenziswa kwe-CPU, imemori, kanye nomkhawulokudonsa kumadivayisi enethiwekhi, okwenza kube kuhle kakhulu ezixhumanisini zesivinini esikhulu kanye nezimo ezivinjelwe izinsiza (isb., amanethiwekhi ebhizinisi amancane kuya kwaphakathi). Ayidingi ihadiwe eyengeziwe noma ukuthuthukiswa kwememori kumadivayisi amaningi, okunciphisa izindleko zokuthunyelwa.
3.2 Ukwanda Okuphezulu
I-sFlow yakhelwe ukukala ngamanethiwekhi esimanje. Umqoqi oyedwa angaqapha amashumi ezinkulungwane zezixhumi ezixhunyanisiwe kumadivayisi amaningi, esekela izixhumanisi ezifika ku-100 Gbps nangaphezulu. Indlela yayo yokwenza amasampula iqinisekisa ukuthi ngisho noma ivolumu yethrafikhi ikhuphuka, ukusetshenziswa kwezinsiza ze-Agent kuhlala kulawuleka—kubalulekile ezikhungweni zedatha kanye namanethiwekhi ebanga lenkampani anemithwalo emikhulu yethrafikhi.
3.3 Ukubonakala Okuphelele Kwenethiwekhi
Ngokuhlanganisa ukusampula kwephakethe (kokuqukethwe kwethrafikhi) kanye nokusampula okuphikisayo (kwempilo yedivayisi/isixhumanisi), i-sFlow inikeza ukubonakala kusukela ekuqaleni kuya ekugcineni kwethrafikhi yenethiwekhi. Isekela ithrafikhi yeLayer 2 kuya kuLayer 7, ivumela ukuqapha izinhlelo zokusebenza (isb., iwebhu, i-P2P, i-DNS), amaphrothokholi (isb., i-TCP, i-UDP, i-MPLS), kanye nokuziphatha komsebenzisi. Lokhu kubonakala kusiza amaqembu e-IT ukuthola izithiyo, ukuxazulula izinkinga, kanye nokwenza ngcono ukusebenza kwenethiwekhi ngendlela esebenzayo.
3.4 Ukumiswa Okujwayelekile Kwabathengisi Abangathathi-hlangothi
Njengendinganiso evulekile (RFC 3176), i-sFlow isekelwa yibo bonke abathengisi abakhulu benethiwekhi (i-Cisco, i-Huawei, i-Juniper, i-Arista) futhi ihlangana namathuluzi okuqapha athandwayo (isb., i-PRTG, i-SolarWinds, i-sFlow-RT). Lokhu kuqeda ukukhiya kwabathengisi futhi kuvumela izinhlangano ukuthi zisebenzise i-sFlow kuzo zonke izindawo zenethiwekhi ezingafani (isb., amadivayisi axubile e-Cisco ne-Huawei).
4. Izimo Ezijwayelekile Zokusebenza ze-sFlow
Ukuguquguquka kwe-sFlow kuyenza ifaneleke ezindaweni eziningi zenethiwekhi, kusukela emabhizinisini amancane kuya ezikhungweni ezinkulu zedatha. Izimo zayo zokusetshenziswa ezivame kakhulu zifaka:
4.1 Ukuqapha Inethiwekhi Yesikhungo Sedatha
Izikhungo zedatha zithembele ezixhumanisini zesivinini esikhulu (10 Gbps+) futhi zisekela izinkulungwane zemishini ebonakalayo (ama-VM) kanye nezinhlelo zokusebenza ezifakwe ebhodleleni. I-sFlow inikeza ukubonakala kwesikhathi sangempela kuthrafikhi yenethiwekhi ye-leaf-spine, isiza amaqembu e-IT ukuthola "ukugeleza kwezindlovu" (ukugeleza okukhulu, okuphila isikhathi eside okubangela ukuminyana), kuthuthukisa ukwabiwa kwe-bandwidth, futhi kuxazulule izinkinga zokuxhumana phakathi kwe-VM/container. Ivame ukusetshenziswa ne-SDN (Software-Defined Networking) ukuze kuvunyelwe ubunjiniyela bethrafikhi obunamandla.
4.2 Ukuphathwa Kwenethiwekhi Yekhampasi Yebhizinisi
Amakhampasi ebhizinisi adinga ukuqapha okungabizi kakhulu nokungalinganiswa ukuze kulandelwe ithrafikhi yabasebenzi, kuphoqelelwe izinqubomgomo ze-bandwidth, futhi kutholakale ukungalingani (isb., amadivayisi angagunyaziwe, ukwabelana ngamafayela e-P2P). I-overhead ephansi ye-sFlow yenza kube kuhle kakhulu kuma-switch ekhampasi nama-router, okuvumela amaqembu e-IT ukuthi abone ama-bandwidth hogs, athuthukise ukusebenza kohlelo lokusebenza (isb., i-Microsoft 365, i-Zoom), futhi aqinisekise ukuxhumana okuthembekile kwabasebenzisi bokugcina.
4.3 Ukusebenza Kwenethiwekhi Yesithwali Nezinga
Abaqhubi bezokuxhumana basebenzisa i-sFlow ukuqapha umgogodla kanye nokufinyelela amanethiwekhi, ukulandelela ivolumu yethrafikhi, ukubambezeleka, kanye namazinga amaphutha kuzo zonke izinkulungwane zezindawo zokuxhumana. Kusiza abaqhubi ukuthi bathuthukise ubudlelwano bokubuka, bathole ukuhlaselwa kwe-DDoS kusenesikhathi, futhi bakhokhise amakhasimende ngokusekelwe ekusetshenzisweni kwe-bandwidth (ukubalwa kokusetshenziswa).
4.4 Ukuqapha Ukuphepha Kwenethiwekhi
I-sFlow iyithuluzi eliwusizo lamaqembu okuphepha, njengoba ingathola amaphethini ethrafikhi angajwayelekile ahlobene nokuhlaselwa kwe-DDoS, ukuskena kwamachweba, noma i-malware. Ngokuhlaziya amasampula ephakethe, abaqoqi bangabona amapheya e-IP omthombo/indawo angajwayelekile, ukusetshenziswa kwephrothokholi okungalindelekile, noma ukwanda okungazelelwe kwethrafikhi—okubangela izexwayiso zokuphenywa okwengeziwe. Ukusekelwa kwayo kwama-header ephakethe eluhlaza kuyenza isebenze kahle kakhulu ekutholeni ama-vector okuhlasela angewona ajwayelekile (isb., ithrafikhi ye-DDoS ebethelwe).
4.5 Ukuhlela Amandla kanye Nokuhlaziywa Kwezindlela Zokusebenza
Ngokuqoqa idatha yethrafikhi yomlando, i-sFlow ivumela amaqembu e-IT ukuthi abone izitayela (isb., ukwanda kwe-bandwidth yesizini, ukusetshenziswa kohlelo lokusebenza okukhula) futhi ahlele ukuthuthukiswa kwenethiwekhi ngendlela ephumelelayo. Isibonelo, uma idatha ye-sFlow ikhombisa ukuthi ukusetshenziswa kwe-bandwidth kuyanda ngo-20% minyaka yonke, amaqembu angakwazi ukwenza isabelomali sezixhumanisi ezengeziwe noma ukuthuthukiswa kwamadivayisi ngaphambi kokuba kube nokuminyana.
5. Ukulinganiselwa kwe-sFlow
Nakuba i-sFlow iyithuluzi lokuqapha elinamandla, inemikhawulo engokwemvelo okumele izinhlangano ziyicabangele lapho ziyisebenzisa:
5.1 Ukushintshaniswa Kokunemba Kokuthatha Amasampula
Umkhawulo omkhulu we-sFlow ukuthembela kwayo ekuthatheni amasampula. Amazinga okuthatha amasampula aphansi (isb., 1:10000) angase aphuthelwe amaphethini ethrafikhi angavamile kodwa abucayi (isb., ukugeleza kokuhlasela okuthatha isikhathi esifushane), kuyilapho amazinga aphezulu okuthatha amasampula enyusa izindleko zezinsiza. Ngaphezu kwalokho, ukuthatha amasampula kwethula ukuhlukahluka kwezibalo—ukulinganisa kwenani eliphelele lethrafikhi kungase kungabi nembambo engu-100%, okungaba yinkinga ezimweni zokusetshenziswa ezidinga ukubalwa kwethrafikhi okunembile (isb., ukukhokhisa izinsizakalo ezibalulekile emsebenzini).
5.2 Akukho Umongo Wokugeleza Okugcwele
Ngokungafani ne-NetFlow (ebamba amarekhodi okugeleza aphelele, okuhlanganisa izikhathi zokuqala/zokuphela kanye nama-byte/amaphakethe aphelele ngokugeleza ngakunye), i-sFlow ibamba kuphela amasampula ephakethe ngalinye. Lokhu kwenza kube nzima ukulandelela umjikelezo wokuphila wokugeleza (isb., ukuhlonza ukuthi ukugeleza kuqale nini, ukuthi kuhlale isikhathi esingakanani, noma ukusetshenziswa kwayo okuphelele kwe-bandwidth).
5.3 Ukusekelwa Okulinganiselwe Kwezindlela Zokuxhumana/Amamodi Ezithile
Amadivayisi amaningi enethiwekhi asekela i-sFlow kuphela kuzixhumi ezibonakalayo—izixhumi ezibonakalayo (isb., izixhumi ezincane ze-VLAN, iziteshi ze-port) noma izindlela ze-stack kungenzeka zingasekelwa. Isibonelo, izishintshi ze-Cisco azisekeli i-sFlow uma iqalwa kumodi ye-stack, okunciphisa ukusetshenziswa kwayo ekusetshenzisweni kwe-stack switch.
5.4 Ukuthembela Ekusetshenzisweni Kwe-ejenti
Ukusebenza kahle kwe-sFlow kuncike kwikhwalithi yokusetshenziswa kwe-Agent kumadivayisi enethiwekhi. Amanye amadivayisi asezingeni eliphansi noma ihadiwe endala ingaba nama-Agent athuthukisiwe kabi asebenzisa izinsiza eziningi noma anikeze amasampula anganembile. Isibonelo, amanye ama-router anama-CPU okulawula okuhamba kancane avimbela ukusetha amazinga amahle kakhulu okusampula, okunciphisa ukunemba kokutholwa kokuhlaselwa okufana ne-DDoS.
5.5 Ukuqonda Okulinganiselwe Kwethrafikhi Ebethelwe
I-sFlow ibamba kuphela izihloko zamaphakethe—ithrafikhi ebethelwe (isib., i-TLS 1.3) ifihla idatha yomthwalo okhokhelwayo, okwenza kube nzima ukuhlonza uhlelo lokusebenza lwangempela noma okuqukethwe kokugeleza. Ngenkathi i-sFlow isakwazi ukulandelela amamethrikhi ayisisekelo (isib., umthombo/indawo oya kuyo, usayizi wephakethe), ayikwazi ukunikeza ukubonakala okujulile ekuziphatheni kwethrafikhi ebethelwe (isib., umthwalo okhokhelwayo ononya ofihliwe kuthrafikhi ye-HTTPS).
5.6 Ubunzima Bomqoqi
Ngokungafani ne-NetFlow (ehlinzeka ngamarekhodi okugeleza ahlolwe kusengaphambili), i-sFlow idinga abaqoqi ukuthi bahlole izihloko zamaphakethe ezingavuthiwe. Lokhu kwandisa ubunzima bokuthunyelwa kanye nokuphathwa kwabaqoqi, njengoba amaqembu kumele aqinisekise ukuthi umqoqi angakwazi ukusingatha izinhlobo ezahlukene zamaphakethe kanye nezinqubo (isb., i-MPLS, i-VXLAN).
6. Isebenza Kanjani i-sFlow kuUmthengisi Wephakethe Lenethiwekhi (NPB)?
I-Network Packet Broker (NPB) iyithuluzi elikhethekile elihlanganisa, lihlunge, futhi lisakaze ithrafikhi yenethiwekhi kumathuluzi okuqapha (isb., abaqoqi be-sFlow, i-IDS/IPS, izinhlelo zokubamba amaphakethe aphelele). Ama-NPB asebenza “njengezindawo zokuqapha ithrafikhi,” eqinisekisa ukuthi amathuluzi okuqapha athola kuphela ithrafikhi efanele ayidingayo—ukuthuthukisa ukusebenza kahle nokunciphisa ukugcwala kwamathuluzi. Uma ihlanganiswe ne-sFlow, ama-NPB athuthukisa amakhono e-sFlow ngokubhekana nemikhawulo yayo nokwandisa ukubonakala kwayo.
6.1 Indima ye-NPB ekusetshenzisweni kwe-sFlow
Ekusetshenzisweni kwe-sFlow okuvamile, idivayisi ngayinye yenethiwekhi (iswishi, i-router) isebenzisa i-sFlow Agent ethumela amasampula ngqo kumqoqi. Lokhu kungaholela ekugcwaleni ngokweqile komqoqi kumanethiwekhi amakhulu (isb., izinkulungwane zamadivayisi athumela ama-datagram e-UDP ngesikhathi esisodwa) futhi kwenza kube nzima ukuhlunga ithrafikhi engafanele. Ama-NPB axazulula lokhu ngokusebenza njenge-sFlow Agent noma umqoqi wethrafikhi ophakathi, kanje:
6.2 Izindlela Zokuhlanganisa Eziyinhloko
1- Ukusampula kwe-sFlow okuhlanganisiwe: I-NPB ihlanganisa ithrafikhi evela kumadivayisi enethiwekhi amaningi (ngamachweba e-SPAN/RSPAN noma ama-TAP), bese isebenzisa i-sFlow Ejenti ukuze ihlole le thrafikhi ehlanganisiwe. Esikhundleni sokuthi idivayisi ngayinye ithumele amasampula kumqoqi, i-NPB ithumela umfudlana owodwa wamasampula—ukunciphisa umthwalo womqoqi kanye nokwenza kube lula ukuphathwa. Le modi ilungele amanethiwekhi amakhulu, njengoba ihlanganisa ukusampula futhi iqinisekisa amazinga okusampula ahambisanayo kuyo yonke inethiwekhi.
2- Ukuhlunga Nokwenza Kahle Ithrafikhi: Ama-NPB angahlunga ithrafikhi ngaphambi kokuthatha amasampula, aqinisekise ukuthi ithrafikhi efanele kuphela (isb., ithrafikhi evela kuma-subnet abalulekile, izinhlelo zokusebenza ezithile) ethathwa amasampula yi-sFlow Agent. Lokhu kunciphisa inani lamasampula athunyelwa kumqoqi, kuthuthukisa ukusebenza kahle futhi kunciphisa izidingo zokugcina. Isibonelo, i-NPB ingahlunga ithrafikhi yokuphathwa kwangaphakathi (isb., i-SSH, i-SNMP) engadingi ukuqapha, igxile ku-sFlow kuthrafikhi yomsebenzisi kanye nohlelo lokusebenza.
3- Ukuhlanganiswa Kwesampula Nokuxhumana: Ama-NPB angahlanganisa amasampula e-sFlow avela kumadivayisi amaningi, bese ehlanganisa le datha (isb., ukuxhumanisa ithrafikhi kusuka ku-IP yomthombo kuya ezindaweni eziningi) ngaphambi kokuyithumela kumqoqi. Lokhu kunikeza umqoqi umbono ophelele wokugeleza kwenethiwekhi, okubhekana nomkhawulo we-sFlow wokungalandeli izimo zokugeleza okugcwele. Amanye ama-NPB athuthukile nawo asekela ukulungisa amazinga okusampula ngokuguquguqukayo ngokusekelwe kumthamo wethrafikhi (isb., ukwandisa amazinga okusampula ngesikhathi sokukhuphuka kwethrafikhi ukuze kuthuthukiswe ukunemba).
4- Ukuphindaphinda kanye nokutholakala okuphezulu: Ama-NPB anganikeza izindlela eziphindaphindayo zamasampula e-sFlow, aqinisekise ukuthi akukho datha elahlekayo uma umqoqi ehluleka. Angaphinde alayishe amasampula alinganiselayo kubaqoqi abaningi, avimbele noma yimuphi umqoqi oyedwa ukuthi abe yisithiyo.
6.3 Izinzuzo Ezisebenzayo Zokuhlanganiswa kwe-NPB + sFlow
Ukuhlanganisa i-sFlow ne-NPB kuletha izinzuzo eziningana ezibalulekile:
- Ukusabalala: Ama-NPB aphatha ukuhlanganiswa kwethrafikhi kanye nokusampula, okuvumela umqoqi we-sFlow ukuthi alinganisele ukusekela izinkulungwane zamadivayisi ngaphandle kokulayisha ngokweqile.
- Ukunemba: Ukulungiswa kwesilinganiso sokusampula okuguquguqukayo kanye nokuhlunga ithrafikhi kuthuthukisa ukunemba kwedatha ye-sFlow, kunciphisa ingozi yokulahlekelwa amaphethini abalulekile ethrafikhi.
- Ukusebenza kahle: Ukusampula kanye nokuhlunga okuhlanganisiwe kunciphisa inani lamasampula athunyelwa kumqoqi, kunciphisa i-bandwidth kanye nokusetshenziswa kwesitoreji.
- Ukuphathwa Okulula: Ama-NPB ahlanganisa ukucushwa nokuqapha kwe-sFlow, okususa isidingo sokusetha ama-Agent kuwo wonke amadivayisi enethiwekhi.
Isiphetho
I-sFlow iyiphrothokholi yokuqapha inethiwekhi elula, ekwazi ukukalwa, futhi ejwayelekile ebhekana nezinselele ezihlukile zamanethiwekhi asheshayo anamuhla. Ngokusebenzisa ukusampula ukuqoqa ithrafikhi kanye nedatha ephikisayo, inikeza ukubonakala okuphelele ngaphandle kokwehlisa ukusebenza kwedivayisi—okwenza ifaneleke kakhulu ezikhungweni zedatha, amabhizinisi, kanye nabathwali. Ngenkathi inemikhawulo (isb., ukunemba kokusampula, umongo wokugeleza okulinganiselwe), lokhu kungancishiswa ngokuhlanganisa i-sFlow ne-Network Packet Broker, ehlanganisa ukusampula, ihlunge ithrafikhi, futhi ithuthukise ukusabalala.
Kungakhathaliseki ukuthi uqapha inethiwekhi encane yekhampasi noma umgogodla omkhulu wenkampani, i-sFlow inikeza ikhambi elingabizi kakhulu, elingakhethi umthengisi ukuze uthole ukuqonda okusebenzayo ngokusebenza kwenethiwekhi. Uma ihlanganiswe ne-NPB, iba namandla kakhulu—okuvumela izinhlangano ukuthi zikhulise ingqalasizinda yazo yokuqapha futhi zigcine ukubonakala njengoba amanethiwekhi azo ekhula.
Isikhathi sokuthunyelwe: Feb-05-2026
