Esimweni sedijithali sanamuhla, lapho ukufinyelela i-inthanethi kugcwele khona, kubalulekile ukuba nezinyathelo zokuphepha eziqinile zokuvikela abasebenzisi ekufinyeleleni amawebhusayithi angaba yingozi noma angafanele. Isixazululo esisodwa esisebenzayo ukusetshenziswa kwe-Network Packet Broker (NPB) ukuqapha nokulawula ithrafikhi yenethiwekhi.
Ake sixoxe ngesimo ukuze siqonde ukuthi i-NPB ingasetshenziswa kanjani kule njongo:
1- Umsebenzisi ufinyelela iwebhusayithi: Umsebenzisi uzama ukufinyelela iwebhusayithi kusuka kudivayisi yakhe.
2- Amaphakethe adlulayo aphindaphindwa yi-Ukuthepha Okungasebenzisi: Njengoba isicelo somsebenzisi sihamba ngenethiwekhi, i-Passive Tap iphinda amaphakethe, okuvumela i-NPB ukuthi ihlaziye ithrafikhi ngaphandle kokuphazamisa ukuxhumana kokuqala.
3- I-Network Packet Broker idlulisela ithrafikhi elandelayo ku-Policy Server:
- I-HTTP THOLA: I-NPB ikhomba isicelo se-HTTP GET bese isithumela ku-Policy Server ukuze ihlolwe kabanzi.
- Iklayenti le-HTTPS TLS Sawubona: Kuthrafikhi ye-HTTPS, i-NPB ithwebula iphakethe le-TLS Client Hello bese ilithumela ku-Policy Server ukuze inqume iwebhusayithi lapho uya khona.
4- Iseva Yenqubomgomo ihlola ukuthi iwebhusayithi efinyelelwe ikuhlu olumnyama yini: Iseva Yenqubomgomo, ehlonyiswe ngesizindalwazi samawebhusayithi aziwayo anonya noma angafuneki, ihlola ukuthi iwebhusayithi eceliwe isesohlwini olumnyama yini.
5- Uma iwebhusayithi ikuhlu olumnyama, i-Policy Server ithumela iphakethe le-TCP Reset:
- Kumsebenzisi: Iseva Yenqubomgomo ithumela iphakethe le-TCP Reset eline-IP yomthombo wewebhusayithi kanye ne-IP yendawo yomsebenzisi, okuqeda ngempumelelo ukuxhumana komsebenzisi newebhusayithi efakwe ohlwini oluvinjelwe.
- Kuwebhusayithi: Iseva Yenqubomgomo ithumela futhi iphakethe le-TCP Reset eline-IP yomthombo womsebenzisi kanye ne-IP yendawo yewebhusayithi, inqamule uxhumano kolunye uhlangothi.
6- Ukuqondisa kabusha kwe-HTTP (uma ithrafikhi kuyi-HTTP): Uma isicelo somsebenzisi senziwe nge-HTTP, i-Policy Server ithumela futhi i-HTTP redirect kumsebenzisi, imqondise kabusha kwiwebhusayithi ephephile nehlukile.
Ngokusebenzisa lesi sixazululo kusetshenziswa i-Network Packet Broker kanye ne-Policy Server, izinhlangano zingaqapha futhi zilawule ngempumelelo ukufinyelela kwabasebenzisi kumawebhusayithi avinjelwe, zivikele inethiwekhi yazo kanye nabasebenzisi ekulimaleni okungenzeka.
Umthengisi Wephakethe Lenethiwekhi (NPB)iletha ithrafikhi evela emithonjeni eminingi ukuze ihlungwe okwengeziwe ukusiza ukulinganisela imithwalo yethrafikhi, ukunqunywa kwethrafikhi, kanye namakhono okufihla. Ama-NPB enza kube lula ukuhlanganiswa kwethrafikhi yenethiwekhi evela emithonjeni ehlukahlukene, kufaka phakathi ama-router, amaswishi, kanye nama-firewall. Le nqubo yokuhlanganisa idala umfudlana owodwa, okwenza kube lula ukuhlaziywa okulandelayo kanye nokuqapha imisebenzi yenethiwekhi. Lawa madivayisi aqhubeka nokwenza kube lula ukuhlunga ithrafikhi yenethiwekhi okuqondiwe, okuvumela izinhlangano ukuthi zigxile kudatha efanele kokubili ngezinjongo zokuhlaziya kanye nezokuphepha.
Ngaphezu kwamakhono azo okuhlanganisa nokuhlunga, ama-NPB abonisa ukusatshalaliswa kwethrafikhi yenethiwekhi okuhlakaniphile kuwo wonke amathuluzi amaningi okuqapha nokuphepha. Lokhu kuqinisekisa ukuthi ithuluzi ngalinye lithola idatha edingekayo ngaphandle kokuyigcwalisa ngolwazi olungaphandle. Ukuzivumelanisa nezimo kwama-NPB kudlulela ekwenzeni ngcono ukuhamba kwethrafikhi yenethiwekhi, kuhambisana namakhono ahlukile kanye namakhono amathuluzi ahlukene okuqapha nokuphepha. Lokhu kuthuthukisa kukhuthaza ukusetshenziswa kahle kwezinsiza kuyo yonke ingqalasizinda yenethiwekhi.
Izinzuzo ezibalulekile ze-Network Packet Broker zale ndlela zifaka:
- Ukubonakala Okuphelele: Ikhono le-NPB lokuphinda ithrafikhi yenethiwekhi livumela umbono ophelele wakho konke ukuxhumana, okuhlanganisa kokubili ithrafikhi ye-HTTP ne-HTTPS.
- Ukulawula Okuyinhlayiya: Amandla eSeva Yenqubomgomo okugcina uhlu oluvinjelwe nokuthatha izinyathelo eziqondiwe, njengokuthumela amaphakethe e-TCP Reset kanye nokuqondisa kabusha kwe-HTTP, anikeza ukulawula okuningiliziwe kokufinyelela komsebenzisi kumawebhusayithi angafuneki.
- Ukwanda: Ukuphathwa kahle kwe-NPB kwethrafikhi yenethiwekhi kuqinisekisa ukuthi lesi sixazululo sokuphepha singandiswa ukuze sihlangabezane nezidingo zabasebenzisi ezikhulayo kanye nobunzima benethiwekhi.
Ngokusebenzisa amandla e-Network Packet Broker kanye ne-Policy Server, izinhlangano zingathuthukisa ukuma kwazo kokuphepha kwenethiwekhi futhi zivikele abasebenzisi bazo ezingozini ezihlobene nokufinyelela amawebhusayithi avinjelwe.
Isikhathi sokuthunyelwe: Juni-28-2024
