Uma idivayisi ye-Intrusion Detection System (IDS) isetshenziswa, imbobo yezibuko ekushintsheni esikhungweni solwazi seqembu lontanga ayanele (isibonelo, imbobo yesibuko eyodwa kuphela evunyelwe, futhi imbobo yesibuko isebenzise amanye amadivayisi).
Ngalesi sikhathi, lapho singangezi izimbobo eziningi zokubukisa, singasebenzisa ukuphindaphinda kwenethiwekhi, ukuhlanganisa kanye nedivayisi yokudlulisela phambili ukusabalalisa inani elifanayo ledatha yesibuko kudivayisi yethu.
Iyini i-Network TAP?
Mhlawumbe uqale ukuzwa igama elithi TAP switch. I-TAP (I-Terminal Access Point), eyaziwa nangokuthi i-NPB (I-Network Packet Broker), noma i-Tap Aggregator?
Umsebenzi oyinhloko we-TAP ukusetha phakathi kwembobo yesibuko kunethiwekhi yokukhiqiza kanye neqoqo ledivayisi yokuhlaziya. I-TAP iqoqa ithrafikhi eyenziwe isibuko noma ehlukanisiwe kusukela kudivayisi yenethiwekhi yokukhiqiza eyodwa noma ngaphezulu futhi isabalalise ithrafikhi kudivayisi eyodwa noma amaningi okuhlaziya idatha.
Izimo ezivamile zokusebenzisa inethiwekhi ye-TAP yenethiwekhi
I-Network Tap inamalebula asobala, afana nalawa:
I-Hardware Ezimele
I-TAP iwucezu oluhlukile lwehadiwe olungaphazamisi umthwalo kumadivayisi enethiwekhi akhona, okungenye yezinzuzo ngaphezu kwesibuko sembobo.
Shintsha?
I-Network Tap?
I-Network Transparent
Ngemuva kokuthi i-TAP ixhumeke kunethiwekhi, wonke amanye amadivayisi akunethiwekhi awathinteki. Kubo, i-TAP ibonakala njengomoya, futhi izisetshenziswa zokuqapha ezixhunywe ku-TAP zibonakala kunethiwekhi iyonke.
I-TAP ifana ne-Port Mirroring emshinini. Ngakho kungani phaka i-TAP ehlukile? Ake sibheke omunye umehluko phakathi kwe-Network TAP kanye ne-Network Port Mirroring ngokushintshana.
Umehluko 1: I-TAP yenethiwekhi kulula ukuyilungisa kune-port mirroring
Isibuko sembobo sidinga ukulungiselelwa ekushintsheni. Uma ukuqapha kudinga ukulungiswa, iswishi idinga ukuphinda ilungiselelwe BONKE. Kodwa-ke, i-TAP idinga ukulungiswa kuphela lapho icele khona, engenawo umthelela kumadivayisi enethiwekhi akhona.
Umehluko 2: I-TAP yenethiwekhi ayithinti ukusebenza kwenethiwekhi ngokuhlobene nesibuko sembobo
Isibuko sembobo kuswishi siwohloza ukusebenza kweswishi futhi kuthinte amandla okushintsha. Ikakhulukazi, uma iswishi ixhunywe kunethiwekhi ochungechungeni njengasemgqeni, amandla okudlulisela phambili ayo yonke inethiwekhi athinteka kakhulu. I-TAP iyi-hardware ezimele futhi ayiphazamisi ukusebenza kwedivayisi ngenxa yesibuko sethrafikhi. Ngakho-ke, alinawo umthelela emthwalweni wamadivayisi enethiwekhi akhona, anezinzuzo ezinhle ngaphezu kwe-port mirroring.
Umehluko 3: I-TAP yenethiwekhi inikeza inqubo yethrafikhi ephelele kunokuphindaphinda kwesibuko sembobo
I-Port mirroring ayikwazi ukuqinisekisa ukuthi yonke ithrafikhi ingatholwa ngoba imbobo yokushintsha ngokwayo izohlunga amaphakethe athile amaphutha noma amaphakethe kasayizi amancane kakhulu. Nokho, i-TAP iqinisekisa ubuqotho bedatha ngoba "iwukuphindaphinda" okuphelele kwesendlalelo esibonakalayo.
Umehluko 4: Ukubambezeleka kokudlulisela phambili kwe-TAP kuncane kunalokho kwe-Port Mirroring
Kwamanye amaswishi asezingeni eliphansi, isibuko sembobo singase sethule ukubambezeleka lapho sikopisha ithrafikhi kumachweba wezibuko, kanye nalapho sikopisha izimbobo ezingu-10/100m ezimbobeni ze-Giga Ethernet.
Nakuba lokhu kubhalwe kabanzi, sikholelwa ukuthi ukuhlaziya okubili kokugcina akunalo ukwesekwa okuqinile kwezobuchwepheshe.
Ngakho-ke, kusiphi isimo esijwayelekile, sidinga ukusebenzisa i-TAP ngokusatshalaliswa kwethrafikhi yenethiwekhi? Kalula nje, uma unezidingo ezilandelayo, i-Network TAP iyisinqumo sakho esingcono kakhulu.
Inethiwekhi ye-TAP Technologies
Lalela okungenhla, yizwa ukuthi i-TAP network shunt iyithuluzi eliwumlingo ngempela, imakethe yamanje i-TAP shunt evamile isebenzisa ukwakheka okungaphansi kwezigaba ezintathu:
I-FPGA
- Ukusebenza okuphezulu
- Kunzima ukuthuthukisa
- Izindleko eziphezulu
I-MIPS
- Flexible futhi elula
- Ubunzima bokuthuthuka obumaphakathi
- Abathengisi abakhulu i-RMI ne-Cavium bayeke ukuthuthukiswa futhi bahluleka kamuva
I-ASIC
- Ukusebenza okuphezulu
- Ukuthuthukiswa komsebenzi wokunweba kunzima, ikakhulukazi ngenxa yokulinganiselwa kwe-chip ngokwayo
- Isixhumi esibonakalayo kanye nokucaciswa kukhawulelwe yi-chip ngokwayo, okuholela ekusebenzeni kabi kokunwetshwa
Ngakho-ke, ukuminyana okuphezulu kanye nesivinini esiphezulu se-Network TAP ebonwa emakethe inendawo enkulu yokuthuthukisa ukuguquguquka ekusetshenzisweni okungokoqobo. Ama-shunter enethiwekhi e-TAP asetshenziselwa ukuguqulwa kwephrothokholi, ukuqoqwa kwedatha, ukushutha idatha, ukwenza isibuko sedatha, nokuhlunga kwethrafikhi. Izinhlobo eziyinhloko zamachweba ezivamile zihlanganisa i-100G, 40G, 10G, 2.5G POS, GE, njll. Ngenxa yokuhoxiswa kancane kancane kwemikhiqizo ye-SDH, ama-shunters amanje we-Network TAP asetshenziswa kakhulu endaweni yenethiwekhi ye-Ethernet yonke.
Isikhathi sokuthumela: May-25-2022
