IUmthengisi Wephakethe Lenethiwekhi(NPB), okuhlanganisa i-1G NPB evame ukusetshenziswa, i-10G NPB, i-25G NPB, i-40G NPB, i-100G NPB, i-400G NPB, kanyeI-Network Test Access Port (TAP), iyidivayisi yehadiwe exhuma ngqo kukhebula lenethiwekhi bese ithumela ingxenye yokuxhumana kwenethiwekhi kwamanye amadivayisi.
Ama-Network Packet Brokers avame ukusetshenziswa ezinhlelweni zokuthola ukungena kwenethiwekhi (i-IDS), kuma-detector enethiwekhi, kanye nama-profiler. Iseshini yokulinganisa i-port. Kumodi yokushintsha, isixhumanisi se-UTP esiqashwe (isixhumanisi esingafihliwe) sihlukaniswe izingxenye ezimbili yidivayisi yokushintsha i-TAP. Idatha yokushintsha ixhunywe ku-interface yokuqoqa ukuze kuqoqwe idatha yesistimu yokuqapha ukuphepha kolwazi lwe-inthanethi.
Yini ekwenzela yona i-Network Packet Broker (NPB)?
Izici Eziyinhloko:
1. Ozimele
Kuyi-hardware ezimele futhi ayithinti umthwalo wamadivayisi enethiwekhi akhona, anezinzuzo ezinkulu kunezibuko ze-port.
Iyidivayisi esemgqeni, okusho ukuthi idinga ukuxhumeka kunethiwekhi. Kodwa-ke, lokhu futhi kunephutha lokuletha iphuzu lokwehluleka, futhi ngenxa yokuthi iyidivayisi eku-inthanethi, inethiwekhi yamanje idinga ukuphazanyiswa ngesikhathi sokufakwa, kuye ngokuthi ixhunywe kuphi.
2. Okusobala
Okucacile kusho isikhombisi senethiwekhi yamanje. Ngemva kokufinyelela i-shunt yenethiwekhi, ayinawo umthelela kuwo wonke amadivayisi kunethiwekhi yamanje, futhi isobala ngokuphelele kuwo. Vele, lokhu kufaka phakathi ithrafikhi ethunyelwa yi-shunt yenethiwekhi kudivayisi yokuqapha, nayo esobala kunethiwekhi.
Isimiso sokusebenza:
Ukushintsha kwethrafikhi (ukusatshalaliswa) ngokusekelwe kudatha yokufaka, ukuphindaphinda, ukuqoqa, ukuhlunga, ukuguqulwa kwedatha ye-10G POS ngokusebenzisa ukuguqulwa kwephrothokholi kube amashumi edatha ye-megabytes LAN, ngokusho kwe-algorithm ethile yokulinganisa umthwalo, okukhiphayo ngesikhathi esifanayo ukuqinisekisa ukuthi wonke amaphakethe eseshini efanayo, noma i-IP efanayo ikhipha wonke amaphakethe avela ku-interface efanayo yomsebenzisi.
Izici Zokusebenza:
1. Ukuguqulwa kwephrothokholi
Izixhumi zokuxhumana zedatha ye-inthanethi ezisetshenziswa ama-ISP zifaka phakathi i-40G POS, i-10G POS/WAN/LAN, i-2.5G POS, kanye ne-GE, kuyilapho izixhumi zokuxhumana ezithola idatha ezisetshenziswa amaseva ezinhlelo zokusebenza ziyizixhumi zokuxhumana ze-GE kanye ne-10GE LAN. Ngakho-ke, ukuguqulwa kwephrothokholi okuvame ukukhulunywa ngakho kuzixhumi zokuxhumana ze-inthanethi kubhekisela kakhulu ekuguqulweni phakathi kwe-40G POS, i-10G POS, kanye ne-2.5G POS ibe yi-10GE LAN noma i-GE, kanye nokudluliselwa kwe-bidirectional phakathi kwe-10GE WAN kanye ne-10GE LAN kanye ne-GE.
2. Ukuqoqwa kanye nokusatshalaliswa kwedatha.
Iningi lezinhlelo zokusebenza zokuqoqa idatha ngokuyisisekelo likhipha ithrafikhi eliyikhathalelayo bese lilahla ithrafikhi elingayikhathaleli. Ithrafikhi yedatha yekheli le-IP elithile, iphrothokholi, kanye ne-port ikhishwa ngokuhlangana kwe-five-tuple (ikheli le-IP lomthombo, ikheli le-IP lokuphela, i-port lomthombo, i-port lokuphela, kanye nephrothokholi). Lapho kuphuma, umthombo ofanayo, indawo efanayo kanye nokukhishwa kwebhalansi yomthwalo kuqinisekiswa ngokuya nge-algorithm ethile ye-HASH.
3. Ukuhlunga ikhodi yesici
Ngokuqoqwa kwethrafikhi ye-P2P, uhlelo lokusebenza lungagxila kuphela kuthrafikhi ethile ethile, njenge-streaming media PPStream, BT, Thunderbolt, kanye namagama angukhiye avamile ku-HTTP njenge-GET ne-POST, njll. Indlela yokufanisa ikhodi yesici ingasetshenziswa ukukhipha nokuhlangana. I-diverter isekela ukuhlunga ikhodi yesici sendawo eqondile kanye nokuhlunga ikhodi yesici sendawo entantayo. Ikhodi yesici esintantayo iyi-offset echazwe ngokusekelwe kukhodi yesici sendawo eqondile. Ifanele izinhlelo zokusebenza ezichaza ikhodi yesici okufanele zihlungwe, kodwa ezingachazi indawo ethile yekhodi yesici.
4. Ukuphathwa kweseshini
Ikhomba ithrafikhi yeseshini futhi ilungiselela ngokuguquguqukayo inani le-N lokudlulisela iseshini (N=1 kuya ku-1024). Okusho ukuthi, amaphakethe okuqala e-N eseshini ngayinye akhishwa futhi adluliselwe ohlelweni lokuhlaziya uhlelo lokusebenza lwasemuva, kanti amaphakethe angemva kwe-N ayalahlwa, okusindisa imali engaphezulu kwensiza yesikhulumi sokuhlaziya uhlelo lokusebenza esingezansi. Ngokuvamile, uma usebenzisa i-IDS ukuqapha imicimbi, awudingi ukucubungula wonke amaphakethe eseshini yonke; kunalokho, udinga nje ukukhipha amaphakethe okuqala e-N eseshini ngayinye ukuze uqedele ukuhlaziya nokuqapha umcimbi.
5. Ukulinganisa idatha kanye nokuphindaphinda
I-splitter ingabona ukubukwa kanye nokuphindaphindwa kwedatha ku-interface yokuphuma, okuqinisekisa ukufinyelela kwedatha kwezinhlelo eziningi zohlelo lokusebenza.
6. Ukutholwa nokudluliselwa kwedatha yenethiwekhi ye-3G
Ukuqoqwa kwedatha nokusatshalaliswa kwayo kumanethiwekhi e-3G kuhlukile ezindleleni zokuhlaziya inethiwekhi zendabuko. Amaphakethe kumanethiwekhi e-3G adluliselwa ngezixhumanisi zomgogodla ngezingqimba eziningi ze-encapsulation. Ubude bephakethe kanye nefomethi ye-encapsulation kuhlukile kulawo amaphakethe kumanethiwekhi avamile. I-splitter ingabona futhi icubungule ngokunembile amaphrothokholi emigudu afana namaphakethe e-GTP ne-GRE, amaphakethe e-MPLS anezingqimba eziningi, kanye namaphakethe e-VLAN. Ingakhipha amaphakethe esignali e-IUPS, amaphakethe esignali e-GTP, kanye namaphakethe e-Radius kumachweba acacisiwe ngokusekelwe ezicini zephakethe. Ngaphezu kwalokho, ingahlukanisa amaphakethe ngokwekheli langaphakathi le-IP. Ukusekelwa kwamaphakheji amakhulu (MTU> 1522 Byte) ukucubungula, kungafeza ngokuphelele ukuqoqwa kwedatha yenethiwekhi ye-3G kanye nohlelo lokusebenza lwe-shunt.
Izidingo Zesici:
- Isekela ukusatshalaliswa kwethrafikhi ngephrothokholi yesicelo se-L2-L7.
- Isekela ukuhlunga okungu-5-tuple ngekheli le-IP eliqondile, ikheli le-IP lendawo oya kuyo, imbobo yomthombo, imbobo yendawo oya kuyo, kanye nephrothokholi kanye nemaski.
- Isekela ukulinganisela komthwalo okukhiphayo kanye ne-homology yokukhipha kanye ne-homology.
- Isekela ukuhlunga nokudlulisa ngezintambo zezinhlamvu.
- Isekela ukuphathwa kweseshini. Dlulisa amaphakethe okuqala e-N eseshini ngayinye. Inani lika-N lingachazwa.
- Ukusekela abasebenzisi abaningi. Amaphakethe edatha afana nomthetho ofanayo anganikezwa umuntu wesithathu ngesikhathi esisodwa, noma idatha eku-interface yokukhipha ingalinganiswa futhi iphindwe, ukuqinisekisa ukufinyelela kwedatha kwezinhlelo eziningi zohlelo lokusebenza.
Isixazululo Sezixazululo Zemboni Yezezimali Isixazululo Sezinzuzo
Ngokuthuthuka okusheshayo kobuchwepheshe bolwazi bomhlaba wonke kanye nokujula kolwazi, ubukhulu benethiwekhi yebhizinisi buye banda kancane kancane, futhi ukuncika kwezimboni ezahlukahlukene ohlelweni lolwazi kuye kwaba phezulu kakhulu. Ngesikhathi esifanayo, inethiwekhi yebhizinisi yokuhlasela kwangaphakathi nangaphandle, ukungahambi kahle, kanye nezinsongo zokuphepha kolwazi nakho kuyakhula, ngobuningi bokuvikelwa kwenethiwekhi, uhlelo lokuqapha ibhizinisi olusetshenziswayo oluqala ukusebenza ngokulandelana, zonke izinhlobo zokuqapha ibhizinisi, imishini yokuvikela ukuphepha esetshenziswa kuyo yonke inethiwekhi, kuzoba nokuchitha izinsiza zolwazi, ukuqapha indawo engaboni, ukuqapha okuphindaphindiwe, i-topology yenethiwekhi kanye nenkinga yokungahleleki njengokungakwazi ukuthola idatha eqondiwe ngempumelelo, okuholela ekuqapheni ukusebenza kahle kwemishini, ukutshalwa kwezimali okuphezulu, imali engenayo ephansi, ubunzima bokulungisa nokuphatha sekwephuzile, izinsiza zedatha kunzima ukuzilawula.
Isikhathi sokuthunyelwe: Septhemba-08-2022
