Iyini i-Bypass?
Imishini Yokuphepha Yenethiwekhi ivame ukusetshenziswa phakathi kwamanethiwekhi amabili noma ngaphezulu, njengaphakathi kwenethiwekhi yangaphakathi nenethiwekhi yangaphandle. Imishini Yokuphepha Yenethiwekhi ngokusebenzisa ukuhlaziywa kwayo kwephakethe lenethiwekhi, ukuze kutholakale ukuthi kukhona yini usongo, ngemva kokucutshungulwa ngokwemithetho ethile yomzila ukuze kudluliselwe iphakethe ukuze liphume, futhi uma imishini yokuphepha yenethiwekhi ingasebenzi kahle, Isibonelo, ngemva kokwehluleka kwamandla noma ukuphahlazeka, izingxenye zenethiwekhi ezixhunywe kudivayisi ziyanqanyulwa komunye nomunye. Kulokhu, uma inethiwekhi ngayinye idinga ukuxhunywa komunye nomunye, khona-ke i-Bypass kumele ivele.
Umsebenzi we-Bypass, njengoba igama lisho, uvumela amanethiwekhi amabili ukuthi axhumane ngokomzimba ngaphandle kokudlula ohlelweni lwedivayisi yokuphepha kwenethiwekhi ngesimo esithile sokubangela (ukwehluleka kwamandla noma ukuphahlazeka). Ngakho-ke, lapho idivayisi yokuphepha kwenethiwekhi yehluleka, inethiwekhi exhunywe kudivayisi ye-Bypass ingaxhumana. Yiqiniso, idivayisi yenethiwekhi ayicubunguli amaphakethe kunethiwekhi.
Indlela yokuhlukanisa i-Bypass Application Mode?
I-Bypass ihlukaniswe ngezindlela zokulawula noma ze-trigger, ezinjengalezi ezilandelayo
1. Kuqalwa ukunikezwa kwamandla. Kule modi, umsebenzi we-Bypass uvula lapho idivayisi icima. Uma idivayisi ivuliwe, umsebenzi we-Bypass uzokhutshazwa ngokushesha.
2. Kulawulwa yi-GPIO. Ngemva kokungena ngemvume ku-OS, ungasebenzisa i-GPIO ukusebenzisa amachweba athile ukulawula iswishi ye-Bypass.
3. Ukulawula yi-Watchdog. Lokhu kuyisandiso semodi 2. Ungasebenzisa i-Watchdog ukulawula ukuvula nokukhubaza uhlelo lwe-GPIO Bypass ukulawula isimo se-Bypass. Ngale ndlela, uma ipulatifomu iphahlazeka, i-Bypass ingavulwa yi-Watchdog.
Ezinhlelweni ezisebenzayo, lezi zimo ezintathu zivame ukuba khona ngesikhathi esisodwa, ikakhulukazi izindlela ezimbili 1 no-2. Indlela ejwayelekile yokufaka isicelo yile: uma idivayisi ivuliwe, i-Bypass iyasebenza. Ngemva kokuthi idivayisi ivuliwe, i-Bypass iyasebenza yi-BIOS. Ngemva kokuthi i-BIOS ithathe idivayisi, i-Bypass isasebenza. Cima i-Bypass ukuze uhlelo lokusebenza lusebenze. Phakathi nenqubo yonke yokuqalisa, cishe akukho ukunqanyulwa kwenethiwekhi.
Iyini iSimiso Sokusetshenziswa Kwe-Bypass?
1. Izinga lehadiwe
Ezingeni lehadiwe, ama-relay asetshenziswa kakhulu ukufeza i-Bypass. Lawa ma-relay axhunywe ezintanjeni zesignali zamachweba amabili enethiwekhi ye-Bypass. Isithombe esilandelayo sibonisa imodi yokusebenza ye-relay kusetshenziswa intambo yesignali eyodwa.
Thatha isiqalisi samandla njengesibonelo. Uma kwenzeka ugesi uphela, iswishi eku-relay izogxumela esimweni esingu-1, okungukuthi, i-Rx ku-interface ye-RJ45 ye-LAN1 izoxhuma ngqo ku-RJ45 Tx ye-LAN2, futhi uma idivayisi ivuliwe, iswishi izoxhuma ku-2. Ngale ndlela, uma ukuxhumana kwenethiwekhi phakathi kwe-LAN1 ne-LAN2 kudingeka, Udinga ukwenza lokho ngohlelo lokusebenza kudivayisi.
2. Izinga Lesofthiwe
Ekuhlukanisweni kwe-Bypass, i-GPIO kanye ne-Watchdog kukhulunywa ngazo ukulawula nokuqalisa i-Bypass. Eqinisweni, zombili lezi zindlela ezimbili zisebenza i-GPIO, bese i-GPIO ilawula i-relay kuhadiwe ukuze yenze ukugxuma okuhambisanayo. Ngokukhethekile, uma i-GPIO ehambisanayo isethwe ezingeni eliphezulu, i-relay izogxuma iye endaweni 1 ngokuhambisanayo, kanti uma indebe ye-GPIO isethwe ezingeni eliphansi, i-relay izogxuma iye endaweni 2 ngokuhambisanayo.
Kwi-Watchdog Bypass, empeleni ingezwe i-Watchdog control Bypass ngokusekelwe kulawulo lwe-GPIO olungenhla. Ngemva kokuthi i-watchdog iqalile ukusebenza, setha isenzo sokudlula ku-BIOS. Uhlelo luvula umsebenzi we-watchdog. Ngemva kokuthi i-watchdog iqalile ukusebenza, i-network port bypass ehambisanayo iyavulwa futhi idivayisi ingena esimweni se-bypass. Eqinisweni, i-Bypass nayo ilawulwa yi-GPIO, kodwa kulokhu, ukubhala amazinga aphansi ku-GPIO kwenziwa yi-Watchdog, futhi akukho ukuhlela okwengeziwe okudingekayo ukuze kubhalwe i-GPIO.
Umsebenzi we-hardware Bypass uwumsebenzi oyimpoqo wemikhiqizo yokuphepha kwenethiwekhi. Uma idivayisi icishiwe noma iphahlazeka, ama-port angaphakathi nangaphandle axhunywe ngokomzimba ukuze akhe ikhebula lenethiwekhi. Ngale ndlela, ithrafikhi yedatha ingadlula ngqo kudivayisi ngaphandle kokuthintwa yisimo samanje sedivayisi.
Isicelo Sokutholakala Okuphezulu (HA):
I-Mylinking™ inikeza izixazululo ezimbili ezitholakala kakhulu (HA), i-Active/Standby kanye ne-Active/Active. Ukufakwa kwe-Active Standby (noma i-active/passive) kumathuluzi asizayo ukuze kuhlinzekwe nge-failover kusukela kumadivayisi ayinhloko kuya kwawe-backup. Kanye ne-Active/Active Isetshenziswa ezixhumanisini ezingafuneki ukuze kuhlinzekwe nge-failover lapho noma iyiphi idivayisi esebenzayo yehluleka.
I-Mylinking™ Bypass TAP isekela amathuluzi amabili angenasidingo angaphakathi, angasetshenziswa kwisisombululo se-Active/Standby. Elinye lisebenza njengedivayisi eyinhloko noma "Esebenzayo". Idivayisi ye-Standby noma "Passive" isathola ithrafikhi yesikhathi sangempela ngochungechunge lwe-Bypass kodwa ayibhekwa njengedivayisi engaphakathi. Lokhu kunikeza ukuphindaphinda "kwe-Hot Standby". Uma idivayisi esebenzayo yehluleka futhi i-Bypass TAP iyeka ukwamukela ukushaya kwenhliziyo, idivayisi ye-standby ithatha izintambo ngokuzenzakalelayo njengedivayisi eyinhloko futhi ifika ku-inthanethi ngokushesha.
Yiziphi Izinzuzo ongazithola ngokusekelwe ku-Bypass yethu?
1- Beka ithrafikhi ngaphambi nangemva kwethuluzi elisemgqeni (njenge-WAF, i-NGFW, noma i-IPS) kuthuluzi elingaphandle kwebhendi
2-Ukuphatha amathuluzi amaningi angaphakathi ngesikhathi esisodwa kwenza kube lula i-security stack futhi kunciphisa ubunzima benethiwekhi
3-Ihlinzeka ngokuhlunga, ukuhlanganisa, kanye nokulinganisela umthwalo wezixhumanisi eziku-inthanethi
4-Nciphisa ingozi yokuphumula okungahleliwe
5-Ukuhluleka, ukutholakala okuphezulu [HA]
Isikhathi sokuthunyelwe: Disemba 23-2021
