Yini i-bypass?
I-Network Security Equipment isetshenziswa kakhulu phakathi kwamanethiwekhi amabili noma ngaphezulu, njengenethiwekhi yangaphakathi nenethiwekhi yangaphandle. Imishini yokuphepha yenethiwekhi ngokusebenzisa ukuhlaziya kwayo kwepakethe lenethiwekhi, ukuthola ukuthi kukhona yini usongo, ngemuva kokucutshungulwa ngokuya ngemithetho ethile yokuhamba phambili, futhi uma imishini yokuphepha yenethiwekhi isebenza ngokungafanele, futhi uma imishini yokuphepha yenethiwekhi isebenza ngokungafanele noma ingozi, izingxenye zenethiwekhi ezixhunyiwe kudivayisi zinqanyuliwe komunye nomunye. Kulokhu, uma inethiwekhi ngayinye idinga ukuxhumeka komunye nomunye, khona-ke ukudlula kufanele kubonakale.
Umsebenzi we-Bypass, njengoba igama lisho, linika amanethiwekhi amabili akwazi ukuxhumana ngokomzimba ngaphandle kokudlula ohlelweni lwedivaysi yokuphepha kwenethiwekhi ngokusebenzisa umbuso othize wesimo (ukwehluleka kwamandla noma ukuphahlazeka). Ngakho-ke, lapho idivaysi yezokuphepha yenethiwekhi yehluleka, inethiwekhi exhunywe kwidivaysi ye-ByssPass iyakwazi ukuxhumana nomunye. Vele, idivaysi yenethiwekhi ayicubunguli amaphakethe kunethiwekhi.
Ihlukanisa kanjani imodi yesicelo se-Bypass?
I-ByPass ihlukaniswe izinyathelo zokulawula noma izindlela zokudala, ezikulandelayo
1. Kubangelwa ukunikezwa kwamandla. Kule modi, umsebenzi we-Bypass uvumela amandla lapho ucingo lusuka lusuka. Uma idivaysi inikwa amandla, umsebenzi we-Bypass uzokhutshazwa ngokushesha.
2. Kulawulwa yi-GPIO. Ngemuva kokungena ngemvume ku-OS, ungasebenzisa i-GPIO ukusebenzisa amachweba athile ukulawula ukushintshwa kweBypass.
3. Ukulawula yi-Watchdog. Lokhu ukunwetshwa kwemodi 2 Ngale ndlela, uma ipulatifomu ishayeka, i-Bypass ingavulwa yi-watchdog.
Kuzinhlelo zokusebenza ezingokoqobo, lezi zifundazwe ezintathu zivame ukuba khona ngasikhathi sinye, ikakhulukazi izindlela ezimbili 1 no-2. Indlela ejwayelekile yohlelo lokusebenza yile: Lapho idivaysi inikwe amandla, i-Bypass inikwe amandla. Ngemuva kokuthi insiza inikwe amandla, i-Bypass inikwe amandla yi-BIOS. Ngemuva kokuthi i-BIOS ithatha idivaysi, i-Bypass isevunyelwe. Cisha i-Bypass ukuze uhlelo lokusebenza lusebenze. Ngeyo yonke inqubo yokuqalisa, cishe akukho ukunqanyulwa kwenethiwekhi.
Uyini umgomo wokuqalisa okwenziwa?
1. Izinga le-Hardware
Ezingeni lehadiwe, ukudluliselwa kusetshenziselwa ikakhulukazi ukufeza ukudlula. Lokhu kudluliselwa kuxhunyiwe kwizintambo zesiginali zamachweba amabili wenethiwekhi ye-Bypass. Lesi sibalo esilandelayo sibonisa imodi yokusebenza yokudluliselwa kusetshenziswa ikhebula elilodwa lesiginali.
Thatha amandla okubangela njengesibonelo. Endabeni yokuhluleka kwamandla, ukushintshwa kokudluliselwe kuzogxumela esimweni sika-1, okungukuthi, i-RX ku-Interface ye-LAN1 izoxhuma ngqo ku-RJ45 TX ye-LAN1 ne-LAN2 iyadingeka, uma kudingeka ukukwenza lokho ngokusebenzisa uhlelo lokusebenza kudivayisi.
2. Ileveli yesoftware
Ekuhlukanisweni kwe-Bypass, i-GPIO ne-Watchdog kushiwo ukulawula futhi kubangela ukudlula. Eqinisweni, zombili lezi zindlela ezimbili zisebenza i-GPIO, bese i-GPIO ilawula ukudluliselwa ku-Hardware ukwenza i-jump ehambisanayo. Ngokukhethekile, uma i-GPIO ehambisanayo isethwe ezingeni eliphakeme, okudluliselwe kuzogxumela endaweni eyi-1 ngokulandelana, kanti uma i-GPIO Cup isethwe ezingeni eliphansi, okudluliselwe kuzogxumela esimweni esingu-2 ngokulandelana.
Ukuze uthole i-Watchdog Bypass, empeleni ingezwe i-Watchdog Control Bypass ngesisekelo sokulawulwa kwe-GPIO ngenhla. Ngemuva kokuthi i-watchdog iqale ukusebenza, setha isenzo ukudlula kwi-BIOS. Uhlelo lusebenzisa umsebenzi we-watchdog. Ngemuva kokuthi i-watchdog iqale ukusebenza, inethiwekhi ehambisanayo ye-ports bypass inikwe amandla futhi idivaysi ingena ezweni le-bypass. Eqinisweni, iBypass iphinde yalawulwa yi-GPIO, kepha kulokhu, ukubhala kwamazinga aphansi ku-GPIO kwenziwa yi-watchdog, futhi akukho nohlelo olwengeziwe oludingekayo ukubhala i-GPIO.
Umsebenzi we-Hardware Bypass ngumsebenzi ophoqelekile wemikhiqizo yokuphepha yenethiwekhi. Lapho idivaysi inikwa amandla noma iphahlazeke, amachweba angaphakathi nangaphandle axhumeke ngokomzimba ukwakha ikhebula lenethiwekhi. Ngale ndlela, ithrafikhi yedatha ingadlula ngokuqondile kudivayisi ngaphandle kokuthi ithintwe yisimo samanje sedivayisi.
Ukutholakala okuphezulu (HA) Isicelo:
I-MyLinkIng ™ inikezela ngezixazululo ezimbili eziphakeme (ha) izixazululo, ezisebenzayo / zokubekwe eceleni futhi ezisebenzayo / ezisebenzayo. Ukuhanjiswa kokubekwe eceleni (noma okusebenzayo / okusebenzayo) kumathuluzi asizayo ukuhlinzeka nge-Failover kusuka kumadivayisi wesipele. Futhi okusebenzayo / okusebenzayo kuthunyelwe izixhumanisi ezingagunyaziwe ukuhlinzeka nge-failver lapho noma iyiphi insiza esebenzayo yehluleka.
I-MyLinking ™ Bypass Tap isekela amathuluzi amabili angafuneki ama-inline, angathunyelwa kwikhambi elisebenzayo / lokulinda. Eyodwa isebenza njengedivayisi eyinhloko noma "esebenzayo". Idivaysi yokubekwe noma "Passive" isathola ithrafikhi yesikhathi sangempela ngochungechunge lwe-Bypass kodwa aluthathwa njengethuluzi eliphakathi. Lokhu kunikeza "ukubekwe eceleni" ukuncipha. Uma idivaysi esebenzayo yehluleka futhi i-Bypass Tap Stots ethola ukushaya kwenhliziyo, idivaysi yokulinda ithatha ngokuzenzakalelayo njengedivayisi eyinhloko futhi iza online ngokushesha.
Yini izinzuzo ongazithola ngokususelwa ku-bypass yethu?
I-1-yabela traffic ngaphambi nangemva kwethuluzi eliphakathi (njenge-waf, ngfw, noma ama-IPS) kwithuluzi le-Out-of-band
2-Ukuphatha amathuluzi amaningi we-inline ngasikhathi sinye lula ukwenza isitaki sezokuphepha futhi kunciphise ubunzima benethiwekhi
I-3-ihlinzeka ngokonga, ukuhlanganiswa kanye nokulayisha ngokulinganisa izixhumanisi ezingaphakathi
4 -nciphisa ingozi yokuphumula okungahleliwe
I-5-Failover, Ukutholakala Okuphezulu [HA]
Isikhathi sePosi: Dece-23-2021