Thola ukuthi kungani i-Network Packet Broker efanelekile ukuze kuqashwe inethiwekhi ngendlela ethembekile kanye nokuphepha kwenethiwekhi okuqinile. Xazulula ukugcwala kwethrafikhi, izindawo ezingabonakali, ukushoda kwezindawo zokubeka amathuluzi kanye nezingozi zokuthobela imithetho ngokuhlelwa kwethrafikhi ye-NPB okuphakathi.
Imikhawulo Ebalulekile Yokuqapha I-SPAN/TAP Kuphela
Njengoba izikhungo zedatha zebhizinisi zikhula zibe yizindwangu zesivinini esiphezulu ze-10G, 40G kanye ne-100G, umthwalo wemisebenzi wefu elihlanganisiwe, amanethiwekhi okumboza okubonakalayo kanye nethrafikhi yebhizinisi ebethelwe kudala izindawo ezinkulu ezingabonakali zamaqembu e-NetOps kanye ne-SecOps anomsebenzi wokuqapha inethiwekhi kanye nokuvikela ukuphepha kwenethiwekhi. Izinhlangano eziningi ekuqaleni zithembele kuphela kumachweba esibuko se-switch SPAN kanye nama-TAP angabonakali ukuze abambe ithrafikhi ye-IDS, NPM, APM, SIEM kanye namathuluzi okuhlaziya e-forensic, kodwa lolu hlaka lwesakhiwo oluqhekekile lunikeza ukubonwa okungathembekile nokungaphelele okuphakamisa ngqo ingozi yokuphepha kanye nezindleko zokusebenza.
Amachweba e-SPAN asebenzisa izinsiza zehadiwe zokushintsha ezibalulekile, alahle amaphakethe ngaphansi kokuphuma okuphezulu, awakwazi ukuhlola ukufakwa komhubhe we-VXLAN/GRE/MPLS, futhi agcwalise amathuluzi okuphepha angezansi ngamaphakethe aphindaphindwayo aphindaphindwayo. Izintambo ze-TAP-to-tool eziqondile zidala ama-topology ekhebula angcolile, okunzima ukuwaphatha, aletha amaphuzu amaningi okwehluleka, futhi achitha amachweba atholakalayo alinganiselwe kumishini yokuqapha ebizayo. Lapho amathuluzi okuphepha ethola ithrafikhi eluhlaza engahlungiwe, achitha ukugeleza okungafanele kwe-CPU, imemori kanye nokucubungula isitoreji, avame ukulahlekelwa izinkomba zosongo olubucayi phakathi kokugcwala kwedatha.
I-Network Packet Broker (NPB) ixazulula la maphutha ayisisekelo okubona ngokusebenza njengebhokisi eliphakathi lokuqondisa ithrafikhi elisheshisiwe, elifakwe phakathi kwama-capture nodes (ama-TAP, ama-SPAN port, ama-virtual cloud taps) kanye nawo wonke amathuluzi okuqapha inethiwekhi angezansi kanye nokuphepha kwenethiwekhi. Ngokungafani nokushintsha kwenethiwekhi okujwayelekile, ama-NPB alawula kuphela ithrafikhi engaphandle kwebhendi ebonisiwe ngokusekelwe ezinqubweni ezichazwe ngumsebenzisi ngaphandle kokushintsha ukugeleza kwedatha yebhizinisi lokukhiqiza. Ihlanganisa, ihlanze, ilungise futhi isabalalise imifudlana yamaphakethe ehambisana kahle kuwo wonke amathuluzi okuhlaziya, ivala izikhala zokubonakala ngenkathi ikhulisa inani lokutshalwa kwezimali kwehadiwe elikhona.
Le bhulogi yobuchwepheshe ichaza izizathu eziphuthumayo zebhizinisi kanye nezokuphepha zokusebenzisa i-Network Packet Broker, isebenzisa imibhalo yobuchwepheshe esemthethweni ye-Mylinking ukuchaza amaphuzu ayinhloko obuhlungu, izinzuzo ezibalulekile zokusebenza, izakhiwo zokusebenzisa kanye nentuthuko yokusebenza elinganisekayo yezindawo zesimanje zesikhungo sedatha.
Amaphuzu Ayinhloko Obuhlungu Ngaphandle Komthengisi Wephakethe Lenethiwekhi
Ukusebenzisa ukuqapha inethiwekhi kanye nezinqwaba zokuphepha kwenethiwekhi ngaphandle kwe-Network Packet Broker ezinikele kudala izinselele eziyisithupha ezixhumene, ezibizayo zokusebenza kanye nezokuphepha ezikhula njengoba i-bandwidth yenethiwekhi kanye nobunzima bukhula:
1. I-Topology Yokuthwebula Ithrafikhi Ehlukanisiwe, Engenakukhuliswa
Izintambo eziqondile ezivela kuswishi ngayinye i-SPAN kanye ne-optical TAP kuya kumathuluzi okuqapha ahlukene kudala izakhiwo zekhebula ezingahlelekile. I-rack ngayinye entsha yeseva, i-router noma i-firewall idinga ama-mirror port engeziwe kanye nokusebenza kwe-fiber ebonakalayo, okwandisa inani lamaphuzu okwehluleka okungenzeka futhi kukhulisa umthwalo womsebenzi wokulungisa ojwayelekile wamaqembu e-NOC. Ukubhalisela ngokweqile kwe-SPAN port kuphazamisa ukusebenza kwe-production switch lapho ama-mirror sessions amaningi kakhulu esebenza ngesikhathi esisodwa.
2. Ukuqapha Ukuntuleka Kwezimbobo Zamathuluzi Nokusetshenziswa Kancane
Izinto zokuphepha nokuhlaziya ukusebenza ziza nenani elinqunyiwe lezindawo zokuxhumana ezibonakalayo, eziningi zazo ezingasetshenziswa kahle lapho zithola ithrafikhi evela emthonjeni owodwa noma emibili yokubamba. Ngaphandle kokuhlanganiswa kwethrafikhi, izinhlangano kumele zithenge ihadiwe yokuqapha eyengeziwe ukuze zivumelane nethrafikhi eboniswa ngemithombo eminingi, okwandisa kakhulu izindleko zemali. Amathuluzi amaningi akudala afaka kuphela amachweba ethusi e-1G asheshayo, angakwazi ukuqeda ithrafikhi ye-10G/40G yokuxhumanisa i-fiber kusuka kumaswishi anamuhla ayinhloko.
3. Ukulayisha Okungaphezu Kwethrafikhi Okungalawulwa kanye Namaphakethe Aphindaphindwayo Angadingekile
Ukulinganisa nge-cross-switch kukhiqiza amaphakethe afanayo aphindwe kabili athathwe ezigabeni zenethiwekhi ezihambisanayo. Le datha ephindaphindayo isakaza amathuluzi okuqapha i-IDS, i-NDR kanye nenethiwekhi, isebenzisa izinsiza zokucubungula ngaphandle kokuletha usongo noma ukuqonda kokusebenza okusebenzayo. Ngesikhathi sokukhuphuka kwethrafikhi, amathuluzi agcwele ngokweqile alahla amaphakethe abaluleke kakhulu, afihle i-malware yokunyakaza eceleni, izandulela ze-DDoS kanye namaphutha okubambezeleka kwesicelo abucayi.
4. Izindawo Ezingaboni Ithrafikhi Yemhubhe Ehlanganisiwe
Izikhungo zedatha zesimanje ezisebenza nge-virtualized kanye nezindwangu zamafu eziqasha abantu abaningi zithembele kumaphrothokholi e-VXLAN, GRE, GTP kanye ne-MPLS overlay tunneling ukuze kuhlukaniswe imisebenzi. Ama-SPAN feed ayisisekelo kanye ne-TAP ahlinzeka ngamaphakethe agcwele ahlanganisiwe, kodwa amathuluzi amaningi okuqapha azimele awanakho ukusheshisa kwehadiwe ukuze asuse ama-header e-tunnel angaphandle, okushiya ithrafikhi yosongo phakathi kwamaseva asempumalanga nentshonalanga ingabonakali nhlobo kumaqembu e-SecOps. Lokhu kudala ukwehluleka okukhulu kokuthobela imithetho yokuphepha kwe-Zero Trust, njengoba amaqembu engakwazi ukuhlola ngokugcwele konke ukugeleza kwenethiwekhi yangaphakathi.
5. Ingozi Yokuthobela Imithetho Evela Kudatha Yomthwalo Obucayi Ongahlungiwe
Ithrafikhi engakahlelwanga ithwala Ulwazi Olubonakalayo Lomuntu Siqu (PII) olungakahlelwanga, idatha yekhadi lokukhokha kanye nolwazi lwezempilo oluvikelwe (PHI). Ukuthumela imithwalo ephelele engakacutshungulwa ku-analytics yenkampani yangaphandle noma kumathuluzi okuqapha inethiwekhi yangaphakathi kwephula imithethonqubo yokuvikela idatha ye-PCI-DSS, HIPAA, GDPR kanye ne-SOX, okubeka izinhlangano ezinhlawulweni zomthetho kanye nesibopho sokwephulwa kwedatha.
6. Ukuntuleka Kwesikhathi Esijwayelekile Sokuhlola I-Forensic Se-Cross-Network
Ngaphandle kokunamathisela isikhathi sehadiwe okuhlanganisiwe ekuthwebuleni, amalogi ephakethe avela kumaswishi ahlukene, ama-router namathuluzi okuphepha aphethe izitembu zesikhathi zesistimu ezingaguquki. Lapho kwenzeka izehlakalo zokuphepha noma ukungasebenzi kwenethiwekhi, abahlaziyi abakwazi ukuhlobanisa ngokunembile izehlakalo zethrafikhi kuyo yonke indwangu, bandise kakhulu isikhathi esimaphakathi sokuxazulula (MTTR) kokubili amaphutha okusebenza kwenethiwekhi kanye nempendulo yokuhlaselwa kwe-cyber.
Izimo Zokusetshenziswa Okuyinhloko Ezidinga Umthengisi Wephakethe Lenethiwekhi
Izinhlangano kumele zisebenzise i-Network Packet Broker uma isu lazo lokuqapha inethiwekhi kanye nokuphepha kwenethiwekhi liwela kunoma yiziphi zalezi zimo ezivamile zebhizinisi ezichazwe kumhlahlandlela wezobuchwepheshe we-Mylinking:
1. Ukuqoqwa kwethrafikhi ehlanganisiwe yemithombo eminingi: Amaqembu adinga ukuthwebula ithrafikhi eboniswayo evela kumaswishi amaningi asatshalaliswa, ama-firewall, ama-router, ama-server farm kanye namasango esayithi akude, kodwa awanawo i-centralized aggregation hub yokuhlanganisa wonke ama-feed. Ukufakwa kwe-TAP okuzimele okuningi kwethula amaphuzu okwehluleka aphindaphindekile kanye nobunzima bokuphatha.
2. Ukulethwa kwethrafikhi ehambisanayo enamathuluzi amaningi: Ukugeleza kwenethiwekhi okufanayo okuthwetshuliwe kudinga ukulethwa ngasikhathi sinye kumathuluzi okuphepha ahlukene kanye nokuqapha, okuhlanganisa ukutholwa kwezinsongo ze-IDS, ukulandelela ukusebenza kwe-NPM, ukuxilongwa kwezicelo ze-APM kanye namapulatifomu okuhlola ukuhambisana. Ukuphindwaphindwa kwe-SPAN okuqondile kuchitha amachweba esibuko esishintshayo esilinganiselwe.
3. Ukuhambisana kwamathuluzi asheshayo akudala: Isikhungo sedatha esiyinhloko sithuthukiselwe kuma-uplink angu-10G/40G/100G, kodwa izinto zokuqapha ezokuphepha ezikhona zisekela kuphela izixhumi zethusi ze-1G futhi azikwazi ukugwinya ithrafikhi ye-fiber esheshayo ngaphandle kokuguqulwa okuphakathi kanye nokuma kwethrafikhi.
4. Ukuqapha indwangu ye-virtual/cloud: Indawo ezungezile isebenzisa amanethiwekhi e-VXLAN, MPLS noma i-GTP overlay, okudinga ukuhlubula amakhanda e-tunnel okuzenzakalelayo ukuze kuhlolwe ithrafikhi yangaphakathi ehlanganisiwe ukuze kutholakale ukuthi kukhona yini ukunyakaza kwengozi eceleni.
5. Ukuqoqwa kwedatha yemboni elawulwayo: Amanethiwekhi ezezimali, ezempilo kanye nohulumeni kumele aqede uzwela lwedatha ebucayi yomthwalo ngaphambi kokuthumela ithrafikhi kumapulatifomu okuqapha inethiwekhi ukuze kuhlangatshezwane nezindinganiso zokuthobela ubumfihlo bedatha eziphoqelekile.
6. Ukuhlolwa kwethrafikhi okukhulu: Amaqembu ezokuphepha adinga ukunyatheliswa kwesikhathi kwe-nanosecond okunembile kuwo wonke amaphakethe athwetshiwe ukuze akhe kabusha amaketanga okuhlasela kanye namalogi emicimbi ebhekisela kuzo zonke izingxenye zenethiwekhi ngesikhathi sophenyo lwempendulo yezehlakalo.
Indlela Umthengisi Wephakethe Lenethiwekhi Athuthukisa Ngayo Ukusebenza Kahle Kwamathuluzi Okuqapha Inethiwekhi
I-Network Packet Broker iguqula ngokuyisisekelo imisebenzi yokuqapha inethiwekhi ngokuqeda ukucutshungulwa kwedatha okuchithayo nokwandisa isikhathi sesevisi yehadiwe yokuhlaziya ekhona ngokusebenzisa izindlela eziyisithupha zokwenza ngcono eziyinhloko:
1. Ukuhlanganiswa Kwethrafikhi Yemithombo Eminingi
I-NPB ihlanganisa izinqwaba zeziphakeli ze-SPAN kanye ne-TAP ezihlukile emifudlaneni ehlungiwe ehlanganisiwe, okwandisa ukusetshenziswa kwechweba ngalinye elibonakalayo kumathuluzi okuqapha angezansi. Esikhundleni somthombo owodwa wokubamba othatha isikhombimsebenzisi sonke sedivayisi, ithrafikhi ehlanganisiwe yezixhumanisi eziningi igcwalisa ngokugcwele umthamo we-bandwidth otholakalayo, isusa isidingo sokusetshenziswa kwamathuluzi engeziwe abizayo.
2. Ukulinganisa Umthwalo Oqaphela Isikhathi
Kuthrafikhi eyinhloko ye-10G/40G/100G enesivinini esikhulu, i-NPB isabalalisa ukugeleza ngokulinganayo phakathi kwamaqoqo emishini yokuqapha yesivinini esiphansi isebenzisa ama-algorithms e-hash asekelwe kwiseshini ye-L2-L7. Lokhu kuvimbela amathuluzi ngamanye ukuthi afinyelele imikhawulo yokuphuma futhi alahle amaphakethe abalulekile ngesikhathi samahora ebhizinisi aphezulu, ngenkathi kuvumela izinhlangano ukuthi zigcine ihadiwe yokuqapha ye-1G/10G endala isikhathi eside ngemuva kokuthuthukiswa kwenethiwekhi eyinhloko. I-NPB iphinde isebenze njengesiguquli semidiya sendabuko, ihlanganisa izixhumanisi zokubamba i-fiber kuya ku-interface yamathuluzi okuqapha ethusi kuphela ngaphandle kwehadiwe ehlukile ye-transceiver.
3. Ukusikwa Kwephakethe Okusekelwe Enqubomgomo
Izimo eziningi zokusetshenziswa kokuqapha inethiwekhi zidinga kuphela imethadatha yekhanda le-L2-L4 ukuze kuqalwe ukuthambekela kwe-bandwidth kanye nokuhlaziywa kokubambezeleka, ngaphandle kwesidingo sokubanjwa komthwalo we-payload ogcwele wohlelo lokusebenza. I-NPB ihlukanisa amaphakethe angavuthiwe abe ubude obulungisekayo (ama-byte angu-64-1518) ngenqubomgomo ngayinye yokuqapha, ilahla idatha yomthwalo we-payload engadingekile futhi inciphise ukusetshenziswa komkhawulokudonsa we-downstream kanye nesitoreji kuze kufike ku-90%. Ukuthwebula amaphakethe aphelele kuhlala kulungiselelwa kuphela imingcele ye-inthanethi enobungozi obukhulu kanye nethrafikhi ye-DMZ edinga ukuhlolwa okujulile kwe-forensic.
4. Ukukhishwa Kwephakethe Okuzenzakalelayo
Ukwehliswa okusheshayo kwehadiwe kususa amaphakethe afanayo aphindaphindwayo aqoqwe kusuka ezigabeni zesibuko ezigqagqene, kunciphisa ivolumu yenani lethrafikhi elithunyelwe kumathuluzi okuqapha inethiwekhi ngo-40-60%. Njengoba kunokugeleza okuncane okuphindaphindwayo okufanele kucutshungulwe, amapulatifomu e-NPM kanye ne-APM akhiqiza izibalo zokusebenza ezihlanzekile nezinembile futhi anciphise izexwayiso ezingamanga ezibangelwa umsindo wethrafikhi ophindaphindwayo.
5. Ukuhlunga Ithrafikhi Okuqondiwe
Abaphathi bakha imithetho yokuhlunga ehlanganisiwe ngokusekelwe kuhlobo lwe-Ethernet, amathegi e-VLAN, ama-IP seven-tuple, amafulegi e-TCP kanye nezinkambu ze-offset zamaphakethe eziyi-128-byte ezenziwe ngokwezifiso. I-NPB idlulisela ithrafikhi efanelekile kuphela kuthuluzi ngalinye lokuqapha elizinikele—isibonelo, ukuhambisa ukugeleza kohlelo lokusebenza lwebhizinisi kuphela ezinhlelweni ze-APM kanye nokulahla ithrafikhi ye-IoT engabalulekile noma yangemuva—isusa umthwalo wokucubungula ongadingekile kumishini yokuhlaziya ukusebenza.
6. Ukufakwa Kwesikhathi Okuhlanganisiwe Nokuthunyelwa Kwe-Flow Okujwayelekile
I-nanosecond timestamping eyakhelwe ngaphakathi yehadiwe evumelaniswe namaseva e-NTP ebhizinisi ilinganisa imethadatha yesikhathi kuwo wonke amaphakethe athwetshuliwe, ivumela ukuhlangana okunembile kwethrafikhi yendwangu yokuxazulula izinkinga zenethiwekhi. I-NPB iphinde ikhiqize amarekhodi okugeleza kwe-NetFlow/IPFIX ajwayelekile kumadeshibhodi okuhlela amandla, isusa isidingo sokucutshungulwa kokukhiqizwa kokugeleza kumathuluzi okuqapha anemikhawulo yezinsizakusebenza.
Umthengisi Wephakethe Lenethiwekhi Uqinisa Kanjani Ukuphepha Kwenethiwekhi Kusukela Ekupheleni Kuya Ekugcineni?
Ngale kokuzuza kokusebenza kokuqapha inethiwekhi, i-Network Packet Broker yakha ungqimba oluyisisekelo lokubonakala kokuvikela ukuphepha kwenethiwekhi okuphelele, ibhekana nezindawo ezibalulekile ezingaboni kahle ezishiya izimpahla zebhizinisi zisengozini yokwephulwa kwedatha kanye nokusabalala kwe-malware eceleni:
1. Ukuhlubula Amakhanda E-Tunnel ukuze Kuhlolwe Usongo Oluhlanganisiwe
Iziqeshana zokususa ama-capsulation ezingeni lehadiwe zisekela ama-header e-VXLAN, GRE, ERSPAN, MPLS kanye ne-GTP angaphandle ngaphambi kokuthumela idatha yephakethe langaphakathi kumathuluzi okuphepha e-IDS/NDR. Lokhu kwembula ithrafikhi yokuhlasela efihliwe empumalanga-ntshonalanga ngaphakathi kwezindwangu eziqashayo eziningi ezibonakalayo, kugcwalisa izidingo zokwakhiwa kwe-Zero Trust ukuhlola konke ukugeleza kwangaphakathi kweseva kuya kuseva. Imithetho yokususa ama-header echazwe ngumsebenzisi ngokwezifiso iphinde isekele amaphrothokholi okufaka ama-capsulation akhethekile ngaphandle kokuthuthukiswa kwe-firmware.
2. Ukususwa Kokubethela Kwe-SSL Okusheshisiwe Kwehadiwe
Ngaphezu kwama-95% ethrafikhi ye-inthanethi yebhizinisi lanamuhla ihamba nge-TLS encryption, abahlaseli abayisebenzisa ukufihla i-ransomware, ukukhishwa kwedatha kanye nokuxhumana komyalo nokulawula. I-NPB ithumela i-SSL/TLS decryption eningi kakhulu kumapayipi ehadiwe azinikele, isusa i-HTTPS payloads ngesivinini somugqa futhi ithumela ithrafikhi ecacile kumathuluzi okuthola izinsongo. Lokhu kugwema ukukhinyabeza i-CPU ezintweni zokuphepha ezibizayo futhi kususa izindawo ezingabonakali zokuphepha kwethrafikhi ezifihliwe.
3. Ukufihlwa Kwedatha Ebucayi Eqhutshwa Yinqubomgomo
Ukusebenza kokufihla idatha yomdabu kubhala ngaphezulu kwe-PII, izinombolo zamakhadi okukhokha kanye namarekhodi ezempilo avikelwe ngaphakathi kwemithwalo yephakethe ngaphambi kokuba ithrafikhi ilethwe kumapulatifomu okuqapha inethiwekhi kanye nokuhlaziya ukuphepha. Lokhu kunciphisa uzwela lwehadiwe kuqeda isidingo sokuhlanza imishini yethrafikhi ezimele futhi kufeza imithetho yokuthobela imithetho yomhlaba wonke yobumfihlo bedatha, kunciphisa izingozi zokuphulwa kwesibopho sezimboni ezilawulwayo.
4. Ukuphindaphindwa Kwethrafikhi Okuhlakaniphile Kwezitaki Zokuphepha Ezinezingqimba Eziningi
I-NPB iphinda imifudlana yethrafikhi enobungozi obukhulu ihlungwe ibe ngamathuluzi okuphepha ahambisanayo ngasikhathi sinye: ukugeleza okugcwele kwemingcele ye-inthanethi kuya ezinhlelweni zokuthola ukungena, ithrafikhi ye-VLAN yokukhokha kumapulatifomu okuthobela i-DLP, kanye nokugeleza kwe-VPN yomsebenzisi okude kuya kumathuluzi okuhlaziya izinsongo zokuziphatha. Yonke imishini yokuphepha ithola kuphela ithrafikhi ehlobene nosongo eyidingayo, ikhulisa ukunemba kokuthola izinsongo ngenkathi inciphisa umsindo wedatha ongadingekile.
5. Ukuhlonza Iphrothokholi Yesilayelo Sesicelo Esijulile
Izinjini ze-DPI ezihlanganisiwe zinyathelisa iminwe yamakhulu ezinhlelo zokusebenza zebhizinisi (izinsizakalo ze-HTTP, i-DNS, i-MySQL, i-BitTorrent, i-cloud SaaS) futhi zikhiqize imethadatha yethrafikhi ye-layer-7 yamaqembu e-SecOps. Lokhu kuhlakanipha kohlelo lokusebenza kwenza kube lula ukubona ukudluliswa kwamafayela e-shadow IT, ukuxhumana okungagunyaziwe kontanga nontanga kanye nokuhlaselwa kwe-malware kwesigaba sohlelo lokusebenza okuhluleka ukukubona amathuluzi okuphepha angenasiginesha kuphela.
Amakhono e-NPB Akhelwe Ngaphakathi Alungisa Izikhala Zokubonakala Kwenethiwekhi
Zonke izinhlobo ze-Mylinking enterprise-grade Network Packet Broker zihlanganisa lezi zici eziyinhloko ezisheshiswa yihadiwe ukuze zihlanganise ukuqapha inethiwekhi kanye nokusebenza kokuphepha kwenethiwekhi:
1. Ukuhlanganiswa kwethrafikhi, ukuphindaphindwa kwamachweba amaningi kanye nokulinganisela umthwalo oqaphela isikhathi
2. Ukuhlunga kwephakethe okuguquguqukayo kwe-L2-L7 kanye nokufanisa okwenziwe ngokwezifiso kwe-offset ye-128-byte
3. Ukususwa kwe-tunnel (VXLAN/GRE/MPLS/GTP/ERSPAN) kanye nokuphathwa kwe-VLAN tag
4. Ukwehliswa kwephakethe, ukunqunywa okusekelwe kunqubomgomo kanye nokufihla idatha ebucayi
5. Ukulinganisa isikhathi kwehadiwe ngokunemba kwe-Nanosecond okuvumelaniswe ne-NTP
6. Ukususwa kokubethela kwe-Hardware SSL/TLS ukuze kubonakale izinsongo ezibethelwe
7. Ukukhiqizwa kwerekhodi lokugeleza kwe-NetFlow V9/IPFIX lokuhlaziya amandla
8. Ukuphuma kwechweba kanye nokudluliselwa kwe-single-fiber ukuze kusetshenziswe impompi ngendlela engabizi kakhulu
9. Izinsizakusebenza zamandla eziphindwe kabili ezingashintshwa ukuze kube nokuthembeka kwesikhungo sedatha amahora angama-24 ngosuku, izinsuku eziyi-7 ngesonto
10. Ukuphathwa kokufinyelela okuningi okuhlangene: i-CLI console, i-HTTP web UI, i-SNMP, i-SYSLOG kanye nokuqinisekiswa kwe-RADIUS
Ukwakhiwa Kwezinhlangothi: Inethiwekhi Engenayo i-NPB vs Inethiwekhi Ene-NPB Exhumanisayo
Ukwakhiwa 1: Umthengisi Wephakethe Lenethiwekhi Ngaphandle Kwenethiwekhi
Njengoba kuboniswe kumdwebo we-topology we-Mylinking, izintambo ze-SPAN/TAP-to-tool eziqondile zakha indwangu yokubonakala engahlelekile:
○Ukugijima kwefayibha okuhlukile kuxhumanisa yonke i-switch kanye ne-firewall mirror port kumathuluzi e-IDS, NPM, APM kanye nokuhambisana
○Umthamo omkhulu wephakethe eliphindwe kabili ovela ezigabeni zesibuko ezihambisanayo ugcwalisa kakhulu izinto zokuphepha
○Ithrafikhi ye-VXLAN/GRE ehlanganisiwe isalokhu ingahlolwa ngamathuluzi angaphansi komfula
○Amachweba amathuluzi alinganiselwe adinga ukuthenga ihadiwe yokuqapha eyengeziwe ukuze kuthathwe imithombo eminingi
○Idatha yomthwalo obucayi engalungiswanga idala ingozi yokuthobela imithetho
○Izitembu zesikhathi zephakethe ezingahambisani zibambezela impendulo yesigameko kanye nokuxazulula izinkinga zamaphutha
Ukwakhiwa Kwesakhiwo 2: Inethiwekhi Elungiselelwe Nge-Mylinking Network Packet Broker
Ukufakwa kwe-NPB okuhlanganisiwe kuhlanganisa yonke imisebenzi yokuthwebula ithrafikhi ibe yisikhungo esisodwa sokubonakala:
○Zonke izifunzo ze-TAP, i-switch SPAN kanye ne-virtual cloud capture zixhuma ngqo kumachweba okungena ngesivinini esikhulu e-NPB
○I-NPB yenza ukuhlanganiswa, ukususwa, ukuhlunga, ukususwa kwe-capsulation kanye nokufihla idatha ngamapayipi ehadiwe
○Ukusakazwa kwethrafikhi okuhlanzekile, okuqondene namathuluzi kusatshalaliswa ngokulinganisa umthwalo kuzo zonke izisetshenziswa zokuqapha inethiwekhi kanye nokuphepha kwenethiwekhi
○Ama-tunnel headers ayasuswa, ithrafikhi ye-SSL iyasuswa futhi idatha ebucayi ifihliwe ngaphambi kokuphuma
○Izitembu zesikhathi ezijwayelekile ze-Nanosecond zifakwe kuwo wonke amaphakethe ukuze kuhlaziywe ukuhlaziywa kwe-forensic okuhlanganisiwe
○Ukuphuma kwechweba kanye nokusekelwa kwe-single-fiber kunciphisa izindleko zenhloko-dolobha yezintambo ze-fiber eziphelele
I-ROI Yebhizinisi Ebonakalayo Yokusebenzisa Umthengisi Wephakethe Lenethiwekhi
1. Nweba umjikelezo wokuphila kwamathuluzi okuqapha akhona: Ukulinganisa umthwalo, ukusika kanye nokuhlanganisa kususa izidingo zokuthuthukiswa kwehadiwe ngokushesha kwemishini yokuphepha yesivinini esiphansi, kunciphisa izindleko zemali ngo-30-50%.
2. Nciphisa izingozi zokuphepha i-MTTR: Ukuphelela kokubonakala kwethrafikhi esemhubheni/ebethelwe kanye nokuxhumana kwesitembu sesikhathi okujwayelekile kunciphisa isikhathi sokuphenya ngezinsongo ngaphezu kwesigamu samaqembu e-SecOps.
3. Isitoreji esiphansi kanye ne-bandwidth overhead: Ukukhishwa kanye nokusikwa kwamaphakethe kunciphisa ivolumu yenani lethrafikhi elithunyelwa kumapulatifomu okuqapha, kunciphisa i-cloud archive kanye nezindleko zokudlulisa idatha phakathi kwezikhungo.
4. Nciphisa ingozi yokuthobela imithetho: Ukufihla idatha yemvelo kususa isidingo sehadiwe yokuhlanza evela eceleni futhi kuqinisekisa ukuthi ukuhamba komsebenzi wokubamba ithrafikhi kuhambisana nemiyalelo ye-PCI-DSS, i-HIPAA kanye ne-GDPR.
5. Nciphisa isikhala se-rack yesikhungo sedatha kanye nezindleko zokufaka izintambo: Ukuhlanganiswa okuhlanganisiwe kususa inqwaba yezintambo ezingafuneki kanye nemishini yokubonisa ehambisanayo, kunciphisa izindleko zengqalasizinda ebonakalayo.
6. Susa umthelela wokusebenza kweswishi yokukhiqiza: Ukubanjwa kwesibuko okuhlanganisiwe nge-NPB kunciphisa ukusetshenziswa kwe-SPAN port kuma-core switch, kuvimbela ukulahleka kwephakethe elihlobene neseshini yesibuko kuthrafikhi yebhizinisi lokukhiqiza.
Yakha Ukubonakala Okuphelele Nge-Mylinking Network Packet Broker
Izinhlelo zokuqapha inethiwekhi zanamuhla kanye nokuphepha kwenethiwekhi azikwazi ukuletha ukutholwa kwezinsongo okuthembekile noma ukuxazulula izinkinga zokusebenza ngaphandle kwe-Network Packet Broker ezinikele njengesendlalelo sayo esiyinhloko sokuhlela ukubonakala. Ukufakwa kwe-SPAN kanye ne-PAP-kuphela okungasebenzi kudala ukugcwala kwethrafikhi okubizayo, izindawo ezingahlolwanga ezifihliwe, ukuntuleka kwechweba lamathuluzi, ubuthakathaka bokuthobela imithetho kanye nezindlela zethrafikhi ezihlukene ezinciphisa ukusebenza kahle kwe-NetOps kanye ne-SecOps.
Ihadiwe ye-Mylinking enterprise-grade Network Packet Broker ibhekana nazo zonke izindawo ezibucayi zokubonakala ngokusebenzisa imisebenzi yokucubungula ithrafikhi esheshiswa ngokuphelele yihadiwe: ukuhlanganiswa, ukudluliselwa, ukuhlunga, ukususwa kwe-tunnel, ukususwa kwe-SSL, ukusika amaphakethe kanye nokufihla idatha egxile ekuhambisaneni. Ngokuhlanganisa konke ukucubungula kwangaphambili kokubanjwa kwethrafikhi kuhlelo lokusebenza olulodwa oluhlanganisiwe lwe-rackmount, izinhlangano zivula ukubonakala kwenethiwekhi okugcwele kusukela ekuqaleni kuya ekugcineni kuyo yonke imingcele ye-inthanethi esenyakatho kuya eningizimu kanye nethrafikhi yendwangu ebonakalayo empumalanga kuya entshonalanga, okwandisa i-ROI ekutshalweni kwezimali kwamathuluzi okuqapha kanye nokuphepha okukhona ngenkathi kuqinisa ukuma kokuvikela kwe-cyber jikelele.
Ukuze uthole okugcweleAbathengisi Bephakethe Lenethiwekhiukubonisana ngezixazululo, vakashela ikhasi lezinsiza ezisemthethweni ze-Mylinking:https://www.mylinking.com/network-packet-broker/
Isikhathi sokuthunyelwe: Agasti-06-2026
