Esikhathini sokuxhumana okukhulu kanye nokuguqulwa kwedijithali, ingqalasizinda yenethiwekhi yebhizinisi ibhekene nokwanda okungakaze kubonwe kwezinsongo ze-cyber—kusukela ekuhlaselweni kwe-DDoS kanye nokungena okunonya kuya ekufakweni kwedatha kanye nobuthakathaka bethrafikhi ebethelwe. Ukuze kuvikelwe imisebenzi ebalulekile yebhizinisi, izinhlangano zisebenzisa uhlelo oluqinile lwezixazululo ze-Inline Security kuma-node enethiwekhi ayinhloko, kufaka phakathi ama-firewall (FW), izinhlelo zokuvimbela ukungena (IPS), amapulatifomu e-anti-DDoS, ama-firewall esicelo sewebhu (WAF), kanye namathuluzi okuphatha izinsongo ezihlanganisiwe (UTM). Ngesikhathi esifanayo, Ukuqapha Inethiwekhi sekuyinto engaxoxiswana ngayo ukuze kulondolozwe ukubonakala kwethrafikhi, ukuxazulula amaphutha, kanye nokuqinisekisa ukuhambisana. Kodwa-ke, ukusetshenziswa kwendabuko kwezixazululo ze-Network Packet Broker (NPB) ezizimele kanye ne-Inline Bypass Switch kudala amaphuzu abuhlungu okusebenza: amaphuzu angawodwa okwehluleka (SPOF) kumaketanga okuphepha angaphakathi, ukungasebenzi kwenethiwekhi okungahleliwe ngesikhathi sokulungiswa/ukuthuthukiswa kwedivayisi, ukucubungula ithrafikhi okungasebenzi kahle, ukungakwazi ukuqapha ithrafikhi ye-SSL/TLS ebethelwe, kanye nezithiyo zokusebenza ezindaweni ze-bandwidth ephezulu ye-10/40/100GE.
I-Mylinking ibhekana nalezi zinselele embonini yonke nge-ML-NPB-M2000—isisombululo esihlanganisiwe esiguqulayo esihlanganisa amakhono okuqondisa ithrafikhi ahlakaniphile esizukulwane esilandelayo se-Network Packet Broker (NPB) kanye nokubekezelela amaphutha kanye nokuvikelwa kwe-zero-downtime kwe-Inline Bypass Switch esezingeni eliphezulu, i-Network Bypass Tap, kanye ne-Smart Bypass Switch. Yakhelwe ukuthembeka nokusebenza kwebanga lebhizinisi, i-ML-NPB-M2000 inikeza amandla okucubungula ama-duplex angu-2.4Tbps, umklamo ongashintshaniswa ngokushisa oguquguqukayo, amamojula we-810G SFP+ / 4100GE Bypass, amamojula we-1610GE SFP+ / 4100GE Monitor, kanye nezici zokucubungula ithrafikhi ezithuthukisiwe ezifaka phakathi i-SSL proxy/decryption, i-traffic dragplication, i-DPI deep packet inspection, kanye ne-dynamic policy forwarding. Njenge-Inline Bypass Tap kanye ne-NPB, ichaza kabusha ukuphepha kwenethiwekhi kanye nokuqapha ngokuhlanganisa ukuthunyelwa kokuphepha okungokoqobo nokunengqondo okusemgqeni, isuse ama-SPOF, iqinisekise ukuthi akukho sikhathi sokungasebenzi kwenethiwekhi, futhi ivule ukubonakala kwethrafikhi okuhlanganisiwe, kwesikhathi sangempela kwamabhizinisi anamuhla, izikhungo zedatha, kanye namapulatifomu amafu.
Lokhu kuhlola okujulile kobuchwepheshe kuhlola ubuchwepheshe obuyinhloko be-ML-NPB-M2000, ukuguquguquka kwe-modular, amakhono okucubungula ithrafikhi ahlakaniphile, imininingwane yobuchwepheshe, izimo zohlelo lokusebenza lwangempela, kanye nezinzuzo zokuncintisana—kuyibeka njengesixazululo esiqondile se-enterprise Network Packet Broker (NPB), i-Inline Bypass Switch, kanye nezidingo zokuphepha/ukuqapha inethiwekhi.
1. Ukuphepha Nokuqapha Kwenethiwekhi Yendabuko: Amaphuzu Obuhlungu Embonini Angaxazululwa
Ngaphambi kokuhlola amakhono avelele e-ML-NPB-M2000, kubalulekile ukulinganisa imikhawulo yokusetshenziswa kwe-Network Security kanye ne-Network Monitoring yendabuko—amaphutha akhiwe ngenhloso yokuxazulula le Network Packet Broker (NPB) ehlanganisiwe kanye ne-Inline Bypass Switch. Lawa maphuzu abuhlungu ahlupha izinhlangano zabo bonke osayizi, athinta ukuqhubeka kwebhizinisi, ukusebenza kahle, kanye nembuyiselo yokutshalwa kwezimali (ROI) yengqalasizinda yokuphepha nokuqapha, futhi agxile ekuhlukaniseni phakathi kwezixazululo ze-NPB ezimele kanye ne-inline bypass:
1.1 Amaphuzu Awodwa Okwehluleka (i-SPOF) Kumaketanga Okuphepha Asemgqeni
Ukufakwa ngokoqobo kwamadivayisi e-Inline Security (FW/IPS/Anti-DDoS) kudala ama-SPOF aqhekekayo: ukwehluleka kwedivayisi eyodwa (ukulayisha ngokweqile, ukuphahlazeka, ukonakala kwe-firmware) noma ukulungiswa okuvamile kumisa lonke isixhumanisi senethiwekhi, okuholela esikhathini sokungasebenzi esibi esingahleliwe. Izixazululo ze-Inline Bypass Tap zendabuko azinawo ubuhlakani bokuhlanganisa namathuluzi okuqapha ithrafikhi, okudala ukuvikelwa kwamaphutha afihliwe kanye nokubonakala.
1.2 Ukuphazamiseka Kwenethiwekhi Okungenakugwenywa Ngesikhathi Sokulungiswa Nokuthuthukiswa
Ukuthuthukisa i-firmware, ukufaka esikhundleni sehadiwe, noma ukubuyekeza izinqubomgomo zokuphepha zamadivayisi okuphepha angaphakathi kudinga ukunqanyulwa kwenethiwekhi ngesandla kanye nama-jumpers okudlula ngokomzimba. Lokhu kuphazamiseka okuhleliwe kuphazamisa izinhlelo zokusebenza zebhizinisi ezibalulekile futhi kuqede ukuthembeka kwenethiwekhi—ukuyekethisa okungamukeleki ezindaweni zamabhizinisi nezikhungo zedatha ezingama-24/7.
1.3 Ukungasebenzi kahle kokucubungula ithrafikhi kanye nezikhala zokubonakala
Izixazululo ze-Standalone Network Packet Broker (NPB) zivame ukungabi nokuvikelwa okuqinile kwamaphutha angaphakathi, kuyilapho amathuluzi e-Smart Bypass Switch endabuko enikeza amakhono okucubungula ithrafikhi alinganiselwe (isb., ukuphindaphinda/ukuhlunga okuyisisekelo). Lokhu kuphumela ekusakazweni kwethrafikhi okungasebenzi kahle, ukubanjwa kwamaphakethe okuphindaphindiwe, izindawo ezingabonakali ekuqapheni ithrafikhi ebethelwe, kanye nokungakwazi ukwenza ukuhlolwa kwethrafikhi kube ngokwezidingo ezithile zamathuluzi okuphepha—ukuchitha izinsiza zokucubungula kanye nokunciphisa ukunemba kokuqapha.
1.4 Imikhawulo Yokuqapha Ithrafikhi Ebethelwe
Ukubethela kwe-SSL/TLS kuyinto ejwayelekile yokudluliswa kwedatha okuphephile, kodwa kudala indawo ebucayi yokungaboni kahle kwamathuluzi okuqapha inethiwekhi kanye nokuphepha okusemgqeni. Izixazululo zendabuko azinawo amakhono omdabu we-SSL proxy/decryption, okushiya izinhlangano zingakwazi ukuhlola ithrafikhi ebethelwe ukuze zithole imisebenzi enonya ngaphandle kokuphazamisa ukuphepha kusukela ekuqaleni kuya ekugcineni.
1.5 Izithiyo Zokusebenza Ezindaweni Ezine-bandwidth Ephakeme
Izixhumanisi ze-10/40/100GE ezine-bandwidth ephezulu zikhiqiza inani elikhulu lethrafikhi elidlula amadivayisi okuphepha/okuqapha okukodwa. Izixazululo ezizimele azinawo amakhono okulinganisela umthwalo aguquguqukayo okusabalalisa ithrafikhi kumathuluzi ahlanganisiwe, okuholela ekwandeni kokubambezeleka, ukulahleka kwephakethe, kanye nokusebenza kohlelo lokusebenza okonakele.
1.6 Ukuphathwa Kokusetshenziswa Kwamadivayisi Amaningi Okuyinkimbinkimbi Nokuthuthwa Kwawo
Ukusebenzisa i-NPB ehlukile, i-Inline Bypass Switch, kanye namathuluzi okucubungula ithrafikhi kudinga ukuxhumanisa izintambo ngokomzimba okuyinkimbinkimbi, ukucushwa ngesandla, kanye nokuphathwa kwe-siloed. Lokhu kwandisa izindleko zokusebenza zamaqembu e-IT, kubambezela ukuxazulula amaphutha, futhi kudala ukungahambisani ekuqinisekisweni kwenqubomgomo yethrafikhi kuyo yonke inethiwekhi.
1.7 Ukubonakala Okulinganiselwe Kwethrafikhi Nokutholakala Kwephutha
Izixazululo zokuqapha zendabuko zinikeza izibalo eziyisisekelo zethrafikhi kuphela, ngaphandle kokuhlolwa kwephakethe elijulile (i-DPI) noma ukuhlaziywa kwamaphutha okubonakalayo. Lokhu kushiya izinhlangano zingakwazi ukubona ngokushesha imbangela eyinhloko yokungalingani kwenethiwekhi, ukwephulwa kokuphepha, noma izinkinga zokusebenza—ukwandisa izikhathi zokuxazulula kanye nokwandisa ingozi yebhizinisi.
Lezi zindawo ezibuhlungu azizona nje iziphazamiso zobuchwepheshe; zithinta ngqo ikhono lenhlangano lokugcina inethiwekhi ephephile, ethembekile, nebonakalayo. I-Mylinking ML-NPB-M2000 ixazulula ngayinye yalezi zinselelo ngokuhlanganisa ukusebenza kwe-Network Packet Broker (NPB) kanye ne-Inline Bypass Switch kube yipulatifomu eyodwa, ehlakaniphile, futhi engakhuliswa—ukususa ama-silo, ukuvula ukusebenza kwe-zero-downtime, kanye nokuletha ukuphepha kwenethiwekhi okuphelele kanye nokuqapha.
2. I-Mylinking ML-NPB-M2000: I-NPB Ehlanganisiwe + I-Inline Bypass Switch – Ushintsho Lwepharadayimu Ekuvikelekeni Kwenethiwekhi Nokuqapha
I-Mylinking ML-NPB-M2000 iyisisombululo sokuqala sebhizinisi embonini sokuhlanganisa ngokungenamthungo amandla okuhlelwa kwethrafikhi e-Network Packet Broker (NPB) nokubekezelela amaphutha kwe-Smart Bypass Switch, i-Network Bypass Tap, kanye ne-Inline Bypass Tap. Yakhelwe ukuthunyelwa okuguquguqukayo kwamadivayisi e-Inline Security alandelanayo kanye nokuqapha okuqinile kwe-Network, yakhelwe ukubhekana nezindawo ezibuhlungu eziyinhloko zokufakwa kwendabuko ngenkathi iletha ukusebenza okungapheli, ukukhulisa, kanye nokuthembeka.
Emongweni wayo, i-ML-NPB-M2000 iyidivayisi ye-rackmount engu-2U ejwayelekile engu-19-intshi ehlanganisa ukuvikelwa kwamaphutha e-Inline Bypass Switch nokucubungula ithrafikhi ye-NPB okuthuthukisiwe—kufaka phakathi i-SSL proxy/decryption, i-traffic dragmentation, i-DPI, i-dynamic load balancing, kanye nokubonakala kwethrafikhi ngesikhathi sangempela. Izinsika zayo ezibalulekile zokuklama zihambisana nezidingo zebhizinisi kanye nesikhungo sedatha ezidinga kakhulu:
○ Ukuhlanganiswa: Ihlanganisa i-NPB, i-Inline Bypass Switch, i-Network Bypass Tap, kanye nokucutshungulwa kwethrafikhi kube yipulatifomu eyodwa, isusa ukuthunyelwa okuhlanganisiwe kanye nobunzima bokusebenza.
○ Ukusebenza Kwesikhathi Sokungasebenzi Kahle: Ukutholwa kokushaya kwenhliziyo okuhlakaniphile kanye nokushintsha okusheshayo kwe-bypass kuqinisekisa ukuxhumana kwenethiwekhi okungaphazanyiswa, noma ngabe amadivayisi okuphepha angaphakathi noma i-ML-NPB-M2000 ngokwayo ihlangabezana nephutha.
○ Ukukwazi Ukukhula Okuguquguqukayo: Izikhala zemojula ezine ezishintshashintshayo zisekela ingxube yamamojula e-Bypass kanye ne-Monitor, okuvumela ukucushwa ngokwezifiso kwezixhumanisi ze-10/40/100GE kanye nokuzivumelanisa nezidingo zenethiwekhi ezishintshayo ngaphandle kokushintshwa okugcwele kwehadiwe.
○ Ukucubungula Okuthuthukisiwe Kwethrafikhi: I-Native SSL proxy/decryption, i-DPI yamaphrothokholi ohlelo lokusebenza angaphezu kuka-1800+, ukususwa kwethrafikhi, ukufihla, kanye nokubumba—ukuvula ukubonakala okugcwele kuthrafikhi ebethelwe nengabethelwe.
○ Izindlela Zokusebenzisa Ezimbili: Isekela ukuthunyelwa kwe-Inline (serial) kokuvikela idivayisi yokuphepha kanye nokuthunyelwa kwe-SPAN (switched port analyzer) kokuqapha inethiwekhi okungapheli—okuletha ukuguquguquka kwawo wonke ama-key node enethiwekhi (amasango e-inthanethi, ama-core switch, amapulazi eseva yesikhungo sedatha).
○ Ukuthembeka Kwezinga Lebhizinisi: Ukunikezwa kwamandla kagesi amabili e-AC/DC, ukubekezelelana kwemvelo kwezinga lezimboni, kanye nezixhumi zokuphatha ezingafuneki kuqinisekisa ukusebenza amahora angama-24 ngosuku, izinsuku eziyi-7 ngesonto ezindaweni zedatha ezinzima kanye nezindawo zebhizinisi.
I-ML-NPB-M2000 akuyona nje i-Network Packet Broker (NPB) noma i-Inline Bypass Switch—iyisikhungo sokuqondisa nokuvikela ithrafikhi esihlanganisa indlela izinhlangano ezisebenzisa ngayo izixazululo ze-Inline Security kanye ne-Network Monitoring. Ngokuhlanganisa le misebenzi ebalulekile, inciphisa izindleko zokusebenza, isuse ama-SPOF, futhi iletha ukubonakala kwethrafikhi kanye nokulawula okudingekayo ebhizinisini ledijithali lanamuhla.
3. Ubuchwepheshe Obuthuthukisiwe Obuyinhloko kanye nezici Ezichazayo
Ukusebenza nokuthembeka okuhamba phambili embonini ye-Mylinking ML-NPB-M2000 kuvela kuphothifoliyo yobuchwepheshe obuyimfihlo nobuqinisekisiwe ebhizinisini—ngabunye obulungiselelwe ukubhekana nezinselele ezihlukile zokuphepha kwenethiwekhi kanye nokuqapha inethiwekhi ezindaweni ezine-bandwidth ephezulu. Lobu buchwepheshe benza i-ML-NPB-M2000 ibe yi-Network Packet Broker (NPB) ehlanganisiwe ethuthukisiwe kakhulu kanye ne-Smart Bypass Switch emakethe, okuletha ukubekezelela amaphutha, ubuhlakani bethrafikhi, kanye nokuphathwa okungenamthungo. Zonke izici eziyinhloko zenzelwe ukusebenza ndawonye, ukuqinisekisa ingqalasizinda yenethiwekhi ehlangene, evikelekile, nebonakalayo.
3.1 Izindlela Zokuvikela ze-SpecFlow™ kanye ne-FullLink™
I-ML-NPB-M2000 inezindlela ezimbili zokuvikela ezilungisekayo zokufakwa kwe-Inline Security, ezihambisana nezidingo ezahlukahlukene zokuphepha kwenhlangano kanye nokucubungula ithrafikhi:
○ Imodi Yokuvikela ye-SpecFlow™: Inika amandla ukuvikelwa kwethrafikhi ekhethiwe ngokuhlonza nokuqondisa kabusha izinhlobo ezithile zethrafikhi (isb., i-RDP, i-SSH, ithrafikhi yedathabheyisi, ithrafikhi ye-SSL/TLS ebethelwe) kumadivayisi okuphepha angaphakathi ngobunikazi bekhanda lesendlalelo se-L2-L4 (amathegi e-VLAN, amakheli e-MAC/IP, amachweba wezendlalelo zokuthutha). Ithrafikhi engahlobene ithunyelwa ngqo kusixhumanisi senethiwekhi, kunciphisa umthwalo wokucubungula kumathuluzi okuphepha futhi kunciphisa ukubambezeleka.
○ Imodi Yokuvikela ye-FullLink™: Ezimweni ezidinga ukuhlolwa okuphelele kokuphepha, le modi idlulisela yonke ithrafikhi yenethiwekhi ngamadivayisi e-Inline Security alandelanayo—iqinisekisa ukuhambisana okugcwele nezinqubomgomo zokuphepha kwebhizinisi ngenkathi igcina ukubekezelela amaphutha kwe-Inline Bypass Switch kanye nokuvikelwa kwesikhathi sokungasebenzi.
Zombili izindlela zihlangana kahle namakhono okucubungula ithrafikhi ye-ML-NPB-M2000's NPB, okuvumela ukuhlunga ithrafikhi okunezinhlayiya kanye nokuphoqelelwa kwenqubomgomo kokubili kokufakwa kwe-Inline kanye ne-SPAN.
3.2 Ukutholwa Kwephakethe Lokushaya Kwenhliziyo Elihlakaniphile Nelichazwe Kahle
Isisekelo sokubekezelela amaphutha kwe-ML-NPB-M2000 (ikhono eliyinhloko le-Smart Bypass Switch) ukuthola kwayo iphakethe lokushaya kwenhliziyo okuhlakaniphile—ubuchwepheshe bokuqapha obuthambile obuqondisa izinhlangothi ezimbili obususa izindawo ezingaboni kahle ekuhlolweni kwempilo yedivayisi yokuphepha okusemgqeni. I-ML-NPB-M2000 ithumela amaphakethe okushaya kwenhliziyo angenziwa ngokwezifiso kumachweba aphezulu/aphansi amadivayisi e-Inline Security axhunyiwe futhi aqinisekisa ukubuya kwawo ukuze ahlole isimo sokusebenza kwesikhathi sangempela, ngezici ezibalulekile ezifaka:
○ Amapharamitha okushaya kwenhliziyo achazwe ngokugcwele: Abaphathi bangenza ngezifiso izikhawu zokudlulisa ukushaya kwenhliziyo, inani eliphezulu lokuzama kabusha, kanye neziqondiso zokudlulisa ukuze kufane nezici zokubambezeleka nokuthembeka kwamadivayisi abo okuphepha.
○ Ukutholwa kwamaphutha aqondiswe ohlangothini ngalunye: Indlela yokushaya kwenhliziyo ye-Tx/Rx ibonisa ngokunembile indlela ephelele yokucubungula ithrafikhi yamadivayisi okuphepha asemgqeni, iqinisekisa ukuthi akukho okuhle noma okubi okungamanga ekutholakaleni kwamaphutha.
○ Ukudlula okuzenzakalelayo okusheshayo: Uma amaphakethe okushaya kwenhliziyo ehluleka ukubuya (okubonisa ukwehluleka kwedivayisi, ukulayisha ngokweqile, noma ukunqanyulwa), i-ML-NPB-M2000 idlula idivayisi enephutha ngaphakathi kwe-<8ms—iphinde iqondise ithrafikhi ngqo phakathi kwamadivayisi enethiwekhi ukuqinisekisa ukuthi akukho sikhathi sokungasebenzi kwenethiwekhi.
○ Ukuthola kabusha okuzenzakalelayo okungenamthungo: Uma idivayisi yokuphepha enephutha iqala ukusebenza ngendlela evamile, uhlelo lokuthola ukushaya kwenhliziyo luqala ukuxhuma kabusha okungenamthungo ochungechungeni lokuphepha—akudingeki ukungenelela ngesandla.
○ Izinhlobo zamaphakethe okushaya kwenhliziyo ezenziwe ngezifiso: Isekela amaphakethe okushaya kwenhliziyo e-Layer 2, 3, kanye ne-4, ivumelana namadivayisi okuphepha akhethekile angaphakathi angakwazi ukudlulisa ozimele be-Ethernet be-Layer 2 abajwayelekile (isb., i-IPS/FW ecacile ye-bridge-mode).
Lobu buchwepheshe buqinisekisa ukuthi i-ML-NPB-M2000 isebenza njengomqaphi oqaphile weketanga lokuphepha elingaphakathi, isusa ama-SPOF futhi iqinisekise ukuxhumana kwenethiwekhi okuqhubekayo—ikhono elibalulekile lezindawo zamabhizinisi nezindawo zedatha ezingama-24/7.
3.3 Ukushintsha Okusheshayo Kokudlula kanye nobuchwepheshe be-LinkSafeSwitch™
Ukuze ihambisane nokutholwa kokushaya kwenhliziyo okuhlakaniphile, i-ML-NPB-M2000 ihlanganisa ukuvikelwa kokushintsha kwe-Fast Bypass kanye nobuchwepheshe be-LinkSafeSwitch™ obukhethekile—izici ezisheshiswa yihadiwe ezichaza amakhono ayo e-Inline Bypass Tap kanye ne-Network Bypass Tap:
○ Ukubambezeleka kokushintshana kwe-Sub-8ms bypass: I-ML-NPB-M2000 iletha ukubambezeleka kokushintsha kwe-bypass okuphansi okuhamba phambili embonini, okuqinisekisa ukuthi abasebenzisi abazwani nomthelela wenethiwekhi obonakalayo ngesikhathi semicimbi yamaphutha.
○ Ukulondolozwa kwesimo sesixhumanisi: Ubuchwepheshe be-LinkSafeSwitch™ buqinisekisa ukuthi isimo sesixhumanisi senethiwekhi esiyinhloko asishintshi ngesikhathi sokushintsha kwe-bypass, okuvimbela amaphrothokholi we-topology we-Layer 2/3 ukuthi angaphinde asebenze futhi ahlangane—okunciphisa ukuphazamiseka kwenethiwekhi.
○ Ukusebenza kokuvula okuhlulekileNgisho noma i-ML-NPB-M2000 ngokwayo ihlangabezana nephutha lehadiwe noma lesofthiwe, idlula ngokuzenzakalelayo ungqimba lwayo lokucubungula, igcina ukuxhumana okuqondile phakathi kwamadivayisi enethiwekhi. Lokhu kususa i-ML-NPB-M2000 njenge-SPOF engaba khona— inzuzo ebalulekile kunezixazululo ze-Inline Bypass Switch ezimele.
3.4 Ubuchwepheshe Bokudlulisa/Ukukhipha Inqubomgomo Ye-WebService™ Eguquguqukayo
Umehluko obalulekile wokusebenza kwe-ML-NPB-M2000's Network Packet Broker (NPB) ubuchwepheshe bayo be-WebService™ Dynamic Policy Forwarding/Issue—okuvumela ukuhlanganiswa kwesikhathi sangempela namathuluzi okuphepha kanye nokuqapha e-Inline Security ezinkampani zangaphandle (isb., amapulatifomu e-Anti-DDoS, izinhlelo ze-SIEM). Lesi sici siguqula i-ML-NPB-M2000 ibe yindawo yokulawula ithrafikhi ephakathi, enamakhono ayisisekelo:
○ Izibuyekezo zenqubomgomo ezishintshashintshayo zesikhathi sangempela: Amathuluzi okuphepha eqembu lesithathu angathumela imithetho yokufanisa ithrafikhi ku-ML-NPB-M2000 nge-WebService API ejwayelekile, ebuyekeza iqoqo layo lemithetho eguquguqukayo yokudonsa ithrafikhi ngokushesha—akudingeki ukucushwa ngesandla.
○ Ukuqondisa kabusha ithrafikhi enonya ngesikhathi sokufunwaIsibonelo, uma idivayisi ye-Anti-DDoS ithola ukuhlaselwa kwe-IP/ingxenye yeseva ethile, ibangela i-ML-NPB-M2000 ukuthi iqondise ithrafikhi enonya kuphela kuhlelo lokusebenza lwe-Anti-DDoS ukuze ihlanzwe—okushiya ithrafikhi evamile ingathinteki futhi inciphise ukubambezeleka.
○ Ukuthembela okuphansi kwenethiwekhiNgokungafani nezixazululo zendabuko zokudonsa ithrafikhi (isb., ukufakwa komzila we-BGP), ukudluliselwa kwenqubomgomo okuguquguqukayo akudingi zinguquko ku-topology yenethiwekhi eyisisekelo—okwenza kube lula ukuyisebenzisa, ukuyigcina, kanye nokukala.
○ Ukudlulisela phambili isivinini sentambo esisheshayo se-ASIC: I-ML-NPB-M2000 isebenzisa ukudlulisela ama-chip e-ASIC ahlanzekile kuze kufike ku-100Gbps traffic yesivinini sentambo, ngaphandle kokuvimba—ngisho nalapho icubungula amakhulu emithetho yenqubomgomo eguquguqukayo.
3.5 I-SSL Proxy kanye Nokususa Ukubethela – Ukuvula Ukubonakala Kwethrafikhi Okubethelwe
Enye yezinselelo ezibaluleke kakhulu zokuqapha inethiwekhi kanye nokuphepha okuqondile kumanethiwekhi anamuhla ithrafikhi ebethelwe ye-SSL/TLS. I-ML-NPB-M2000 ibhekana nalokhu ngamakhono e-SSL Proxy kanye ne-SPAN SSL Decryption—ukususa izindawo ezingabonakali zethrafikhi ebethelwe ngaphandle kokuphazamisa ukuphepha kusukela ekuqaleni kuya ekugcineni:
○ Ummeleli we-SSL obonakalayo: Isusa amaphakethe abhalwe ngemfihlo okuqala, ithumela umbhalo ocacile kumathuluzi okuphepha/okuqapha angaphakathi ukuze ahlolwe, bese iphinda ibhale ngemfihlo idatha bese iyithumela emuva kusixhumanisi senethiwekhi sokuqala—iqinisekisa ukudluliswa kwedatha okuphephile ngenkathi ivumela ukuhlolwa okugcwele kwethrafikhi.
○ Usekelo lokubethela okubanzi: Isekela i-TLS1.0, i-TLS1.2, kanye ne-SSL3.0, iyahambisana nazo zonke izinqubo zokubethela zebhizinisi ezijwayelekile.
○ Ukususwa kokubethela okusekelwe esitifiketini: Ilayisha izitifiketi ze-SSL ezenziwe ngokwezifiso zokususa ukubethela okuqondiwe kwezinhlobo ezithile zethrafikhi, iqinisekisa ukuhambisana nemithethonqubo yobumfihlo bedatha (isb., i-GDPR, i-CCPA).
○ Ukususwa kokubethela kwe-SSL nge-Bypass: Kokusetshenziswa kwe-SPAN, isusa ukubethela ithrafikhi ebethelwe ye-HTTPS yezinhlelo zokuqapha/zokuhlaziya ezingemuva—ivula ukubonakala emisebenzini enonya efihliwe kuthrafikhi ebethelwe.
Leli khono lishintsha kakhulu izinhlangano ezidinga ukulinganisela ukudluliswa kwedatha okubethelwe ngokuphephile nokuqapha inethiwekhi okuqinile kanye nokuphepha okuku-inthanethi.
3.6 Ukulinganisela Umthwalo Oguquguqukayo Wezixhumanisi Eziningi
Ezindaweni ezine-bandwidth ephezulu ye-10/40/100GE lapho idivayisi eyodwa yokuphepha oku-Inline noma yokuqapha ingakwazi ukusingatha ithrafikhi ephezulu, ubuchwepheshe be-ML-NPB-M2000's Multi-link Load Balancing kanye ne-Intelligent Traffic Distribution buvumela ukuthunyelwa kwamathuluzi ahlanganisiwe—ukuvula usayizi oqondile wokusebenza:
○ Ukusatshalaliswa kwethrafikhi okusekelwe ku-Hash: Isabalalisa ithrafikhi kumadivayisi okuphepha/okuqapha ahlanganisiwe ngokusekelwe ezicini zesendlalelo se-L2-L4 (amathegi e-VLAN, amakheli e-MAC/IP, izinombolo ze-port, ulwazi lwephrothokholi)—iqinisekisa ubuqotho beseshini kanye nokugwema uku-oda kabusha kwephakethe.
○ Ukulungiswa komthwalo oguqukayo: Ukuqapha ngesikhathi sangempela umthwalo wokucubungula wedivayisi ngayinye, ngokusatshalaliswa kabusha kwethrafikhi okuzenzakalelayo ukuvimbela ukunqwabelana ngokweqile nokuthuthukisa ukusetshenziswa kwezinsiza.
○ Ukusekelwa kokuhlanganiswa kwabantu abaningi: Ivumela ukuhlanganiswa kwamadivayisi okuphepha angaphakathi afinyelela ku-1610GE noma i-8100GE, okuhlangabezana nezidingo zamanethiwekhi amakhulu e-bandwidth, amasango e-inthanethi, kanye namapulazi eseva yesikhungo sedatha.
○ Ubulungu beqembu le-Dynamic port: Amaqembu echweba lokulinganisela umthwalo azivumelanisa ngokuzenzakalelayo nezinguquko zesimo sesixhumanisi (xhumanisa PHEZULU/PHANSI), esabalalisa kabusha ithrafikhi ukuqinisekisa ukucutshungulwa okuqhubekayo—akudingeki ukungenelela ngesandla.
3.7 Ubuchwepheshe Bokuphathwa Okukude Obuphelele
I-ML-NPB-M2000 yenzelwe ukuphathwa okukude okungenamthungo—okubalulekile kumanethiwekhi amakhulu ebhizinisi, izikhungo zedatha ezisakazeke ngokwendawo, kanye namapulatifomu amafu. NjengoMthengisi Wephakethe Lenethiwekhi (NPB) ochwepheshe kanye ne-Smart Bypass Switch, isekela isethi ephelele yamaphrothokholi namathuluzi okuphatha ajwayelekile embonini, kanye nokulawula ukufinyelela okusekelwe ezindimeni (RBAC) ukuqinisekisa ukuphepha kokuphatha:
○ Ukuphathwa kwezithombe: I-HTTP/WEB GUI yokuqapha okunembile ngesikhathi sangempela, ukucushwa, ukuxazulula amaphutha, kanye nokubona ngeso lengqondo ithrafikhi.
○ Ukuphathwa komugqa womyalo: I-TELNET/SSH CLI ene-EasyConfig (ukusethwa okuyisisekelo kwabaphathi abangebona abezobuchwepheshe) kanye nezindlela ze-AdvanceConfig (ukusethwa kobuchwepheshe obuyi-granular kwabanjiniyela benethiwekhi).
○ Ukuhlanganiswa kokuphathwa kwenethiwekhi: I-SNMP V1/V2C yokuhlanganiswa nezinhlelo zokuphathwa kwenethiwekhi yebhizinisi (i-NMS) kanye ne-SYSLOG yokuqoqwa nokuhlaziywa kwamalogi ahlanganisiwe.
○ Ukuqinisekiswa okuphephile: Ukuqinisekiswa okusekelwe kuphasiwedi, ukugunyazwa okuphakathi kwe-AAA, kanye ne-TACACS+/RADIUS—ukuqinisekisa ukuthi abasebenzi abagunyaziwe kuphela abakwazi ukufinyelela nokulungisa idivayisi.
○ Ukuphathwa kwangaphandle kwebhendi: I-interface yokuphatha ye-RJ45 engu-1*10/100/1000M ezinikele iqinisekisa ukufinyelela okukude noma ngabe indiza yedatha ihlangabezana nephutha.
○ Ukucushwa kwendawo: Isixhumi esibonakalayo se-RS232 Console (115200,8,N,1) sokulungiselela nokuxazulula izinkinga endaweni.
Leli qoqo lokuphatha eliphelele linciphisa umthwalo wokusebenza emaqenjini e-IT, lenza kube lula ukucushwa kanye nokulungiswa kwamaphutha, futhi liqinisekisa ukuqiniswa kwenqubomgomo okuqhubekayo kuyo yonke inethiwekhi.
4. Ukuguquguquka Kokucushwa Kwe-Modular - Kungenziwa Ngokwezifiso Kuzo Zonke Izidingo Zenethiwekhi
Isici esichazayo se-Mylinking ML-NPB-M2000 ukwakheka kwayo okuguquguqukayo, okungashintshwa ngokushisa—uphawu lokukwazi kwayo ukukhulisa njenge-Network Packet Broker (NPB) ehlanganisiwe kanye ne-Inline Bypass Switch. Idivayisi iqukethe i-chassis eyimpoqo (enezinketho zamandla ze-AC/DC) kanye nezikhala ezine zemojula ezisekela noma yikuphi ukuhlanganiswa kwamamojula e-Bypass kanye ne-Monitor—okuvumela izinhlangano ukuthi zivumelanise i-ML-NPB-M2000 nesivinini sazo sesixhumanisi se-10/40/100GE, ukuvikelwa kwe-Inline Security, kanye nezidingo ze-Network Monitoring. Wonke amamojula asekela ukushintshaniswa ngokushisa, okuvumela ukulungiswa nokuthuthukiswa ngaphandle kwesikhathi sokungasebenzi kwenethiwekhi—okuqinisa kakhulu isimiso sokuklama se-ML-NPB-M2000 sokungashintshwa ngokushisa.
4.1 Imininingwane ye-Chassis (ML-NPB-M2000)
I-chassis iyisisekelo se-ML-NPB-M2000, ehlinzeka ngengqalasizinda ebonakalayo, kagesi, kanye nokuphatha yokuhlanganiswa kwemojula. Kunezinhlobo ezimbili ze-chassis ezitholakalayo, ezihlukile kuphela ekuhlinzekweni kwamandla (i-AC/DC) ukuze zivumelane nezimo zamandla ebhizinisi ahlukahlukene kanye nesikhungo sedatha:
| Imodeli yeChassis | Imininingwane Yobuchwepheshe Ebalulekile |
|---|---|
| I-ML-NPB-M2000-CHS/AC | I-rackmount engu-2U engu-19 intshi; Izikhala zemodyuli ezine ezishintshwayo ezishisayo; 1Ikhonsoli ye-RS232, 110/100/1000M RJ45 mgmt; amandla amabili e-AC-220V; ukusetshenziswa kwamandla okuphezulu okungu-300W; ubukhulu obungu-444mm88mm670mm |
| I-ML-NPB-M2000-CHS/DC | I-rackmount engu-2U engu-19 intshi; Izikhala zemodyuli ezine ezishintshwayo ezishisayo; 1Ikhonsoli ye-RS232, 110/100/1000M RJ45 mgmt; amandla amabili e-DC-48V; ukusetshenziswa kwamandla okuphezulu okungu-300W; ubukhulu obungu-444mm88mm670mm |
4.2 Amamojula Okudlula – Ukuvikelwa Kwephutha Lokuphepha Okusemgqeni
Amamojula e-Bypass ayimnyombo yamakhono e-ML-NPB-M2000's Inline Bypass Switch, Network Bypass Tap, kanye ne-Inline Bypass Tap, ahlinzeka ngokuvikelwa okulandelanayo kwezixhumanisi ze-10/40/100GE futhi ahlangana ngqo nokutholwa kwenhliziyo okuhlakaniphile kwedivayisi kanye nokushintsha okusheshayo kwe-bypass. Wonke amamojula e-Bypass asekela ukuhambisana kwe-1G/10GE (INL-I8XM8X) noma i-40GE/100GE (INL-I4HM2H), okuqinisekisa ukuhambisana emuva naphambili nengqalasizinda yenethiwekhi ekhona:
| Imodeli Yemojuli Yokudlula | Imininingwane Yobuchwepheshe Ebalulekile |
|---|---|
| INL-I8XM8X (LM/SM) | Ukuvikelwa kwesixhumanisi esilandelanayo esinezindlela ezine ze-10GE (ehambisana ne-1G); 8Izixhumi ze-10GE; 8Amachweba okuqapha e-10G SFP+ (awekho amamojula okukhanya); ukwesekwa kwe-single/multimode |
| INL-I4HM2H (LM/SM) | Ukuvikelwa kwesixhumanisi esilandelanayo esinezindlela ezimbili ze-100GE (ehambisana ne-40GE); 4Izixhumi ze-interface ze-100GE; 2Amachweba okuqapha angu-100GE QSFP28 (awekho amamojula okukhanya); ukwesekwa kwe-single/multimode |
4.3 Amamojula Okuqapha – Ukucubungula Nokuqapha Okuthuthukisiwe Kwethrafikhi ye-NPB
Amamojula okuqapha anika amandla ukusebenza kwe-ML-NPB-M2000's Network Packet Broker (NPB), ahlinzeka ngokucubungula okuyisisekelo nokuthuthukisiwe kwethrafikhi kokuthunyelwa kwe-SPAN kanye nokuqapha inethiwekhi. Kunezigaba ezimbili zamamojula okuqapha atholakalayo: amamojula ajwayelekile (ukucubungula okuyisisekelo kwethrafikhi) kanye namamojula enjini yokusebenza athuthukisiwe (i-SSL proxy/decryption, i-traffic dragplication, i-DPI). Wonke amamojula okuqapha awafaki amamojula okukhanya, okuvumela izinhlangano ukuthi zisebenzise ama-transceivers azo akhona ukuze zisebenzise kahle izindleko:
| Imodeli Yemojuli Yokuqapha | Imininingwane Yobuchwepheshe Ebalulekile |
|---|---|
| UMsombuluko-UM16X | Amachweba okuqapha angu-16*10GE SFP+ (awekho amamojula okukhanya); ukucubungula okuyisisekelo kwethrafikhi (ukuphindaphinda/ukuhlanganisa/ukuhlunga) |
| UMON-M16X-CN98 | Amachweba okuqapha angu-16*10GE SFP+ (awekho amamojula okukhanya); injini yokusebenza ethuthukisiwe (i-SSL proxy/decryption, i-traffic dragplication, i-DPI) |
| UMsombuluko-UMsombuluko-4H | Amachweba okuqapha angu-4*100GE QSFP28 (awekho amamojula okukhanya); ukucubungula okuyisisekelo kwethrafikhi (ukuphindaphinda/ukuhlanganisa/ukuhlunga) |
| UMsombuluko-M4H-CN98 | Amachweba okuqapha angu-4*100GE QSFP28 (awekho amamojula okukhanya); injini yokusebenza ethuthukisiwe (i-SSL proxy/decryption, i-traffic draduplication, i-DPI) |
4.4 Imithetho Yokucushwa Kwemojuli Ebalulekile
Ukuqinisekisa ukusebenza okuhle kakhulu, ukuhambisana, kanye nokukhula, i-ML-NPB-M2000 ilandela isethi yemithetho yokucushwa kwemojuli ecacile, elula ukuyisebenzisa—eklanyelwe ukwandisa ukuguquguquka ngenkathi igwema amaphutha okucushwa:
○ I-chassis kuqala: I-chassis ye-ML-NPB-M2000 (AC/DC) iyisici esiyimpoqo; wonke amamojula e-Bypass/Monitor awesibili futhi kumele akhethwe ngemva kwe-chassis.
○ Ukuguquguquka kwesikhala okungenamkhawulo: Izikhala zemojula ezine zisekela noma yikuphi ukuhlanganiswa kwamamojula e-Bypass kanye ne-Monitor (isb., i-4 Bypass, i-4 Monitor, i-2 Bypass + i-2 Monitor)—akukho ukukhiya kwezikhala kwezinhlobo ezithile zemojula.
○ Usekelo lwezixhumanisi ezinabantu abaningi: Ngokusekelwe ekuhlanganisweni kwemodyuli, idivayisi isekela ukuvikelwa okulandelanayo kwezixhumanisi ze-optical ezifika ku-161G/10GE noma izixhumanisi ze-optical ze-840G/100GE—okuhlangabezana nezidingo zamanethiwekhi ebhizinisi ane-bandwidth ephezulu kanye nesikhungo sedatha.
○ Ukuqapha kwabantu abaningi: Idivayisi isekela izixhumi zokuqapha ezifika ku-641G/10GE noma izixhumi zokuqapha ze-1640G/100GE—okuvumela ukuqapha okuhlanganisiwe okukhulu kanye nokusetshenziswa kwamadivayisi okuphepha.
○ Ukushintshana okushisayo kuvunyelwe: Wonke amamojula e-Bypass kanye ne-Monitor asekela ukushintshana kwe-hot-swap—okuvumela ukushintshwa kwemojula, ukuthuthukiswa, noma ukulungiswa ngaphandle kwesikhathi sokungasebenzi kwenethiwekhi noma izinguquko zokucushwa.
Lokhu kuguquguquka kwe-modular kwenza i-ML-NPB-M2000 ibe utshalomali oluqinisekisa ikusasa—izinhlangano zingathuthukisa isivinini sazo sezixhumanisi, ukuvikelwa kokuphepha, noma amakhono okuqapha ngokumane zishintshe amamojula (hhayi ukufaka esikhundleni se-chassis yonke), zinciphise izindleko eziphelele zobunikazi (i-TCO) futhi zivumelane nezidingo zenethiwekhi ezishintshayo iminyaka ezayo.
5. Amakhono Okucubungula Ithrafikhi Ehlakaniphile: Izindlela Zokusebenzisa Ezisemgqeni Neze-SPAN
Isici esinamandla kakhulu se-Mylinking ML-NPB-M2000 ukusekelwa kwayo kwemodi yokufakwa okubili: ukuthunyelwa kwe-Inline (serial) kokuvikela idivayisi ye-Inline Security kanye nokubekezelela amaphutha (kusebenzisa amandla ayo e-Inline Bypass Switch, i-Network Bypass Tap, kanye ne-Smart Bypass Switch) kanye nokuthunyelwa kwe-SPAN (passive) kokuqapha inethiwekhi kanye nokucubungula ithrafikhi okuthuthukisiwe (kusebenzisa ukusebenza kwayo kwe-Network Packet Broker (NPB). Lezi zindlela ezimbili zisebenza ngokuzimela noma ngasikhathi sinye (Inline + SPAN), okuvumela i-ML-NPB-M2000 ukuthi ibhekane nazo zonke izidingo zokuphepha kwenethiwekhi kanye nokuqapha kuzo zonke izinkinobho zenethiwekhi—kusukela kumasango e-inthanethi kanye nokushintsha okuyinhloko kuya kumapulazi eseva yesikhungo sedatha kanye nezixhumanisi zepulatifomu yamafu.
5.1 Imodi Yokusetshenziswa Okusemgqeni – Ukuvikelwa Kokuphepha Okusemgqeni Okungenayo Isikhathi Sokungasebenzi
Ukufakwa kwe-inline kuyindlela eyinhloko yokuvikela idivayisi ye-Inline Security, lapho i-ML-NPB-M2000 isetshenziswa ochungechungeni phakathi kwamadivayisi enethiwekhi (ama-router, amaswishi) namathuluzi okuphepha e-inline (FW/IPS/Anti-DDoS/WAF). Kule modi, isebenza njenge-Smart Bypass Switch kanye ne-Inline Bypass Tap, ihlinzeka ngokubekezelela amaphutha, ukusebenza kwe-zero-downtime, kanye nokudonswa kwethrafikhi okukhethiwe—ngenkathi ihlanganisa amakhono ayisisekelo okucubungula ithrafikhi ye-NPB. Izici ezibalulekile zokufakwa kwe-Inline zifaka:
○ Ukuvikelwa Okuqondile/Konke Okungaphakathi Kwethrafikhi: Izindlela ze-SpecFlow™/FullLink™ zokuhlola ukuphepha okuqondiwe noma okuphelele (ukuhlonza ithrafikhi ye-L2-L4).
○ Ukulinganisela Umthwalo Okuhlakaniphile: Sabalalisa ithrafikhi kumadivayisi okuphepha ahlanganisiwe ukuze uphathe ithrafikhi ephezulu ye-bandwidth (ubuqiniso beseshini bugciniwe).
○ <8ms Ukushintsha Okusheshayo Kokudlula: Ukudlula ngokuzenzakalelayo kwamadivayisi okuphepha anephutha ngomthelela omncane wenethiwekhi (Ubuchwepheshe be-LinkSafeSwitch™).
○ Ukutholwa Kokushaya Kwenhliziyo Okuqondiswa Ngamabili: Ukuqapha impilo ngesikhathi sangempela kwamadivayisi okuphepha asemgqeni anemingcele engenziwa ngezifiso.
○ Ukuvinjelwa Kwethrafikhi: Vimbela amaphakethe angekho emthethweni/angavamile ngokusekelwe ezimweni zesihlungi ezihambisanayo ezi-5-tuple—ukuqinisekisa ukuphepha kwenethiwekhi.
○ Ukulingisa Ithrafikhi: Bukela ithrafikhi yesixhumanisi esiqondile kumathuluzi okuqapha angaphandle kwebhendi (i-IDS/NPM/APM) ukuze kuqashwe inethiwekhi ngendlela engasebenzi—akukho mthelela ekucutshungulweni kokuphepha okuqondile.
○ I-Proxy ye-SSL Ebonakalayo: Susa ukubethela kwethrafikhi ebethelwe ukuze kuhlolwe ukuphepha, bese uphinda ubethele ukuze kudluliselwe—ukuvula ukubonakala kwethrafikhi ebethelwe.
5.2 Imodi Yokusetshenziswa Kwe-SPAN – Ukucubungula Okuthuthukisiwe Kwethrafikhi ye-NPB Yokuqapha Inethiwekhi
Ukufakwa kwe-SPAN kuyindlela yokuqapha inethiwekhi, lapho i-ML-NPB-M2000 isetshenziswa ukuhlanganisa, ukucubungula, nokusabalalisa ithrafikhi kusuka kumachweba e-SPAN enethiwekhi kuya kumathuluzi okuqapha/ukuhlaziya (i-IDS, i-NPM, i-APM, i-SIEM). Kule modi, isebenza njenge-Network Packet Broker (NPB) egcwele izici, iletha amakhono okucubungula ithrafikhi ayisisekelo nathuthukile—ivula ukubonakala kwethrafikhi okuhlanganisiwe, inciphise ukubanjwa kwephakethe okungafuneki, futhi ithuthukise ukusebenza kwamathuluzi okuqapha. Amandla okucubungula i-SPAN e-ML-NPB-M2000 awafani embonini, ngezici ezingaphezu kuka-30 ezithuthukisiwe ezihlukaniswe ngokucubungula ithrafikhi okuyisisekelo kanye nokucubungula ithrafikhi okuthuthukile:
5.2.1 Ukucubungula Okuyisisekelo Kwethrafikhi (i-SPAN)
Amakhono ayisisekelo e-NPB okwenza ngcono ukusatshalaliswa kwethrafikhi kanye nokuqapha inethiwekhi okuyisisekelo:
○ Ukuphindaphindwa/Ukuhlanganiswa/Ukusatshalaliswa Kwethrafikhi: 1:N ukuphindaphindwa, ukuhlanganiswa kwe-N:M, kanye nokusatshalaliswa kwethrafikhi okunembile kumathuluzi okuqapha—ukuqeda ukubanjwa kwephakethe okungadingekile.
○ Ukuhlunga Ithrafikhi Okuphindwe Kabili Oku-5: Ukuhlunga kwethrafikhi ye-granular ngokusekelwe ku-IP/protocol/port 5-tuple, uhlobo lwe-Ethernet, ithegi ye-VLAN, kanye nezici zephakethe (imithetho yohlu olumhlophe/uhlu olumnyama).
○ Ukuphathwa kwe-VLAN: Ukumaka, ukuguqula, nokususa i-VLAN—okuvumela ukuhlukaniswa kwethrafikhi kanye nokwenziwa kwendawo.
○ Ukunemba Kwesikhathi Kwe-Nanosecond: Ukunyatheliswa kwesikhathi okuhambisana ne-NTP kwamaphakethe (ukunemba kwe-nanosecond) kokuxazulula amaphutha kanye nokuxhumana kwelogi.
○ Ukukhumula Ukufakwa Kwe-Tunnel Encapsulation: Ama-header e-tunnel e-Strip VXLAN, GRE, GTP, MPLS, IPIP, kanye ne-SRV6—avula ukubonakala kwethrafikhi e-tunneled.
○ Ukusikwa Kwephakethe: Ukusikwa kwamaphakethe ngokwezifiso (ama-byte angu-64–960) ukunciphisa ukudluliselwa kwedatha okungadingekile kumathuluzi okuqapha—ukunciphisa ukusetshenziswa kwe-bandwidth.
○ Ukuhlonza Iphrothokholi Yokuthungela: Ukuhlonza okuzenzakalelayo kwe-GTP/GRE/VXLAN/PPTP/L2TP/PPPOE/IPIP—okuvumela ukudluliselwa kwethrafikhi okusekelwe kunqubomgomo.
○ Okubalulekile Kokudlulisela Iphakethe: Chaza ukubaluleka kwethrafikhi ngokusekelwe ekubalulekeni kwesevisi—ukuqinisekisa ukuthi amaphakethe abaluleke kakhulu athunyelwa kuqala ukuze kugwenywe ukuqapha ama-alamu amathuluzi.
5.2.2 Ukucubungula Okuthuthukisiwe Kwethrafikhi (i-SPAN)
Amakhono e-NPB ebanga lebhizinisi okuxazulula izinselele eziyinkimbinkimbi zokuqapha inethiwekhi kanye nokuphepha (atholakala kuphela kumamojula e-CN98 advanced function engine Monitor):
○ Ukususwa kwe-SSL: Susa ukubethela ithrafikhi ye-HTTPS/SSL/TLS ukuze kuqashwe/kuhlaziywe (usekelo lwe-TLS1.0/TLS1.2/SSL3.0).
○ Ukususwa Kwethrafikhi: Ukukhishwa kwamaphakethe aphindwe kabili okusekelwe echwebeni/enqubomgomoni—ukunciphisa ama-alamu amanga ethuluzi lokuqapha kanye nomthwalo wokucubungula.
○ Ukufihla Idatha: Ukufihla izinkambu zedatha ezibucayi ngokusekelwe kunqubomgomo (isb. izinombolo zekhadi lesikweletu, ulwazi lomuntu siqu)—ukuqinisekisa ukuhambisana nemithethonqubo yobumfihlo bedatha.
○ Ukuhlolwa Kwephakethe Elijulile le-DPI: Thola amaphrothokholi ezinhlelo zokusebenza angaphezu kuka-1800 (umsindo/ividiyo, imidlalo, i-IM, isizindalwazi, i-imeyili, i-P2P) ngomtapo wolwazi wesici se-DPI ongathuthukiswa—ukuvula ukubonakala kwethrafikhi ezingeni lesicelo.
○ Ukususwa Kwezingxenyana Zephakethe Ngokwezifiso: Hlukanisa izinkambu zokufaka ama-capsulation ngokwezifiso kusuka kuma-byte okuqala angu-128 amaphakethe—ukuzivumelanisa nezimo zenethiwekhi ezizimele.
○ Ukwakheka Kwethrafikhi: Umphumela wethrafikhi obushelelezi kumathuluzi okuqapha ngokusebenzisa ubuchwepheshe bokubumba—ukususa ukulahleka kwephakethe ekuqhumeni kwethrafikhi okuncane.
○ Ukufanisa Amagama Angukhiye Ephaketheni: Qondanisa okuqukethwe kwensimu yomthwalo wokulayisha bese udlulisela/ulahla amaphakethe/amaseshini ahlobene—okuvumela ukutholwa kwezinsongo eziqondiwe.
○ Ukuxhumeka Okuhlala Isikhathi Eside Kulayishwa: Lahla ithrafikhi yokuxhumeka ehlala isikhathi eside engadingeki ngemva kokuthwebula kokuqala—ukunciphisa umthwalo wokucubungula amathuluzi okuqapha.
○ Ukuphuma Kokumbozwa Komhubhe: Faka ithrafikhi eqoqwe emihubheni ye-ERSPAN2/GRE/VXLAN/NVGRE—ukudlulisela ithrafikhi ezinhlelweni zokuqapha/zokuhlaziya ezikude.
○ Ukuqedwa Kwephakethe Lomhubhe: Lungiselela amakheli e-IP/MAC ezimbobo zokufaka ithrafikhi ukuze uthole ithrafikhi efakwe imigudu (GRE/GTP/VXLAN) ngqo—okwenza kube lula ukuqoqwa kwethrafikhi ekude.
5.3 Ukuthunyelwa Okuhlanganisiwe Okungaphakathi + Kwe-SPAN – Ukuphepha Okuhlangene Nokuqapha
Amandla eqiniso e-ML-NPB-M2000 avuliwe ekufakweni kwe-Inline + SPAN hybrid, lapho enikeza khona ukuvikelwa kwe-Inline Security (imodi ye-Inline) kanye nokuqapha kwenethiwekhi okungapheli ngesikhathi esisodwa (imodi ye-SPAN). Kule modi, idivayisi ikhombisa ithrafikhi yesixhumanisi esingaphakathi kumathuluzi okuqapha angaphandle kwebhendi ngenkathi ivikela amadivayisi okuphepha angaphakathi ekwehlulekeni—iletha isisombululo esihlanganisiwe se-Network Security kanye nokuqapha ngaphandle kwama-silos, akukho hardware eyengeziwe, kanye nomthelela wokusebenza kwenethiwekhi. Le modi ye-hybrid iyindlela efanele yokufakwa kwama-key node abalulekile enethiwekhi (isb., amasango e-inthanethi, ama-switch e-core center centre), lapho kokubili ukuvikelwa kokuphepha okuqhubekayo kanye nokubonakala kwethrafikhi ngesikhathi sangempela kungaxoxiswana ngakho.
5.4 Ukubonakala Okuphelele Kwethrafikhi Nokuhlaziywa Kwamaphutha
Ingxenye ebalulekile yokusebenza kwe-ML-NPB-M2000's Network Packet Broker (NPB) imojuli yayo ehlanganisiwe yokubonakala kwethrafikhi kanye nokuhlaziywa kwamaphutha—isikhombikubona esisebenziseka kalula esihlinzeka ngokuqapha inethiwekhi okunezinhlangothi eziningi, ngesikhathi sangempela kanye nokuthola amaphutha ngendlela enembile. Le mojuli iguqula idatha yethrafikhi eluhlaza ibe ukuqonda okusebenzisekayo, ngamakhono amathathu okuhlaziya ayisisekelo:
○ Ukuhlaziywa Kwethrafikhi Okuyisisekelo: Izibalo ezifingqiwe (inani lamaphakethe, ukusatshalaliswa kwe-unicast/multicast/ukusakaza, inani leseshini, ukusatshalaliswa kwephrothokholi) kanye namashadi okuthambekela kwethrafikhi ngesikhathi sangempela.
○ Ukuhlaziywa Okujulile kwe-DPI: Isilinganiso sephrothokholi yesendlalelo sezokuthutha, izinga lethrafikhi ye-IP, ukusatshalaliswa kwephrothokholi yesicelo se-DPI, kanye nokuhlaziywa kwethrafikhi okusekelwe kumugqa wesikhathi (ukunemba okungu-1ms) ngamaslayida wesikhathi asebenzisanayo.
○ Ukuhlaziywa Kwephutha Okunembile: Ukuhlelwa kwephutha okunezingqimba eziningi okuhlanganisa ukubuka konke okungajwayelekile, ukuhlaziywa kwephutha lezinga lokugeleza kwethebula (ukwenqatshwa/ukungaphenduli koxhumano), ukuhlaziywa kwephutha lezinga lephakethe (amaphutha e-checksum/TTL 0), ukuhlaziywa kwephutha lokuphepha (ukuhlaselwa kwe-DDoS/ARP/ukuvimba komlilo), kanye nokuhlaziywa kwephutha lenethiwekhi (ukushintsha/ukushintsha izihibe/ukuphazamiseka kwesixhumanisi).
○ Ukuhlaziywa Kwezibalo Zethrafikhi: Izinga le-TOPN lesikhathi sangempela lamakheli e-IP, amaphrothokholi ohlelo lokusebenza, kanye nezikhathi zethrafikhi—ngokubuka ishadi kanye nokuthunyelwa kwamafayela endawo ukuze kuhambisane nomthetho kanye nokubika.
Le module yokubonakala kwethrafikhi isusa isidingo samathuluzi okuqapha azimele, inciphisa ubunzima bokusebenza futhi inike amandla amaqembu e-IT ukuhlonza ngokushesha, ukuxazulula izinkinga, nokuxazulula amaphutha enethiwekhi kanye nokuphepha—ukunciphisa isikhathi sokungasebenzi kanye nengozi yebhizinisi.
6. Imininingwane Yobuchwepheshe Ephelele ye-ML-NPB-M2000
I-Mylinking ML-NPB-M2000 yakhelwe ukuhlangabezana nezidingo zobuchwepheshe eziqinile kakhulu zamanethiwekhi ebhizinisi, isikhungo sedatha, kanye nepulatifomu yamafu—ihlinzeka ngokusebenza okungenamkhawulo, ukuthembeka, kanye nokukhula njenge-Network Packet Broker (NPB) ehlanganisiwe kanye ne-Inline Bypass Switch. Ngezansi ukuhlukaniswa okuphelele kwezincazelo zayo zobuchwepheshe zezinga lebhizinisi, ezihlelwe ngesigaba esisebenzayo ukuze kube lula ukubhekisela kuzo:
6.1 Imininingwane Yenethiwekhi Eyinhloko kanye Nesixhumi Esibonakalayo
| Ipharamitha | Imininingwane |
|---|---|
| Ukuguqulwa Komkhiqizo | Umthengisi Wephakethe Lenethiwekhi ye-Mylinking ML-NPB-M2000 (NPB) + Iswishi Yokudlula Emugqeni |
| Isici Sefomu | I-rackmount ejwayelekile engu-2U engu-19-intshi (444mm)88mm670mm) |
| Izikhala Zemojuli | Izikhala ezi-4 ezishintshashintshayo ezishisayo (ingxube ye-Bypass/Monitor) |
| Izixhumanisi Ezivikelwe Kakhulu | 16Izixhumanisi ze-optical ze-1G/10GE noma izixhumanisi ze-8Izixhumanisi ze-optical ze-40G/100GE |
| Izixhumi Zokuqapha Eziphezulu | 641G/10GE noma 1640G/100GE |
| Ukuphathwa Kwezixhumi Zokuxhumana | 1Ikhonsoli ye-RS232 (115200,8,N,1); 110/100/1000M RJ45 ngaphandle kwebhendi mgmt |
| Umthamo Wokucubungula | 2.4Tbps full-duplex (ukudlulisa isivinini sentambo esisheshayo se-ASIC) |
| Ukubambezeleka Kokushintshana Kwe-Bypass | <8ms (ehamba phambili embonini) |
6.2 Imisebenzi Yokusetshenziswa Nohlelo
| Isigaba Somsebenzi | Izici Ezisekelwayo |
|---|---|
| Izindlela Zokusebenzisa | Okuqondile (okuqondile), i-SPAN (okungahleliwe), okuqondile + okuhlanganisiwe kwe-SPAN |
| Imisebenzi Yemodi Esemgqeni | Ukuvikelwa kwe-SpecFlow™/FullLink™, ukulinganisela umthwalo, ukutholwa kwenhliziyo, ukudlula okusheshayo, ukuvimba/ukufanisa ithrafikhi, i-proxy ye-SSL |
| Imisebenzi Eyisisekelo Yemodi Ye-SPAN | Ukuphindaphindwa/ukuhlanganiswa/ukusatshalaliswa kwethrafikhi, ukuhlunga okungu-5-tuple, ukuphathwa kwe-VLAN, ukunyathelisa isikhathi, ukukhumula imigudu, ukunqunywa kwamaphakethe |
| Imisebenzi Ethuthukisiwe Yemodi Ye-SPAN | Ukususwa kokubethela kwe-SSL, ukususwa kwethrafikhi, ukufihla idatha, i-DPI (amaphrothokholi angaphezu kuka-1800), ukwakheka kwethrafikhi, ukufaniswa kwamagama angukhiye, ukulayishwa kokuxhumeka okuhlala isikhathi eside |
| Ukubonakala Kwethrafikhi | Ukuhlaziywa okuyisisekelo, ukuhlaziywa okujulile kwe-DPI, ukuhlaziywa kwamaphutha okunembile, ukuhlaziywa kwezibalo (ukuboniswa kweshadi/ukuthunyelwa kwamanye amazwe) |
| Izici Zokuthembeka | Ukushintshana kwe-module hot, i-bypass evulekile, i-interface hot backup (1+1), ukuvikelwa kokuguquguquka kwe-interface, ukulinganiswa kwe-traffic microburst |
6.3 Ukuphathwa Nokuqinisekiswa
| Isigaba Sokuphatha | Amaphrothokholi/Amathuluzi Asekelwe |
|---|---|
| Ukuphathwa Okukude | I-HTTP/WEB GUI, i-TELNET/SSH CLI (EasyConfig/AdvanceConfig), i-SNMP V1/V2C, i-SYSLOG |
| Ukuqinisekiswa | Ukugunyazwa okusekelwe kuphasiwedi, i-AAA, i-TACACS+/RADIUS okuphakathi |
| Ukuloba Nokubika | Ukuqapha i-alamu ngesikhathi sangempela, amarekhodi e-alamu omlando, ukuthunyelwa kwezibalo zethrafikhi |
6.4 Imininingwane Kagesi Nezemvelo (Izinga Lezimboni)
| Isigaba | Imininingwane |
|---|---|
| Ukunikezwa kwamandla kagesi | I-AC-220V noma i-DC-48V (amandla amabili, uma uthanda) |
| Imvamisa Yamandla | I-AC-50Hz |
| Okokufaka Kwamanje | I-AC-3A / DC-10A |
| Ukusetshenziswa Kwamandla Okuphezulu | 300W |
| Izinga Lokushisa Elisebenzayo | 0°F – 50°F (32°F – 122°F) |
| Izinga Lokushisa Lesitoreji | -20℃ – 70℃ (-4°F – 158°F) |
| Umswakama Osebenzayo | 10% – 95% (akunciphisi) |
| Umswakama Wesitoreji | 5% – 95% (ayinciphisi) |
Lezi zincazelo ziqinisekisa i-ML-NPB-M2000 njenge-NPB ehlanganisiwe kanye ne-Inline Bypass Switch esebenza kahle kakhulu, esezingeni lezimboni—eyenzelwe ukusebenza amahora angama-24 ngosuku, izinsuku eziyi-7 ngesonto ezindaweni ezidinga kakhulu ibhizinisi, isikhungo sedatha, kanye nepulatifomu yamafu.
7. Izimo Zokusetshenziswa Kwemboni Yangempela
Izindlela ezimbili zokufaka i-Mylinking ML-NPB-M2000, ukuguquguquka kwe-modular, kanye namakhono okucubungula ithrafikhi athuthukile kwenza ifaneleke kuzo zonke izinkinobho zenethiwekhi yebhizinisi—kusukela kumasango e-inthanethi kanye nokushintsha okuyinhloko kuya kumapulazi eseva yesikhungo sedatha, izixhumanisi zepulatifomu yamafu, kanye nokuxhumeka kwehhovisi legatsha. Ngezansi kunezimo eziyi-10 zesicelo sangempela lapho i-ML-NPB-M2000 iletha khona inani elikhulu kakhulu, ibhekana nezinselele ezithile Zokuphepha Kwenethiwekhi kanye Nokuqapha Inethiwekhi futhi isebenzisa amakhono ayo aphelele njenge-Network Packet Broker (NPB), i-Smart Bypass Switch, i-Network Bypass Tap, kanye ne-Inline Bypass Tap:
7.1 Ukuvikelwa Kwedivayisi Yokuphepha Yochungechunge Lwezixhumanisi Ezisemgqeni
○ Inselele: Ukwehluleka noma ukulungiswa kwedivayisi eyodwa yokuphepha emugqeni (FW/IPS) kubangela ukungasebenzi kwenethiwekhi.
○ Isixazululo: Sebenzisa i-ML-NPB-M2000 kumodi ye-Inline phakathi kwamadivayisi enethiwekhi namathuluzi okuphepha—ukutholwa kokushaya kwenhliziyo okuhlakaniphile kanye nokushintsha kwe-<8ms bypass kuqinisekisa ukuthi akukho sikhathi sokungasebenzi uma idivayisi yokuphepha yehluleka noma ikhishwa ingaxhunyiwe ku-inthanethi ukuze ilungiswe.
○ Inzuzo Eyinhloko: Ukuxhumana kwenethiwekhi okungaphazanyiswa kanye nokuvikelwa kokuphepha okungu-24/7.
7.2 Ukuvikelwa Kokuphepha Okuku-inthanethi Kwenqubomgomo Ye-SpecFlow™
○ Inselele: Yonke ithrafikhi iphoqelelwa ngamadivayisi okuphepha, ichitha izinsiza zokucubungula futhi yandisa ukubambezeleka.
○ Isixazululo: Sebenzisa imodi ye-SpecFlow™ ukuze uqondise kabusha izinhlobo ezithile zethrafikhi (isb., i-database/SSH/ithrafikhi ebethelwe) kumathuluzi okuphepha—ithrafikhi engahlobene idluliselwa ngqo.
○ Inzuzo Eyinhloko: Umthwalo wethuluzi lokuphepha oncishisiwe, ukubambezeleka okuphansi, kanye nokuhlolwa kokuphepha okuqondiwe.
7.3 Ukuvikelwa Kokuphepha Okulinganiselwe Komthwalo (Ububanzi Obuphezulu)
○ Inselele: Idivayisi eyodwa yokuphepha ayikwazi ukusingatha ithrafikhi ephezulu ye-10/40/100GE, okuholela ekulahlekelweni kwe-latency/iphakethe.
○ Isixazululo: Sebenzisa ibhalansi yomthwalo eguquguqukayo ye-ML-NPB-M2000 ukuze ihlanganise amadivayisi amaningi okuphepha—Ukusatshalaliswa kwethrafikhi okusekelwe ku-Hash kuqinisekisa ubuqotho beseshini kanye nokusetshenziswa kwezinsiza okulungile.
○ Inzuzo Eyinhloko: Ukukhuliswa okuqondile komthamo wokucubungula ukuphepha kanye nokusekelwa kwethrafikhi ephezulu ye-bandwidth.
7.4 Ukuguqulwa Kokuxhumeka Kochungechunge Okungokoqobo Kuya Kokunengqondo
○ Inselele: Amadivayisi amaningi okuphepha okulandelanayo adala ama-SPOF amaningi kanye nokubambezeleka okukhulu.
○ Isixazululo: I-ML-NPB-M2000 iguqula ukuthunyelwa kwe-serial ngokomzimba kube yi-physical parallel + logical serial—wonke amadivayisi okuphepha axhuma ku-ML-NPB-M2000, edonsa ithrafikhi iye kuthuluzi ngalinye uma kudingeka.
○ Inzuzo Eyinhloko: Iqeda ama-SPOF amaningi, inciphisa ukubambezeleka, futhi ivumela ukugcinwa kwamadivayisi okuphepha ngamanye ngaphandle kwesikhathi sokungasebenzi kwenethiwekhi.
7.5 Ukunyakaza Kwethrafikhi Okusekelwe Enqubweni Eguquguqukayo (Anti-DDoS)
○ Inselele: Ukudonsa kwethrafikhi yendabuko ye-Anti-DDoS (BGP) kuyinkimbinkimbi futhi kudinga izinguquko ze-topology yenethiwekhi.
○ Isixazululo: Hlanganisa i-ML-NPB-M2000 namathuluzi e-Anti-DDoS ngokusebenzisa i-WebService™ dynamic policy forwarding—ithrafikhi enonya iqondiswa kabusha kumathuluzi e-Anti-DDoS ngesikhathi sangempela, ngaphandle kwezinguquko zenethiwekhi.
○ Inzuzo Eyinhloko: Impendulo yosongo lwesikhathi sangempela, ukuncika okuphansi kwenethiwekhi, kanye nokubambezeleka okuncane kwethrafikhi evamile.
7.6 Ukuqapha Ukuphepha Okungaphakathi + Kwe-SPAN Hybrid Ngaphandle Kwebhendi
○ Inselele: Isidingo sokuvikelwa kokuphepha okuqondile ngesikhathi esisodwa kanye nokuqapha inethiwekhi okungenamsebenzi ngaphandle kwehadiwe eyengeziwe.
○ Isixazululo: Ukufakwa kwe-Hybrid Inline + SPAN—I-ML-NPB-M2000 ivikela amadivayisi okuphepha angaphakathi kwe-inthanethi ngenkathi ilinganisa ithrafikhi kumathuluzi okuqapha angaphandle kwe-band (IDS/NPM/APM).
○ Inzuzo Eyinhloko: Ukuphepha okuhlangene nokuqapha, akukho zindawo zokugcina izinto, akukho zindleko ezengeziwe zehadiwe.
7.7 Ukususwa Kwethrafikhi Ukuze Kuthuthukiswe Amathuluzi Okuqapha
○ Inselele: Amaphakethe aphindaphindwayo abangela ama-alamu amanga ethuluzi lokuqapha kanye nomthwalo wokucubungula owandisiwe.
○ Isixazululo: Sebenzisa ukudonswa kwethrafikhi okusekelwe ku-ML-NPB-M2000's port/policy ukuze ususe amaphakethe aphindaphindiwe ngaphambi kokuba afike kumathuluzi okuqapha.
○ Inzuzo Eyinhloko: Ukunciphisa ama-alamu angamanga, umthwalo wamathuluzi okuqapha ophansi, kanye nokunemba okuthuthukisiwe kokuhlaziya.
7.8 Ukumaka i-VLAN kokwenziwa kwendawo kwe-Traffic Anomaly
○ Inselele: Ayikwazi ukuthola ngokushesha umthombo wezinkinga zenethiwekhi/ukwephulwa kokuphepha.
○ Isixazululo: Sebenzisa ukumaka kwe-VLAN kwe-ML-NPB-M2000 ukuze ulebule ithrafikhi evela kuma-node enethiwekhi ahlukene—amathuluzi e-backend angalandelela ama-anomalies emthonjeni oqondile ngamathegi e-VLAN.
○ Inzuzo Eyinhloko: Ukuthola amaphutha ngokushesha, isikhathi sokuxazulula izinkinga sincishisiwe, kanye nokubonakala kwenethiwekhi okuthuthukisiwe.
7.9 Ukuhlela Ithrafikhi Yenethiwekhi Ehlanganisiwe (Isikhungo Sedatha)
○ Inselele: Ithrafikhi yesixhumanisi se-10/40/100GE ehlukene kunzima ukuyihlanganisa nokuyisabalalisa kumathuluzi okuqapha/okuphepha.
○ Isixazululo: Sebenzisa i-ML-NPB-M2000 njengohlelo lwethrafikhi oluhlanganisiwe—hlanganisa yonke ithrafikhi yezixhumanisi, uyihlunge/uyinqume, bese uyihambisa kumathuluzi afanele.
○ Inzuzo Eyinhloko: Ukulawulwa kwethrafikhi okuhlanganisiwe, ukuncipha kobunzima bokusebenza, kanye nokusetshenziswa kwamathuluzi okulungiselelwe.
7.10 Ukuhlaziywa Okuphelele Kokubonakala Kwethrafikhi Yenethiwekhi
○ Inselele: Ukuntuleka kokubonakala kwethrafikhi ngesikhathi sangempela, okunezinhlangothi eziningi kanye namakhono okuhlaziya amaphutha.
○ Isixazululo: Sebenzisa imodyuli yokubonakala kwethrafikhi ehlanganisiwe ye-ML-NPB-M2000—ukuhlaziywa okujulile okuyisisekelo/i-DPI kanye nokuhlaziywa kwamaphutha okunembile kunikeza ukuqonda okusebenzisekayo ngesibonisi esibonakalayo esisebenziseka kalula.
○ Inzuzo Eyinhloko: Ukuqapha inethiwekhi ngesikhathi sangempela, ukuxazulula amaphutha okusheshayo, kanye nezibalo zethrafikhi ezilungele ukuhambisana nomthetho.
8. Izinzuzo Zokuncintisana ze-Mylinking ML-NPB-M2000
Emakethe egcwele izixazululo ze-Network Packet Broker (NPB) ezimele kanye ne-Inline Bypass Switch, i-Mylinking ML-NPB-M2000 ivelele njengeplatifomu yokuphepha kwenethiwekhi ehlanganisiwe kanye nokuqapha ehlanganisiwe yebhizinisi, isikhungo sedatha, kanye namanethiwekhi amafu. Inhlanganisela yayo eyingqayizivele yokuhlanganiswa, ukusebenza, ukuguquguquka, kanye nobuhlakani inikeza umkhawulo wokuncintisana okungekho sixazululo esizimele esingawufanisa—okwenza kube ukukhetha okuphezulu kwezinhlangano ezibeka phambili ukuthembeka kwenethiwekhi, ukuphepha, kanye nokubonakala. Ngezansi kunezinzuzo eziyi-10 ezibalulekile zokuncintisana ezichaza i-ML-NPB-M2000:
8.1 Ukuhlanganiswa Okungakaze Kubonwe: I-NPB + I-Inline Bypass Switch ku-One Platform
I-ML-NPB-M2000 iyisisombululo sokuqala sebhizinisi embonini sokuhlanganisa ukucutshungulwa kwethrafikhi ye-Network Packet Broker (NPB) ngokubekezelelana kwamaphutha e-Inline Bypass Switch—ukuqeda ukufakwa kwe-siloed, ukunciphisa izintambo ezibonakalayo, kanye nokunciphisa ubunzima bokusebenza. Asikho esinye isixazululo esinikeza leli zinga lokuhlanganiswa, okwenza i-ML-NPB-M2000 ibe yindawo eyodwa yokuphepha kwenethiwekhi kanye nokuqapha inethiwekhi.
8.2 Amandla Okucubungula Ahamba Phambili Embonini angu-2.4Tbps
Ngomthamo wokucubungula we-ASIC osheshayo ongu-2.4Tbps kanye nokusekelwa kwezixhumanisi ze-10/40/100GE, i-ML-NPB-M2000 ifanelana nezidingo zokusebenza zesikhungo sedatha se-bandwidth ephezulu kanye namanethiwekhi ayinhloko ebhizinisi adinga kakhulu—eletha ukudluliselwa kwesivinini sentambo ngaphandle kokuvimba, ngisho nalapho kucutshungulwa imithetho yethrafikhi eyinkimbinkimbi.
8.3 Umklamo Oguquguqukayo Ngokugcwele Noshintshashintshayo Okushisayo
Izikhala zemojula ezine ezishintshashintshayo ezisetshenziswa emhlabeni wonke zisekela noma yikuphi ukuhlanganiswa kwamamojula e-Bypass kanye ne-Monitor—okuvumela ukucushwa ngokwezifiso kwazo zonke izidingo zenethiwekhi kanye nokugcinwa/ukuthuthukiswa ngaphandle kwesikhathi sokungasebenzi kwenethiwekhi. Lokhu kuguquguquka kwemojula kwenza i-ML-NPB-M2000 ivikeleke esikhathini esizayo, ngaphandle kokuphelelwa yisikhathi kwehadiwe njengoba izidingo zenethiwekhi zishintsha.
8.4 Izindlela Zokusebenzisa Ezimbili (Ezingaphakathi/Ezingaphakathi) + Ezihlanganisiwe Ezingaphakathi + Ezangaphakathi
Ukusekelwa kwezindlela zokufakwa ze-Inline, SPAN, kanye ne-hybrid Inline + SPAN kunikeza ukuguquguquka okungenakuqhathaniswa—ukuzivumelanisa ne-node ngayinye yokhiye wenethiwekhi kanye necala lokusetshenziswa, kusukela ekuvikelweni kokuphepha kwe-inline kuya ekuqapheni okungasebenzi. Ayikho i-NPB ezimele noma i-Inline Bypass Switch enikeza leli zinga lokuguquguquka kokufakwa.
8.5 Ummeleli/Ukususa Ukubethela Kwe-SSL Yendabuko – Ukususa Izindawo Ezingaboni Ithrafikhi Ezibethelwe
Amakhono e-proxy ye-SSL yemvelo kanye nokususa ukubethela (TLS1.0/TLS1.2/SSL3.0) avula ukubonakala kwethrafikhi ebethelwe—isici esibalulekile esingekho ezixazululweni eziningi ze-NPB ezizimele kanye ne-bypass. Lokhu kuqinisekisa ukuthi izinhlangano zingahlola ithrafikhi ebethelwe ukuze zithole imisebenzi enonya ngaphandle kokuphazamisa ukuphepha kusukela ekuqaleni kuze kube sekupheleni.
Ukushintsha Okusheshayo Kwe-Sub-8ms Okungu-8.6 Sub-8ms kanye Nokusebenza Kokuhluleka Kokuvula
Ukulibaziseka kokushintshana kwe-<8ms bypass kanye nokusebenza okuvula iphutha kuqinisekisa ukuthi akukho sikhathi sokungasebenzi kwenethiwekhi—noma ngabe amadivayisi okuphepha angaphakathi noma i-ML-NPB-M2000 ngokwayo ihlangabezana nephutha. Lokhu kubekezelela amaphutha akunakuqhathaniswa nezixazululo ze-NPB ezizimele, ezingenawo amakhono okudlula ngokwemvelo.
I-8.7 DPI yamaphrothokholi ezicelo angaphezu kuka-1800 (iLabhulali Engathuthukiswa)
Ukuhlolwa kwephakethe elijulile le-DPI okuhlanganisiwe kwamaphrothokholi e-application layer angaphezu kuka-1800 (enelabhulali yezici ezingathuthukiswa) kunikeza ukubonakala kwethrafikhi ezingeni lesicelo—okuvumela ukuhlolwa kokuphepha okuqondiwe kanye nokuqapha inethiwekhi yamanethiwekhi anamuhla asebenzisa izinhlelo zokusebenza eziningi.
8.8 Ukubonakala Okuphelele Kwethrafikhi Nokuhlaziywa Kwephutha Okunembile
Imojuli yokubonakala kwethrafikhi ehlanganisiwe nesebenziseka kalula inikeza ukuhlaziywa okujulile okuyisisekelo/kwe-DPI okunezinhlangothi eziningi kanye nokwenziwa kwendawo kwamaphutha okunembile—ukususa isidingo samathuluzi okuqapha azimele kanye nokunciphisa izindleko zokusebenza.
8.9 Ukuhlanganiswa Kweqembu Lesithathu Okungenamthungo (Inqubomgomo Eguquguqukayo ye-WebService™)
Ukudluliselwa kwenqubomgomo okunamandla kwe-WebService™ kwenza ukuhlanganiswa kwesikhathi sangempela nawo wonke amathuluzi okuphepha kanye nokuqapha kwe-Inline Security yenkampani yangaphandle (FW/IPS/Anti-DDoS/SIEM)—okwenza i-ML-NPB-M2000 ibe yinto engaziwayo futhi ehambisana nezinqwaba zokuphepha ezikhona (ukuthunyelwa okuhle kakhulu kohlobo).
8.10 Ukuthembeka Kwezinga Lebhizinisi kanye Nokubekezelela Imvelo Kwezinga Lezimboni
Ukunikezwa kwamandla kagesi amabili e-AC/DC, ukushintshashintshana kwe-hot module, isipele se-interface hot, kanye nokubekezelela izinga lokushisa/umswakama ezingeni lezimboni kuqinisekisa ukusebenza okungu-24/7 ezindaweni zedatha ezinzima kanye nezindawo zebhizinisi—okuletha ukuthembeka okudingekayo kwingqalasizinda yenethiwekhi ebalulekile.
Ngakho-ke, enkathini lapho isikhathi sokungasebenzi kwenethiwekhi sibiza amabhizinisi izinkulungwane (noma izigidi) zamaRandi ngomzuzu, futhi izinsongo ze-cyber zikhula zibe yinkimbinkimbi kakhulu ngosuku, i-Mylinking ML-NPB-M2000 ingaphezu nje kwe-Network Packet Broker (NPB) noma i-Inline Bypass Switch—iyindlela yokutshala imali ehlelekile ekuphepheni kwenethiwekhi, ukuthembeka, kanye nokubonakala. Ngokuhlanganisa ukucutshungulwa kwethrafikhi ye-NPB nokubekezelela amaphutha kwe-Smart Bypass Switch, i-Network Bypass Tap, kanye ne-Inline Bypass Tap, ixazulula izinkinga eziyinhloko zokusetshenziswa kwendabuko okuzimele: ukususa ama-SPOF, ukuqinisekisa ukuthi akukho sikhathi sokungasebenzi kwenethiwekhi, ukuvula ukubonakala kwethrafikhi okubethelwe, kanye nokuletha ukuqapha kwenethiwekhi okuhlanganisiwe, kwesikhathi sangempela kwebhizinisi lesimanje, isikhungo sedatha, kanye namanethiwekhi amafu.
Ngomthamo wayo wokucubungula ongu-2.4Tbps, umklamo oguquguqukayo ongashintshaniswayo, izindlela ezimbili zokuthunyelwa kwe-Inline/SPAN, i-proxy/decryption ye-SSL yemvelo, ukuhlolwa kwephakethe elijulile le-DPI, kanye nokubonakala okuphelele kwethrafikhi, i-ML-NPB-M2000 iyisisombululo esihlanganisiwe sokuphepha kwenethiwekhi kanye nokuqapha izinhlangano ezifuna ukusebenza okungenamkhawulo, ukuguquguquka, kanye nokuthembeka. Yakhelwe ukuhlangabezana nezidingo zebhizinisi ledijithali lanamuhla—lapho ukutholakala kwenethiwekhi amahora angama-24 ngosuku, ukuphepha okuqinile, kanye nokubonakala kwethrafikhi okugcwele kungaxoxiswana ngakho.
Thatha Isinyathelo Esilandelayo nge-Mylinking ML-NPB-M2000
Ukulungele ukuguqula ukuthunyelwa kwakho kwe-Network Security kanye ne-Network Monitoring, ukususa ama-silos, nokuqinisekisa ukuthi akukho sikhathi sokungasebenzi kwenethiwekhi?
○ Hlola ikhasi lomkhiqizo we-Mylinking ML-NPB-M2000:https://www.mylinking.com/mylinking-network-packet-broker-plus-inline-bypass-switch-ml-npb-m2000-product/
○ Xhumana nethimba lobuchwepheshe le-Mylinking: Yenza ngokwezifiso ukucushwa kwe-modular okuhambisana nesivinini sakho sesixhumanisi esingu-10/40/100GE, Ukuphepha Okusemgqeni, kanye nezidingo Zokuqapha Inethiwekhi.
○ Cela idemo ebukhoma: Bona amandla e-ML-NPB-M2000 ahlanganisiwe e-NPB + Inline Bypass Switch asebenzayo—kufaka phakathi i-zero-downtime bypass, i-SSL decryption, i-DPI, kanye nokubonakala kwethrafikhi—ukuze uthole isimo sakho senethiwekhi ethile.
○ Thola ikhotheshiniFunda ukuthi i-ML-NPB-M2000 inciphisa kanjani izindleko zakho eziphelele zobunikazi (i-TCO) ngokuqeda i-NPB ezimele kanye nehadiwe yokudlula, ukunciphisa izindleko zokusebenza, kanye nokuletha ikhambi lenethiwekhi elingamelana nesikhathi esizayo.
Nge-Mylinking ML-NPB-M2000, ungabeka i-Network Security kanye ne-monitoring stack eqinile, engalinganiswa, futhi ehlangene—ngaphandle kokubeka engcupheni ukuthembeka kwenethiwekhi, ukusebenza, noma ukubonakala.
Isikhathi sokuthunyelwe: Mashi-26-2026
