Isingeniso
Eminyakeni yamuva nje, inani lezinsizakalo zamafu ezimbonini zaseChina liyakhula. Izinkampani zobuchwepheshe zibambe ithuba lomzuliswano omusha woguquko kwezobuchwepheshe, zenze uguquko lwedijithali ngenkuthalo, zandisa ucwaningo kanye nokusetshenziswa kobuchwepheshe obusha obufana ne-cloud computing, idatha enkulu, ubuhlakani bokwenziwa, i-blockchain kanye ne-inthanethi yezinto, futhi zathuthukisa isayensi yazo kanye ne-inthanethi yezinto. amakhono esevisi yezobuchwepheshe. Ngokuthuthuka okuqhubekayo kobuchwepheshe bamafu nobuchwepheshe bokubonwayo, izinhlelo eziningi zohlelo lokusebenza ezikhungweni zedatha zifuduka zisuka kukhampasi yangempela yangempela ziye endaweni yesikhulumi samafu, futhi ithrafikhi yasempumalanga-ntshonalanga endaweni yamafu yezikhungo zedatha ikhula kakhulu. Kodwa-ke, inethiwekhi yeqoqo lethrafikhi evamile ayikwazi ukuqoqa ngokuqondile ithrafikhi yasempumalanga-ntshonalanga endaweni yamafu, okuholela ekutheni ithrafikhi yebhizinisi endaweni yamafu ibe yindawo yokuqala. Sekuphenduke inkambiso engagwemeki ukubona ukukhishwa kwedatha yethrafikhi yasempumalanga-ntshonalanga endaweni yamafu. Ukwethulwa kobuchwepheshe obusha bokuqoqwa kwethrafikhi empumalanga-ntshonalanga endaweni yamafu kwenza isistimu yohlelo lokusebenza esetshenziswe endaweni yamafu futhi ibe nokusekelwa okuphelele kokuqapha, futhi lapho izinkinga nokwehluleka kwenzeka, ukuhlaziywa kokuthwebula iphakethe kungasetshenziswa ukuhlaziya inkinga nokulandelela idatha. ukugeleza.
1. Imvelo yamafu ithrafikhi yasempumalanga-ntshonalanga ayikwazi ukuqoqwa ngokuqondile, ukuze uhlelo lohlelo lokusebenza endaweni yamafu lungakwazi ukusebenzisa ukutholwa kokuqapha okusekelwe ekugelezeni kwedatha yebhizinisi lesikhathi sangempela, futhi abasebenzi abasebenza nokunakekela abakwazi ukuthola ngesikhathi sangempela. ukusebenza kwesistimu yesicelo endaweni yamafu, okuletha izinzuzo ezithile ezifihliwe ekusebenzeni okunempilo nokuzinzile kwesistimu yesicelo endaweni yamafu.
2. Ithrafikhi yasempumalanga nesentshonalanga endaweni yamafu ayikwazi ukuqoqwa ngokuqondile, okwenza kungenzeki ukukhipha ngokuqondile amaphakethe edatha ukuze ahlaziywe lapho izinkinga zenzeka ezinhlelweni zebhizinisi endaweni yamafu, okuletha ubunzima obuthile endaweni enephutha.
3. Ngokukhula kwezidingo eziqinile zokuvikeleka kwenethiwekhi kanye nocwaningomabhuku oluhlukahlukene, njengokuqapha ukusebenza kwesicelo se-BPC, uhlelo lokutholwa kokungena kwe-IDS, i-imeyili kanye nohlelo lokuhlola ukuqoshwa kwenkonzo yamakhasimende, isidingo sokuqoqwa kwethrafikhi empumalanga-ntshonalanga endaweni yamafu nakho kuya ngokuya kuyanda futhi okuphuthumayo. Ngokusekelwe ekuhlaziyweni okungenhla, sekuphenduke inkambiso engagwemeki ukubona ukukhishwa kwedatha yethrafikhi yempumalanga-ntshonalanga endaweni yamafu, nokwethula ubuchwepheshe obusha bokuqoqwa kwethrafikhi empumalanga-ntshonalanga endaweni yamafu ukuze kwenziwe uhlelo lohlelo lokusebenza lusetshenziswe emafini. imvelo ingaba nokusekelwa okuphelele kokuqapha. Uma izinkinga nokwehluleka kwenzeka, ukuhlaziywa kwephakethe lokuthwebula kungasetshenziswa ukuhlaziya inkinga nokulandelela ukugeleza kwedatha. Ukubona ukukhishwa nokuhlaziywa kwethrafikhi yempumalanga-ntshonalanga endaweni yamafu kuyisikhali esinamandla somlingo sokuqinisekisa ukusebenza okuzinzile kwezinhlelo zohlelo lokusebenza ezisetshenziswa endaweni yamafu.
Amamethrikhi angukhiye we-Virtual Network Traffic Capture
1. Ukusebenza kwe-Network Traffic Capturing
Ithrafikhi yasempumalanga-ntshonalanga ibala ngaphezu kwesigamu sethrafikhi yesikhungo sedatha, futhi ubuchwepheshe bokutholwa kokusebenza okuphezulu buyadingeka ukuze kutholakale iqoqo eligcwele. Ngesikhathi esifanayo sokutholwa, eminye imisebenzi yokucubungula ngaphambili efana nokuphindaphinda, ukunqanyulwa, kanye nokususa ukuzwela kufanele kuqedwe kumasevisi ahlukene, okwandisa ngokwengeziwe izidingo zokusebenza.
2. I-Resource Overhead
Iningi lamasu okuqoqwa kwethrafikhi asempumalanga-ntshonalanga adinga ukusebenzisa ikhompyutha, isitoreji nezinsiza zenethiwekhi ezingase zisetshenziswe kusevisi. Ukwengeza ekusebenziseni lezi zinsiza kancane ngangokunokwenzeka, kusenesidingo sokucabangela umsebenzi ongaphezu kokuqaliswa kokuphathwa kobuchwepheshe bokutholwa. Ikakhulukazi uma isikali samanodi sikhula, uma izindleko zokuphatha nazo zibonisa ithrendi ekhuphukayo yomugqa.
3. Izinga Lokungena
Ubuchwepheshe bamanje bokutholwa obuvamile ngokuvamile budinga ukungeza ukulungiselelwa kwenqubomgomo yokutholwa okwengeziwe ku-hypervisor noma izingxenye ezihlobene. Ngaphezu kokungqubuzana okungaba khona nezinqubomgomo zebhizinisi, lezi zinqubomgomo zivame ukukhulisa umthwalo ku-hypervisor noma ezinye izingxenye zebhizinisi futhi zithinte isevisi ye-SLA.
Kusukela encazelweni engenhla, kungabonakala ukuthi ukuthwebula kwethrafikhi endaweni yamafu kufanele kugxile ekuthwebuleni ithrafikhi yempumalanga-ntshonalanga phakathi kwemishini ebonakalayo nezinkinga zokusebenza. Ngesikhathi esifanayo, ngenxa yezici eziguquguqukayo zeplathifomu yamafu, iqoqo lethrafikhi endaweni yamafu lidinga ukudlula kumodi ekhona yesibuko sokushintsha esivamile, futhi libone ukuqoqwa okuguquguqukayo nokuzenzakalelayo kanye nokuthunyelwa kokuqapha, ukuze kufane ukusebenza okuzenzakalelayo nomgomo wokunakekela wenethiwekhi yamafu. Iqoqo lethrafikhi endaweni yamafu lidinga ukufeza lezi zinhloso ezilandelayo:
1) Bona umsebenzi wokuthwebula wethrafikhi yasempumalanga-ntshonalanga phakathi kwemishini ebonakalayo
I-2) Ukuthwebula kuthunyelwa ku-node yekhompyutha, futhi ukwakhiwa kweqoqo elisabalalisiwe kusetshenziselwa ukugwema izinkinga zokusebenza nokuzinza okubangelwa isibuko sokushintsha.
3) Ingakwazi ukuzwa ngokuguqukayo izinguquko zezinsiza zomshini obonakalayo endaweni yamafu, futhi isu lokuqoqa lingalungiswa ngokuzenzakalelayo ngoshintsho lwezinsiza zomshini obonakalayo.
4) Ithuluzi lokuthwebula kufanele libe nendlela yokuvikela ukugcwala ngokweqile ukuze kuncishiswe umthelela kuseva
I-5) Ithuluzi lokuthwebula ngokwalo linomsebenzi wokwenza kahle kwethrafikhi
6) Ipulatifomu yokuthwebula ingaqapha ithrafikhi yomshini oqoqiwe
Ukukhethwa Kwemodi Yokuthwebula Umshini Obonakalayo Kumvelo Yamafu
Ukuthwebula kwethrafikhi yomshini endaweni yamafu kudinga ukuphakela uphenyo lweqoqo endaweni yekhompuyutha. Ngokuya ngendawo yephuzu lokuqoqa elingasatshalaliswa endaweni yekhompiyutha, imodi yokuthwebula umshini obonakalayo endaweni yamafu ingahlukaniswa ngezindlela ezintathu:Imodi yomenzeli, I-Virtual Machine ModefuthiImodi Yokusingatha.
I-Virtual Machine Mode: umshini wokuthwebula ohlangene ufakwa kumsingathi ngamunye ongokoqobo endaweni yamafu, futhi uphenyo oluthambile oluthwebulayo lusetshenziswa emshinini wokuthwebula obonakalayo. Ithrafikhi yomsingathi iboniswa emshinini wokuthwebula obonakalayo ngokufaka isibuko ithrafikhi yekhadi lenethiwekhi ebonakalayo ekushintsheni okubonakalayo, bese umshini wokuthwebula we-virtual udluliselwa kuplathifomu yendabuko yokuthwebula ithrafikhi ngekhadi lenethiwekhi elizinikele. Bese isatshalaliswa endaweni ngayinye yokuqapha nokuhlaziya. Inzuzo ukuthi i-softswitch bypass mirroring, engenakho ukugxambukela ekhadini lenethiwekhi yebhizinisi elikhona kanye nomshini we-virtual, ingakwazi futhi ukubona umbono wezinguquko zemishini ebonakalayo kanye nokufuduka okuzenzakalelayo kwezinqubomgomo ngezindlela ezithile. Ububi buwukuthi akunakwenzeka ukufeza indlela yokuvikela ukugcwala ngokweqile ngokuthwebula umshini owubonayo owamukela kancane, futhi usayizi wethrafikhi ongenziwa isibuko unqunywa ukusebenza kweswishi ebonakalayo, enomthelela othile ekuzinzeni kweswishi ebonakalayo. Emvelweni we-KVM, inkundla yefu idinga ukukhipha ngokulinganayo ithebula lokugeleza kwesithombe, eliyinkimbinkimbi ukuphatha nokugcina. Ikakhulukazi uma umshini wokusingatha wehluleka, umshini wokuthwebula uyafana nomshini webhizinisi futhi uzothuthela kubabungazi abahlukene neminye imishini ebonakalayo.
Imodi yomenzeli: Faka uphenyo oluthambile (Umenzeli womenzeli) emshinini ngamunye obonakalayo odinga ukuthwebula ithrafikhi endaweni yamafu, futhi ukhiphe ithrafikhi yasempumalanga nesentshonalanga yemvelo yamafu ngesofthiwe yomenzeli, bese usabalalisa endaweni ngayinye yokuhlaziya. Izinzuzo ukuthi izimele yesikhulumi se-virtualization, ayithinti ukusebenza kweswishi ebonakalayo, ingafuduka ngomshini obonakalayo, futhi ingenza ukuhlunga kwethrafikhi. Okubi ukuthi ama-ejenti amaningi kakhulu adinga ukulawulwa, futhi umthelela we-ejenti uqobo awukwazi ukukhishwa lapho iphutha lenzeka. Ikhadi lenethiwekhi yokukhiqiza elikhona lidinga ukwabiwa ukuze kutholakale ithrafikhi, okungase kuthinte ukusebenzelana kwebhizinisi.
Imodi Yokusingatha: ngokusebenzisa iqoqo elizimele lophenyo oluthambile kumsingathi ngamunye ongokoqobo endaweni yamafu, lisebenza ngenqubo yenqubo kumsingathi, futhi lidlulisela ithrafikhi ethwebuliwe kunkundla yokuthwebula yethrafikhi evamile. Izinzuzo ziwumshini wokudlula ophelele, akukho ukungena emshinini we-virtual, ikhadi lenethiwekhi yebhizinisi kanye nokushintshwa komshini obonakalayo, indlela yokuthwebula elula, ukuphathwa okulula, asikho isidingo sokugcina umshini ozimele ozimele, ukutholwa kwe-probe engasindi nokuthambile kungafinyelela ukuvikelwa kokugcwala ngokweqile. Njengenqubo yomsingathi, ingaqapha umsingathi kanye nezinsiza zomshini obonakalayo kanye nokusebenza ukuze iqondise ukuthunyelwa kwesu lesibuko. Ububi ukuthi idinga ukusebenzisa inani elithile lezinsiza zokusingatha, futhi umthelela wokusebenza udinga ukunakwa. Ngaphezu kwalokho, ezinye izinkundla ezibonakalayo zingase zingakusekeli ukuthunyelwa kokuthwebula ama-probe esofthiwe kumsingathi.
Kusukela esimweni samanje semboni, imodi yomshini obonakalayo inezinhlelo zokusebenza kumafu omphakathi, futhi Imodi yomenzeli kanye nemodi yokubamba inabasebenzisi abathile kumafu ayimfihlo.
Isikhathi sokuthumela: Nov-06-2024
