Fumanisa iMylinking ML-NPB-5690 1.8Tbps high-density Network Packet Broker, eyenzelwe amaziko edatha e-hyperscale, ukubeka esweni inethiwekhi ye-100G, ukubonakala kwenethiwekhi ukusuka ekuqaleni ukuya ekupheleni, kunye nokucutshungulwa kwethrafikhi yokhuseleko lwe-cyber kwinqanaba leshishini.
Uyilo lweziko ledatha lehlabathi kunye ne-hyperscale luye lwatshintsha ngendlela engazange ibonwe ngaphambili kwiminyaka emihlanu edlulileyo. Iqhutywa kukufuduka kwilifu, iinkonzo ezincinci, i-AI computing, i-5G backhaul, kunye ne-traffic enkulu yeshishini efihliweyo, iimfuno ze-bandwidth yenethiwekhi ziye zanda ukusuka kwi-10GE/25GE ukuya kwi-uplinks ye-40GE kunye ne-100GE efumaneka kuyo yonke indawo, nto leyo edala indawo enkulu engabonakaliyo kumaqela e-IT kunye nokhuseleko: ukungabikho kokubonakala kwenethiwekhi epheleleyo, engenalahleko kuyo yonke i-empuma-ntshona kunye nomntla-ntshona.
Kwiziko zokusebenza kokhuseleko lwe-cyber (ii-SOC), amaqela okubeka esweni inethiwekhi, kunye nabaphathi beziko ledatha, ukubonakala okungaphelelanga kulingana nomngcipheko ongancitshiswanga. Ukujonga izibuko ze-SPAN zendabuko, ii-taps zenethiwekhi ezizimeleyo, kunye nezihluli zethrafikhi ezisisiseko azikwazi ukujongana neendawo eziphambili ezibangela iinethiwekhi zanamhlanje ze-100G: iipakethi eziphindaphindwayo zigcwele izixhobo ze-IDS/NDR, ithrafikhi engahluzwanga efihliweyo efihla izoyikiso zokuhamba ecaleni, imithwalo epheleleyo yepakethi engalawulekiyo edla indawo yokugcina, ukuhamba kwesantya esiphezulu okungaphawulwanga okungenazo izitampu zexesha ezichanekileyo, kunye nokuqokelelwa kwethrafikhi okwahluliweyo kuzo zonke iindawo ezisasazwe ngokutshintshiselana, umzila, kunye nee-nodes ze-BRAS. Ngaphandle kwe-Network Packet Broker edibeneyo eququzelela yonke into yokubamba ithrafikhi, ukucubungula kwangaphambili, kunye nokusasazwa ngobulumko, imibutho ichitha imali eninzi kwizixhobo zokubeka esweni ukhuseleko ezingasetyenziswanga kakuhle ngelixa ishiya iindawo zohlaselo ezibalulekileyo zingahlolwanga.
Uphando lokhuseleko lwe-cyber kushishino luqinisekisa ukuba ngaphezulu kwe-70% yokwaphulwa kwenethiwekhi kusebenzisa intshukumo esecaleni ngaphakathi kwilaphu leziko ledatha, efihliweyo ngaphakathi kwe-VXLAN, MPLS, GRE, kunye ne-GTP tunnel encapsulation layers ezingenakukwazi ukucacisa okanye ukukhupha izixhobo ezisisiseko zokujonga ukuze zihlalutywe. Ukuze kuliwe nezi zisongelo ziguqukayo, amashishini afuna i-Network Packet Broker ene-high-throughput, ekhawulezayo kwi-hardware ekwaziyo ukucutshungulwa kwe-line-rate ye-multi-terabit mixed-speed traffic, enika ukubonakala kwenethiwekhi okunokwenzeka kuzo zonke izixhobo zokhuseleko, uhlalutyo, kunye nokubonwa kwi-stack yazo.
Le blogi yazisa iMylinking ML-NPB-5690, iMylinking's flagship 1.8Tbps high-density Network Packet Broker eyenzelwe ngokukodwa amaziko edatha e-hyperscale, ukujonga inethiwekhi ye-100G, kunye nokubonakala kokhuseleko lwe-cyber kwinqanaba leshishini. Yakhelwe kwisakhiwo se-P4 ASIC esicwangcisiweyo esidityaniswe nee-CPUs zokucubungula ezikrelekrele ezininzi, i-ML-NPB-5690 idibanisa zonke iindlela zokusebenza kwe-traffic preprocessing—ukuhlanganiswa, ukuphindaphinda, ukucoca, ukukhupha ii-capsulation, ukukhupha ii-trafic, ukusika, kunye nokususa ii-cryption—kwisixhobo esinye se-1U rackmount, isusa isidingo see-stacks ze-hardware yokubamba i-traffic engadibaniyo ngelixa iphucula kakhulu i-ROI yesixhobo. Njengomvelisi ophambili weziseko zobuchule bokubonakala kwenethiwekhi, iMylinking iyila i-ML-NPB-5690 ukusombulula zonke iindawo ezibuhlungu zokubonakala ezijongene nabaqhubi beziko ledatha lanamhlanje, ibeka le NPB njengomaleko osisiseko wokubonwa kwenethiwekhi epheleleyo, ehambelana ne-zero-trust.
Kulo lonke eli nqaku, siza kuhlalutya iinkcukacha zehardware ze-ML-NPB-5690, iimpawu zokucubungula itrafikhi ezinelungelo elilodwa lomenzi wehardware, uyilo lwemveliso oluqinisekisiweyo olusixhenxe, izixhobo zolawulo olukude, kunye neenzuzo ezibonakalayo zoshishino nokhuseleko ezizizisayo kwimibutho elawula amalaphu eziko ledatha le-100G. Esi sikhokelo sisebenza njengesalathiso sobuchwephesha kubayili benethiwekhi, iinjineli ze-SOC, iinkokheli zeziseko zophuhliso zeziko ledatha, kunye namaqela okuthenga aphanda izisombululo ze-Network Packet Broker zeshishini ukuphucula ukubonakala kwenethiwekhi yabo kunye nesimo sokhuseleko lwe-cyber.
Yintoni iNetwork Packet Broker (NPB) kwaye Kutheni ibalulekile kwiCyber Security kunye neNetwork Monitoring?
Ngaphambi kokuba ungene nzulu kwimveliso yeMylinking ML-NPB-5690, kubalulekile ukumisela umsebenzi ophambili weNetwork Packet Broker kunye nendima yayo engenakuphikiswana ngayo ekubekeni esweni inethiwekhi yanamhlanje kunye neenkqubo zokhuseleko lwe-cyber—umxholo osisiseko wokuqonda indlela le NPB ene-100G esombulula ngayo imida ebalulekileyo yokubonakala.
I-Network Packet Broker (NPB) isebenza njengesixhobo sokudibanisa iitrafikhi esibekwe ngaphakathi kwileya yokubonakala kweziko ledatha, sibekwe phakathi kwee-network taps, ii-switch SPAN mirror ports, kunye nezixhobo zokhuseleko/uhlalutyo ezisezantsi (i-IDS, i-NPM, i-APM, i-SIEM, i-protocol analyzers, ii-big data traffic platforms). Ngokungafaniyo ne-passive splitters ezilula ezikopa nje i-raw traffic, ii-NPB ze-enterprise-grade zibonelela nge-hardware-accelerated preprocessing ukuze zicocwe, zihluzwe, kwaye ziqondise ngobuchule iipakethi ezibanjiweyo ngaphambi kokuba zihanjiswe kwizixhobo zokubeka esweni, zijongana nemida emithandathu esisiseko ye-raw mirroring:
1- Umthamo wezithuthi ongalawulekiyo: Imithombo yepakethe epheleleyo engacocwanga ithwala izixhobo zohlalutyo ezibizayo, ibangela ukuba i-output ingasebenzi kakuhle kunye nemiqondiso yobungozi engekho phantsi komthwalo ophezulu.
2- Ingxolo yepakethi ephindiweyo: Ukujonga i-cross-switch mirroring kuvelisa iipakethi ezifanayo ezivela kwiindawo ezininzi zokuqokelela, zichitha i-CPU yesixhobo kunye nezixhobo zokugcina.
3- Ubumfama be-tunnel obufakwe kwiikhaphu: Iintloko ze-tunnel ze-VXLAN, MPLS, GRE, ERSPAN, kunye ne-GTP zifihla ithrafikhi yomngcipheko ongaphakathi engabonakaliyo kwizixhobo zokubeka esweni ezisisiseko.
4- Ukunqongophala kokwahlulwahlulwa kwezithuthi: I-traffic ye-10G/25G/40G/100G enesantya esixutyiweyo ayinakwahlulwahlulwa ngokuguquguqukayo, ihlanganiswe, okanye ilinganiswe ngomthwalo kwii-ports zezixhobo ezinesantya esininzi ngaphandle kwe-NPB.
5- Akukho zilawuli zokuthobela ezakhelwe ngaphakathi: Imithwalo yentlawulo engacwangciswanga idlulisela i-PII engalungiswanga, idatha yekhadi lezemali, kunye nolwazi lomntu olulawulwayo kwiinkqubo zokubeka esweni, nto leyo ephula imiyalelo ye-GDPR, i-PCI-DSS, i-HIPAA, kunye ne-SOX.
6- Ukungabikho kwemetadata yokuhamba echanekileyo: Ukujonga okuqhelekileyo akunazo izitampu zexesha ze-nanosecond, ukuphawulwa kweprotocol yesicelo-umaleko, kunye nokuthelekiswa kwepakethi enokwenziwa ngokwezifiso kwi-deep forensics.
Umthengisi wePakethi yeNethiwekhi njengoMqolo woKubonakala kweNethiwekhi ukususela ekuqaleni ukuya ekupheleni
Ukubonakala kwenethiwekhi—ukukwazi ukubamba, ukuhlola, ukulungelelanisa, kunye nokuhlalutya zonke iipakethi ezidlula kwiziko ledatha emantla-emazantsi kunye neekhonkco zasempuma-entshona—sisiseko sokhuseleko lwe-cyber olusebenzayo. Ngaphandle kokubonakala okuncinci, okungenalahleko, amaqela okhuseleko akanakukwazi ukubona ukusasazeka kwe-malware ecaleni, ii-precursors zohlaselo lwe-DDoS, ukukhutshwa kwedatha okungagunyaziswanga, ukwahlulwahlulwa kwe-VLAN okungacwangciswanga kakuhle, okanye ukunyuka okungaqhelekanga kwethrafikhi yesicelo. I-NPB esebenza kakuhle njenge-Mylinking ML-NPB-5690 iguqula ithrafikhi engacwangciswanga, engacwangciswanga ibe yimijelo yedatha elungiselelwe izixhobo, iqinisekisa ukuba yonke iqonga lokhuseleko kunye nokubeka iliso lifumana kuphela iipakethi ezifanelekileyo, ezinexabiso eliphezulu ngaphandle kwenkunkuma ye-bandwidth.
Kwiindawo zenethiwekhi ye-100G, olu buchule luba lubaluleke ngakumbi. Amalaphu e-hyperscale athwala ithrafikhi yemihla ngemihla ye-multi-terabit awanakuxhomekeke kwi-NPB ezixineneyo neziphantsi ezizisa ukulahleka kwepakethi okanye ukucutshungulwa kwesantya somgca we-bottleneck. Kuphela yi-NPB ezikhawulezisiweyo zehardware ezinomthamo wokutshintsha weklasi ye-terabit ezinokugcina isantya somgca wezibuko ze-100G ezipheleleyo ngelixa zisenza imigaqo-nkqubo emininzi yokulawula ithrafikhi ngaxeshanye ngaxeshanye.
I-Mylinking ML-NPB-5690 imele eyona nto iphambili kumgca wemveliso ye-NPB kaMylinking, eyakhelwe amaziko edatha e-hyperscale, ukujonga inethiwekhi ye-carrier-grade, ii-stacks zokubonakala kwe-SOC yeshishini, kunye neziseko zophuhliso ze-cloud hybrid ezifuna ukuhlanganiswa kunye nokucutshungulwa kwetrafikhi ye-10GE/25GE/40GE/100GE exutyiweyo. Ibanjwe kwiphepha lemveliso elisemthethweni likaMylinking (https://www.mylinking.com/mylinking-network-packet-brokernpb-ml-npb-5690-product/), le 1U rackmount Network Packet Broker idibanisa ilaphu lokutshintsha i-ASIC elicwangcisiweyo le-P4 elidityaniswe neprosesa yetrafikhi ekrelekrele eneziseko ezininzi, inika i-total bidirectional switching throughput ye-1.8Tbps kunye nombhobho wehardware we-200Gbps ozinikeleyo we-DPI ephucukileyo, i-decryption, kunye nolawulo lwetrafikhi olusekelwe kumgaqo-nkqubo.
Amandla okucubungula iiTrafikhi ezikrelekrele ze-Full-Spectrum akhiwe kwi-Mylinking ML-NPB-5690
Inzuzo ephambili yokhuphiswano lweMylinking ML-NPB-5690 ikwisuti yayo epheleleyo yemisebenzi yokucubungula ithrafikhi ekhawulezileyo yehardware, yonke yenziwa ngesantya esipheleleyo ngaphandle kokungenisa ukulahleka kwepakethi okanye ukubambezeleka. Ezi zakhono zahlulwe zaba yi-basic line-rate traffic orchestration, advanced intelligent manipulation, contification-focused data sanitization, kunye neemodyuli zohlalutyo lokhuseleko lwe-DPI, nganye ichazwe ngezantsi kunye namatyala okusetyenziswa kokhuseleko lwe-cyber kunye nokubeka esweni inethiwekhi.
1. Indlela esisiseko yeTrafikhi yeNdlela, ukuphindaphinda, ukuhlanganisa kunye nokulinganisela umthwalo
Imisebenzi ye-NPB esisiseko yenza umqolo wazo zonke iindlela zokusebenza ezibonakalayo kwinethiwekhi, i-hardware epheleleyo ilayishwe kwi-ML-NPB-5690's switching ASIC:
1- Ukuphindaphinda kweTrafikhi: Khuphela iipakethi zokungena ukusuka kwizibuko elinye ukuya kwiindawo ezininzi zokubeka esweni indawo ekuyiwa kuyo, okuvumela ukuhanjiswa ngaxeshanye kwemithombo efanayo yetrafikhi kwi-IDS, NPM, kunye nezixhobo zokuhlola ukuthobela imithetho ngaphandle kokuphinda izixhobo zompompo ezibonakalayo.
2- Ukuhlanganiswa kweTrafikhi yeMithombo emininzi: Hlanganisa itrafikhi ebonisiweyo ukusuka kwiichweba ezininzi ze-SPAN ezitshintshiweyo ezahlukeneyo, ii-optical taps, kunye nee-nodes ze-BRAS zibe yimijelo ehluziweyo edibeneyo, kususa ukubonakala okuqhekekileyo kwiinxalenye zeziko ledatha ezisasaziweyo.
3- Ukulinganisela Umthwalo Osekelwe Kwimigaqo-nkqubo: Ii-algorithms ezimbini zokulinganisela umthwalo ezinokucwangciswa zisasaza ithrafikhi kwiizibuko ezininzi zezixhobo zokuphuma ukuthintela ukugcwala kwezixhobo ngazinye:
○Ukulinganisela umthwalo okusekelwe kwiHash kusetyenziswa i-L2-L7 packet metadata (i-MAC, i-IP seven-tuple, iiflegi ze-TCP, iithegi ze-VLAN) ukuze kufakwe i-flow pinning rhoqo.
○Ukulinganisela umthwalo onzima oqwalaselwe yiseshoni ukuze kwabelwe amandla e-bandwidth angakumbi kwizixhobo zokhuseleko eziphambili ezifana namaqonga e-NDR okuzingela uloyiko.
4- Ukucoca iiPakethi ezineMilinganiselo emininzi: Yenza imithetho yokufanisa ithrafikhi edibanisa uhlobo lwe-Ethernet, iithegi ze-VLAN, amaxabiso e-TTL, i-IP epheleleyo ye-seven-tuple (i-IP yomthombo, i-IP yendawo, i-port yomthombo, i-port yendawo, i-protocol, iiflegi ze-TCP, ukuqhekeka kwe-IP), kunye namasimi e-offset anokwenziwa ngokwezifiso ngaphakathi kwee-bytes zokuqala ezili-128 zalo naliphi na ipakethi. Abalawuli bachaza ubude be-offset kunye nokuthelekiswa kwexabiso ukuze babambe i-traffic ye-protocol eyimfihlo, ii-headers ze-tunnel ezenziwe ngokwezifiso, okanye iisignitsha zomthwalo ezithile zesicelo ezivela kwindawo yabo yeshishini.
5- Ulawulo lweethegi ze-VLAN: Imisebenzi ye-VLAN ekumgangatho wehardware kuquka ukufakwa kweethegi, ukususwa kweethegi, kunye nokubhalwa ngokutsha kwe-VLAN ID ukuze kulungiswe ukuhamba kwethrafikhi ngaphambi kokuba idluliselwe kwizixhobo zokubeka esweni ezineemfuno ezimiselweyo zokwahlulwa kwe-VLAN.
Zonke ezi misebenzi zisisiseko zisebenza kumda opheleleyo wokutshintsha we-1.8Tbps, ngaphandle kokulahleka kwepakethi nokuba ingaphantsi kwemithwalo yethrafikhi ye-100G epheleleyo.
2. Ukususwa kweekhaphu zeTunnel ezikhawulezileyo kunye nokuHlanjwa kweTrafikhi eneZixhobo ezininzi
Iziko ledatha lanamhlanje elilifu kunye ne-virtualized lixhomekeke kakhulu kwiiprotokholi ze-overlay tunneling ukwakha ilaphu elinokuqesha abantu abaninzi, nto leyo edala iindawo ezibalulekileyo ezingabonakaliyo kwizixhobo zokhuseleko ezingakwaziyo ukuhlalutya ii-headers ze-tunnel zangaphandle ukuze kuhlolwe ithrafikhi yomngcipheko wangaphakathi. I-ML-NPB-5690 ibonelela ngokuchongwa kwe-tunnel kwinqanaba le-hardware kunye nokuhluthwa kwe-header kuyo yonke imigangatho ye-tunneling yeshishini eliphambili, isusa umthwalo wokucubungula kwizixhobo zokhuseleko ezisezantsi:
○Ukususwa kwee-capsulation zetonela ezixhaswayo: VXLAN, ERSPAN, GRE, MPLS, GTP, IPIP, PPTP, L2TP, PPPOE
○Ukususwa kwee-capsulation okuchazwe ngumsebenzisi ngokwezifiso: Abalawuli bamisela imithetho ye-header offset eyenzelwe wena ukuze basuse iileya ze-encapsulation ezizimeleyo ngaphakathi kwee-bytes zokuqala ezili-128 zeepakethi, bexhasa iiprotokholi ze-niche tunnel ezivelayo ngaphandle kokulinda uhlaziyo lwe-firmware.
Nje ukuba ii-headers ze-tunnel zangaphandle zisuswe, i-NPB isebenzisa imithetho yokucoca i-L2-L7 ngokuchasene nomthwalo wepakethi yangaphakathi yokuqala, ivumela amaqela e-SOC ukuba abone i-ransomware yokuhamba ecaleni, ukukhutshwa kwedatha ye-cross-VLAN, kunye ne-encrypted tunnel-based attack traffic eziza kufihla ngokupheleleyo iinkqubo ze-mirroring eziqhelekileyo. Olu phawu lwe-hardware decapsulation luyimfuneko kwimibutho esebenzisa uyilo lokhuseleko lwenethiwekhi ye-Zero Trust, apho kufuneka uvavanyo olupheleleyo lwendlela nganye evalekileyo empuma-ntshona ukuze kuqinisekiswe ithrafikhi rhoqo.
3. Ukunyathela ixesha ngokuchaneka kweNanosecond, ukuSika iiPakethi kunye nokuSusa idatha
Iimpawu ezintathu zokuphucula ithrafikhi ezixabisa kakhulu zinciphisa kakhulu ukujonga ukusetyenziswa kwezixhobo kunye nokuphucula ukuchaneka kophando lwezehlo zophando; zonke izixhobo zikhawuleziswa kwipayipi yokucubungula ekrelekrele ye-200G ye-ML-NPB-5690:
1- Ukunyathela ixesha kwi-Hardware ye-Nanosecond: Vumelanisa iwotshi yangaphakathi ye-NPB kwiiseva ze-NTP zeshishini, uze ufake izitampu zexesha ezichanekileyo zesisombululo se-nanosecond kwitreyila yesakhelo sepakethi nganye ebanjiweyo. Le metadata ivumela ukunxibelelana kwemicimbi yengozi kwiiswitshi ezininzi zeziko ledatha, ii-routers, kunye nezixhobo zokhuseleko, isusa ukungachaneki kwexesha kwinqanaba le-millisecond okuphazamisa ukuhamba komsebenzi wokwakha kwakhona isiganeko. Ukumakishwa kwesitampu sexesha kusebenza ngesantya somgca opheleleyo ngaphandle kokuchithwa kokuphuma.
2- Ukusikwa kwePakethi Esekelwe kwiMigaqo-nkqubo: Nciphisa imithwalo yepakethi eluhlaza ibe bubude obungacwangciswanga (ii-byte ezingama-64 ukuya kwii-byte ezili-1518) ngomgaqo-nkqubo ngamnye wethrafikhi. Kwiimeko zokusetyenziswa kokubeka esweni inethiwekhi, abalawuli basika iipakethi ukuze bagcine idatha yentloko ye-L2-L4 kuphela ngelixa belahla imithwalo yentlawulo epheleleyo yesicelo, benciphisa ukusetyenziswa kwe-bandwidth yokugcina nge-70%–90% kwiiqela zohlalutyo lwethrafikhi yedatha enkulu. Ukubanjwa kwemithwalo yentlawulo epheleleyo kusafumaneka kumaqela omgaqo-nkqubo wokhuseleko olunomngcipheko ophezulu afana nee-uplinks ze-intanethi kunye nee-VLAN zokucubungula intlawulo.
3- Ukususwa kweDatha yeZininzi zeGranularity: Susa iipakethi ezifanayo ezingafunekiyo eziqokelelwe kwimithombo yetap/SPAN egqithanayo ukuze kuncitshiswe umthwalo weCPU yesixhobo sokujonga. Imithetho yokususwa kwekopi isebenza kwinqanaba lezibuko ezibonakalayo okanye kwinqanaba leqela lemigaqo-nkqubo eyenziwe ngokwezifiso, kunye nezihlonzi ezihambelanayo ezinokucwangciswa kubandakanya i-IP yendawo, izibuko lomthombo, izibuko lendawo, inombolo yolandelelwano lwe-TCP, kunye namaxabiso okuvuma i-TCP. Imibutho ene-cross-switch mirroring deployments enkulu ihlala ibona ukwehla kwe-40%–60% kwinani elipheleleyo letrafikhi elihanjiswa kwizixhobo ezisezantsi emva kokuvumela imigaqo-nkqubo yokususwa kwekopi.
4. Ukufihla idatha esekelwe kwimigaqo-nkqubo ukuze kuthotyelwe imithetho kunye nokunciphisa uvakalelo lwendlela
Imithetho yehlabathi jikelele equka i-PCI-DSS (idatha yekhadi lokuhlawula), i-HIPAA (iirekhodi zezigulane zezempilo), i-GDPR (idatha yomntu ye-EU), kunye ne-SOX iyalela ukutshintshwa okungqongqo kolwazi oluyimfihlo oluchonga umntu (PII) ngaphambi kokuba ludlulisele ithrafikhi ebanjiweyo kwi-third-party monitoring okanye kumaqonga ohlalutyo lwamafu. I-Mylinking ML-NPB-5690 idibanisa umsebenzi wokufihla idatha yehadiwe ukuze izalisekise iimfuno zokuthobela ngaphandle kokusebenzisa imali engaphezulu kwiiseva zangaphandle:
○Imaski isebenza ngokwemigaqo-nkqubo enokulungiswa, ifanisa imitya yomthwalo oyilungiselelweyo ngaphakathi kwedatha yepakethi (umz., iinombolo zekhadi letyala, izihlonzi zesazisi sesizwe, iinombolo zerekhodi yezonyango zesigulana).
○Abalawuli bachaza amaxabiso angaguqukiyo okutshintsha ukuze babhale ngaphezulu amasimi anovakalelo afanayo, nto leyo eyenza i-PII ingafundeki kuye nabani na ofikelela kwiilog zokubamba iitrafikhi ezigciniweyo.
○Imithetho yokugquma ingajolisa kumaleko e-MAC, kumaleko e-IP, kumaleko othutho, okanye kumasimi omthwalo wesicelo esinzulu ngaphakathi kwee-bytes zokuqala ezili-128 zalo naliphi na ipakethi, kunye nemigaqo-nkqubo yokugquma eyahlukileyo esetyenziswa kwii-VLAN zoshishino ezahlukeneyo okanye kwiindawo zomthombo wethrafikhi.
Olu buchule bokuthomalalisa ulwazi olwakhelwe ngaphakathi lususa isidingo sokucoca izixhobo zombane ezizimeleyo kumashishini alawulwayo, ludibanisa imisebenzi yokuthobela imithetho kwi-ML-NPB-5690 visibility layer kwaye lunciphisa i-total data center hardware footprint.
5. Uhlolo lweDPI Deep Packet, i-SSL Decryption kunye ne-Multi-Version NetFlow Export
Ukhuseleko oluphambili kunye nokusebenza ngokubonakalayo kuxhomekeke kulwazi oluphezulu lwethrafikhi, oluhanjiswa nge-ML-NPB-5690's integrated DPI analysis engine esebenza kwi-200Gbps intelligent traffic processor:
1- Ukuchongwa kweProtokholi yeLayer yeSicelo esiBanzi: Ngokuzenzekelayo faka iminwe emininzi yeenkqubo zesicelo seshishini eziqhelekileyo, kuquka i-FTP, i-HTTP, i-POP, i-SMTP, i-DNS, i-NTP, i-BitTorrent, i-Syslog, i-MySQL, kunye ne-Microsoft SQL Server. Iisignitsha zeprotocol ezenziwe ngokwezifiso zinokulayishwa ukuze kuchongwe usetyenziso lwangaphakathi lweshishini oluzimeleyo. Injini ye-DPI ikwabona iipateni zethrafikhi yokusasazwa kwevidiyo, ivumela ukuhluzwa okukhethiweyo kwemithombo yevidiyo engeyiyo yeshishini ukuze kubekwe phambili ithrafikhi ebalulekileyo yophando lokhuseleko.
2- Ukususwa kwe-SSL/TLS ekhawulezileyo kwiHardware: Faka izatifikethi zokuhlola ze-SSL zeshishini kwi-NPB ukuze ususe i-HTTPS encrypted payload traffic xa ifunwa, ixhasa i-TLS 1.0, i-TLS 1.2, kunye nee-SSL 3.0 cipher suites zemveli. Iipakethi ze-plaintext ezisusiweyo zithunyelwa kwi-IDS nakwizixhobo zokuzingela usongo ukuze ziveze i-malware efihliweyo kwiiseshoni ze-HTTPS ezifihliweyo, amandla abalulekileyo okhuseleko lwe-cyber njengoko ngaphezulu kwe-95% yethrafikhi ye-intanethi yanamhlanje isebenza nge-TLS encryption. Ukukhuphela i-decryption kwi-NPB kuthintela ukuphazamisa amandla e-CPU ezixhobo zokhuseleko ezibizayo.
I-3- Multi-Version NetFlow/IPFIX Generation: Guqula itrafikhi engabanjwanga ibe ziirekhodi zokuhamba ezisemgangathweni zokuthumela kwi-SIEM, ukubonwa kwenethiwekhi, kunye namaqonga okucwangcisa amandla. I-ML-NPB-5690 ixhasa iifomathi zeNetFlow V5, NetFlow V9, kunye ne-IPFIX ezinamazinga eesampuli anokwenziwa ngokwezifiso ukulinganisela ubuncinci berekhodi yokuhamba kunye ne-bandwidth overhead. Idatha yokuthumela ukuhamba ibonelela ngeenkcukacha-manani zethrafikhi ezikumgangatho ophezulu zokuqikelela amandla eziko ledatha ixesha elide kunye nokufumanisa ukungalingani kokhuseleko olusisiseko.
Kutheni Ukhetha iMylinking njengoMthengisi wePakethi yeNethiwekhi oThembekileyo kunye neSisombululo sokuBonakala kweNethiwekhi?
Kwimarike enabantu abaninzi abathengisa izixhobo ze-NPB, iMylinking yahlulahlula njengomvelisi okhethekileyo ogxile kuphela kwiziseko zokubonakala kwenethiwekhi—kuquka iiNetwork Packet Brokers, ii-optical network taps, ii-traffic analyzers, kunye namaqonga olawulo lokubonakala okuhlangeneyo—ngamava eminyaka emininzi yobunjineli ekhonza iziko ledatha yeshishini, inkampani, ezemali, ezempilo, kunye nabathengi bokhuseleko lwe-cyber kurhulumente kwihlabathi liphela. Iingenelo eziphambili zokhuphiswano zokukhetha iMylinking ML-NPB-5690 kwi-100G network visibility stack yakho ziquka:
1- Ubunjineli beHardware-First kwiTerabit 100G Workloads: Ngokungafaniyo nabakhuphisana neNPB abaninzi kwisoftware abathumela inkqubo ephucukileyo kwizixhobo zeCPU ezabelwana ngazo (edala ilahleko yepakethi phantsi komthwalo ophezulu), iMylinking iyila zonke iimpawu zolawulo lwetrafikhi eziphambili kwiipayipi zehardware ze-ASIC ezizinikeleyo, iqinisekisa ukusebenza kwereyithi yomgca ngaphandle kwelahleko kwisilingi epheleleyo ye-1.8Tbps ye-ML-NPB-5690.
Ukucwangciswa kwe-2- P4 ukuze kubonakale njengobungqina bexesha elizayo: Uyilo lwe-chip olucwangcisiweyo lwe-ML-NPB-5690's P4 lususa umngcipheko wokuphelelwa lixesha kwehardware. Njengoko kuvela iiprotokholi ezintsha ze-tunneling, imigangatho yethrafikhi efihliweyo, kunye neefomathi zesicelo seshishini elizimeleyo, iinjineli ze-Mylinking zisebenzisa iiseti zomthetho wokuchonga iipakethi ngokwezifiso ngohlaziyo lwe-firmware ngaphandle kokufuna ukutshintshwa kwezixhobo zehardware ezibizayo.
3- Ilayisenisi yeZinto eziBandakanya Zonke: Akukho ntlawulo yelayisenisi eyongezelelweyo yezakhono ezibalulekileyo eziquka ukususwa kwe-SSL, ukufihla idatha, ukukhupha idatha, ukuqhekeza izibuko, okanye ukuthunyelwa kwe-NetFlow—zonke iimpawu ezichazwe kweli nqaku zithunyelwa ngendlela eqhelekileyo neyunithi yesiseko ye-ML-NPB-5690, zisusa iindleko zobunini ezifihliweyo zexesha elide eziqhelekileyo kubathengisi be-NPB beshishini abakhuphisanayo.
4- Inkxaso yoBugcisa beHlabathi kunye neeNkonzo zokuLungisa: I-Mylinking ibonelela ngenkxaso yobunjineli obukude iiyure ezingama-24 ngosuku, iintsuku ezisi-7 ngosuku, kunye neenkonzo zokuguqula izixhobo zekhompyutha kunye ne-firmware ngokwesiko, urhulumente ohleliweyo, kunye nokufakwa kwe-highscale cloud okufuna uphuhliso olukhethekileyo lwemithetho yokucubungula ithrafikhi.
5- Ukuhambelana kwe-Ecosystem yoKubonakala okuManyeneyo: I-ML-NPB-5690 idibana ngokungenamthungo nepotifoliyo epheleleyo yemveliso yeMylinking, kubandakanya ii-passive optical taps, ii-test access matrix switches, kunye neqonga lokulawula ukubonakala eliphakathi leMatrix-SDN, okuvumela ukusasazwa kokubonakala kwenethiwekhi yomthengisi omnye ukusuka ekuqaleni ukuya ekupheleni okwenza kube lula ukusombulula iingxaki kunye nokugcinwa kwemveliso eyahlukeneyo.
6- Ukusebenza Kwendalo Okuhambelana Nokuthobela Umthetho: Ukufihla idatha okwakhelwe ngaphakathi, ukusikwa kweepakethi, kunye ne-timestamp forensics kususa izixhobo ezongezelelweyo zomntu wesithathu ezifunekayo ukuhlangabezana neemfuno zophicotho lwe-PCI-DSS, HIPAA, GDPR, kunye ne-SOX, kunciphisa ubunzulu bezixhobo zedatha kunye nobunzima bokudibanisa.
7- Ilungiselelwe iiHybrid kunye neCloud-Native Data Center Architectures: I-Native VXLAN, GTP, kunye ne-MPLS tunnel decapsulation, edibene ne-flexible port breakout kunye ne-single-fiber optical support, ibeka i-ML-NPB-5690 njengomaleko ofanelekileyo wokubonakala kweendwangu ze-hybrid on-prem/cloud, iinethiwekhi ze-backhaul ze-5G carrier, kunye neendawo ze-data center eziqinisekisiweyo ezininzi.
Kwabakhi bezakhiwo zenethiwekhi, iinkokheli ze-SOC, kunye nabaphathi beziseko zedatha abaceba ukuphuculwa kokubonakala kwenethiwekhi ye-100G okanye ukuhlaziywa okupheleleyo koyilo lokhuseleko lwe-Zero Trust, i-Mylinking ML-NPB-5690 imele isisombululo se-Network Packet Broker esiqinisekisayo kwixesha elizayo, esingabizi kakhulu, nesisebenza kakuhle kakhulu esakhelwe injongo yeemfuno zethrafikhi ye-terabit yeenkqubo zedatha ezitshintshayo zanamhlanje. Ukuze uphonononge amaphepha edatha apheleleyo ehardware, imizobo yoyilo lokusasazwa, kunye neendlela zokucaphula ezenziwe ngokwezifiso, ndwendwela iphepha lemveliso elisemthethweni le-Mylinking ML-NPB-5690:https://www.mylinking.com/mylinking-network-packet-brokernpb-ml-npb-5690-product/
Ixesha leposi: Julayi-07-2026
