Icandelo 1: Isishwankathelo seempawu zeMveliso eziPhambili
I-Mylinking ML-NPB-M2000 yi-2U modular Network Packet Broker (NPB) edityaniswe ne-Inline Bypass Switch, eyenzelwe ukuthunyelwa kokhuseleko lwenethiwekhi oluthembekileyo kakhulu kunye nokucubungula ithrafikhi ngobuchule. Isombulula iingxaki zokulibaziseka/ukuphazamiseka kwenethiwekhi okubangelwa kukusilela/ukugcinwa kwesixhobo sokhuseleko olulandelelanayo, kwaye ixhasa ulawulo lwethrafikhi oludibeneyo olupheleleyo, ukubeka esweni kunye nokukhuselwa kokhuseleko. Iimpawu zayo eziphambili zihlelwe ngolu hlobo lulandelayo:
1. Iinkcukacha zeHardware
○ Isici seFomu:I-rackmount ye-2U eyi-intshi ezili-19, umbane ombini (ukhetho lwe-AC-220V/DC-48V), ukusetyenziswa kwamandla okuphezulu yi-300W.
○ IiModular Slots:Izithuba ezi-4 ezishushu ezinokutshintshelwa kwiimodyuli ze-BYPASS/ MONITOR (zixhasa uqwalaselo oluxutyiweyo).
○ Amandla ePort:Imodyuli yokudlula (810G SFP+ kunye ne-4100GE QSFP28); Imodyuli yokujonga (1610G SFP+ kunye ne-4100GE QSFP28); ubuninzi bomthamo wokucubungula we-2.4Tbps.
○ Iindlela zoLawulo:Ikhonsoli ye-1RS232, izibuko lolawulo olungaphandle kwebhendi ye-110/100/1000M RJ45.
○ Ukwanda:Ukuya kuthi ga kwiikhonkco zokhuseleko ezikwi-161G/10G okanye iikhonkco ze-840G/100G; iizibuko zokujonga eziphezulu ze-641G/10G okanye ze-1640G/100G.
2. Izakhono eziPhambili zokusebenza
○ Ukhuseleko lwe-Inline Bypass:Ukutshintsha ngokukhawuleza (<8ms), ukufunyanwa kwentliziyo ekrelekrele (iiparameter ezinokwenziwa ngokwezifiso), ukudlula ngokuzenzekelayo xa isixhobo sokhuseleko singasebenzi.
○ Ukulungiswa kweTrafikhi:Isiseko (ukuphindaphinda/ukuhlanganisa/ukucoca/ukubhala iilebheli) + I-Advanced (ukunciphisa/ukufihla/ukusika/i-SSL proxy/ukususa ukubethela, ukuchongwa kweprotocol ye-L2-L7).
○ Ukulinganisela Umthwalo:Ukulinganisela umthwalo okusekelwe kwiHash (L2-L4) kwiiklusta zezixhobo zokhuseleko, isiqinisekiso sokuthembeka kweseshoni, ukusasazwa kwakhona komthwalo oguqukayo.
○ Ukucubungula iTunnel:Inkxaso yokususa/ukugquma i-VXLAN/GRE/MPLS/GTP, ukuchongwa ngokuzenzekelayo kweprotocol yetonela.
○ Ukubonakala kweTrafikhi:Uhlalutyo olunemilinganiselo emininzi (uhlalutyo olunzulu lwe-DPI, uhlalutyo lwetafile yokuhamba/ipakethi, indawo echanekileyo yempazamo), ukujonga ngexesha langempela kunye ne-alamu, ukuqiniswa kwexesha kwinqanaba le-nanosecond.
3. Iindlela zokusasazwa kwezitshixo
○ Ukusasazwa okusemgceni:Ukhuseleko olupheleleyo lwethrafikhi/ukhuseleko oluthile lwethrafikhi, ukuvalwa kwethrafikhi, iproksi ye-SSL yohlalutyo lwethrafikhi olufihliweyo.
○ Ukusasazwa kwe-SPAN:Ukujonga, ukuhlanganisa, ukusasazwa kweenkqubo zokubeka esweni/uhlalutyo (IDS/APM/NPM).
○ I-Hybrid (Ephakathi + I-SPAN):Ukhuseleko olusemgceni + ukubonisa ithrafikhi engaphandle kwebhendi, akukho kuphazamiseka phakathi kweendlela ezimbini.
4. IiTekhnoloji eziPhambili eziKhethekileyo
○Imo yoKhuselo lweSpecFlow/FullLink, Ukutshintsha okuKhawulezayo, iLinkSafeSwitch, ukuThunyelwa kweMigaqo-nkqubo yeWebService Dynamic.
○Ukufunyanwa kwePakethi yeNtliziyo enokuLungiselelwa ngokwezifiso, Ukulinganisela iMithwalo yeDynamic edibeneyo, Ukusasazwa kweTrafikhi ekrelekrele.
Icandelo 2: Usetyenziso lweNkqubo yeMveliso
Zonke iidayagram zithatha iMylinking ML-NPB-M2000 njenge-core node, iziseko zonxibelelwano zenethiwekhi, izixhobo zokhuseleko kunye neenkqubo zokubeka esweni/zohlalutyo. Ifoto yemveliso iphawulwe njenge [ML-NPB-M2000 Product Photo] kuyilo, kwaye ukusasazwa kwayo kunokuyithatha indawo yomfanekiso osemthethweni wemveliso.
Umzobo 1: Ukhuseleko lweSixhobo soKhuseleko lweSiqhagamshelo esisemgceni (Imeko ePhambili)
Igama lomzobo: Umzobo woKhuseleko lokuGqitha ngokuZenzekelayo kwi-FW/IPS olukwi-Inline
Injongo: Ukhuseleko olungenaziphazamiso kwi-FW/IPS xa kungekho monakalo/ulondolozo
Inkcazo yeCandelo
Umaleko weNethiwekhi: I-core router/switch (i-network key node, i-upstream/downstream traffic entry/exit).
I-Core Node: ML-NPB-M2000 (i-Inline Bypass Switch edibeneyo, eyona nto iphambili kwinkqubo yokukhusela yonke).
Umaleko woKhuseleko: Izixhobo zokhuseleko zemveli ezilandelelanayo (iNkqubo yoThintelo loMlilo/lokuNgena).
Ukuhamba kweTrafikhi kunye nesicelo seZinto
1- Imeko Eqhelekileyo: Zonke iitrafikhi ezivela kwizixhobo zenethiwekhi eziphambili zidlula kwi-ML-NPB-M2000 ukuya kwi-FW/IPS ukuze kuhlolwe ukhuseleko, emva koko zibuyela kwinethiwekhi ngemveliso.
2- Imeko Engaqhelekanga: Ukuchonga ukubetha kwentliziyo okukrelekrele kwemveliso kuchonga ukusilela kwe-FW/IPS (ukuwa/ukulayisha kakhulu/ukulungiswa), kubangela ukutshintsha kwe-bypass ngokukhawuleza (<8ms).
3- Imeko yokudlula: Itrafikhi iya phambili ngqo phakathi kwezixhobo zenethiwekhi eziphambili nge-ML-NPB-M2000, itsiba i-FW/IPS ephosakeleyo, iqinisekisa ukuba akukho kuphazamiseka kwenethiwekhi.
4- Imeko YokuBuyisa: Imveliso ibona ukubuyiselwa kwe-FW/IPS ngexesha langempela kwaye ibuyisela ngokuzenzekelayo indlela yokuqala yethrafikhi ukuze kukhuselwe ukhuseleko.
Iimpawu eziphambili ezisetyenzisiweyo: Ukutshintsha i-Fast Bypass, Ukufunyanwa kweNtliziyo ngendlela oyifisayo, iTekhnoloji yeLinkSafeSwitch.
Umzobo 2: Umzobo woKhuseleko oluPhakathi lweSpecFlow oluQhelekileyo lweTrafikhi
Igama lomzobo: Umzobo woKhuseleko kunye nokuThuthwa kweNdlela ethile esekwe kumgaqo-nkqubo
Injongo: Hlunga kwaye uthumele kuphela ithrafikhi ekujoliswe kuyo kwizixhobo zokuhlola
Inkcazo yeCandelo
Umaleko weNethiwekhi: I-router/switch engundoqo (zonke iintlobo zokufaka ithrafikhi).
I-Core Node: ML-NPB-M2000 (ukuhlolwa kwethrafikhi, ukutsalwa kwethrafikhi ethile).
Umaleko woKhuseleko: Izixhobo zokuhlola ukhuseleko ezikhethekileyo (zetrafikhi ethile yedatha/i-SSH/RDP, amandla aphantsi okucubungula itrafikhi epheleleyo).
Ukuhamba kweTrafikhi kunye nesicelo seZinto
1- Le mveliso isebenzisa i-L2-L4 traffic identification (VLAN tag/IP five-tuple/MAC/port) ukuvavanya i-traffic ngokwemigaqo-nkqubo elungiselelwe kwangaphambili.
2- Ithrafikhi engaxhalabisiyo: Ithunyelwa ngqo kwinethiwekhi ngemveliso, akukho mfuneko yokudlula kwizixhobo zokhuseleko (kunciphisa umthwalo wesixhobo).
3- Ithrafikhi ethile exhalabisayo: Ukutsalwa kwisixhobo sokhuseleko esikhethekileyo ukuze kuhlolwe/kukhuselwe, emva koko kubuyiselwa kwinethiwekhi ngemveliso.
4- Ukuchonga ukubetha kwentliziyo ngexesha langempela kwisixhobo sokhuseleko; ukudlula ngokuzenzekelayo ukuba isixhobo asiphumeleli, ukuqinisekisa ukuba ukhuseleko oluthile lwethrafikhi aluphazanyiswa.
Iimpawu eziphambili ezisetyenzisiweyo: Imo yoKhuseleko lweSpecFlow, ukuHlunga iTrafikhi ye-L2-L4, iTekhnoloji yoKhuseleko lweTrafikhi eKhethekileyo.
Umzobo 3: Umzobo woKhuseleko lweQela loKhuseleko oluBalaseleyo olukwi-Load Balanced
Igama lomzobo: Ukulinganisela umthwalo weTrafikhi okwiBandwidth ephezulu kwiFW/IPS Cluster Diagram
Injongo: Ukusasaza i-traffic ye-100G kwi-FW/IPS cluster
Inkcazo yeCandelo
Umaleko weNethiwekhi: I-router/switch engundoqo (ukufakwa kwetrafikhi ephezulu, isixhobo sokhuseleko esinye asikwazi ukuyiphatha).
I-Core Node: ML-NPB-M2000 (ukusasazwa kwezithuthi ngobuchule, ulawulo lokulinganisela umthwalo).
Umaleko woKhuseleko: Iqela le-FW/IPS (izixhobo ezininzi zokhuseleko ezifanayo ezifakwe ngaxeshanye).
Ukuhamba kweTrafikhi kunye nesicelo seZinto
1- Imveliso ifumana i-bandwidth ephezulu evela kwinethiwekhi ephambili kwaye ivumela ukulinganisela umthwalo osekelwe kwiHash (L2-L4) (ngokusekelwe kwi-MAC/IP/port/protocol).
2- I-Traffic isasazwa ngokulinganayo kwi-FW/IPS nganye kwiqela ukuze kuqhutywe ukhuseleko ngaxeshanye, ukuqinisekisa ukuthembeka kokuhamba kwedatha kwiseshoni.
3- Le mveliso ixhasa ukusasazwa kwakhona komthwalo oguqukayo: ukuba isixhobo seqela siyasilela/ikhonkco lingasebenzi, ithrafikhi idluliselwa ngokuzenzekelayo kwezinye izixhobo eziqhelekileyo.
4- Ukusebenza ngokubanzi kwenkqubo yokhuseleko kuphuculwe ngokulandelelana ngokwenani lezixhobo zeqela, ezilungelelaniswa neemeko ze-bandwidth ephezulu ye-100G/200G.
Iimpawu eziphambili ezisetyenzisiweyo: Ukulinganisela umthwalo we-Multi-link Dynamic Load, Ukusasazwa kweTrafikhi ekrelekrele, i-Fast Bypass yokusilela kweSixhobo esinye.
Umzobo 4: Umzobo woKhuseleko lweSixhobo seMigqaliselo emininzi (i-Physical Serial → i-Logical Serial)
Igama lomzobo: Isixhobo soKhuseleko oluninzi Umzobo woMzimba oPhatheleneyo kunye noLogical Serial Traffic Traffic
Injongo: Tshintsha i-serial ebonakalayo (indawo enye yokusilela) nge-serial ehambelanayo ne-logical
Inkcazo yeCandelo
Umaleko weNethiwekhi: I-router/switch engundoqo (ikhonkco lesitshixo elifana nendawo ye-intanethi yokuphuma/iseva).
I-Core Node: ML-NPB-M2000 (ucwangciso lwethrafikhi oludibeneyo, ulawulo olulandelelanayo lwe-serial).
Umaleko woKhuseleko: Izixhobo ezahlukeneyo zokhuseleko ezilandelelanayo (i-FW/Anti-DDoS/WAF/IPS, ukusasazwa kwe-serial yendabuko kunokusilela okukodwa).
Ukuhamba kweTrafikhi kunye nesicelo seZinto
1- Ukusasazwa kwesiqhelo: Izixhobo ezininzi zokhuseleko ziqhagamshelwe ngokwasemzimbeni ngokulandelelana, nto leyo ekhokelela ekusilelekeni kwamanqaku amaninzi kunye nokulibaziseka okukhulu kwenethiwekhi.
2- Ukusasazwa okutsha: Zonke izixhobo zokhuseleko zihambelana ngokoqobo ne-ML-NPB-M2000; imveliso isebenzisa ukutsalwa kwetrafikhi okucwangcisiweyo ngokwemigaqo-nkqubo yokhuseleko.
3- Itrafikhi idlula kwisixhobo ngasinye sokhuseleko ngokulandelelana okucwangcisiweyo kwangaphambili kokhuseleko lwenyathelo ngenyathelo, ifezekisa isiphumo esifanayo nesochungechunge olubonakalayo.
4- Ukuba isixhobo esinye sokhuseleko siyasilela, imveliso iyasidlula isixhobo esinesiphene kuphela, kwaye lonke ukhuseleko olucwangcisiweyo luhlala lusebenza, lunciphisa amanqaku okusilela kunye nokuphucula ukuthembeka kwenethiwekhi.
Iimpawu eziphambili ezisetyenzisiweyo: Imo yoKhuseleko lweFullLink, ukuHamba kweTrafikhi okuBukrelekrele, ukuThunyelwa kweMigaqo-nkqubo eDynamic.
Umzobo 5: Umzobo woMgaqo-nkqubo oDynamic wokuQondwa nokuKhuselwa kweTrafikhi ye-Anti-DDoS
Igama lomzobo: I-WebService Dynamic Policy Traction yoMzobo woKhuselo loHlaselo lwe-Anti-DDoS
Injongo: Ukufunyanwa kohlaselo ngexesha langempela + ukutsalwa kwetrafikhi okuguquguqukayo
Inkcazo yeCandelo
Umaleko weNethiwekhi: I-core router/switch + Server Cluster (ithagethi ekhuselweyo, efana ne-IP/icandelo leseva yeshishini).
I-Core Node: ML-NPB-M2000 (ukudluliselwa kwethrafikhi ngesantya sentambo, uhlaziyo lomgaqo-nkqubo olutshintshayo, ukutsalwa kwethrafikhi).
Umaleko woKhuseleko: Isixhobo sokukhusela uhlaselo lwe-Anti-DDoS (ukufunyanwa kohlaselo ngexesha langempela, ukuhanjiswa kwemigaqo-nkqubo enamandla).
Ukuhamba kweTrafikhi kunye nesicelo seZinto
1- Imeko Eqhelekileyo: I-ML-NPB-M2000 idlulisela ithrafikhi epheleleyo kwi-server cluster ngesantya sentambo, kwaye ijonga zonke ithrafikhi kwisixhobo se-Anti-DDoS ukuze ibonwe ngexesha langempela (akukho mpembelelo kwithrafikhi yeshishini).
2- Uhlaselo Lufunyenwe: Isixhobo se-Anti-DDoS sichonga uhlaselo lwe-DDoS kwi-IP/icandelo leseva, sivelise imithetho yokufanisa ithrafikhi, kwaye siyithumele kwimveliso nge-interface ye-WebService dynamic policy.
3- Ukutsalwa kohlaselo: Le mveliso ihlaziya ilayibrari yemithetho eguqukayo ngexesha langempela, itsalela uhlaselo kwisixhobo se-Anti-DDoS ukuze sicocwe/sicutshungulwe, kwaye ithrafikhi eqhelekileyo isathunyelwa ngqo.
4- Ukuphela koHlaselo: Isixhobo se-Anti-DDoS sinikezela ngomyalelo wokurhoxiswa komgaqo-nkqubo, kwaye imveliso ibuyisela imo yokuqala yokudlulisela isantya sethrafikhi epheleleyo.
Iimpawu eziphambili ezisetyenzisiweyo: Ukuthunyelwa kweMigaqo-nkqubo yeWebService Dynamic, Ukuboniswa kweTrafikhi, Ukuthunyelwa kweSpeed-Speed kweHardware ye-ASIC, Ukuvalwa kweTrafikhi.
Umzobo 6: Ukhuselo lwe-Hybrid (Inline + SPAN) Inband + Umzobo wokubeka iliso ngaphandle kweBand
Igama lomzobo: Ukhuseleko lwe-FW/WAF olukwi-Inline + Umzobo wokubeka iliso kwi-IDS/APM ngaphandle kwe-SPAN
Injongo: Ukhuseleko oluhambelanayo ngaxeshanye + uhlalutyo lwethrafikhi olungaphandle kwebhendi
Inkcazo yeCandelo
Umaleko weNethiwekhi: I-core router/switch (ukufakwa kwetrafikhi yeshishini).
I-Core Node: ML-NPB-M2000 (vula imo ye-Inline kunye ne-SPAN ngaxeshanye, akukho kuphazamiseka okulinganayo).
Umaleko woKhuseleko olungenayo: FW/WAF (ukhuseleko olukwi-serial inline lokuqhuba ishishini).
Uludwe Lokujonga Ngaphandle Kwebhendi: IDS/APM/NPM (uhlalutyo lwethrafikhi, ukujonga ukusebenza, ukufunyanwa kwezoyikiso).
Ukuhamba kweTrafikhi kunye nesicelo seZinto
1- Imo engaphakathi: Ithrafikhi yeshishini idlula kwimveliso iye kwi-FW/WAF ukuze kukhuselwe ukhuseleko olungaphakathi, iqonda ukusilela kokudlula kunye nokutsalwa kwethrafikhi ethile.
Imo ye-SPAN ezi-2: Imveliso ibonisa ithrafikhi epheleleyo/ehluziweyo emgceni ukuya kwinkqubo yokubeka iliso ngaphandle kwebhendi ngemodyuli yeMonitor, ngaphandle kokuchaphazela ukuhanjiswa okuqhelekileyo kwethrafikhi emgceni.
3- Inkqubo yokubeka iliso yenza uhlalutyo olunzulu lwethrafikhi (uhlalutyo lwe-DPI/flow table/packet), ukubeka iliso ekusebenzeni (i-APM/NPM) kunye nokufunyanwa kwengozi engasebenziyo (i-IDS), kwaye imveliso ixhasa ukuguqulelwa kwe-SSL kwithrafikhi efihliweyo ekwi-mirrored (HTTPS/TLS) ukuhlangabezana neemfuno zohlalutyo olucacileyo.
4- Le mveliso ibonelela ngokunciphisa/ukufihla ithrafikhi yethrafikhi eboniswa kwisibuko, inciphisa umthwalo wokucubungula inkqubo yokujonga ngaphandle kwebhendi.
Iimpawu eziphambili ezisetyenzisiweyo: Ukuthunyelwa kweHybrid Inline+SPAN, i-SSL Proxy/Decryption, iTraffic Mirroring, iData Deduplication, iTraffic Visibility Analysis.
Umzobo 7: Uhlalutyo lweShedyuli kunye nokuBonakala kweTrafikhi yeNethiwekhi
Igama lomzobo: Ukuhlanganiswa kweTrafikhi eneeLinki ezininzi + Ucwangciso oluManyeneyo + Umzobo woHlahlelo oluBonakalayo
Injongo: Ukudibanisa ithrafikhi ye-10G/40G/100G kunye nohlalutyo olubonakalayo
Inkcazo yeCandelo
Umaleko woMthombo: Iikhonkco zomthombo wenethiwekhi ezinamanani amaninzi (10G/40G/100G) (ukuphuma kwi-intanethi, indawo yeseva, iswitshi engundoqo), ithrafikhi eqokelelwe nge-optical splitter/port mirror.
I-Core Node: ML-NPB-M2000 (ukuhlanganiswa kwetrafikhi okudibeneyo, ukucoca, ukusasazwa, ukucubungula kwangaphambili).
Udidi loHlahlelo: Iinkqubo zokhuseleko/uhlalutyo ezingaphandle kwebhendi (i-FW/IDS/NPM/DPI Analyzer).
Umaleko Obonakalayo: Iqonga Lokubonakala Kwetrafikhi (i-GUI eyakhelwe ngaphakathi yemveliso, umboniso wetshathi onemilinganiselo emininzi).
Ukuhamba kweTrafikhi kunye nesicelo seZinto
1- Le mveliso iqokelela zonke iitrafikhi ezivela kwiikhonkco zemithombo emininzi ngesantya sentambo, ize iyicwangcise kwangaphambili (ukuyihluza/ukuyisika/ukukhupha/ukususa imijelo).
2- Ngokwemigaqo-nkqubo elungiselelwe kwangaphambili, imveliso isasaza ithrafikhi yenkonzo eyahlukeneyo kwiinkqubo zokhuseleko/uhlalutyo ezingaphandle kwebhendi ezifanelekileyo (umz., ithrafikhi ye-DDoS ukuya kwi-Anti-DDoS, idatha yokusebenza ukuya kwi-NPM).
3- Imodyuli yokubonakala kwethrafikhi eyakhelwe ngaphakathi yemveliso yenza uhlalutyo olunemilinganiselo emininzi (uhlalutyo olunzulu lwe-DPI, uhlalutyo lwetafile yokuhamba/ipakethi, indawo echanekileyo yempazamo) kwithrafikhi eqokelelweyo, kwaye iyibonisa ngexesha langempela nge-GUI (itshathi yephayi/itshathi yebha/umgca wexesha).
4- Xhasa ukubanjwa kweepakethi ngexesha langempela kunye nemibuzo yembali yethrafikhi yethrafikhi engaqhelekanga, ukunceda abasebenzi be-O&M bafumane ngokukhawuleza iimpazamo zenethiwekhi/izisongelo zokhuseleko.
Iimpawu eziphambili ezisetyenzisiweyo: Ukuhlanganiswa/Ukusasazwa kweTrafikhi, Ukuhluthwa kweTunnel, Ukuchongwa kwesicelo seDPI, Ukubonakala kweTrafikhi okunemilinganiselo emininzi, Uhlalutyo oluchanekileyo lweZiphene.
EzinxulumeneyoUmthengisi wePakethi yeNethiwekhi
Nceda undwendwele ukuze ufumane iinkcukacha ezithe vetshe:https://www.mylinking.com/mylinking-network-packet-broker-plus-inline-bypass-switch-ml-npb-m2000-product/
EzinxulumeneyoUtshintsho lwe-Inline Bypass
Nceda undwendwele ukuze ufumane iinkcukacha ezithe vetshe:https://www.mylinking.com/mylinking-network-packet-broker-plus-inline-bypass-switch-ml-bypass-m2000-product/
Ixesha leposi: Epreli-07-2026
