1- Yintoni i-Define Heartbeat Packet?
Iipakethi zokubetha kwentliziyo yeMylinking™ Network Tap Bypass Tshintsha okuhlala kukho kwi-Ethernet Layer 2 izakhelo. Xa kufakwa imo yokuvala i-transparent Layer 2 (efana ne-IPS / FW), iifreyimu zeLayer 2 Ethernet zidla ngokugqithiswa, zivalwe okanye zilahlwe. Kwangaxeshanye, iMylinking™ Network Tap Bypass Switch ixhasa ifomati yomyalezo wokubetha kwentliziyo ukuze ihlangabezane nemeko yokuba ezinye izixhobo ezikhethekileyo zokhuseleko azinakukwazi ukudlulisa izakhelo eziqhelekileyo zeLayer 2 Ethernet.
Kwaye iMylinking™ Network Tap Bypass Switch ikwaxhasa ukufunyanwa kwepakethe yokubetha kwentliziyo esekwe kwithegi yeVLAN, iLayer 3 kunye neLayer 4 yeentlobo zemiyalezo yesiko. Ngokusekwe kolu matshini, umsebenzisi unokuphumeza umsebenzi wovavanyo lokhuseleko lwenkonzo yesixhobo sokhuseleko soqhagamshelo ukuze sisebenze ngakumbi ukuqinisekisa ukuba iinkonzo zokhuseleko ezihambelanayo zisebenza ngokufanelekileyo.
I-Mylinking™ Network Tap Bypass Switch inokuxhasa imonitha ukuthumela iipakethi zokubetha kwentliziyo kumacala omabini. Ngokomzekelo, iipakethi ze-TCP kunye ne-UDP zohlobo lwe-heartbeat zenziwe ngokwezifiso kwi-"Strategy Traffic Traction Protector", ngokweenkcukacha zesixhobo se-serial. Ungaqwalasela ukuthunyelwa kweepakethi zokubetha kwentliziyo ye-TCP kwi-uplink monitor A izibuko kunye nokuthunyelwa kweepakethe ze-UDP zokubetha kwentliziyo kwi-downlink monitor B port ukulungiselela indlela yogqithiso lomyalezo wesixhobo sothotho sokhuseleko. Lo msebenzi unokuqinisekisa ngokusebenzayo ngakumbi umtya. Xhuma izixhobo zokhuseleko ekusebenzeni okuqhelekileyo.
I-Mylinking™ Network Inline Bypass Switch iphandiwe kwaye iphuhliswe ukuba isetyenziselwe ukuhanjiswa okubhetyebhetye kweentlobo ngeentlobo zezixhobo zokhuseleko ngelixa ibonelela ngokuthembeka okuphezulu kwenethiwekhi.
I-2-Network Inline Bypass Tshintsha iiNkalo eziPhezulu kunye neeTekhnoloji
I-Mylinking™ "SpecFlow" iModi yoKhuselo kunye neTekhnoloji yeModi yoKhuselo "iFullLink".
I-Mylinking™ iFast Bypass yokuTshintsha iTekhnoloji yoKhuseleko
ITekhnoloji yeMylinking™ “LinkSafeSwitch”
I-Mylinking™ “i-WebService” ye-Dynamic Strategy Forwarding/Issue Technology
ITekhnoloji yokuFumana iTekhnoloji yeMylinking ™ yokuBetha kwentliziyo ekrelekrele
ITekhnoloji yeTekhnoloji yeMylinking ™ yokuBetha kwentliziyo echazwayo
I-Mylinking™ iTekhnoloji yokuNxulumanisa iMithetho emininzi yokuLawulwa
I-Mylinking™ iTekhnoloji yoSasazo lweZithuthi ezikrelekrele
I-Mylinking™ iTekhnoloji yokuHlalanisa uMlayisho oDynamic
ITekhnoloji yoLawulo lweRemote ye-Mylinking™(HTTP/WEB, TELNET/SSH, “EasyConfig/AdvanceConfig” Iimpawu)
I-3-Network Inline Bypass Switch Application (njengoko kulandelayo)
3.1 UMngcipheko weSixhobo soKhuseleko olukwi-Inline (IPS / FW)
Oku kulandelayo yi-IPS eqhelekileyo (i-Intrusion Prevention System), i-FW (Firewall) imodi yokuthunyelwa, i-IPS / FW isetyenziswe ngokulandelelana kwisixhobo sothungelwano (i-routers, switch, njl.)
Kwangaxeshanye, sinokujonga i-IPS / FW njengokuthunyelwa kweserial kwezixhobo, ngokuqhelekileyo zibekwe kwindawo ephambili yothungelwano lweshishini ukuphumeza ukhuseleko lwe-serial, ukuthembeka kwezixhobo zayo eziqhagamshelweyo kuchaphazela ngqo ukufumaneka kwenethiwekhi yeshishini ngokubanzi. Nje ukuba izixhobo ze-serial zigcwele, ukuphazamiseka, uhlaziyo lwesoftware, uhlaziyo lomgaqo-nkqubo, njl. njl., ukufumaneka kwenethiwekhi yeshishini lonke kuya kuchaphazeleka kakhulu. Kweli nqanaba, thina kuphela ngokusikwa kwenethiwekhi, i-jumper ye-bypass ebonakalayo inokwenza inethiwekhi ibuyiselwe, ichaphazela kakhulu ukuthembeka kwenethiwekhi. I-IPS / FW kunye nezinye izixhobo ze-serial kwelinye icala ziphucula ukuthunyelwa kokhuseleko lwenethiwekhi yeshishini, kwelinye icala kunciphisa ukuthembeka kothungelwano lwamashishini, ukwandisa umngcipheko womnatha awufumaneki.
3.2 I-Inline Link Series yoKhuselo lweZixhobo
I-Mylinking ™ "I-Network Inline Bypass" isetyenziswe kuthotho phakathi kwezixhobo zenethiwekhi (iirutha, iiswitshi, njl. njl.), kunye nokuhamba kwedatha phakathi kwezixhobo zenethiwekhi akusekho ngqo kwi-IPS / FW, "Inethiwekhi ye-Inline Bypass" ukuya kwi-IPS / FW, xa i-IPS / FW ngenxa yokugcwala, ukuphazamiseka, uhlaziyo lwesoftware, uhlaziyo lomgaqo-nkqubo kunye nezinye iimeko zokungaphumeleli komyalezo we-Intelligent. ukufunyanwa kwangexesha, kwaye ngaloo ndlela utsibe isixhobo esingalunganga, ngaphandle kokuphazamisa isiseko sothungelwano, izixhobo zenethiwekhi ezikhawulezayo eziqhagamshelwe ngokuthe ngqo ukukhusela unxibelelwano oluqhelekileyo lonxibelelwano; xa IPS / FW ukusilela ukubuyiswa, kodwa ngokusebenzisa iipakethi zokubetha kwentliziyo ezikrelekrele Ukufunyanwa kokubhaqwa kwangexesha lomsebenzi, ikhonkco lokuqala ukubuyisela ukhuseleko lokhuseleko lwenethiwekhi yeshishini.
I-Mylinking ™ "Inethiwekhi ye-Inline Bypass" inomsebenzi onamandla wokuqonda ukubetha kwentliziyo, umsebenzisi unokwenza ngokwezifiso ixesha lokubetha kwentliziyo kunye nenani eliphezulu lokuzama kwakhona, ngomyalezo oqhelekileyo wokubetha kwentliziyo kwi-IPS / FW yovavanyo lwezempilo, njengokuthumela umyalezo wokukhangela ukubetha kwentliziyo kwindawo ephezulu / ezantsi ye-IPS / FW, kwaye emva koko ufumane ukusuka kwi-IPW esebenzayo / i-IPW ezantsi. ngokwesiqhelo ngokuthumela nokufumana umyalezo wokubetha kwentliziyo.
3.3 “SpecFlow” Policy Flow Inline Traction Series yoKhuselo
Xa isixhobo sothungelwano sokhuseleko kufuneka sijongane netrafikhi ethile kuthotho lokhuseleko lokhuseleko, ngokusebenzisa iMylinking™ ”Network Inline Bypass” traffic per-processing function, ngokusebenzisa isicwangciso sokuhlola itrafikhi ukuqhagamshela isixhobo sokhuseleko ” Ixhalabele “izithuthi zithunyelwa umva ngqo kwikhonkco lothungelwano, kwaye” icandelo letrafikhi elichaphazelekayo “litsalela kwisixhobo sokhuseleko emgceni ukwenza iitshekhi zokhuseleko. Oku akuyi kugcina kuphela ukusetyenziswa okuqhelekileyo komsebenzi wokukhangela ukhuseleko lwesixhobo sokukhusela, kodwa nokunciphisa ukuhamba okungahambi kakuhle kwezixhobo zokukhusela ukujongana noxinzelelo; ngelo xesha, i "Network Inline Bypass" inokubona imeko yokusebenza yesixhobo sokhuseleko ngexesha langempela. Isixhobo sokhuseleko sisebenza ngendlela engaqhelekanga sidlula ngokuthe ngqo ukugcwala kwedatha ukunqanda ukuphazamiseka kwenkonzo yenethiwekhi.
3.4 Layisha iBalanced Series Protection
I-Mylinking™ “I-Network Inline Bypass ” ibekwe kuthotho phakathi kwezixhobo zenethiwekhi (iirutha, iiswitshi, njl. njl.). Xa i-IPS enye / i-FW intsebenzo yokucubungula ingonelanga ukujamelana ne-traffic link peak traffic, Umsebenzi wokulinganisa umthwalo we-traffic womkhuseli, "ukuhlanganiswa" kwe-IPS / FW cluster processing network network link traffic, inokunciphisa ngokufanelekileyo uxinzelelo olulodwa lwe-IPS / FW, ukuphucula ukusebenza ngokubanzi kokuhlangabezana neBango lokusingqongileyo lokuthunyelwa.
I-Mylinking™ "I-Network Inline Bypass" inomsebenzi onamandla wokulinganisa umthwalo, ngokwesakhelo se-VLAN tag, ulwazi lwe-MAC, ulwazi lwe-IP, inombolo ye-port, i-protocol kunye nolunye ulwazi kwi-Hash load balancing distribution of traffic ukuqinisekisa ukuba i-IPS / FW nganye ifumene ukuhamba kwedatha Iseshini ingqibelelo.
3.5 IsiXhobo esiSetyenziswayo seMilayini yoKhuseleko lokuHamba okuHamba (Tshintsha uQhagamshelwano lothotho ukuya kuQhagamshelwano oluFanayo)
Kwamanye amakhonkco abalulekileyo (afana ne-Intanethi, indawo yotshintshiselwano indawo yomncedisi) indawo ihlala ibangelwa kwiimfuno zeempawu zokhuseleko kunye nokuthunyelwa kwezixhobo ezininzi zokuvavanya ukhuseleko kumgca (ezifana ne-firewall, izixhobo zokuhlaselwa kwe-DDOS, i-firewall yesicelo se-WEB, izixhobo zokuthintela ukungenelela, njl. Kwaye kwizixhobo zokhuseleko ezikhankanywe ngasentla kwi-intanethi, ukuphuculwa kwezixhobo, ukutshintshwa kwezixhobo kunye neminye imisebenzi, kuya kubangela uthungelwano ixesha elide lokuphazamiseka kwenkonzo kunye neprojekthi enkulu yokusika isenzo ukugqiba ukuphunyezwa ngempumelelo kweeprojekthi ezinjalo.
Ngokuhambisa "i-Network Inline Bypass" ngendlela edibeneyo, imodi yokuthunyelwa kwezixhobo ezininzi zokhuseleko ezidityaniswe kwichungechunge kwikhonkco elifanayo linokutshintshwa ukusuka "kwimo yokudibanisa ngokomzimba" ukuya "kwindlela yokudibanisa ngokomzimba, i-logical concatenation mode" Ikhonkco kwikhonkco kwindawo enye yokungaphumeleli ekuphuculeni ukuthembeka kwekhonkco, ngelixa "i-Network concatenation" ihamba kunye ne-flow Inline Imowudi yesiphumo esikhuselekileyo sokucubungula.
Ngaphezulu kwesixhobo esinye sokhuseleko ngexesha elinye kwidayagram yokusasazwa kothotho:
ISazobe sokusasazwa kweNethiwekhi ye-Bypass:
3.6 Ngokusekelwe kwiQhinga eliDynamic loKhuseleko loKhuseleko lweTraffic Traffic Traction
"I-Network Inline Bypass" Enye imeko yesicelo esiphezulu isekelwe kwiqhinga eliguqukayo le-traffic traction yokhuseleko lwezicelo zokukhusela ukhuseleko, ukuthunyelwa kwendlela njengoko kuboniswe ngezantsi:
Thatha "ukhuseleko lohlaselo lwe-Anti-DDoS kunye nobhaqo" izixhobo zokuvavanya ukhuseleko, umzekelo, ngokubekwa kwangaphambili kwe "Network Inline Bypass" kwaye emva koko izixhobo zokukhusela iDDOS emva koko ziqhagamshelwe kwi "Network Inline Bypass", ngokwesiqhelo " Umkhuseli weTraction "kwisixa esigcweleyo se-traffic wire-speed forwarding ngaxeshanye isibuko sokukhusela i-IP, i-IP yokuhlasela i-IP kunye nesixhobo sokukhusela i-IP. icandelo lomnatha) emva kohlaselo,” isixhobo sokukhusela i-anti-DDOS ” siya kuvelisa imigaqo ehambelana nokuhamba kwetrafikhi ekujoliswe kuyo kwaye iyithumele “kwi-Network Inline Bypass” ngojongano lomgaqo-nkqubo onamandla. I "Network Inline Bypass" inokuhlaziya "i-traffic traction dynamic" emva kokufumana imigaqo-nkqubo eguquguqukayo Umgaqo-nkqubo "kwaye ngokukhawuleza" umgaqo wabetha i-traffic server yokuhlaselwa "ukutsalwa" ukuya kwi-anti-DDoS ekukhuseleni ukuhlaselwa kunye nokufumanisa "izixhobo zokucutshungulwa, ukuba zisebenze emva kokuhamba kokuhlaselwa kwaye emva koko zifakwe kwakhona kwinethiwekhi.
Inkqubo yesicelo esekelwe kwi " Network Inline Bypass " kulula ukuyiphumeza kunesitofu sendlela ye-BGP yendabuko okanye enye i-traffic scheme ye-traffic, kunye nokusingqongileyo kuxhomekeke kancinci kwinethiwekhi kunye nokuthembeka okuphezulu.
"I-Network Inline Bypass" inezi mpawu zilandelayo zokuxhasa ukhuseleko lomgaqo-nkqubo oguquguqukayo wokhuseleko:
I-1, "I-Network Inline Bypass" ukubonelela ngaphandle kwemithetho esekelwe kwi-WEBSERIVCE interface, ukudibanisa lula kunye nezixhobo zokhuseleko lomntu wesithathu.
I-2, "I-Network Inline Bypass" esekelwe kwi-hardware ecocekileyo ye-ASIC chip idlulisa ukuya kwi-10Gbps iipakethi ze-wire-speed ngaphandle kokuthintela ukuhanjiswa kotshintshi, kunye "nelayibrari ye-traffic traction dynamic rule" kungakhathaliseki ukuba inani.
3, ” I-Network Inline Bypass ” eyakhelwe-ngaphakathi umsebenzi we-BYPASS wobuchwephesha, nokuba umkhuseli ngokwawo ukusilela, unokuphinda adlule ikhonkco loqobo lothotho ngoko nangoko, alichaphazeli ikhonkco lokuqala lonxibelelwano oluqhelekileyo.
Ixesha lokuposa: Dec-23-2021
