Funda indlela i-Network Packet Broker enobuchule ephucula ngayo ukujonga inethiwekhi ukusuka ekuqaleni ukuya ekupheleni, isusa iindawo ezingabonakaliyo zethrafikhi, kwaye iqinise ukhuseleko lwenethiwekhi yeshishini ngokusebenzisa ukuhlanganiswa kwethrafikhi, ukususwa kokubethela, ukususwa kwedatha kunye nokugcinwa kwedatha yokuthobela imithetho. Isalathiso:
I-Mylinking ML-NPB-5690: I-1.8Tbps 100G Network Packet Broker ibonelela ngokubonakala okugcweleyo kwenethiwekhi kwiZiko leDatha lanamhlanje kwiCybersecurity
1. Intshayelelo: Ingxaki Ekhulayo Yokubonakala Kwinethiwekhi Zamashishini Zanamhlanje
Utshintsho lwedijithali, uyilo lwelifu oluxutyiweyo, ii-uplinks ezikhawulezayo ze-10G/40G/100G, kunye nethrafikhi yeshishini efihliweyo ngokubanzi zenze iindawo ezingabonakaliyo kumaqela okhuseleko lwenethiwekhi kunye nokubeka iliso kwinethiwekhi kwiindawo zedatha zehlabathi. Uninzi lwamaqela e-IT ekuqaleni axhomekeke kwiiports zesipili ze-SPAN ezilula okanye ii-TAPs ezingabonakaliyo ukuze zibambe ithrafikhi, kodwa ezi zixhobo zisisiseko ziyasilela ukubonelela ngokubonakalayo okuthembekileyo nokungalahlekiyo kwimithwalo yemisebenzi yanamhlanje.
Iiports ze-SPAN zilahla iipakethi ngexesha lokunyuka kwetrafikhi, azikwazi ukuhlaziya ii-headers ze-overlay tunnel ezifana ne-VXLAN okanye i-GRE, izixhobo zokhuseleko lwe-flood ezineepakethi eziphindaphindwayo ezingafunekiyo, kwaye azinazo izilawuli zokuthobela ezakhelwe ngaphakathi zedatha yomsebenzisi ebucayi. Njengoko izoyikiso ze-cyber zitshintsha zize zifihleke kwiipakethi ze-TLS ezifihliweyo kunye nokuhamba kweziko ledatha lasempuma-ntshona, ukubonakala kwenethiwekhi okungaphelelanga kuthetha ngokuthe ngqo ukuba ngumngcipheko wokwaphulwa komthetho ongathintelwanga, iimpazamo zokusebenza ezingaphumeleliyo, kunye nokuhlolwa kwemithetho okungaphumelelanga.
KulaphoUmthengisi weePakethi zeNethiwekhi (NPB)iba sisiseko esibalulekileyo seziseko zokuqwalasela ishishini. Njengoko kuchaziwe sisikhokelo sobugcisa esisemthethweni seMylinking, iNetwork Packet Broker sisixhobo esikhethekileyo sehardware esibekwe phakathi kwe-TAPs zenethiwekhi, iiports ze-SPAN kunye nezixhobo zohlalutyo ezisezantsi, ezinomsebenzi wokubamba iipakethi ngaphandle kokulahlekelwa, ukucutshungulwa kwetrafikhi ngobuchule, kunye nokuhanjiswa ngokuchanekileyo kwemithombo yedatha ehambelanayo kwiinkqubo ze-IDS, NPM, APM, SIEM kunye neenkqubo ze-forensic.
Le bhlog ichaza inkcazo engundoqo, imisebenzi ebalulekileyo, iimeko zokusetyenziswa kwehlabathi lokwenyani, kunye nexabiso leshishini elinokulinganiswa lokusebenzisa iNetwork Packet Broker, kunye neembono ezijoliswe kumaqela eSecOps kunye neNetOps ezibeka phambili ukhuseleko oluqinileyo lwenethiwekhi kunye nokubeka iliso kwinethiwekhi ngaphandle kokuphazamiseka.
2. Inkcazo engundoqo: Yintoni i-Network Packet Broker?
I-Network Packet Broker isebenza njengesixhobo sokudibanisa ithrafikhi esiphakathi kuzo zonke iindlela zokubeka iliso kwinethiwekhi. Ubume bayo obuphambili obumbini bungashwankathelwa ngokulula:
Umqokeleli weePakethi kunye noMthwali: Ibamba ithrafikhi yenethiwekhi engaphakathi nangaphandle kwebhendi ngaphandle kokulahleka kwepakethi, idibanisa idatha eqhekekileyo evela kwiiswitshi ezisasazwe, ii-routers, ii-firewalls kunye nee-optical TAPs.
Umsasazi weTrafikhi okrelekrele: Icubungula iipakethi ezingavulwanga ngemigaqo-nkqubo ekhawulezisiweyo yehardware kwaye inika iqela elifanelekileyo lezithuthi kwizixhobo ezifanelekileyo zokhuseleko kunye nokubeka esweni, isusa ukuxinana kwedatha okungeyomfuneko kunye nezikhewu zokubonakala.
Ngokungafaniyo nee-splitters ezingasebenziyo ezikopa kuphela i-traffic eluhlaza ngaphandle kokuguqulwa, ii-Network Packet Brokers ze-enterprise-grade zidibanisa amandla okuguqula iipakethe ze-L2-L7 ezipheleleyo. Yonke imisebenzi yokucubungula isebenza ngesantya somgca, ithintela imiqobo yokukhupha nokuba iphantsi kwemithwalo yonxibelelwano ye-100Gbps eqhubekayo. Kwimibutho ephucula iziseko zokubeka esweni ze-1G/10G ezindala ukuya kwi-40G kunye ne-100G, i-NPB esebenza kakuhle yandisa ubomi benkonzo yezixhobo zokhuseleko ezikhoyo ngokwandisa usasazo lwe-traffic ngaphandle kokutshintshwa kwezixhobo ezigcweleyo ezibizayo.
3. Imisebenzi ephambili ephambili yoMthengisi weePakethi zeNethiwekhi zanamhlanje
Ixabiso lokukhuphisana le-Network Packet Broker yobungcali likwisuti yayo epheleleyo yeemodyuli zokucubungula ithrafikhi ezakhelwe ngaphakathi, nganye yenzelwe ukuphucula ukusebenza kakuhle kokubeka esweni inethiwekhi kunye nokuqinisa ukhuseleko lwenethiwekhi. Ngezantsi zizakhono ezibalulekileyo zenjongo eziqinisekisiweyo kuluhlu lwe-NPB ye-Mylinking yokuvelisa:
Ukuhlanganiswa kweTrafikhi, ukuphindaphinda kunye nokulinganisela umthwalo osekelwe kwimigaqo-nkqubo
Le misebenzi isisiseko yenza umqolo wemisebenzi yokujonga inethiwekhi edibeneyo:
○Ukuhlanganiswa kwemithombo emininzi: Hlanganisa ithrafikhi ebonisiweyo evela kwiichweba ezininzi ze-SPAN kunye nee-optical TAPs ukuya kumjelo omnye ophakathi, ususa ukubonakala okufihliweyo kwiilaphu zedatha zeziko ledatha ezinama-rack amaninzi.
○Ukuphindaphinda kweeport ezininzi: Khuphela ukuhamba kwetrafikhi enye yokungena kwiizibuko ezininzi zokubeka esweni indawo ngaxeshanye, okuvumela ukuhanjiswa ngaxeshanye kwi-IDS yokufumanisa usongo, i-NPM yokusebenza kunye nezixhobo zokuhlola ukuthobela imithetho ngaphandle kokusebenzisa izixhobo ezongezelelweyo ze-TAP.
○Ukulinganisela umthwalo okukrelekrele: Sabalalisa i-traffic ye-40G/100G ekhawulezayo kwiindidi ezahlukeneyo zezixhobo zohlalutyo lwe-1G/10G ezikhawulezayo usebenzisa ii-algorithms ze-hash ze-L2-L7 eziqaphela iseshoni. Oku kuthintela izixhobo zokhuseleko zomntu ngamnye ekubhaliseni kakhulu nasekulahlekelweni yipakethi, nto leyo eyandisa i-ROI kutyalo-mali olukhoyo lokujonga inethiwekhi.
Ukususwa kwePakethe eNcinci
Amashishini asebenzisa uyilo lwe-multi-switch mirroring architectures adla ngokuvelisa iipakethi ezininzi ezifanayo eziphindwe kabini kwiindawo zokubamba ezihambelanayo. Ezi pakethi ezingafunekiyo zichitha i-CPU, imemori kunye nezixhobo zokugcina kwizixhobo zokhuseleko ezisezantsi, zicotha ukubhaqwa kwezoyikiso kwaye zifihla imiqondiso yendlela engaqhelekanga ebalulekileyo.
I-Network Packet Broker isusa iipakethi eziphindaphindwayo ngokusekelwe kwimithetho yokufanisa enokwenziwa ngokwezifiso (i-IP yomthombo, i-port yendawo oya kuyo, iinombolo zolandelelwano lwe-TCP kunye nokunye). Ababoneleli beenkonzo zezemali kunye nelifu baxela ukwehla kwama-40-60% kwinani elipheleleyo letrafikhi elihanjiswa kumaqonga okubeka esweni emva kokuvumela imigaqo-nkqubo yokudlulisa idatha, nto leyo ephucula kakhulu ukusabela kwezixhobo zokhuseleko lwenethiwekhi phantsi komthwalo ophezulu.
Ukususwa kwe-SSL okukhawulezileyo kwiHardware ukuze kubonakale usongo olufihliweyo
Ngaphezulu kwe-95% ye-intanethi yanamhlanje kunye nethrafikhi yeshishini ihamba nge-SSL/TLS encryption, esetyenziswa ngabahlaseli be-cyber ukufihla i-malware, ukuhamba ecaleni kwe-ransomware kunye nomsebenzi wokukhupha idatha. Izixhobo zokhuseleko zemveli zithwala i-CPU enzima xa zinikwe umsebenzi wokususa iikhowudi kwimithombo emikhulu efihliweyo, nto leyo ekhokelela ekuwohlokeni kokusebenza.
Izisombululo zePacket Broker zeNetwork eziPhambili zikhupha i-SSL decryption epheleleyo kwiipayipi zehardware ezizinikeleyo. Emva kokulayisha izatifikethi zokuhlola amashishini, i-NPB iyayisusa i-HTTPS payloads ngesantya somgca kwaye ithumele ithrafikhi engenanto kwiiplatifomu ze-IDS kunye ne-NDR. Olu phawu luphambili lokhuseleko lwenethiwekhi lutyhila i-payloads yohlaselo efihliweyo ngaphandle kokulahla i-output yokujonga isixhobo okanye ukwazisa ilahleko yepakethi.
Ukufihla Idatha Ukuze Kuthotyelwe Imithetho
Izikhokelo zokuthobela imithetho zehlabathi jikelele eziquka i-PCI-DSS, i-HIPAA kunye ne-GDPR zigunyazisa ukukhuselwa okungqongqo kolwazi oluyimfihlo oluchonga umntu (PII), idatha yekhadi lokuhlawula kunye nolwazi lwezempilo olukhuselweyo (PHI). Itrafikhi engalungiswanga ethunyelwa kwizixhobo zokubeka esweni inethiwekhi ityhila idatha elawulwayo kubasebenzi abangagunyaziswanga kunye namaqonga ohlalutyo lomntu wesithathu, nto leyo edala uxanduva olukhulu lokuthobela imithetho.
Umsebenzi wokufihla idatha owakhelwe ngaphakathi weNetwork Packet Broker uskena ngokuzenzekelayo imithwalo yepakethi kwaye ubhala ngaphezulu kweendawo ezinobuzaza ezifana neenombolo zekhadi letyala, ii-ID zokhuseleko loluntu kunye neerekhodi zonyango lwezigulane ezinexabiso elizinzileyo ngaphambi kokuthumela idatha. Olu hlobo lokunciphisa uvakalelo lwezixhobo zekhompyutha lususa isidingo sokucoca izixhobo ezahlukeneyo zezithuthi, lulungelelanisa imisebenzi yokuthobela imithetho kumashishini alawulwayo.
Ukuhluthwa kweentloko zeTunnel zokuhlolwa kweTrafikhi efihliweyo
Iziko ledatha le-virtualized lanamhlanje lixhomekeke kakhulu kwiiprotokholi ze-overlay tunneling eziquka i-VXLAN, i-GRE, i-ERSPAN, i-MPLS kunye ne-GTP ukwakha amalaphu e-cloud aqeshisayo amaninzi. Izixhobo ezininzi zokubeka esweni azikwazi ukuhlalutya ii-headers ze-tunnel zangaphandle, zidala iindawo ezingabonakaliyo ezibalulekileyo ze-east-west lateral traffic ezifakwe ngaphakathi kwee-virtualization layers.
I-Network Packet Broker yenza i-header stripping ye-hardware ukuze isuse i-VLAN, i-VXLAN, i-L3VPN kunye nezinye ii-tunnel wrappers, iveza ipakethi yangaphakathi yokuqala ukuze kuhlalutywe ukhuseleko olupheleleyo. Olu buchule luyimfuneko kwizicwangciso zokhuseleko lwenethiwekhi ye-Zero Trust, ezifuna ukuhlolwa okupheleleyo kwendlela nganye yokuhamba kwe-inter-server ngaphakathi kwe-data center fabric.
Uhlalutyo loBukrelekrele beSicelo se-L7 kunye noMxholo woTshongo
Ii-Advanced Network Packet Brokers zidibanisa ii-injini zokuhlola iipakethi ezinzulu (DPI) ezibonisa ukubonakala ngaphaya kwee-layers zothutho ze-L2-L4 ukuya kwi-application-layer traffic identification epheleleyo. Eli qonga libonisa ngokuzenzekelayo ii-protocols eziphambili zeshishini eziquka i-HTTP, i-FTP, i-DNS, i-MySQL, i-BitTorrent kunye ne-cloud SaaS traffic, ivelisa i-metadata ecebileyo eqonda imeko yokujonga inethiwekhi kunye nokuzingela uloyiko.
Amaqela eSecOps asebenzisa olu lwazi lwesicelo ukubona ukuziphatha okunobungozi obuphezulu okufana nokudluliselwa kwesitoreji sefu le-IT yesithunzi, ukwabelana ngefayile ngontanga ngokungagunyaziswanga kunye nokuhlaselwa kwe-malware yomaleko wesicelo. Idatha yepakethi yomxholo inceda amaqela okhuseleko ukuba achonge izalathisi zokuChasana (ii-IOC), imephu yemvelaphi yevektha yohlaselo, kunye nokulandelela iinyawo zomhlaseli kwinethiwekhi yonke.
4. Amatyala amabini aphambili okusetyenziswa kokusasazwa: uKhuseleko lweNethiwekhi kunye nokuBekwa kweliso kweNethiwekhi
Ukufunyanwa koMngcipheko woKhuseleko lweNethiwekhi kunye nokuphendula kwiSiganeko
Kumaqela e-SOC agxile kukhuseleko lwenethiwekhi, i-Network Packet Broker sisiseko esisisiseko sokuzingela ngokuthembekileyo ubungozi:
○Ukuhlanganiswa kwezithuthi ezikwi-intanethi kumda osemantla-ntshona ukuze kubonwe imizamo yokungena ngaphandle kunye nee-DDoS precursors.
○Ukususwa kwee-capsulation ze-VXLAN/GTP tunnel flows ukuze kubonwe intshukumo ye-ransomware esecaleni phakathi kwee-virtual servers.
○Ukususwa kwe-SSL ukuze kufunyanwe i-malware efihliweyo kwiiseshoni zeshishini ze-HTTPS ezifihliweyo.
○Ukufihla idatha ukuqinisekisa ukuthotyelwa kwemithetho xa kuthunyelwa iirekhodi zethrafikhi kumaqonga ohlalutyo lwezoyikiso lomntu wesithathu.
○Ukukhupha nokucoca ukuze kuncitshiswe ingxolo, nto leyo evumela abahlalutyi bokhuseleko ukuba babeke phambili ithrafikhi yohlaselo olunobungozi obuphezulu ngaphandle kokukhangela idatha engafunekiyo.
Ngaphandle kwezakhono zokulungiselela kwangaphambili ze-NPB, izixhobo ze-IDS kunye ne-NDR zifumana ulwazi olungaphelelanga, olugcwele kakhulu, nto leyo ekhokelela kwiziphumo ezingezizo ezilungileyo, ukungaphuli kwemigaqo kunye namaxesha okuphendula abambezelekileyo kwiziganeko.
Ukubeka iliso kwiNethiwekhi ukususela ekuqaleni ukuya ekupheleni kunye nokusombulula iingxaki zokusebenza
Amaqela eNetOps axhomekeke kwiNetwork Packet Brokers ukuze anikezele ngedatha epheleleyo, engenangxolo ingako yokubeka esweni inethiwekhi kunye nolawulo lokusebenza kwezicelo:
○Hlanganisa ithrafikhi yamakhonkco amaninzi ukuze ujonge ukusetyenziswa kwe-bandwidth yelaphu elihambahambayo kunye nokuchonga imiqobo yokubambezeleka.
○I-100G ekhawulezayo nekhawulezayo yokwandisa ithrafikhi ukuya kwi-10G APM endala kunye nezixhobo zokujonga ukusebenza kwenethiwekhi.
○Sebenzisa ukusika iipakethi ngokusekelwe kumgaqo-nkqubo ukuze unciphise idatha yomthwalo ongeyomfuneko, unciphise iindleko zokugcina kunye ne-bandwidth kwiingxelo zethrafikhi zexesha elide.
○Yenza i-metadata yokuhamba kwezithuthi esemgangathweni (i-NetFlow/IPFIX) yokucwangcisa umthamo, ukuthambekela kwethrafikhi esisiseko kunye nokulumkisa okungahambi kakuhle ngexesha langempela.
○Phinda ulandelele imijelo yethrafikhi ehlukaniswe ngokwezigaba kwizixhobo zokubeka esweni ezizinikeleyo ukuze kusetyenziswe iindlela ezahlukeneyo zokusebenza, umzila kunye neendlela zokuchonga iimpazamo.
5. Iingenelo zeShishini eziPhambili zokusebenzisa iNetwork Packet Broker
○Susa amabala angaboniyo okubonakala kwinethiwekhi: Susa ukubethela kwiindlela ezifihliweyo nezifihliweyo ukuze kuhlolwe yonke indlela ehamba ngayo ukusuka emantla ukuya emazantsi kunye nempuma ukuya entshona, ukuvala izikhewu zokhuseleko ezidalwe ziindlela zokubeka esweni ze-SPAN kuphela.
○Yandisa i-ROI yesixhobo esikhoyo: Ukulinganisela umthwalo, ukukhupha kunye nokucoca kuthintela ukhuseleko kunye nokubeka esweni ubhaliso olugqithisileyo lwezixhobo, oku kulibazisa ukuphuculwa kwezixhobo ezibizayo kwiindawo zenethiwekhi ye-100G ekhawulezayo.
○Qinisa ukuma koKhuseleko lweNethiwekhi: Ukususwa kwe-SSL yehardware kunye nokususwa kwe-tunnel kuveza izoyikiso ze-cyber ezifihliweyo, okukhawulezisa ukubonwa kwezoyikiso kunye nokunciphisa ixesha eliphakathi lokusombulula (MTTR) kwiziganeko zokhuseleko.
○Yenza kube lula ukuThotyelwa kweMithetho: Ukusebenza kokufihla idatha yendalo kuzalisekisa imithetho yokukhusela i-PII ye-PCI-DSS, i-HIPAA kunye ne-GDPR ngaphandle kwezixhobo ezongezelelweyo zokuhluza zomntu wesithathu.
○Ubunzima bokusebenza obunqunyiweyo: Ukuhlanganiswa kwezithuthi ezisetyenziswa kwindawo enye kudibanisa uninzi lwee-data feeds ezahlukeneyo zibe yipayipi enye elawulwayo, kunciphisa iindleko zokugcinwa kwemihla ngemihla ze-NOC kunye ne-SOC.
6. Yakha Ukubonakala Okudibeneyo kunye noMthengisi Weepakethi Zenethiwekhi Yobuchwephesha
Njengoko isantya senethiwekhi sikhawuleza ukuya kwi-100G kwaye ithrafikhi efihliweyo engabonakaliyo iba ngumgangatho weshishini, i-SPAN mirroring esisiseko kunye ne-PAPs ezingasebenziyo azisenakuxhasa iimfuno zanamhlanje zokhuseleko lwenethiwekhi kunye nokubeka iliso kwinethiwekhi. I-Network Packet Broker enamandla inika umaleko obalulekileyo wokucubungula ithrafikhi ofunekayo ukuze ibambe, icocise kwaye isasaze idatha yephakethi engenalahleko nefanelekileyo kuzo zonke izixhobo ezikwi-observability stack yakho.
Ukusuka kwi-SSL decryption kunye ne-tunnel header stripping ukuya kwi-deduplication, i-data masking kunye ne-session-aware load balancing, yonke into ephambili ye-Network Packet Broker yenzelwe ukusombulula iingxaki zokwenyani ezijongene namaqela e-SecOps kunye ne-NetOps kwihlabathi liphela. Nokuba usebenzisa iziko ledatha elinamandla kakhulu, indawo yelifu ye-hybrid yeshishini, okanye iziseko zezimali/ukhathalelo lwempilo ezilawulwayo, ukudibanisa i-NPB esebenza kakuhle yeyona ndlela ingabizi kakhulu yokufumana ukubonakala kwenethiwekhi okugqibeleleyo, okuthembekileyo kunye nokhuseleko lwenethiwekhi oluqinileyo.
Ukuze uphonononge uluhlu olupheleleyo lwezisombululo ze-terabit-grade Network Packet Broker zeMylinking ezenzelwe ukujonga inethiwekhi ye-10G/25G/40G/100G, ndwendwela iphepha lethu elisemthethweni lezixhobo zobugcisa:https://www.mylinking.com/mylinking-network-packet-brokernpb-ml-npb-5690-product/
Ixesha leposi: Julayi-27-2026
