IUmthengisi wePakethi yeNethiwekhi(NPB), equka i-1G NPB esetyenziswa rhoqo, i-10G NPB, i-25G NPB, i-40G NPB, i-100G NPB, i-400G NPB, kunyeIzibuko lokufikelela kuvavanyo lwenethiwekhi (i-TAP), sisixhobo sehardware esixhuma ngqo kwintambo yenethiwekhi size sithumele inxalenye yonxibelelwano lwenethiwekhi kwezinye izixhobo.
IiNetwork Packet Brokers zisetyenziswa kakhulu kwiinkqubo zokufumanisa ukungena kwenethiwekhi (ii-IDS), ii-network detectors, kunye neeprofayili. Iseshoni yokujonga izibuko. Kwimo yokujikeleza, ikhonkco le-UTP elijongiweyo (ikhonkco elingafakwanga imaski) lahlulwe langamaqhekeza amabini sisixhobo sokujikeleza se-TAP. Idatha ejikelezayo iqhagamshelwe kwi-interface yokuqokelela idatha yenkqubo yokujonga ukhuseleko lolwazi lwe-Intanethi.
Yintoni ekwenzela yona iNetwork Packet Broker (NPB)?
Ezona mpawu:
1. Ukuzimela
Sisiqwenga sehardware esizimeleyo kwaye asichaphazeli umthwalo wezixhobo zenethiwekhi ezikhoyo, ezineenzuzo ezinkulu kunezibuko.
Sisixhobo esikwi-intanethi, nto leyo ethetha ukuba kufuneka sifakwe kwinethiwekhi. Nangona kunjalo, oku kukwanokuphazamiseka kokungenisa indawo yokusilela, kwaye kuba sisixhobo esikwi-intanethi, inethiwekhi yangoku kufuneka iphazanyiswe ngexesha lokufakwa, kuxhomekeke ekubeni isetyenziswa phi.
2. Ecacileyo
I-Transparent ithetha isalathiso kwinethiwekhi yangoku. Emva kokufikelela kwi-network shunt, ayinampembelelo kuzo zonke izixhobo kwinethiwekhi yangoku, kwaye iyabonakala ngokupheleleyo kuzo. Kakade ke, oku kuquka ne-traffic ethunyelwa yi-network shunt kwisixhobo sokujonga, esibonakalayo nakwinethiwekhi.
Umgaqo wokusebenza:
Ukusasazwa kwetrafikhi (ukusasazwa) ngokusekelwe kwidatha yokufaka, ukuphindaphinda, ukuqokelela, ukucoca, ukuguqulwa kwedatha ye-10G POS ngokusebenzisa ukuguqulwa kweprotocol ukuya kwi-megabytes yedatha ye-LAN, ngokwe-algorithm ethile yokulinganisa umthwalo, imveliso ngaxeshanye ukuqinisekisa ukuba zonke iipakethi zeseshoni enye, okanye i-IP efanayo ikhupha zonke iipakethi ezivela kujongano lomsebenzisi olufanayo.
Iimpawu ezisebenzayo:
1. Ukuguqulwa kweprotocol
Ii-interfaces zonxibelelwano lwedatha ye-intanethi eziphambili ezisetyenziswa zii-ISP ziquka i-40G POS, i-10G POS/WAN/LAN, i-2.5G POS, kunye ne-GE, ngelixa ii-interfaces zokufumana idatha ezisetyenziswa zii-application servers ziyi-interfaces ze-GE kunye ne-10GE LAN. Ke ngoko, ukuguqulwa kweprotocol okukhankanywa rhoqo kwii-interfaces zonxibelelwano lwe-intanethi kubhekisa kakhulu ekuguqulweni phakathi kwe-40G POS, i-10G POS, kunye ne-2.5G POS ukuya kwi-10GE LAN okanye i-GE, kunye nokudluliselwa kwe-bidirectional phakathi kwe-10GE WAN kunye ne-10GE LAN kunye ne-GE.
2. Ukuqokelelwa nokusasazwa kwedatha.
Uninzi lwezicelo zokuqokelela idatha ngokusisiseko zikhupha i-traffic eziyikhathaleleyo zize zilahle i-traffic ezingayikhathaleliyo. I-data traffic yedilesi ethile ye-IP, i-protocol, kunye ne-port ikhutshwa yi-five-tuple (idilesi ye-IP yomthombo, idilesi ye-IP yendawo, i-source port, i-destination port, kunye ne-protocol). Xa kuphuma, umthombo ofanayo, indawo efanayo kunye ne-load balance output ziyaqinisekiswa ngokwe-algorithm ethile ye-HASH.
3. Ukucoca ikhowudi yeempawu
Kwingqokelela yetrafikhi ye-P2P, inkqubo yesicelo ingagxila kuphela kwitrafikhi ethile, efana ne-streaming media PPStream, BT, Thunderbolt, kunye namagama angundoqo aqhelekileyo kwi-HTTP afana ne-GET kunye ne-POST, njl. Indlela yokufanisa ikhowudi yesici ingasetyenziselwa ukukhupha kunye nokudibanisa. I-diverter ixhasa ukuhluzwa kwekhowudi yesici sendawo esisigxina kunye nokuhluzwa kwekhowudi yesici sendawo edadayo. Ikhowudi yesici sendawo edadayo yi-offset echazwe ngokusekelwe kwikhowudi yesici sendawo emiselweyo. Ifanelekile kwizicelo ezichaza ikhowudi yesici ukuba ihluzwe, kodwa azichazi indawo ethile yekhowudi yesici.
4. Ulawulo lweseshoni
Ichonga ithrafikhi yeseshoni kwaye imisela ngokuguquguquka ixabiso le-N yokudlulisela iseshoni (N=1 ukuya kwi-1024). Oko kukuthi, iipakethi zokuqala ze-N zeseshoni nganye zikhutshwa kwaye zithunyelwe kwinkqubo yohlalutyo lwesicelo sasemva, kwaye iipakethi emva kwe-N ziyalahlwa, oko kugcina izixhobo ezisetyenziswayo kwiqonga lohlalutyo lwesicelo elisezantsi. Ngokubanzi, xa usebenzisa i-IDS ukujonga iziganeko, akufuneki ucwangcise zonke iipakethi zeseshoni yonke; endaweni yoko, kufuneka nje ukhuphe iipakethi zokuqala ze-N zeseshoni nganye ukuze ugqibezele uhlalutyo lwesiganeko kunye nokubeka iliso.
5. Ukujonga idatha kunye nokuphindaphinda
I-splitter inokufezekisa ukuboniswa kunye nokuphindaphinda kwedatha kwi-output interface, okuqinisekisa ukufikelela kwedatha kwiinkqubo ezininzi zezicelo.
6. Ukufunyanwa nokuthunyelwa kwedatha yenethiwekhi ye-3G
Ukuqokelelwa kwedatha kunye nokusasazwa kwayo kwiinethiwekhi ze-3G kwahlukile kwiindlela zemveli zohlalutyo lwenethiwekhi. Iipakethi kwiinethiwekhi ze-3G zidluliselwa kwiikhonkco zomqolo ngokusebenzisa iileya ezininzi ze-encapsulation. Ubude bepakethi kunye nefomathi ye-encapsulation zahlukile kwezo zeepakethi kwiinethiwekhi eziqhelekileyo. I-splitter inokuchonga ngokuchanekileyo kwaye icwangcise iiprotokholi ze-tunnel ezifana neepakethi ze-GTP kunye ne-GRE, iipakethi ze-MPLS ezininzi, kunye neepakethi ze-VLAN. Ingakhupha iipakethi ze-IUPS signaling, iipakethi ze-GTP signaling, kunye neepakethi zeRadius ukuya kwiiports ezichaziweyo ngokusekelwe kwiimpawu zepakethi. Ukongeza, ingahlulahlula iipakethi ngokwedilesi yangaphakathi ye-IP. Inkxaso yeepakethi ezinkulu kakhulu (MTU> 1522 Byte) ukucutshungulwa, inokwenza ngokugqibeleleyo ukuqokelelwa kwedatha yenethiwekhi ye-3G kunye nesicelo se-shunt.
Iimfuno zeempawu:
- Ixhasa ukusasazwa kwetrafikhi ngeprotocol yesicelo se-L2-L7.
- Ixhasa ukuhluzwa kwe-5-tuple ngedilesi ye-IP yomthombo ochanekileyo, idilesi ye-IP yendawo oya kuyo, i-port yomthombo, i-port yendawo oya kuyo, kunye ne-protocol kunye ne-mask.
- Ixhasa ukulinganisela umthwalo wemveliso kunye ne-homology yemveliso kunye ne-homology.
- Ixhasa ukucoca nokudlulisa ngemitya yabalinganiswa.
- Ixhasa ulawulo lweseshoni. Thumela iipakethi zokuqala ze-N zeseshoni nganye. Ixabiso lika-N lingachazwa.
- Ixhasa abasebenzisi abaninzi. Iipakethi zedatha ezihambelana nomthetho ofanayo zinokunikwa umntu wesithathu ngaxeshanye, okanye idatha ekwi-output interface ingalinganiswa kwaye iphindwe, ukuqinisekisa ukufikelela kwedatha kwiinkqubo ezininzi zezicelo.
Isisombululo seShishini lezeMali Isisombululo seNzuzo
Ngophuhliso olukhawulezileyo lwetekhnoloji yolwazi yehlabathi kunye nokwanda kolwazi, ubungakanani benethiwekhi yamashishini buye banda kancinci kancinci, kwaye ukuxhomekeka kwamashishini ahlukeneyo kwinkqubo yolwazi kuye kwanda kakhulu. Kwangaxeshanye, inethiwekhi yamashishini yohlaselo lwangaphakathi nolwangaphandle, ukungalungelelani, kunye nezoyikiso zokhuseleko lolwazi nazo ziyakhula, kunye nokhuseleko olukhulu lwenethiwekhi, inkqubo yokubeka iliso kwishishini lesicelo isetyenziswa ngokulandelelana, zonke iintlobo zokubeka iliso kwishishini, izixhobo zokhuseleko ezisasazwa kuyo yonke inethiwekhi, kuya kubakho ukuchithwa kwezixhobo zolwazi, ukubeka iliso kwindawo engaboniyo, ukubeka iliso okuphindaphindiweyo, i-topology yenethiwekhi kunye nengxaki engalungelelananga efana nokungakwazi ukufumana idatha ekujoliswe kuyo ngokufanelekileyo, okukhokelela ekubekeni iliso ekusebenzeni okuphantsi kwezixhobo, utyalo-mali oluphezulu, ingeniso ephantsi, ubunzima bokugcinwa kunye nolawulo olude, izixhobo zedatha kunzima ukuzilawula.
Ixesha lokuthumela: Sep-08-2022
