INetwork Packet Broker(NPB), equka i-1G NPB esetyenziswa ngokuqhelekileyo, i-10G NPB, i-25G NPB, i-40G NPB, i-100G NPB, i-400G NPB, kunyeNetwork Test Access Port (TAP), sisixhobo se-hardware esiplaga ngqo kwintambo yenethiwekhi kwaye sithumela iqhekeza lonxibelelwano lwenethiwekhi kwezinye izixhobo.
I-Network Packet Brokers ziqhele ukusetyenziswa kwiinkqubo zokubona ukungena kwenethiwekhi (IDS), i-network detectors, kunye neeprofayili. Iseshoni yokujonga isipili. Kwimo ye-shunting, ikhonkco le-UTP esweni (ikhonkco elingafihliweyo) lahlulwe libe ngamacandelo amabini ngesixhobo sokucima i-TAP. Idatha ekhutshiweyo idityaniswe kujongano lokuqokelela ukuqokelela idatha yenkqubo yokubeka iliso yokhuseleko lwe-Intanethi.
Ikwenzela ntoni i-Network Packet Broker (NPB)?
Ezona mpawu:
1. Ukuzimela
Yinxalenye ezimeleyo ye-hardware kwaye ayichaphazeli umthwalo wezixhobo zenethiwekhi ezikhoyo, ezineenzuzo ezinkulu ngaphezu kwesibuko sesibuko.
Sisixhobo esisemgceni, nto leyo ethetha nje ukuba kufuneka ifakwe iingcingo kwinethiwekhi. Nangona kunjalo, oku kunento engalunganga yokwazisa inqaku lokungaphumeleli, kwaye ngenxa yokuba sisixhobo se-intanethi, inethiwekhi yangoku kufuneka iphazamiseke ngexesha lokuthunyelwa, kuxhomekeke apho isetyenziswe khona.
2. Ekuhleni
I-transparent ithetha isalathisi kuthungelwano lwangoku. Emva kokufikelela kwi-shunt yenethiwekhi, ayinayo impembelelo kuzo zonke izixhobo kwinethiwekhi yangoku, kwaye ibonakala ngokucacileyo kubo. Kakade ke, oku kukwabandakanya i-traffic ethunyelwe yi-network shunt kwisixhobo sokubeka iliso, esiselubala kwinethiwekhi.
Umgaqo wokusebenza:
I-traffic shunting (ukusasazwa) ngokusekelwe kwidatha yokufaka, ukuphindaphinda, ukuqokelela, ukucoca, ukuguqulwa kwedatha ye-POS ye-10G ngokusebenzisa ukuguqulwa kweprotocol ukuya kumashumi edatha ye-LAN ye-megabytes, ngokwe-algorithm ethile yokulinganisa umthwalo, imveliso ngexesha elifanayo ukuqinisekisa ukuba zonke iipakethi zeseshoni enye, okanye imveliso efanayo IP zonke iipakethe ukusuka kujongano lomsebenzisi ofanayo.
Iimpawu ezisebenzayo:
1. Ukuguqulwa kweProtocol
Unxibelelwano lwedatha ye-Intanethi ye-intanethi esetyenziswa yi-ISPs iquka i-40G POS, i-10G POS / WAN / LAN, i-2.5G POS, kunye ne-GE, ngelixa i-data efumana i-interfaces esetyenziswa ngamaseva esicelo yi-GE kunye ne-10GE LAN. Ngoko ke, ukuguqulwa kweprotocol ngokuqhelekileyo kukhankanyiwe kwii-interfaces zonxibelelwano lwe-Intanethi ikakhulu kubhekiselele ekuguquleni phakathi kwe-40G POS, i-10G POS, kunye ne-2.5G POS ukuya kwi-10GE LAN okanye i-GE, kunye ne-cotransfer ye-bidirectional phakathi kwe-10GE WAN kunye ne-10GE LAN kunye ne-GE.
2. Ukuqokelelwa nokuhanjiswa kwedatha.
Uninzi lwezicelo zokuqokelela idatha ngokusisiseko zikhupha i-traffic abayikhathaleleyo kwaye balahle i-traffic abangayikhathalelanga. I-traffic yedatha yedilesi ethile ye-IP, i-protocol, kunye ne-port ikhutshwe nge-five-tuple (idilesi ye-IP yomthombo, idilesi ye-IP yendawo yokufikela, i-port yomthombo, i-port yendawo, kunye ne-protocol) convergence. Xa imveliso, umthombo ofanayo, indawo efanayo kunye nomthamo wokulinganisa umthwalo uqinisekiswa ngokwe-algorithm ethile ye-HASH.
3. Uhluzo lwekhowudi yophawu
Ukuqokelela i-P2P ye-traffic, inkqubo yesicelo inokugxila kuphela kwi-traffic ethile, njengokusasaza imidiya ye-PPStream, i-BT, i-Thunderbolt, kunye namagama angundoqo aqhelekileyo kwi-HTTP njenge-GET kunye ne-POST, njl. kunye nokudibana. I-diverter ixhasa ukuhluzwa kwekhowudi yendawo esisigxina kunye nokucoca ikhowudi edadayo. Ikhowudi yefitsha edadayo yi-offset echaziweyo kwisiseko sekhowudi yendawo esisigxina. Ifanelekile kwizicelo ezichaza ikhowudi yenqaku eliza kuhluzwa, kodwa ungakhankanyi indawo ethile yekhowudi yenqaku.
4. Ulawulo lweseshoni
Ichonga itrafikhi yeseshini kwaye iqwalasele ngokuguquguqukayo iseshoni yogqithiso lwexabiso le-N (N=1 ukuya kwi-1024). Okokuthi, iipakethi zokuqala ze-N zeseshoni nganye zikhutshwe kwaye zidluliselwe kwinkqubo yokuhlalutya kwesicelo se-back-end, kwaye iipakethi emva kwe-N zilahlwa, zigcina i-resource overhead kwi-platform yohlalutyo lwesicelo esisezantsi. Ngokubanzi, xa usebenzisa i-IDS ukubeka iliso kwiziganeko, awudingi ukucwangcisa zonke iipakethi zeseshoni yonke; endaweni yoko, kufuneka ukhuphe iipakethi zokuqala ze-N zeseshoni nganye ukugqiba uhlalutyo lomnyhadala kunye nokubeka iliso.
5. Isipili sedatha kunye nokuphindaphinda
I-splitter inokuqonda i-mirroring kunye nokuphindaphinda kwedatha kwi-interface yemveliso, eqinisekisa ukufikelela kwedatha yeenkqubo ezininzi zesicelo.
6. Ukufunyanwa kwedatha yenethiwekhi ye-3G kunye nokuthunyelwa kwayo
Ukuqokelelwa kwedatha kunye nokusabalalisa kwiinethiwekhi ze-3G zihluke kwiindlela zokuhlalutya kwenethiwekhi yendabuko. Iipakethi kwiinethiwekhi ze-3G zithunyelwa kwiikhonkco ze-backbone ngokusebenzisa iileyile ezininzi ze-encapsulation. Ubude bepakethi kunye nefomathi ye-encapsulation yahlukile kwezo zepakethi kwiinethiwekhi eziqhelekileyo. I-splitter inokuchonga ngokuchanekileyo kwaye iqhube iiprothokholi zetonela ezifana neepakethi ze-GTP kunye ne-GRE, iipakethi ze-MPLS ezininzi, kunye neepakethi ze-VLAN. Inokukhupha iipakethi zokubonisa i-IUPS, iipakethi zokubonisa i-GTP, kunye neepakethi zeRadius kwiichweba ezichaziweyo ngokusekelwe kwiimpawu zepakethi. Ukongeza, inokwahlula iipakethi ngokwedilesi ye-IP yangaphakathi. Inkxaso yeepakethe ezigqithisiweyo (MTU> 1522 Byte) processing, inokuqonda ngokugqibeleleyo i-3G yokuqokelela idatha yenethiwekhi kunye nesicelo se-shunt.
IiMfuno zophawu:
-Ixhasa ukuhanjiswa kwetrafikhi ngeprotocol yesicelo se-L2-L7.
-Ixhasa ukuhluzwa kwe-5-tuple ngedilesi ye-IP echanekileyo, idilesi ye-IP yendawo ekuyiwa kuyo, izibuko lomthombo, indawo ekuyiwa kuyo, kunye neprotocol kunye nemaski.
- Ixhasa ulungelelwaniso lomthwalo wemveliso kunye nehomology yemveliso kunye nehomology.
-Ixhasa ukuhluzwa kunye nokuthunyelwa ngeentambo zabalinganiswa.
- Ixhasa ulawulo lweseshoni. Dlulisa phambili iipakethi ze-N zokuqala zeseshoni nganye. Ixabiso le-N lingachazwa.
-Ixhasa abasebenzisi abaninzi. Iipakethi zedatha ezihambelana nomgaqo ofanayo zinokunikezelwa kumntu wesithathu ngexesha elifanayo, okanye idatha kwi-interface yokuphuma ingabonakaliswa kwaye iphindwe, iqinisekisa ukufikelela kwedatha yeenkqubo ezininzi zesicelo.
I-Financial Industry Solution Solution Advantage Solution
Ngophuhliso olukhawulezayo lwetekhnoloji yolwazi lwehlabathi kunye nokwanda kolwazi, isikali sothungelwano lwamashishini siye sandiswa ngokuthe ngcembe, kwaye ukuxhomekeka kwamashishini ahlukeneyo kwinkqubo yolwazi kuye kwanda kakhulu. Kwangaxeshanye, uthungelwano lweshishini lohlaselo lwangaphakathi nangaphandle, izitenxo, kunye nezisongelo zokhuseleko lolwazi nazo ziyakhula, kunye nezixa ezikhulu zokhuseleko womnatha, inkqubo yokubeka iliso yoshishino lwesicelo efakwe ekusebenzeni ngokulandelelana, zonke iintlobo zokubeka iliso kwishishini, izixhobo zokhuseleko lokhuseleko. ibekwe kulo lonke uthungelwano, kuya kubakho inkcitho yemithombo yolwazi, ukubeka iliso kwindawo eyimfama, ukubeka iliso ngokuphindaphindiweyo, i-topology yenethiwekhi kunye nengxaki yokuphazamiseka njengokungakwazi ukufumana ngokufanelekileyo idatha ekujoliswe kuyo, okukhokelela ekubekeni iliso kwizixhobo zokusebenza eziphantsi. ukusebenza kakuhle, utyalo-mali oluphezulu, umvuzo ophantsi, ukugcinwa kade kunye nobunzima bolawulo, imithombo yedatha kunzima ukuyilawula.
Ixesha lokuposa: Sep-08-2022
