Brokerka Xirmooyinka Shabakadda Mylinking™ iyo Beddelka Gudbinta Khadka Tooska ah ML-NPB-M2000
Module-ka Gudubka: 8*10G SFP+ & 4*100GE, Module-ka Kormeeraha: 16*10GE SFP+ & 4*100GE, Ugu badnaan 2.4Tbps
1-Dulmar guud
Iyadoo horumar degdeg ah laga sameeyay internetka, khatarta amniga macluumaadka shabakadda ayaa sii kordheysa, sidaa darteed waxaa si aad ah loo isticmaalaa codsiyo kala duwan oo ilaalinta amniga macluumaadka ah. Hadday tahay qalabka xakamaynta marin-u-helka dhaqameed (dab-damiska) ama nooc cusub oo ah habab ilaalin oo horumarsan sida nidaamka ka hortagga faragelinta (IPS), madal maaraynta khatarta midaysan (UTM), Nidaamka weerarka adeegga ka hortagga diidmada (Anti-DDoS), Albaabka Ka-hortagga spam-ka, Nidaamka Aqoonsiga Taraafikada iyo Xakamaynta DPI ee Midaysan, iyo aalado badan oo amni ayaa si taxane ah loogu daadgureeyay qaybaha muhiimka ah ee shabakadda, hirgelinta siyaasadda amniga xogta ee u dhiganta si loo aqoonsado loona maareeyo taraafikada sharciga ah / sharci darrada ah. Isla mar ahaantaana, si kastaba ha ahaatee, shabakadda kumbuyuutarku waxay abuuri doontaa dib u dhac shabakad oo weyn ama xitaa khalkhal shabakadeed haddii ay dhacdo guuldarro, dayactir, casriyeyn, beddelka qalabka iyo wixii la mid ah jawi codsi shabakad wax soo saar oo aad loogu kalsoon yahay, isticmaalayaashu ma adkaysan karaan.
ML-NPB-M2000 Mylinking™ Network Packet Broker iyo Inline Bypass Switch waxaa la baaray oo loo sameeyay si loogu isticmaalo dabacsanaan karo noocyada kala duwan ee qalabka amniga taxanaha ah iyadoo la bixinayo isku halayn shabakadeed oo sare.
Adigoo adeegsanaya Mylinking™ Network Packet Broker iyo Inline Bypass Switch:
● Isticmaalayaashu waxay si dabacsan u rakibi karaan/uga saari karaan aaladaha ilaalinta amniga iyagoon saameyn ama carqaladeyn shabakadda jirta;
● Waxay leedahay shaqo ogaanshaha caafimaadka oo caqli badan si ay ula socoto xaaladda shaqada caadiga ah ee aaladaha amniga ee isku xiran waqtiga dhabta ah. Marka qalabka amniga ee isku xiran uu cilladoobo, ilaaliyuhu si toos ah ayuu u dhaafi doonaa si uu u ilaaliyo isgaarsiinta shabakadda ee caadiga ah.
●Tiknoolajiyada ilaalinta taraafikada ee xulashada ah ayaa loo isticmaali karaa in lagu rakibo qalabka amniga ee xoqidda taraafikada, qalabka hubinta ee ku salaysan sirta, iwm. Waxay si wax ku ool ah u hirgelisaa ilaalinta gelitaanka khadka tooska ah ee noocyada taraafikada gaarka ah, iyadoo ka dhigaysa culayska habaynta taraafikada ee aaladaha khadka tooska ah.
● Tiknoolajiyada ilaalinta taraafikada ee isku dheelitiran ayaa loo isticmaali karaa in lagu rakibo qalab ammaan ah oo gudaha ah oo ku jira kooxo si loo daboolo baahiyaha ilaalinta amniga ee gudaha ah ee jawiga cadaadiska sare leh.
●Waxay leedahay awoodo wakiil SSL ah, iyadoo buuxinaysa shuruudaha la socodka iyo falanqaynta ee aaladaha ilaalinta amniga ee macluumaadka qoraalka cad.
● Waxay leedahay awoodaha aasaasiga ah ee habaynta taraafikada sida taranka taraafikada, isu-ururinta, shaandhaynta, iyo calaamadaynta, iyo sidoo kale awoodaha habaynta taraafikada ee horumarsan sida dib-u-soo-celinta, qarinta, aqoonsiga hab-raaca lakabka codsiga, iyo qaabaynta taraafikada.
2-Brokerka Xirmooyinka Shabakadda Mylinking™ iyo Wareegga Wareegga ee Inline Bypass Sifooyinka iyo Tiknoolajiyada Sare
Habka Ilaalinta "SpecFlow" ee Mylinking™ iyo Teknolojiyadda Habka Ilaalinta "FullLink"
Tiknoolajiyada Ilaalinta Beddelka Degdegga ah ee Mylinking™
Teknolojiyadda Mylinking™ "LinkSafeSwitch"
Teknolojiyadda Gudbinta/Arrimaha Siyaasadda Firfircoon ee Mylinking™ "WebService"
Tiknoolajiyadda Ogaanshaha Xirmooyinka Garaaca Wadnaha ee Mylinking™ ee Caqliga leh
Mylinking™ Tiknoolajiyada Xirmooyinka Garaaca Wadnaha ee La Qeexi Karo
Mylinking™ Tiknoolajiyada Dheelitirka Culayska ee Isku-xidhka Badan
Mylinking™ Tiknoolajiyada Qaybinta Taraafikada ee Caqliga leh
Mylinking™ Tiknoolajiyada Dheelitirka Culayska Firfircoon
Mylinking™ Tiknoolajiyada Maareynta Fog (HTTP/WEB, TELNET/SSH, Astaamaha "EasyConfig/AdvanceConfig")
3-Brokerka Xirmooyinka Shabakadda Mylinking™ iyo Tilmaamaha Habaynta Beddelka Gudbinta Khadka Tooska ah
Sida ku cad jaantuska kore, cutubka oo dhan wuxuu ka kooban yahay afar boos oo moodeel ah:
Boosaska module-ka SLOT1, SLOT2, SLOT3, iyo SLOT4 dhammaantood waxay qaadi karaan module-yada dekedda ilaalinta BYPASS ama modules-yada dekedda monitor oo leh qiimayaal iyo lambarro deked oo kala duwan. Iyadoo la beddelayo moodooyinka kala duwan ee modules-yada, waxaa suurtagal ah in la taageero ilaalinta BYPASS ee xiriiriyeyaal badan oo 10G/40G/100G ah, iyo sidoo kale dejinta qalabka la socodka Inline Bypass ee xiriiriyeyaal badan oo 10G/40G/100G ah.
Fiiro gaar ah: Labada module ee BYPASS iyo module-ka MONITOR waxay taageeraan is-weydaarsiga kulul.
3.1-Liiska Tilmaamaha Module-ka
| Qaabka Badeecada | ShaqadaPmitirrada |
| Chassis | |
| ML-NPB-M2000-CHS/AC | Rackmount-ka caadiga ah ee 19-inji ah ee 2U; isticmaalka awoodda ugu badan 300W; cutubka ugu weyn ee ilaaliyaha BYPASS ee modular; 4 boos oo module ah; 1 * RS232 Console interface, 1 * 10/100/1000M RJ45 interface oo leh maaraynta shabakadda dibadda; laba koronto AC-220V; |
| NT-BYPASS-M2000-CHS/DC | Rackmount-ka caadiga ah ee 2U ee 19-inji ah; isticmaalka awoodda ugu badan 300W; cutubka ugu weyn ee ilaaliyaha BYPASS ee modular; 4 boos oo module ah; 1 * RS232 Console interface, 1 * 10/100/1000M RJ45 interface oo leh maaraynta shabakadda dibadda; laba koronto oo DC-48V ah; |
| BAABKA AY DHAAFAANModule | |
| INL-I8XM8X(LM/SM) | Waxay taageertaa ilaalinta isku xirka taxanaha ah ee 4-geesoodka ah ee 10GE (oo la jaan qaadaya 1G), iyadoo wadar ahaan ay yihiin 8 * 10GE interfaces; waxay taageertaa dekedaha la socodka 8 * 10G SFP+ (marka laga reebo modules-yada indhaha). |
| INL-I4HM2H (LM/SM) | Waxay taageertaa ilaalinta taxanaha isku xirka 2-geesoodka ah ee 100GE (40GE la jaan qaadaya), oo leh wadar ahaan 4 * 100GE interfaces; waxay taageertaa dekedaha la socodka 2 * 100GE QSFP28 (marka laga reebo modules-ka indhaha). |
| Qaybta Kormeeraha | |
| ISNIIN-M16X | Dekedaha la socodka 16 * 10GE SFP+ (marka laga reebo modules-yada indhaha); |
| ISNIIN-M16X-CN98 | Dekedaha la socodka 16*10GE SFP+ (module-ka indhaha kuma jiraan); oo leh matoor shaqo oo horumarsan, oo taageeraya hawlaha habaynta taraafikada ee horumarsan sida furfurista SSL ee ka gudubka ah, wakiilka SSL, iyo dib-u-celinta taraafikada; |
| ISNIIN-M4H | Dekedaha la socodka 4 * 100GE QSFP28 (modules-ka indhaha laguma darin); |
| ISNIIN-M4H-CN98 | Dekedaha la socodka 4*100GE QSFP28 (modules-ka indhaha kuma jiraan); oo lagu qalabeeyay matoor shaqo oo horumarsan, oo taageera hawlaha habaynta taraafikada ee horumarsan sida kala-goynta SSL ee ka gudubka ah, wakiilka SSL, iyo kala-goynta taraafikada; |
3.2-Xeerarka Xulashada Module-ka
Iyada oo ku saleysan isku xirka kala duwan ee la ilaaliyo iyo shuruudaha dejinta qalabka la socodka, waxaad si dabacsan u dooran kartaa qaab-dhismeedyo modules kala duwan si aad u buuxiso baahiyahaaga deegaanka ee dhabta ah; fadlan raac sharciyadan markaad dooranayso:
1) Isku-dubaridka shasigu waa qayb qasab ah waana in la doortaa ka hor intaadan dooran wax modules kale ah. Fadlan sidoo kale dooro habka korontada ee ku habboon (AC/DC) sida waafaqsan baahiyahaaga.
2) Cutubku wuxuu taageeraa ugu badnaan 4 boos oo module ah; ma dooran kartid modules ka badan tirada boosaska loogu talagalay habaynta. Iyada oo ku saleysan isku-darka dabacsan ee moodooyinka modules-ka kala duwan, cutubku wuxuu taageeri karaa ilaalinta taxanaha ah ilaa 16 xiriiriye 10GE/GE ama 8 xiriiriye 100GE/40GE.
4-Awoodaha Habaynta Taraafikada ee Caqliga leh
4.1-Hawlgalinta Khadka Gudaha
Ilaalinta Khaaska ah ee Taraafikada
Waxay taageertaaGudaha (taxane ah)habka ilaalinta noocyada taraafikada gaarka ah ee wax kastakhadka gudahaisku xirka.Tohoray u sii gudbi noocyada taraafikada ee isticmaaluhu cayimaykhadka gudahaisku xirkaGudaha khadka Samnigaqalabsi loo farsameeyo, inta soo hartayna si toos ah ayaa loo gudbinayaa iyada oo aan la dhex marinGudaha khadka SamnigaqalabIsla markaana,itwaxay samaysaa la socodka waqtiga-dhabta ah ee xaaladda socodsiintaGudaha khadka SamnigaqalabMarkii xaaladda aan caadiga ahayn ee habaynta taraafikada la helay,itsi toos ah ayaa looga gudbi doonaa wadada gudbinta taraafikada si loo hubiyo sii socoshada adeegga shabakadda.
Dhammaan Ilaalinta Khadka Taraafikada
Waxay taageertaaGudaha (taxane ah)habka ilaalinta dhammaan noocyada taraafikada ee meel kastakhadka gudahaisku xirka.Togudbi dhammaan taraafikada gudahakhadka gudahaisku xirkaGudaha khadka Samnigaqalabsi loo farsameeyo, loona kormeero xaaladda socodsiinta Amniga Inline SecurityqalabWaqtiga dhabta ah. Markii xaaladda aan caadiga ahayn ee habaynta taraafikada la helay,itsi toos ah ayaa looga gudbi doonaa wadada gudbinta taraafikada si loo hubiyo sii socoshada adeegga shabakadda.
Dheelitirka Rarka
Waxay leedahay awood dheellitirka culeyska taraafikada oo caqli badan. Marka waxqabadka habaynta ee hal midGudaha khadka Samnigaqalabkuma filna in wax laga qabtokhadka gudahaisku xirka taraafikada isgaarsiinta, waxay u qoondeyn kartaakhadka gudahaisku xidhka taraafikada is-dhexgalka N Monitor iyadoo la habaynayo koox isku dheelitiraysa culayska. Sida ku cad MAC, macluumaadka IP, lambarka dekedda, borotokoolka iyo macluumaad kale,itwaxay qabataa wax soo saarka isku dheelitirka culayska ee ikhtiyaariga ah ee Hash algorithm, sikhadka gudahaTaraafikada isku xirka si siman ayaa loogu qaybiyaa meelo badankhadka gudahaamnigaqalabs ee habaynta kooxeed, kaas oo si wax ku ool ah u hagaajinaya waxqabadka guud ee habayntakhadka gudahaamnigaqalabs. Si loo waafajiyo shuruudaha baaxadda sare iyo xaaladaha codsiga taraafikada ee waaweyn.
Ogaanshaha Xirmooyinka Garaaca Wadnaha
Waxay taageertaaTxiyoRxxirmooyinka ogaanshaha garaaca wadnaha iyada oo loo marayo isku xirka kor iyo hoos ee isku xirkakhadka gudahaaaladaha amniga, waxayna ogaadaanqalabka gudahaXaaladda shaqada iyo in habka socodsiinta taraafikadu uu yahay mid caadi ah. Garaaca laba geesoodka ahbaakadhabka ogaanshaha ayaa si sax ah u muujin kara xaaladda shaqada ee hadda jirtakhadka gudahaamnigaqalab, iyo si wax ku ool ah u hubinta shaqada caadiga ah ee shabakadda.
Waxay habayn kartaa xuduudaha garaaca wadnaha ee wax kasta ookhadka gudahaqalabka amniga, sida garaaca wadnahaTxwaqtiga kala-guurka, waqtiyada ugu badan ee isku-dayga garaaca wadnaha, garaaca wadnahaTxjihada, iwm. Waxay ogaan kartaa oo go'aamin kartaa xaaladda cilladdakhadka gudahaaaladaha amniga waqtiga ku habboon, isla markaana si dhakhso ah u beddela xiriirada ilaalinta.
Xirmooyinka ogaanshaha garaaca wadnaha waa qaab-dhismeedka lakabka 2aad ee Ethernet. Marka qaabka buundada lakabka 2aad ee hufan (sida IPS/FW) la hawlgeliyo, qaab-dhismeedka Ethernet-ka lakabka 2aad si caadi ah ayaa loo gudbin doonaa iyada oo aan la xannibin ama la dhicin. Isla mar ahaantaana, waxay sidoo kale taageeri kartaa xirmooyinka ogaanshaha garaaca wadnaha ee lakabka 2aad, lakabka 3aad iyo lakabka 4aad ee Ethernet-ka ee gaarka ah si loogu waafajiyo qaar gaar ah.khadka gudahaaaladaha amniga caadiyan ma gudbin karaan qaab-dhismeedka caadiga ah ee Ethernet-ka lakabka 2aad.
Iyada oo ku saleysan habka kor ku xusan, isticmaalayaashu waxay ogaan karaan saameynta ogaanshaha caafimaadka ee heerka adeegga ee aaladaha amniga ee isku xiran, si ay si wax ku ool ah u hubiso shaqada caadiga ah ee adeegyada amniga.
Beddelidda Gudubka
Waxay taageertaa isku-darka aad u hooseeyabeddelkadib u dhac (<8ms), isticmaalayaashuna si dhib yar ayay u dareemi karaan saameynta shabakadda marka qalabku sameeyo baasasbeddelkaIsla mar ahaantaana, tiknoolajiyada beddelka Link-ga ee qalabka gaarka ah waxay hubin kartaa in xaaladda isku xirka ee xiriirka aasaasiga ah aysan saameyn inta lagu jiro marin-habaabintabeddelkaTiknoolajiyaddani waxay hubin doontaa in marin-haweedkabeddelkawaa mid aad u ammaan badan, mana sababi doono in hab-maamuuska lakabka 2 / Lakabka 3 ee isku-xireyaasha la ilaaliyo uu dib u xisaabiyo oo uu isu yimaado, si loo yareeyo saameynta shabakadda isticmaalaha inta lagu jirobeddelka.
Xannibaadda Taraafikada
Marka qalabka amnigu ogaado isku xirka kalfadhiga sharci darrada ah ama aan caadiga ahayn ee taraafikada oo uu u baahdo inuu ku xannibo waqtiga, qalabku wuxuu qaban karaa xirmo kasta oo la cayimay oo ku jira taraafikada kor/hoos u socotakhadka gudahaisku xirka ku salaysan xaaladaha shaandhada isku-dhafka ah ee tuple si loo hubiyo hawlgalka badbaadada leh ee adeegyada shabakadda.
Muraayadda Taraafikada
Marka laga soo tago ilaalinta taraafikada ee isku xirka gudaha iyo qalabka Amniga Inline (sida IPS, WAF), taraafikada muraayadda SPAN kasta waxaa sidoo kale loo soo saari karaa nidaamka la socodka amniga SPAN (sida IDS, APT), si loo daboolo shuruudaha dejinta ee la socodka SPAN ee xogta taraafikada ama tijaabinta iyo xaqiijinta taraafikada.
Wakiilka SSL
Iyada oo loo marayo shaqada wakiilka SSL, baakadda asalka ah ee la sirtiray ayaa la furfuraa oo loo diraa nidaamka ilaalinta amniga khadka tooska ah, ka dibna xogta la furfuray ayaa la soo celiyaa oo dib loogu celiyaa xiriirkii asalka ahaa, si xogta la furfuray loogu gudbiyo nidaamka ilaalinta amniga khadka tooska ah iyada oo aan saameyn ku yeelan gudbinta xogta la sirtiray ee ku taal xiriirka asalka ah ee isticmaalaha, iyo in la xaqiijiyo la socodka iyo falanqaynta xogta la sirtiray ee nidaamka falanqaynta.
4.2-Hawlgalinta SPAN
Nuqulka Taraafikada Shabakadda
Waxay taageertaaGudaha (taxane ah)habka ilaalinta noocyada taraafikada gaarka ah ee wax kastakhadka gudahaisku xirka.Tohoray u sii gudbi noocyada taraafikada ee isticmaaluhu cayimaykhadka gudahaisku xirkaGudaha khadka Samnigaqalabsi loo farsameeyo, inta soo hartayna si toos ah ayaa loo gudbinayaa iyada oo aan la dhex marinGudaha khadka SamnigaqalabIsla markaana,itwaxay samaysaa la socodka waqtiga-dhabta ah ee xaaladda socodsiintaGudaha khadka SamnigaqalabMarkii xaaladda aan caadiga ahayn ee habaynta taraafikada la helay,itsi toos ah ayaa looga gudbi doonaa wadada gudbinta taraafikada si loo hubiyo sii socoshada adeegga shabakadda.
Isugeynta Taraafikada Shabakadda
Taraafikada asalka ah ee la geliyo iyo taraafikada hore loo farsameeyay waxaa lagu koobi karaa calaamadda kanaalka N iyadoo loo eegayo calaamadda kanaalka 1 ama waxaa lagu koobi karaa calaamadda kanaalka M ka dib isku-darka calaamadaha kanaalka N ee gudbinta xawaaraha khadka GE, 10GE, 40G iyo 100G, taas oo si fiican u xallisa baahiyaha lagu gelinayo in ka badan laba qalab dhegeysi oo badan oo isku mar ah shabakadda.
Qaybinta/Gudbinta Xogta
Si sax ah ayaa loo kala saaray xogta soo socota oo loo tuuray ama loo gudbiyay adeegyo xog oo kala duwan oo loogu talagalay wax soo saar badan oo is-dhexgal ah iyadoo la raacayo qawaaniinta hore loo qeexay ee isticmaalaha.
Shaandhaynta Xogta Baakadaha
Xogta la gelinayotaraafikadasi sax ah ayaa loo kala saari karaa, adeegyada xogta ee kala duwanna waxay noqon karaan xeerarka liiska cad ama liiska madow, wax soo saarka badan ee is-dhexgalkana waa la tuuri karaa ama la gudbin karaa. Waxay taageertaa isku-darka dabacsan oo ku salaysan nooca Ethernet, calaamadda vlan, IP shan-tuple,TCPaqoonsi, astaamaha baakadaha iyo walxo kale si loo sii daboolo shuruudaha dejinta ee qalabka amniga shabakadda ee kala duwan, falanqaynta hab-maamuuska, falanqaynta calaamadaynta, iyo la socodka kale ee taraafikada.
Dheelitirka Rarka
Isu-dheellitirka culayska ee algorithm-ka Hash ee ikhtiyaariga ah waxaa lagu fulin karaa iyadoo la raacayo astaamaha lakabka gudaha iyo dibadda ee L2-L4 si loo hubiyo daacadnimada kalfadhiga ee socodka xogta ee uu helaySPANqalabka la socodka. Marka xaaladda isku xidhku isbeddesho, xubnaha kooxda dekedda ee dejinaysa waxay si dabacsan uga bixi karaan (isku xidhka hoos) ama ugu biiri karaan (isku xidhka kor) si dabacsan, kooxda dejinaysana waxay si toos ah dib ugu qaybin karaan taraafikada si loo hubiyo isku dheelitirka culeyska firfircoon ee taraafikada wax soo saarka ee dekedda.
Calaamadaha VLAN
VLAN aan la calaamadin
VLAN waa la beddelay
Waxay taageertay isku-xidhka goob kasta oo muhiim ah oo ku jirta 128 bayt ee ugu horreeya ee baakadka. Isticmaaluhu wuxuu habayn karaa qiimaha kala-goynta iyo dhererka iyo waxa ku jira goobta muhiimka ah, wuxuuna go'aamin karaa siyaasadda wax soo saarka taraafikada iyadoo loo eegayo habaynta isticmaalaha.
Shaambadeynta Waqtiga
Taageero Isku-dubarid server-ka NTP si uu u saxo waqtiga oo uu fariinta ugu qoro baakadka qaab calaamad waqti qaraabo ah oo leh calaamadda waqtiga dhamaadka qaab-dhismeedka, iyadoo saxnaanta nanoseconds ay tahay
Xariiqidda Tunnel-ka ee Kaabsalka
Waxaa taageeray cinwaanka VxLAN, VLAN, GRE, GTP, MPLS, IPIP oo laga saaray baakaddii xogta asalka ahayd iyo wax soo saarka la gudbiyay.
Goynta Xogta/Baakadaha
Waxay taageertaajeex baakadxogta asalka ah ee ku salaysan is-dhexgalka heerka siyaasadda ee gelinta taraafikada iyo is-dhexgalka wax soo saarka (64, 96, 128, 160, 192, 224, 256, 288, 320, 384, 512, 640, 768, 896, 960 bayt waa ikhtiyaari), siyaasadda wax soo saarka taraafikadana waxaa lagu hirgelin karaa iyadoo loo eegayo habaynta isticmaalaha.
Aqoonsiga Hab-raaca Tunneling-ka
Si toos ah ayaa loo taageeraa si loo aqoonsado hab-raacyada kala duwan ee tunnel-ka sida GTP / GRE / VxLAN / PPTP / L2TP / PPPOE / IPIP. Sida ku xusan habaynta isticmaalaha, istaraatiijiyadda wax soo saarka taraafikada waxaa lagu hirgelin karaa iyadoo loo eegayo lakabka gudaha ama dibadda ee tunnel-ka
Mudnaanta Gudbinta Baakadaha
Waxay taageertaa qeexidda mudnaanta xirmooyinka xogta iyadoo loo eegayo muhiimadda adeegga dekedda soo socota, xirmooyinka mudnaanta sare lehna waxaa si gaar ah loogu gudbiyaa wax soo saarka. Ka dib marka baakadaha mudnaanta sare leh la gudbiyo, baakadaha kale ee mudnaanta dhexe iyo kuwa hooseeya ayaa la gudbiyaa. Ka fogow qaylada nidaamka falanqaynta ee ay keento baakadaha xogta muhiimka ah ee maqan.
Digniin aan caadi ahayn
Waxay taageertaa digniinta la socodka waqtiga-dhabta ah iyo diiwaannada digniinta taariikhiga ah ee isbeddellada taraafikada ee isku-xirka iyadoo lagu saleynayo dejinta heerka. Waxay taageertaa digniinta la socodka waqtiga-dhabta ah iyo diiwaannada digniinta taariikhiga ah iyadoo lagu saleynayo xaaladda caafimaad ee qalabka qalabka (cpu, xusuusta, heerkulka, taageeraha, korontada, iwm.).
Kayd kulul oo is-dhexgal ah
Waxay taageertaa is-dhexgalka gelinta 1+1 ee habaynta koowaad/joogtada ah, is-dhexgalka wax soo saarka 1+1 ee habaynta koowaad/joogtada ah, iyo isku-dheellitirka culeyska kooxda N+1 ee habaynta koowaad/joogtada ah si loo gaaro isku halayn sare oo ku saabsan geeddi-socodka taraafikada laga bilaabo gelinta ilaa wax soo saarka.
Cabbirka Burburka Taraafikada
Waxay ogaan kartaa waqtiga, muddada iyo heerka qaraxa ee taraafikada waqtiga dhabta ah, waxayna bixin kartaa haynta rikoodhka cabbirka taariikhiga ah, kaas oo bixiya hab la qiyaasi karo oo la arki karo iyo saldhig u ah xallinta dhibaatooyinka hawlgalka iyo dayactirka iyo ogaanshaha khasaaraha baakadaha.
Ilaalinta Is-dhexgalka Oscillation
Waxay taageertaa ogaanshaha iyo ilaalinta dhacdooyinka isku-xidhka kor/hoos u socodka ee is-dhexgal kasta, si looga fogaado luminta taraafikada soo-gelinta iyo wax-soo-saarka ee ay keento isku-xidhka soo noqnoqda ee kor/hoos u socodka ee is-dhexgalka, iyo hagaajinta xasilloonida ururinta taraafikada iyo gudbinta.
Soo-saarka Kaydinta Tunnelka
Waxay taageertaa buuxinta tunnel nooca ERSPAN2, GRE, VXLAN, NVGRE ee taraafikada la ururiyey iyo wax soo saarka si loo daboolo shuruudaha codsiga ee gudbinta taraafikada la ururiyey nidaamka falanqaynta fog.
Joojinta Xirmooyinka Tunnelka
Waxay taageertaa shaqada joojinta fariinta tunnel-ka. Shaqadani waxay u oggolaanaysaa habaynta cinwaanada IP-ga/maaskarada iyo cinwaanada MAC ee dekedda gelinta taraafikada. Waxay awood u siinaysaa gudbinta tooska ah ee taraafikada u baahan in lagu ururiyo shabakadda isticmaalaha iyada oo loo marayo hababka kaydinta tunnel-ka sida GRE, GTP, iyo VXLAN ee dekedda ururinta qalabka.
SPAN SSL Decryption
Waxaa la taageeray rarista furfurista shahaadada SSL ee u dhiganta. Ka dib marka la furo xogta qarsoon ee HTTPS ee taraafikada la cayimay, waxaa loo gudbin doonaa nidaamyada kormeerka iyo falanqaynta dambe ee dambe sida loogu baahdo. TLS1.0, TLS1.2 iyo SSL3.0 ayaa la taageerayaa
Ka-saarista Xogta/Baakadda
Tirakoobka ku salaysan dekedda ama heerka siyaasadda ayaa la taageerayaa si loo barbar dhigo xog badan oo ilo ururin ah iyo ku celcelinta xirmo xog isku mid ah waqti cayiman. Isticmaalayaashu waxay dooran karaan aqoonsiyo baakado oo kala duwan (dst.ip, src.port, dst.port, tcp.seq, tcp.ack, dst.mac, src.mac, vlan.id)
Maaskaro Timireed oo La Kala Soocay
Taageero ku salaysan siyaasadda si loo beddelo goob kasta oo muhiim ah oo ku jirta xogta cayriin si loo gaaro ujeeddada ilaalinta macluumaadka xasaasiga ah. Sida ku xusan habaynta isticmaalaha, siyaasadda wax soo saarka taraafikada waa la hirgelin karaa.
Aqoonsiga Hab-raaca Lakabka APP
Waxay taageertaa aqoonsiga, soo saarista iyo tuurista Habraacyada Lakabka Codsiga iyadoo lagu saleynayo qaabka isku-xidhka DNS/URL. Maktabadda astaamaha DPI waxaa lagu dari karaa si loo aqoonsado, loo soo saaro loona tuuro ugu yaraan 1800 oo nooc oo ah sifooyinka borotokoolka codsiga (sida maqalka iyo muuqaalka, ciyaarta, fariimaha degdegga ah, xogta, iimaylka, P2P, iwm.), maktabadda astaamaha DPI-na waa la cusboonaysiin karaa oo la cusbooneysiin karaa. Haddii ay jiraan baahiyo gaar ah, horumarinta labaad ayaa sidoo kale la samayn karaa.
Baakad Kala-goynta Isticmaalaha ee uu qeexay
Waxay taageertaa shaqada uninka baakadka ee is-qeexaya, kaas oo ka saari kara goobaha encapsulation-ka iyo waxa ku jira meel kasta oo ka mid ah 128 bayt ee ugu horreeya ee baakadka oo soo saari kara.
Qaabaynta Taraafikada
Isla mar ahaantaana, tiknoolajiyada qaabaynta taraafikada ayaa loo isticmaalaa is-dhexgalka wax soo saarka si loogu soo saaro socodka xogta si habsami leh qalabka falanqaynta, kaas oo si aasaasi ah u xalliya ifafaalaha khasaaraha baakadka ee uu keeno qarax yar isla markaana ka fogaada digniinta aan caadiga ahayn ee ka dhalata luminta taraafikada ee nidaamka falanqaynta.
Iswaafajinta Furaha Baakadda
Ka dib marka la isku waafajiyo oo la garaaco wax kasta oo ku jira qaybta culayska ee baakadka, baakadda ama socodka kalfadhiga ee la xidhiidha ayaa la gudbiyaa oo la soo saaraa ama la tuuraa si loo buuxiyo shuruudaha ka hor-hawlgelinta ee xogta taraafikada gaarka ah.
Xariiqidda Tunnel-ka ee Kaabsalka
Waxay taageertaa wax soo saarka VXLAN, MPLS, GRE, SRV6, FABRICPATCH, GENEVE iyo cinwaanada kale ee baakadaha ee ku jira baakadda xogta asalka ah ka dib marka la jaro.
Soo dejinta Xidhiidhka oo muddo dheer jiray
Sida waafaqsan baahiyaha isticmaalaha, socodka kalfadhiga kasta waa la gudbin karaa oo la soo saari karaa iyadoo loo eegayo tirada baytyada la gudbiyay iyo tirada baakadaha la gudbiyay, socodka kalfadhiga xigana waa la tuuri karaa, si loo daboolo shuruudaha nidaamka falanqaynta dambe ee xaaladaha qaarkood, kuwaas oo u baahan oo keliya inay helaan qayb ka mid ah taraafikada socodka kalfadhiga, yareeyaan cadaadiska falanqaynta taraafikada iyo hagaajinta hufnaanta nidaamka falanqaynta.
Falanqaynta Tirakoobka Taraafikada
Waxay taageertaa tirakoobka qaybaha taraafikada isku xirka gelinta, waxayna soo bandhigi kartaa cabbirka isbeddelka taraafikada, cabbirka taraafikada/saamiga TOPN ee cinwaanka IP-ga, cabbirka taraafikada/saamiga TOPN ee qaybta borotokoolka codsiga, cabbirka taraafikada/saamiga TOPN ee magaca borotokoolka codsiga iyo macluumaadka kalfadhiga taraafikada qaab jaantusyo waqtiga dhabta ah, waxayna bixisaa dhoofinta natiijooyinka tirakoobka faylasha maxalliga ah. Sidaa darteed, isticmaalayaashu si cad ayay u fahmi karaan qaab-dhismeedka isku-dhafka ee taraafikada la ururiyay, waxayna bixin karaan saldhigga taageerada xogta ugu tooska ah ee loogu talagalay habaynta istaraatiijiyadaha taraafikada iyo beddelka shuruudaha ganacsiga.
Aragtida Taraafikada - Falanqaynta Xogta Aasaasiga ah
Qaybta falanqaynta aasaasiga ah ee shaqada ogaanshaha muuqaalka taraafikada waxay muujin kartaa macluumaadka aasaasiga ah ee xogta taraafikada ee la qabtay, sida tirada baakadaha, qaybinta baakadaha unicast/multicast/baahinta, lambarka isku xirka kalfadhiga, qaybinta borotokoolka baakadaha, iyo cabbirka taraafikada la qabtay.
Aragtida Taraafikada - Falanqaynta Qoto dheer ee DPI
Qaybta falanqaynta qoto dheer ee DPI ee shaqada ogaanshaha aragtida taraafikada waxay sameyn kartaa falanqayn qoto dheer oo ku saabsan xogta taraafikada bartilmaameedka ah ee la qabtay iyada oo laga eegayo dhinacyo badan, waxayna soo bandhigi kartaa tirakoob faahfaahsan oo qaab garaafyo iyo jaantusyo ah.
Muuqaalka Taraafikada - Falanqaynta Saamiga Taraafikada
● Falanqaynta saamiga hab-maamuuska lakabka gaadiidka: sida TCP, UDP, ICMP, IGMP, ARP iyo tirakoobyada saamiga baakadaha iyo taraafikada kale iyo bandhigga jaantuska keega
● Falanqaynta saamiga taraafikada IP-ga: sida tirakoobka taraafikada ee ay soo saaraan cinwaanada IP-ga ee kala duwan, darajada taraafikada ee ku salaysan IP-ga TOP N iyo bandhigga jaantuska bar
● Falanqaynta saamiga codsiga DPI: sida HTTP, QQ, FTP iyo borotokoollada kale ee codsiga, tirada baytyada, qaybinta tirakoobka taraafikada isgaarsiinta iyo bandhigga jaantuska keega
Muuqaalka Taraafikada - Falanqaynta Jadwalka Taraafikada
Sida waafaqsan xaaladaha kala duwan ee shaandhaynta, sida IP, dekedda, hab-maamuuska lakabka gaadiidka, hab-maamuuska lakabka codsiga iyo waxyaabaha kale ee la cayimay, xogta taraafikada ee hadda la beegsanayo waa la falanqeyn karaa oo la soo bandhigi karaa iyadoo lagu saleynayo waqtiga muunadda, cabbirka taraafikada iyo isbeddelkana waxaa la weydiin karaa iyadoo la dhaqaajinayo slider-ka waqtiga iyo cabbirka tirada tirakoobka, saxnaantuna waxay gaari kartaa ilaa 1 millisecond.
Aragtida Taraafikada - Falanqaynta Jadwalka Socodka
Sida waafaqsan xaaladaha kala duwan ee shaandhaynta, sida aqoonsiga socodka, IP-ga, dekedda, hab-maamuuska lakabka gaadiidka, hab-maamuuska lakabka codsiga iyo waxyaabaha kale ee la cayimay, xogta taraafikada ee hadda la qabtay ee la beegsanayo waxaa lagu falanqeyn karaa oo lagu tirin karaa iyadoo lagu saleynayo qaabka socodka kalfadhiga, taas oo ah, soo bandhigidda faahfaahsan ee macluumaadka socodka kalfadhiga, oo ay ku jiraan macluumaadka shan-geesoodka ah ee socodka kasta, nooca codsiga sidda, tirada iyo baytka gudbinta baakadka, iyo socodka xogta la xiriirta. Waxayna leedahay bandhig darajo ah oo ku salaysan macluumaadka kor ku xusan. Iyada oo ku saleysan macluumaadkan, isticmaalayaashu si fudud ayay u soo qaadan karaan noocyada taraafikada ee ay danaynayaan, taas oo bixisa saldhigga ugu tooska ah ee isticmaalayaasha si ay u sameeyaan siyaasadaha gudbinta taraafikada.
Aragtida Taraafikada - Falanqaynta Xirmooyinka
Iyada oo ku saleysan shuruudaha kala duwan ee shaandhaynta, sida Aqoonsiga baakadaha, IP-ga, dekedda, hab-maamuuska lakabka gaadiidka, hab-maamuuska lakabka codsiga iyo waxyaabo kale oo la cayimay, xogta taraafikada bartilmaameedka ah ee la qabtay waxaa lagu bixin karaa bandhig falanqayn heer baakad kasta ah, oo ay ku jiraan:
● Falanqaynta waqtiga ururinta baakadaha
● Falanqaynta macluumaadka baakadaha muhiimka ah, sida cabitaan, quus, smac, dmac, borotokool, calan, TTL, dhererka farriinta, dhacdooyinka muhiimka ah
● Falanqaynta waddada gudbinta baakadaha iyo bandhigga dhaqdhaqaaqa, sida: waqtiyada gudbinta, dib u dhaca gudbinta, nooca gudbinta (jid, beddel, dab-damis, dheelitirka culayska, NAT)
● Soo koobidda macluumaadka baakadaha iyo bandhigga qaab-dhismeedka faahfaahsan
● Falanqaynta tirada soo noqnoqda ee ururinta baakadaha
Aragtida Taraafikada - Falanqaynta Khaladaadka Saxda ah
Qaybta falanqaynta cilladaha ee shaqada ogaanshaha aragga taraafikada waxay bixin kartaa boos falanqayn cillad muuqaal oo kala duwan oo loogu talagalay xogta taraafikada ee la qabtay, oo ay ku jiraan:
● Dulmar aan caadi ahayn, sida: natiijooyinka falanqaynta adeegga shabakadda, natiijooyinka falanqaynta dhacdooyinka aan caadiga ahayn, habka shabakadda oo ku salaysan falanqaynta dhaqanka (sida tirada aaladaha marin-haweedka, aaladaha NAT, aaladaha dab-damiska, aaladaha dheelitirka culeyska ee ay gudbiso gudbinta baakadka)
● Falanqaynta guuldarada heerka miiska socodka, sida noocyada dhacdooyinka aan caadiga ahayn (isku xirka oo la diiday/isku xirka oo aan la jawaabin/isku xirka oo aan la gudbin/isku xirka oo aan la gaari karin, iwm.), ● Falanqaynta guuldarada heerka baakadka, sida: nooca dhacdada aan caadiga ahayn (qaladka jeegagga baakadka /TTL 0/ qalad aan la gaari karin / qaladka jeegagga FCS, iwm.), sharraxaad faahfaahsan oo ku saabsan macluumaadka aan caadiga ahayn, iyo faahfaahinta socodka xogta la xiriira
● Falanqaynta cilladaha amniga, sida: nooca dhacdooyinka aan caadiga ahayn (weerarka DDOS/xiritaanka dab-damiska / weerarka ARP/daadka UDP/ DAADKA SYN, iwm.), sharraxaad faahfaahsan oo ku saabsan macluumaadka aan caadiga ahayn, iyo faahfaahinta socodka xogta la xiriirta
● Falanqaynta cilladaha shabakadda, sida: nooca dhacdooyinka aan caadiga ahayn (wareegga wareejinta/wareegga wareegga/wadada aan la gaari karin/kala goynta isku xirka, iwm.), sharraxaad faahfaahsan oo ku saabsan macluumaadka aan caadiga ahayn, iyo faahfaahinta socodka xogta la xiriirta
5-Brokerka Xirmooyinka Shabakadda Mylinking™ iyo Tilmaamaha Beddelka Gudbinta Khadka
| ML-NPB-M2000 Brokerka Xirmooyinka Shabakadda Mylinking™ iyo Beddelka Gudbinta Khadka Tooska ah Tilmaamaha Shaqada | ||||
| Is-dhexgalka shabakadda | Booska moduleka | 4 boos oo BYPASS ah ama module MONITOR ah | ||
| Tirada xiriiriyeyaasha gudaha | Waxay taageertaa ilaalinta ilaa 16 xiriiriye oo indhaha ah oo 1G/10G ah ama 8 xiriiriye oo indhaha ah oo 40G/100G ah. | |||
| Is-dhexgalka kormeerka ee kormeeraha | Waxay taageertaa ugu badnaan is-dhexgalka kormeerka 64*1G/10GE ama is-dhexgalka kormeerka 16*40G/100G. | |||
| Isku-xirka maaraynta ka baxsan kooxda | Dekedda Ethernet-ka 1*10/100/1000M; | |||
| Habka dejinta | Gelinta khadka gudaha | Taageerada | ||
| Hawlgalinta SPAN | Taageerada | |||
| Hawlaha Nidaamka | Qaabka dejinta khadka gudaha | Ilaalinta isku-xidhka socodka gaarka ah | Taageerada | |
| Dhammaan ilaalinta taxanaha socodka | Taageerada | |||
| Isu-dheellitirka culayska | Taageerada | |||
| Ogaanshaha garaaca wadnaha | Taageerada | |||
| Beddelidda BYPASS | Taageerada | |||
| Xannibaadda taraafikada | Taageerada | |||
| Muraayadaha taraafikada | Taageerada | |||
| Wakiilka SSL | Taageerada | |||
| Habka dejinta SPAN | Habaynta taraafikada aasaasiga ah | Ku-darka/ururinta/qaybinta taraafikada | Taageerada | |
| Isu-dheellitirka culayska | Taageerada | |||
| Shaandhaynta taraafikada iyadoo lagu saleynayo aqoonsiga IP/protocol/dekedda 5-tuple | Taageerada | |||
| Calaamadaynta/wax ka beddelka/tirtirka VLAN | Taageerada | |||
| Jadwalka waqtiga | Taageerada | |||
| Xariijimaha duubista tunnelka | Taageerada | |||
| Goynta Xogta | Taageerada | |||
| Aqoonsiga Hab-raaca Tunneling-ka | Taageerada | |||
| Mudnaanta gudbinta baakadaha | Taageerada | |||
| Digniin aan caadi ahayn | Taageerada | |||
| Isdhexgalka kulul ee heeganka | Taageerada | |||
| Cabbirka qarax yar | Taageerada | |||
| Ilaalinta oscillation-ka ee is-dhexgalka | Taageerada | |||
| Soo-saarka Kaydinta Tunnelka | Taageerada | |||
| Joojinta xirmada tunnelka | Taageerada | |||
| Habaynta taraafikada oo horumarsan | Ka gudubka SSL-ka furfurista | Taageerada | ||
| Ku-darka xogta | Taageerada | |||
| Maaskaro Xogta | Taageerada | |||
| Aqoonsiga hab-maamuuska lakabka codsiga | Taageerada | |||
| Kala-goynta gaarka ah | Taageerada | |||
| Qaabaynta socodka | Taageerada | |||
| Iswaafajinta ereyada muhiimka ah | Taageerada | |||
| Xariijimaha duubista tunnelka | Taageerada | |||
| Soo dejinta xiriir muddo dheer ah | Taageerada | |||
| Indha-indheynta qaybaha socodka | Taageerada | |||
| Baadhista iyo la socodka | La socodka waqtiga-dhabta ah | Taageerada | ||
| Weydiinta taraafikada taariikhiga ah | Taageerada | |||
| Qabashada taraafikada | Taageerada | |||
| Ogaanshaha muuqaalka taraafikada | Falanqaynta Aasaasiga ah | Waxay taageertaa soo bandhigida tirakoobka kooban ee ku salaysan macluumaadka aasaasiga ah sida tirada baakadaha, qaybinta nooca baakadaha, tirada isku xirka kalfadhiga, iyo qaybinta hab-maamuuska baakadaha. | ||
| Falanqaynta Qoto dheer ee DPI | Waxay taageertaa falanqaynta saamiga hab-raacyada lakabka gaadiidka, saamiga unicast, baahinta iyo multicast, saamiga taraafikada IP, iyo saamiga codsiyada DPI. Waxay taageertaa falanqaynta iyo soo bandhigidda macluumaadka ku salaysan waqtiga muunadda iyo mugga xogta. Waxay taageertaa falanqaynta xogta iyo tirakoobka ku salaysan durdurrada kalfadhiga. | |||
| Falanqaynta Khaladka Saxda ah | Waxay taageertaa falanqaynta cilladaha iyo deegaanka iyadoo la adeegsanayo xogta taraafikada dhinacyo kala duwan, oo ay ku jiraan: Falanqaynta dhaqanka gudbinta baakadaha, falanqaynta cilladaha heerka socodka xogta, falanqaynta cilladaha heerka baakadka xogta, falanqaynta cilladaha la xiriira amniga, iyo falanqaynta cilladaha la xiriira shabakadda. | |||
| Awoodda farsamaynta | 2.4 QW oo ah | |||
| Maamul | Maareynta Shabakadda CONSOLE | Taageerada | ||
| Maareynta Shabakadda IP/WEB | Taageerada | |||
| Maareynta shabakadda SNMP | Taageerada | |||
| Maareynta shabakadda TELNET/SSH | Taageerada | |||
| Hab-maamuuska SYSLOG | Taageerada | |||
| Xaqiijinta oggolaanshaha dhexe ee RADIUS ama TADACS+ | Taageerada | |||
| Shaqada xaqiijinta isticmaalaha | Aqoonsiga magaca isticmaalaha iyo erayga sirta ah | |||
| Koronto | Danabka korontada ee la qiimeeyay | AC-220V/DC-48V [Ikhtiyaar] | ||
| Soo noqnoqoshada awoodda la qiimeeyay | AC-50HZ | |||
| Hadda la soo galiyay heerka la qiimeeyay | AC-3A / DC-10A | |||
| Awoodda shaqada ee la qiimeeyay | Ugu badnaan 300W | |||
| Deegaanka | Heerkulka hawlgalka | 0-50℃ | ||
| Heerkulka kaydinta | -20-70℃ | |||
| Qoyaanka hawlgalka | 10%-95%, aan isku milmin | |||
| Habaynta Isticmaalaha | Qaabeynta Konsole-ka | Is-dhexgalka RS232, 115200, 8, N, 1 | ||
| Xaqiijinta erayga sirta ah | Staageero | |||
| Cabbirka Rakaabka | Meel rakcad (U) | 2U 444mm*88mm*670mm | ||
6-Brokerka Xirmooyinka Shabakadda Mylinking™ iyo Codsiga Beddelka Inline Bypass
6.1TheRisku mid ahInline SamnigaEqalab (IPS / FW)
Kuwa soo socda waa IPS caadi ah (Nidaamka Ka Hortagga Faragelinta), qaabka dejinta FW (Firewall), IPS / FW waxaa loo diraa si taxane ah qalabka shabakadda (routers, switches, iwm.) inta u dhaxaysa taraafikada iyada oo loo marayo hirgelinta hubinta amniga, sida waafaqsan siyaasadda amniga ee u dhiganta si loo go'aamiyo sii deynta ama xannibaadda taraafikada u dhiganta, si loo gaaro saameynta difaaca amniga.
Kuwa soo socda waa IPS caadi ah (Nidaamka Ka Hortagga Faragelinta), qaabka dejinta FW (Firewall), IPS / FW waxaa loo diraa si taxane ah qalabka shabakadda (routers, switches, iwm.) inta u dhaxaysa taraafikada iyada oo loo marayo hirgelinta hubinta amniga, sida waafaqsan siyaasadda amniga ee u dhiganta si loo go'aamiyo sii deynta ama xannibaadda taraafikada u dhiganta, si loo gaaro saameynta difaaca amniga.
6.2 Ilaalinta Qalabka Taxanaha Isku-xirka Gudaha
Broker-ka Xirmooyinka Shabakadda Mylinking™ iyo Wareegga Wareegga ee Inline waxaa loo qaybiyaa taxane u dhexeeya aaladaha shabakadda (routers-ka, furayaasha, iwm.), socodka xogta ee u dhexeeya aaladaha shabakadda mar dambe si toos ah uma horseedi doono IPS / FW, "Smart Inline Bypass Switch" ilaa IPS / FW, marka IPS / FW ay sabab u tahay xad-dhaafka, shilka, cusbooneysiinta software-ka, cusbooneysiinta siyaasadda iyo xaaladaha kale ee fashilka, "Smart Inline Bypass Switch" iyada oo loo marayo ogaanshaha fariinta garaaca wadnaha ee caqliga leh Shaqada helitaanka waqtiga ku habboon, sidaas darteedna ka bood qalabka cilladaysan, iyada oo aan la carqaladeyn mabda'a shabakadda, qalabka shabakadda degdegga ah ee si toos ah ugu xiran si loo ilaaliyo shabakadda isgaarsiinta caadiga ah; marka IPS / FW uu ku guuldareysto soo kabashada, laakiin sidoo kale iyada oo loo marayo baakadaha garaaca wadnaha ee caqliga leh Ogaanshaha ogaanshaha waqtiga ku habboon ee shaqada, xiriirka asalka ah si loo soo celiyo amniga hubinta amniga shabakadda ganacsiga.
Brokerka Mylinking™ Network Packet iyo Inline Bypass Switch wuxuu leeyahay shaqo awood leh oo lagu ogaanayo garaaca wadnaha oo caqli badan, isticmaaluhu wuxuu habayn karaa kala-goynta garaaca wadnaha iyo tirada ugu badan ee isku dayga, iyada oo loo marayo farriin garaaca wadnaha oo gaar ah oo ku taal IPS / FW si loogu sameeyo baaritaan caafimaad, sida in fariinta hubinta garaaca wadnaha loo diro dekedda IPS / FW ee kor/hoos u socota, ka dibna laga helo dekedda kor/hoos u socota ee IPS / FW, oo la xukumo in IPS / FW ay si caadi ah u shaqaynayso iyadoo la dirayo oo la helayo fariinta garaaca wadnaha.
6.3 Khadka Socodka Siyaasadda "SpecFlow"AmnigaIlaalinta Taxanaha
Marka qalabka shabakadda amniga uu u baahan yahay oo keliya inuu wax ka qabto taraafikada gaarka ah ee ilaalinta amniga taxanaha ah, iyada oo loo marayo Broker Mylinking™ Network Packet Broker iyo shaqada habka loo yaqaan Inline Bypass Switch traffic per-process, iyada oo loo marayo siyaasadda baaritaanka taraafikada si loogu xiro qalabka amniga ee khadka tooska ah "Concerned" taraafikada ayaa si toos ah loogu celiyaa xiriirka shabakadda, qaybta "taraafikada ee walaacsan" waxay u janjeertaa qalabka badbaadada ee khadka tooska ah si loo sameeyo hubinta badbaadada. Tani ma ilaalin doonto oo keliya codsiga caadiga ah ee shaqada ogaanshaha badbaadada ee qalabka badbaadada, laakiin sidoo kale waxay yareyn doontaa socodka aan waxtarka lahayn ee qalabka badbaadada si loola tacaalo cadaadiska; isla mar ahaantaana, "Smart Inline Bypass Switch" wuxuu ogaan karaa xaaladda shaqada ee qalabka badbaadada waqtiga dhabta ah. Qalabka ammaanku si aan caadi ahayn ayuu u dhaafaa taraafikada xogta si toos ah si looga fogaado carqaladaynta adeegga shabakadda.
Brokerka Mylinking™ Network Packet iyo Inline Bypass Switch waxay aqoonsan karaan taraafikada iyadoo lagu saleynayo aqoonsiga cinwaanka lakabka L2-L4, sida calaamadda VLAN, cinwaanka MAC ee isha / meesha loo socdo, cinwaanka IP-ga isha, nooca baakadaha IP, dekedda borotokoolka ee lakabka gaadiidka, calaamadda furaha cinwaanka borotokoolka, iyo wixii la mid ah. Xaalado kala duwan oo isku-dhafan oo dabacsan ayaa si dabacsan loo qeexi karaa si loo qeexo noocyada taraafikada gaarka ah ee xiisaha u leh qalab amni oo gaar ah waxaana si ballaaran loogu isticmaali karaa dejinta aaladaha hubinta amniga gaarka ah (RDP, SSH, hubinta xogta, iwm.).
6.4Load dheellitiranAmniga GudahaIlaalinta Taxanaha
Brokerka Xirmooyinka Shabakadda Mylinking™ iyo Wareegga Wareegga ee Inline waxaa loo qaybiyaa taxane u dhexeeya aaladaha shabakadda (routers-ka, furayaasha, iwm.). Marka hal waxqabad oo farsamayn ah oo IPS / FW ah uusan ku filnayn inuu la qabsado taraafikada ugu sarreysa ee isku xirka shabakadda, Shaqada dheelitirka culeyska taraafikada ee ilaaliyaha, "isku-xidhka" taraafikada isku xirka shabakadda ee IPS / FW, waxay si wax ku ool ah u yareyn kartaa cadaadiska farsamaynta hal IPS / FW, waxay hagaajin kartaa waxqabadka farsamaynta guud si loo daboolo baaxadda sare ee jawiga dejinta Sheegashada.
Brokerka Xirmooyinka Shabakadda Mylinking™ iyo Inline Bypass Switch wuxuu leeyahay shaqo dheelitir culays oo awood leh, sida ku cad calaamadda VLAN ee qaab-dhismeedka, macluumaadka MAC, macluumaadka IP, lambarka dekedda, borotokoolka iyo macluumaad kale oo ku saabsan qaybinta dheelitirka culayska Hash ee taraafikada si loo hubiyo in IPS / FW kasta uu helo socodka xogta.
6.5Taxane badanQalabka Gudaha FhooseTcunaqabataynPwareeg(Isbeddel)JireedXidhiidh Taxane ah oo ku socdaMacquul ahIsku xidhka Isbarbardhigga ah)
Xiriiriyeyaasha muhiimka ah qaarkood (sida goobaha internetka, isku xirka is-weydaarsiga aagga server-ka) goobta badanaa waxay sabab u tahay baahiyaha sifooyinka amniga iyo dejinta qalab badan oo tijaabinta amniga khadka tooska ah (sida dab-damis, qalabka weerarka ka hortagga DDOS, dab-damiska codsiga WEB, Qalabka ka hortagga faragelinta, iwm.), qalab badan oo lagu ogaanayo amniga isku mar taxane ah oo ku yaal xiriirka si loo kordhiyo isku xirka hal dhibic oo guuldarro ah, taasoo yareyneysa isku halaynta guud ee shabakadda. Iyo qalabka amniga ee kor ku xusan ee internetka lagu rakibayo, casriyeynta qalabka, beddelka qalabka iyo hawlgallada kale, waxay sababi doontaa in shabakadu ay muddo dheer hakad gasho adeegga iyo tallaabo weyn oo mashruuc ah si loo dhammaystiro hirgelinta guusha leh ee mashaariicda noocaas ah.
Iyada oo la adeegsanayo Mylinking™ Network Packet Broker iyo Inline Bypass Switch si midaysan, habka dejinta ee aaladaha amniga badan ee ku xiran taxanaha isku xidhka waxaa laga beddeli karaa "Physical Serial Connection Mode" ilaa "Physical Parallel Serial Connection Mode". Tani waxay si wax ku ool ah u yareyneysaa ilaha hal dhibic oo guuldarro ah oo ku jirta isku xidhka taxanaha ah waxayna hagaajineysaa isku hallaynta isku xidhka. Isla mar ahaantaana, Mylinking™ Network Packet Broker iyo Inline Bypass Switch waxay hagi karaan taraafikada isku xidhka marka loo baahdo, iyagoo gaaraya isla saameynta habaynta amniga taraafikada sida qaabka isku xidhka taxanaha asalka ah.
In ka badan hal qalab oo Inline Security ah isla waqtigaas jaantuska dejinta taxanaha ah:
Brokerka Xirmooyinka Shabakadda Mylinking™ iyo Jaantuska Hawlgalinta Beddelka Khadka Tooska ah:
(Isku xirka Taxanaha ee Pysical una beddel Xiriirka Tooska ah ee Macquulka ah)
6.6Iyada oo ku saleysanDSiyaasadda isku-dhafan eeTkhadka tooska ahSamnigaDdoorashadaPwareeg
Mylinking™ Network Packet Broker iyo Inline Bypass Switch, oo ah xaalad kale oo codsi oo horumarsan waxay ku salaysan tahay siyaasadda firfircoon ee codsiyada ilaalinta amniga jiidista taraafikada, dejinta jidka sida hoos ku cad:
Qaado qalabka tijaabada amniga ee "ilaalinta weerarka iyo ogaanshaha ee ka hortagga DDoS", tusaale ahaan, iyada oo loo marayo rakibidda hore ee "Switch-ka Smart Bypass" ka dibna qalabka ilaalinta ka hortagga DDOS ka dibna lagu xiro "Switch-ka Smart Bypass", ee caadiga ah "Switch-ka Smart Bypass" ilaa xaddiga buuxa ee gudbinta xawaaraha taraafikada isla waqtigaas oo ah wax soo saarka muraayadda socodka ee "qalabka ilaalinta weerarka ka hortagga DDOS", marka la ogaado IP-ga server-ka (ama qaybta shabakadda IP) ka dib weerarka, "Qalabka ilaalinta weerarka ka hortagga DDOS" wuxuu soo saari doonaa xeerarka isbarbardhigga socodka taraafikada ee bartilmaameedka ah wuxuuna u diri doonaa "Switch-ka Smart Bypass" iyada oo loo marayo is-dhexgalka bixinta siyaasadda firfircoon. "Switch-ka Bypass" wuxuu cusbooneysiin karaa "dhaqdhaqaaqa jiidista taraafikada" ka dib marka la helo xeerarka siyaasadda firfircoon ee Xeerka "iyo isla markiiba" xeerka ku dhufo taraafikada server-ka weerarka "jiidashada" ilaalinta weerarka ka hortagga DDoS iyo ogaanshaha "qalabka loogu talagalay farsamaynta, si waxtar leh ka dib socodka weerarka ka dibna dib loogu duriyo shabakadda.
Nidaamka codsiga ee ku salaysan "Smart Bypass Switch" ayaa ka fudud in la hirgeliyo marka loo eego habka caadiga ah ee BGP ee lagu duro ama nidaamka kale ee jiidista taraafikada, deegaankuna kuma tiirsana shabakadda oo kalsoonidiisuna way sarreysaa.
"Smart Bypass Switch" waxay leedahay sifooyinka soo socda si ay u taageeraan ilaalinta ogaanshaha amniga siyaasadda firfircoon:
1. "Switch Smart Bypass Switch" si loo bixiyo wax ka baxsan xeerarka ku salaysan WEBSERIVCE interface, is-dhexgal fudud oo lala yeesho aaladaha amniga ee dhinac saddexaad.
2. "Switch Smart Bypass Switch" oo ku salaysan qalabka saafiga ah ee ASIC chip oo gudbinaya ilaa 100Gbps xirmooyinka xawaaraha siligga iyada oo aan la xannibin gudbinta badhanka, iyo "maktabadda qaanuunka dhaqdhaqaaqa jiidista taraafikada" iyada oo aan loo eegin tirada.
3. "Smart Bypass Switch" oo ku dhex jira shaqo xirfadeed oo BYPASS ah, xitaa haddii ilaaliyaha laftiisu uu ku guuldareysto, sidoo kale uu isla markiiba ka gudbi karo xiriirkii taxanaha ahaa ee asalka ahaa, saameyn kuma yeelanayso xiriirkii asalka ahaa ee isgaarsiinta caadiga ah.
6.7Muraayadaha Taraafikada ee Inline SerialAmniga ka baxsan band-ka (Inline + SPAN)
Brokerka Mylinking™ Network Packet iyo Inline Bypass Switch waxaa badanaa lagu rakibaa shabakadda IT-ga ee macaamiisha ama shabakadda daruuraha si loo siiyo ilaalin khadka ah qalabka WAF/IPS iyo xiriirka asalka ah. Isticmaalayaashu waxay sidoo kale yeelan karaan shuruudo dheeraad ah oo loogu talagalay tijaabinta, xaqiijinta, ama dejinta aaladaha la socodka ee ka gudubka, taasoo lagama maarmaan u ah helitaanka xogta taraafikada ee ku jirta xiriirkan.
Sidaa darteed, iyadoo la adeegsanayo shaqada muraayadda taraafikada ee Mylinking™ Network Packet Broker iyo Inline Bypass Switch, taraafikada xiriirka taxanaha ah ee gudaha waxaa laga soo qaadi karaa dekedda kormeerka, sida ku cad sawirka soo socda:
Jaantuska hoose wuxuu muujinayaa xaalad codsi oo dheereysa oo ku saabsan taraafikada isku xirka khadka iyo taraafikada dekedda ee muraayadda leh. Tani waxay u oggolaanaysaa ilaalinta taraafikada isku xirka khadka iyada oo aan saameyn ku yeelan taraafikada dekedda ee muraayadda leh. Nidaamka falanqaynta IDS wuxuu isku mar heli karaa taraafikada isku xirka khadka iyo taraafikada dekedda ee muraayadda leh. Habka dejinta waxaa lagu muujiyay jaantuska hoose:
6.8Ka-saarista Xogta/BaakaddaCodsiga
Sida ku cad qaab-dhismeedka hirgelinta codsiga ee kor ku xusan, si loo hubiyo hufnaanta ururinta xogta asalka ah ee ku teedsan isku xirka oo dhan, qaar ka mid ah xirmooyinka xogta isku midka ah ayaa laga yaabaa in lagu ururiyo dhowr jeer hal waddo gudaheed. Tani waxay horseedaa koror digniino been abuur ah iyo dib-u-gudbinta nidaamka dambe, taasoo kordhinaysa kharashka waxqabadka ee nidaamka falanqaynta waxayna saamaysaa saxnaanta iyo waxtarka falanqaynta. Iyada oo ku saleysan xalka, marka hore, baakadaha xogta ee nuqulka ah kuwaas oo lagu soo koobay qanjidhada qabashada ee kala duwan. Hal xirmo oo xog ah ayaa loo gudbiyaa nidaamka falanqaynta waxqabadka shabakadda NPM ee gadaal iyo nidaamka falanqaynta waxqabadka codsiga APM, taasoo badbaadinaysa waxqabadka nidaamka falanqaynta iyo hagaajinta hufnaanta iyo saxnaanta falanqaynta.
6.9Xogta/XirmoCalaamadda VLANingCodsiga
Deegaanka shabakadda ee lagu muujiyay jaantuska kore, xalka waxaa loo isticmaalaa in lagu calaamadeeyo xogta cayriin ee calaamadda ka timid aaladaha shabakadda ee kala duwan iyo qanjidhada isku xirka. Marka taraafikada aan caadiga ahayn ama xirmooyinka xogta ay ka dhacaan shabakadda, qalabka falanqaynta dambe wuxuu si dhakhso leh oo sax ah u heli karaa isha xogta aan caadiga ahayn isagoo dib u raacaya iyadoo lagu saleynayo calaamadaha xogta.
6.10 Taraafikada ShabakaddaJadwalka MidaysanCodsiga
Deegaanka shabakadda ee lagu muujiyay jaantuska kore, xog badan oo isku xirka isha 10GE, 25GE, 40GE iyo 100GE ah ayaa si buuxda loogu gelinayaa Broker-ka Shabakadda Mylinking™ iyo Beddelka Inline Bypass iyadoo la adeegsanayo kala-goynta indhaha ama muraayadda dekedda. Kadib, kala-goynta iyo kala-goynta taraafikada waxaa loo isticmaalaa in lagu soo saaro taraafikada xogta adeegga ee kala duwan aaladaha kala duwan ee la socodka shabakadda ee ka baxsan kooxda iyo nidaamka amniga. Marka cilladaha baakadaha shabakadda ama isbeddellada aan caadiga ahayn ee taraafikada ay u baahdaan faragelin gacan-ku-hayn ah, qabashada baakadka waqtiga-dhabta ah iyo falanqaynta baakadaha xogta asalka ah ayaa isla markiiba la samayn karaa si looga caawiyo isticmaalayaasha inay si dhakhso ah u falanqeeyaan oo ay u helaan cilladda.
6.11ShabakadFalanqaynta Muuqaalka Xogta TaraafikadaCodsiga
Waxay soo bandhigi kartaa xog kasta oo la ogaado oo lagu qabto qaab dhinacyo badan leh iyo aragtiyo badan leh iyada oo loo marayo is-dhexgal sawireed iyo qoraal oo saaxiibtinimo leh, oo ay ku jiraan qaab-dhismeedka isku-dhafka taraafikada, qaybinta hab-raaca codsiga, qaybinta taraafikada ee dhammaan qanjidhada shabakadda, waddada gudbinta xogta, ogaanshaha dhacdooyinka aan caadiga ahayn, goobta saxda ah ee cilladaha qaybta shabakadda/isku xirka, xaaladda isdhexgalka farriimaha, isbeddelka horumarinta taraafikada iyo dhinacyo kale oo loogu talagalay la socodka iyo falanqaynta, si loo dhiso goob ururin xog oo dhammaystiran, la arki karo oo la xakamayn karo oo loogu talagalay shabakadaha ganacsiga.
Qaybaha alaabta
-
Mylinking™ Shabakadda Baakadaha Dalaal (NPB) ML-NPB-4810P
-
Mylinking™ Shabakadda Baakadaha Dalaal (NPB) ML-NPB-54...
-
Mylinking™ Shabakadda Baakadaha Dalaal (NPB) ML-NPB-3210+
-
Mylinking™ Shabakadda Baakadaha Dalaal (NPB) ML-NPB-6410+
-
Mylinking™ Shabakadda Dalaal Baakad (NPB) ML-NPB-3210L
-
Mylinking™ Shabakadda Baakadaha Dalaal (NPB) ML-NPB-2410
