Shabakadda Bypass TAP ama Shabakadda Bypass Switch waxay siisaa Xirmooyinka garaaca wadnaha ee Qalabka Amniga Khadka

TheShabakadda Gudbinta Taabo, sidoo kale loo yaqaan "Isku-xidhka Wareega Wareega", waxay ku siinaysaa awoodda lagu maareeyo helitaanka iyo isku halaynta qalabkaaga khadka (IPS, WAF, FW/firewalls) wakhti kasta iyada oo aan la joojin wakhtiga shabakad ama saameyn ku yeelanaysa helitaanka ganacsiga ee dayactirka ama hagaajinta. Qayb muhiim ah oo ka mid ah xeeladaha amniga IT

Shabakadda Bypass Tap (Network Bypass Switch) ayaa joogto ahXirmooyinka garaaca wadnahain loo diro aQalabka Amniga Khadka.Garaacyada wadnuhu waxay muujinayaan shaqaynta Qalabka Amniga khadka: garaaca joogtada ahi waxay ka dhigan tahayKa gudub TAPsi fiican ayuu u shaqaynayaa.Haddii garaaca aan lagu soo celinKa gudub TAPTAP waxay si otomaatig ah u dhaaftaa qalabka si ay ugu ogolaato baakadaha in la soo diro, iyada oo aan loo eegin inta taraafiggu sareeyo.Waxa kale oo ay awood u leedahay in ay ogaato heerka qalabka, markaa marka uu ku soo noqdo online, tan waxaa ogaanaya TAP oo taraafikada ayaa mar kale lagu hagayaa qalabka.

Shabakadda Bypass Tap Tap "Maaraynta Khadka" waxay kuu oggolaaneysaa inaad ku dhejiso qalab cusub oo la geeyo, maareyso cusbooneysiinta, dhejinta balastarrada, sameyso dayactirka ama cilad-saarka oo aad ansixiso meel ka baxsan band, adigoon saameyn ku yeelan xiriirka hadda jira.

Iyadoo khibradeena qani ah iyo adeegyada tixgalinta leh, waxaa naloo aqoonsaday iibiye la isku halayn karo oo loogu talagalay iibsadayaal badan oo caalami ah oo loogu talagalay Network Bypass TAP ama Network Bypass Switch Waxay siisaa baakadaha garaaca wadnaha ee Qalabka Amniga Khadka ah, Shirkadeena waxay si hammuun u eegaysaa samaynta ganacsi waqti dheer ah oo waxtar leh. wada-shaqeynta macaamiisha iyo ganacsatada adduunka oo dhan.
Waayo-aragnimadayada qani ah iyo adeegyadayada tixgelinta leh, waxaa naloo aqoonsaday iibiye la isku halayn karo oo iibsadayaal badan oo caalami ahLa dhaafo TAP Network Bypass Switch, Xirmooyinka garaaca wadnaha, Qalabka Amniga Khadka, Shabakadda Gudbinta Taabo, Badeecadayada waxaa inta badan loo dhoofiyaa Koonfur-bari Aasiya, Bariga Dhexe, Waqooyiga Ameerika iyo Yurub.Tayadayadu waa hubaal.Haddii aad xiisaynayso mid ka mid ah alaabtayada ama aad jeceshahay inaad ka hadasho dalabka gaarka ah, waa inaad xor u tahay inaad nala soo xidhiidho.Waxa aanu rajaynaynaa in aanu mustaqbalka dhaw la samayno xidhiidh ganacsi oo guulaysta macaamiisha cusub ee aduunka.

1- Dulmar

Adigoo geynaya Mylinking™ Smart Bypass Switch:

• Isticmaalayaashu waxay si dabacsanaan ah u rakibi karaan / uga saari karaan qalabka amniga mana saameyn doonaan shabakada hadda jirta mana joojin doonaan;
• Mylinking™ Network Tap Bypass Beddel oo leh shaqo ogaansho caafimaad oo caqli gal ah si loola socdo waqtiga dhabta ah ee xaaladda shaqada caadiga ah ee aaladda amniga, marka aaladda serial Security ay shaqeyso marka laga reebo, ilaalintu waxay si toos ah u dhaafi doontaa si ay u ilaaliso isgaarsiinta caadiga ah;
• Tiknooloojiyada ilaalinta taraafikada ee xulashada ah ayaa loo isticmaali karaa in la geeyo qalab gaar ah oo lagu nadiifiyo taraafikada, tignoolajiyada sirta ah ee ku salaysan qalabka hanti dhawrka.Si wax ku ool ah u ful ilaalinta gelitaanka taxan ee nooca taraafikada gaarka ah, ka dajinta cadaadiska maaraynta socodka ee aaladda taxanaha ah;
• Tiknoolajiyada Ilaalinta Taraafiga ee Isku dheeli tiran ee Load waxa loo isticmaali karaa geynta isku dhafan ee aaladaha taxanaha ah ee sugan si loo daboolo baahida amniga taxanaha ah ee jawiga bandwidth-ka sareeyo.

Horumarka degdega ah ee internetka, khatarta amniga macluumaadka shabakada ayaa noqonaysa mid aad u daran, sidaas darteed noocyo kala duwan oo codsiyada ilaalinta amniga macluumaadka ayaa si aad ah loo isticmaalaa.Haddi ay tahay qalabka xakamaynta gelitaanka dhaqameed (firewall) ama nooc cusub oo ilaalin horumarsan macnaheedu waa sida nidaamka ka hortagga faragelinta (IPS), Nidaamka Maareynta khatarta midaysan (UTM), Nidaamka ka hortagga adeegga diidmada (Anti-DDoS), Ka-hortagga- span Gateway, Midaysan DPI Identification and Control System, iyo qalabyo badan oo amniga ah ayaa si taxane ah loogu daad gureeyay qanjidhada furaha ee shabakada, hirgalinta siyaasada amniga xogta ee u dhiganta si loo aqoonsado loogana tacaalo taraafikada sharciga / sharci darrada ah.Isla mar ahaantaana, shabakada kombuyuutarku waxay dhalin doontaa dib u dhac weyn oo shabakad ah ama xitaa carqaladaynta shabakada haddii ay dhacdo fashilka, dayactirka, cusboonaysiinta, beddelka qalabka iyo wixii la mid ah jawiga codsiga shabakada wax soo saarka ee la isku halleyn karo, isticmaalayaashu ma istaagi karaan.

2- Shabakadda Tap Bypass Beddel Hababka Sare iyo Farsamada

Habka Ilaalinta Mylinking™ "SpecFlow" iyo "FullLink" Habka Ilaalinta Farsamada
Mylinking™ Tiknoolajiyada Ilaalinta Degdegga ah ee Bedelashada Degdegga ah
Mylinking™ "LinkSafeSwitch" Technology
Mylinking™ "WebService" Istaraatiijiyada Dhaqdhaqaaqa Gudbinta/Tignoolajiyada Arrinta
Farriinta Farriinta garaaca wadnaha ee caqliga leh ee Mylinking™
Farimaha Farriimaha garaaca Wadnaha ee lagu qeexi karo Mylinking™
Mylinking™ Tiknoolajiyada Isku-dheellitirka Culayska Isku-xidhaha Badan
Mylinking™ Farsamada Qaybinta Gaadiidka Caqliga leh
Tignoolajiyada Isku dheeli tirka culeyska firfircoon ee Mylinking™
Mylinking™ Farsamada Maareynta Fog (HTTP/WEB, TELNET/SSH, "EasyConfig/AdvanceConfig" sifada)

3- Tubada Shabakadda Hagaha Habaynta Wareegtada

BYPASSAfyare Dekadda Ilaalinta:
Boodhkan waxa lagu gelin karaa moduleka ilaalinta BYPASS oo leh xawli/nambar dekedeed oo kala duwan.Beddelida noocyada kala duwan ee cutubyada, waxay taageeri kartaa ilaalinta BYPASS ee isku xidhka badan ee 10G/40G/100G.

LA SOCOSlot Module Port;
Boodhkan waxa la gelin karaa moduleka dekedda MONITOR oo leh xawli/dekedo kala duwan.Waxay taageeri kartaa isku xirka 10G/40G/100G ee isku xirka khadka tooska ah ee taxanaha ah ee daabulida iyadoo bedelaysa noocyo kala duwan.

Xeerarka Xulashada Module
Iyada oo ku saleysan isku xirnaanta kala duwan ee la diray iyo la socodka shuruudaha geynta qalabka, waxaad si dabacsanaan kartaa u dooran kartaa qaabeynta cutubyada kala duwan si aad u daboosho baahiyaha deegaankaaga dhabta ah;fadlan raac xeerarka soo socda marka aad dooranayso:
1. Qaybaha chassis waa qasab waana inaad doorataa qaybaha chassis ka hor inta aanad dooran qaybo kale.Isla mar ahaantaana, fadlan dooro hababka kala duwan ee korontada (AC/DC) iyadoo loo eegayo baahidaada.
2. Mashiinka oo dhan waxa uu taageerayaa ilaa 2 modules BYPASS iyo booska 1 MONITOR module;ma dooran kartid in ka badan tirada boosaska si loo habeeyo.Iyada oo ku saleysan isku dhafka tirada boosaska iyo moodelka moduleka, qalabku wuxuu taageeri karaa ilaa afar ilaalinta isku xirka 10GE;ama waxay taageeri kartaa ilaa afar xiriiriye 40GE;ama waxay taageeri kartaa ilaa hal xiriiriye 100GE.
3. Habka moduleka "BYP-MOD-L1CG" waxa kaliya oo la gelin karaa SLOT1 si uu si sax ah u shaqeeyo.
4. Nooca moduleka "BYP-MOD-XXX" kaliya waxaa la gelin karaa booska moduleka BYPASS;Nooca moduleka "MON-MOD-XXX" waxa kaliya oo la gelin karaa booska MONITOR ee hawlgalka caadiga ah.

4- Shabakadda TAP Bypass Specifications

5- Shabakadda TAP Beddelka Codsiga (sida soo socota)

Kuwa soo socdaa waa IPS caadiga ah (Nidaamka Kahortagga Faragelinta), FW (Firewall) habka geynta, IPS / FW waxaa la geeyaa si taxane ah qalabka shabakada (routers, furayaasha, iwm.) inta u dhaxaysa taraafikada iyada oo loo marayo hirgelinta hubinta amniga, sida waafaqsan siyaasadda amniga ee u dhiganta si loo go'aamiyo sii deynta ama xannibaadda taraafikada u dhiganta, si loo gaaro saameynta difaaca amniga.

Isla mar ahaantaana, waxaan u eegi karnaa IPS / FW sida geynta taxanaha ah ee qalabka, sida caadiga ah waxaa la geeyaa goobta muhiimka ah ee shabakadda ganacsiga si loo fuliyo amniga taxanaha, isku halaynta aaladaha ku xiran waxay si toos ah u saameeyaan guud ahaan helitaanka shabakadda ganacsiga.Mar alla markii aaladaha taxanaha ah ay bataan, shil, cusboonaysiin software, cusboonaysiinta siyaasada, iwm., dhammaan helitaanka shabakada ganacsiga ayaa si weyn loo saameyn doonaa.Halkaa marka ay marayso, waxaan kaliya iyada oo loo marayo gooynta shabakadda, jumper-ka gudubka jireed wuxuu ka dhigi karaa shabakada in dib loo soo celiyo, si dhab ah u saameeya kalsoonida shabakada.IPS / FW iyo aaladaha kale ee taxanaha ah hal dhinac waxay wanaajiyaan dejinta amniga shabakada ganacsiga, dhanka kale waxay sidoo kale yaraynaysaa isku halaynta shabakadaha ganacsiga, kordhinta halista shabakada lama heli karo.

5.2 Ilaalinta Qalabka Taxanaha Inline Link

Mylinking™ "Bypass Switch" waxaa loo dhex daadiyaa si taxane ah inta u dhaxaysa aaladaha shabakadaha (router-ka, furayaasha, iwm.), iyo socodka xogta ee aaladaha shabakadu si toos ah uma keento IPS / FW, "Bypass Switch" ilaa IPS / FW, marka IPS / FW sababtoo ah culeyska xad-dhaafka ah, shilalka, cusbooneysiinta software-ka, cusboonaysiinta siyaasadda iyo xaaladaha kale ee guuldarada, "Bypass Switch" iyada oo loo marayo ogaanshaha fariinta garaaca wadnaha ee caqliga leh Shaqada helitaanka waqtigeeda, oo sidaas awgeed ka boodo qalabka khaldan, iyada oo aan la joojin dhismaha shabakadda. qalabka shabakada degdega ah ee si toos ah ugu xiran si loo ilaaliyo shabakada isgaarsiinta caadiga ah;marka IPS / FW guuldarada soo kabashada, laakiin sidoo kale iyada oo loo marayo xirmooyinka garaaca wadnaha caqli-gal ah Ogaanshaha ogaanshaha waqtiga ee shaqada, isku xirka asalka ah si loo soo celiyo amniga hubinta amniga shabakada ganacsiga.

Mylinking™ "Bypass Switch" waxay leedahay shaqo ogaanshaha fariinta garaaca wadnaha oo caqli badan, isticmaaluhu wuxuu habeyn karaa inta u dhaxaysa garaaca wadnaha iyo tirada ugu badan ee isku dayga, iyada oo loo marayo fariinta garaaca wadnaha ee caadada u ah IPS / FW ee baaritaanka caafimaadka, sida soo dir fariinta hubinta garaaca wadnaha dekedda kor/hoose ee IPS/FW, ka dibna ka hel dekedda sare/hoose ee IPS/FW, oo xukun in IPS/FW ay si caadi ah u shaqeyso adoo diraya oo helaya fariinta garaaca wadnaha.

5.3 "SpecFlow" Siyaasadda Socodka Khadka Tooska ah Ilaalinta Taxanaha

Marka aaladda shabakadda amnigu kaliya u baahan tahay inay wax ka qabato taraafikada gaarka ah ee ilaalinta amniga ee taxanaha ah, iyada oo loo marayo Mylinking ™ "Bypass Switch" taraafikada shaqa-baahiye kasta, iyada oo loo marayo istaraatiijiyada baarista taraafikada si loogu xiro aaladda amniga "Walaaca" taraafikada si toos ah ayaa loo soo celiyaa isku xirka shabakada, iyo" qaybta taraafig ee ay khusayso" waxay u janjeertaa aaladda badbaadada in-line si loo sameeyo hubinta badbaadada.Tani kaliya ma ilaalin doonto codsiga caadiga ah ee shaqada ogaanshaha badbaadada ee qalabka badbaadada, laakiin sidoo kale waxay yaraynaysaa socodka aan fiicnayn ee qalabka badbaadada si loola tacaalo cadaadiska;isla mar ahaantaana, "Bypass Switch" wuxuu ogaan karaa xaalada shaqada ee qalabka badbaadada wakhtiga dhabta ah.Qalabka badbaadada wuxuu u shaqeeyaa si aan caadi ahayn wuxuu si toos ah u dhaafaa taraafikada xogta si looga fogaado carqaladeynta adeegga shabakadda.

Mylinking™ Traffic Bypass Protector wuxuu aqoonsan karaa taraafikada iyadoo lagu salaynayo aqoonsiga madaxa lakabka L2-L4, sida VLAN sumadda, isha/cinwaanka MAC, isha IP-ga, nooca xirmada IP-ga, dekeda borotokoolka lakabka gaadiidka, sumadda madaxa borotokoolka, iyo wixii la mid ah on.Xaalado kala duwan oo iswaafaqaya isku darka dabacsan ayaa loo qeexi karaa si dabacsanaan leh si loo qeexo noocyada taraafikada gaarka ah ee danaynaya aalad gaar ah oo si weyn loogu isticmaali karo geynta aaladaha hanti-dhawrka amniga ee gaarka ah (RDP, SSH, xisaabinta xogta, iwm.) .

5.4 Kordhi Ilaalinta Taxanaha oo dheellitiran

Mylinking™ "Bypass Switch" waxa loo kala diray si taxane ah inta u dhaxaysa aaladaha shabakadaha (router, furayaasha, iwm.).Marka hal waxqabad IPS / FW uusan ku filneyn inuu la qabsado isku xirka isku xirka gaadiidka ugu sarreeya, Shaqada isku dheelitirka culeyska taraafikada ee ilaaliyaha, "isku-xidhka" ee isku xirka isku xirka kooxeed IPS / FW badan, waxay si wax ku ool ah u yareyn kartaa hal IPS / Cadaadiska habaynta FW, wanaajiso waxqabadka guud ee habaynta si loo daboolo baaxadda baaxadda sare ee deegaanka geynta Sheegashada.

Mylinking™ "Bypass Switch" waxay leedahay hawl dheellitirka culeyska xooggan, marka loo eego summada VLAN-ga, macluumaadka MAC, macluumaadka IP-ga, lambarka dekedda, borotokoolka iyo macluumaadka kale ee ku saabsan dheellitirka culeyska Hash ee qaybinta taraafikada si loo hubiyo in IPS / FW kasta uu helay xogta. socodka daacadnimada Kulanka.

5.5 Taxane badan oo Taxane ah Qalabka Dhexdhexaadinta Socodka Ilaalinta (Beddel Xidhiidhka Taxanaha ah ee Isku-xidhka Bararka)
Qaar ka mid ah isku xirka muhiimka ah (sida xarumaha internetka, isku xirka aagga server-ka) goobta inta badan waxaa sabab u ah baahida sifooyinka amniga iyo geynta qalabka baaritaanka amniga ee badan (sida firewall, qalabka ka hortagga DDOS, firewall codsiga WEB , Qalabka ka-hortagga faragelinta, iwm.), Qalab badan oo lagu ogaanayo amniga isla mar ahaantaana taxane ah oo ku saabsan isku xirka si loo kordhiyo isku xirka hal dhibic oo guul darro ah, hoos u dhigista kalsoonida guud ee shabakada.Iyo kuwa kor ku xusan ee qalabka amniga ee soo dejinta khadka, cusboonaysiinta qalabka, beddelka qalabka iyo hawlgallada kale, waxay sababi doonaan isku-xidhka adeegga muddo dheer oo hakad iyo mashruuc weyn oo jaraya tallaabo si loo dhammaystiro fulinta mashaariicdan oo kale.

Iyadoo la geynayo "Bypass Switch" si midaysan, qaabka geynta ee qalabyo badan oo ammaan ah oo taxane ah oo isku xiran oo isku mid ah ayaa laga beddeli karaa "qaabka isku-xidhka jirka" loona beddelo "isku-xidhka jireed, habka isku-xirnaanta macquulka ah" Xiriirinta xiriirka hal dhibic oo guuldarro ah si loo hagaajiyo isku halaynta isku xirka, halka "wareejinta wareega" ee qulqulka isku xirka ee qulqulka dalabka, si loo gaaro isku mid ah habka asalka ah ee saameynta processing ammaan ah.

In ka badan hal qalab oo amniga isku mar ah oo isku mar ah jaantuska hawlgelinta taxanaha ah:

Shabakadda Mylinking™ Shabakadda TAP Bypass Beddelka Jaantuska Gelitaanka:

5.6 Iyada oo ku saleysan Istaraatiijiyada Dhaqdhaqaaqa ee Badbaadada ogaanshaha Amniga Jiiditaanka Gaadiidka
"Bypass Switch" Xaalad kale oo codsi ah oo horumarsan waxay ku salaysan tahay istaraatiijiyadda firfircoon ee codsiyada ilaalinta ilaalinta jiidashada taraafigga, geynta habka sida hoos ku cad:

Qaado "Anti-DDoS ilaalinta weerarka iyo ogaanshaha" qalabka baaritaanka amniga, tusaale ahaan, iyada oo la geynayo dhamaadka-hore ee "Bypass Switch" ka dibna qalabka ilaalinta ka-hortagga DDOS ka dibna lagu xiro "Beddelka Beddelka", sida caadiga ah " Ilaaliyaha jiidashada "ilaa qadarka buuxa ee gudbinta xawaaraha taraafikada isla mar ahaantaana soo saarida muraayadda qulqulka" qalabka ilaalinta weerarka ka-hortagga DDOS ", mar la ogaado server IP (ama qaybta shabakadda IP) ka dib weerarka," anti Aaladda ilaalinta weerarka DDOS" waxay soo saari doontaa bartilmaameedka xeerarka u dhigma socodka taraafikada waxayna u diri doontaa "Beddelka Beddelka" iyada oo loo marayo is-dhexgalka siyaasadeed ee firfircoon."Beddelka Beddelka" wuxuu cusbooneysiin karaa "dhaqdhaqaaqa dhaqdhaqaaqa taraafigga" ka dib markii la helo xeerarka siyaasadda firfircoon ee Rule pool "oo isla markiiba" xeerku wuxuu ku dhuftey taraafikada server-ka weerarka "ujeedka" ilaalinta weerarka ka-hortagga DDoS iyo ogaanshaha "qalabka habaynta, si ay u noqoto wax ku ool ah ka dib socodka weerarka ka dibna dib-u-durid shabakada.

Nidaamka codsiga ee ku salaysan "Bypass Switch" wuu ka sahlan yahay in la hirgeliyo marka loo eego habka caadiga ah ee BGP-ga ee duritaanka marinka ama nidaamka kale ee jiidista taraafikada, iyo deegaanku aad ugu tiirsan yahay shabakada iyo kalsoonida ayaa ka sareysa.

"Bypass Switch" waxay leedahay sifooyinka soo socda si ay u taageerto ilaalinta ogaanshaha amniga siyaasadda firfircoon:
1, "Bypass Switch" si loo bixiyo si ka baxsan xeerarka ku salaysan interface WEBSERIVCE, dhexgal sahlan oo leh qalabka amniga dhinac saddexaad.
2, "Bypass Switch" oo ku salaysan hardware-ka saafiga ah ee ASIC chip gudbinta ilaa 10Gbps xirmooyinka xawaaraha siliga iyada oo aan la xannibin gudbinta wareejinta, iyo "maktabadda qaanuunka dhaqdhaqaaqa dhaqdhaqaaqa dhaqdhaqaaqa" iyada oo aan loo eegin tirada.
3, "Bypass Switch" oo ku dhex dhisan shaqada BYPASS ee xirfadleyda ah, xitaa haddii ilaaliyaha laftiisa uu ku guuldareysto, sidoo kale wuxuu isla markiiba dhaafi karaa xiriiriyaha asalka ah, ma saameynayo xiriirka asalka ah ee isgaarsiinta caadiga ah.