Bypass TAP (oo sidoo kale loo yaqaan badhanka marin-habaabinta) wuxuu bixiyaa dekedo marin-habaabin ah oo aan cillad lahayn oo loogu talagalay aaladaha amniga firfircoon ee ku dhex jira sida IPS iyo dab-damisyada jiilka xiga (NGFWS). Beddelka marin-habaabinta waxaa la dhex dhigaa aaladaha shabakadda iyo horteeda qalabka amniga shabakadda si loo bixiyo meel lagu kalsoonaan karo oo go'doon ah oo u dhexeeya shabakadda iyo lakabka amniga. Waxay taageero buuxda u keenaan shabakadaha iyo aaladaha amniga si looga fogaado khatarta go'itaanka shabakadda.
Xalka 1 1 Taabashada Shabakadda ee Isku-xirka (Bypass Switch) - Madax-bannaan
Codsiga:
Taabashada Shabakadda ee Bypass (Bypass Switch) waxay ku xiran tahay labada qalab ee shabakadda iyada oo loo marayo dekedaha Link waxayna ku xiran tahay server-ka dhinac saddexaad iyada oo loo marayo dekedaha Qalabka.
Jilbaha Bypass Network Tap (Bypass Switch) waxaa loo dejiyay Ping, kaas oo codsiyo Ping ah oo isdaba joog ah u dira server-ka. Marka server-ku joojiyo ka jawaabista pings-ka, Bypass Network Tap (Bypass Switch) wuxuu galayaa habka bypass.
Marka server-ku uu mar kale bilaabo inuu ka jawaabo, Bypass Network Tap (Bypass Switch) wuxuu dib ugu noqdaa qaabka wax soo saarka.
Barnaamijkan wuxuu ku shaqeyn karaa oo keliya ICMP (Ping). Xirmooyinka garaaca wadnaha looma isticmaalo in lagu kormeero xiriirka ka dhexeeya server-ka iyo Bypass Network Tap (Bypass Switch).
Xalka 2aad ee Dalaal Baakad Shabakad + Taabashada Shabakad ee Gudubka (Bypass Switch)
Dalaal Baakad Shabakad (NPB) + Taabashada Shabakad (Bypass Switch) -- Xaalad caadi ah
Codsiga:
Tap-ka Shabakadda ee Bypass (Bypass Switch) wuxuu ku xiraa laba qalab oo shabakadeed iyada oo loo marayo dekedaha Link iyo Network Packet Broker (NPB) iyada oo loo marayo dekedaha Qalabka. Server-ka dhinac saddexaad wuxuu ku xiraa Network Packet Broker (NPB) isagoo isticmaalaya 2 fiilo naxaas ah oo 1G ah. Network Packet Broker (NPB) wuxuu baakadaha garaaca wadnaha u diraa server-ka iyada oo loo marayo dekedda #1 wuxuuna doonayaa inuu mar kale ku helo dekedda #2.
Kiciyaha Bypass Network Tap (Bypass Switch) waxaa loo dejiyay REST, Network Packet Broker (NPB)-na wuxuu maamulaa codsiga bypass.
Taraafikada ku jirta qaabka wax soo saarka:
Qalabka 1 ↔ Beddelka/Taabashada ↔ NPB ↔ Adeegaha ↔ NPB ↔ Beddelka/Taabashada ↔ Qalabka 2
Broker-ka Xirmooyinka Shabakadda (NPB) + Taabashada Shabakadda (Bypass Switch) -- Software Bypass
Sharaxaadda Ka Gudubka Barnaamijka:
Haddii Shabakadda Baakadaha Isku-xidhka (NPB) aysan ogaan xirmooyinka garaaca wadnaha, waxay awood u siin doontaa software-ka ka gudubka.
Qaabeynta Shabakadda Baakadaha (NPB) si toos ah ayaa loo beddelaa si taraafikada soo socota loogu celiyo Bypass Network Tap (Bypass Switch), sidaas darteed dib loogu geliyo taraafikada xiriirka tooska ah iyadoo la yareynayo khasaaraha baakadka.
Taabashada Shabakadda ee Bypass (Bypass Switch) uma baahna inay ka jawaabto gabi ahaanba sababtoo ah dhammaan boodboodyada waxaa sameeya Network Packet Broker (NPB).
Taraafikada ku jirta Software-ka:
Qalabka 1 ↔ Beddelka/Taabashada ↔ NPB ↔ Beddelka/Taabashada ↔ Qalabka 2
Broker Baakad Shabakad (NPB) + Bypass Network Tap (Bypass Switch) -- Hardware block
Sharaxaadda Qalabka Gudbinta:
Haddii uu fashilmo Network Packet Broker (NPB) ama xiriirka ka dhexeeya Network Packet Broker (NPB) iyo Bypass Network Tap (Bypass Switch) la gooyo, Bypass Network Tap (Bypass Switch) wuxuu isu beddelaa habka bypass si uu u shaqeeyo xiriirka waqtiga-dhabta ah.
Marka Bypass Network Tap (Bypass Switch) uu galo habka bypass, Network Packet Broker (NPB) iyo server-ka dibadda waa la dhaafaa mana helaan wax taraafiko ah ilaa Bypass Network Tap (Bypass Switch) uu dib ugu laabto habka throughput.
Habka loo yaqaan "passway mode" waxaa la kiciyaa marka "Bypass Network Tap" (Bypass Switch) uusan ku xirnayn korontada.
Taraafikada qalabka ee ka baxsan khadka:
Qalabka 1 ↔ Beddelka/Taabashada ↔ Qalabka 2
Xalka 3aad Laba Taabasho oo Shabakadda ah (Bypass Switches) oo loogu talagalay xiriiriye kasta
Tilmaamaha habaynta:
Dejintan, 1 isku xir naxaas ah oo ka kooban 2 qalab oo ku xiran server la yaqaan ayaa laga gudbi karaa laba Taps oo Bypass Network ah (Bypass Switches). Faa'iidada tan marka loo eego xalka 1 bypass ayaa ah marka xiriirka dilaalka baakadka shabakadda (NPB) uu xumaado, server-ku wali waa qayb ka mid ah xiriirka tooska ah.
2 * Taabashooyinka Shabakadda ee Gudubka (Bypass Switches) xiriiriye kasta - Software Bypass
Sharaxaadda Ka Gudubka Barnaamijka:
Haddii Shabakadda Baakadaha (NPB) aysan ogaan xirmooyinka garaaca wadnaha, waxay awood u siin doontaa software-ka ka gudubka. Taabashada Shabakadda ee Bypass (Bypass Switch) uma baahna inay falceliso haba yaraatee sababtoo ah dhammaan boodboodyada waxaa sameeya Shabakadda Baakadaha (NPB).
Taraafikada ku jirta software-ka:
Qalabka 1 ↔ Beddelka/Taabashada 1 ↔ Dalaalka Xirmooyinka Shabakadda (NPB) ↔ Beddelka/Taabashada 2 ↔ Qalabka 2
2 * Taabashooyinka Shabakadda ee Gudubka (Bypass Switches) xiriiriye kasta - Gudubka Qalabka
Sharaxaadda Qalabka Gudbinta:
Haddii ay dhacdo in Shabakadda Baakadaha Shabakadda (NPB) ay fashilanto ama xiriirka ka dhexeeya Bypass Network Tap (Bypass Switch) iyo Network Packet Broker (NPB) uu go'o, labada Bypass Network Taps (Bypass Switches) waxaa loo beddelaa habka bypass si loo ilaaliyo xiriirka firfircoon.
Marka la barbardhigo dejinta "1 Bypass per link", server-ku wali wuxuu ku jiraa xiriirka tooska ah.
Taraafikada qalabka ee ka baxsan khadka:
Qalabka 1 ↔ Beddelka Gudubka/Taabashada 1 ↔Server ↔ Beddelka Gudubka/Taabashada 2 ↔ Qalabka 2
Xalka 4aad Laba Taabasho oo Shabakadda ah (Bypass Switches) ayaa loo habeeyey xiriir kasta oo labada bog ah.
Tilmaamaha dejinta:
Ikhtiyaar: Laba Broker oo ah Network Packet Broker (NPBs) ayaa loo isticmaali karaa in lagu xiro laba goobood oo kala duwan iyada oo loo marayo GRE tunnel halkii laga isticmaali lahaa hal Network Packet Broker (NPB). Haddii server-ku uu ku guuldareysto inuu isku xiro labada goobood, wuxuu ka gudbi doonaa server-ka iyo taraafikada oo loo qaybin karo iyada oo loo marayo GRE tunnel-ka Network Packet Broker (NPB) (sida ku cad Jaantusyada hoose).
Waqtiga boostada: Maarso-06-2023
