Qaybta 1: Soo Koobidda Astaamaha Badeecada Muhiimka ah
Mylinking ML-NPB-M2000 waa Broker Network Packet Broker (NPB) oo ah nooca 2U modular ah oo lagu dhex daray Inline Bypass Switch, oo loogu talagalay in lagu sameeyo amniga shabakadda oo si kalsooni leh loo sugo iyo habaynta taraafikada oo caqli badan. Waxay xallisaa dhibaatooyinka dib u dhaca/burburka shabakadda oo ay keento cilladda/dayactirka qalabka amniga ee taxanaha ah, waxayna taageertaa maaraynta taraafikada oo isku xiran, la socodka iyo ilaalinta amniga. Astaamaha asaasiga ah waxaa loo kala saaraa sidan soo socota:
1. Tilmaamaha Qalabka
○ Qaabka:2U 19-inji rackmount, laba koronto oo la heli karo (AC-220V/DC-48V ikhtiyaari ah), isticmaalka ugu badan ee korontada waa 300W.
○ Meelaha Muhiimka ah:4 boos oo aad loo beddeli karo oo loogu talagalay qaybaha BYPASS/ MONITOR (waxay taageertaa habaynta isku dhafan).
○ Awoodda Dekadda:Module-ka marin-habaabinta (810G SFP+ & 4100GE QSFP28); Module-ka kormeerka (1610G SFP+ & 4100GE QSFP28); ugu badnaan 2.4Tbps awoodda guud ee farsamaynta.
○ Is-dhexgalka Maareynta:1RS232 Console, dekedda maaraynta ee ka baxsan kooxda 110/100/1000M RJ45.
○ Cabbiraadda:Ilaa 161G/10G isku xirka ilaalinta khadka tooska ah ama 840G/100G isku xirka; ugu badnaan dekedaha kormeerka 641G/10G ama 1640G/100G.
2. Awoodaha Shaqada ee Aasaasiga ah
○ Ilaalinta Gudbinta Khadka Gudaha:Beddelidda degdega ah ee ka gudubka (<8ms), ogaanshaha garaaca wadnaha ee caqliga leh (cabbirrada la habeyn karo), ka gudubka otomaatiga ah ee qalabka amniga oo cilladaysan.
○ Habaynta Taraafikada:Aasaasi ah (ku-darka/isku-darka/shaandhaynta/calaamadda) + Horumarsan (ka-saarid/maaskaro/jaritaan/SSL proxy/decryption, aqoonsiga borotokoolka L2-L7).
○ Dheelitirka Culayska:Isku dheelitirka culeyska ku salaysan Hash (L2-L4) ee kooxaha qalabka amniga, dammaanadda daacadnimada kalfadhiga, dib-u-qaybinta culeyska firfircoon.
○ Habaynta Tunnelka:Taageerada xoqidda/xidhka VXLAN/GRE/MPLS/GTP, aqoonsiga otomaatiga ah ee hab-maamuuska tunnel-ka.
○ Muuqaalka Taraafikada:Falanqaynta cabbirrada badan (falanqaynta qoto dheer ee DPI, falanqaynta jadwalka socodka/xirmada, goobta saxda ah ee cilladda), kormeerka iyo digniinta waqtiga-dhabta ah, shaambadaynta waqtiga heerka nanosecond.
3. Hababka Hawlgalinta Muhiimka ah
○ Adeegsiga Khadka Gudaha:Ilaalinta taxanaha taraafikada oo dhammaystiran/gaar ah, xannibaadda taraafikada, wakiilka SSL ee falanqaynta taraafikada ee la sir qariyay.
○ Hawlgalinta SPAN:Muraayadaha taraafikada ee ka baxsan kooxda, isku-darka, qaybinta nidaamyada la socodka/falanqaynta (IDS/APM/NPM).
○ Isku-dhafan (Inline+SPAN):Ilaalinta amniga khadka tooska ah + muraayadaha taraafikada ee ka baxsan xarigga, ma jiraan faragelin labada qaab ah.
4. Teknoolojiyada Muhiimka ah ee Gaarka ah
○Habka Ilaalinta SpecFlow/FullLink, Beddelidda Degdegga ah ee Gudbinta, LinkSafeSwitch, Gudbinta Siyaasadda Firfircoon ee WebService.
○Ogaanshaha Xirmooyinka Garaaca Wadnaha ee la Habeyn karo, Isu-dheellitirka Culayska Firfircoon ee Xiriir badan leh, Qaybinta Taraafikada Caqliga leh.
Qaybta 2: Codsiyada Nidaamka Badeecada
Dhammaan jaantusyada waxay Mylinking ML-NPB-M2000 u qaataan xudunta dhexe, isku xirka kaabayaasha shabakadda, aaladaha amniga iyo nidaamyada la socodka/falanqaynta. Sawirka badeecadda waxaa lagu calaamadeeyay [Sawirka Alaabta ML-NPB-M2000] qaab-dhismeedka, dejinta dhabta ahna waxay ku beddeli kartaa sawirka rasmiga ah ee badeecadda.
Jaantuska 1aad: Ilaalinta Aaladda Amniga ee Isku-xirka Gudaha (Xaaladda Muhiimka ah)
Magaca Jaantuska: Khaladka Khadka FW/IPS Jaantuska Ilaalinta Gudubka Tooska ah
Ujeeddo: Ilaalin aan go'doon lahayn oo loogu talagalay cilladaha/dayactir la'aanta FW/IPS
Sharaxaadda Qaybta
Lakabka Shabakadda: Router-ka ugu muhiimsan/badhanka (barta furaha shabakadda, gelitaanka/bixidda taraafikada ee kor/hoos u socda).
Nudaha Aasaasiga ah: ML-NPB-M2000 (Switch-ka Inline Bypass Switch oo isku dhafan, xudunta nidaamka ilaalinta oo dhan).
Lakabka Amniga: Qalabka amniga taxanaha ah ee dhaqameed (Nidaamka Ka Hortagga Dab-damiska/Fargelinta).
Socodka Taraafikada iyo Codsiga Astaamaha
1- Xaalad Caadi ah: Dhammaan taraafikada ka timaadda aaladaha shabakadda asaasiga ah waxay maraan ML-NPB-M2000 una gudbaan FW/IPS si loo hubiyo amniga, ka dibna waxay ku soo noqdaan shabakadda iyada oo loo marayo badeecada.
2- Xaalad Aan Caadi Ahayn: Qalabka ogaanshaha garaaca wadnaha ee caqliga leh ee laba-jiho ah wuxuu aqoonsadaa cilladda FW/IPS (shil/rar badan/dayactir), wuxuuna kiciyaa beddelka degdega ah ee ka gudubka (<8ms).
3- Xaaladda Gudbinta: Taraafikada si toos ah ayay ugu gudubtaa aaladaha shabakadda asaasiga ah iyada oo loo marayo ML-NPB-M2000, iyadoo ka boodaysa FW/IPS-ka cilladaysan, taasoo hubinaysa in aanay jirin wax go'doon ah oo shabakadda ah.
4- Xaaladda Soo Kabashada: Badeecaddu waxay ogaataa soo kabashada FW/IPS waqtiga dhabta ah waxayna si toos ah u soo celisaa wadadii taraafikada ee asalka ahayd si loo ilaaliyo amniga.
Astaamaha Muhiimka ah ee la Adeegsaday: Beddelidda Degdegga ah ee Gudubka, Ogaanshaha Garaaca Wadnaha ee la Habeyn karo, Tiknoolajiyadda LinkSafeSwitch.
Jaantuska 2aad: Jaantuska Ilaalinta Amniga ee Khadka Tooska ah ee Gaarka ah ee SpecFlow
Magaca Jaantuska: Jaantuska Ilaalinta Jiidashada Taraafikada iyo Amniga Gaarka ah ee Ku Salaysan Siyaasadda
Ujeeddo: Shaandhee & hore u sii gudbi oo keliya taraafikada bartilmaameedka u ah aaladaha hubinta
Sharaxaadda Qaybta
Lakabka Shabakadda: Router-ka ugu muhiimsan/badhanka (dhammaan noocyada gelinta taraafikada).
Nudaha Aasaasiga ah: ML-NPB-M2000 (baaritaanka taraafikada, jiidista taraafikada gaarka ah).
Lakabka Amniga: Aaladaha baaritaanka amniga ee gaarka ah (ee loogu talagalay xogta/taraafikada gaarka ah ee SSH/RDP, awoodda farsamaynta oo hooseysa ee taraafikada oo dhan).
Socodka Taraafikada iyo Codsiga Astaamaha
1- Badeecadu waxay isticmaashaa aqoonsiga taraafikada L2-L4 (VLAN tag/IP five-tuple/MAC/port) si ay u shaandhayso taraafikada iyadoo loo eegayo siyaasadaha hore loo habeeyay.
2- Taraafikada aan dan ka lahayn: Si toos ah ayaa loogu soo celinayaa shabakadda iyada oo loo marayo badeecada, looma baahna in la dhex maro aaladaha amniga (waxay yareysaa culayska qalabka).
3- Taraafikada gaarka ah ee walwalsan: Jiidashada qalabka amniga ee gaarka ah si loo hubiyo/ilaaliyo, ka dibna waxay ku soo noqotaa shabakadda iyada oo loo marayo badeecada.
4- Ogaanshaha garaaca wadnaha ee waqtiga-dhabta ah ee qalabka amniga; marin-habaabin otomaatig ah haddii qalabku cilladoobo, hubinta in ilaalinta taraafikada gaarka ah aan la carqaladeyn.
Astaamaha Muhiimka ah ee la Isticmaalay: Habka Ilaalinta SpecFlow, Shaandhaynta Taraafikada L2-L4, Tiknoolajiyada Ilaalinta Taraafikada ee Xulashada ah.
Jaantuska 3aad: Jaantuska Ilaalinta Kooxda Amniga ee Isku-dheelitiran ee Culayska
Magaca Jaantuska: Dheelitirka Culayska Taraafikada ee Bandwidth-ka Sare leh ee Jaantuska Kooxda FW/IPS
Ujeeddo: U qaybi taraafikada 100G ee kooxda FW/IPS
Sharaxaadda Qaybta
Lakabka Shabakadda: Router-ka/badhanka ugu muhiimsan (gelinta taraafikada ugu sarreysa ee bandwidth-ka sare, aaladda amniga keliya ma qaban karto).
Nudaha Aasaasiga ah: ML-NPB-M2000 (qaybinta taraafikada ee caqliga leh, maaraynta dheelitirka culayska).
Lakabka Amniga: Kooxda FW/IPS (qalab amni oo isku mid ah oo isku mid ah oo la dhigay is barbar socda).
Socodka Taraafikada iyo Codsiga Astaamaha
1- Badeecadu waxay ka heshaa taraafikada bandwidth-ka sare ee shabakadda asaasiga ah waxayna suurtogal ka dhigaysaa isku-dheellitirka culeyska ku salaysan Hash (L2-L4) (oo ku salaysan MAC/IP/dekedda/protocol).
2- Taraafikada si siman ayaa loogu qaybiyaa FW/IPS kasta oo ku jira kooxda si loo sameeyo habaynta amniga ee is barbar socda, iyadoo la hubinayo hufnaanta socodka xogta.
3- Badeecadu waxay taageertaa dib-u-qaybinta culeyska firfircoon: haddii qalab kooxeed uu xumaado/isku xidhku hoos u dhaco, taraafikada si toos ah ayaa loogu wareejinayaa aaladaha kale ee caadiga ah.
4- Waxqabadka guud ee habaynta nidaamka amniga ayaa si toosan loo hagaajiyaa iyadoo la adeegsanayo tirada aaladaha kooxeed, iyadoo la waafajinayo xaaladaha xawaaraha sare ee 100G/200G.
Astaamaha Muhiimka ah ee la Adeegsaday: Isku-dheellitirka Culayska Firfircoon ee Isku-xidhka badan, Qaybinta Taraafikada ee Caqliga leh, Gudbin Degdeg ah oo loogu talagalay Cilladda Qalabka Keliya.
Jaantuska 4: Qalabka Amniga Taxanaha Badan (Taxanaha Jirka → Taxanaha Macquulka ah) Jaantuska Ilaalinta
Magaca Jaantuska: Qalabka Amniga Badan Jaantuska Jismiga ah ee Isbarbardhigga iyo Macquulka ah ee Taraafikada Taraafikada
Ujeeddo: Ku beddel taxanaha jireed (hal dhibic oo guuldarro ah) taxane macquul ah oo isbarbar socda
Sharaxaadda Qaybta
Lakabka Shabakadda: Router-ka ugu muhiimsan/badhanka (isku xirka muhiimka ah sida ka bixitaanka internetka/aagga server-ka).
Nudaha Aasaasiga ah: ML-NPB-M2000 (jadwalka taraafikada midaysan, maaraynta taxanaha macquulka ah).
Lakabka Amniga: Aalado amni oo taxane ah oo kala duwan (FW/Anti-DDoS/WAF/IPS, hawlgalinta taxanaha jireed ee dhaqameed waxay leedahay hal dhibic oo guuldarro ah).
Socodka Taraafikada iyo Codsiga Astaamaha
1- Hawlgalka dhaqameed: Aaladaha amniga ee badan ayaa si taxane ah isugu xiran, taasoo horseedaysa dhowr dhibcood oo hal mar ah oo cillad ah iyo dib u dhac shabakadeed oo weyn.
2- Hawlgal cusub: Dhammaan aaladaha amniga waxay si muuqaal ahaan u barbar socdaan ML-NPB-M2000; badeecadu waxay hirgelisaa jiidista taraafikada ee taxanaha ah ee macquulka ah sida waafaqsan siyaasadaha amniga.
3- Taraafiggu wuxuu dhex maraa qalab kasta oo amni ah iyadoo loo eegayo nidaamka macquulka ah ee hore loo habeeyay si loo ilaaliyo tallaabo-tallaabo, isagoo gaaraya saameyn la mid ah taxanaha jireed.
4- Haddii hal qalab oo amni uu cilladoobo, badeecadu waxay ka gudubtaa oo keliya qalabka cilladaysan, inta soo hartayna ilaalinta taxanaha macquulka ah ayaa weli waxtar leh, taasoo yaraynaysa hal dhibic oo cillad ah iyo hagaajinta isku halaynta shabakadda.
Astaamaha Muhiimka ah ee la Adeegsaday: Habka Ilaalinta FullLink, Jiidashada Taraafikada ee Caqliga leh, Gudbinta Siyaasadda Firfircoon.
Jaantuska 5: Siyaasadda Firfircoon ee Ka-hortagga DDoS Jaantuska Ogaanshaha Taraafikada iyo Ilaalinta
Magaca Jaantuska: WebService Siyaasadda Firfircoon ee Jarista Jaantuska Ilaalinta Weerarka Ka-hortagga DDoS
Ujeeddo: Ogaanshaha weerarka waqtiga-dhabta ah + jiidista taraafikada firfircoon
Sharaxaadda Qaybta
Lakabka Shabakadda: Router-ka ugu muhiimsan/badhanka + Kooxda Server-ka (bartilmaameedka la ilaaliyo, sida IP-ga/qaybta server-ka ganacsiga).
Nudaha Aasaasiga ah: ML-NPB-M2000 (gudbinta taraafikada xawaaraha-xawaaraha, cusbooneysiinta siyaasadda firfircoon, jiidista taraafikada).
Lakabka Amniga: Qalabka ilaalinta weerarka ee ka hortagga DDoS (ogaanshaha weerarka waqtiga-dhabta ah, keenista siyaasadda firfircoon).
Socodka Taraafikada iyo Codsiga Astaamaha
1- Xaalad Caadi ah: ML-NPB-M2000 waxay u gudbisaa taraafikada oo dhan kooxda server-ka xawaaraha silig, waxayna muraayad u dhigaysaa dhammaan taraafikada qalabka Anti-DDoS si loo ogaado waqtiga dhabta ah (saameyn kuma yeelanayso taraafikada ganacsiga).
2- Weerar La Ogaaday: Aaladda ka-hortagga DDoS waxay aqoonsataa weerarrada DDoS ee ku dhaca IP/qaybta server-ka, waxayna soo saartaa xeerarka iswaafajinta taraafikada, waxayna u gudbisaa badeecada iyada oo loo marayo is-dhexgalka siyaasadda firfircoon ee WebService.
3- Jiididda Weerarka: Badeecaddu waxay cusbooneysiisaa maktabadda xeerka firfircoon waqtiga dhabta ah, waxayna jiidaysaa taraafikada weerarka qalabka Anti-DDoS si loo nadiifiyo/loo farsameeyo, taraafikada caadiga ahna wali si toos ah ayaa loo gudbinayaa.
4- Dhammaadka Weerarka: Qalabka Ka-hortagga DDoS wuxuu bixiyaa amar joojin siyaasadeed, badeecaduna waxay soo celinaysaa qaabkii hore ee gudbinta xawaaraha taraafikada oo buuxa.
Astaamaha Muhiimka ah ee la Adeegsaday: WebService Dynamic Policy Transfer, Muraayadaha Taraafikada, Qalabka ASIC Wire-Speed Transfer, Joojinta Taraafikada.
Jaantuska 6aad: Ilaalinta Gudaha ee Isku-dhafan (Inline+SPAN) + Jaantuska Kormeerka ee Ka Baxsan Kooxda
Magaca Jaantuska: Ilaalinta FW/WAF ee khadka ku jirta + Jaantuska Kormeerka ee SPAN ee ka baxsan Kooxda IDS/APM
Ujeeddo: Ilaalinta khadka gudaha ee isku mar + falanqaynta taraafikada ka baxsan kooxda
Sharaxaadda Qaybta
Lakabka Shabakadda: Router-ka ugu muhiimsan/badhanka (gelinta taraafikada ganacsiga).
Nudaha Aasaasiga ah: ML-NPB-M2000 (si isku mar ah u fur qaabka Inline iyo SPAN, ma jiraan faragelin labada dhinac ah).
Lakabka Amniga Gudaha: FW/WAF (ilaalinta khadka tooska ah ee taxanaha ah ee taraafikada ganacsiga).
Lakabka Kormeerka ee Ka Baxsan Kooxda: IDS/APM/NPM (falanqaynta taraafikada, la socodka waxqabadka, ogaanshaha khatarta).
Socodka Taraafikada iyo Codsiga Astaamaha
1- Habka Inline-ka: Gaadiidka ganacsigu wuxuu maraa badeecada ilaa FW/WAF si loo ilaaliyo amniga khadka tooska ah, isagoo ogaanaya in si khaldan loo maro iyo jiidis gaar ah oo taraafikada ah.
2- Habka SPAN: Badeecadu waxay muraayad u tahay taraafikada khadka tooska ah ee buuxda/la sifeeyay ee nidaamka kormeerka ee ka baxsan kooxda iyada oo loo marayo module-ka Monitor-ka, iyada oo aan saameyn ku yeelan gudbinta caadiga ah ee taraafikada khadka tooska ah.
3- Nidaamka la socodka wuxuu sameeyaa falanqayn qoto dheer oo taraafikada ah (DPI/flow table/packet analysis), la socodka waxqabadka (APM/NPM) iyo ogaanshaha khatarta dadban (IDS), badeecaduna waxay taageertaa furfurista SSL ee taraafikada la qariyay ee muraayadda leh (HTTPS/TLS) si loo buuxiyo shuruudaha falanqaynta qoraalka cad.
4- Badeecadu waxay bixisaa kala-soocidda/maaskaro taraafikada loogu talagalay taraafikada muraayadaysan, taasoo yaraynaysa culayska habaynta ee nidaamka kormeerka ee ka baxsan band-ka.
Astaamaha Muhiimka ah ee la Adeegsaday: Hirgelinta Isku-dhafka ah ee Inline+SPAN, SSL Proxy/Decryption, Muraayadaha Taraafikada, Kala-saarista Xogta, Falanqaynta Aragtida Taraafikada.
Jaantuska 7aad: Jadwalka iyo Falanqaynta Aragtida ee Midaysan ee Taraafikada Shabakadda
Magaca Jaantuska: Isugeynta Taraafikada Isku Xiran + Jadwalka Midaysan + Jaantuska Falanqaynta Muuqaalka
Ujeeddo: Midee taraafikada 10G/40G/100G + falanqayn muuqaal ah
Sharaxaadda Qaybta
Lakabka Isha: Xiriiriyeyaasha isha shabakadda ee heerka badan (10G/40G/100G) (ka bixitaanka internetka, aagga server-ka, badhanka xudunta), taraafikada laga soo ururiyey muraayadda kala-goysyada indhaha/dekedda.
Nudaha Aasaasiga ah: ML-NPB-M2000 (ururinta taraafikada midaysan, shaandhaynta, qaybinta, ka hor-hawlgelinta).
Lakabka Falanqaynta: Nidaamyada amniga/falanqaynta ee ka baxsan band-ka (FW/IDS/NPM/DPI Analyzer).
Lakabka Muuqaalka: Madal Muuqaalka Taraafikada (GUI-ga ku dhex jira badeecada, bandhig jaantus oo cabbirro badan leh).
Socodka Taraafikada iyo Codsiga Astaamaha
1- Badeecadu waxay isku ururisaa dhammaan taraafikada ka imanaya isku xirka ilaha badan ee xawaaraha siligga, waxayna horay u farsamaysaa (shaandhaynta/jaritaanka/ka-saarista/ka-saarista godka).
2- Sida ku cad siyaasadaha hore loo habeeyay, badeecadu waxay u qaybisaa taraafikada adeegga kala duwan nidaamyada amniga/falanqaynta ee ka baxsan kooxda u dhiganta (tusaale ahaan, taraafikada DDoS ee Anti-DDoS, xogta waxqabadka ee NPM).
3- Qaybta muuqaalka taraafikada ee ku dhex jirta badeecada waxay qabataa falanqayn dhinacyo badan leh (falanqayn qoto dheer oo DPI ah, falanqayn miiska/baakadda socodka, goobta saxda ah ee cilladda) ee taraafikada la isku daray, waxayna ku soo bandhigaysaa waqtiga dhabta ah iyada oo loo marayo GUI (shaxda jajabka/shaxda bar/waqtiga).
4- Taageer qabashada baakadaha waqtiga-dhabta ah iyo weydiinta taraafikada taariikhiga ah ee taraafikada aan caadiga ahayn, iyadoo ka caawinaysa shaqaalaha O&M inay si dhakhso ah u helaan cilladaha shabakadda/khatarta amniga.
Astaamaha Muhiimka ah ee la Adeegsaday: Isugeynta/Qaybinta Taraafikada, Xarigga Tunnelka, Aqoonsiga Codsiga DPI, Muuqaalka Taraafikada Cabbirka Badan leh, Falanqaynta Khaladaadka Saxda ah.
La xiriiraDalaal Baakad Shabakad
Fadlan booqo si aad u hesho faahfaahin dheeraad ah:https://www.mylinking.com/mylinking-network-packet-broker-plus-inline-bypass-switch-ml-npb-m2000-product/
La xiriiraBeddelka Gudbinta Khadka Dhexdiisa
Fadlan booqo si aad u hesho faahfaahin dheeraad ah:https://www.mylinking.com/mylinking-network-packet-broker-plus-inline-bypass-switch-ml-bypass-m2000-product/
Waqtiga boostada: Abriil-07-2026
