1- Waa maxay Xidhmada garaaca Wadnaha ee qeexan?
Xirmooyinka garaaca wadnaha ee Mylinking™ Network Tap Bypass U beddelo qaab-dhismeedka Ethernet Layer 2. Marka la hawlgelinayo qaabka isku xidhka lakabka 2 ee hufan (sida IPS/FW), xayndaabyada lakabka 2 ee Ethernet caadi ahaan waa la gudbiyaa, la xidhaa ama la tuuraa. Isla mar ahaantaana, Mylinking™ Network Tap Bypass Switch waxay taageertaa qaabka fariinta garaaca wadnaha ee caadada u ah si loo daboolo xaalada qaar ka mid ah aaladaha amniga ee gaarka ah aysan si caadi ah u gudbin karin xargaha caadiga ah ee Lakabka 2 Ethernet.
Iyo Mylinking™ Network Tap Bypass Switch sidoo kale waxay taageertaa ogaanshaha xirmada garaaca wadnaha ee ku saleysan VLAN sumadda, Lakabka 3 iyo lakabka 4 ee noocyada fariimaha gaarka ah. Iyada oo ku saleysan habkan, isticmaaluhu wuxuu hirgelin karaa shaqada tijaabada badbaadada adeegga ee aaladda badbaadada isku xirka si uu uga dhigo mid waxtar badan leh si loo hubiyo in adeegyada ammaanku ay si sax ah u shaqeeyaan.
Mylinking™ Network Tap Bypass Switch waxay taageeri kartaa kormeeraha si uu u soo diro xirmooyin garaaca wadnaha oo kala duwan labada jiho. Tusaale ahaan, xirmooyinka garaaca wadnaha ee nooca TCP iyo UDP waxaa lagu habeeyey "Istaraatiijiyadda Ilaalinta Dhaqdhaqaaqa Taraafikada", iyadoo loo eegayo gaar ahaan qalabka taxanaha ah. Waxaad u habayn kartaa dirida xirmooyinka garaaca wadnaha ee TCP ee korjoogaha korka ee dekada A iyo dirida baakadaha garaaca wadnaha ee UDP ee dekada B ee isha hoose si aad u daboosho habka gudbinta fariinta ee aaladda serial security. Shaqadani waxay si waxtar leh u dammaanad qaadi kartaa xadhigga. Ku xidh qalabka badbaadada hawlgalka caadiga ah.
Mylinking™ Network Inline Bypass Switch waa la baadhay oo loo sameeyay si loogu isticmaalo dejinta dabacsan ee noocyada kala duwan ee qalabka amniga ee taxanaha ah iyadoo la siinayo isku halaynta shabakad sare.
2-Shabakadda Khadka Tooska ah ee Beddelka Tilmaamaha Sare iyo Farsamada
Habka Ilaalinta Mylinking™ "SpecFlow" iyo "FullLink" Habka Ilaalinta Farsamada
Mylinking™ Tiknoolajiyada Ilaalinta Degdegga ah ee Bedelashada Degdegga ah
Mylinking™ "LinkSafeSwitch" Technology
Mylinking™ "WebService" Istaraatiijiyada Dhaqdhaqaaqa Gudbinta/Tignoolajiyada Arrinta
Farriinta Farriinta garaaca wadnaha ee caqliga leh ee Mylinking™
Farimaha Farriimaha garaaca Wadnaha ee lagu qeexi karo Mylinking™
Mylinking™ Tiknoolajiyada Isku-dheellitirka Culayska Isku-xidhaha Badan
Mylinking™ Farsamada Qaybinta Gaadiidka Caqliga leh
Tignoolajiyada Isku dheeli tirka culeyska firfircoon ee Mylinking™
Mylinking™ Farsamada Maareynta Fog (HTTP/WEB, TELNET/SSH, "EasyConfig/AdvanceConfig" sifada)
3-Codsiga Beddelka Gudbinta Khadka Shabakadda (sida soo socota)
3.1 Khatarta Qalabka Ammaanka Khadka Tooska ah (IPS / FW)
Kuwa soo socdaa waa IPS caadiga ah (Nidaamka Kahortagga Faragelinta), FW (Firewall) habka geynta, IPS / FW waxaa la geeyaa si taxane ah qalabka shabakada (routers, furayaasha, iwm.) inta u dhaxaysa taraafikada iyada oo loo marayo hirgelinta hubinta amniga, sida waafaqsan siyaasadda amniga ee u dhiganta si loo go'aamiyo sii deynta ama xannibaadda taraafikada u dhiganta, si loo gaaro saameynta difaaca amniga.
Isla mar ahaantaana, waxaan u eegi karnaa IPS / FW sida geynta taxanaha ah ee qalabka, sida caadiga ah waxaa la geeyaa goobta muhiimka ah ee shabakadda ganacsiga si loo fuliyo amniga taxanaha, isku halaynta aaladaha ku xiran waxay si toos ah u saameeyaan guud ahaan helitaanka shabakadda ganacsiga. Mar alla markii aaladaha taxanaha ah ay bataan, shil, cusboonaysiin software, cusboonaysiinta siyaasada, iwm., dhammaan helitaanka shabakada ganacsiga ayaa si weyn loo saameyn doonaa. Halkaa marka ay marayso, waxaan kaliya iyada oo loo marayo gooynta shabakadda, jumper-ka gudubka jireed wuxuu ka dhigi karaa shabakada in dib loo soo celiyo, si dhab ah u saameeya kalsoonida shabakada. IPS / FW iyo aaladaha kale ee taxanaha ah hal dhinac waxay wanaajiyaan dejinta amniga shabakada ganacsiga, dhanka kale waxay sidoo kale yaraynaysaa isku halaynta shabakadaha ganacsiga, kordhinta halista shabakada lama heli karo.
3.2 Ilaalinta Qalabka Taxanaha Inline Link
Mylinking ™ "Network Inline Bypass" waxaa la geeyaa si taxane ah inta u dhaxaysa aaladaha shabakadaha (router-ka, furayaasha, iwm.), iyo socodka xogta ee u dhexeeya aaladaha shabakadu si toos ah uma keento IPS / FW, "Network Inline Bypass" ilaa IPS / FW, marka IPS / FW oo ay ugu wacan tahay culeyska xad dhaafka ah, shilka, cusboonaysiinta softiweerka, cusboonaysiinta siyaasada iyo xaaladaha kale ee guul dareysiga, “Network Inline Bypass” iyada oo loo marayo ogaanshaha fariinta garaaca wadnaha caqli-gal ah Shaqada helitaanka waqtiga saxda ah, oo sidaas awgeed ka boodo aaladda khaldan, iyada oo aan la carqaladeynin dhismaha shabakada, qalabka shabakada degdega ah ee si toos ah ugu xiran si loo ilaaliyo shabakada isgaarsiinta caadiga ah; marka IPS / FW guuldarada soo kabashada, laakiin sidoo kale iyada oo loo marayo xirmooyinka garaaca wadnaha caqli-gal ah Ogaanshaha ogaanshaha waqtiga ee shaqada, isku xirka asalka ah si loo soo celiyo amniga hubinta amniga shabakada ganacsiga.
Mylinking™ "Network Inline Bypass" waxay leedahay shaqo ogaansho fariin garaac ah oo caqli badan, isticmaaluhu wuxuu habeyn karaa inta u dhaxaysa garaaca wadnaha iyo tirada ugu badan ee isku dayga, iyada oo loo marayo fariinta garaaca wadnaha ee caadada u ah IPS / FW si loogu baaro caafimaadka, sida soo dir jeegareynta garaaca wadnaha fariinta ku socota dekedda kor/hoose ee IPS/FW, ka dibna ka hel dekedda sare/hoose ee IPS/FW, oo xukun in IPS/FW ay si caadi ah u shaqeyso adoo diraya oo helaya fariinta garaaca wadnaha.
3.3 "SpecFlow" Siyaasadda Socodka Khadka Tooska ah Ilaalinta Taxanaha
Marka aaladda shabakadda amnigu kaliya u baahan tahay inay wax ka qabato taraafikada gaarka ah ee ilaalinta amniga ee taxanaha ah, iyada oo loo marayo Mylinking ™ ”Shabakadda Inline Bypass” shaqada taraafikada halba mar, iyada oo loo marayo istaraatiijiyada baarista taraafikada ee lagu xirayo aaladda amniga ”Walaaca" taraafikada dib ayaa loo soo celiyaa si toos ah isku xirka shabakada, iyo qaybta taraafikada ee ay khusayso "waa soo jiidashada aaladda badbaadada ee khadka si loo sameeyo hubinta badbaadada. Tani kaliya ma ilaalin doonto codsiga caadiga ah ee shaqada ogaanshaha badbaadada ee qalabka badbaadada, laakiin sidoo kale waxay yaraynaysaa socodka aan fiicnayn ee qalabka badbaadada si loola tacaalo cadaadiska; Isla mar ahaantaana, "Network Inline Bypass" waxay ogaan kartaa xaaladda shaqada ee qalabka badbaadada wakhtiga dhabta ah. Qalabka badbaadada wuxuu u shaqeeyaa si aan caadi ahayn wuxuu si toos ah u dhaafaa taraafikada xogta si looga fogaado carqaladeynta adeegga shabakadda.
3.4 Kordhi Ilaalinta Taxanaha oo dheellitiran
Mylinking™ "Network Inline Bypass" waxaa la dhex dhigay si taxane ah inta u dhaxaysa aaladaha shabakadaha (routers, furayaasha, iwm.). Marka hal waxqabad IPS / FW uusan ku filneyn inuu la qabsado isku xirka isku xirka gaadiidka ugu sarreeya, Shaqada isku dheelitirka culeyska taraafikada ee ilaaliyaha, "isku-xidhka" ee isku xirka isku xirka kooxeedka IPS / FW badan, waxay si wax ku ool ah u yareyn kartaa hal IPS / Cadaadiska habaynta FW, waxay wanaajisaa waxqabadka guud ee habaynta si loo daboolo baaxadda baaxadda sare ee deegaanka geynta Sheegashada.
Mylinking™ "Network Inline Bypass" waxay leedahay hawl isku dheelitirnaan xoog leh, marka loo eego qaabka VLAN tag, macluumaadka MAC, macluumaadka IP, lambarka dekedda, borotokoolka iyo macluumaadka kale ee ku saabsan dheellitirka culeyska Hash ee qaybinta taraafikada si loo hubiyo in IPS / FW kasta uu helay socodka xogta daacadnimada Kulanka.
3.5 Taxanayaal badan oo taxanayaal ah oo ka ilaalinaya socodka qulqulka qalabka khadka (Beddel isku xidhka taxan ee xidhiidhka barbar socda)
Qaar ka mid ah isku xirka muhiimka ah (sida xarumaha internetka, isku xirka aagga server-ka) goobta inta badan waxaa sabab u ah baahida sifooyinka amniga iyo geynta qalabka baaritaanka amniga ee badan (sida firewall, qalabka ka hortagga DDOS, firewall codsiga WEB , Qalabka ka-hortagga faragelinta, iwm.), Qalab badan oo lagu ogaanayo amniga isla mar ahaantaana taxane ah oo ku saabsan isku xirka si loo kordhiyo isku xirka hal dhibic oo guul darro ah, hoos u dhigista kalsoonida guud ee shabakada. Iyo kuwa kor ku xusan ee qalabka amniga ee soo dejinta khadka, cusboonaysiinta qalabka, beddelka qalabka iyo hawlgallada kale, waxay sababi doonaan isku-xidhka adeegga muddo dheer oo hakad iyo mashruuc weyn oo jaraya tallaabo si loo dhamaystiro fulinta mashaariicdan oo kale.
Iyadoo la geynayo "Network Inline Bypass" si midaysan, qaabka geynta ee qalabyo badan oo ammaan ah oo taxane ah oo isku xiran oo isku mid ah ayaa laga beddeli karaa "qaabka isku-xidhka jirka" loona beddelo "isku-xidhka jireed, habka isku-xidhka macquulka ah" Isku xirka xiriirka oo ka mid ah hal dhibic oo guuldarro ah si loo hagaajiyo isku halaynta isku xirka, halka "Network Inline Bypass" ee qulqulka isku xirka ee qulqulka dalabka, si loo gaaro isku mid ah habka asalka ah ee saameynta habka badbaadada leh.
In ka badan hal qalab oo amniga isku mar ah oo isku mar ah jaantuska hawlgelinta taxanaha ah:
Shabakadda Khadka Tooska ah ee Wareegga Wareegga:
3.6 Iyada oo ku saleysan Istaraatiijiyada Dhaqdhaqaaqa ee Ilaalinta Amniga ogaanshaha ee Jiid-jiidka
"Shabakadda Inline Bypass" Xaalad kale oo codsi ah oo horumarsan waxay ku salaysan tahay istaraatiijiyadda firfircoon ee codsiyada ilaalinta ilaalinta jiidashada taraafigga, geynta habka sida hoos ku cad:
Qaado "Anti-DDoS ilaalinta weerarka iyo ogaanshaha" qalabka baaritaanka amniga, tusaale ahaan, iyada oo loo marayo geeynta hore ee "Network Inline Bypass" ka dibna qalabka ilaalinta ka-hortagga DDOS ka dibna ku xidh "Network Inline Bypass", gudaha ilaaliyaha caadiga ah "ilaa qadarka buuxa ee xawliga xawliga taraafiga ee isla mar ahaantaana soo saarida muraayada qulqulka ee aaladda ilaalinta weerarka ka hortagga DDOS", mar la ogaado server-ka IP (ama qaybta shabakadda IP) ka dib weerarka, "Aaladda ka hortagga DDOS ee weerarka" waxay soo saari doontaa xeerarka u dhigma socodka taraafigga ee bartilmaameedka ah waxayna u diri doontaa "Shabakadda Inline Bypass" iyada oo loo marayo is-dhexgalka siyaasadda firfircoonida leh. "Shabakadda Inline Bypass" waxay cusboonaysiin kartaa "dhaqdhaqaaqa dhaqdhaqaaqa taraafigga" ka dib markii la helo xeerarka siyaasadda firfircoon ee Rule pool "oo isla markiiba" qaanuunka wuxuu ku dhuftey taraafikada server-ka weerarka "soo jiidashada" ilaalinta weerarka ka hortagga DDoS iyo ogaanshaha "qalabka habaynta, noqo mid wax ku ool ah ka dib socodka weerarka ka dibna dib-u-durid shabakada.
Nidaamka codsiga ee ku salaysan "Network Inline Bypass" ayaa ka sahlan in la hirgeliyo marka loo eego habka caadiga ah ee BGP-ga ee duritaanka marinka ama nidaamka kale ee jiidista taraafigga, iyo deegaanku aad ugu tiirsan yahay shabakada iyo kalsoonida ayaa ka sareysa.
"Network Inline Bypass" waxay leedahay sifooyinka soo socda si ay u taageerto ilaalinta amniga ogaanshaha siyaasad firfircoon:
1, "Shabakadda Inline Bypass" si loo bixiyo si ka baxsan xeerarka ku salaysan interface WEBSERIVCE, la dhexgalka fudud ee qalabka amniga dhinac saddexaad.
2, "Network Inline Bypass" oo ku salaysan qalabka saafiga ah ee ASIC chip gudbinta ilaa 10Gbps xirmooyinka xawaaraha siliga ah iyada oo aan la xannibin gudbinta wareejinta, iyo "maktabadda qaanuunka dhaqdhaqaaqa dhaqdhaqaaqa dhaqdhaqaaqa" iyadoon loo eegin tirada.
3, "Network Inline Bypass" oo ku dhex dhisan shaqada BYPASS ee xirfadleyda ah, xitaa haddii ilaaliyaha laftiisa uu ku guuldareysto, sidoo kale uu isla markiiba dhaafi karo xiriiriyaha asalka ah, ma saameynayo xiriirka asalka ah ee isgaarsiinta caadiga ah.
Waqtiga boostada: Dec-23-2021
