1- Waa maxay Xirmada Garaaca Wadnaha ee Qeexan?
Xirmooyinka garaaca wadnaha ee Mylinking™ Network Tap Bypass Switch waxay si caadi ah ugu jiraan qaab-dhismeedka Ethernet Layer 2. Marka la adeegsanayo qaabka buundada Layer 2 ee hufan (sida IPS / FW), qaab-dhismeedka Ethernet Layer 2 caadi ahaan waa la gudbiyaa, waa la xannibaa ama waa la tuuraa. Isla mar ahaantaana, Mylinking™ Network Tap Bypass Switch wuxuu taageeraa qaabka fariimaha garaaca wadnaha ee gaarka ah si loo daboolo xaaladda ah in qaar ka mid ah aaladaha amniga taxanaha ah ee gaarka ah aysan caadi ahaan u gudbin karin qaab-dhismeedka caadiga ah ee Layer 2 Ethernet.
Iyo Mylinking™ Network Tap Bypass Switch sidoo kale waxay taageertaa ogaanshaha baakadaha garaaca wadnaha iyadoo lagu saleynayo calaamadaha VLAN, noocyada fariimaha gaarka ah ee lakabka 3aad iyo lakabka 4aad. Iyada oo lagu saleynayo habkan, isticmaaluhu wuxuu hirgelin karaa shaqo tijaabo badbaado adeeg oo qalabka badbaadada isku xirka ah si uu uga dhigo mid waxtar badan leh si loo hubiyo in adeegyada amniga ee u dhigma ay si sax ah u shaqeeyaan.
Mylinking™ Network Tap Bypass Switch waxay taageeri kartaa kormeeraha si uu u diro xirmooyin garaaca wadnaha oo kala duwan labada jiho. Tusaale ahaan, xirmooyinka garaaca wadnaha ee nooca TCP iyo UDP waxaa lagu habeeyey "Ilaaliyaha Taraafikada Istaraatiijiyadda", iyadoo loo eegayo gaar ahaanshaha qalabka taxanaha ah. Waxaad habayn kartaa dirista xirmooyinka garaaca wadnaha ee TCP ee dekedda kor u qaadista A iyo dirista xirmooyinka garaaca wadnaha ee UDP ee dekedda hoos u dejinta B si ay u waafajiso habka gudbinta farriinta ee qalabka amniga taxanaha ah. Hawshan si wax ku ool ah ayay u damaanad qaadi kartaa xarigga. Ku xidh qalabka badbaadada hawlgalka caadiga ah.
Isbedelka Mylinking™ Network Inline Bypass Switch waxaa la baaray loona sameeyay si loogu isticmaalo in lagu isticmaalo noocyada kala duwan ee qalabka amniga taxanaha ah iyadoo la bixinayo isku halayn shabakadeed oo sare.
2-Shabakadda Gudbinta Beddelka Astaamaha Sare iyo Tiknoolajiyada
Habka Ilaalinta "SpecFlow" ee Mylinking™ iyo Teknolojiyadda Habka Ilaalinta "FullLink"
Tiknoolajiyada Ilaalinta Beddelka Degdegga ah ee Mylinking™
Teknolojiyadda Mylinking™ "LinkSafeSwitch"
Tiknoolajiyadda Gudbinta/Arrimaha ee Mylinking™ "WebService"
Tiknoolajiyadda Ogaanshaha Farriinta Garaaca Wadnaha ee Mylinking™ ee Caqliga leh
Tiknoolajiyada Farriimaha Garaaca Wadnaha ee Mylinking™ ee la qeexi karo
Tiknoolajiyada Isku-dheellitirka Culayska ee Mylinking™ oo leh Xiriiro badan
Tiknoolajiyadda Qaybinta Taraafikada ee Caqliga leh ee Mylinking™
Tiknoolajiyadda Dheelitirka Culayska Firfircoon ee Mylinking™
Tiknoolajiyada Maareynta Fog ee Mylinking™ (HTTP/WEB, TELNET/SSH, Astaamaha "EasyConfig/AdvanceConfig")
3- Codsiga Beddelka Khadka Tooska ah ee Shabakadda (sida soo socota)
3.1 Khatarta Qalabka Amniga Gudaha (IPS / FW)
Kuwa soo socda waa IPS caadi ah (Nidaamka Ka Hortagga Faragelinta), qaabka dejinta FW (Firewall), IPS / FW waxaa loo diraa si taxane ah qalabka shabakadda (routers, switches, iwm.) inta u dhaxaysa taraafikada iyada oo loo marayo hirgelinta hubinta amniga, sida waafaqsan siyaasadda amniga ee u dhiganta si loo go'aamiyo sii deynta ama xannibaadda taraafikada u dhiganta, si loo gaaro saameynta difaaca amniga.
Isla mar ahaantaana, waxaan arki karnaa IPS / FW oo ah qalab taxane ah oo lagu rakibayo qalabka, oo badanaa lagu rakibayo goobta muhiimka ah ee shabakadda ganacsiga si loo hirgeliyo amniga taxanaha ah, kalsoonida aaladaha ku xiran waxay si toos ah u saamaysaa helitaanka shabakadda ganacsiga guud ahaan. Marka aaladaha taxanaha ah ay buux dhaafaan, burburaan, cusboonaysiinta software-ka, cusbooneysiinta siyaasadda, iwm., helitaanka shabakadda ganacsiga oo dhan si weyn ayaa loo saameyn doonaa. Waqtigan xaadirka ah, kaliya iyada oo loo marayo jarista shabakadda, jumper-ka jireed wuxuu ka dhigi karaa shabakadda in la soo celiyo, taasoo si dhab ah u saamaysa kalsoonida shabakadda. IPS / FW iyo aaladaha kale ee taxanaha ah dhinac ahaan waxay hagaajiyaan dejinta amniga shabakadda ganacsiga, dhanka kale waxay sidoo kale yareeyaan isku halaynta shabakadaha ganacsiga, taasoo kordhinaysa khatarta shabakadda lama heli karo.
3.2 Ilaalinta Qalabka Taxanaha Isku-xirka Gudaha
Mylinking™ "Network Inline Bypass" waxaa loo adeegsadaa taxane u dhexeeya aaladaha shabakada (routers, switches, iwm.), socodka xogta ee u dhexeeya aaladaha shabakada mar dambe si toos ah uma horseedo IPS / FW, "Network Inline Bypass" ilaa IPS / FW, marka IPS / FW ay sabab u tahay xad-dhaafka, shilka, cusbooneysiinta software-ka, cusbooneysiinta siyaasadaha iyo xaaladaha kale ee fashilka, "Network Inline Bypass" iyada oo loo marayo ogaanshaha garaaca wadnaha ee caqliga leh Shaqada helitaanka waqtiga ku habboon, sidaas darteedna ka bood qalabka cilladaysan, iyada oo aan la carqaladeyn mabda'a shabakada, qalabka shabakada ee degdega ah si toos ah ugu xiran si loo ilaaliyo shabakada isgaarsiinta caadiga ah; marka IPS / FW uu ku guuldareysto soo kabashada, laakiin sidoo kale iyada oo loo marayo xirmooyinka garaaca wadnaha ee caqliga leh Ogaanshaha ogaanshaha waqtiga ku habboon ee shaqada, xiriirka asalka ah si loo soo celiyo amniga hubinta amniga shabakada ganacsiga.
Mylinking™ "Shabakadda Inline Bypass" waxay leedahay shaqo awood badan oo lagu ogaanayo garaaca wadnaha oo caqli badan, isticmaaluhu wuxuu habayn karaa kala-goynta garaaca wadnaha iyo tirada ugu badan ee isku dayga, iyada oo loo marayo farriin garaaca wadnaha oo gaar ah oo ku taal IPS / FW si loogu sameeyo baaritaan caafimaad, sida in farriinta hubinta garaaca wadnaha loo diro dekedda IPS / FW ee kor/hoos u socota, ka dibna laga helo dekedda kor/hoos u socota ee IPS / FW, oo la xukumo in IPS / FW ay si caadi ah u shaqaynayso iyadoo la dirayo oo la helayo farriinta garaaca wadnaha.
3.3 Ilaalinta Taxanaha Taxanaha Taxanaha Socodka Siyaasadda "SpecFlow"
Marka qalabka shabakadda amniga uu u baahan yahay oo keliya inuu wax ka qabto taraafikada gaarka ah ee ilaalinta amniga taxanaha ah, iyada oo loo marayo shaqada Mylinking™ "Network Inline Bypass" ee taraafikada halkii habayn ah, iyada oo loo marayo istaraatiijiyadda baaritaanka taraafikada si loogu xiro qalabka amniga "concerned" "traffic" waxaa si toos ah loogu celiyaa xiriirka shabakadda, qaybta taraafikada ee ay khuseyso "waxay u janjeertaa qalabka badbaadada ee khadka tooska ah si loo sameeyo hubinta badbaadada. Tani ma ilaalin doonto oo keliya codsiga caadiga ah ee shaqada ogaanshaha badbaadada ee qalabka badbaadada, laakiin sidoo kale waxay yareyn doontaa socodka aan waxtarka lahayn ee qalabka badbaadada si loola tacaalo cadaadiska; isla mar ahaantaana, "Network Inline Bypass" waxay ogaan kartaa xaaladda shaqada ee qalabka badbaadada waqtiga dhabta ah. Qalabka badbaadada si aan caadi ahayn ayuu u dhaafaa taraafikada xogta si toos ah si looga fogaado carqaladaynta adeegga shabakadda.
3.4 Ilaalinta Taxanaha dheellitiran ee Culayska
"Shabakadda Dhexdeeda" ee Mylinking™ waxaa loo adeegsadaa taxane u dhexeeya aaladaha shabakadda (routers-ka, furayaasha, iwm.). Marka hal waxqabad oo farsamayn ah oo IPS/FW ah uusan ku filnayn inuu la qabsado taraafikada ugu sarreysa ee isku xirka shabakadda, Shaqada dheelitirka culeyska taraafikada ee ilaaliyaha, "isku-xidhka" taraafikada isku xirka shabakadda ee IPS / FW, waxay si wax ku ool ah u yareyn kartaa cadaadiska farsamaynta IPS / FW ee keliya, waxay hagaajin kartaa waxqabadka farsamaynta guud si loo daboolo baaxadda sare ee jawiga dejinta Sheegashada.
"Shabakadda Dhexdeeda Shabakadda" Mylinking™ waxay leedahay shaqo dheelitir culays oo awood leh, sida ku cad calaamadda VLAN ee qaab-dhismeedka, macluumaadka MAC, macluumaadka IP, lambarka dekedda, hab-maamuuska iyo macluumaad kale oo ku saabsan qaybinta dheelitirka culayska Hash ee taraafikada si loo hubiyo in IPS / FW kasta uu helo socodka xogta hufnaanta fadhiga.
3.5 Ilaalinta Socodka Socodka Qalabka ee Taxane badan leh (Beddel Xiriirka Taxanaha ah ee Xiriirka Isbarbardhigga ah)
Xiriiriyeyaasha muhiimka ah qaarkood (sida goobaha internetka, isku xirka is-weydaarsiga aagga server-ka) goobta badanaa waxay sabab u tahay baahiyaha sifooyinka amniga iyo dejinta qalab badan oo tijaabinta amniga khadka tooska ah (sida dab-damis, qalabka weerarka ka hortagga DDOS, dab-damiska codsiga WEB, Qalabka ka hortagga faragelinta, iwm.), qalab badan oo lagu ogaanayo amniga isku mar taxane ah oo ku yaal xiriirka si loo kordhiyo isku xirka hal dhibic oo guuldarro ah, taasoo yareyneysa isku halaynta guud ee shabakadda. Iyo qalabka amniga ee kor ku xusan ee internetka lagu rakibayo, casriyeynta qalabka, beddelka qalabka iyo hawlgallada kale, waxay sababi doontaa in shabakadu ay muddo dheer hakad gasho adeegga iyo tallaabo weyn oo mashruuc ah si loo dhammaystiro hirgelinta guusha leh ee mashaariicda noocaas ah.
Marka la adeegsado "Shabakadda Gudbinta Khadka Tooska ah" si midaysan, habka dejinta ee aaladaha amniga badan ee ku xiran taxanaha isku xidhka waxaa laga beddeli karaa "habka isku xidhka jirka" ilaa "habka isku xidhka jirka, habka isku xidhka macquulka ah" Xidhiidhka ku yaal isku xidhka hal dhibic oo guuldarro ah si loo hagaajiyo isku halaynta isku xidhka, halka "Bad-dhaafka Khadka Tooska ah ee Shabakadda" ee ku jira socodka isku xidhka ee ku saabsan jiidista baahida, si loo gaaro isla socodka qaabka asalka ah ee saamaynta habaynta badbaadada leh.
In ka badan hal qalab amni isla waqtigaas jaantuska dejinta taxanaha ah:
Jaantuska Hawlgalinta Beddelka Wareegga Shabakadda Gudaha:
3.6 Iyada oo ku saleysan Istaraatiijiyadda Firfircoon ee Ilaalinta Ogaanshaha Amniga Jiidashada Taraafikada
"Shabakadda Gudbinta Khadka" Xaalad kale oo codsi oo horumarsan waxay ku salaysan tahay istaraatiijiyadda firfircoon ee codsiyada ilaalinta amniga taraafikada, dejinta jidka sida hoos ku cad:
Qaado qalabka tijaabada amniga ee "ilaalinta weerarka iyo ogaanshaha ee ka hortagga DDoS", tusaale ahaan, iyada oo loo marayo rakibidda hore ee "Isku-xirka Shabakadda" ka dibna qalabka ilaalinta ka hortagga DDOS ka dibna lagu xiro "Isku-xirka Shabakadda", oo ah "ilaaliyaha jiidista" ee caadiga ah "ilaalinta jiidista" ilaa xaddiga buuxa ee gudbinta xawaaraha taraafikada isla waqtigaas oo ah wax soo saarka muraayadda socodka ee "qalabka ilaalinta weerarka ka hortagga DDOS", marka la ogaado IP-ga server-ka (ama qaybta shabakadda IP) ka dib weerarka," qalabka ilaalinta weerarka ka hortagga DDOS " wuxuu soo saari doonaa xeerarka isbarbardhigga socodka taraafikada ee bartilmaameedka ah wuxuuna u diri doonaa "Isku-xirka Shabakadda" iyada oo loo marayo is-dhexgalka bixinta siyaasadda firfircoon. "Isku-xirka Shabakadda" ee Dhex-dhexaadka ah "wuxuu cusbooneysiin karaa" dhaqdhaqaaqa jiidista taraafikada "ka dib marka la helo xeerarka siyaasadda firfircoon" Xeerka "isku-xidhka isla markiiba" wuxuu ku dhufan karaa taraafikada server-ka weerarka "jiidashada" ilaalinta weerarka ka hortagga DDoS iyo ogaanshaha "qalabka loogu talagalay habaynta, si waxtar leh ka dib socodka weerarka ka dibna dib loogu duriyo shabakadda.
Nidaamka codsiga ee ku salaysan "Network Inline Bypass" ayaa ka fudud in la hirgeliyo marka loo eego habka caadiga ah ee BGP route irbadda ama nidaamka kale ee jiidista taraafikada, deegaankuna kuma tiirsana shabakadda oo kalsoonidiisuna way sarreysaa.
"Shabakadda Inline Bypass" waxay leedahay sifooyinka soo socda si ay u taageeraan ilaalinta ogaanshaha amniga siyaasadda firfircoon:
1, "Shabakadda Gudubka Khadka Tooska ah" si loo bixiyo wax ka baxsan xeerarka ku salaysan WEBSERIVCE interface, is-dhexgal fudud oo lala yeesho aaladaha amniga ee dhinac saddexaad.
2, "Shabakadda Gudubka Khadka" oo ku salaysan qalabka saafiga ah ee ASIC chip-ka gudbinta ilaa 10Gbps xirmooyinka xawaaraha siligga iyada oo aan la xannibin gudbinta badhanka, iyo "maktabadda qaanuunka dhaqdhaqaaqa jiidista taraafikada" iyada oo aan loo eegin tirada.
3, "Shabakadda Gudubka Khadka" oo ku dhex jira shaqo xirfadeed oo BYPASS ah, xitaa haddii ilaaliyaha laftiisu uu ku guuldareysto, sidoo kale uu isla markiiba ka gudbi karo xiriirkii taxanaha ahaa ee asalka ahaa, saameyn kuma yeelanayso xiriirkii asalka ahaa ee isgaarsiinta caadiga ah.
Waqtiga boostada: Diseembar-23-2021
