Kuongorora kwakadzama uye Kuenzanisa Kwekushandisa kweTAP uye SPAN Network Traffic Data Acquisition Methods.

Muminda yekushanda kwetiweki uye kugadzirisa, kugadzirisa matambudziko, uye kuchengetedzwa kwekuongorora, nemazvo uye nemazvo kuwana network data hova ndiyo hwaro hwekuitisa akasiyana mabasa. Sematekinoroji maviri makuru ekutora data etiweki, TAP (Test Access Point) uye SPAN (Switched Port Analyzer, inowanzonzi port mirroring) vanoita mabasa akakosha mumamiriro akasiyana nekuda kwehunhu hwavo hwakasiyana. Kunzwisisa kwakadzama kwemaitiro avo, zvakanakira, zvisingakwanisi, uye mamiriro anoshanda kwakakosha kuti mainjiniya etiweki vagadzire zvirongwa zvekuunganidza data zvine musoro uye kugadzirisa manejimendi manejimendi.

TAP: Mhinduro Yakakwana uye Inooneka Yekutora Data "Isina Kurasikirwa"

TAP mudziyo wehardware unoshanda pane yemuviri kana data link layer. Basa rayo repakati ndere kuwana 100% kudzokorodza uye kutorwa kwetiweki data nzizi pasina kukanganisa neyekutanga network traffic. Nekubatanidzwa munhevedzano mune network network (semuenzaniso, pakati pekuchinja uye sevha, kana router uye chinja), inodzokorora zvese kumusoro uye pasi pemvura data packets ichipfuura nepanobatanidzwa kuenda kuchiteshi chekutarisa uchishandisa "optical splitting" kana "traffic splitting" nzira, yekuzotevera kugadzirisa kuburikidza nekuongorora zvishandiso (senge network analyzers uye Intrusion Detection Systems - IDSs Detection Systems).

Zvinhu Zvikuru: Yakavakirwa pa "Kutendeseka" uye "Kugadzikana"

1. 100% Data Packet Capture neNo Loss Risk

Uyu ndiwo mukana wakatanhamara weTAP. Sezvo TAP ichishanda pachikamu chemuviri uye ichidzokorora zvakananga masaini emagetsi kana ekuona mune chinongedzo, haivimbe neiyo switch yeCPU zviwanikwa zvekuendesa data packet kana kudzokorora. Naizvozvo, zvisinei nekuti network traffic iri pakakwirira here kana kuti ine yakakura-saizi data pakiti (seJumbo Frames ine yakakura MTU kukosha), ese data mapaketi anogona kutorwa zvachose pasina kurasikirwa kwepaketi kunokonzerwa nekusakwana kwekuchinja zviwanikwa. Ichi "chisina kurasikirwa chekutora" chimiro chinoita kuti ive mhinduro inosarudzika yezviitiko zvinoda rutsigiro rwakakwana rwedata (senge chikanganiso chinokonzera nzvimbo uye network performance baseline analysis).

2. Hapana Impact pane Yekutanga Network Performance

Iyo yekushanda modhi yeTAP inova nechokwadi chekuti haikonzeri chero kukanganisa kune yekutanga network network. Iyo haigadzirise zvirimo, kwainobva/yekuenda kero, kana nguva yemapakiti edata kana kutora switch's port bandwidth, cache, kana zviwanikwa zvekugadzirisa. Kunyangwe iyo TAP mudziyo pachayo ikatadza kushanda (yakadai sekutadza kwesimba kana kukuvadzwa kwehardware), zvinongoguma nekusaburitsa data kubva pachiteshi chekutarisa, nepo kutaurirana kweiyo yepakutanga network yekubatanidza inoramba yakajairika, kudzivirira njodzi yekukanganiswa kwetiweki kunokonzerwa nekutadza kwekuunganidza data.

3. Tsigiro yeFull-Duplex Links uye Complex Network Environments

Manetiweki emazuva ano anowanzo tora iyo yakazara-duplex yekutaurirana modhi (kureva, kumusoro nekudzika kwedata data inogona kufambiswa panguva imwe chete). TAP inogona kutora nzizi dzedata mumativi ese e-full-duplex link uye yoaburitsa kuburikidza yakazvimirira yekutarisa zviteshi, kuve nechokwadi chekuti mudziyo wekuongorora unogona kudzoreredza zvizere nzira mbiri dzekutaurirana. Mukuwedzera, TAP inotsigira zvakasiyana-siyana zvetiweki mazinga (akadai 100M, 1G, 10G, 40G, uye kunyange 100G) uye midhiya mhando (twisted pair, single-mode fiber, multi-mode fiber), uye inogona kugadziriswa kune network nharaunda dzezvakaoma zvakasiyana se data centers, core backbone network, uye campus network.

Mamiriro Ekushandisa: Kutarisa pa "Accurate Analysis" uye "Key Link Monitoring"

1. Network Troubleshooting uye Root Cause Nzvimbo

Kana matambudziko akadai sekurasikirwa kwepaketi, kunonoka, jitter, kana application lag kuitika munetiweki, zvinodikanwa kudzoreredza mamiriro ezvinhu apo kukanganisa kwakaitika kuburikidza neakazara data packet rwizi. Semuenzaniso, kana bhizinesi rekutanga bhizinesi masisitimu (akadai seERP neCRM) akawana nguva dzekuwana nguva, mashandiro nevashandi vekuchengetedza vanogona kuendesa TAP pakati pesevha neiyo core switch kuti itore ese ekufamba-famba data mapaketi, kuongorora kana paine nyaya dzakadai seTCP retransmission, kurasikirwa kwepaketi, DNS resolution kunonoka, kana application-icho inokonzeresa mhedzisiro yemhando yeprotocol, uye ipapo inokonzeresa mhedzisiro yemhando yeprotocol. matambudziko, inononoka server mhinduro, kana middleware gadziriso kukanganisa).

2. Network Performance Baseline Establishment uye Anomaly Monitoring

Mukushanda kwetiweki nekugadzirisa, kumisa hwaro hwekuita pasi pezvakajairwa bhizinesi remitoro (senge avhareji bandwidth kushandiswa, data packet kutumira kunonoka, uye TCP yekubatanidza kumisikidzwa kwebudiriro mwero) ndiyo hwaro hwekutarisisa kusawirirana. TAP inogona kutora zvakadzikama data yakazara-vhoriyamu yeakakosha links (senge pakati peiyo core switch uye pakati egress routers neISPs) kwenguva yakareba, ichibatsira mashandiro nevashandi vekugadzirisa kuverenga kwakasiyana-siyana kwekuita zviratidzo uye kumisikidza chaiyo yekutanga modhi. Kana zvinotevera zvinokanganisa zvakadai sekukurumidza kukwira kwemotokari, kunonoka kusingawanzoitiki, kana kukanganiswa kweprotocol (zvakadai sezvikumbiro zvisina kujairika zveARP uye nhamba huru ye ICMP packets) zvikaitika, kukanganisa kunogona kukurumidza kuonekwa nekuenzanisa nekutanga, uye kupindira panguva yakakodzera kunogona kuitwa.

3. Kuteerera Kuongorora uye Kutyisidzira Kuonekwa neKuchengetedzwa Kwepamusoro Zvinodiwa

Kune maindasitiri ane zvakakwirira zvinodikanwa zvekuchengetedza data uye kutevedzera senge zvemari, nyaya dzehurumende, uye simba, zvinodikanwa kuita yakazara-maitiro ekuongorora maitiro ekutumira data rakadzama kana kunyatsoona zvinogona kutyisidzira netiweki (sekurwiswa kweAPT, kubuda kwedata, uye kuparadzira kodhi yakaipa). Iyo isingarasikike yekutora chikamu cheTAP inovimbisa kutendeseka uye kurongeka kweadhita data, iyo inogona kusangana nezvinodiwa zvemitemo nemirau yakadai se "Network Security Law" uye "Data Chengetedzo Mutemo" yekuchengeta data uye kuongorora; panguva imwecheteyo, yakazara-vhoriyamu data packets inopawo akapfuma ekuongorora masampula ekutyisidzira masisitimu (akadai seIDS/IPS uye sandbox zvishandiso), zvichibatsira kuona yakaderera-frequency uye kutyisidzira kwakavanzika kwakavanzwa mune yakajairika traffic (senge yakashata kodhi mune encrypted traffic uye kupindira kurwiswa kwakavanzika seyakajairwa bhizinesi).

Mipimo: Kutengeserana pakati peMutengo uye Deployment Flexibility

Iyo mipimo mikuru yeTAP iri mumutengo wayo wakakwira wehardware uye kuderera kwekutumira kuchinjika. Kune rumwe rutivi, TAP isimbi yakatsaurirwa hardware, uye kunyanya, maTAP anotsigira mazinga akakwirira (akadai se40G uye 100G) kana optical fiber media inodhura zvakanyanya kudarika software-based SPAN function; kune rumwe rutivi, TAP inoda kubatanidzwa munhevedzano mune yepakutanga network network, uye chinongedzo chinoda kumbomiswa panguva yekuendesa (senge plugging uye unplugging network tambo kana optical fibers). Kune mamwe ma-core link asingatenderi kukanganisa (senge mari yetransaction link inoshanda 24/7), kutumira kwakaoma, uye nzvimbo dzekuwana dzeTAP dzinowanzofanirwa kuchengetwa pachine nguva panguva yechikamu chekuronga network.

SPAN: Inodhura-Inoshanda uye Inoshanduka "Multi-Port" Data Aggregation Solution

SPAN isoftware basa rakavakirwa mumaswichi (mamwe ma-high-end routers anoritsigirawo). Nheyo yayo ndeyekugadzirisa shanduko yemukati kuti idzokorore traffic kubva kune imwe kana anopfuura sosi zviteshi (Source Ports) kana sosi maVLAN kune yakasarudzwa yekutarisisa chiteshi (Destination Port, inozivikanwawo segirazi chiteshi) yekutambirwa uye kugadziriswa nechishandiso chekuongorora. Kusiyana neTAP, SPAN haidi zvimwe zvigadziriso zvehardware uye inokwanisa kuona kuunganidzwa kwedata chete nekuvimba nekugadziriswa kwesoftware ye switch.

Core Zvimiro: Yakatarisana ne "Mutengo-Kubudirira" uye "Kuchinjika"

1. Zero Yekuwedzera Hardware Mari uye Yakanaka Kuendesa

Sezvo SPAN iri basa rakavakirwa mu switch firmware, hapana chikonzero chekutenga zvishandiso zvehardware zvakatsaurirwa. Kuunganidzwa kwedata kunogona kugoneswa nekukurumidza chete nekugadzirisa kuburikidza neCLI (Command Line Interface) kana Web management interface (senge kutsanangura source port, monitoring port, uye mirroring direction (inbound, outbound, kana bidirectional)). Iyi "zero hardware cost" inoita kuti ive sarudzo yakakodzera kune zviitiko zvine bhajeti shoma kana zvinodiwa zvekutarisa kwenguva pfupi (senge kuyedzwa kweapplication kwenguva pfupi uye kugadzirisa matambudziko kwenguva pfupi).

2. Kutsigira kweMulti-Source Port / Multi-VLAN Traffic Aggregation

Mukana wakakura weSPAN nderekuti unogona kudzokorora traffic kubva kune akawanda sosi madoko (semushandisi machiteshi eakawanda ekuwana-layer switch) kana akawanda maVLAN kune imwechete yekutarisa chiteshi panguva imwe chete. Semuyenzaniso, kana bhizinesi rinoshanda uye vashandi vekuchengetedza vachifanira kutarisa traffic yevashandi zviteshi mumadhipatimendi akawanda (zvinoenderana nemaVLAN akasiyana) achipinda paInternet, hapana chikonzero chekuisa midziyo yekuunganidza yakaparadzana panobuda VLAN yega yega. Nekuunganidza traffic yeaya maVLAN kune imwe chiteshi chekutarisa kuburikidza neSPAN, ongororo yepakati inogona kuitika, ichivandudza zvakanyanya kushanduka uye kugona kwekuunganidza data.

3. Hapana Kuda Kukanganisa Yekutanga Network Link

Yakasiyana neyakatevedzana kutumirwa kweTAP, ese ari maviri chiteshi chiteshi uye chekutarisa chiteshi cheSPAN madoko akajairwa ekuchinja. Munguva yekugadzirisa, hapana chikonzero chekuvhara uye kusunungura tambo dzetiweki dzeiyo yekutanga link, uye hapana chinokonzeresa pakufambiswa kweiyo yekutanga traffic. Kunyangwe kana zvichidikanwa kugadzirisa iyo chiteshi chengarava kana kudzima iyo SPAN basa gare gare, inogona kuitwa chete nekugadzirisa gadziriso kuburikidza nemutsara wekuraira, iyo iri nyore kushanda uye isina kukanganisa netiweki masevhisi.

Mamiriro ekushandisa: Kutarisa pa "Low-Cost Monitoring" uye "Centralized Analysis"

1. Kutarisa Maitiro Evashandisi muManetiweki eCampus / Enterprise Networks

Muma network epa campaign kana enterprise networks, vatungamiri vanowanzo fanirwa kutarisa kana ma terminal evashandi aine mukana wekupinda zvisiri pamutemo (sekupinda mawebsite asiri pamutemo uye kudhawunirodha software yakabiwa) uye kana paine huwandu hwakawanda hwema downloads eP2P kana mavhidhiyo ari kutora bandwidth. Nekuunganidza traffic yema user ports e access-layer switches kuenda ku monitoring port kuburikidza neSPAN, pamwe chete ne traffic analysis software (yakadai seWireshark neNetFlow Analyzer), real-time monitoring ye user behaviour uye statistics ye bandwidth occupancy inogona kuwanikwa pasina kuwedzera mari ye hardware.

2. Kugadzirisa Matambudziko Kwenguva Pfupi uye Kuedzwa Kwekushandisa Kwenguva Pfupi

Kana paine zvikanganiso zvenguva pfupi uye dzimwe nguva mu network, kana kuti pazvinenge zvichidikanwa kuita bvunzo dze traffic pane application itsva (senge system yeOA yemukati uye system yevideo conferencing), SPAN inogona kushandiswa nekukurumidza kuvaka nzvimbo yekuunganidza data. Semuenzaniso, kana dhipatimendi rikashuma kumisa kwedata kakawanda mu video conferences, vashandi ve operation ne repair vanogona kugadzirisa SPAN kwenguva pfupi kuti iratidze traffic ye port uko video conference server iri kune monitoring port. Nekuongorora kunonoka kwe data packet, packet loss rate, uye bandwidth occupancy, zvinogona kuonekwa kana zvikanganiso zvichikonzerwa ne network bandwidth isina kukwana kana data packet loss. Mushure mekunge kugadzirisa kwapera, SPAN configuration inogona kudzimwa pasina kukanganisa mashandiro e network anotevera.

3. Traffic Statistics uye Nyore Auditing mune Diki uye Medium-Size Networks

Kune madiki uye epakati nepakati network (akadai semabhizinesi madiki uye kembasi marabhoritari), kana chinodiwa chekuunganidza data kuperera chisina kukwirira, uye chete nyore traffic statistics (senge bandwidth kushandiswa kwechiteshi chega chega uye chikamu chetraffic cheTop N application) kana kuongororwa kwekuteedzera kwekutanga (sekurekodha mazita ewebhusaiti anowanikwa nevashandisi) anodiwa, SPAN inogona kusangana zvizere nezvinodiwa. Yayo yakaderera-inodhura uye nyore-ku-deploy maitiro inoita kuti ive sarudzo inodhura-inoshanda yemamiriro ezvinhu akadaro.

Zvisingakwanisi: Kukanganisa muData Kutendeseka uye Kuita Impact

1. Ngozi yeData Packet Kurasikirwa uye Kusakwana Kubatwa

Kudzokororwa kwemapaketi edata neSPAN kunovimba neCPU uye cache zviwanikwa zve switch. Kana iyo traffic yenzvimbo yechiteshi iri pakakwirira (sekupfuura switch cache cache) kana switch iri kugadzirisa huwandu hukuru hwekutumira mabasa panguva imwe chete, iyo CPU ichapa pamberi pakuona kutumirwa kwekutanga traffic, uye kuderedza kana kumisa kudzokororwa kweSPAN traffic, zvichikonzera kurasikirwa kwepaketi pachiteshi chekutarisa. Pamusoro pezvo, mamwe ma switch ane zvirambidzo pamirroring reshiyo yeSPAN (sekungotsigira kudzokororwa kwe80% yetraffic) kana kusatsigira kudzokororwa kuzere kwemapaketi edata akakura (seJumbo Frames). Zvese izvi zvinotungamira kune isina kukwana yakaunganidzwa data uye kukanganisa kurongeka kwezvinotevera ongororo mhinduro.

2. Kushandisa Switch Resources uye Potential Impact pane Network Performance

Kunyangwe SPAN isingakanganise zvakananga chinongedzo chepakutanga, kana iyo nhamba yezviteshi zviteshi zvakakura kana traffic inorema, iyo data packet replication process inotora CPU zviwanikwa uye yemukati bandwidth yekuchinja. Semuenzaniso, kana traffic yeakawanda 10G ports inotaridzwa kune 10G yekutarisisa chiteshi, kana iyo yakazara traffic yezviteshi zviteshi inopfuura 10G, kwete chete chiteshi chekutarisa chinotambura nekurasikirwa kwepaketi nekuda kwekusakwana bandwidth, asi CPU kushandiswa kweiyo switch kunogonawo kuwedzera zvakanyanya, zvichikanganisa kufambisa kwepakeji yedata kune mamwe madoko uye kunyange kukonzera kuderera kwekuita kwese kwese.

3. Basa Kutsamira paSwitch Model uye Yakakwana Kuenderana

Chiyero chekutsigirwa kwebasa reSPAN chinosiyana zvakanyanya pakati pekuchinja kwevagadziri vakasiyana uye modhi. Semuyenzaniso, kudzika-kumagumo switch kunogona kungotsigira imwe chete yekutarisa chiteshi uye haitsigire VLAN mirroring kana yakazara-duplex traffic mirroring; basa reSPAN remamwe maswichi rine “one-way mirroring” restriction (kureva, kungoona girazi rinopinda kana kuti rinobuda kunze, uye harigoni kuratidzira bidirectional traffic panguva imwe chete); uyezve, chinjikira-chinja SPAN (yakadai segirazi traffic yechiteshi chekuchinja A kune chekutarisa chiteshi chekuchinja B) inoda kutsamira pane chaiwo maprotocol (akadai seCisco's RSPAN uye Huawei's ERSPAN), iyo ine yakaoma configuration uye yakaderera kugarisana, uye yakaoma kuchinjika kune zvakatipoteredza zvemusanganiswa network yevagadziri vakawanda.

Core Difference Kuenzanisa uye Sarudzo Mazano pakati peTAP neSPAN

Core Kusiyana Kuenzanisa

Kuti tinyatso ratidza mutsauko uripo pakati pezviviri izvi, tinozvienzanisa kubva kune zviyero zvehunyanzvi hunhu, maitiro ekuita, mutengo, uye anoshanda mamiriro:

Mazano Ekusarudza: "Kufananidza Kwakarurama" Zvichibva Pazvinodiwa Nemamiriro Ezvinhu

1. Mamiriro apo TAP Inofarirwa

○Kutariswa kweiyo core business links (senge data center core switches uye egress router links), inoda kuve nechokwadi chekuvimbika kwekutorwa kwedata;

○Nzvimbo yenetwork fault cause (yakadai seTCP retransmission uye application lag), inoda kuongororwa kwakarurama zvichibva pamapaketi edata akazara;

○Maindasitiri ane kuchengetedzwa kwepamusoro uye kutevedzera zvinodiwa (mari, nyaya dzehurumende, simba), zvinoda kusangana nekuvimbika uye kusakanganisa kwedata rekuongorora;

○Yakakwira-reti network nharaunda (10G uye pamusoro) kana zviitiko zvine hombe-saizi data mapaketi, zvinoda kudzivirira kurasikirwa kwepaketi muSPAN.

2. Mamiriro apo SPAN Inofarirwa

○Manetwork madiki nepakati ane bhajeti shoma, kana zviitiko zvinoda nhamba dziri nyore dzetraffic (dzakadai sebandwidth occupation uye Top applications);

○Kugadzirisa kwechinguvana kana kuedzwa kwechikumbiro chenguva pfupi (senge bvunzo yekumisikidza sisitimu), inoda kukurumidza kutumirwa pasina basa renguva refu rekushandisa;

○Kutariswa kwepakati kweakawanda-sosi zviteshi / akawanda-VLANs (akadai sekambasi network mushandisi maitiro ekutarisa), inoda flexible traffic aggregation;

○Kutariswa kweasiri-musimboti links (akadai semushandisi madoko ekuwana-layer switch), ine zvakaderera zvinodiwa pakutendeseka kwekutora data.

3. Hybrid Usage Scenarios

Mune dzimwe nzvimbo dzakaoma dzetiweki, nzira yakasanganiswa yekuendesa ye "TAP + SPAN" inogona kugamuchirwa. Semuyenzaniso, shandisa TAP mumanongedzo epakati pe data data kuti ive nechokwadi chekuti yakazara-vhoriyamu data kubatwa kwekugadzirisa uye kuchengetedzwa kwekuongorora; gadzirisa SPAN mune yekuwana-layer kana aggregation-layer switch kuti iunganidze yakapararira mushandisi traffic yekuongorora maitiro uye bandwidth nhamba. Izvi hazvingosangana chete nezvinodiwa zvekutarisisa zvinodiwa zvemakiyi link asi zvakare zvinoderedza iyo yese mutengo wekutumira.

Saka, sematekinoroji maviri ekutanga ekutora netiweki data, TAP uye SPAN haina zvachose "zvakanakira kana kukanganisa" asi chete "misiyano yemamiriro ekugadzirisa". TAP inotarisana ne "kurasikirwa kusingafadzi" uye "kugadzikana kuvimbika", uye inokodzera zviitiko zvakakosha zvine zvinodiwa zvakanyanya zvekuvimbika kwedata uye kugadzikana kwetiweki, asi ine mutengo wakanyanya uye kuderera kwekutumira kuchinjika; SPAN ine mabhenefiti e "zero mutengo" uye "kuchinjika uye nyore", uye inokodzera yakaderera-mutengo, yenguva pfupi, kana isiri-yakakosha mamiriro, asi ine njodzi dzekurasikirwa nedata uye maitiro ekuita.

Mukushanda kwetiweki nekugadzirisa, mainjiniya etiweki anofanirwa kusarudza yakanyatsokodzera tekinoroji mhinduro zvichienderana nezvavanoda zvebhizinesi (senge iri yepakati link uye kana kuongororwa kwakaringana kuchidikanwa), mari yebhajeti, chiyero chetiweki, uye zvinodiwa zvekuteerera. Panguva imwecheteyo, nekuvandudzwa kwetiweki mazinga (akadai se25G, 100G, uye 400G) uye kuvandudzwa kwezvinodiwa zvekuchengetedza network, tekinoroji yeTAP iri kuramba ichikura (sekutsigira hungwaru kupatsanurwa kwemigwagwa uye kuwanda kwechiteshi), uye vagadziri vekuchinja vari kuramba vachigadzirisa basa reSPAN (sekuvandudza kurasikirwa kwegirazi kugona uye kutsigira). Mune ramangwana, matekinoroji maviri anozoenderera mberi nekuita basa rawo muminda yavo uye nekupa yakanyatso shanda uye yakaringana tsigiro yedata kune network manejimendi.