Chii chingakubatsirei neIntelligent Network Inline Bypass Switch?

1- Chii chinonzi Define Heartbeat Packet?

Mapaketi emoyo eMylinking™ Network Tap Bypass Switch anongogara ari eEthernet Layer 2 frames. Paunenge uchishandisa transparent Layer 2 bridging mode (yakadai seIPS / FW), maframes eLayer 2 Ethernet anowanzo tumirwa, kuvharwa kana kuraswa. Panguva imwe chete, Mylinking™ Network Tap Bypass Switch inotsigira custom heartbeat message format kuti igadzirise mamiriro ezvinhu ekuti mamwe ma serial security devices haagone kutumira maframes eLayer 2 Ethernet.

Uye Mylinking™ Network Tap Bypass Switch inotsigirawo kuonekwa kwepaketi yemoyo zvichibva paVLAN tag, Layer 3 uye Layer 4 custom message types. Zvichibva pamaitiro aya, mushandisi anogona kushandisa basa rekuyedza kuchengetedzwa kwebasa remudziyo wekuchengetedza kubatana kuti rive rinoshanda zvakanyanya kuona kuti masevhisi ekuchengetedza anoenderana anoshanda nemazvo.

Mylinking™ Network Tap Bypass Switch inogona kutsigira monitor kuti itumire mapaketi akasiyana ekurova kwemoyo kumativi ese ari maviri. Semuenzaniso, mapaketi ekurova kwemoyo emhando yeTCP neUDP akagadzirwa pa "Strategy Traffic Traction Protector", zvichienderana nehunhu hwemudziyo weserial. Unogona kugadzirisa kutumirwa kwemapaketi ekurova kwemoyo eTCP pachiteshi che uplink monitor A uye kutumirwa kwemapaketi ekurova kwemoyo eUDP pachiteshi che downlink monitor B kuti ienderane nehurongwa hwekutumira meseji hwemudziyo wekuchengetedza weserial. Basa iri rinogona kuvimbisa tambo zviri nani. Batanidza michina yekuchengetedza kuti ishande zvakajairika.

Mylinking™ Network Inline Bypass Switch inotsvakurudzwa uye yakagadzirwa kuti ishandiswe pakuisa mhando dzakasiyana dzemidziyo yekuchengetedza serial uku ichipa kuvimbika kwakanyanya kune network.

2-Network Inline Bypass Switch Advanced Features uye Technologies
Mylinking™ “SpecFlow” Protection Mode uye tekinoroji ye “FullLink” Protection Mode
Mylinking™ Fast Bypass Switching Protection Technology
Tekinoroji yeMylinking™ "LinkSafeSwitch"
Mylinking™ “WebService” Dynamic Strategy Kutumira/Kuburitsa Tekinoroji
Tekinoroji yeMylinking™ Intelligent Heartbeat Detection Messages
Tekinoroji yeMylinking™ Definible Heartbeat Messages
Tekinoroji yeKuenzanisa Mutoro weMylinking™ ine Zvisungo Zvakawanda
Tekinoroji yeMylinking™ ine Hungwaru yekuparadzira Traffic
Tekinoroji yeKuenzanisa Mutoro yeMylinking™
Tekinoroji yeMylinking™ Remote Management (HTTP/WEB, TELNET/SSH, “EasyConfig/AdvanceConfig” Hunhu)

3-Network Inline Bypass Switch Application (sezvinotevera)

3.1 Njodzi yeMidziyo Yekuchengetedza Yakabatana (IPS / FW)
Inotevera ndiyo nzira yakajairika yeIPS (Intrusion Prevention System), FW (Firewall) deployment mode, IPS / FW inoiswa muzvikamu zvakatevedzana kune network midziyo (routers, switches, nezvimwewo) pakati petraffic kuburikidza nekuita security checks, zvichienderana nemutemo wekuchengetedza unoenderana kuti uone kuburitswa kana kuvharwa kwetraffic inoenderana, kuti uwane simba rekudzivirira kuchengetedza.

Panguva imwe chete, tinogona kuona IPS / FW sekushandiswa kwemidziyo serial, inowanzoiswa panzvimbo yakakosha yenetwork yebhizinesi kuti iite security serial, kuvimbika kwemidziyo yayo yakabatana kunokanganisa zvakananga kuwanikwa kwenetwork yebhizinesi. Kana serial devices dzakawandisa, dzadonha, software updates, policy updates, nezvimwewo, kuwanikwa kwenetwork yebhizinesi rese kuchakanganiswa zvikuru. Panguva ino, isu chete kuburikidza ne network cut, physical bypass jumper tinogona kuita kuti network idzorerwe, zvichikanganisa zvakanyanya kuvimbika kwenetwork. IPS / FW nedzimwe serial devices kune rumwe rutivi zvinovandudza kuiswa kwekuchengetedzwa kwenetwork yebhizinesi, kune rumwe rutivi zvinoderedzawo kuvimbika kwenetwork dzebhizinesi, zvichiwedzera njodzi yekuti network isawanikwe.

3.2 Dziviriro yeMidziyo yeInline Link Series

Mylinking™ "Network Inline Bypass" inoiswa munhevedzano pakati pemidziyo yenetwork (routers, switches, nezvimwewo), uye kufamba kwedata pakati pemidziyo yenetwork hakuchatungamiri zvakananga kuIPS / FW, "Network Inline Bypass" kuenda kuIPS / FW, apo IPS / FW nekuda kwekuwanda, kuparara, software updates, policy updates nezvimwe zvinhu zvekukundikana, "Network Inline Bypass" kuburikidza ne intelligent heartbeat message detection Function ye timetime discovery, uye nokudaro skip the error device, pasina kukanganisa preference yenetwork, fast network accessories connection accessories to protect the normal communication network; apo IPS / FW failure recovery, asiwo kuburikidza ne intelligent heartbeat packets Kuona kuonekwa kwebasa nenguva, link yekutanga yekudzoreredza kuchengetedzeka kwe enterprise network security checks.

Mylinking™ "Network Inline Bypass" ine simba rekuona meseji yemoyo ine hungwaru, mushandisi anogona kugadzirisa nguva yemoyo uye huwandu hwakanyanya hwekuyedzwa, kuburikidza nemeseji yemoyo yakagadzirwa paIPS / FW yekuyedzwa kwehutano, senge kutumira meseji yekutarisa moyo kuchiteshi chepamusoro / pasi peIPS / FW, uye wobva wagamuchira kubva kuchiteshi chepamusoro / pasi peIPS / FW, uye kutonga kana IPS / FW iri kushanda zvakanaka nekutumira nekugamuchira meseji yemoyo.

3.3 Dziviriro ye "SpecFlow" Policy Flow Inline Traction Series

Kana mudziyo wekuchengetedza network uchingoda chete kubata nekuchengetedzwa kwetraffic mumutsara, kuburikidza nebasa reMylinking™ "Network Inline Bypass" traffic per-processing, kuburikidza nehurongwa hwekutarisa traffic kuti ubatanidze mudziyo wekuchengetedza "Concerned" traffic inodzoserwa zvakananga kune network link, uye "chikamu chetraffic" chiri kudhonzwa kune mudziyo wekuchengetedza uri mumutsara kuti uite ongororo dzekuchengetedza. Izvi hazvingogumiri pakuchengetedza mashandiro ekuona kuchengetedza kwemudziyo wekuchengetedza, asiwo zvinoderedza kufamba kusina kunaka kwemidziyo yekuchengetedza kuti igadzirise kumanikidzwa; panguva imwe chete, "Network Inline Bypass" inogona kuona mamiriro ekushanda kwemudziyo wekuchengetedza munguva chaiyo. Mudziyo wekuchengetedza unoshanda zvisina kujairika unodarika traffic yedata zvakananga kudzivirira kukanganisa network service.

3.4 Kudzivirirwa kweMutoro wakaringana

Mylinking™ “Network Inline Bypass” inoiswa munhevedzano pakati pemidziyo yenetwork (routers, switches, nezvimwewo). Kana mashandiro ekugadzirisa eIPS / FW imwe chete asingakwani kugadzirisa traffic yenetwork link peak, basa rekuchengetedza traffic load balancing remudziviriri, "bundling" ye IPS / FW cluster processing network link traffic yakawanda, inogona kuderedza zvinobudirira IPS / FW processing pressure imwe chete, inovandudza mashandiro ekugadzirisa ese kuti isangane nebandwidth yakakwira yenzvimbo yedeployment.
Mylinking™ “Network Inline Bypass” ine basa rakasimba rekuenzanisa mutoro, zvichienderana ne frame VLAN tag, MAC information, IP information, port number, protocol uye rumwe ruzivo pamusoro pekugoverwa kweHash load balancing kwetraffic kuve nechokwadi chekuti IPS / FW yega yega yakagamuchira data flow Session integrity.

3.5 Dziviriro yeMuchina weInline Inoyerera muMateru (Shandura Kubatana kweSerial kuenda kuKubatana kwaParallel)
Mune mamwe malink akakosha (akadai seInternet outlets, server area exchange link) nzvimbo inowanzo kuve nekuda kwezvinodiwa zvekuchengetedza uye kuiswa kwemidziyo yakawanda yekuongorora kuchengetedza iri mu-line (yakadai sefirewall, anti-DDOS attack equipment, WEB application firewall, intrusion prevention Equipment, nezvimwewo), michina yakawanda yekuona kuchengetedza panguva imwe chete mumutsara pane link kuti iwedzere link yepoindi imwe chete yekukundikana, zvichideredza kuvimbika kwenetwork. Uye mukushandiswa kwemidziyo yekuchengetedza yataurwa pamusoro apa, kuvandudzwa kwemidziyo, kutsiva michina nezvimwe, zvichaita kuti network ikanganiswe kwenguva yakareba uye chirongwa chikuru chidzivise kuita mapurojekiti akadaro.
Nekushandisa "Network Inline Bypass" nenzira yakabatana, nzira yekuisa zvishandiso zvakawanda zvekuchengetedza zvakabatana mumutsara pane imwe link inogona kuchinjwa kubva ku "physical concatenation mode" kuenda ku "physical concatenation, logical concatenation mode". Iyi link iri pa link ye point imwe chete yekukundikana kuvandudza kuvimbika kwe link, nepo "Network Inline Bypass" iri pa link flow on demand traction, kuti iwane flow imwechete ne mode yekutanga ye safe processing effect.

Zvishandiso zvekuchengetedza zvinopfuura chimwe chete panguva imwe chete mudhayagiramu yekuiswa kweseji:

Dhiagiramu yeKuisa Switch yeNetwork Inline Bypass:

3.6 Zvichibva paDynamic Strategy yeDziviriro yeKuona Kuchengetedzeka kweTraffic Traffic
"Network Inline Bypass" Imwe nzira yepamusoro yekushandisa yakavakirwa pahurongwa hwekuchengetedza traffic traction, kushandiswa kwenzira iyi sezvakaratidzwa pazasi:

Tora michina yekuongorora kuchengetedzwa inonzi "Anti-DDoS attack protection and detection", semuenzaniso, kuburikidza nekushandiswa kwe "Network Inline Bypass" uye anti-DDOS protection equipment wobva wabatanidzwa ku "Network Inline Bypass", mu "Traction protector" yenguva dzose kusvika pahuwandu hwetraffic wire-speed forwarding panguva imwe chete flow mirror output kuenda ku "anti-DDOS attack protection device", kana yaonekwa yeserver IP (kana IP network segment) mushure mekurwiswa, "anti-DDOS attack protection device" ichagadzira mitemo inoenderana netraffic flow uye ichaitumira ku "Network Inline Bypass" kuburikidza ne dynamic policy delivery interface. Iyo "Network Inline Bypass" inogona kugadzirisa "traffic traction dynamic" mushure mekugamuchira dynamic policy rule pool "uye pakarepo" rule yakarova attack server traffic "traction to the" anti-DDoS attack protection and detection equipment for processing, kuti ishande mushure mekurwiswa uye yozopinzwazve munetwork.

Chirongwa chekushandisa chakavakirwa pa "Network Inline Bypass" chiri nyore kushandisa pane chirongwa chekare cheBGP route injection kana chimwe chirongwa chetrack traction, uye nharaunda hainyanyi kutsamira pane network uye kuvimbika kwacho kwakanyanya.

"Network Inline Bypass" ine hunhu hunotevera hunotsigira dziviriro yekuona kuchengetedzwa kwemutemo unochinja:
1, "Network Inline Bypass" kupa kunze kwemitemo yakavakirwa paWEBSERIVCE interface, zviri nyore kubatanidzwa nemidziyo yekuchengetedza yevamwe.
2, "Network Inline Bypass" zvichibva pa "hardware pure ASIC chip" inotumira mafaira kusvika pa10Gbps wire-speed packets pasina kuvharira switch forwarding, uye "traffic traction dynamic rule library" zvisinei nenhamba.
3, "Network Inline Bypass" basa rehunyanzvi rakavakirwa mukati meBYPASS, kunyangwe kana chidziviriro chacho chikatadza, chinogonawo kunzvenga serial link yekutanga nekukasika, hachikanganisi link yekutanga yekutaurirana kwakajairika.