Chii chingaitwa neIntelligent Network Inline Bypass Switch kwauri?

1- Chii chinotsanangudza Heartbeat Packet?

Mapaketi ekurova kwemoyo eMylinking™ Network Tap Bypass Chinja default kuenda kuEthernet Layer 2 mafuremu. Kana uchitumira yakajeka Layer 2 bridging mode (senge IPS / FW), Layer 2 Ethernet mafuremu anowanzo kuendeswa mberi, kuvharwa kana kuraswa. Panguva imwecheteyo, Mylinking ™ Network Tap Bypass Switch inotsigira tsika yekurova meseji fomati kuti isangane nemamiriro ezvinhu ayo mamwe akakosha serial chengetedzo maturusi haawanzo kuendesa akajairwa Layer 2 Ethernet mafuremu.

Uye Mylinking ™ Network Tap Bypass Switch inotsigirawo kurova kwemoyo packet kutariswa kwakavakirwa paVLAN tag, Layer 3 uye Layer 4 tsika meseji mhando. Zvichienderana nemuchina uyu, mushandisi anogona kuita sevhisi yekuchengetedza bvunzo basa rekubatanidza kuchengetedza mudziyo kuita kuti inyatso shanda kuona kuti inoenderana masevhisi ekuchengetedza anoshanda nemazvo.

Mylinking™ Network Tap Bypass Shandura inogona kutsigira iyo yekutarisa kuti itumire akasiyana mapikisi emoyo mumativi ese. Semuenzaniso, TCP uye UDP mhando yekurova kwemoyo mapaketi akagadziridzwa pa "Strategy Traffic Traction Protector", zvichienderana nekunyanya kweiyo serial mudziyo. Iwe unogona kugadzirisa kutumira kweTCP kurova kwemoyo mapaketi pauplink monitor A port uye kutumira kweUDP heartbeat packets pane downlink monitor B port kuti igamuchire meseji yekutumira meseji yeserial kuchengetedza mudziyo. Basa iri rinogona kunyatsovimbisa tambo. Batanidza midziyo yekuchengetedza kune yakajairika kushanda.

Mylinking ™ Network Inline Bypass Switch inotsvagirwa uye yakagadziridzwa kuti ishandiswe kuchinjika kutumirwa kwemhando dzakasiyana dzeserial kuchengetedza michina uku ichipa yakakwirira network kuvimbika.

2-Network Inline Bypass Switch Advanced Features uye Technologies
Mylinking ™ "SpecFlow" Dziviriro Mode uye "FullLink" Dziviriro Mode Tekinoroji
Mylinking™ Fast Bypass Kuchinja Dziviriro Technology
Mylinking™ "LinkSafeSwitch" Tekinoroji
Mylinking™ "WebService" Dynamic Strategy Forwarding/Issue Technology
Mylinking™ Intelligent Heartbeat Message Detection Technology
Mylinking™ Definable Heartbeat Messages Technology
Mylinking™ Multi-link Load Balancing Technology
Mylinking™ Intelligent Traffic Distribution Technology
Mylinking™ Dynamic Load Balancing Technology
Mylinking™ Remote Management Technology (HTTP/WEB, TELNET/SSH, “EasyConfig/AdvanceConfig” Hunhu)

3-Network Inline Bypass Shandura Chishandiso (sezvinotevera)

3.1 Ngozi yeInline Chengetedzo Equipment (IPS / FW)
Izvi zvinotevera zvakajairwa IPS (Intrusion Prevention System), FW (Firewall) deployment mode, IPS / FW inoiswa munhevedzano kune network michina (routers, switch, etc.) pakati petraffic kuburikidza nekuitwa kwekuchengetedza cheki, zvinoenderana neinowirirana chengetedzo mutemo kuona kuburitswa kana kuvharira inoenderana traffic, kuti iwane mhedzisiro yekuchengetedza kuchengetedza.

Panguva imwecheteyo, isu tinokwanisa kuona IPS / FW seye serial deployment yemidziyo, inowanzoiswa munzvimbo yakakosha yebhizinesi network kuti iite serial chengetedzo, kuvimbika kwemidziyo yayo yakabatana inokanganisa iyo yakazara bhizinesi network kuwanikwa. Kana iyo serial zvishandiso zvakawandisa, kuparara, kugadziridzwa kwesoftware, zvigadziriso zvepolicy, nezvimwewo, kuwanikwa kwese bhizinesi network kuchakanganiswa zvakanyanya. Panguva ino, isu chete kuburikidza netiweki yekucheka, yepanyama bypass jumper inogona kuita kuti network idzorerwe, zvichikanganisa zvakanyanya kuvimbika kwetiweki. IPS / FW uye zvimwe serial zvishandiso kune rumwe rutivi zvinovandudza kutumirwa kwebhizinesi network chengetedzo, kune rumwe rutivi zvakare inoderedza kuvimbika kwemabhizinesi network, kuwedzera njodzi yetiweki haisipo.

3.2 Inline Link Series Equipment Dziviriro

Mylinking ™ "Network Inline Bypass" inoiswa munhevedzano pakati petiweki zvishandiso (marouter, switch, nezvimwewo), uye kuyerera kwedata pakati petiweki zvishandiso hakuchatungamira zvakananga kuIPS / FW, "Network Inline Bypass" kune IPS / FW, apo IPS / FW nekuda kwekuremerwa, kuparara, zvigadziriso zvesoftware, zvigadziriso zvepolicy uye mamwe mamiriro ekuona nekutadza kwemukati meseji. kuwanikwa panguva yakakodzera, uye nekudaro svetuka chigadziriso chinokanganisa, pasina kukanganisa nzvimbo yetiweki, iyo inokurumidza network michina yakabatana zvakananga kuchengetedza yakajairika yekutaurirana network; apo IPS / FW kukundikana kupora, asiwo kuburikidza nehungwaru kurova kwemwoyo mapaketi Kuonekwa kwekuonekwa panguva yebasa, iyo yekutanga link yekudzorera kuchengetedzwa kwebhizinesi network kuchengetedza macheki.

Mylinking ™ "Network Inline Bypass" ine simba rakangwara rakangwara rekuona meseji yekuona meseji, mushandisi anogona kugadzirisa kurova kwemoyo uye huwandu hwakanyanya hwekuyedza, kuburikidza neyakajairwa meseji yekurova kwemoyo paIPS / FW yekuongororwa hutano, sekutumira mameseji ekutarisa kurova kwemoyo kune kumusoro / kuzasi kwechiteshi che IPS / FW, uye wozogamuchira kubva kumusoro kweIPW mutongi / kudzika. kazhinji nekutumira uye kugamuchira meseji yekurova kwemoyo.

3.3 "SpecFlow" Policy Flow Inline Traction Series Dziviriro

Kana iyo yekuchengetedza network mudziyo unongoda kubata neiyo chaiyo traffic mukuchengetedza kuchengetedza, kuburikidza neMylinking ™ "Network Inline Bypass" traffic per-processing basa, kuburikidza netraffic yekuongorora nzira yekubatanidza mudziyo wekuchengetedza ”Kunetsekana "traffic inodzoserwa yakananga kune network link, uye iyo" ine chekuita netraffic chikamu "inokwevera kune in-line yekuchengetedza mudziyo kuita cheki chekuchengetedza. Izvi hazvizongochengetedza kushandiswa kwakajairwa kwekuchengetedza kuchengetedza basa rekuchengetedza mudziyo, asi zvakare kuderedza kuyerera kusingashande kwemidziyo yekuchengetedza kutarisana nekumanikidza; panguva imwecheteyo, iyo "Network Inline Bypass" inogona kuona mamiriro ekushanda echigadzirwa chekuchengetedza munguva chaiyo. Chishandiso chekuchengetedza chinoshanda zvisingaite chinonzvenga traffic yedata zvakananga kudzivirira kukanganisa kwesevhisi yetiweki.

3.4 Rodha yakaenzana Series Dziviriro

Iyo Mylinking ™ "Network Inline Bypass" inoiswa munhevedzano pakati petiweki zvishandiso (routers, switch, nezvimwewo). Kana imwe IPS / FW yekugadzirisa mashandiro asina kukwana kubata netiweki yekubatanidza peak traffic, Iyo traffic load balancing basa remudziviriri, iyo "bundling" yeakawanda IPS / FW cluster processing network link traffic, inogona kunyatso kudzikisa imwechete IPS / FW yekugadzirisa kumanikidza, kuvandudza iyo yese yekugadzirisa mashandiro kusangana neiyo yakakwira bandwidth yenzvimbo yekuendesa Claim.
Mylinking ™ "Network Inline Bypass" ine simba rekuenzanisa basa, zvinoenderana nefuremu VLAN tag, ruzivo rweMAC, ruzivo rweIP, nhamba yechiteshi, protocol uye rumwe ruzivo rweHash load balancing kugovera traffic kuti ive nechokwadi chekuti imwe neimwe IPS / FW yakagamuchira data kuyerera Session kutendeseka.

3.5 Multi-series Inline Equipment Flow Traction Dziviriro (Shandura Serial Connection kune Parallel Connection)
Mune mamwe makiyi link (akadai seInternet outlets, server area exchange link) nzvimbo inowanzoitika nekuda kwezvinodiwa zvekuchengetedza maficha uye kutumirwa kweakawanda-in-line chengetedzo yekuongorora michina (senge firewall, anti-DDOS kurwisa midziyo, WEB application firewall, intrusion kudzivirira Equipment, nezvimwewo), akawanda chengetedzo yekuona michina panguva imwe chete munhevedzano pane chinongedzo kuti uwedzere kutadza kweiyo imwe chete kutadza kutendeseka, kudzikisira network. Uye mune yataurwa pamusoro chengetedzo midziyo pa-line deployment, midziyo upgraded, midziyo yokutsiva uye mamwe mashandiro, zvichaita kuti network kwenguva refu kukanganiswa basa uye yakakura purojekiti kucheka chiito kupedza kubudirira kuitisa mapurojekiti akadaro.
Nekuisa iyo "Network Inline Bypass" nenzira yakabatana, iyo nzira yekuendesa yezvishandiso zvakawanda zvekuchengetedza zvakabatanidzwa munhevedzano pane imwechete link inogona kuchinjwa kubva ku "physical concatenation mode" kuenda ku "physical concatenation, inonzwisisika concatenation mode" Iyo chinongedzo pane chinongedzo chechinhu chimwe chekutadza kuvandudza kuvimbika kwechibatanidzo, nepo "Network" inoyerera pairi kuyerera neinoyerera iyo inoyerera. maitiro ekuchengetedza akachengeteka maitiro.

Inopfuura imwe chengetedzo mudziyo panguva imwe chete mune akateedzana deployment dhizaini:

Network Inline Bypass Switch Deployment Diagram:

3.6 Kubva paDynamic Strategy yeTraffic Traction Security Detection Dziviriro
"Network Inline Bypass" Chimwe chiitiko chepamberi chekushandisa chakavakirwa pane inosimba nzira yetraffic traction kuchengetedza yekudzivirira yekudzivirira maapplication, kutumirwa kwenzira sezvakaratidzwa pazasi:

Tora "Anti-DDoS kurwisa kudzivirirwa uye kucherechedzwa" chengetedzo yekuyedza michina, semuenzaniso, kuburikidza nekumberi-kuguma kutumirwa kwe "Network Inline Bypass" uyezve anti-DDOS yekudzivirira michina uyezve yakabatana ne "Network Inline Bypass", mune yakajairwa "Traction mudziviriri" kune yakazara yakazara traffic waya-yekumhanyisa kutumira panguva imwe chete iyo inoyerera-yekumhanyisa girazi inobuda kune IP server kurwisa kamwe chete IPOS yekudzivirira. network segment) mushure mekurwiswa," anti-DDOS kurwisa chidziviriro ”ichagadzira yakanangana netraffic kuyerera inoenderana mitemo uye itumire kune "Network Inline Bypass" kuburikidza neiyo ine simba yekuburitsa mutemo. Iyo "Network Inline Bypass" inogona kugadzirisa iyo "traffic traction dynamic" mushure mekugamuchira dynamic policy mitemo Rule pool "uye pakarepo" mutemo warova kurwisa server traffic "traction kune" anti-DDoS kurwisa kuchengetedzwa uye kuona "midziyo yekugadzirisa, kuti ishande mushure mekurwiswa kuyerera uye wozoiswazve mumambure.

Iyo application scheme yakavakirwa pa "Network Inline Bypass" iri nyore kuita pane yechinyakare BGP nzira jekiseni kana imwe traffic traffic scheme, uye nharaunda haina kutsamira pane network uye kuvimbika kwakakwira.

"Network Inline Bypass" ine anotevera maitiro ekutsigira ane simba chengetedzo yekuona kuchengetedza:
1, "Network Inline Bypass" kupa kunze kwemitemo yakavakirwa paWEBSERIVCE interface, nyore kusanganisa neyechitatu-bato rekuchengetedza zvishandiso.
2, ” Network Inline Bypass ” yakavakirwa pahardware yakachena ASIC chip inoendesa kusvika ku10Gbps waya-yekumhanyisa mapaketi pasina kuvharira kufambisa kwekuchinja, uye "traffic traction dynamic rule library" zvisinei nenhamba.
3, "Network Inline Bypass" yakavakirwa-mukati nyanzvi BYPASS basa, kunyangwe kana mudziviriri pachayo atadza, anogona zvakare kunzvenga iyo yekutanga serial link nekukasira, haikanganisi iyo yekutanga link yekutaurirana kwakajairwa.