Network Packet Broker (NPB) chishandiso chakafanana ne networking chinosiyana-siyana kubva pamidziyo inotakurika kusvika kuma unit cases e1U ne2U kusvika kuma large cases nema board systems. Kusiyana ne switch, NPB haichinje traffic inoyerera mairi chero nenzira ipi zvayo kunze kwekunge yarairwa zvakajeka. NPB inogona kugamuchira traffic pane imwe kana kupfuura interfaces, kuita mamwe mabasa akatarwa pane iyo traffic, uye yozoiburitsa kune imwe kana kupfuura interfaces.
Izvi zvinowanzonzi mapping echiteshi chero chipi zvacho, akawanda-kune-chero, uye chero-kune-mazhinji. Mabasa anogona kuitwa anotangira pakuva nyore, akadai sekutumira kana kurasa traffic, kusvika pakuoma, akadai sekusefa ruzivo rwuri pamusoro pechikamu 5 kuti uone chikamu chakati. MaInterfaces paNPB anogona kunge ari ekubatanidza tambo dzemhangura, asi kazhinji maSFP/SFP + uye maQSFP frames, anobvumira vashandisi kushandisa akasiyana-siyana emedia uye bandwidth speeds. NPB's feature set yakavakirwa panheyo yekuwedzera kushanda zvakanaka kwemidziyo yenetwork, kunyanya kutarisa, kuongorora, uye maturusi ekuchengetedza.
Mashandiro api anoitwa neNetwork Packet Broker?
Hunhu hweNPB hwakawanda uye hunogona kusiyana zvichienderana nerudzi rwechishandiso uye modhi yacho, kunyangwe chero mumiririri wepakeji akakodzera basa rake achada kuva nehukuru hwehunhu hwacho. NPB yakawanda (NPB yakajairika) inoshanda paOSI layers 2 kusvika 4.
Kazhinji, unogona kuwana zvinhu zvinotevera paNPB yeL2-4: traffic (kana zvikamu zvayo) redirection, traffic filtering, traffic replication, protocol stripping, packet slicing (truncation), kutanga kana kugumisa network tunnel protocols dzakasiyana-siyana, uye load balancing ye traffic. Sezvaitarisirwa, L2-4's NPB inogona kusefa VLAN, MPLS labels, MAC addresses (source and target), IP addresses (source and target), TCP and UDP ports (source and target), uye kunyange TCP flags, pamwe neICMP, SCTP, uye ARP traffic. Ichi hachisi chinhu chinofanira kushandiswa, asi chinopa pfungwa yekuti NPB inoshanda pazvikamu 2 kusvika 4 inogona sei kuparadzanisa nekuona subsets dzetraffic. Chinhu chikuru chinodiwa nevatengi muNPB ibackplane isingavharidzi.
Network packet Broker inofanira kukwanisa kusangana netraffic throughput yakazara yeport yega yega pamudziyo. Mu system ye chassis, kubatana ne backplane kunofanirawo kukwanisa kusangana netraffic load yakazara yemamodules akabatana. Kana NPB ikadonhedza packet, maturusi aya haazove nekunzwisisa kwakazara kwenetwork.
Kunyangwe ruzhinji rweNPB rwakavakirwa paASIC kana FPGA, nekuda kwechokwadi chekushanda kwekugadzirisa mapaketi, uchawana ma integrations akawanda kana maCPU anogamuchirwa (kuburikidza nema modules). Mylinking™ Network Packet Brokers (NPB) yakavakirwa pa ASIC solution. Ichi chinowanzo kuve chinhu chinopa processing inochinjika uye saka hachigone kuitwa chete mu hardware. Izvi zvinosanganisira packet drauplication, timestamps, SSL/TLS decryption, keyword search, uye regular expression search. Zvakakosha kuziva kuti mashandiro ayo anoenderana nekushanda kweCPU. (Semuenzaniso, regular expression searches ye pattern imwechete inogona kupa mhedzisiro dzakasiyana dzekushanda zvichienderana nerudzi rwetraffic, matching rate, uye bandwidth), saka hazvisi nyore kuziva usati watanga kushandisa chaiyo.
Kana zvinhu zvinoenderana neCPU zvikagoneswa, zvinova chinhu chinogumira pakushanda kweNPB. Kuuya kweCPU nemachipisi ekushandura anorongwa, akadai seCavium Xpliant, Barefoot Tofino naInnovium Teralynx, kwakagadzirawo hwaro hwekuwedzera kwehunyanzvi hwema "new-generation network packet agents". Aya ma "functional units" anogona kubata traffic iri pamusoro peL4 (inowanzonzi L7 packet agents). Pakati pezvinhu zvepamusoro zvataurwa pamusoro apa, keyword uye regular expression search mienzaniso yakanaka ye "next-generation ability". Kugona kutsvaga payloads dzepacket kunopa mikana yekusefa traffic pachikamu uye padanho rekushandisa, uye kunopa kutonga kwakanaka pane network iri kuchinja kupfuura L2-4.
Network Packet Broker inoenderana sei nehurongwa hwekuvaka?
NPB inogona kuiswa mu network infrastructure nenzira mbiri dzakasiyana:
1- Mutsetse
2- Kunze kwebhendi.
Nzira yega yega ine zvakanakira nezvayakaipira uye inobvumira kugadziriswa kwetraffic nenzira dzisingagone kuitwa nedzimwe nzira. Inline network packet broker ine network traffic yenguva chaiyo inofamba nemudziyo ichienda kwainoenda. Izvi zvinopa mukana wekugadzirisa traffic munguva chaiyo. Semuenzaniso, pakuwedzera, kugadzirisa, kana kudzima VLAN tag kana kuchinja ma IP address ekuenda, traffic inokopwa kune imwe link. Senzira ye inline, NPB inogona zvakare kupa redundancy kune mamwe maturusi e inline, akadai seIDS, IPS, kana firewalls. NPB inogona kutarisa mamiriro emidziyo yakadaro uye kushandura traffic kuenda kune hot standby kana ikakundikana.
Inopa mukana mukuru wekugadzirisa traffic uye kudzokororwa kwezvishandiso zvakawanda zvekutarisa nekuchengetedza pasina kukanganisa network chaiyo. Inopawo mukana wekuona network zvisati zvamboitika uye inoita kuti zvishandiso zvese zvigamuchire kopi yetraffic inodiwa kuti zviite mabasa azvo nemazvo. Hazvingovimbisi chete kuti zvishandiso zvako zvekutarisa, kuchengetedza, uye kuongorora zvinowana traffic yazvinoda, asiwo kuti network yako yakachengeteka. Inovimbisawo kuti mudziyo haushandise zviwanikwa patraffic isingadiwe. Pamwe network analyzer yako haidi kurekodha backup traffic nekuti inotora nzvimbo yakakosha yediski panguva yebackup. Zvinhu izvi zvinosefetwa zviri nyore kubva muanalyzer uku uchichengetedza mamwe traffic ese echishandiso. Pamwe une subnet yese yaunoda kuchengetedza yakavanzika kubva kune imwe system; zvakare, izvi zvinobviswa zviri nyore pane yakasarudzwa output port. Kutaura zvazviri, NPB imwe chete inogona kugadzirisa mamwe ma traffic links mukati menguva ichigadzirisa mamwe traffic kunze kwebhendi.
Nguva yekutumira: Kurume-09-2022
