TheNetwork Packet Broker(NPB), iyo inosanganisira inowanzoshandiswa 1G NPB, 10G NPB, 25G NPB, 40G NPB, 100G NPB, 400G NPB, uyeNetwork Test Access Port (TAP), mudziyo wehardware unobaira zvakananga mutambo yetiweki uye unotumira chidimbu chetiweki yekukurukurirana kune mamwe maturusi.
Network Packet Brokers inowanzoshandiswa mu network intrusion monitoring systems (IDS), network detectors, uye profilers. Port mirroring chikamu. Mune shunting mode, iyo inotariswa UTP link (isina kuvharwa chinongedzo) yakakamurwa kuita zvikamu zviviri neTAP shunting mudziyo. Iyo shunted data yakabatana kune yekuunganidza interface kuunganidza data yeInternet ruzivo rwekuchengetedza yekutarisa system.
Chii chinoitwa neNetwork Packet Broker (NPB) kwauri?
Zvinokosha:
1. Kuzvimiririra
Icho chimedu chakazvimirira chehardware uye hachikanganisi mutoro wemidziyo iripo yetiweki, iyo ine mabhenefiti makuru pane port mirroring.
Iyo in-line mudziyo, izvo zvinongoreva kuti inoda kuiswa kune network. Nekudaro, izvi zvakare zvine zvazvakaipira kuunza poindi yekutadza, uye nekuti iri mudziyo wepamhepo, network yazvino inoda kuvhiringwa panguva yekutumirwa, zvichienderana nekuti inoiswa kupi.
2. Pachena
Transparent zvinoreva chinongedzo kune network iripo. Mushure mekuwana network shunt, haina kukanganisa pane ese maturusi ari mune yazvino network, uye iri pachena kwavari. Ehe, izvi zvinosanganisirawo traffic inotumirwa netiweki shunt kune yekutarisa mudziyo, iyo zvakare iri pachena kune network.
Working principle:
Iyo traffic shunting (kugovera) yakavakirwa pane yekuisa data, kudzokorora, kuunganidza, kusefa, 10G POS dhata shanduko kuburikidza neprotocol shanduko kusvika makumi emakumi emamegabytes LAN data, zvinoenderana neiyo chaiyo algorithm yekuremedza kuenzanisa kubuda, iyo inobuda panguva imwe chete kuti ive nechokwadi. kuti mapaketi ese echikamu chimwe chete, kana iyo yakafanana IP inoburitsa ese mapaketi kubva kune imwechete mushandisi interface.
Functional Features:
1. Protocol kutendeuka
Nzvimbo huru dzeInternet data communication interfaces dzinoshandiswa neISPs dzinosanganisira 40G POS, 10G POS/WAN/LAN, 2.5G POS, uye GE, nepo data inogamuchira interfaces inoshandiswa nemaseva ekushandisa iGE uye 10GE LAN interfaces. Nokudaro, shanduko yeprotocol inowanzotaurwa paInternet communication interfaces inonyanya kureva kutendeuka pakati pe40G POS, 10G POS, uye 2.5G POS kusvika 10GE LAN kana GE, uye bidirectional cotransfer pakati pe10GE WAN ne10GE LAN neGE.
2. Kuunganidza uye kugovera data.
Mazhinji ekuunganidza data maapplication anobvisa traffic yavanoitira hanya uye kurasa traffic yavasina basa nazvo. Iyo data traffic yeyakananga IP kero, protocol, uye chiteshi inotorwa neshanu-tuple (sosi IP kero, kwainoenda IP kero, chiteshi chengarava, nzvimbo yekuenda, uye protocol) convergence. Kana yabuda, sosi imwe chete, nzvimbo imwechete uye chiyero chemutoro chinoburitswa zvinoenderana neiyo HASH algorithm.
3. Feature code kusefa
Kuunganidzwa kweP2P traffic, iyo application system inogona kungotarisa pane imwe chaiyo traffic, sekushambadzira midhiya PPStream, BT, Thunderbolt, uye akajairika mazwi paHTTP akadai seGET nePOST, nezvimwewo. uye kusangana. Iyo diverter inotsigira yakagadziriswa-chinzvimbo kodhi kodhi kusefa uye inoyangarara ficha kodhi kusefa. Kodhi inoyangarara yechinhu chigadziriso chakatsanangurwa pahwaro hweiyo yakatarwa nzvimbo kodhi kodhi. Yakakodzera kune maapplication anotsanangudza iyo kodhi kodhi yekusefa, asi usatsanangure iyo chaiyo nzvimbo yekodhi kodhi.
4. Session management
Inotaridza traffic yemusangano uye inogadziridza zviri nyore iyo chikamu chekuendesa N kukosha (N=1 kusvika 1024). Ndiko kuti, maN mapaketi ekutanga echikamu chega chega anotorwa uye anoendeswa kune yekumashure-yekupedzisira application yekuongorora system, uye mapaketi mushure meN anoraswa, achichengetedza sosi pamusoro peiyo yakadzika yekuyerera application chikuva. Kazhinji, paunoshandisa IDS kutarisa zviitiko, haufanire kugadzirisa ese mapaketi echikamu chese; pachinzvimbo, iwe unongoda kuburitsa ekutanga N mapaketi ega rega rega kuti upedze kuongorora kwechiitiko uye kutarisa.
5. Data mirroring uye kudzokorora
Iyo splitter inogona kuona girazi uye kudzokororwa kweiyo data pane inobuda interface, iyo inovimbisa kuwanikwa kwedata kweakawanda maapplication masisitimu.
6. 3G network data kutora uye kutumira
Iko kuunganidzwa kwedata uye kugovera pane 3G network kwakasiyana neyechinyakare network yekuongorora modes. Mapaketi pa 3G network anofambiswa pane backbone link kuburikidza neakawanda akaturikidzana eencapsulation. Kureba kwepakiti uye encapsulation fomati zvakasiyana kubva kune emapaketi pane akajairika network. Iyo inoparadzanisa inogona kunyatsoona uye kugadzirisa tunnel mapuroteni akadai seGTP uye GRE mapaketi, multilayer MPLS mapaketi, uye VLAN mapaketi. Inogona kuburitsa IUPS siginecha mapaketi, GTP siginecha mapaketi, uye Radius mapaketi kune akatsanangurwa madoko anoenderana nemapaketi maitiro. Mukuwedzera, inogona kupatsanura mapaketi zvichienderana nemukati IP kero. Tsigiro yemapakeji akawandisa (MTU> 1522 Byte) kugadzirisa, inogona kunyatsoona iyo 3G network yekuunganidza data uye shunt application.
Zvinodiwa
-Inotsigira kugovera traffic neL2-L7 application protocol.
-Inotsigira 5-tuple kusefa neiyo chaiyo sosi IP kero, kwainoenda IP kero, kunobva chiteshi, kwekuenda chiteshi, uye protocol uye ine mask.
-Inotsigira inobuda mutoro kuenzanisa uye inobuda homology uye homology.
- Inotsigira kusefa uye kutumira nehunhu tambo.
- Inotsigira chikamu manejimendi. Pamberi pekutanga N mapaketi echikamu chega chega. Kukosha kweN kunogona kutsanangurwa.
- Inotsigira kune vakawanda vashandisi. Mapaketi edata anoenderana nemutemo mumwechete anogona kupihwa kune wechitatu bato panguva imwe chete, kana iyo data pane inobuda interface inogona kuratidzwa uye kudzokororwa, kuve nechokwadi chekuwana data kweakawanda masisitimu ekushandisa.
Zvemari Indasitiri Solution Solution Advantage Solution
Nekukurumidza kusimudzira kweruzivo rwepasi rose tekinoroji uye nekudzika kweruzivo, chiyero chebhizinesi network chakawedzera zvishoma nezvishoma, uye kuvimba nemaindasitiri akasiyana pahurongwa hweruzivo kwawedzera. Panguva imwecheteyo, iyo bhizinesi network yekurwiswa kwemukati nekunze, zvisizvo, uye kutyisidzira kweruzivo kuri kukura zvakare, nehuwandu hukuru hwekuchengetedzwa kwetiweki, application bhizinesi rekutarisa system rinoiswa mukuteedzana, ese marudzi ekutarisa bhizinesi, kuchengetedza kuchengetedza michina. akaiswa mukati mese network, pachava nekupambadzwa kwezviwanikwa zveruzivo, tarisa nzvimbo yebofu, kudzokororwa kutarisisa, network topology uye dambudziko risingaite sekutadza kuwana zvinobudirira data rakananga, zvichitungamira kutarisa midziyo yakaderera kushanda zvakanaka, mari yakakwira, mari shoma. , kunonoka kugadzirisa uye manejimendi matambudziko, data zviwanikwa zvakaoma kudzora.
Nguva yekutumira: Sep-08-2022