Sei uchida Network Taps uye Network Packet Brokers kune yako Network Traffic Capturing? (Chikamu 3)

Nhanganyaya
Mumakore achangopfuura, chikamu chemakore masevhisi mumaindasitiri eChina chiri kukura. Makambani etekinoroji akatora mukana weiyo nyowani yekuvandudza tekinoroji, akashingairira shanduko yedhijitari, akawedzera kutsvagisa nekushandisa matekinoroji matsva senge cloud computing, data hombe, hungwaru hwekugadzira, blockchain neInternet yezvinhu, uye vakavandudza sainzi yavo uye. tekinoroji sevhisi kugona. Nekuenderera mberi kwekuvandudzwa kwegore uye tekinoroji yehunyanzvi, masystem akawanda ekushandisa munzvimbo dzedata anotama kubva kune yekutanga kembasi yemuviri kuenda kupuratifomu yegore, uye traffic yekumabvazuva-kumavirira munzvimbo yegore yedata data iri kukura zvakanyanya. Nekudaro, iyo yechinyakare yemuviri traffic yekuunganidza network haigone kuunganidza zvakananga kumabvazuva-kumavirira traffic munzvimbo yegore, zvichikonzera kuti traffic yebhizinesi munzvimbo yegore ive nzvimbo yekutanga. Yakave maitiro asingadzivisike kuona iyo data kutorwa kweEast-West traffic munzvimbo yegore. Kuunzwa kweyekumabvazuva-kumadokero traffic yekuunganidza tekinoroji munzvimbo yegore kunoita kuti sisitimu yekunyorera ishandiswe munzvimbo yegore zvakare ive nerutsigiro rwakakwana rwekutarisa, uye kana matambudziko nekutadza kuitika, kuongororwa kwepakeji kunogona kushandiswa kuongorora dambudziko uye kuteedzera data. kuyerera.

1. Iyo yegore nharaunda kumabvazuva-kumavirira traffic haigone kuunganidzwa zvakananga, kuitira kuti iyo application system iri munzvimbo yegore haigone kuendesa kutarisisa kutariswa kunoenderana-chaiyo-nguva bhizinesi data kuyerera, uye kushanda nekugadzirisa vashandi havagone kuwana panguva chaiyo. kushanda kweiyo application system munzvimbo yegore, iyo inounza mamwe mabhenefiti akavanzika kune ine hutano uye yakagadzikana mashandiro eiyo application system munzvimbo yegore.

2. Maodzanyemba uye kumadokero traffic mu cloud environment haigone kuunganidzwa zvakananga, izvo zvinoita kuti zvisakwanise kuburitsa zvakananga data packets kuti zviongororwe kana matambudziko aitika mubhizinesi rekushandisa mu cloud environment, izvo zvinounza zvimwe zvinonetsa kukanganisa nzvimbo.

3. Nekuwedzera kuri kuomesesa zvinodiwa zvekuchengetedzwa kwetiweki uye kuongororwa kwakasiyana, senge BPC application transaction monitoring, IDS intrusion yekuona system, email uye yevatengi sevhisi yekurekodha yekurekodha system, kudiwa kwekuunganidzwa kwetraffic kubva kumabvazuva-kumadokero munzvimbo yemakore kuri kuwedzera uye. more urgent. Zvichienderana neongororo iri pamusoro, yave tsika isingadzivisiki yekuziva kutorwa kwedatha kweyekumabvazuva-kumavirira traffic munzvimbo yegore, uye kuunza tekinoroji nyowani yekumabvazuva-kumadokero yekuunganidza mumhepo yegore kuita kuti sisitimu yekushandisa iendeswe mugore. nharaunda inogonawo kuva nerutsigiro rwakakwana rwekutarisa. Kana matambudziko nekutadza kuitika, kuongororwa kwepaketi yekubata kunogona kushandiswa kuongorora dambudziko uye kuteedzera kuyerera kwedata. Kuona kudhirowa uye kuongororwa kweyekumabvazuva-kumavirira traffic mune yegore nharaunda chombo chine simba chemashiripiti kuti ive nechokwadi chekushanda kwakagadzikana kwemaitiro ekushandisa akaiswa munzvimbo yemakore.

network monitoring software

Makiyi metrics eVirtual Network Traffic Capture
1. Network Traffic Capturing performance
Iyo yekumabvazuva-kumadokero traffic inokwana inopfuura hafu yedata center traffic, uye yakakwirira performance yekutora tekinoroji inodiwa kuti uone kuunganidzwa kuzere. Panguva imwe chete yekutora, mamwe mabasa ekutanga senge deduplication, truncation, uye desensitization inofanirwa kupedzwa kune akasiyana masevhisi, ayo anowedzera kuwedzera mashandiro ekuita.
2. Resource Overhead
Mazhinji eEast-West traffic yekuunganidza matekiniki anoda kutora komputa, chengetedzo uye network zviwanikwa zvinogona kuiswa kune sevhisi. Pamusoro pekushandisa zviwanikwa izvi zvishoma sezvinobvira, pachine kudikanwa kwekutarisa pamusoro pekuita manejimendi ehunyanzvi hwekuwana. Kunyanya kana chiyero chemanodhi chichiwedzera, kana iyo manejimendi mutengo unoratidzawo mutsara unokwira kumusoro.
3. Level of Intrusion
Iyo yazvino yakajairika tekinoroji yekutora kazhinji inoda kuwedzera imwe yekuwedzera yekutora mutemo kumisikidza pane hypervisor kana zvine hukama zvikamu. Pamusoro pemakakatanwa anogona kuitika nemabhizinesi marongero, aya marongero anowanzo kuwedzera mutoro kune hypervisor kana zvimwe zvikamu zvebhizinesi uye kukanganisa sevhisi SLA.
Kubva pane tsananguro iri pamusoro, zvinogona kuoneka kuti kubatwa kwetraffic munzvimbo yemakore kunofanirwa kutarisisa kutorwa kweyekumabvazuva-kumadokero traffic pakati pemashini chaiwo uye nyaya dzekuita. Panguva imwecheteyo, tichifunga nezvesimba rinoita hunhu hwepuratifomu yegore, kuunganidzwa kwetraffic munzvimbo yegore kunoda kupaza nepakati peiyo iripo modhi yechinyakare switch girazi, uye kuona inoshanduka uye otomatiki kuunganidza uye yekutarisa kuendesa, kuti ienderane otomatiki kushanda uye kugadzirisa chinangwa cheiyo Cloud network. Iko kuunganidzwa kwetraffic munharaunda yemakore kunoda kuzadzisa zvinangwa zvinotevera:

1) Ziva basa rekutora rekumabvazuva-kumadokero traffic pakati pemashini chaiwo
2) Kubata kunoiswa kune komputa node, uye yakagoverwa yekuunganidza zvivakwa inoshandiswa kudzivirira kuita uye kugadzikana matambudziko anokonzerwa nekuchinja girazi.
3) Inogona kuona zvine simba shanduko yemuchina chaiwo zviwanikwa munzvimbo yegore, uye zano rekuunganidza rinogona kugadziridzwa otomatiki neshanduko yeanoona muchina zviwanikwa.
4) Chishandiso chekutora chinofanirwa kuve neanoremedza kuchengetedza nzira yekudzikisa kukanganisa pane server
5) Iyo yekubata chishandiso pachayo ine basa re traffic optimization
6) Iyo yekubata chikuva inogona kutarisa yakaunganidzwa chaiyo muchina traffic

Virtual Traffic Capture

Kusarudzwa kweVirtual Machine Traffic Capturing Mode mu Cloud Environment

Iyo chaiyo muchina traffic yekubata munzvimbo yegore inoda kuendesa iyo yekuunganidza probe kune komputa node. Zvinoenderana nenzvimbo yekuunganidzira iyo inogona kuiswa pane komputa node, iyo chaiyo muchina traffic yekutora modhi munzvimbo yegore inogona kukamurwa kuita matatu modes:Agent Mode, Virtual Machine ModeuyeHost Mode.
Virtual Machine Mode: muchina wakabatana wekutora virtual wakaiswa pane yega yega mutsigiri wemuviri munzvimbo yegore, uye inotapa yakapfava probe inoiswa pamushini wekutora chaiwo. Iyo traffic yeanotambira inotaridzwa kune inotapa chaiyo muchina nekuona iyo chaiyo network kadhi traffic pane chaiyo switch, uye ipapo iyo yekubata chaiyo muchina inopfuudzwa kune yechinyakare yemuviri traffic yekutora chikuva kuburikidza neakazvitsaurira network kadhi. Uye ndokugovaniswa kune yega yega yekutarisa uye yekuongorora chikuva. Chakanakira ndechekuti softswitch bypass mirroring, iyo isina kupindira pane iripo bhizinesi network kadhi uye chaiwo muchina, inogona zvakare kuona maonero eiyo chaiyo muchina shanduko uye otomatiki kutama kwemitemo kuburikidza nedzimwe nzira. Izvo zvakashata ndezvekuti hazvigoneke kuwana overload kuchengetedza nzira nekubata chaiwo muchina uchigashira traffic, uye saizi yetraffic inogona kuoneswa inotarwa nekuita kwe virtual switch, iyo ine imwe mhedzisiro pakugadzikana kweiyo virtual switch. Munzvimbo yeKVM, chikuva chegore chinoda kuburitsa zvakafanana tafura yekuyerera kwemufananidzo, iyo yakaoma kubata nekuchengetedza. Kunyanya kana muchina wekutambira watadza, muchina wekutora chaiwo wakafanana nemuchina webhizinesi uye unozotamira kune akasiyana mauto nemimwe michina chaiyo.
Agent Mode: Isa iyo yekutapa yakapfava probe (Agent Agent) pamushini wega wega wega unoda kutora traffic munzvimbo yegore, uye bvisa iyo yekumabvazuva nekumadokero traffic yegore nharaunda kuburikidza neAgent agent software, uye woigovera kune yega yega yekuongorora. Zvakanakira ndezvekuti yakazvimirira papuratifomu yekuona, haina kukanganisa mashandiro eiyo switch, inogona kutama nemuchina chaiwo, uye inogona kuita kusefa kwetraffic. Izvo zvisingabatsiri ndezvekuti vamiririri vakawandisa vanoda kutariswa, uye pesvedzero yeAgent pachayo haigone kubviswa kana kukanganisa kwaitika. Iyo iripo yekugadzira network kadhi inoda kugovaniswa kupfira traffic, izvo zvinogona kukanganisa kudyidzana kwebhizinesi.
Host Mode: nekuisa yakazvimiririra muunganidzwa yakapfava pamunhu wega wega ari munzvimbo yegore, inoshanda mu process mode pane iyo host, uye inoendesa iyo yakabatwa traffic kune yechinyakare yemuviri traffic yekubata chikuva. Iwo mabhenefiti akazara bypass meshini, hapana kupindira kune chaiwo muchina, bhizinesi network kadhi uye chaiyo muchina switch, yakapusa yekubata nzira, nyore manejimendi, hapana chikonzero chekuchengetedza yakazvimirira virtual muchina, kuremerwa uye kupfava probe kutora kunogona kuwana yakawandisa kuchengetedzwa. Semaitiro ekugamuchira, anogona kutarisa mugadziri uye chaiwo muchina zviwanikwa uye kuita kutungamira kuendeswa kwegirazi zano. Izvo zvisingabatsiri ndezvekuti inoda kushandisa imwe huwandu hwezviwanikwa zvevaenzi, uye maitiro ekuita anoda kutariswa. Uye zvakare, mamwe mapuratifomu chaiwo anogona kusatsigira kuendesa kwekutora software probes pane iyo host.
Kubva pane zvazvino mamiriro eindastiri, iyo chaiyo muchina modhi ine maapplication mugore reruzhinji, uye iyo Agent Mode uye Host Mode ine vamwe vashandisi mune yakavanzika gore.


Nguva yekutumira: Nov-06-2024