Yadda Ake Tura Taɓawa a Cikin Layi Don Hana Yawan Kaya ko Faɗuwar Kayan Aikin Tsaro?

Tashar Bypass TAP (wanda kuma ake kira da "crosswise switch") tana samar da tashoshin shiga masu aminci ga na'urorin tsaro masu aiki kamar IPS da kuma firewalls na zamani (NGFWS). Ana amfani da maɓallin bypass tsakanin na'urorin sadarwa da kuma a gaban kayan aikin tsaro na cibiyar sadarwa don samar da wurin da za a iya ware cibiyar sadarwa da matakin tsaro. Suna kawo cikakken goyon baya ga cibiyoyin sadarwa da kayan aikin tsaro don gujewa haɗarin katsewar hanyar sadarwa.

Magani na 1 1 Taɓa hanyar haɗi ta hanyar sadarwa (Maɓallin Kewaya) - Mai zaman kansa

Aikace-aikace:

Taɓawar Network Tap (Bypass Switch) tana haɗuwa da na'urorin sadarwa guda biyu ta hanyar tashoshin Link kuma tana haɗawa zuwa uwar garken ɓangare na uku ta hanyar tashoshin Na'ura.

An saita abin kunna Bypass Network Tap (Bypass Switch) zuwa Ping, wanda ke aika buƙatun Ping a jere zuwa uwar garken. Da zarar uwar garken ya daina amsawa ga pings, Bypass Network Tap (Bypass Switch) ya shiga yanayin bypass.

Lokacin da sabar ta sake fara amsawa, Taɓawar Network Tap (Bypass Switch) tana komawa zuwa yanayin fitarwa.

Wannan aikace-aikacen zai iya aiki ne kawai ta hanyar ICMP(Ping). Ba a amfani da fakitin bugun zuciya don sa ido kan haɗin da ke tsakanin sabar da Tap ɗin Tap na Bypass Network (Bypass Switch).

2

Magani na 2 Dillalin Fakitin Sadarwa + Kewaya Taɓawar Cibiyar Sadarwa (Kewaya Canjawa)

Dillalin Fakitin Cibiyar Sadarwa (NPB) + Kewaya Taɓawar Cibiyar Sadarwa (Maɓallin Kewaya) -- Matsayi na al'ada

Aikace-aikace:

Taɓawar Network Tap (Bypass Switch) tana haɗuwa da na'urorin sadarwa guda biyu ta hanyar tashoshin Link da kuma Network Packet Broker (NPB) ta hanyar tashoshin Device. Sabar ɓangare na uku tana haɗuwa da Network Packet Broker (NPB) ta amfani da kebul na jan ƙarfe guda biyu x 1G. Network Packet Broker (NPB) tana aika fakitin bugun zuciya zuwa sabar ta hanyar tashar #1 kuma tana son sake karɓar su a tashar #2.

An saita abin kunna Bypass Network Tap (Bypass Switch) zuwa REST, kuma Network Packet Broker (NPB) yana gudanar da aikace-aikacen bypass.

Cinikin zirga-zirga a yanayin fitarwa:

Na'ura 1 ↔ Kewaya Canja/Taɓa ↔ NPB ↔ Sabar ↔ NPB ↔ Kewaya Canja/Taɓa ↔ Na'ura 2

3

Dillalin Fakitin Cibiyar Sadarwa (NPB) + Kewaya Taɓawar Cibiyar Sadarwa (Kewaya Canjawa) -- Kewaya ta Software

Bayanin Kewaya Software:

Idan Network Packet Broker (NPB) bai gano fakitin bugun zuciya ba, zai ba da damar yin amfani da software bypass.

Ana canza tsarin Network Packet Broker (NPB) ta atomatik don mayar da zirga-zirgar da ke shigowa zuwa Bypass Network Tap (Bypass Switch), ta haka za a sake shigar da zirga-zirgar cikin hanyar haɗin kai tsaye tare da ƙarancin asarar fakiti.

Taɓawar Network Tap (Bypass Switch) ba ta buƙatar amsawa kwata-kwata saboda duk wani abu da za a yi ta hanyar Network Packet Broker (NPB) ne ke yin sa.

Zirga-zirga a cikin Kewaya Software:

Na'ura ta 1 ↔ Canja/Taɓa Kewaya ↔ NPB ↔ Canja/Taɓa Kewaya ↔ Na'ura ta 2

1

Dillalin Fakitin Cibiyar Sadarwa (NPB) + Kewaya Taɓawar Cibiyar Sadarwa (Maɓallin Kewaya) -- Kewayawar Hardware

Bayanin Kewaya Kayan Aiki:

Idan Network Packet Broker (NPB) ya gaza ko kuma an katse haɗin da ke tsakanin Network Packet Broker (NPB) da Bypass Network Tap (Bypass Switch), Bypass Network Tap (Bypass Switch) yana canzawa zuwa yanayin bypass don ci gaba da aiki a ainihin lokacin haɗin.

Lokacin da Taɓawar Network Tap (Bypass Switch) ta shiga yanayin bypass, ana kewaye Network Packet Broker (NPB) da uwar garken waje kuma ba sa karɓar wata zirga-zirga har sai Taɓawar Network Tap (Bypass Switch) ta koma yanayin throughput.

Yanayin wucewa yana faruwa ne lokacin da ba a haɗa Bypass Network Tap (Bypass Switch) da wutar lantarki ba.

Ziyarar kayan aiki ba tare da layi ba:

Na'ura 1 ↔ Kewaya Canja/Taɓa ↔ Na'ura 2

4

Magani 3 Taɓawa Biyu na Hanyar Sadarwa (Masu Canja Wuya) ga kowace hanyar haɗi

Umarnin sanyi:

A cikin wannan saitin, hanyar haɗin jan ƙarfe 1 na na'urori 2 da aka haɗa zuwa sabar da aka sani ana kewaye ta ta hanyar Taps ɗin Sadarwa guda biyu (Bypass Switches). Fa'idar wannan akan mafita ta bypass 1 ita ce lokacin da aka katse haɗin dillalin fakitin cibiyar sadarwa (NPB), sabar har yanzu tana cikin hanyar haɗin kai tsaye.

5

2 * Kewaya Taps na Network (Maɓallan Kewaya) a kowace hanyar haɗi - Kewaya Software

Bayanin Kewaya Software:

Idan Network Packet Broker (NPB) bai gano fakitin bugun zuciya ba, zai ba da damar yin amfani da software bypass. Tap ɗin Bypass Network (Bypass Switch) ba ya buƙatar amsawa kwata-kwata saboda duk bypasses ana yin su ne ta hanyar Network Packet Broker (NPB).

Cinikin zirga-zirga a cikin software bypass:

Na'ura 1 ↔ Kewaya Canja/Taɓa 1 ↔ Dillalin Fakitin Sadarwa (NPB) ↔ Kewaya Canja/Taɓa 2 ↔ Na'ura 2

6

 

2 * Kewaya Taps na Network (Maɓallan Kewaya) a kowace hanyar haɗi - Kewaya ta Hardware

Bayanin Kewaya Kayan Aiki:

Idan Network Packet Broker (NPB) ya gaza ko kuma haɗin da ke tsakanin Bypass Network Tap (Bypass Switch) da Network Packet Broker (NPB) ya katse, duka Bypass Network Taps (Bypass Switches) za a canza su zuwa yanayin bypass don kiyaye haɗin da ke aiki.

Sabanin saitin "1 Bypass a kowace hanyar haɗi", uwar garken har yanzu yana cikin hanyar haɗin kai tsaye.

Ziyarar kayan aiki ba tare da layi ba:

Na'ura 1 ↔ Kewaya Canja/Taɓa 1 ↔Sabar ↔ Kewaya Canja/Taɓa 2 ↔ Na'ura 2

7

Magani na 4 An saita Taps ɗin Kewaya guda biyu (Maɓallan Kewaya) don kowace hanyar haɗi akan shafuka biyu

Umarnin Saiti:

Zabi: Ana iya amfani da Dillalan Fakitin Sadarwa guda biyu (NPBs) don haɗa shafuka daban-daban guda biyu ta hanyar ramin GRE maimakon Broker Fakitin Sadarwa guda ɗaya (NPB). Idan sabar da ke haɗa shafuka biyu ta gaza, za ta wuce sabar da zirga-zirgar da za a iya rarrabawa ta hanyar ramin GRE na Network Packet Broker (NPB) (kamar yadda aka nuna a Hotunan da ke ƙasa).

8

9


Lokacin Saƙo: Maris-06-2023