A cikin hadaddun hadaddun, babban sauri, kuma sau da yawa rufaffen mahallin cibiyar sadarwa, samun cikakkiyar ganuwa shine mafi mahimmanci ga tsaro, saka idanu akan aiki, da yarda.Dillalan Fakitin hanyar sadarwa (NPBs)sun samo asali ne daga masu tarawa na TAP masu sauƙi zuwa nagartattun dandamali, hanyoyin fasaha masu mahimmanci waɗanda ke da mahimmanci don sarrafa kwararar bayanan zirga-zirga da tabbatar da sa ido da kayan aikin tsaro suna aiki yadda ya kamata. Anan ga cikakken kallon mahimman yanayin aikace-aikacen su da mafita:
Babban Matsala NPBs Warware:
Cibiyoyin sadarwa na zamani suna haifar da ɗimbin zirga-zirga. Haɗa mahimman tsaro da kayan aikin sa ido (IDS/IPS, NPM/APM, DLP, forensics) kai tsaye zuwa hanyoyin haɗin yanar gizo (ta tashoshin SPAN ko TAPs) ba shi da inganci kuma galibi ba zai yuwu ba saboda:
1. Yawaitar Kayan aiki: Kayan aikin sun mamaye tare da zirga-zirgar da ba su dace ba, fakitin fakiti da barazanar ɓacewa.
2. Rashin Ingantaccen Kayan aiki: Kayan aiki suna lalata albarkatun sarrafa kwafi ko bayanan da ba dole ba.
3. Complex Topology: Cibiyoyin sadarwa da aka rarraba (Cibiyoyin Bayanai, Cloud, Ofishin Reshe) suna yin ƙalubale na saka idanu.
4. Rufe wuraren Makafi: Kayan aiki ba za su iya bincika zirga-zirgar rufaffiyar (SSL/TLS) ba tare da ɓarnawa ba.
5. Ƙayyadaddun Albarkatun SPAN: Tashoshin ruwa na SPAN suna cinye albarkatu masu canzawa kuma galibi ba za su iya ɗaukar cikakken zirga-zirgar layin layi ba.
Magani na NPB: Sadarwar Traffic na Hankali
NPBs suna zaune tsakanin tashoshin TAPs/SPAN na cibiyar sadarwa da kayan aikin sa ido/tsaro. Suna aiki a matsayin "'yan sandan zirga-zirga" masu hankali, suna yin:
1. Haɗawa: Haɗa zirga-zirga daga hanyoyin haɗin kai da yawa (na zahiri, kama-da-wane) cikin ingantaccen ciyarwa.
2. Tacewa: Zaɓin tura kawai zirga-zirga masu dacewa zuwa takamaiman kayan aiki bisa ga ma'auni (IP/MAC, VLAN, yarjejeniya, tashar jiragen ruwa, aikace-aikace).
3. Daidaita Load: Rarraba zirga-zirgar zirga-zirgar ababen hawa a ko'ina a cikin nau'ikan kayan aiki iri ɗaya (misali, na'urori masu auna IDS masu tari) don haɓakawa da juriya.
4. Deduplication: Kawar da kwafi iri ɗaya na fakiti da aka kama akan hanyoyin haɗin yanar gizo.
5. Fakitin Slicing: Tsage fakiti (cire kaya) yayin da ake adana masu kai, rage bandwidth zuwa kayan aikin da kawai ke buƙatar metadata.
6. SSL/TLS Decryption: Kashe zaman rufaffiyar (ta amfani da maɓallai), gabatar da zirga-zirgar bayanan rubutu zuwa kayan aikin dubawa, sannan sake ɓoyewa.
7. Maimaitawa/Multicasting: Aika rafi iri ɗaya zuwa kayan aikin da yawa a lokaci guda.
8. Ci gaba Processing: Metadata hakar, kwarara tsara, timestaping, masking m bayanai (misali, PII).
Nemo nan don ƙarin sani game da wannan ƙirar:
Mylinking™ Network Packet Dillalan (NPB) ML-NPB-3440L
16*10/100/1000M RJ45, 16*1/10GE SFP+, 1*40G QSFP da 1*40G/100G QSFP28, Max 320Gbps
Cikakken Yanayin Aikace-aikacen & Magani:
1. Haɓaka Kula da Tsaro (IDS/IPS, NGFW, Barazana Intel):
○ Halin: Kayan aikin tsaro suna cike da yawan zirga-zirgar zirga-zirgar Gabas-Yamma a cikin cibiyar bayanai, fakitin fakiti da bacewar barazanar motsi ta gefe. Rufaffen zirga-zirgar zirga-zirgar zirga-zirgar zirga-zirgar ababen hawa yana ɓoye mugayen abubuwan biya.
Maganin NPB:Haɗa zirga-zirga daga mahimman hanyoyin intra-DC.
* Aiwatar da masu tacewa don aika ɓangarorin zirga-zirgar da ake tuhuma kawai (misali, tashoshin jiragen ruwa marasa daidaituwa, takamaiman tashoshin sadarwa) zuwa IDS.
* Load ma'auni a cikin gungun na'urori masu auna firikwensin IDS.
* Yi ɓarnar SSL/TLS kuma aika fayyace zirga-zirgar rubutu zuwa IDS/Tsarin Intel na Barazana don dubawa mai zurfi.
* Rage zirga-zirgar ababen hawa daga manyan hanyoyin.Sakamako:Ƙididdigar gano barazanar mafi girma, rage ƙiyayyar ƙarya, ingantaccen amfani da albarkatun IDS.
2. Haɓaka Kulawar Ayyuka (NPM/APM):
○ Yanayi: Kayan aikin Kula da Ayyukan Sadarwa suna gwagwarmaya don daidaita bayanai daga ɗaruruwan hanyoyin haɗin da aka tarwatsa (WAN, ofisoshin reshe, girgije). Cikakkun fakiti na APM yana da tsada sosai kuma yana da ƙarfin bandwidth.
Maganin NPB:
* Haɗa zirga-zirgar ababen hawa daga TAPs/SPAN da aka tarwatsa su zuwa kan masana'anta na NPB.
* Tace zirga-zirga don aika takamaiman ƙayyadaddun kwararar aikace-aikace (misali, VoIP, SaaS mai mahimmanci) zuwa kayan aikin APM.
* Yi amfani da slicing fakiti don kayan aikin NPM waɗanda da farko suna buƙatar bayanan lokacin gudana / ma'amala (masu kai), rage yawan amfani da bandwidth.
* Maimaita ma'aunin ma'aunin aikin maɓalli zuwa duka kayan aikin NPM da APM.Sakamako:Cikakkun bayanai, kallon aikin da ke da alaƙa, rage farashin kayan aiki, rage girman girman bandwidth.
3. Ganuwa ga gajimare (Jama'a/Mai zaman kansa/Hybrid):
○ Yanayi: Rashin samun damar TAP na asali a cikin gajimare na jama'a (AWS, Azure, GCP). Wahalar kamawa da jagorantar zirga-zirgar injina/kwantena zuwa kayan aikin tsaro da sa ido.
Maganin NPB:
* Sanya NPBs na zahiri (vNPBs) a cikin yanayin girgije.
* vNPBs suna matsa zirga-zirgar canji na kama-da-wane (misali, ta hanyar ERSPAN, VPC Traffic Mirroring).
* Tace, tara, da ma'auni na kaya Gabas-Yamma da zirga-zirgar girgijen Arewa-Kudu.
* Amintacce ramin zirga-zirga masu dacewa da baya zuwa NPBs na zahiri ko kayan aikin sa ido na tushen girgije.
* Haɗa tare da sabis na ganuwa na asali.Sakamako:Matsayin tsaro mai dorewa da sa ido kan ayyuka a cikin mahallin mahalli, cin nasara kan iyakoki na ganin girgije.
4. Rigakafin Asara Data (DLP) & Biyayya:
Yanayi: Kayan aikin DLP suna buƙatar bincika zirga-zirgar zirga-zirgar waje don mahimman bayanai (PII, PCI) amma an cika su da zirga-zirgar cikin gida maras dacewa. Biyayya yana buƙatar saka idanu takamaiman ƙayyadaddun tsarin tafiyar da bayanai.
Maganin NPB:
* Tace zirga-zirga don aika masu fita waje kawai (misali, wanda aka ƙaddara don intanit ko takamaiman abokan tarayya) zuwa injin DLP.
* Aiwatar da binciken fakiti mai zurfi (DPI) akan NPB don gano magudanar ruwa masu ɗauke da ƙayyadaddun bayanai da ba da fifiko ga kayan aikin DLP.
* Mask bayanai masu mahimmanci (misali, lambobin katin kiredit) a cikin fakitikafinaika zuwa kayan aikin sa ido marasa mahimmanci don bin bin doka.Sakamako:Ingantacciyar aiki na DLP, rage ƙimar karya, ingantaccen bin diddigin bin doka, ingantaccen sirrin bayanai.
5. Haɗin Kan Yanar Gizo & Shirya matsala:
○ Yanayi: Gano wani hadadden al'amari na aiki ko keta yana buƙatar cikakken fakitin kama (PCAP) daga maki da yawa akan lokaci. Abubuwan da aka kama da hannu yana jinkirin; adana komai ba shi da amfani.
Maganin NPB:
* NPBs na iya ajiye zirga-zirgar ababen hawa a koyaushe (a ƙimar layi).
* Sanya abubuwan jan hankali (misali, takamaiman yanayin kuskure, hauhawar zirga-zirga, faɗakarwar barazanar) akan NPB don ɗaukar zirga-zirgar da ta dace ta atomatik zuwa na'urar kama fakiti da aka haɗa ta atomatik.
* Kafin tace zirga-zirgar da aka aika zuwa na'urar kama don adana abin da ya dace kawai.
* Maimaita rafi mai mahimmancin zirga-zirga zuwa na'urar kama ba tare da tasirin kayan aikin samarwa ba.Sakamako:Mafi saurin matsakaicin lokaci-zuwa-ƙuduri (MTTR) don ƙetare/raguwa, kama masu bincike da aka yi niyya, rage farashin ajiya.
Abubuwan Aiwatarwa & Magani:
○Scalability: Zaɓi NPBs tare da isassun yawan tashar tashar jiragen ruwa da kayan sarrafawa (1/10/25/40/100GbE+) don sarrafa zirga-zirga na yanzu da na gaba. Modular chassis sau da yawa yana ba da mafi kyawun ƙima. Ma'auni na NPBs na zahiri a cikin gajimare.
○Resiliency: Aiwatar da sake fasalin NPBs (HA nau'i-nau'i) da sabbin hanyoyin zuwa kayan aiki. Tabbatar da aiki tare na jiha a cikin saitin HA. Yi amfani da daidaita nauyin nauyin NPB don juriyar kayan aiki.
○Gudanarwa & Aiki da kai: Abubuwan taɗi na gudanarwa na tsakiya suna da mahimmanci. Nemo APIs (RESTful, NETCONF/YANG) don haɗin kai tare da dandamali na ƙungiyar ƙididdiga (Mai yiwuwa, Puppet, Chef) da tsarin SIEM/SOAR don sauye-sauyen manufofi masu ƙarfi dangane da faɗakarwa.
○Tsaro: Tabbatar da haɗin gwiwar gudanarwa na NPB. Sarrafa samun dama sosai. Idan zazzage zirga-zirga, tabbatar da tsauraran manufofin gudanarwa na maɓalli da amintattun tashoshi don canja wurin maɓalli. Yi la'akari da rufe mahimman bayanai.
○Haɗin Kayan aiki: Tabbatar da NPB yana goyan bayan haɗin kayan aikin da ake buƙata (musamman musaya na zahiri/na gani, ladabi). Tabbatar da dacewa tare da takamaiman buƙatun kayan aiki.
Don haka,Dillalan Fakitin hanyar sadarwaba su zama kayan alatu na zaɓi ba; su ne muhimman abubuwan more rayuwa don cimma nasarar hangen nesa na hanyar sadarwa a wannan zamani. Ta hanyar haɗa kai cikin hankali, tacewa, daidaita nauyi, da sarrafa zirga-zirga, NPBs suna ba da ƙarfi ga tsaro da kayan aikin sa ido don aiki a mafi inganci da inganci. Suna rushe silos na gani, suna shawo kan ƙalubalen ma'auni da ɓoyewa, kuma a ƙarshe suna ba da tsabtar da ake buƙata don amintar cibiyoyin sadarwa, tabbatar da ingantaccen aiki, cika sharuddan bin ƙa'idodi, da magance matsaloli cikin sauri. Aiwatar da ingantacciyar dabarar NPB mataki ne mai mahimmanci don gina hanyar sadarwa mafi gani, amintattu, da juriya.
Lokacin aikawa: Jul-07-2025
