TAP ea Bypass (eo hape e bitsoang switch ea bypass) e fana ka likou tsa phihlello tse sireletsehileng bakeng sa lisebelisoa tsa ts'ireletso tse kentsoeng tse kang IPS le li-firewall tsa moloko o latelang (NGFWS). Switch ea bypass e sebelisoa pakeng tsa lisebelisoa tsa marang-rang le ka pel'a lisebelisoa tsa ts'ireletso ea marang-rang ho fana ka sebaka se tšepahalang sa ho itšehla thajana pakeng tsa marang-rang le lera la ts'ireletso. Li tlisa tšehetso e felletseng ho marang-rang le lisebelisoa tsa ts'ireletso ho qoba kotsi ea ho tima ha marang-rang.
Tharollo 1 1 Khokahano ea ho Fetisa Marang-rang Tap (Phetoho ea ho Fetisa) - E Ikemetseng
Kopo:
Tap ea Marang-rang ea Bypass (Bypass Switch) e hokela lisebelisoa tse peli tsa marang-rang ka li-port tsa Link 'me e hokela ho seva ea motho oa boraro ka li-port tsa Device.
Sethatho sa Bypass Network Tap(Bypass Switch) se setetswe ho Ping, e romelang dikopo tse latellanang tsa Ping ho seva. Hang ha seva e emisa ho araba di-ping, Bypass Network Tap(Bypass Switch) e kena mokgweng wa bypass.
Ha seva e qala ho araba hape, Bypass Network Tap (Bypass Switch) e kgutlela mokgweng wa ho fetisa.
Sesebelisoa sena se ka sebetsa feela ka ICMP(Ping). Ha ho dipakete tsa ho otla ha pelo tse sebediswang ho lekola kgokelo pakeng tsa seva le Bypass Network Tap(Bypass Switch).
Tharollo ea 2 Network Packet Broker + Bypass Network Tap (Sesebelisoa sa Bypass)
Morekisi oa Pakete ea Marang-rang (NPB) + Tsela ea ho Fetela ka Tsela ea Marang-rang (Phetoho ea ho Fetela ka Tsela ea Marang-rang) -- Boemo bo tloaelehileng
Kopo:
Sesebediswa sa Bypass Network Tap (Bypass Switch) se hokela disebedisweng tse pedi tsa marangrang ka dikou tsa Link le ho Network Packet Broker (NPB) ka dikou tsa Device. Seva ya motho wa boraro e hokela ho Network Packet Broker (NPB) e sebedisa dithapo tse 2 tsa koporo tsa 1G. Network Packet Broker (NPB) e romela dipakete tsa ho otla ha pelo ho seva ka kou ya #1 mme e batla ho di amohela hape kou ya #2.
Sethatho sa Bypass Network Tap(Bypass Switch) se setetswe ho REST, mme Network Packet Broker(NPB) e tsamaisa tshebediso ya bypass.
Sephethephethe se tseleng e kenang ka ho fetisa:
Sesebediswa sa 1 ↔ Phetoho/Tlanya ka tsela e iketsang ↔ NPB ↔ Seva ↔ NPB ↔ Phetoho/Tlanya ka tsela e iketsang ↔ Sesebediswa sa 2
Morekisi oa Pakete ea Marang-rang (NPB) + Bypass Network Tap (Bypass Switch) -- Bypass ea Software
Tlhaloso ea ho palama software:
Haeba Network Packet Broker (NPB) e sa lemohe lipakete tsa ho otla ha pelo, e tla nolofalletsa software ho feta.
Tlhophiso ea Network Packet Broker (NPB) e fetoloa ka bo eona ho romela sephethephethe se kenang ho Bypass Network Tap (Bypass Switch), ka hona ho kenya sephethephethe hape sehokelong se phelang ka tahlehelo e nyane ea sephutheloana.
Tap ea Marang-rang ea Bypass (Bypass Switch) ha e hloke ho araba ho hang hobane litsela tsohle tsa bypass li etsoa ke Network Packet Broker (NPB).
Sephethephethe sa Software Bypass:
Sesebediswa sa 1 ↔ Phetoho/Tlanya ka tsela e sa laoleheng ↔ NPB ↔ Phetoho/Tlanya ka tsela e sa laoleheng ↔ Sesebediswa sa 2
Morekisi oa Pakete ea Marang-rang (NPB) + Tsela ea ho Fetela ka Tsela ea Marang-rang (Phetoho ea ho Fetela ka Tsela ea Marang-rang) -- Tsela ea ho Fetela ka Tsela ea Hardware
Tlhaloso ea Hardware Bypass:
Haeba Network Packet Broker (NPB) e hloleha kapa khokahano pakeng tsa Network Packet Broker (NPB) le Bypass Network Tap (Bypass Switch) e kgaotswe, Bypass Network Tap (Bypass Switch) e fetohela ho bypass mode ho boloka sehokelo sa nako ya nnete se sebetsa.
Ha Bypass Network Tap (Bypass Switch) e kena mokgweng wa bypass, Network Packet Broker (NPB) le seva sa kantle di a fetiswa mme ha di fumane sephethephethe ho fihlela Bypass Network Tap (Bypass Switch) e kgutlela mokgweng wa throughput.
Mokhoa oa ho palama o qala ha Bypass Network Tap (Bypass Switch) e se e sa hokahantsoe le phepelo ea motlakase.
Sephethephethe sa Hardware kantle ho mohala:
Sesebediswa sa 1 ↔ Fetola/Tlanya ka tsela e sa laoleheng ↔ Sesebediswa sa 2
Tharollo ea 3 Lipompo tse peli tsa Marang-rang a Bypass (Li-switch tsa Bypass) bakeng sa sehokelo se seng le se seng
Litaelo tsa tlhophiso:
Tlhophisong ena, sehokelo se le seng sa koporo sa disebediswa tse 2 tse hokahantsweng le seva e tsejwang se fetiswa ke Di-Bypass Network Taps tse pedi (Di-Bypass Switches). Molemo wa sena ho feta tharollo e le nngwe ya bypass ke hore ha kgokelo ya broker ya pakete ya netweke (NPB) e sitiswa, seva e ntse e le karolo ya sehokelo se phelang.
Li-Taps tsa Marang-rang tse 2 tsa Bypass (Li-Switch tsa Bypass) ka sehokelo - Bypass ea Software
Tlhaloso ea ho palama software:
Haeba Network Packet Broker (NPB) e sa lemohe dipakete tsa ho otla ha pelo, e tla nolofalletsa software ho feta. Bypass Network Tap (Bypass Switch) ha e hloke ho arabela ho hang hobane bypass tsohle di etswa ke Network Packet Broker (NPB).
Sephethephethe sa software se fetang ka tsela e tloaelehileng:
Sesebediswa sa 1 ↔ Phetoho ya Bypass/Tobetsa 1 ↔ Morekisi wa Pakete ya Marangrang (NPB) ↔ Phetoho ya Bypass/Tobetsa 2 ↔ Sesebediswa sa 2
Li-Taps tsa Marang-rang tse 2 tsa Bypass (Li-Switch tsa Bypass) ka sehokelo - Hardware Bypass
Tlhaloso ea Hardware Bypass:
Haeba Network Packet Broker (NPB) e hloleha kapa khokahano pakeng tsa Bypass Network Tap (Bypass Switch) le Network Packet Broker (NPB) e kgaotswe, Bypass Network Taps (Bypass Switches) ka bobedi di fetohela ho bypass mode ho boloka kgokelo e sebetsang.
Ho fapana le tlhophiso ea "1 Bypass ka sehokelo", seva e ntse e kenyelelitsoe sehokelong se phelang.
Sephethephethe sa Hardware kantle ho mohala:
Sesebediswa sa 1 ↔ Fetola ka tsela e sa laoleheng/Tlanya 1 ↔Seva ↔ Fetola ka tsela e sa laoleheng/Tlanya 2 ↔ Sesebediswa sa 2
Tharollo ea 4 Li-Tap tse peli tsa Marang-rang a Bypass (Li-Switch tsa Bypass) li hlophisitsoe bakeng sa sehokelo se seng le se seng libakeng tse peli.
Litaelo tsa ho beha:
Boikhethelo: Barekisi ba Lipakete tsa Marangrang ba babeli (NPBs) ba ka sebelisoa ho hokela libaka tse peli tse fapaneng holim'a kotopo ea GRE ho fapana le Morekisi e le 'ngoe oa Pakete ea Marangrang (NPB). Haeba seva e hokahanyang libaka tsena tse peli e hloleha, e tla feta seva le sephethephethe se ka ajoang ka kotopo ea GRE ea Morekisi oa Pakete ea Marangrang (NPB) (joalokaha ho bontšitsoe Litšoantšong tse ka tlase).
Nako ea poso: Hlakubele-06-2023
