Mokhoa oa ho kenya Inline Bypass Tlanya ho Thibela ho Tlama kapa ho Senyeha ha Lisebelisoa tsa Ts'ireletso?

Bypass TAP (eo hape e bitsoang switjha ea bypass) e fana ka likou tsa phihlello tse sa sireletsehang bakeng sa lisebelisoa tsa ts'ireletso tse kentsoeng tse kang IPS le li-firewall tsa moloko o latelang (NGFWS). Phetoho ea bypass e sebelisoa pakeng tsa lisebelisoa tsa marang-rang le ka pel'a lisebelisoa tsa ts'ireletso ea marang-rang ho fana ka ntlha e ka tšeptjoang ea ho itšehla thajana pakeng tsa marang-rang le lera la tšireletso. Ba tlisa tšehetso e felletseng ho marang-rang le lisebelisoa tsa ts'ireletso ho qoba kotsi ea ho tima marang-rang.

Tharollo 1 1 Link Bypass Network Tap(Bypass Switch) - E ikemetseng

Kopo:

The Bypass Network Tap (Bypass Switch) e hokahana le lisebelisoa tse peli tsa marang-rang ka li-port port mme e hokela ho seva sa motho oa boraro ka likoung tsa Sesebelisoa.

Ntho e qalang ea Bypass Network Tap (Bypass Switch) e behiloe ho Ping, e romellang likopo tse latellanang tsa Ping ho seva. Hang ha seva se emisa ho arabela pings, Bypass Network Tap (Bypass Switch) e kena ka mokhoa oa bypass.

Ha seva e qala ho arabela hape, Bypass Network Tap (Bypass Switch) e khutlela ho mokhoa oa ho fetisa.

Sesebelisoa sena se ka sebetsa feela ka ICMP(Ping). Ha ho lipakete tsa ho otla ha pelo tse sebelisoang ho beha leihlo kamano pakeng tsa seva le Bypass Network Tap (Bypass Switch).

2

Tharollo 2 Network Packet Broker + Bypass Network Tap(Bypass Switch)

Network Packet Broker(NPB) + Bypass Network Tap(Bypass Switch) -- Boemo bo tloaelehileng

Kopo:

Bypass Network Tap (Bypass Switch) e hokahana le lisebelisoa tse peli tsa marang-rang ka li-port port le ho Network Packet Broker (NPB) ka likou tsa Sesebelisoa. Seva ea motho oa boraro e hokela ho Network Packet Broker (NPB) e sebelisa lithapo tsa koporo tsa 2 x 1G. Network Packet Broker(NPB) e romella lipakete tsa ho otla ha pelo ho seva ka port #1 mme e batla ho li amohela hape ho port #2.

Sehlomathiso sa Bypass Network Tap(Bypass Switch) se behiloe ho REST, mme Network Packet Broker(NPB) e tsamaisa ts'ebeliso ea bypass.

Therafiki ka mokgwa wa ho fetisa:

Sesebelisoa sa 1 ↔ Bypass Switch/Tap ↔ NPB ↔ Server ↔ NPB ↔ Bypass Switch/Tap ↔ Sesebelisoa sa 2

3

Network Packet Broker(NPB) + Bypass Network Tap(Bypass Switch) -- Software Bypass

Software Bypass tlhaloso:

Haeba Network Packet Broker(NPB) e sa bone lipakete tsa ho otla ha pelo, e tla nolofalletsa software ho feta.

Tlhophiso ea Network Packet Broker(NPB) e fetoloa ka bo eona ho romela sephethephethe se kenang ho Bypass Network Tap (Bypass Switch), ka hona e khutlisetsa sephethephethe sehokelong se phelang ka tahlehelo e nyane ea pakete.

The Bypass Network Tap(Bypass Switch) ha e hloke ho araba ho hang hobane lipallo tsohle li etsoa ke Network Packet Broker(NPB).

Sephethephethe ho Software Bypass:

Sesebelisoa sa 1 ↔ Bypass Switch/Tap ↔ NPB ↔ Bypass Switch/Tap ↔ Sesebelisoa sa 2

1

Network Packet Broker(NPB) + Bypass Network Tap(Bypass Switch) -- Hardware bypass

Tlhaloso ea Hardware Bypass:

Haeba Network Packet Broker(NPB) e hloleha kapa khokahano lipakeng tsa Network Packet Broker(NPB) le Bypass Network Tap(Bypass Switch) e khaotsoe, Bypass Network Tap(Bypass Switch) e fetohela ho mokhoa oa bypass ho boloka ea nnete- sehokelo sa nako se sebetsa.

Ha Bypass Network Tap (Bypass Switch) e kena ka mokhoa oa bypass, Network Packet Broker(NPB) le seva sa ka ntle li feta 'me ha li fumane sephethephethe ho fihlela Bypass Network Tap(Bypass Switch) e khutlela ho mokhoa oa ho feta.

Mokhoa oa ho pota-pota o qala ha Bypass Network Tap (Bypass Switch) e se e sa hokahane le phepelo ea motlakase.

Sephethephethe sa Hardware off-line:

Sesebelisoa sa 1 ↔ Bypass Switch/Tap ↔ Sesebelisoa sa 2

4

Tharollo 3 Lipompo tse peli tsa Bypass Network (Bypass Switches) bakeng sa sehokelo ka seng

Litaelo tsa tlhophiso:

Sehlopheng sena, sehokelo se le 1 sa koporo sa lisebelisoa tse 2 tse hokahaneng le seva se tsebahalang se fetisoa ke li-Taps tse peli tsa Bypass Network (Bypass Switches). Molemo oa sena ho feta tharollo ea 1 bypass ke hore ha khokahano ea pakete ea marang-rang (NPB) e senyeha, seva e ntse e le karolo ea sehokelo se phelang.

5

2 * Bypass Network Taps(Bypass Switches) ka sehokelo - Software Bypass

Software Bypass tlhaloso:

Haeba Network Packet Broker(NPB) e sa bone lipakete tsa ho otla ha pelo, e tla nolofalletsa software ho feta. The Bypass Network Tap(Bypass Switch) ha e hloke ho itšoara ho hang hobane lipallo tsohle li etsoa ke Network Packet Broker(NPB).

Ts'ebetso ea sephethephethe ho software bypass:

Sesebelisoa sa 1 ↔ Bypass Switch/Tap 1 ↔ Network Packet Broker(NPB) ↔ Bypass Switch/Tap 2 ↔ Sesebelisoa sa 2

6

 

2 * Bypass Network Taps(Bypass Switches) ka sehokelo - Hardware Bypass

Tlhaloso ea Hardware Bypass:

Ha ho ka etsahala hore Network Packet Broker(NPB) e hlolehe kapa khokahano lipakeng tsa Bypass Network Tap(Bypass Switch) le Network Packet Broker(NPB) e khaotsoe, ka bobeli Bypass Network Taps(Bypass Switches) li fetisetsoa ho mokhoa oa ho feta ho boloka. sehokelo se sebetsang.

Ho fapana le "1 Bypass per link", seva e ntse e kenyelelitsoe sehokelong se phelang.

Sephethephethe sa Hardware off-line:

Sesebelisoa sa 1 ↔ Bypass Switch/Tap 1 ↔Server ↔ Bypass Switch/Tap 2 ↔ Sesebelisoa sa 2

7

Tharollo 4 Lipompo tse peli tsa Bypass Network (Bypass Switches) li lokiselitsoe sehokelo se seng le se seng libakeng tse peli.

Litaelo tsa ho beha:

Ho ikhethela: Li-Network Packet Brokers (NPBs) li ka sebelisoa ho hokahanya libaka tse peli tse fapaneng holim'a kotopo ea GRE ho e-na le Network Packet Broker (NPB) e le 'ngoe. Haeba seva se kopanyang libaka tse peli se hlōleha, se tla feta seva le sephethephethe se ka tsamaisoang ka kotopo ea GRE ea Network Packet Broker (NPB) (joalokaha ho bontšitsoe litšoantšong tse ka tlase).

8

9


Nako ea poso: Mar-06-2023