Libakeng tsa kajeno tsa marang-rang a rarahaneng, a lebelo le phahameng, 'me hangata a patiloeng, ho fihlella ponahalo e felletseng ke habohlokoa bakeng sa ts'ireletso, tlhokomelo ea ts'ebetso le ho latela melao.Barekisi ba Lipakete tsa Marang-rang (NPBs)li fetohile ho tloha ho li-aggregator tse bonolo tsa TAP ho ea ho li-platform tse rarahaneng, tse bohlale tse bohlokoa bakeng sa ho laola phallo ea data ea sephethephethe le ho netefatsa hore lisebelisoa tsa tlhokomelo le ts'ireletso li sebetsa hantle. Mona ke pono e qaqileng ea maemo le litharollo tsa bona tsa bohlokoa tsa ts'ebeliso:
Bothata ba Motheo ba NPB bo Rarolloa:
Marangrang a sejoale-joale a hlahisa sephethephethe se seholo. Ho hokahanya lisebelisoa tsa bohlokoa tsa ts'ireletso le tlhokomelo (IDS/IPS, NPM/APM, DLP, forensics) ka kotloloho ho lihokelo tsa marang-rang (ka li-port tsa SPAN kapa TAPs) ha ho sebetse hantle 'me hangata ha ho khonehe ka lebaka la:
1. Ho jara thepa ka bongata: Lisebelisoa li tlala sephethephethe se sa hlokahaleng, liphutheloana lia lahleha 'me litšokelo lia haella.
2. Ho se sebetse hantle ha lisebelisoa: Lisebelisoa li senya mehloli ea ho sebetsana le lintlha tse peli kapa tse sa hlokahaleng.
3. Tokoloho e Rarahaneng: Marangrang a ajoang (Litsi tsa Data, Leru, Liofisi tsa Makala) a etsa hore tlhokomelo e bohareng e be thata.
4. Libaka tse Foufetseng tsa Encryption: Lisebelisoa li ke ke tsa hlahloba sephethephethe se encrypted (SSL/TLS) ntle le ho hlakola encryption.
5. Lisebelisoa tse Lekanyelitsoeng tsa SPAN: Likou tsa SPAN li sebelisa mehloli ea switch 'me hangata li sitoa ho sebetsana le sephethephethe se felletseng sa line-rate.
Tharollo ea NPB: Bokena-lipakeng bo Bohlale ba Sephethephethe
Li-NPB li lutse lipakeng tsa likou tsa marang-rang tsa TAP/SPAN le lisebelisoa tsa tlhokomelo/ts'ireletso. Li sebetsa joaloka "mapolesa a sephethephethe a bohlale," a etsang:
1. Kopano: Kopanya sephethephethe ho tsoa lihokelong tse ngata (tsa 'mele, tsa sebele) ho li-feed tse kopaneng.
2. Ho sefa: Ho fetisetsa sephethephethe se amehang feela ho disebediswa tse itseng ho latela maemo (IP/MAC, VLAN, protocol, port, application).
3. Ho Lekanya Moroalo: Aba phallo ea sephethephethe ka ho lekana maemong a mangata a sesebelisoa se le seng (mohlala, li-sensor tsa IDS tse nang le lihlopha) bakeng sa ho hola le ho mamella.
4. Ho nkela dintho tse ding sebaka: Tlosa dikopi tse tshwanang tsa dipakete tse tshwerweng dihokelong tse sa hlokahaleng.
5. Ho Seha Lipakete: Ho kgaola dipakete (ho tlosa mojaro o boima) ha o ntse o boloka dihlooho, o fokotsa bandwidth ho disebediswa tse hlokang metadata feela.
6. Ho Hlakola SSL/TLS: Ho fedisa di-session tse patiloeng (ho sebedisa dinotlolo), ho hlahisa sephethephethe sa mongolo o hlakileng ho disebediswa tsa tlhahlobo, ebe o di ngola hape.
7. Ho pheta-pheta/ho lahla lintho tse ngata: Romela molapo o tšoanang oa sephethephethe ho lisebelisoa tse ngata ka nako e le 'ngoe.
8. Ts'ebetso e Tsoetseng Pele: Ho ntšoa ha metadata, tlhahiso ea phallo, ho hatisa nako, ho pata data e hlokolosi (mohlala, PII).
Fumana mona ho tseba haholoanyane ka mohlala ona:
Morekisi oa Pakete ea Marang-rang ea Mylinking™ (NPB) ML-NPB-3440L
16*10/100/1000M RJ45, 16*1/10GE SFP+, 1*40G QSFP le 1*40G/100G QSFP28, Max 320Gbps
Maemo le Litharollo tse qaqileng tsa Kopo:
1. Ho Ntlafatsa Tlhokomelo ea Tšireletso (IDS/IPS, NGFW, Threat Intel):
○ Boemo: Lisebelisoa tsa ts'ireletso li imetsoe ke bongata bo boholo ba sephethephethe sa Bochabela-Bophirima setsing sa data, liphutheloana tse lahlehang le litšokelo tse sieo tsa motsamao o ka thoko. Sephethephethe se patiloeng se pata meroalo e kotsi ea moputso.
○ Tharollo ea NPB:Kopanya sephethephethe se tsoang lihokelong tsa bohlokoa tsa kahare ho DC.
* Kenya difilthara tse nang le di-granular ho romela feela dikarolo tse belaetsang tsa sephethephethe (mohlala, di-port tse sa tlwaelehang, di-subnet tse itseng) ho IDS.
* Jarisa tekano ho pholletsa le sehlopha sa di-sensor tsa IDS.
* Etsa ho hlakola SSL/TLS 'me u romele sephethephethe se hlakileng sethaleng sa IDS/Threat Intel bakeng sa tlhahlobo e tebileng.
* Fokotsa sephethephethe litseleng tse sa hlokahaleng.Sephetho:Sekhahla se phahameng sa ho lemoha litšokelo, ho fokotseha ha liphoso tsa bohata, tšebeliso e ntlafalitsoeng ea lisebelisoa tsa IDS.
2. Ho Ntlafatsa Tlhokomelo ea Ts'ebetso (NPM/APM):
○ Boemo: Lisebelisoa tsa Tlhokomelo ea Ts'ebetso ea Marang-rang li thatafalloa ho hokahanya lintlha tse tsoang lihokelong tse makholo tse hasaneng (WAN, liofisi tsa makala, leru). Ho hapa lipakete tse felletseng bakeng sa APM ho bitsa chelete e ngata haholo ebile ho sebelisa bandwidth e ngata.
○ Tharollo ea NPB:
* Kopanya sephethephethe ho tloha ho li-TAP/SPAN tse hasaneng sebakeng seo ho ea ho lesela la NPB le bohareng.
* Sefa sephethephethe ho romela feela phallo e ikhethileng ea ts'ebeliso (mohlala, VoIP, SaaS ea bohlokoa) ho lisebelisoa tsa APM.
* Sebelisa ho seha lipakete bakeng sa lisebelisoa tsa NPM tse hlokang haholo-holo data ea nako ea phallo/transaction (lihlooho), e leng se fokotsang haholo tšebeliso ea bandwidth.
* Pheta-pheta melapo ea lipalo-palo tsa ts'ebetso ea bohlokoa ho lisebelisoa tsa NPM le APM.Sephetho:Pono e akaretsang, e amanang le ts'ebetso, litšenyehelo tse fokotsehileng tsa lisebelisoa, litšenyehelo tse fokotsehileng tsa bandwidth.
3. Ponahalo ea Leru (Sechaba/Poraefete/Hybrid):
○ Boemo: Ho hloka phihlello ea TAP ea tlhaho marung a sechaba (AWS, Azure, GCP). Bothata ba ho hapa le ho lebisa sephethephethe sa mochini/setshelo sa sebele ho lisebelisoa tsa ts'ireletso le tsa tlhokomelo.
○ Tharollo ea NPB:
* Kenya li-NPB tse fumanehang ka nepo (li-vNPB) tikolohong ea leru.
* Li-vNPB li tobetsa sephethephethe sa switch ea sebele (mohlala, ka ERSPAN, VPC Traffic Mirroring).
* Sefa, kopanya, le ho leka-lekanya mojaro sephethephethe sa maru a Bochabela-Bophirima le Leboea-Borwa.
* Tlosa sephethephethe se amehang ka mokhoa o sireletsehileng ho li-NPB tsa 'mele tse ka har'a sebaka kapa lisebelisoa tsa ho beha leihlo tse thehiloeng marung.
* Kopanya le lits'ebeletso tsa ponahalo tsa leru.Sephetho:Boemo bo tsitsitseng ba ts'ireletso le tlhokomelo ea ts'ebetso ho pholletsa le libaka tse kopaneng, ho hlola lithibelo tsa ponahalo ea maru.
4. Thibelo ea Tahlehelo ea Lintlha (DLP) le ho Latela Melao:
○ Boemo: Lisebelisoa tsa DLP li hloka ho hlahloba sephethephethe se tsoang kantle bakeng sa lintlha tse hlokolosi (PII, PCI) empa li tletse sephethephethe sa kahare se sa amaneng le tsona. Ho latela melao ho hloka ho beha leihlo phallo e itseng ea data e laoloang.
○ Tharollo ea NPB:
* Sefa sephethephethe ho romela feela phallo e tswang (mohlala, e reretsoeng inthanete kapa balekane ba itseng) ho enjene ea DLP.
* Kenya tlhahlobo e tebileng ea pakete (DPI) ho NPB ho khetholla phallo e nang le mefuta ea data e laoloang le ho e beha pele bakeng sa sesebelisoa sa DLP.
* Pata lintlha tse hlokolosi (mohlala, linomoro tsa karete ea mokitlane) ka har'a lipaketepele hoho romela lisebelisoa tsa ho beha leihlo tse seng tsa bohlokoa haholo bakeng sa ho ngola melao.Sephetho:Ts'ebetso e sebetsang hantle ea DLP, ho fokotseha ha liphetho tse fosahetseng, tlhahlobo e ntlafalitsoeng ea ho latela melao, le lekunutu le ntlafalitsoeng la data.
5. Bongaka ba Mahlale le ho Tharolla Mathata a Marangrang:
○ Boemo: Ho fumana bothata bo rarahaneng ba tshebetso kapa ho se sebetse hantle ho hloka ho hapa sephutheloana ka botlalo (PCAP) ho tloha dintlheng tse ngata ha nako e ntse e ya. Ho qala ho hapa ka letsoho ho lieha; ho boloka ntho e nngwe le e nngwe ha ho sebetse.
○ Tharollo ea NPB:
* Li-NPB li ka thibela sephethephethe ka ho sa khaotseng (ka sekhahla sa mola).
* Lokisa lintho tse bakang mathata (mohlala, boemo bo itseng ba phoso, ho phahama ha sephethephethe, temoso ea litšokelo) ho NPB ho hapa sephethephethe se amehang ka bohona ho sesebelisoa se hokahantsoeng sa ho hapa lipakete.
* Sefa sephethephethe se rometsoeng sesebelisoa sa ho hapa esale pele ho boloka feela se hlokahalang.
* Pheta phallo ea bohlokoa ea sephethephethe ho sesebelisoa sa ho hapa ntle le ho ama lisebelisoa tsa tlhahiso.Sephetho:Nako e potlakileng ea ho rarolla mathata (MTTR) bakeng sa ho tima/ho tlōla melao, ho hapa lintlha tse reretsoeng tsa bo-rasaense, le litšenyehelo tse fokotsehileng tsa polokelo.
Mehopolo ea ho Kena Ts'ebetsong le Litharollo:
○Ho Kgoloha: Khetha di-NPB tse nang le bongata bo lekaneng ba kou le phallo (1/10/25/40/100GbE+) ho sebetsana le sephethephethe sa hajwale le sa nakong e tlang. Hangata tjhase ya modular e fana ka bokgoni bo botle ka ho fetisisa ba ho kgoloha. Di-NPB tsa sebele di hola ka ho tenyetseha lerung.
○Ho tsitsa: Kenya tšebetsong li-NPB tse sa hlokeng thuso (lipara tsa HA) le litsela tse sa hlokeng thuso ho ea lisebelisoa. Netefatsa hore maemo a lumellana le litlhophiso tsa HA. Sebelisa ho leka-lekanya mojaro oa NPB bakeng sa ho mamella sesebelisoa.
○Tsamaiso le Boiketsetso: Li-console tsa tsamaiso tse bohareng li bohlokoa. Batla li-API (RESTful, NETCONF/YANG) bakeng sa ho kopanngoa le li-platform tsa orchestration (Ansible, Puppet, Chef) le litsamaiso tsa SIEM/SOAR bakeng sa liphetoho tse feto-fetohang tsa leano tse ipapisitseng le litemoso.
○Tšireletso: Sireletsa sebopeho sa taolo ea NPB. Laola phihlello ka thata. Haeba u hlakola sephethephethe, etsa bonnete ba hore maano a thata a taolo ea senotlolo le liteishene tse sireletsehileng bakeng sa phetiso ea senotlolo. Nahana ka ho pata lintlha tse hlokolosi.
○Ho Kopanya Lisebelisoa: Netefatsa hore NPB e tšehetsa khokahano e hlokahalang ea lisebelisoa (li-interface tsa 'mele/tsa sebele, liprothokholi). Netefatsa hore lia lumellana le litlhoko tse itseng tsa lisebelisoa.
Kahoo,Barekisi ba Lipakete tsa Marang-rangHa e sa le mabothobotho a boikhethelo; ke likarolo tsa motheo tsa motheo bakeng sa ho fihlella ponahalo ea marang-rang e sebetsang mehleng ea kajeno. Ka ho kopanya ka bohlale, ho sefa, ho leka-lekanya mojaro, le ho sebetsana le sephethephethe, li-NPB li matlafatsa lisebelisoa tsa ts'ireletso le tsa tlhokomelo ho sebetsa ka katleho le katleho e phahameng. Li qhaqha li-silo tsa ponahalo, li hlōla liphephetso tsa boholo le ho patala, 'me qetellong li fana ka ho hlaka ho hlokahalang ho sireletsa marang-rang, ho netefatsa ts'ebetso e ntle ka ho fetisisa, ho fihlela litaelo tsa ho latela melao, le ho rarolla mathata ka potlako. Ho kenya tšebetsong leano le matla la NPB ke mohato oa bohlokoa ho aha marang-rang a bonahalang haholoanyane, a sireletsehileng le a tiileng.
Nako ea poso: Phupu-07-2025
