Kev Tshawb Fawb tob tob thiab Kev Sib Piv Daim Ntawv Thov ntawm TAP thiab SPAN Network Traffic Data Acquisition

Hauv kev ua haujlwm thiab kev saib xyuas network, kev daws teeb meem, thiab kev tshuaj xyuas kev ruaj ntseg, kev tau txais cov ntaub ntawv network kom raug thiab zoo yog lub hauv paus rau kev ua ntau yam haujlwm. Raws li ob lub thev naus laus zis tseem ceeb ntawm kev tau txais cov ntaub ntawv network, TAP (Test Access Point) thiab SPAN (Switched Port Analyzer, feem ntau hu ua port mirroring) ua lub luag haujlwm tseem ceeb hauv ntau qhov xwm txheej vim lawv cov yam ntxwv sib txawv. Kev nkag siab tob txog lawv cov yam ntxwv, qhov zoo, kev txwv, thiab cov xwm txheej siv tau yog qhov tseem ceeb rau cov kws ua haujlwm network los tsim cov phiaj xwm sau cov ntaub ntawv tsim nyog thiab txhim kho kev tswj hwm network kom zoo.

TAP: Ib qho kev daws teeb meem "Lossless" uas muaj txiaj ntsig thiab pom tseeb

TAP yog ib lub cuab yeej kho vajtse ua haujlwm ntawm lub cev lossis cov ntaub ntawv txuas. Nws lub luag haujlwm tseem ceeb yog ua tiav 100% kev rov ua dua thiab ntes cov ntaub ntawv network yam tsis cuam tshuam nrog cov tsheb khiav network qub. Los ntawm kev sib txuas ua ke hauv series hauv network txuas (piv txwv li, ntawm lub switch thiab lub server, lossis lub router thiab lub switch), nws rov ua dua tag nrho cov ntaub ntawv upstream thiab downstream uas dhau los ntawm qhov txuas mus rau qhov chaw nres nkoj saib xyuas siv "optical splitting" lossis "traffic splitting", rau kev ua tiav tom qab los ntawm cov khoom siv tshuaj xyuas (xws li network analyzers thiab Intrusion Detection Systems - IDS).

Cov Ntsiab Lus Tseem Ceeb: Tsom ntsoov rau "Kev Ncaj Ncees" thiab "Kev Ruaj Ntseg"

1. 100% Kev ntes cov ntaub ntawv pob ntawv yam tsis muaj kev pheej hmoo poob

Qhov no yog qhov zoo tshaj plaws ntawm TAP. Vim tias TAP ua haujlwm ntawm txheej txheej thiab rov ua cov teeb liab hluav taws xob lossis kho qhov muag ncaj qha hauv qhov txuas, nws tsis vam khom cov peev txheej CPU ntawm lub switch rau kev xa cov ntaub ntawv pob ntawv lossis rov ua dua. Yog li ntawd, tsis hais seb lub network traffic nyob rau ntawm nws qhov siab tshaj plaws lossis muaj cov ntaub ntawv pob ntawv loj (xws li Jumbo Frames nrog tus nqi MTU loj), txhua cov ntaub ntawv pob ntawv tuaj yeem raug ntes tag nrho yam tsis muaj pob ntawv poob los ntawm cov peev txheej hloov tsis txaus. Qhov "kev ntes tsis poob" no ua rau nws yog qhov kev daws teeb meem zoo tshaj plaws rau cov xwm txheej uas xav tau kev txhawb nqa cov ntaub ntawv raug (xws li qhov chaw ua rau muaj qhov yuam kev thiab kev tshuaj xyuas kev ua haujlwm hauv network).

2. Tsis muaj kev cuam tshuam rau kev ua haujlwm ntawm lub network qub

Txoj kev ua haujlwm ntawm TAP ua kom ntseeg tau tias nws tsis ua rau muaj kev cuam tshuam rau qhov txuas network qub. Nws tsis hloov cov ntsiab lus, qhov chaw nyob / qhov chaw nyob, lossis lub sijhawm ntawm cov ntaub ntawv pob ntawv thiab tsis nyob hauv qhov hloov pauv qhov chaw nres nkoj bandwidth, cache, lossis cov peev txheej ua haujlwm. Txawm tias lub cuab yeej TAP nws tus kheej ua haujlwm tsis zoo (xws li hluav taws xob tsis ua haujlwm lossis kho vajtse puas tsuaj), nws tsuas yog ua rau tsis muaj cov ntaub ntawv tso tawm los ntawm qhov chaw saib xyuas, thaum kev sib txuas lus ntawm qhov txuas network qub tseem zoo li qub, zam kev pheej hmoo ntawm kev cuam tshuam network los ntawm kev ua tsis tiav ntawm cov khoom siv sau cov ntaub ntawv.

3. Kev Txhawb Nqa Rau Cov Kev Sib Txuas Tag Nrho-Duplex thiab Cov Chaw Sib Txuas Sib Txuas

Cov tes hauj lwm niaj hnub no feem ntau siv hom kev sib txuas lus puv-duplex (piv txwv li, cov ntaub ntawv upstream thiab downstream tuaj yeem xa tau tib lub sijhawm). TAP tuaj yeem ntes cov ntaub ntawv ntws hauv ob qho kev taw qhia ntawm qhov txuas puv-duplex thiab tso tawm lawv los ntawm cov chaw nres nkoj saib xyuas ywj pheej, xyuas kom meej tias lub cuab yeej tshuaj xyuas tuaj yeem rov qab kho cov txheej txheem sib txuas lus ob txoj kev. Tsis tas li ntawd, TAP txhawb nqa ntau yam nqi network (xws li 100M, 1G, 10G, 40G, thiab txawm tias 100G) thiab cov hom xov xwm (twisted pair, single-mode fiber, multi-mode fiber), thiab tuaj yeem hloov kho rau cov chaw sib txuas lus ntawm ntau qhov nyuaj xws li cov chaw khaws ntaub ntawv, cov tes hauj lwm tseem ceeb, thiab cov tes hauj lwm hauv tsev kawm ntawv.

Cov Xwm Txheej Siv: Tsom ntsoov rau "Kev Tshawb Fawb Tseeb" thiab "Kev Saib Xyuas Qhov Txuas Tseem Ceeb"

1. Kev daws teeb meem hauv network thiab qhov chaw ua rau muaj teeb meem

Thaum muaj teeb meem xws li poob pob ntawv, qeeb, jitter, lossis daim ntawv thov lag tshwm sim hauv lub network, nws yog qhov tsim nyog los rov qab kho qhov xwm txheej thaum qhov txhaum tshwm sim los ntawm cov ntaub ntawv pob ntawv tag nrho. Piv txwv li, yog tias lub tuam txhab cov txheej txheem lag luam tseem ceeb (xws li ERP thiab CRM) ntsib kev nkag mus tsis tu ncua, cov neeg ua haujlwm ua haujlwm thiab txij nkawm tuaj yeem xa TAP ntawm lub server thiab lub qhov hloov tseem ceeb kom ntes tau tag nrho cov ntaub ntawv pob ntawv rov qab, tshuaj xyuas seb puas muaj teeb meem xws li TCP rov xa dua, poob pob ntawv, DNS daws teeb meem qeeb, lossis cov teeb meem txheej txheem daim ntawv thov, thiab yog li ntawd nrhiav tau qhov ua rau muaj qhov txhaum sai sai (xws li teeb meem zoo ntawm qhov txuas, kev teb qeeb ntawm lub server, lossis cov teeb meem teeb tsa middleware).

2. Kev Tsim Kom Muaj Kev Ua Haujlwm Hauv Network thiab Kev Saib Xyuas Qhov Tsis Zoo

Hauv kev ua haujlwm thiab kev saib xyuas network, tsim kom muaj kev ua tau zoo hauv qab cov khoom lag luam ib txwm muaj (xws li kev siv bandwidth nruab nrab, kev ncua sijhawm xa cov ntaub ntawv pob ntawv, thiab kev vam meej ntawm kev sib txuas TCP) yog lub hauv paus rau kev saib xyuas qhov tsis zoo. TAP tuaj yeem ntes tau cov ntaub ntawv tag nrho ntawm cov kev sib txuas tseem ceeb (xws li ntawm cov hloov pauv tseem ceeb thiab ntawm cov routers egress thiab ISPs) ntev, pab cov neeg ua haujlwm thiab cov neeg saib xyuas suav ntau yam ntsuas kev ua tau zoo thiab tsim kom muaj tus qauv pib raug. Thaum muaj qhov tsis zoo tom qab xws li kev nce tsheb sai sai, kev ncua sijhawm tsis zoo, lossis cov txheej txheem tsis zoo (xws li kev thov ARP tsis zoo thiab ntau lub pob ntawv ICMP) tshwm sim, qhov tsis zoo tuaj yeem pom sai sai los ntawm kev sib piv nrog lub hauv paus, thiab kev cuam tshuam raws sijhawm tuaj yeem ua tiav.

3. Kev Tshuaj Xyuas Kev Ua Raws Cai thiab Kev Tshawb Pom Kev hem thawj nrog Cov Kev Cai Ruaj Ntseg Siab

Rau cov lag luam uas muaj cov kev cai siab rau kev ruaj ntseg ntawm cov ntaub ntawv thiab kev ua raws li xws li kev nyiaj txiag, tsoomfwv tej haujlwm, thiab lub zog, nws yog ib qho tsim nyog los ua qhov kev tshuaj xyuas tag nrho ntawm cov txheej txheem xa cov ntaub ntawv rhiab heev lossis nrhiav pom qhov tseeb ntawm kev hem thawj hauv network (xws li APT kev tawm tsam, kev xau cov ntaub ntawv, thiab kev nthuav tawm cov lej phem). Qhov tsis poob ntawm TAP ua kom muaj kev ncaj ncees thiab qhov tseeb ntawm cov ntaub ntawv tshuaj xyuas, uas tuaj yeem ua tau raws li cov kev cai lij choj thiab kev cai lij choj xws li "Network Security Law" thiab "Data Security Law" rau kev khaws cov ntaub ntawv thiab kev tshuaj xyuas; tib lub sijhawm, cov ntaub ntawv puv ntoob kuj muab cov qauv tshuaj xyuas nplua nuj rau cov kab ke nrhiav kev hem thawj (xws li IDS / IPS thiab cov khoom siv sandbox), pab nrhiav pom qhov tsawg zaus thiab zais kev hem thawj zais cia hauv cov tsheb khiav ib txwm muaj (xws li cov lej phem hauv cov tsheb khiav encrypted thiab kev tawm tsam nkag mus zais ua lag luam ib txwm muaj).

Kev Txwv: Kev Sib Pauv Ntawm Tus Nqi thiab Kev Ywj Pheej ntawm Kev Xa Mus

Qhov kev txwv tseem ceeb ntawm TAP yog nws tus nqi kho vajtse siab thiab kev yooj yim tso tawm tsawg. Ntawm ib sab tes, TAP yog ib qho khoom siv kho vajtse tshwj xeeb, thiab tshwj xeeb, TAPs txhawb nqa tus nqi siab (xws li 40G thiab 100G) lossis cov xov xwm fiber ntau dua li software-based SPAN function; ntawm qhov tod tes, TAP yuav tsum tau txuas ua ke hauv cov kab sib txuas hauv qhov txuas network qub, thiab qhov txuas yuav tsum tau cuam tshuam ib ntus thaum lub sijhawm tso tawm (xws li ntsaws thiab tshem cov cables network lossis fibers optical). Rau qee qhov txuas tseem ceeb uas tsis pub cuam tshuam (xws li cov kev sib txuas nyiaj txiag ua haujlwm 24/7), kev tso tawm nyuaj, thiab TAP access points feem ntau yuav tsum tau tseg ua ntej thaum lub sijhawm npaj network.

SPAN: Ib qho kev daws teeb meem "Multi-Port" Data Aggregation uas pheej yig thiab yoog tau

SPAN yog ib qho software function uas muaj nyob rau hauv cov switches (qee cov high-end routers kuj txhawb nqa nws). Nws lub hauv paus ntsiab lus yog los teeb tsa lub switch sab hauv kom rov ua cov tsheb khiav los ntawm ib lossis ntau qhov chaw nres nkoj (Source Ports) lossis qhov chaw VLANs mus rau qhov chaw nres nkoj saib xyuas (Destination Port, tseem hu ua qhov chaw nres nkoj iav) rau kev txais thiab ua tiav los ntawm lub cuab yeej tshuaj xyuas. Tsis zoo li TAP, SPAN tsis xav tau cov khoom siv kho vajtse ntxiv thiab tuaj yeem ua tiav kev sau cov ntaub ntawv tsuas yog los ntawm kev cia siab rau software configuration ntawm lub switch.

Cov Ntsiab Lus Tseem Ceeb: Tsom ntsoov rau "Kev Siv Nyiaj Zoo" thiab "Kev Ywj Pheej"

1. Tsis Muaj Tus Nqi Kho Vaj Tse Ntxiv thiab Kev Siv Yooj Yim

Vim tias SPAN yog ib qho function uas muaj nyob rau hauv lub switch firmware, tsis tas yuav yuav cov khoom siv kho vajtse tshwj xeeb. Kev sau cov ntaub ntawv tuaj yeem ua haujlwm sai sai los ntawm kev teeb tsa los ntawm CLI (Command Line Interface) lossis Web management interface (xws li kev teev qhov chaw nres nkoj, qhov chaw nres nkoj saib xyuas, thiab kev taw qhia mirroring (inbound, outbound, lossis bidirectional)). Qhov "zero hardware cost" no ua rau nws yog qhov kev xaiv zoo tshaj plaws rau cov xwm txheej uas muaj peev nyiaj tsawg lossis kev xav tau saib xyuas ib ntus (xws li kev sim daim ntawv thov luv luv thiab kev daws teeb meem ib ntus).

2. Kev txhawb nqa rau Multi-Source Port / Multi-VLAN Traffic Aggregation

Ib qho txiaj ntsig tseem ceeb ntawm SPAN yog tias nws tuaj yeem rov ua cov tsheb khiav los ntawm ntau qhov chaw nres nkoj (xws li cov chaw nres nkoj neeg siv ntawm ntau qhov nkag mus rau txheej) lossis ntau VLANs mus rau tib qhov chaw nres nkoj saib xyuas tib lub sijhawm. Piv txwv li, yog tias cov neeg ua haujlwm ua haujlwm thiab cov neeg saib xyuas hauv tuam txhab xav tau saib xyuas cov tsheb khiav ntawm cov neeg ua haujlwm hauv ntau lub chaw haujlwm (sib raug rau cov VLANs sib txawv) nkag mus rau hauv Is Taws Nem, tsis tas yuav xa cov khoom siv sib cais ntawm qhov tawm ntawm txhua VLAN. Los ntawm kev sib sau ua ke cov tsheb khiav ntawm cov VLANs no mus rau ib qho chaw nres nkoj saib xyuas los ntawm SPAN, kev tshuaj xyuas hauv nruab nrab tuaj yeem ua tiav, txhim kho qhov yooj ywm thiab kev ua haujlwm ntawm kev sau cov ntaub ntawv.

3. Tsis tas yuav cuam tshuam qhov txuas Network qub

Txawv ntawm kev xa tawm ntawm TAP, ob qho tib si qhov chaw nres nkoj thiab qhov chaw nres nkoj saib xyuas ntawm SPAN yog cov chaw nres nkoj ib txwm ntawm lub hloov. Thaum lub sijhawm teeb tsa, tsis tas yuav ntsaws thiab tshem cov xov hlau network ntawm qhov txuas qub, thiab tsis muaj kev cuam tshuam rau kev xa cov tsheb khiav qub. Txawm tias nws yog qhov tsim nyog los kho qhov chaw nres nkoj lossis kaw qhov kev ua haujlwm SPAN tom qab, nws tsuas yog ua tau los ntawm kev hloov kho qhov kev teeb tsa los ntawm kab hais kom ua, uas yooj yim rau kev ua haujlwm thiab tsis muaj kev cuam tshuam nrog cov kev pabcuam network.

Cov Xwm Txheej Siv: Tsom ntsoov rau "Kev Saib Xyuas Tus Nqi Qis" thiab "Kev Tshawb Fawb Hauv Nruab Nrab"

1. Kev Soj Ntsuam Tus Neeg Siv Hauv Cov Network Hauv Tsev Kawm Ntawv / Cov Network Hauv Tuam Txhab

Hauv cov tes hauj lwm hauv tsev kawm ntawv lossis cov tes hauj lwm hauv tuam txhab, cov thawj coj feem ntau yuav tsum saib xyuas seb cov neeg ua haujlwm puas muaj kev nkag mus tsis raug cai (xws li nkag mus rau cov vev xaib tsis raug cai thiab rub tawm cov software pirated) thiab seb puas muaj ntau P2P rub tawm lossis cov yeeb yaj kiab uas siv bandwidth. Los ntawm kev sib sau ua ke cov tsheb khiav ntawm cov chaw nres nkoj neeg siv ntawm cov hloov pauv nkag mus rau qhov chaw nres nkoj saib xyuas los ntawm SPAN, ua ke nrog cov software tshuaj xyuas tsheb khiav (xws li Wireshark thiab NetFlow Analyzer), kev saib xyuas lub sijhawm tiag tiag ntawm tus cwj pwm ntawm tus neeg siv thiab cov ntaub ntawv ntawm kev siv bandwidth tuaj yeem ua tiav yam tsis muaj kev nqis peev kho vajtse ntxiv.

2. Kev daws teeb meem ib ntus thiab kev sim daim ntawv thov luv luv

Thaum muaj qhov yuam kev ib ntus thiab qee zaum tshwm sim hauv lub network, lossis thaum nws tsim nyog los ua qhov kev sim tsheb khiav ntawm daim ntawv thov tshiab (xws li lub kaw lus OA sab hauv thiab lub kaw lus sib tham video), SPAN tuaj yeem siv los tsim kom sai sai ib puag ncig sau cov ntaub ntawv. Piv txwv li, yog tias lub chaw haujlwm tshaj tawm tias muaj kev khov ntau zaus hauv kev sib tham video, cov neeg ua haujlwm ua haujlwm thiab kev saib xyuas tuaj yeem teeb tsa SPAN ib ntus kom phim cov tsheb khiav ntawm qhov chaw nres nkoj uas lub server sib tham video nyob rau qhov chaw nres nkoj saib xyuas. Los ntawm kev tshuaj xyuas qhov qeeb ntawm cov ntaub ntawv pob, tus nqi poob pob, thiab kev siv bandwidth, nws tuaj yeem txiav txim siab seb qhov yuam kev puas yog los ntawm qhov tsis txaus ntawm network bandwidth lossis cov ntaub ntawv pob poob. Tom qab kev daws teeb meem tiav lawm, qhov kev teeb tsa SPAN tuaj yeem raug kaw yam tsis cuam tshuam rau kev ua haujlwm hauv network tom ntej.

3. Cov Txheeb Xyuas Tsheb thiab Kev Tshuaj Xyuas Yooj Yim hauv Cov Tes Haujlwm Me thiab Nruab Nrab

Rau cov tes hauj lwm me thiab nruab nrab (xws li cov lag luam me thiab cov chaw kuaj mob hauv tsev kawm ntawv), yog tias qhov xav tau rau kev sau cov ntaub ntawv tsis siab, thiab tsuas yog cov ntaub ntawv yooj yim xwb (xws li kev siv bandwidth ntawm txhua qhov chaw nres nkoj thiab feem pua ​​ntawm cov tsheb khiav ntawm Top N daim ntawv thov) lossis kev tshuaj xyuas kev ua raws li txoj cai yooj yim (xws li kev sau cov npe sau npe hauv lub vev xaib uas cov neeg siv nkag mus) xav tau, SPAN tuaj yeem ua tau raws li qhov xav tau tag nrho. Nws cov yam ntxwv pheej yig thiab yooj yim rau kev xa tawm ua rau nws yog qhov kev xaiv pheej yig rau cov xwm txheej zoo li no.

Cov Kev Txwv: Qhov Tsis Zoo ntawm Kev Ncaj Ncees ntawm Cov Ntaub Ntawv thiab Kev Cuam Tshuam ntawm Kev Ua Haujlwm

1. Kev Pheej Hmoo ntawm Cov Ntaub Ntawv Poob thiab Kev Ntes Tsis tiav

Kev theej cov ntaub ntawv los ntawm SPAN vam khom CPU thiab cache cov peev txheej ntawm lub switch. Thaum cov tsheb khiav ntawm qhov chaw nres nkoj yog nyob rau ntawm nws qhov siab tshaj plaws (xws li tshaj qhov peev xwm cache ntawm lub switch) lossis lub switch ua tiav ntau yam haujlwm xa mus tib lub sijhawm, CPU yuav muab qhov tseem ceeb rau kev ua kom muaj kev xa mus ntawm cov tsheb khiav qub, thiab txo lossis ncua kev theej ntawm SPAN tsheb khiav, ua rau cov pob poob ntawm qhov chaw nres nkoj saib xyuas. Tsis tas li ntawd, qee lub switches muaj kev txwv rau qhov piv ntawm mirroring ntawm SPAN (xws li tsuas yog txhawb nqa kev theej ntawm 80% ntawm cov tsheb khiav) lossis tsis txhawb nqa kev theej tag nrho ntawm cov ntaub ntawv loj (xws li Jumbo Frames). Tag nrho cov no yuav ua rau cov ntaub ntawv sau tsis tiav thiab cuam tshuam rau qhov tseeb ntawm cov txiaj ntsig kev tshuaj xyuas tom qab.

2. Kev Siv Cov Kev Pabcuam Hloov thiab Qhov Cuam Tshuam rau Kev Ua Haujlwm ntawm Network

Txawm hais tias SPAN tsis cuam tshuam ncaj qha rau qhov txuas qub, thaum tus lej ntawm cov chaw nres nkoj loj lossis cov tsheb khiav ntau, cov txheej txheem rov ua dua cov ntaub ntawv pob ntawv yuav siv cov peev txheej CPU thiab bandwidth sab hauv ntawm lub switch. Piv txwv li, yog tias cov tsheb khiav ntawm ntau lub chaw nres nkoj 10G raug mirrored rau lub chaw nres nkoj saib xyuas 10G, thaum tag nrho cov tsheb khiav ntawm cov chaw nres nkoj qhov chaw tshaj 10G, tsis yog tsuas yog lub chaw nres nkoj saib xyuas yuav raug kev txom nyem los ntawm kev poob pob ntawv vim tsis txaus bandwidth, tab sis kev siv CPU ntawm lub switch kuj tseem yuav nce ntxiv ntau, yog li cuam tshuam rau cov ntaub ntawv pob ntawv xa mus rau lwm lub chaw nres nkoj thiab txawm tias ua rau muaj kev poob qis hauv kev ua haujlwm tag nrho ntawm lub switch.

3. Kev Ua Haujlwm Nyob Ntawm Tus Qauv Hloov Thiab Kev Sib Txuas Lus Tsawg

Qib kev txhawb nqa rau SPAN function sib txawv ntawm cov switches ntawm ntau lub tuam txhab tsim khoom thiab cov qauv. Piv txwv li, cov switches qis qis tsuas yog txhawb nqa ib qho chaw nres nkoj saib xyuas thiab tsis txhawb nqa VLAN mirroring lossis full-duplex traffic mirroring; SPAN function ntawm qee cov switches muaj "ib txoj kev mirroring" txwv (piv txwv li, tsuas yog mirroring inbound lossis outbound traffic, thiab tsis tuaj yeem mirror bidirectional traffic tib lub sijhawm); ntxiv rau, cross-switch SPAN (xws li mirroring qhov chaw nres nkoj traffic ntawm switch A mus rau qhov chaw nres nkoj saib xyuas ntawm switch B) yuav tsum vam khom cov protocols tshwj xeeb (xws li Cisco's RSPAN thiab Huawei's ERSPAN), uas muaj kev teeb tsa nyuaj thiab tsis sib xws, thiab nyuaj rau hloov kho rau ib puag ncig ntawm kev sib xyaw network ntawm ntau lub tuam txhab tsim khoom.

Kev Sib Piv Qhov Txawv Tseem Ceeb thiab Cov Lus Qhia Xaiv ntawm TAP thiab SPAN

Kev Sib Piv Qhov Sib Txawv ntawm Core

Yuav kom pom tseeb dua qhov txawv ntawm ob qho no, peb muab piv rau lawv los ntawm qhov ntev ntawm cov yam ntxwv ntawm kev siv tshuab, kev cuam tshuam rau kev ua tau zoo, tus nqi, thiab cov xwm txheej siv tau:

Cov Lus Qhia Xaiv: "Kev Sib Tw Kom Tseeb" Raws Li Cov Kev Xav Tau ntawm Qhov Xwm Txheej

1. Tej yam xwm txheej uas TAP yog qhov nyiam dua

○Kev saib xyuas cov kev sib txuas ua lag luam tseem ceeb (xws li cov chaw khaws ntaub ntawv tseem ceeb thiab cov kev sib txuas ntawm lub router), uas yuav tsum tau ua kom ntseeg tau tias kev ntes cov ntaub ntawv muaj kev ncaj ncees;

○Qhov chaw ua rau muaj qhov teeb meem hauv network (xws li TCP rov xa dua thiab kev lag luam ntawm daim ntawv thov), xav tau kev tshuaj xyuas kom raug raws li cov ntaub ntawv puv ntoob;

○Cov lag luam uas muaj kev ruaj ntseg siab thiab kev ua raws li cov cai (nyiaj txiag, tsoomfwv tej haujlwm, lub zog), uas yuav tsum tau ua kom tau raws li kev ncaj ncees thiab tsis muaj kev cuam tshuam cov ntaub ntawv tshuaj xyuas;

○Cov chaw sib txuas lus ceev ceev (10G thiab siab dua) lossis cov xwm txheej nrog cov ntaub ntawv loj, uas yuav tsum zam kev poob pob ntawv hauv SPAN.

2. Cov Xwm Txheej Uas SPAN Yog Qhov Zoo Tshaj Plaws

○Cov tes hauj lwm me thiab nruab nrab uas muaj peev nyiaj tsawg, lossis cov xwm txheej tsuas yog xav tau cov ntaub ntawv yooj yim xwb (xws li kev siv bandwidth thiab Top applications);

○Kev daws teeb meem ib ntus lossis kev sim daim ntawv thov luv luv (xws li kev sim tso tawm lub kaw lus tshiab), uas yuav tsum tau xa tawm sai sai yam tsis tas siv cov peev txheej ntev;

○Kev saib xyuas ntawm ntau qhov chaw nres nkoj / ntau-VLANs (xws li kev saib xyuas tus cwj pwm ntawm cov neeg siv network hauv tsev kawm ntawv), xav tau kev sib sau ua ke ntawm cov tsheb khiav tau yooj yim;

○Kev saib xyuas cov kev sib txuas uas tsis yog lub hauv paus (xws li cov chaw nres nkoj ntawm cov kev hloov pauv txheej nkag mus), nrog rau qhov yuav tsum tau ua kom cov ntaub ntawv raug ntes tau zoo.

3. Cov Xwm Txheej Siv Sib Xyaws

Hauv qee qhov chaw sib txuas lus nyuaj, txoj kev xa tawm sib xyaw ntawm "TAP + SPAN" kuj tseem tuaj yeem siv tau. Piv txwv li, xa TAP hauv cov kev sib txuas tseem ceeb ntawm lub chaw khaws ntaub ntawv kom ntseeg tau tias muaj cov ntaub ntawv puv ntoob rau kev daws teeb meem thiab kev tshuaj xyuas kev ruaj ntseg; teeb tsa SPAN hauv cov txheej txheem nkag mus lossis cov txheej txheem sib sau ua ke kom sib sau ua ke cov neeg siv khiav tawm rau kev tshuaj xyuas tus cwj pwm thiab cov ntaub ntawv bandwidth. Qhov no tsis yog tsuas yog ua tau raws li qhov xav tau kev saib xyuas tseeb ntawm cov kev sib txuas tseem ceeb tab sis kuj txo cov nqi xa tawm tag nrho.

Yog li, ua ob lub thev naus laus zis tseem ceeb rau kev tau txais cov ntaub ntawv hauv network, TAP thiab SPAN tsis muaj "qhov zoo lossis qhov tsis zoo" kiag li tab sis tsuas yog "qhov sib txawv hauv kev hloov kho qhov xwm txheej". TAP yog tsom mus rau "kev ntes tsis muaj kev poob" thiab "kev ntseeg tau ruaj khov", thiab nws tsim nyog rau cov xwm txheej tseem ceeb nrog cov kev xav tau siab rau kev ncaj ncees ntawm cov ntaub ntawv thiab kev ruaj khov ntawm network, tab sis muaj tus nqi siab thiab kev ywj pheej xa tawm tsawg; SPAN muaj qhov zoo ntawm "xoom tus nqi" thiab "kev ywj pheej thiab kev yooj yim", thiab nws tsim nyog rau cov xwm txheej pheej yig, ib ntus, lossis tsis yog cov tseem ceeb, tab sis muaj kev pheej hmoo ntawm kev poob cov ntaub ntawv thiab kev cuam tshuam rau kev ua tau zoo.

Thaum lub sijhawm ua haujlwm thiab kev saib xyuas lub network tiag tiag, cov kws ua haujlwm network yuav tsum xaiv cov kev daws teeb meem tsim nyog tshaj plaws raws li lawv tus kheej cov kev xav tau ua lag luam (xws li seb nws puas yog qhov txuas tseem ceeb thiab seb puas xav tau kev tshuaj xyuas kom raug), cov nqi peev nyiaj, qhov loj ntawm lub network, thiab cov kev cai ua raws li txoj cai. Tib lub sijhawm, nrog rau kev txhim kho ntawm cov nqi network (xws li 25G, 100G, thiab 400G) thiab kev txhim kho ntawm cov kev cai ruaj ntseg network, TAP thev naus laus zis kuj tseem niaj hnub txhim kho (xws li kev txhawb nqa kev faib tsheb ntse thiab kev sib sau ua ke ntau lub chaw nres nkoj), thiab cov chaw tsim khoom hloov pauv kuj tseem niaj hnub txhim kho qhov kev ua haujlwm SPAN (xws li kev txhim kho lub peev xwm cache thiab txhawb nqa kev poob qis). Yav tom ntej, ob lub thev naus laus zis yuav ua lawv lub luag haujlwm ntxiv hauv lawv cov teb thiab muab kev txhawb nqa cov ntaub ntawv zoo dua thiab raug rau kev tswj hwm network.