Thaum lub cuab yeej Intrusion Detection System (IDS) raug xa mus, qhov chaw nres nkoj mirroring ntawm qhov hloov pauv hauv cov ntaub ntawv chaw ntawm cov neeg sib tw tsis txaus (piv txwv li, tsuas yog ib qho chaw nres nkoj mirroring tau tso cai, thiab qhov chaw nres nkoj mirroring tau nyob lwm yam khoom siv).
Lub sijhawm no, thaum peb tsis ntxiv ntau qhov chaw mirroring, peb tuaj yeem siv lub network replication, aggregation thiab forwarding device los faib tib cov ntaub ntawv mirroring rau peb lub cuab yeej.
Network TAP yog dab tsi?
Tej zaum koj thawj zaug hnov lub npe TAP hloov. TAP (Terminal Access Point), tseem hu ua NPB (Network Packet Broker), lossis Kais Aggregator?
Lub luag haujlwm tseem ceeb ntawm TAP yog teeb tsa nruab nrab ntawm qhov chaw nres nkoj mirroring ntawm lub network tsim khoom thiab cov khoom siv tshuaj ntsuam xyuas. Lub TAP sau cov iav los yog sib cais los ntawm ib lossis ntau cov khoom siv hauv network thiab faib cov tsheb mus rau ib lossis ntau cov ntaub ntawv txheeb xyuas cov cuab yeej.
Common Network TAP network deployment scenarios
Network Tap muaj cov ntawv pom tseeb, xws li:
Kev ywj pheej Hardware
TAP yog ib qho kev sib cais ntawm cov khoom siv uas tsis cuam tshuam rau kev thauj khoom ntawm cov khoom siv network uas twb muaj lawm, uas yog ib qho zoo tshaj qhov chaw nres nkoj mirroring.
Hloov?
Network Kais?
Network pob tshab
Tom qab TAP txuas nrog lub network, tag nrho lwm yam khoom siv hauv lub network tsis cuam tshuam. Rau lawv, TAP yog pob tshab li huab cua, thiab cov cuab yeej saib xyuas txuas nrog TAP yog pob tshab rau lub network tag nrho.
TAP yog ib yam li Port Mirroring ntawm qhov hloov. Yog li vim li cas thiaj li muab TAP cais? Cia peb saib qee qhov sib txawv ntawm Network TAP thiab Network Port Mirroring nyob rau hauv lem.
Qhov txawv 1: Network TAP yog yooj yim rau configure dua chaw nres nkoj mirroring
Chaw nres nkoj mirroring yuav tsum tau teeb tsa ntawm qhov hloov. Yog tias kev saib xyuas yuav tsum tau kho, qhov hloov pauv yuav tsum tau kho dua TAG NRHO. Txawm li cas los xij, TAP tsuas yog yuav tsum tau hloov kho qhov twg nws thov, uas tsis muaj kev cuam tshuam rau cov khoom siv network uas twb muaj lawm.
Qhov txawv 2: Network TAP tsis cuam tshuam rau kev ua haujlwm hauv network txheeb ze rau qhov chaw nres nkoj mirroring
Qhov chaw nres nkoj mirroring ntawm qhov hloov pauv tsis zoo rau kev ua haujlwm ntawm qhov hloov pauv thiab cuam tshuam rau lub peev xwm hloov pauv. Tshwj xeeb, yog tias qhov hloov pauv tau txuas nrog lub network hauv series raws li inline, lub peev xwm xa mus rau tag nrho lub network tau cuam tshuam loj heev. TAP yog ib qho khoom siv ywj pheej thiab tsis cuam tshuam kev ua haujlwm ntawm cov cuab yeej vim yog kev siv tsheb khiav tsheb. Yog li ntawd, nws tsis muaj kev cuam tshuam rau kev thauj khoom ntawm cov khoom siv network uas twb muaj lawm, uas muaj txiaj ntsig zoo tshaj qhov chaw nres nkoj mirroring.
Qhov txawv 3: Network TAP muab cov txheej txheem tsheb ua tiav ntau dua li qhov chaw nres nkoj mirroring replication
Chaw nres nkoj mirroring tsis tuaj yeem xyuas kom meej tias txhua lub tsheb tuaj yeem tau txais vim tias qhov hloov chaw nres nkoj nws tus kheej yuav lim qee cov pob ntawv yuam kev lossis pob ntawv me me dhau. Txawm li cas los xij, TAP ua kom cov ntaub ntawv muaj kev ncaj ncees vim nws yog qhov ua tiav "replication" ntawm lub cev txheej.
Qhov txawv 4: Kev xa mus qeeb ntawm TAP yog me dua li ntawm Port Mirroring
Ntawm qee qhov kev hloov qis kawg, qhov chaw nres nkoj mirroring yuav qhia txog latency thaum luam tsheb mus rau mirroring ports, nrog rau thaum luam 10/100m ports rau Giga Ethernet ports.
Txawm hais tias qhov no yog cov ntaub ntawv dav dav, peb ntseeg tias ob qhov kev soj ntsuam tom kawg tsis muaj qee qhov kev txhawb nqa muaj zog.
Yog li, nyob rau hauv qhov xwm txheej zoo li cas, peb yuav tsum siv TAP rau kev faib tsheb khiav hauv lub network? Yooj yim, yog tias koj muaj cov cai hauv qab no, ces Network TAP yog koj qhov kev xaiv zoo tshaj.
Network TAP Technologies
Mloog cov lus saum toj no, xav tias TAP network shunt yog ib qho khoom siv yees siv tiag tiag, kev lag luam tam sim no feem ntau TAP shunt siv cov qauv hauv qab ntawm kwv yees li peb pawg:
FPGA
- Kev ua haujlwm siab
- Yooj yim rau kev txhim kho
- Tus nqi siab
MIPS
- Yooj yim thiab yooj yim
- Kev loj hlob nyuaj nyuaj
- Cov neeg muag khoom tseem ceeb RMI thiab Cavium nres kev txhim kho thiab ua tsis tiav tom qab
ASIC
- Kev ua haujlwm siab
- Kev nthuav dav kev ua haujlwm yog qhov nyuaj, feem ntau yog vim muaj kev txwv ntawm cov nti nws tus kheej
- Lub interface thiab cov lus qhia tshwj xeeb yog txwv los ntawm lub nti nws tus kheej, ua rau kev nthuav dav tsis zoo
Yog li ntawd, lub siab ceev thiab kev kub ceev Network TAP pom nyob rau hauv kev ua lag luam muaj ntau chav rau kev txhim kho nyob rau hauv kev yooj yim ntawm kev siv. TAP network shunters yog siv rau kev hloov pauv raws tu qauv, sau cov ntaub ntawv, cov ntaub ntawv shunting, cov ntaub ntawv mirroring, thiab kev lim tsheb. Cov hom chaw nres nkoj tseem ceeb suav nrog 100G, 40G, 10G, 2.5G POS, GE, thiab lwm yam. Vim tias kev tshem tawm cov khoom lag luam SDH, tam sim no Network TAP shunters feem ntau yog siv nyob rau hauv tag nrho-Ethernet network ib puag ncig.
Post lub sij hawm: May-25-2022
