Thaum lub cuab yeej Intrusion Detection System (IDS) raug xa tawm, qhov chaw nres nkoj mirroring ntawm qhov hloov pauv hauv qhov chaw qhia ntawm tus neeg sib koom tes tsis txaus (piv txwv li, tsuas yog ib qho chaw nres nkoj mirroring raug tso cai, thiab qhov chaw nres nkoj mirroring tau nyob hauv lwm cov khoom siv).
Lub sijhawm no, thaum peb tsis ntxiv ntau qhov chaw nres nkoj mirroring, peb tuaj yeem siv lub network replication, aggregation thiab forwarding device los faib tib cov ntaub ntawv mirroring rau peb lub cuab yeej.
Lub TAP Network yog dab tsi?
Tej zaum koj thawj zaug hnov lub npe TAP switch. TAP (Terminal Access Point), tseem hu ua NPB (Network Packet Broker), lossis Tap Aggregator?
Lub luag haujlwm tseem ceeb ntawm TAP yog teeb tsa ntawm qhov chaw nres nkoj mirroring ntawm lub network tsim khoom thiab pawg khoom siv tshuaj xyuas. TAP sau cov tsheb khiav mirrored lossis sib cais los ntawm ib lossis ntau lub network tsim khoom thiab faib cov tsheb khiav mus rau ib lossis ntau lub cuab yeej tshuaj xyuas cov ntaub ntawv.
Cov xwm txheej sib xws ntawm kev xa tawm network TAP
Network Tap muaj cov ntawv lo qhia meej, xws li:
Kho Vaj Khoom Siv Ywj Pheej
TAP yog ib daim kho vajtse sib cais uas tsis cuam tshuam rau qhov thauj khoom ntawm cov khoom siv network uas twb muaj lawm, uas yog ib qho zoo dua li qhov chaw nres nkoj mirroring.
Hloov?
Kov Network?
Network Transparent
Tom qab TAP txuas nrog lub network lawm, txhua yam khoom siv hauv lub network yuav tsis raug cuam tshuam. Rau lawv, TAP yog pob tshab zoo li huab cua, thiab cov khoom siv saib xyuas txuas nrog TAP yog pob tshab rau lub network tag nrho.
TAP zoo ib yam li Port Mirroring ntawm lub switch. Yog li ntawd, vim li cas ho yuav tsum siv TAP cais? Cia peb saib qee qhov sib txawv ntawm Network TAP thiab Network Port Mirroring.
Qhov txawv 1: Network TAP yooj yim dua rau kev teeb tsa dua li qhov chaw nres nkoj mirroring
Yuav tsum teeb tsa qhov chaw nres nkoj mirroring ntawm lub switch. Yog tias qhov kev saib xyuas yuav tsum tau hloov kho, lub switch yuav tsum tau rov teeb tsa TAG NRHO. Txawm li cas los xij, TAP tsuas yog yuav tsum tau hloov kho qhov twg nws thov, uas tsis muaj kev cuam tshuam rau cov khoom siv network uas twb muaj lawm.
Qhov txawv 2: Network TAP tsis cuam tshuam rau kev ua haujlwm ntawm network piv rau qhov chaw nres nkoj mirroring
Qhov chaw nres nkoj mirroring ntawm lub switch ua rau qhov kev ua haujlwm ntawm lub switch tsis zoo thiab cuam tshuam rau lub peev xwm hloov pauv. Tshwj xeeb, yog tias lub switch txuas nrog lub network hauv series raws li inline, lub peev xwm xa mus rau pem hauv ntej ntawm tag nrho lub network raug cuam tshuam loj heev. TAP yog ib qho khoom siv ywj pheej thiab tsis ua rau lub cuab yeej ua haujlwm tsis zoo vim yog kev cuam tshuam tsheb. Yog li ntawd, nws tsis muaj kev cuam tshuam rau qhov hnyav ntawm cov khoom siv network uas twb muaj lawm, uas muaj qhov zoo dua li qhov chaw nres nkoj mirroring.
Qhov txawv 3: Network TAP muab cov txheej txheem tsheb khiav tiav dua li qhov chaw nres nkoj mirroring replication
Qhov chaw nres nkoj mirroring tsis tuaj yeem ua kom ntseeg tau tias txhua qhov kev thauj mus los tuaj yeem tau txais vim tias qhov chaw nres nkoj hloov nws tus kheej yuav lim qee cov pob khoom yuam kev lossis cov pob khoom me me dhau. Txawm li cas los xij, TAP ua kom cov ntaub ntawv muaj kev ncaj ncees vim nws yog "kev theej" tiav ntawm txheej txheej.
Qhov txawv 4: Qhov kev ncua sij hawm xa mus ntawm TAP me dua li ntawm Port Mirroring
Ntawm qee qhov kev hloov pauv qis, qhov chaw nres nkoj mirroring yuav ua rau muaj latency thaum theej cov tsheb mus rau cov chaw nres nkoj mirroring, nrog rau thaum theej 10/100m chaw nres nkoj mus rau Giga Ethernet chaw nres nkoj.
Txawm hais tias qhov no tau sau tseg dav dav, peb ntseeg tias ob qho kev tshuaj xyuas tom kawg tsis muaj kev txhawb nqa zoo.
Yog li, nyob rau hauv qhov xwm txheej dav dav twg, peb yuav tsum siv TAP rau kev faib cov tsheb khiav hauv network? Tsuas yog, yog tias koj muaj cov kev cai hauv qab no, ces Network TAP yog koj qhov kev xaiv zoo tshaj plaws.
Cov Txuj Ci Network TAP
Mloog cov lus saum toj no, xav tias TAP network shunt yog ib qho cuab yeej khawv koob tiag tiag, kev ua lag luam tam sim no TAP shunt siv cov qauv hauv qab ntawm kwv yees li peb pawg:
FPGA
- Kev ua tau zoo heev
- Nyuaj rau kev loj hlob
- Tus nqi siab
MIPS
- Yooj yim thiab yooj yim
- Qhov nyuaj ntawm kev loj hlob nruab nrab
- Cov neeg muag khoom tseem ceeb RMI thiab Cavium tau tso tseg kev tsim kho thiab ua tsis tiav tom qab
ASIC
- Kev ua tau zoo heev
- Kev txhim kho kev ua haujlwm nthuav dav yog qhov nyuaj, feem ntau yog vim muaj kev txwv ntawm lub nti nws tus kheej
- Lub interface thiab cov lus qhia tshwj xeeb raug txwv los ntawm lub chip nws tus kheej, ua rau muaj kev ua haujlwm tsis zoo
Yog li ntawd, qhov ceev ceev thiab ceev ceev Network TAP pom hauv kev ua lag luam muaj ntau chav rau kev txhim kho hauv kev ywj pheej hauv kev siv tiag tiag. TAP network shunters yog siv rau kev hloov pauv protocol, sau cov ntaub ntawv, shunting cov ntaub ntawv, mirroring cov ntaub ntawv, thiab kev lim tsheb. Cov hom chaw nres nkoj tseem ceeb suav nrog 100G, 40G, 10G, 2.5G POS, GE, thiab lwm yam. Vim yog qhov maj mam tshem tawm ntawm cov khoom SDH, Network TAP shunters tam sim no feem ntau siv hauv txhua qhov chaw network-Ethernet.
Lub sijhawm tshaj tawm: Tsib Hlis-25-2022
