{"id":72062,"date":"2020-03-01T14:51:13","date_gmt":"2020-03-01T11:51:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker"},"modified":"2020-03-03T16:14:00","modified_gmt":"2020-03-03T13:14:00","slug":"sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","title":{"rendered":"M\u00fcasir informasiya t\u0259hl\u00fck\u0259sizliyi sisteml\u0259rinin qurulmas\u0131 \u00fc\u00e7\u00fcn h\u0259ll\u0259r \u2014 \u015f\u0259b\u0259k\u0259 paket brokerl\u0259ri (Network Packet Broker)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u0130nformasiya t\u0259hl\u00fck\u0259sizliyi telekommunikasiya sah\u0259sind\u0259n \u00f6z spesifikas\u0131 v\u0259 avadanl\u0131qlar\u0131 olan m\u00fcst\u0259qil bir sektor olaraq ayr\u0131ld\u0131. Lakin telekom v\u0259 infobezin k\u0259si\u015fm\u0259sind\u0259 duran az tan\u0131nm\u0131\u015f avadanl\u0131q sinfi var \u2013 <strong>\u015f\u0259b\u0259k\u0259 paketl\u0259ri brokerl\u0259ri <\/strong>(Network Packet Broker), y\u00fckl\u0259yici balanslay\u0131c\u0131lar, ixtisasla\u015fm\u0131\u015f \/ monitorinq switch-l\u0259ri, trafik aggregatlar\u0131, Security Delivery Platform, Network Visibility v\u0259 s. Kimi tan\u0131n\u0131rlar. Biz, bel\u0259 avadanl\u0131qlar\u0131n Rusiyadak\u0131 istehsal\u00e7\u0131s\u0131 kimi, onlardan daha \u0259trafl\u0131 dan\u0131\u015fmaq ist\u0259yirik.<\/p>\n<p><img decoding=\"async\" alt=\"M\u00fcasir informasiya t\u0259hl\u00fck\u0259sizliyi sisteml\u0259rinin qurulmas\u0131 \u00fc\u00e7\u00fcn h\u0259ll\u0259r \u2014 \u015f\u0259b\u0259k\u0259 paket brokerl\u0259ri (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/4df6859dbb9973439686aa5c4e6f256c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>T\u0259tbiq sah\u0259si v\u0259 h\u0259ll olunan v\u0259zif\u0259l\u0259r<\/h3>\n<p>\n\u015e\u0259b\u0259k\u0259 paketl\u0259ri brokerl\u0259ri \u2013 ixtisasla\u015fm\u0131\u015f avadanl\u0131qlard\u0131r ki, bunlar informasiya t\u0259hl\u00fck\u0259sizliyi sisteml\u0259rind\u0259 \u0259n geni\u015f t\u0259tbiq sah\u0259sini tapm\u0131\u015fd\u0131r. H\u0259qiq\u0259t\u0259n, bu avadanl\u0131q sinfi nisb\u0259t\u0259n yeni v\u0259 \u015f\u0259b\u0259k\u0259 infrastrukturunda kommutatorlar, y\u00f6nl\u0259ndiricil\u0259r v\u0259 s. il\u0259 m\u00fcqayis\u0259d\u0259 azsayl\u0131d\u0131r. Bu avadanl\u0131qlar\u0131n inki\u015faf\u0131nda pioner Amerikan\u0131n Gigamon \u015firk\u0259ti idi. Hal-haz\u0131rda bu bazarda oyun\u00e7ular\u0131n say\u0131 \u0259h\u0259miyy\u0259tli d\u0259r\u0259c\u0259d\u0259 artm\u0131\u015fd\u0131r (buna b\u0259nz\u0259r h\u0259ll\u0259r m\u0259\u015fhur test sisteml\u0259ri istehsal\u00e7\u0131s\u0131 olan IXIA \u015firk\u0259tind\u0259 d\u0259 m\u00f6vcuddur), lakin bu tip avadanl\u0131qlar\u0131n m\u00f6vcudlu\u011fu h\u0259l\u0259 d\u0259 yaln\u0131z dar bir pe\u015f\u0259kar dair\u0259y\u0259 m\u0259lumdur. Yuxar\u0131da qeyd edildiyi kimi, terminologiya il\u0259 ba\u011fl\u0131 da d\u0259qiq bir raz\u0131la\u015fma yoxdur: adlar \u201c\u015f\u0259b\u0259k\u0259nin \u015f\u0259ffafl\u0131\u011f\u0131n\u0131n t\u0259min olunmas\u0131 sisteml\u0259ri\u201dd\u0259n sad\u0259c\u0259 \u201cbalanslay\u0131c\u0131lara\u201d q\u0259d\u0259r d\u0259yi\u015fir.<\/p>\n<p>\u015e\u0259b\u0259k\u0259 paketl\u0259ri brokerl\u0259rini inki\u015faf etdir\u0259rk\u0259n, biz, funksionall\u0131\u011f\u0131n inki\u015faf istiqam\u0259tl\u0259rini t\u0259hlil etm\u0259kl\u0259 yana\u015f\u0131, laboratoriyalarda \/ test b\u00f6lg\u0259l\u0259rind\u0259 s\u0131naqlar aparmaqdan \u0259lav\u0259, potensial m\u00fc\u015ft\u0259ril\u0259r\u0259 bel\u0259 bir avadanl\u0131q sinfinin m\u00f6vcudlu\u011funu izah etm\u0259li oldu\u011fumuzu g\u00f6rd\u00fck, \u00e7\u00fcnki ham\u0131 bunun haqq\u0131nda m\u0259lumatl\u0131 deyil.<\/p>\n<p>15-20 il \u0259vv\u0259l \u015f\u0259b\u0259k\u0259d\u0259 trafik az idi v\u0259 bunlar \u0259sas\u0259n \u0259h\u0259miyy\u0259tsiz m\u0259lumatlardan ibar\u0259t idi. Amma <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Jakob_Nielsen_(usability_consultant)#Contributions\">Nils\u0259n qanunu<\/a><\/noindex> dem\u0259k olar ki, t\u0259krarlay\u0131r <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%97%D0%B0%D0%BA%D0%BE%D0%BD_%D0%9C%D1%83%D1%80%D0%B0\">Moor qanunu<\/a><\/noindex>: internet ba\u011flant\u0131s\u0131n\u0131n s\u00fcr\u0259ti ild\u0259 50% art\u0131r. Trafik h\u0259cmi d\u0259 davaml\u0131 olaraq art\u0131r (\u015f\u0259kild\u0259 2017-ci ild\u0259n Cisco \u015firk\u0259tinin proqnozu g\u00f6st\u0259rilmi\u015fdir, m\u0259nb\u0259: Cisco Visual Networking Index: Forecast and Trends, 2017\u20132022):<\/p>\n<p><img decoding=\"async\" alt=\"M\u00fcasir informasiya t\u0259hl\u00fck\u0259sizliyi sisteml\u0259rinin qurulmas\u0131 \u00fc\u00e7\u00fcn h\u0259ll\u0259r \u2014 \u015f\u0259b\u0259k\u0259 paket brokerl\u0259ri (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/1f17d80ded705b9d06781fbd96219847.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nS\u00fcr\u0259tin artmas\u0131 il\u0259 m\u0259lumatlar\u0131n d\u00f6vriyy\u0259sinin \u0259h\u0259miyy\u0259ti d\u0259 art\u0131r (bu, h\u0259m ticari sirr, h\u0259m d\u0259 m\u0259\u015fhur \u015f\u0259xsi m\u0259lumatlard\u0131r) v\u0259 \u00fcmumilikd\u0259 infrastrukturun i\u015fl\u0259m\u0259 qabiliyy\u0259ti. <\/p>\n<p>Bu \u015f\u0259kild\u0259, informasiya t\u0259hl\u00fck\u0259sizliyi sah\u0259si d\u0259 yarand\u0131. S\u0259naye buna cavab olaraq d\u0259rin trafik analiz cihazlar\u0131 (DPI) spektrinin ortaya \u00e7\u0131xmas\u0131 il\u0259 reaksiya verdi: DDOS h\u00fccumlar\u0131n\u0131 qar\u015f\u0131s\u0131n\u0131 alma sisteml\u0259rind\u0259n, informasiya t\u0259hl\u00fck\u0259sizliyi hadis\u0259l\u0259rini idar\u0259 etm\u0259 sisteml\u0259rin\u0259, IDS, IPS, DLP, NBA, SIEM, Antimailware v\u0259 s. daxil olmaqla. Ad\u0259t\u0259n, h\u0259r bir bu vasit\u0259 server platformas\u0131nda qura\u015fd\u0131r\u0131lan proqram t\u0259minat\u0131d\u0131r. H\u0259r bir proqram (analiz vasit\u0259si) \u00f6z server platformas\u0131nda qura\u015fd\u0131r\u0131l\u0131r: proqram t\u0259minat\u0131 istehsal\u00e7\u0131lar\u0131 f\u0259rqlidir, h\u0259m d\u0259 L7 s\u0259viyy\u0259sind\u0259 analiz \u00fc\u00e7\u00fcn \u00e7oxsayl\u0131 hesablama resurslar\u0131 t\u0259l\u0259b olunur.<\/p>\n<p>\u0130nformasiya t\u0259hl\u00fck\u0259sizliyi sisteminin qurulmas\u0131nda bir s\u0131ra \u0259sas m\u0259s\u0259l\u0259l\u0259ri h\u0259ll etm\u0259k t\u0259l\u0259b olunur:<\/p>\n<ul>\n<li>trafiki infrastrukturdan analiz sisteml\u0259rin\u0259 nec\u0259 \u00f6t\u00fcrm\u0259k? (\u0259vv\u0259lc\u0259 bunun \u00fc\u00e7\u00fcn n\u0259z\u0259rd\u0259 tutulmu\u015f SPAN Portlar\u0131 m\u00fcasir infrastruktura say\u0131 v\u0259 performans bax\u0131m\u0131ndan kifay\u0259t etmir)<\/li>\n<li>trafiki m\u00fcxt\u0259lif analiz sisteml\u0259ri aras\u0131nda nec\u0259 b\u00f6l\u00fc\u015fd\u00fcrm\u0259k?<\/li>\n<li>trafik h\u0259cmini emal etm\u0259k \u00fc\u00e7\u00fcn bir analizatorun performans\u0131 yetm\u0259dikd\u0259 sisteml\u0259ri nec\u0259 geni\u015fl\u0259ndirm\u0259k?<\/li>\n<li>40G\/100G interfeysl\u0259rini nec\u0259 izl\u0259m\u0259k (yax\u0131n g\u0259l\u0259c\u0259kd\u0259 200G\/400G da olacaq), \u00e7\u00fcnki cari analiz vasit\u0259l\u0259ri yaln\u0131z 1G\/10G\/25G interfeysl\u0259rini d\u0259st\u0259kl\u0259yir?<\/li>\n<\/ul>\n<p>\nV\u0259 a\u015fa\u011f\u0131dak\u0131 \u0259laq\u0259li m\u0259s\u0259l\u0259l\u0259r:<\/p>\n<ul>\n<li>analiz \u00fc\u00e7\u00fcn laz\u0131m olmayan m\u0259qs\u0259dli olmayan trafiki nec\u0259 minimuma endirm\u0259k, lakin bu trafik analiz vasit\u0259l\u0259rin\u0259 d\u00fc\u015f\u00fcb onlar\u0131n resurslar\u0131n\u0131 istehlak edir?<\/li>\n<li>inc\u0259 paketl\u0259ri v\u0259 avadanl\u0131\u011f\u0131n xidm\u0259t etiketl\u0259ri il\u0259 paketl\u0259ri nec\u0259 emal etm\u0259k, \u00e7\u00fcnki onlar\u0131n analizi haz\u0131rlamaq ya resurs istehlak ed\u0259n, ya da h\u0259tta m\u00fcmk\u00fcn olmur?<\/li>\n<li>t\u0259hl\u00fck\u0259sizlik siyas\u0259tin\u0259 tabe olmayan trafik hiss\u0259sini (m\u0259s\u0259l\u0259n, r\u0259hb\u0259rin trafiki) analizin xaricind\u0259 nec\u0259 saxlamaq?<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"M\u00fcasir informasiya t\u0259hl\u00fck\u0259sizliyi sisteml\u0259rinin qurulmas\u0131 \u00fc\u00e7\u00fcn h\u0259ll\u0259r \u2014 \u015f\u0259b\u0259k\u0259 paket brokerl\u0259ri (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/21453d662b8507eb2479065c9f879a87.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nHam\u0131ya m\u0259lumdur ki, t\u0259l\u0259b t\u0259klifi yarad\u0131r, bu ehtiyaclara cavab olaraq \u015f\u0259b\u0259k\u0259 paketl\u0259ri brokerl\u0259ri inki\u015faf etm\u0259y\u0259 ba\u015flad\u0131.<\/p>\n<h3>\u015e\u0259b\u0259k\u0259 paketl\u0259ri brokerl\u0259rinin \u00fcmumi t\u0259sviri<\/h3>\n<p>\n\u015e\u0259b\u0259k\u0259 paket brokerl\u0259ri paketl\u0259r s\u0259viyy\u0259sind\u0259 i\u015fl\u0259yir v\u0259 bu bax\u0131mdan adi switch-l\u0259r\u0259 b\u0259nz\u0259yirl\u0259r. Onlar\u0131n switch-l\u0259rd\u0259n \u0259sas f\u0259rqi, trafik paylanmas\u0131 v\u0259 birl\u0259\u015fdirilm\u0259si qaydalar\u0131n\u0131n brokerl\u0259rin parametrl\u0259ri il\u0259 tam m\u00fc\u0259yy\u0259n edilm\u0259si il\u0259 ba\u011fl\u0131d\u0131r. \u015e\u0259b\u0259k\u0259 paket brokerl\u0259rind\u0259 MAC c\u0259dv\u0259ll\u0259rinin (routing table) standartlar\u0131 v\u0259 dig\u0259r switch-l\u0259rl\u0259 m\u00fcbadil\u0259 protokollar\u0131 (STP kimi) yoxdur, buna g\u00f6r\u0259 d\u0259 m\u00fcmk\u00fcn parametrl\u0259rin v\u0259 ba\u015fa d\u00fc\u015f\u00fcl\u0259n sah\u0259l\u0259rin spektri daha geni\u015fdir. Broker, bir v\u0259 ya bir ne\u00e7\u0259 giri\u015f portundan trafikini m\u00fc\u0259yy\u0259n edilmi\u015f \u00e7\u0131x\u0131\u015f portlar\u0131 aral\u0131\u011f\u0131na uzla\u015fd\u0131raraq b\u0259rab\u0259r y\u00fckl\u0259m\u0259 funksiyas\u0131 il\u0259 paylaya bil\u0259r. Trafik\u0259 kopyalama, filtrasiya, t\u0259snifat, deduplication v\u0259 d\u0259yi\u015fdirm\u0259 qaydalar\u0131 t\u0259yin etm\u0259k m\u00fcmk\u00fcnd\u00fcr. Bu qaydalar \u015f\u0259b\u0259k\u0259 paket brokerinin m\u00fcxt\u0259lif giri\u015f port qruplar\u0131na t\u0259tbiq oluna bil\u0259r v\u0259 eyni zamanda cihaz\u0131n \u00f6z\u00fcnd\u0259 ard\u0131c\u0131l t\u0259tbiq oluna bil\u0259r. Paket brokerinin m\u00fch\u00fcm \u00fcst\u00fcnl\u00fcy\u00fc, trafik ax\u0131n\u0131 tam s\u00fcr\u0259tind\u0259 i\u015fl\u0259m\u0259 qabiliyy\u0259tidir v\u0259 seanslar\u0131n b\u00fct\u00f6vl\u00fcy\u00fcn\u00fc t\u0259min etm\u0259kdir (bir ne\u00e7\u0259 ox\u015far DPI sistemin\u0259 trafik balansla\u015fd\u0131r\u0131ld\u0131qda).<\/p>\n<p>Seanslar\u0131n b\u00fct\u00f6vl\u00fcy\u00fcn\u00fc qorumaq, transport s\u0259viyy\u0259sind\u0259 (TCP\/UDP\/SCTP) seans\u0131n b\u00fct\u00fcn paketl\u0259rini bir porta \u00f6t\u00fcrm\u0259k dem\u0259kdir. Bu vacibdir, \u00e7\u00fcnki DPI sisteml\u0259ri (adi olaraq paket brokerinin \u00e7\u0131x\u0131\u015f portuna qo\u015fulmu\u015f serverd\u0259 i\u015fl\u0259y\u0259n proqram t\u0259minat\u0131d\u0131r) trafikin t\u0259rkibini t\u0259tbiq s\u0259viyy\u0259sind\u0259 analiz edirl\u0259r v\u0259 bir t\u0259tbiqd\u0259n g\u00f6nd\u0259ril\u0259n\/q\u0259bul edil\u0259n b\u00fct\u00fcn paketl\u0259r eyni analizator n\u00fcmun\u0259sin\u0259 daxil olmal\u0131d\u0131r. \u018fg\u0259r bir seans\u0131n paketl\u0259ri itirilirs\u0259 v\u0259 ya m\u00fcxt\u0259lif DPI cihazlar\u0131 aras\u0131nda yay\u0131l\u0131rsa, h\u0259r bir ayr\u0131 DPI cihaz\u0131 b\u00fct\u00f6v bir m\u0259tni oxumaq \u0259v\u0259zin\u0259, oradan ayr\u0131lm\u0131\u015f s\u00f6zl\u0259ri oxumaq v\u0259ziyy\u0259tind\u0259 olacaq. V\u0259, b\u00f6y\u00fck ehtimalla, m\u0259tni ba\u015fa d\u00fc\u015fm\u0259y\u0259c\u0259k.<\/p>\n<p>Bel\u0259likl\u0259, informasiya t\u0259hl\u00fck\u0259sizliyi sisteml\u0259rin\u0259 y\u00f6n\u0259lmi\u015f olan \u015f\u0259b\u0259k\u0259 paket brokerl\u0259ri, y\u00fcks\u0259k s\u00fcr\u0259tli telekommunikasiya \u015f\u0259b\u0259k\u0259l\u0259rin\u0259 DPI proqram komplektl\u0259rini ba\u011flama\u011fa k\u00f6m\u0259k ed\u0259n funksionall\u0131q t\u0259qdim edirl\u0259r v\u0259 onlara y\u00fck\u00fc azaltma\u011fa imkan tan\u0131y\u0131r: ilkin filtrasiya, t\u0259snifat v\u0259 trafiki sonrak\u0131 emal\u0131 asanla\u015fd\u0131rmaq \u00fc\u00e7\u00fcn haz\u0131rlay\u0131r. <\/p>\n<p>Bundan \u0259lav\u0259, \u015f\u0259b\u0259k\u0259 paket brokerl\u0259ri geni\u015f statistikalar t\u0259qdim edir v\u0259 tez-tez m\u00fcxt\u0259lif \u015f\u0259b\u0259k\u0259 n\u00f6qt\u0259l\u0259rin\u0259 qo\u015fulurlar, buna g\u00f6r\u0259 d\u0259 \u015f\u0259b\u0259k\u0259 infrastrukturunun i\u015fl\u0259m\u0259 probleml\u0259rinin diaqnostikas\u0131 zaman\u0131 da \u00f6z yerini tap\u0131rlar.<\/p>\n<h3>\u015e\u0259b\u0259k\u0259 paket brokerl\u0259rinin \u0259sas funksiyalar\u0131<\/h3>\n<p>\n\u00abSpecialized\/monitoring switches\u00bb are named for their primary purpose: to collect traffic from the infrastructure (usually using passive optical tap splitters and\/or SPAN ports) and distribute it among analysis tools. Traffic is mirrored (duplicated) between different types of systems and balanced among similar ones. Basic functions usually include filtering by fields up to L4 (MAC, IP, TCP\/UDP port, etc.) and aggregating several lightly loaded channels into one (for example, for processing on a single DPI system). <\/p>\n<p>This functionality solves the fundamental task of connecting DPI systems to the network infrastructure. Brokers from various manufacturers, limiting themselves to basic functionality, allow processing of up to 32 100G interfaces on 1U (more interfaces physically cannot fit on the front panel of 1U). However, they do not reduce the load on analysis tools, and for complex infrastructures, they cannot even meet the requirements of basic functions: a session distributed across several tunnels (or equipped with MPLS tags) can become imbalanced across different instances of the analyzer and may entirely fall out of analysis. <\/p>\n<p>In addition to adding 40\/100G interfaces and consequently increasing performance, network packet brokers are actively developing to provide fundamentally new capabilities: from balancing by embedded headers of tunnels to decrypting traffic. Unfortunately, such models cannot boast terabit performance, but they allow for the creation of a truly high-quality and technically \"elegant\" information security system, where each analysis tool only receives the information it needs in the most suitable format for analysis.<\/p>\n<h3>Enhanced functions of network packet brokers<\/h3>\n<p>\n<img decoding=\"async\" alt=\"M\u00fcasir informasiya t\u0259hl\u00fck\u0259sizliyi sisteml\u0259rinin qurulmas\u0131 \u00fc\u00e7\u00fcn h\u0259ll\u0259r \u2014 \u015f\u0259b\u0259k\u0259 paket brokerl\u0259ri (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/874e5b6372a2e532d86966d1c7fe4ba1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<strong>1.<\/strong> The aforementioned <strong>balancing by embedded headers in tunneled traffic.<\/strong><\/p>\n<p>Why is this important? Let's consider 3 aspects that can be critical both together and separately:<\/p>\n<ul>\n<li>ensuring even balance when there is a small number of tunnels. If there are only 2 tunnels at the connection point of security systems, it will not be possible to balance them across external headers on 3 server platforms while maintaining the session. Moreover, traffic on the network is transmitted unevenly, and directing each tunnel to a separate processing tool will require excessive performance from that tool.<\/li>\n<li>sessiyalar\u0131n v\u0259 \u00e7oxsessiyal\u0131 protokollar\u0131n (m\u0259s\u0259l\u0259n, FTP v\u0259 VoIP) ax\u0131n\u0131n\u0131n taml\u0131\u011f\u0131n\u0131 t\u0259min etm\u0259k, paketl\u0259rin m\u00fcxt\u0259lif tunell\u0259rd\u0259 i\u015ftirak etdiyi hallarda. \u015e\u0259b\u0259k\u0259 infrastrukturunun m\u00fcr\u0259kk\u0259bliyi daima art\u0131r: ehtiyatlama, virtualizasiya, idar\u0259etm\u0259nin sad\u0259l\u0259\u015fdirilm\u0259si v\u0259 s. Bir t\u0259r\u0259fd\u0259n, bu m\u0259lumatlar\u0131n \u00f6t\u00fcr\u00fclm\u0259si bax\u0131m\u0131ndan etibarl\u0131l\u0131\u011f\u0131 art\u0131r\u0131r, dig\u0259r t\u0259r\u0259fd\u0259n, informasiya t\u0259hl\u00fck\u0259sizliyi sisteml\u0259rinin i\u015fini \u00e7\u0259tinl\u0259\u015fdirir. Ayr\u0131lm\u0131\u015f tunel kanal\u0131n\u0131 i\u015fl\u0259tm\u0259k \u00fc\u00e7\u00fcn analitikl\u0259rin laz\u0131mi performans\u0131 olsa da, probleml\u0259r h\u0259ll olunmaz qal\u0131r, \u00e7\u00fcnki istifad\u0259\u00e7i sessiyas\u0131n\u0131n b\u0259zi paketl\u0259ri ba\u015fqa bir kanal il\u0259 \u00f6t\u00fcr\u00fcl\u00fcr. B\u0259zi infrastrukturda sessiyalar\u0131n taml\u0131\u011f\u0131n\u0131 qoruma\u011fa \u00e7al\u0131\u015f\u0131lsada, \u00e7oxsessiyal\u0131 protokollar tamamil\u0259 f\u0259rqli yollarla h\u0259r\u0259k\u0259t ed\u0259 bil\u0259r.<\/li>\n<li>MPLS, VLAN, f\u0259rdi avadanl\u0131q etiketl\u0259ri v\u0259 s. olan balansla\u015fd\u0131rma. Tam tunel olmasada, lakin \u0259sas funksional\u0131 olan avadanl\u0131q bu trafi\u011fi IP olaraq anlay\u0131b MAC \u00fcnvanlar\u0131 \u00fczr\u0259 balansla\u015fd\u0131ra bil\u0259r, bu da b\u0259rab\u0259r balansla\u015fd\u0131rman\u0131 v\u0259 sessiyalar\u0131n taml\u0131\u011f\u0131n\u0131 pozur.<\/li>\n<\/ul>\n<p>\n\u015e\u0259b\u0259k\u0259 paketl\u0259ri brokeri xarici ba\u015fl\u0131qlar\u0131 analiz edir v\u0259 ard\u0131c\u0131l olaraq \u0259n d\u0259rin IP ba\u015fl\u0131\u011f\u0131na ke\u00e7\u0259r\u0259k, ona g\u00f6r\u0259 balansla\u015fd\u0131r\u0131r. N\u0259tic\u0259d\u0259, ax\u0131nlar olduqca art\u0131r (bel\u0259likl\u0259, daha d\u00fczg\u00fcn balansla\u015fd\u0131ra v\u0259 daha \u00e7ox platformada yaymaq m\u00fcmk\u00fcnd\u00fcr) v\u0259 DPI sistemi sessiyan\u0131n b\u00fct\u00fcn paketl\u0259rini v\u0259 \u00e7oxsessiyal\u0131 protokollarla ba\u011fl\u0131 b\u00fct\u00fcn sessiyalar\u0131 \u0259ld\u0259 edir.<\/p>\n<p><strong>2. Trafik modifikasiyas\u0131.<\/strong><br \/>\n\u0130mkanlar\u0131 geni\u015f olan funksiyalardan biri, bir \u00e7ox altfunksiyalar\u0131n v\u0259 onlar\u0131n t\u0259tbiq variantlar\u0131n\u0131n olmas\u0131:<\/p>\n<ul>\n<li>payload-nin silinm\u0259si, bu halda analiz vasit\u0259l\u0259rin\u0259 yaln\u0131z paketl\u0259rin ba\u015fl\u0131qlar\u0131 g\u00f6nd\u0259rilir. Bu, ya analiz vasit\u0259l\u0259ri \u00fc\u00e7\u00fcn, ya da paketl\u0259rin m\u0259zmununun ya rol oynamad\u0131\u011f\u0131, ya da analiz edil\u0259 bilm\u0259diyi trafik n\u00f6vl\u0259ri \u00fc\u00e7\u00fcn \u0430\u043a\u0442\u0443ald\u0131r. M\u0259s\u0259l\u0259n, \u015fifr\u0259l\u0259nmi\u015f trafik \u00fc\u00e7\u00fcn m\u00fcbadil\u0259 parametrik m\u0259lumatlar\u0131 (kim, kiml\u0259, n\u0259 zaman v\u0259 n\u0259 q\u0259d\u0259r) maraql\u0131d\u0131r, payload is\u0259 faktiki olaraq kanal\u0131 v\u0259 analizatorun hesablama resurslar\u0131n\u0131 i\u015f\u011fal ed\u0259n tullant\u0131d\u0131r. Ba\u015flan\u011f\u0131c m\u00fc\u0259yy\u0259n edilmi\u015f bir ofsetd\u0259n ba\u015flayaraq payload-nin k\u0259silm\u0259si m\u00fcmk\u00fcn variantlard\u0131r \u2013 bu analiz vasit\u0259l\u0259rin\u0259 \u0259lav\u0259 imkanlar t\u0259qdim edir.<\/li>\n<li>detunel\u0259\u015fdirm\u0259, y\u0259ni tunell\u0259ri qeyd ed\u0259n v\u0259 identifikasiya ed\u0259n ba\u015fl\u0131qlar\u0131n silinm\u0259si. M\u0259qs\u0259d - analiz vasit\u0259l\u0259rinin y\u00fck\u00fcn\u00fc azaltmaq v\u0259 onlar\u0131n effektivliyini art\u0131rmaqd\u0131r. Detunel\u0259\u015fdirm\u0259, ya sabit ofset \u0259sas\u0131nda, ya da ba\u015fl\u0131qlar\u0131 dinamik analiz ed\u0259r\u0259k v\u0259 h\u0259r paket \u00fc\u00e7\u00fcn ofseti m\u00fc\u0259yy\u0259n ed\u0259r\u0259k yerin\u0259 yetiril\u0259 bil\u0259r.<\/li>\n<li>paketl\u0259rin ba\u015fl\u0131qlar\u0131n\u0131n bir hiss\u0259sinin silinm\u0259si: MPLS etiketl\u0259ri, VLAN, \u00fc\u00e7\u00fcnc\u00fc t\u0259r\u0259f avadanl\u0131\u011f\u0131n\u0131n spesifik sah\u0259l\u0259ri.<\/li>\n<li>ba\u015fl\u0131qlar\u0131n bir hiss\u0259sinin gizl\u0259dilm\u0259si, m\u0259s\u0259l\u0259n, trafik anonimliyini t\u0259min etm\u0259k \u00fc\u00e7\u00fcn IP \u00fcnvanlar\u0131n\u0131n gizl\u0259dilm\u0259si;<\/li>\n<li>paket\u0259 xidm\u0259ti m\u0259lumatlar\u0131n \u0259lav\u0259 edilm\u0259si: zaman ni\u015fanlar\u0131, giri\u015f portu, trafik sinifinin ni\u015fanlar\u0131 v\u0259 s.<\/li>\n<\/ul>\n<p>\n<strong>3. Deduplication<\/strong> \u2013 analiz al\u0259tl\u0259rin\u0259 \u00f6t\u00fcr\u00fcl\u0259n t\u0259krarlanan trafik paketl\u0259rinin t\u0259mizl\u0259nm\u0259si. T\u0259krarlanan paketl\u0259r daha \u00e7ox infrastrukturla ba\u011flant\u0131n\u0131n x\u00fcsusiyy\u0259tl\u0259ri s\u0259b\u0259bind\u0259n yaran\u0131r \u2013 trafik bir ne\u00e7\u0259 analiz n\u00f6qt\u0259sind\u0259n ke\u00e7\u0259 bil\u0259r v\u0259 h\u0259r biri il\u0259 \u0259ks etdirilir. TCP paketl\u0259rinin geri g\u00f6nd\u0259rilm\u0259si hallar\u0131 da ba\u015f verir, lakin \u0259g\u0259r \u00e7oxdursa, bu, daha \u00e7ox \u015f\u0259b\u0259k\u0259 keyfiyy\u0259tinin monitorinqi m\u0259s\u0259l\u0259l\u0259ridir, t\u0259hl\u00fck\u0259sizlik m\u0259s\u0259l\u0259l\u0259rind\u0259n deyil.<\/p>\n<p><strong>4. Geni\u015fl\u0259ndirilmi\u015f filtrasiya funksiyalar\u0131 <\/strong>\u2013 m\u00fc\u0259yy\u0259n desplazmentd\u0259 konkret d\u0259y\u0259rl\u0259rin axtar\u0131\u015f\u0131ndan paket \u00fczr\u0259 imza analizin\u0259 q\u0259d\u0259r.<\/p>\n<p><strong>5. NetFlow\/IPFIX yarad\u0131lmas\u0131<\/strong> \u2013 \u00f6t\u00fcr\u00fcl\u0259n trafik haqq\u0131nda geni\u015f bir statistikaya toplanmas\u0131 v\u0259 analiz al\u0259tl\u0259rin\u0259 g\u00f6nd\u0259rilm\u0259si.<\/p>\n<p><strong>6. SSL trafikinin de\u015fifr\u0259 edilm\u0259si,<\/strong> \u015f\u0259b\u0259k\u0259 paketl\u0259rinin brokerin\u0259 sertifikat v\u0259 a\u00e7arlar\u0131n \u0259vv\u0259lc\u0259d\u0259n y\u00fckl\u0259nm\u0259si \u015f\u0259rti il\u0259 i\u015fl\u0259yir. Bununla bel\u0259, bu, analiz al\u0259tl\u0259rinin y\u00fck\u00fcn\u00fc \u0259h\u0259miyy\u0259tli d\u0259r\u0259c\u0259d\u0259 azald\u0131r. <\/p>\n<p>H\u0259l\u0259 \u00e7oxsayl\u0131 funksiyalar, faydal\u0131 v\u0259 marketinq m\u0259qs\u0259dli, var, lakin \u0259sas olanlar, b\u0259lk\u0259 d\u0259, sadalan\u0131b.<\/p>\n<p>\u0130tkil\u0259rd\u0259n (DDOS h\u00fccumlar\u0131ndan) qorunma sisteml\u0259rinin inki\u015faf\u0131, h\u0259m\u00e7inin aktiv DPI vasit\u0259l\u0259rinin t\u0259tbiqi t\u0259mas v\u0259 ya SPAN portlar\u0131 vasit\u0259sil\u0259 passiv daxil olma sxeminin d\u0259yi\u015fm\u0259sini t\u0259l\u0259b etdi. Bu hal, etibarl\u0131l\u0131q t\u0259l\u0259bl\u0259rini art\u0131rd\u0131 (\u00e7\u00fcnki bel\u0259 bir v\u0259ziyy\u0259td\u0259 s\u0131radan \u00e7\u0131xma b\u00fct\u00fcn \u015f\u0259b\u0259k\u0259nin i\u015fl\u0259m\u0259sinin pozulmas\u0131na, yaln\u0131z informasiya t\u0259hl\u00fck\u0259sizliyi \u00fcz\u0259rind\u0259 n\u0259zar\u0259tin itirilm\u0259sin\u0259 g\u0259tirir) v\u0259 optik splitterl\u0259rin optik bypass il\u0259 \u0259v\u0259z olunmas\u0131na s\u0259b\u0259b oldu (\u015f\u0259b\u0259k\u0259nin i\u015fl\u0259m\u0259sinin informasiya t\u0259hl\u00fck\u0259sizliyi sisteml\u0259rinin i\u015fl\u0259m\u0259sind\u0259n as\u0131l\u0131l\u0131\u011f\u0131n\u0131 aradan qald\u0131rmaq \u00fc\u00e7\u00fcn), lakin \u0259sas funksionall\u0131q v\u0259 t\u0259l\u0259bl\u0259r \u0259vv\u0259lki kimi qald\u0131. <\/p>\n<p>Biz DS Integrity \u015f\u0259b\u0259k\u0259 paketl\u0259ri brokerl\u0259rini 100G, 40G v\u0259 10G interfeysl\u0259ri il\u0259, konstruktiya v\u0259 sxematikadan tutmu\u015f, daxil edilmi\u015f proqram t\u0259minat\u0131na q\u0259d\u0259r inki\u015faf etdirdik. H\u0259m\u00e7inin, dig\u0259r paket brokerl\u0259rind\u0259n f\u0259rqli olaraq, tunel i\u00e7i ba\u015fl\u0131qlar\u0131 d\u0259yi\u015fdirm\u0259k v\u0259 balansla\u015fd\u0131rma funksiyalar\u0131 bizd\u0259 avadanl\u0131qla, portlar\u0131n tam s\u00fcr\u0259tind\u0259 realla\u015fd\u0131r\u0131l\u0131r.<\/p>\n<p><img decoding=\"async\" alt=\"M\u00fcasir informasiya t\u0259hl\u00fck\u0259sizliyi sisteml\u0259rinin qurulmas\u0131 \u00fc\u00e7\u00fcn h\u0259ll\u0259r \u2014 \u015f\u0259b\u0259k\u0259 paket brokerl\u0259ri (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/a7f08a061eb707ef8264158b6d1362bc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>M\u0259nb\u0259: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsol\/blog\/490252\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c. \u041d\u043e \u0435\u0441\u0442\u044c \u043c\u0430\u043b\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u043d\u0430 \u0441\u0442\u044b\u043a\u0435 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u0430 \u0438 \u0438\u043d\u0444\u043e\u0431\u0435\u0437\u0430 \u2013 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 (Network Packet Broker), \u043e\u043d\u0438 \u0436\u0435 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0438 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435\/\u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b, \u0430\u0433\u0440\u0435\u0433\u0430\u0442\u043e\u0440\u044b \u0442\u0440\u0430\u0444\u0438\u043a\u0430, Security Delivery Platform, Network Visibility \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435. \u0418 \u043d\u0430\u043c, \u043a\u0430\u043a \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0443 \u0438 \u0438\u0437\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u0435\u043b\u044e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":72063,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-72062","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/az\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"az_AZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 (Network Packet Broker) | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/az\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-01T11:51:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-03T13:14:00+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47M\u00fcasir informasiya t\u0259hl\u00fck\u0259sizliyi sisteml\u0259rinin qurulmas\u0131 \u00fc\u00e7\u00fcn h\u0259ll yollar\u0131 \u2014 \u015f\u0259b\u0259k\u0259 paketl\u0259ri brokerl\u0259ri (Network Packet Broker) | ProHoster","description":"\u0130nformasiya t\u0259hl\u00fck\u0259sizliyi telekommunikasiya sah\u0259sind\u0259n \u00f6z spesifikliyi v\u0259 avadanl\u0131\u011f\u0131 olan m\u00fcst\u0259qil bir sah\u0259y\u0259 ayr\u0131ld\u0131.","canonical_url":"https:\/\/prohoster.info\/az\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 (Network Packet Broker) | ProHoster","og:description":"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c.","og:url":"https:\/\/prohoster.info\/az\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-01T11:51:13+00:00","article:modified_time":"2020-03-03T13:14:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72062","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:51:22","updated":"2022-10-04 07:02:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/72062","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=72062"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/72062\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media\/72063"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=72062"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=72062"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=72062"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}