{"id":86610,"date":"2020-06-27T19:42:32","date_gmt":"2020-06-27T17:42:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds"},"modified":"2020-06-27T19:42:32","modified_gmt":"2020-06-27T17:42:32","slug":"nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","title":{"rendered":"Seame \u00fcles IPFIX eksporti VMware vSphere Distributed Switch'is (VDS) ja edasise liikluse j\u00e4lgimise Solarwindsis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tere, Habr! Juuli alguses teatas Solarwinds versiooni v\u00e4ljaandmisest uue Orion Solarwinds platvormi versiooni<\/a><\/noindex> \u2014 2020.2. \u00dcks uuendus Network Traffic Analyzer (NTA) moodulis on VMware VDS-i IPFIX liikluse tuvastamise toimetamine. <\/p>\n

\"Seame
\n
\nLiikluse anal\u00fc\u00fcs virtuaalses l\u00fclitises on oluline koormuse jaotuse m\u00f5istmiseks virtuaalses infrastruktuuris. Liiklust anal\u00fc\u00fcsides saab samuti avastada virtuaalmasinate migratsiooni. Selles artiklis r\u00e4\u00e4gime IPFIX ekspordi seadistustest VMware virtuaalses l\u00fclitises ja Solarwinds'i v\u00f5imalustest sellega t\u00f6\u00f6tamiseks. Ja artikli l\u00f5pus on link Solarwinds'i veebidemole (juurdep\u00e4\u00e4s ilma registreerumiseta, ja see pole k\u00f5nekujund). \u00dcksikasjad allpool.
\n<\/a><\/noindex>
\nIPFIX liikluse korrekseks tuvastamiseks VDS-ilt tuleb esmalt seadistada \u00fchendus vCenteri kaudu, ja alles siis liikluse anal\u00fc\u00fcs ja liikluse vahetuspunktide kuvamine, mis saadakse h\u00fcperviisoridelt. Soovi korral v\u00f5ib l\u00fcliti olla seadistatud saama k\u00f5ik IPFIX kirjed \u00fchelt IP-aadressilt, mis on seotud VDS-iga, kuid enamasti on informatiivsem n\u00e4ha andmeid, mis on saadud iga h\u00fcperviisori kaudu saadud liiklusest. Saadetav liiklus esindab \u00fchendusi virtuaalmasinate vahel, mis asuvad h\u00fcperviisoritel.<\/p>\n

Teine saadaval olev konfiguratsiooniv\u00f5imalus on eksportida ainult sisemisi andmevooge. See valik v\u00e4listab vood, mida t\u00f6\u00f6deldakse v\u00e4lisel f\u00fc\u00fcsilisel l\u00fclitil, ja v\u00e4ltida liikluse kirjeduplikatsiooni VDS-ilt saamiseks ja sinna. Kuid kasulikum on see valik v\u00e4lja l\u00fclitada ja j\u00e4lgida k\u00f5iki vooge, mis on n\u00e4htavad VDS-is.<\/p>\n

VDS liikluse seadistamine<\/h1>\n

\nAlustame vCenteri eksemplari lisamisega Solarwinds'i. P\u00e4rast seda omab NTA teavet virtualiseerimisplatvormi konfiguratsioonist.<\/p>\n

Minge men\u00fc\u00fcsse \u201eManage Nodes\u201c, seej\u00e4rel \u201eSettings\u201c ja valige \u201eAdd Node\u201c. P\u00e4rast seda tuleb sisestada vCenteri eksemplari IP-aadress v\u00f5i t\u00e4ielik domeeninimi ning valida k\u00fcsimisviisiks \u201eVMware, Hyper-V v\u00f5i Nutanix \u00fcksused\u201c.<\/p>\n

\"Seame
\n
\nMinge s\u00f5lme lisamise dialooge, lisage vCenteri eksemplari mandaadid ja testige neid seadistuse l\u00f5petamiseks.<\/p>\n

\"Seame
\n
\nAlgne vCenteri eksemplari k\u00fcsitlus kestab m\u00f5nda aega, tavaliselt 10-20 minutit. Tuleb oodata selle l\u00f5ppemist ja alles siis sisse l\u00fclitada IPFIX eksport VDS-il.<\/p>\n

P\u00e4rast vCenteri j\u00e4lgimise seadistamist ja virtualiseerimise platvormi konfiguratsiooni andmete saamist l\u00fclitame switchil IPFIXi salvestusv\u00e4ljade ekspordi sisse. Kiireim viis seda teha on vSphere'i kliendi kaudu. Liigume vahekaardile \u201eNetworking\u201c, valime VDS ja vahekaardil \u201eConfigure\u201c leiame NetFlow'i praegused seaded. VMware kasutab terminoloogiat \u201eNetFlow\u201c voogude ekspordi t\u00e4histamiseks, kuid tegelik protokoll, mida kasutatakse, on IPFIX.<\/p>\n

\"Seame
\n
\nVoogude ekspordi lubamiseks valige \u00fclemise men\u00fc\u00fc \u201eActions\u201c alt \u201eSettings\u201c ja seej\u00e4rel minge \u201eEdit NetFlowi\u201c.<\/p>\n

\"Seame
\n
\nSelles dialoogiboksis sisestage konto IP-aadress, mis on samal ajal Orioni eksemplar. Vaikimisi kasutatakse porti 2055. Soovitame j\u00e4tta \u201eSwitch IP Address\u201c v\u00e4lja, mis viib voogude salvestamiseni, mis saadakse vaid h\u00fcpervisoreidelt. See annab paindlikkuse edasiseks voogude filtreerimiseks h\u00fcpervisoritelt.<\/p>\n

J\u00e4tke v\u00e4li \u201eProcess internal flows only\u201c v\u00e4lja l\u00fclitatuks, et n\u00e4ha k\u00f5iki suhtlusi: nii sise- kui ka v\u00e4liseid.<\/p>\n

Niipea kui olete VDS-is voogude ekspordi sisse l\u00fclitanud, peate selle sissel\u00fclitama ka jaotatud portigruppides, millelt soovite andmeid saada. Lihtsaim viis seda teha on paremkl\u00f5ps VDS-i navigeerimispaneelil ja valides \u201eDistributed Port Group\u201c, seej\u00e4rel \u201eManage Distributed Port Groups\u201c.<\/p>\n

\"Seame
\n
\n\"Seame
\n
\nAvatakse dialooge aken, kus peate m\u00e4rkima kasti \u201eMonitoring\u201c ja vajutama \u201eNext\u201c.<\/p>\n

Sellel sammil saate valida teatud v\u00f5i k\u00f5ik portide grupid.<\/p>\n

\"Seame
\n
\nJ\u00e4rgmisel sammil l\u00fclitage NetFlow sisse \u201eEnabled\u201c.<\/p>\n

\"Seame
\n
\nKui VDS-is ja jaotatud portigruppides on voogude eksport sisse l\u00fclitatud, n\u00e4ete, et voogude andmed h\u00fcpervisoreidelt hakkavad j\u00f5udma NTA eksemplari.<\/p>\n

\"Seame
\n
\nH\u00fcpervisoreid saab n\u00e4ha voogude andmeallikate loendis NTA lehelt \u201eManage Flow Sources\u201c. Vahetage \u201eNodes\u201c vahekaardile.<\/p>\n

\"Seame
\n
\nSeadistamise tulemusi saate n\u00e4ha, demo-seinal.<\/a><\/noindex>. Pange t\u00e4hele v\u00f5imalust minna s\u00fcgavamale s\u00f5lme, protokolli interaktsiooni jne. <\/p>\n

\"Seame
\n
\nSolarwinds'i teiste moodulite integreerimine \u00fches liideses v\u00f5imaldab n\u00f5upidamisi erinevates l\u00f5ikudes: vaadata, millised kasutajad on virtuaalmasinasse sisenenud, serveri j\u00f5udlust. (vaata dema)<\/a><\/noindex>, ja rakendustest sellel, vaadata seotud v\u00f5rguseadmeid ja palju muud. N\u00e4iteks kui teie v\u00f5rguinfrastruktuuris kasutatakse protokolli NBAR2, suudab Solarwinds NTA edukalt tuvastada liiklust alates Zoom<\/a><\/noindex>, Teams<\/a><\/noindex> v\u00f5i Webex<\/a><\/noindex>.<\/p>\n

Artikli peamine eesm\u00e4rk on n\u00e4idata, kui lihtne on Solarwindsis j\u00e4lgimise seadistamine ja kogutud andmete t\u00e4ielikkus. Solarwindsis on v\u00f5imalik n\u00e4ha kogu pilti toimuvas. Kui soovite lahenduse esitluse v\u00f5i soovite seda enda juures proovida - saatke meile p\u00e4ring tagasiside vormis<\/a><\/noindex> v\u00f5i helistage.<\/p>\n

Habras on meil ka artikkel Solarwindsi tasuta lahendustest<\/a><\/noindex>.<\/p>\n

Liituge meiega Facebooki grupis<\/a><\/noindex>.
\n
Allikas: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440! \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043b\u044f Solarwinds \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u0440\u0435\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Orion Solarwinds \u2014 2020.2. \u041e\u0434\u043d\u043e \u0438\u0437 \u043d\u043e\u0432\u043e\u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 Network Traffic Analyzer (NTA) \u2014 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f IPFIX-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442 VMware VDS. \u0410\u043d\u0430\u043b\u0438\u0437 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430 \u0432\u0430\u0436\u0435\u043d \u0434\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f \u0442\u0440\u0430\u0444\u0438\u043a, \u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u0412 \u044d\u0442\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86611,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-86610","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Seame \u00fcles IPFIX eksportimise VMware vSphere Distributed Switchil (VDS) ja sellele j\u00e4rgnev liikluse j\u00e4lgimine Solarwindsis | ProHoster","description":"Tere, Habr!","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c \u044d\u043a\u0441\u043f\u043e\u0440\u0442 IPFIX \u043d\u0430 VMware vSphere Distributed Switch (VDS) \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 Solarwinds | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440!","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-27T17:42:32+00:00","article:modified_time":"2020-06-27T17:42:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86610","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:12:22","updated":"2022-09-30 12:49:44","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/86610","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=86610"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/86610\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/86611"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=86610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=86610"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=86610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}