{"id":86610,"date":"2020-06-27T19:42:32","date_gmt":"2020-06-27T17:42:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds"},"modified":"2020-06-27T19:42:32","modified_gmt":"2020-06-27T17:42:32","slug":"nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","title":{"rendered":"Seame \u00fcles IPFIX eksportimise VMware vSphere Distributed Switch'il (VDS) ja sellele j\u00e4rgnev liikluse j\u00e4lgimine Solarwindsis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tere, Habr! Juuli alguses teatas Solarwinds versiooni v\u00e4ljalaskmisest uues Solarwinds Orion platvormi versioonis<\/a><\/noindex> \u2014 2020.2. \u00dcks uuendustest Network Traffic Analyzer (NTA) moodulis on IPFIX liikluse tuvastamise tugi VMware VDS-ilt. <\/p>\n

\"Seame
\n
\nLiikluse anal\u00fc\u00fcs virtuaalses l\u00fclitite keskkonnas on oluline koormuse jaotuse m\u00f5istmiseks virtuaalses infrastruktuuris. Liiklust anal\u00fc\u00fcsides on v\u00f5imalik tuvastada ka virtuaalmasinate migratsiooni. Selles artiklis k\u00e4sitleme VMware virtuaall\u00fcliti IPFIX eksportimise seadistusi ja Solarwindsi v\u00f5imalusi nende t\u00f6\u00f6tlemiseks. Artikli l\u00f5pus on link Solarwindsi veebidemole (juurdep\u00e4\u00e4s ilma registreerimiseta, see ei ole \u00fclevaatus). \u00dcksikasjad allpool.
\n<\/a><\/noindex>
\nVDS-i liikluse \u00f5ige tuvastamine n\u00f5uab k\u00f5igepealt \u00fchenduse seadistamist vCenteri kaudu, seej\u00e4rel toimub liikluse anal\u00fc\u00fcs ja v\u00f5rgus\u00f5lmede kuvamine, mis saadakse h\u00fcperviisorite kaudu. Soovi korral saab l\u00fcliti seadistada saama k\u00f5iki IPFIX-i kirjeid \u00fchelt IP-aadressilt, mis on seotud VDS-iga, kuid enamikul juhtudel on kasulikumat n\u00e4ha andmeid, mis on saadud iga h\u00fcperviisori kaudu saadud liiklusest. Saadav liiklus esindab \u00fchendusi, mis on suunatud v\u00f5i v\u00e4ljuvad virtuaalsetest masinatest, mis asuvad h\u00fcperviisorites.<\/p>\n

Teine v\u00f5imalik konfiguratsioonivalik on eksportida ainult siseandmevooge. See v\u00f5imalus v\u00e4listab vood, mis t\u00f6\u00f6deldakse v\u00e4lisel f\u00fc\u00fcsilisel l\u00fclitil, ja takistab liikluse kirjeid, mis on seotud \u00fchendustega VDS-iga. Kuid kasulikum on selle v\u00f5imaluse v\u00e4ljal\u00fclitamine, et j\u00e4lgida k\u00f5iki vooge, mis on VDS-is n\u00e4htavad.<\/p>\n

VDS-i liikluse seadistamine<\/h1>\n

\nAlustame vCenteri instantsi lisamisega Solarwindsi. P\u00e4rast seda on NTA-l teave virtualiseerimisplatvormi konfiguratsiooni kohta.<\/p>\n

Avage men\u00fc \u00abManage Nodes\u00bb, valige \u00abSettings\u00bb ja seej\u00e4rel \u00abAdd Node\u00bb. P\u00e4rast seda tuleb sisestada vCenteri eksemplari IP-aadress v\u00f5i t\u00e4ielik domeeninimi ning valida \u00abVMware, Hyper-V v\u00f5i Nutanix entities\u00bb k\u00fcsitluse meetodiks.<\/p>\n

\"Seame
\n
\nAvage s\u00f5lme lisamise dialoog ja lisage vCenteri eksemplari mandaadid, seej\u00e4rel testige neid seadistamise l\u00f5puleviimiseks.<\/p>\n

\"Seame
\n
\nvCenteri eksemplari esmane k\u00fcsitlus kestab m\u00f5nda aega, tavaliselt 10-20 minutit. Tuleb oodata selle l\u00f5ppemist ja alles seej\u00e4rel aktiveerida IPFIX eksport VDS-il.<\/p>\n

P\u00e4rast vCenteri j\u00e4relevalve seadistamist ja virtualiseerimisplatvormi konfiguratsiooni inventuuri andmete saamist aktiveerime l\u00fclitil IPFIX kirjete eksportimise. Kiireim viis selleks on kasutada vSphere klienti. Liigume vahekaardile \u00abNetworking\u00bb, valime VDS ja vahekaardil \u00abConfigure\u00bb leiame hetke NetFlow seadistused. VMware kasutab v\u00e4ljendit \u00abNetFlow\u00bb voogude eksportimise t\u00e4histamiseks, kuid tegelikult kasutatav protokoll on IPFIX.<\/p>\n

\"Seame
\n
\nVoogude eksportimise lubamiseks valige men\u00fc\u00fcst \u00abActions\u00bb \u00abSettings\u00bb ja minge \u00abEdit NetFlow\u00bb juurde.<\/p>\n

\"Seame
\n
\nSelles dialoogiboksis sisestage kogu Orioni eksemplari IP-aadress. Vaikimisi kasutatakse tavaliselt porti 2055. Soovitame j\u00e4tta v\u00e4lja \u201eSwitch IP Address\u201d, et saada voogedastuse kirjeid, mis p\u00e4rinevad h\u00fcperviisorilt. See annab paindlikkuse, et hiljem filtreerida h\u00fcperviisorilt saadud andmevooge.<\/p>\n

J\u00e4tke v\u00e4li \u201eProcess internal flows only\u201d v\u00e4lja l\u00fclitatuks, mis v\u00f5imaldab n\u00e4ha k\u00f5iki suhtlusi: nii sisemisi kui ka v\u00e4liseid.<\/p>\n

Kui olete VDS jaoks voogedastuse eksportimise lubanud, peate selle lubama ka jaotatud port-gruppide jaoks, millest soovite andmeid saada. Lihtsaim viis seda teha on kl\u00f5psata VDS navigeerimispaneelil parema hiirekl\u00f5psuga ja valida \u201eDistributed Port Group\u201d, seej\u00e4rel \u201eManage Distributed Port Groups\u201d.<\/p>\n

\"Seame
\n
\n\"Seame
\n
\nAvatakse dialoogiboks, kus peate m\u00e4rgistama valiku \u201eMonitoring\u201d ja klikkima \u201eNext\u201d.<\/p>\n

J\u00e4rgmises etapis saate valida kindlaid v\u00f5i k\u00f5iki portide gruppe.<\/p>\n

\"Seame
\n
\nJ\u00e4rgmises etapis l\u00fclitage NetFlow seadistuseks \u201eEnabled\u201d.<\/p>\n

\"Seame
\n
\nKui VDS ja jaotatud portide r\u00fchmad on voogude ekspordi sissel\u00fclitatud, n\u00e4ete, et h\u00fcperviisorite vooga seotud salvestused hakkavad NTA instantsi voogude jaoks saabuma.<\/p>\n

\"Seame
\n
\nH\u00fcperviisorid on n\u00e4htavad voogude andmeallikate loendis NTA-s lehel \u201eHalda voogude allikaid\u201c. L\u00fclitage \u00fcle \u201eS\u00f5lmedele\u201c.<\/p>\n

\"Seame
\n
\nSeadistuse tulemusi saate n\u00e4ha demo-baaris.<\/a><\/noindex>. Pange t\u00e4hele, et on v\u00f5imalus s\u00fcveneda s\u00f5lme, suhtlusprotokolli jne tasemele. <\/p>\n

\"Seame
\n
\nIntegreerimine teiste Solarwinds moodulitega \u00fches liideses v\u00f5imaldab l\u00e4bi viia uurimisi erinevates l\u00f5ikes: n\u00e4ha, millised kasutajad on virtuaalmasinasse sisse logitud, serveri j\u00f5udlust, (vaata demot)<\/a><\/noindex>, ja rakendusi sellel, vaadata seotud v\u00f5rgu seadmeid ja palju muud. N\u00e4iteks, kui teie v\u00f5rgu infrastruktuuris kasutatakse NBAR2 protokolli, suudab Solarwinds NTA liiklust \u00f5igesti tuvastada Zoom<\/a><\/noindex>, Teams<\/a><\/noindex> v\u00f5i Webex<\/a><\/noindex>.<\/p>\n

Artikli peamine eesm\u00e4rk on n\u00e4idata, kui lihtne on seadistada j\u00e4lgimist Solarwindsis ja kui t\u00e4ielikke andmeid kogutakse. Solarwindsis on v\u00f5imalus n\u00e4ha toimuvast t\u00e4ielikku pilti. Kui soovite lahenduse esitlemist v\u00f5i soovite k\u00f5ike enda juures testida \u2014 j\u00e4tke taotlus tagasiside vormis<\/a><\/noindex> v\u00f5i helistage.<\/p>\n

Habrist on meil artikli kohta tasuta lahendused Solarwinds<\/a><\/noindex>.<\/p>\n

Liituge meie Facebooki grupp<\/a><\/noindex>.
\n
Allikas: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440! \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043b\u044f Solarwinds \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u0440\u0435\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Orion Solarwinds \u2014 2020.2. \u041e\u0434\u043d\u043e \u0438\u0437 \u043d\u043e\u0432\u043e\u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 Network Traffic Analyzer (NTA) \u2014 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f IPFIX-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442 VMware VDS. \u0410\u043d\u0430\u043b\u0438\u0437 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430 \u0432\u0430\u0436\u0435\u043d \u0434\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f \u0442\u0440\u0430\u0444\u0438\u043a, \u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u0412 \u044d\u0442\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86611,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-86610","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Seadistame IPFIX-i ekspordi VMware vSphere Distributed Switch (VDS) pealt ja sellele j\u00e4rgnev liikluse j\u00e4lgimine Solarwindsis | ProHoster","description":"Tere, Habr! Juuli alguses kuulutas Solarwinds v\u00e4lja uue versiooni platvormist Orion Solarwinds \u2014 2020.2. \u00dcks uuendus Network Traffic Analyzer (NTA) moodulis on IPFIX-i liiklusandmete tuvastamise tugi VMware VDS alt. Virtuaalse l\u00fcliti liikluse anal\u00fc\u00fcs on oluline koormuse jaotuse m\u00f5istmiseks virtuaalses infrastruktuuris. Liiklust anal\u00fc\u00fcsides on samuti v\u00f5imalik avastada virtuaalmasinate migreerimist. Selles","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c \u044d\u043a\u0441\u043f\u043e\u0440\u0442 IPFIX \u043d\u0430 VMware vSphere Distributed Switch (VDS) \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 Solarwinds | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440! \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043b\u044f Solarwinds \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u0440\u0435\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Orion Solarwinds \u2014 2020.2. \u041e\u0434\u043d\u043e \u0438\u0437 \u043d\u043e\u0432\u043e\u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 Network Traffic Analyzer (NTA) \u2014 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f IPFIX-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442 VMware VDS. \u0410\u043d\u0430\u043b\u0438\u0437 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430 \u0432\u0430\u0436\u0435\u043d \u0434\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f \u0442\u0440\u0430\u0444\u0438\u043a, \u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u0412 \u044d\u0442\u043e\u0439","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-27T17:42:32+00:00","article:modified_time":"2020-06-27T17:42:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86610","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:12:22","updated":"2022-09-30 12:49:44"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/86610","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=86610"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/86610\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/86611"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=86610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=86610"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=86610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}