Hello, Habr! A farkon watan Yuli, Solarwinds ya sanar da sakin - 2020.2. Ɗaya daga cikin sababbin abubuwan da ke cikin tsarin Analyzer Traffic Network (NTA) shine goyon baya don gane zirga-zirgar IPFIX daga VMware VDS.
Yin nazarin zirga-zirga a cikin yanayin sauya kama-da-wane yana da mahimmanci don fahimtar rarraba kaya akan kayan aikin kama-da-wane. Ta hanyar nazarin zirga-zirga, zaku iya gano ƙaura na injina. A cikin wannan labarin za mu yi magana game da saitunan fitarwa na IPFIX a gefen VMware mai sauyawa da kuma damar Solarwinds don aiki tare da shi. Kuma a ƙarshen labarin za a sami hanyar haɗi zuwa Solarwinds akan layi na demo (samun shiga ba tare da rajista ba kuma wannan ba adadi bane). Cikakkun bayanai a ƙarƙashin yanke.
Don gane zirga-zirga daidai daga VDS, da farko kuna buƙatar saita haɗin kai ta hanyar dubawar vCenter, sannan kawai bincika zirga-zirga da nuna wuraren musayar zirga-zirga da aka karɓa daga masu haɓakawa. Zabi, za a iya daidaita maɓalli don karɓar duk bayanan IPFIX daga adireshin IP guda ɗaya da aka ɗaure zuwa VDS, amma a mafi yawan lokuta yana da ƙarin bayani don ganin bayanan da aka fitar daga zirga-zirgar da aka karɓa daga kowane hypervisor. Hanyoyin zirga-zirgar da ke shigowa za su wakilci haɗin kai daga ko zuwa injunan kama-da-wane da ke kan ma'auni.
Wani zaɓi na daidaitawa da ke akwai shine don fitarwa kawai rafukan bayanan ciki. Wannan zaɓin ya keɓance magudanar ruwa waɗanda aka sarrafa akan canjin zahiri na waje kuma yana hana kwafin bayanan zirga-zirga don haɗi zuwa ko daga VDS. Amma yana da amfani don kashe wannan zaɓi da saka idanu duk rafukan da ke bayyane a cikin VDS.
Yana daidaita zirga-zirga daga VDS
Bari mu fara da ƙara misali vCenter zuwa Solarwinds. Daga nan NTA za ta sami bayanai game da daidaita tsarin dandamali.
Je zuwa menu na "Sarrafa Nodes", sannan "Settings" kuma zaɓi "Ƙara Node". Bayan haka, kuna buƙatar shigar da adireshin IP ko FQDN na misali vCenter kuma zaɓi "VMware, Hyper-V, ko Nutanix mahaɗan" azaman hanyar jefa ƙuri'a.
Je zuwa maganganun Ƙara Mai watsa shiri, ƙara vCenter misali takaddun shaida kuma gwada su don kammala saitin.
Misalin vCenter zai yi zaben farko na wani lokaci, yawanci mintuna 10-20. Kuna buƙatar jira don kammalawa, sannan kawai kunna IFIX fitarwa zuwa VDS.
Bayan kafa vCenter saka idanu da samun bayanan ƙididdiga akan tsarin tsarin dandamali, za mu ba da damar fitar da bayanan IPFIX akan sauyawa. Hanya mafi sauri don yin wannan ita ce ta abokin ciniki na vSphere. Bari mu je shafin "Networking", zaɓi VDS kuma a kan shafin "Configure" za mu sami saitunan na yanzu don NetFlow. VMware yana amfani da kalmar "NetFlow" don komawa zuwa fitarwar rafi, amma ainihin ƙa'idar da ake amfani da ita ita ce IPFIX.
Don kunna fitarwar kwarara, zaɓi "Saituna" daga menu na "Ayyuka" a saman kuma kewaya zuwa "Edit NetFlow".
A cikin wannan akwatin maganganu, shigar da adireshin IP na mai tarawa wanda shine misalin Orion. Ta hanyar tsoho, ana amfani da tashar jiragen ruwa 2055. Muna ba da shawarar barin filin "Switch IP Address" fanko, wanda zai haifar da bayanan rafi da aka karɓa musamman daga hypervisors. Wannan zai ba da sassauƙa don ƙarin tace bayanan rafin daga hypervisors.
Ka bar filin "Tsarin ciki kawai" a kashe, wanda zai ba ka damar ganin duk hanyoyin sadarwa: na ciki da na waje.
Da zarar kun kunna fitarwar rafi don VDS, kuna buƙatar kunna shi don ƙungiyoyin tashar jiragen ruwa da aka rarraba daga inda kuke son karɓar bayanai. Hanya mafi sauƙi don yin wannan ita ce danna dama akan mashigin kewayawa na VDS kuma zaɓi "Rukunin Tashar Tashar Rarraba" sannan "Sarrafa Rukunin Tashar Tashar Rarraba".
Akwatin maganganu zai buɗe wanda a ciki kake buƙatar duba akwatin rajistan "Monitoring" kuma danna "Na gaba".
A mataki na gaba, zaku iya zaɓar takamaiman ko duk ƙungiyoyin tashar jiragen ruwa.
A mataki na gaba, canza NetFlow zuwa "An kunna".
Lokacin da aka kunna fitarwar rafi akan VDS da ƙungiyoyin tashar jiragen ruwa da aka rarraba, zaku ga shigarwar rafi don masu haɓakawa sun fara gudana cikin misalin NTA.
Ana iya ganin masu haɓakawa a cikin jerin tushen bayanan kwarara akan shafin Sarrafa Tushen Tushen a cikin NTA. Canja zuwa "Nodes".
Kuna iya ganin sakamakon saitin . Kula da yiwuwar fadowa zuwa matakin kumburi, matakin yarjejeniya, da sauransu.
Haɗin kai tare da wasu samfuran Solarwinds a cikin keɓancewar ɗaya yana ba ku damar gudanar da bincike ta fannoni daban-daban: duba waɗanne masu amfani da suka shiga cikin injin kama-da-wane, aikin uwar garken , da aikace-aikace akansa, duba na'urorin cibiyar sadarwa masu alaƙa da ƙari. Misali, idan abubuwan sadarwar ku suna amfani da ka'idar NBAR2, Solarwinds NTA na iya samun nasarar gane zirga-zirga daga , ko .
Babban makasudin labarin shine don nuna sauƙin kafa sa ido a cikin Solarwinds da cikar bayanan da aka tattara. A Solarwinds kuna da damar ganin cikakken hoton abin da ke faruwa. Idan kuna son gabatar da mafita ko duba komai da kanku, bar buƙata a ko kira.
A kan Habré kuma muna da labarin game da .
Kuyi subscribing din mu .
source: www.habr.com