Yi amfani da Lambobi don Maganin Ganuwa na hanyar sadarwa
Menene Ganuwa Network?
Kamus na Webster's ya ayyana gani a matsayin "ikon da za a iya gane shi cikin sauƙi" ko "digiri na tsabta." Ganuwa na hanyar sadarwa ko aikace-aikacen yana nufin kawar da wuraren makafi waɗanda ke ɓoye ikon iya gani (ko ƙididdigewa) cikin sauƙi abin da ke faruwa akan hanyar sadarwar da/ko aikace-aikacen kan hanyar sadarwa. Wannan hangen nesa yana ba ƙungiyoyin IT damar ware barazanar tsaro da sauri da warware matsalolin aiki, a ƙarshe suna ba da mafi kyawun ƙwarewar mai amfani.
Wani fahimta shine abin da ke ba ƙungiyoyin IT damar saka idanu da haɓaka hanyar sadarwa tare da aikace-aikace da sabis na IT. Shi ya sa hanyar sadarwa, aikace-aikace, da ganin tsaro suna da matuƙar mahimmanci ga kowace ƙungiyar IT.
Hanya mafi sauƙi don cimma hangen nesa na hanyar sadarwa shine aiwatar da tsarin gine-ginen gani, wanda shine cikakkiyar kayan aikin ƙarshe zuwa ƙarshe wanda ke ba da hanyar sadarwa ta zahiri da kama-da-wane, aikace-aikace, da hangen nesa na tsaro.
Ƙirƙirar Gidauniyar Ganuwa ta hanyar sadarwa
Da zarar tsarin gine-ginen ganuwa ya kasance a wurin, yawancin lokuta masu amfani suna samuwa. Kamar yadda aka nuna a ƙasa, gine-ginen ganuwa yana wakiltar manyan matakai uku na ganuwa: matakin samun dama, matakin sarrafawa, da matakin kulawa.
Yin amfani da abubuwan da aka nuna, ƙwararrun IT na iya magance nau'ikan hanyoyin sadarwa da matsalolin aikace-aikace. Akwai nau'ikan nau'ikan amfani guda biyu:
- Maganin Ganuwa na asali
- Cikakken hangen nesa na hanyar sadarwa
Mahimman hanyoyin ganuwa suna mayar da hankali kan tsaro na cibiyar sadarwa, ajiyar kuɗi, da magance matsala. Waɗannan sharuɗɗa uku ne waɗanda ke tasiri IT a kowane wata, idan ba yau da kullun ba. An ƙera cikakkiyar hangen nesa na cibiyar sadarwa don samar da ƙarin haske game da wuraren makafi, aiki da yarda.
Me za ku iya yi tare da ganin hanyar sadarwa?
Akwai lokuta daban-daban na amfani guda shida don ganin cibiyar sadarwa waɗanda zasu iya nuna ƙimar a fili. Wannan:
- Inganta tsaro na cibiyar sadarwa
- Samar da dama don ƙunshe da rage farashi
- Sauƙaƙe magance matsala da haɓaka amincin hanyar sadarwa
- Kawar da makafi cibiyar sadarwa
- Inganta cibiyar sadarwa da aikin aikace-aikace
- Ƙarfafa bin ka'idoji
A ƙasa akwai takamaiman misalan amfani.
Misali No. 1 - tace bayanai don mafita na tsaro wanda ke cikin layi (a cikin layi), yana ƙaruwa da ingancin waɗannan mafita.
Manufar wannan zaɓin shine don amfani da dillalin fakitin cibiyar sadarwa (NPB) don tace ƙananan bayanai (misali, bidiyo da murya) don ware shi daga binciken tsaro (tsarin rigakafin kutse (IPS), rigakafin asarar bayanai (DLP) , Tacewar zaɓi na aikace-aikacen yanar gizo (WAF), da sauransu). Ana iya gano wannan zirga-zirgar "marasa sha'awa" kuma a mayar da ita zuwa maɓalli ta hanyar wucewa kuma a ƙara turawa cikin hanyar sadarwa. Amfanin wannan maganin shine WAF ko IPS ba dole ba ne su lalata albarkatun sarrafa kayan aiki (CPU) suna nazarin bayanan da ba dole ba. Idan zirga-zirgar hanyar sadarwar ku ta ƙunshi adadi mai yawa na wannan nau'in bayanai, kuna iya aiwatar da wannan fasalin kuma ku rage nauyi akan kayan aikin tsaro na ku.
Kamfanoni sun sami shari'o'in inda har zuwa 35% na ƙananan zirga-zirgar hanyar sadarwa an cire su daga binciken IPS. Wannan ta atomatik yana ƙara ingantaccen bandwidth na IPS da 35% kuma yana nufin zaku iya kashe siyan ƙarin IPS ko haɓakawa. Dukanmu mun san cewa zirga-zirgar hanyar sadarwa tana karuwa, don haka a wani lokaci zaku buƙaci ingantaccen IPS mai aiki. Gaskiya tambaya ce ko kuna son rage farashi ko a'a.
Misali No. 2 - Ma'auni na kaya yana kara tsawon rayuwar na'urorin 1-10Gbps akan hanyar sadarwar 40Gbps
Halin amfani na biyu ya ƙunshi rage farashin mallakar kayan aikin cibiyar sadarwa. Ana samun wannan ta hanyar amfani da dillalan fakiti (NPBs) don daidaita zirga-zirga zuwa kayan aikin tsaro da sa ido. Ta yaya daidaita nauyin kaya zai iya taimakawa yawancin kasuwancin? Na farko, haɓaka zirga-zirgar hanyar sadarwa abu ne da ya zama ruwan dare gama gari. Amma menene game da sa ido kan tasirin haɓaka iya aiki? Misali, idan kuna haɓaka cibiyar sadarwar ku daga 1 Gbps zuwa 10 Gbps, kuna buƙatar kayan aikin 10 Gbps don sa ido mai kyau. Idan kun ƙara saurin zuwa 40 Gbps ko 100 Gbps, to a irin wannan saurin zaɓin kayan aikin saka idanu ya fi ƙanƙanta kuma farashin yana da yawa.
Dillalan fakiti suna ba da madaidaicin tarawa da ƙarfin daidaita nauyi. Misali, 40 Gbps daidaita zirga-zirga yana ba da damar rarraba zirga-zirgar sa ido tsakanin kayan aikin 10 Gbps da yawa. Sannan zaku iya tsawaita rayuwar na'urorin 10 Gbps har sai kun sami isasshen kuɗi don siyan kayan aikin da suka fi tsada waɗanda zasu iya ɗaukar ƙimar bayanai masu girma.
Wani misali kuma shine haɗa kayan aikin a wuri ɗaya kuma ciyar da su mahimman bayanai daga dillalin fakitin. Wani lokaci ana amfani da mafita daban da aka rarraba akan hanyar sadarwa. Bayanan bincike daga Abokan Gudanar da Kasuwanci (EMA) sun nuna cewa kashi 32% na mafitacin kasuwancin ba su da amfani, ko ƙasa da 50%. Ƙirƙirar kayan aiki da daidaita nauyi yana ba ku damar tara albarkatu da haɓaka amfani ta amfani da na'urori kaɗan. Kuna iya jira sau da yawa don siyan ƙarin kayan aikin har sai adadin amfanin ku ya isa sosai.
Misali No. 3 – magance matsala don rage/kawar da buƙatar samun izinin Hukumar Canji
Da zarar an shigar da kayan gani (TAPs, NPBs...) akan hanyar sadarwar, ba za ku buƙaci yin canje-canje ga hanyar sadarwar ba. Wannan yana ba ku damar daidaita wasu hanyoyin magance matsala don inganta inganci.
Misali, da zarar an shigar da TAP ("sata shi kuma manta da shi"), yana tura kwafin duk zirga-zirga zuwa NPB. Wannan yana da babbar fa'ida na kawar da yawancin matsalolin aikin hukuma na samun yarda don yin canje-canje ga hanyar sadarwa. Idan kuma kun shigar da dillalin fakiti, zaku sami damar shiga kusan duk bayanan da ake buƙata don gyara matsala.
Idan babu buƙatar yin canje-canje, zaku iya tsallake matakan amincewa da canje-canje kuma ku tafi kai tsaye zuwa gyara kuskure. Wannan sabon tsari yana da babban tasiri akan rage Ma'anar Lokaci don Gyara (MTTR). Bincike ya nuna cewa yana yiwuwa a rage MTTR da kashi 80%.
Nazarin Harka #4 - Hankalin aikace-aikacen, Amfani da Tacewar aikace-aikacen da Maske bayanai don Inganta Tasirin Tsaro
Menene Hankalin Application? Ana samun wannan fasaha daga IXIA Packet Brokers (NPBs). Wannan ingantaccen aiki ne wanda ke ba ku damar wuce Layer 2-4 fakiti tacewa (samfurin OSI) kuma matsawa gaba ɗaya zuwa Layer 7 (Layin aikace-aikacen). Fa'idar ita ce cewa za a iya samar da halayen mai amfani da aikace-aikacen da bayanan wurin da za a iya fitar da su ta kowace sigar da ake so - fakitin fakiti, fakiti da aka tace, ko bayanan NetFlow (IxFlow). Sassan IT na iya gano ɓoyayyun aikace-aikacen cibiyar sadarwa, rage barazanar tsaro na cibiyar sadarwa, da rage raguwar lokacin sadarwar da/ko haɓaka aikin cibiyar sadarwa. Za a iya gano keɓaɓɓen fasalulluka na sanannun aikace-aikacen da ba a san su ba, kamawa da raba su tare da na'urorin sa ido na musamman da tsaro.
- gano aikace-aikacen tuhuma/marasa sani
- gano halayen da ake tuhuma ta wurin wuri, misali, mai amfani daga Koriya ta Arewa yana haɗi zuwa uwar garken FTP ɗin ku kuma yana canja wurin bayanai
- Ƙaddamar da SSL don dubawa da nazarin yiwuwar barazanar
- bincike na aikace-aikace malfunctions
- nazarin yawan zirga-zirgar zirga-zirga da haɓaka don sarrafa albarkatu masu aiki da hasashen faɗaɗa
- rufe bayanan sirri (katin bashi, takaddun shaida...) kafin aikawa
Ayyukan Intelligence na Ganuwa yana samuwa duka a cikin zahiri da kama-da-wane (Cloud Lens Private) dillalan fakitin IXIA (NPB), da kuma cikin “girgije” na jama'a - Cloud Lens Public:
Baya ga daidaitattun ayyuka na NetStack, PacketStack da AppStack:
Kwanan nan, an kuma ƙara ayyukan tsaro: SecureStack (don haɓaka sarrafa zirga-zirgar sirri), MobileStack (na masu gudanar da wayar hannu) da TradeStack (don sa ido da tace bayanan ciniki na kuɗi):
binciken
Maganganun gani na hanyar sadarwa kayan aiki ne masu ƙarfi waɗanda ke da ikon haɓaka sa ido na cibiyar sadarwa da gine-ginen tsaro waɗanda ke haifar da tarin asali da raba mahimman bayanai.
Yi amfani da lokuta masu izini:
- ba da damar yin amfani da takamaiman bayanan da ake buƙata kamar yadda ake buƙata don bincike da magance matsala
- ƙara / cire hanyoyin tsaro, saka idanu duka a cikin layi da waje
- rage MTTR
- tabbatar da saurin mayar da martani ga matsaloli
- gudanar da ci-gaba na barazana bincike
- kawar da mafi yawan amincewar hukuma
- rage sakamakon kuɗi na hack ta hanyar haɗa hanyoyin da suka dace da sauri zuwa hanyar sadarwar da rage MTTR
- rage tsada da aikin kafa tashar SPAN
source: www.habr.com