Posachedwapa, Check Point idapereka nsanja yatsopano yowopsa . Tasindikiza kale nkhani yonse yokhudza . Mwachidule, zimakupatsani mwayi wowonjezera magwiridwe antchito achitetezo pophatikiza zida zingapo ndikuwongolera katundu pakati pawo. Chodabwitsa n'chakuti, palinso nthano yakuti nsanja yowonjezerekayi ndi yoyenera kwa malo akuluakulu a deta kapena maukonde akuluakulu. Izi sizowona ayi.
Check Point Maestro idapangidwira magulu angapo ogwiritsa ntchito nthawi imodzi (tidzawayang'ana pambuyo pake), kuphatikiza mabizinesi apakati. M'nkhani zazifupizi ndiyesera kusinkhasinkha Ubwino waukadaulo ndi zachuma wa Check Point Maestro m'mabungwe apakati (kuchokera kwa ogwiritsa ntchito 500) ndichifukwa chiyani njirayi ingakhale yabwinoko kuposa gulu lakale..
Yang'anani omvera omwe akutsata Point Maestro
Choyamba, tiyeni tiwone magawo a ogwiritsa ntchito omwe Check Point Maestro adapangidwira. Pali 4 okha mwa iwo:
1. Makampani omwe analibe luso la ma chassis. Check Point Maestro si nsanja yoyamba ya Check Point. Talemba kale kuti kale panali zitsanzo monga 64000 ndi 44000. Ngakhale kuti anali ndi ntchito YABWINO, panalibe makampani omwe izi sizinali ZONSE. Maestro amathetsa vutoli, chifukwa ... amakulolani kusonkhanitsa zida 31 kukhala gulu limodzi lochita bwino kwambiri. Nthawi yomweyo, mutha kusonkhanitsa gulu kuchokera pazida zomaliza (23900, 26000), potero mumakwaniritsa zochulukira.
M'malo mwake, m'munda wa zipata zachitetezo, Check Point ndiye yokhayo yomwe imagwiritsa ntchito izi.
2. Makampani omwe akufuna kuti athe kusankha zida zawo. Chimodzi mwazovuta zamapulatifomu akale owopsa ndikufunika kugwiritsa ntchito "ma module a tsamba" (Check Point SGM). Pulatifomu yatsopano ya Check Point Maestro imakupatsani mwayi wogwiritsa ntchito zida zingapo zosiyanasiyana. Mutha kusankha mitundu yonse kuchokera pagawo lapakati (5600, 5800, 5900, 6500, 6800) komanso kuchokera kugawo la High End (15000 series, 23000 series, 26000 series). Komanso, mukhoza kuwaphatikiza, kutengera ntchito.
Izi ndizothandiza kwambiri pakuwona kugwiritsa ntchito bwino zinthu. Mukhoza kugula ntchito zomwe mukufuna posankha chitsanzo choyenera.
3. Makampani omwe ma chassis ndi ochulukirapo, koma scalability ikufunikabe. "Zoyipa" zina zamapulatifomu akale owopsa (64000, 44000) anali malo olowera kwambiri (kuchokera pazachuma). Kwa nthawi yayitali, nsanja zowopsa zidangopezeka kwa mabizinesi akuluakulu okhala ndi bajeti "zabwino" za IT. Ndikubwera kwa Check Point Maestro, zonse zasintha. Mtengo wa mtolo wocheperako (woyimba + zipata ziwiri) ndi wofanana (ndipo nthawi zina wotsika) ndi gulu lachikale logwira ntchito / loyimilira. Iwo. malire olowera atsika kwambiri. Posankha yankho, kampani ikhoza kuyika nthawi yomweyo zomanga zowongoka, popanda kubweza ndalama zowonjezera pazofunikira. Kodi pali ogwiritsa ntchito ambiri patatha chaka kukhazikitsidwa kwa Check Point Maestro? Mukungowonjezera chipata chimodzi kapena ziwiri, popanda kulowetsamo zomwe zilipo kale. Simuyeneranso kusintha topology. Ingolumikizani zipata zatsopano kwa oimba ndikuyika zoikamo kwa iwo ndikudina pang'ono.
4. Makampani omwe akufuna kugwiritsa ntchito bwino zida zomwe zilipo. Ndikuganiza kuti anthu ambiri amadziwa bwino ndondomeko ya Trade-In. Pamene ntchito ya zipangizo zomwe zilipo sizikukwanira ndipo hardware iyenera kusinthidwa kuti ikwaniritse zosowa zamakono. Njira yokwera mtengo kwambiri. Kuphatikiza apo, nthawi zambiri pamakhala vuto pomwe kasitomala ali ndi magulu angapo a Check Point pantchito zosiyanasiyana. Mwachitsanzo, gulu lachitetezo chozungulira, gulu lofikira kutali (RA VPN), gulu la VSX, ndi zina zambiri. Komanso, gulu limodzi silingakhale ndi zinthu zokwanira, pamene lina limakhala ndi zochuluka. Check Maestro ndi mwayi wabwino kwambiri wokonzekeletsa kugwiritsa ntchito zinthuzi pogawa mwamphamvu katundu pakati pawo.
Iwo. mumapeza zabwino izi:
- Palibe chifukwa "kutaya" zida zomwe zilipo. Mutha kugula zipata chimodzi kapena ziwiri zowonjezera, kapena...
- Konzani kusinthasintha kwamphamvu pakati pa zipata zina zomwe zilipo kuti mugwiritse ntchito bwino zinthu. Ngati katundu pachipata chozungulira akuwonjezeka kwambiri, ndiye woyimba adzatha kugwiritsa ntchito chuma "chotopetsa" cha zipata zakutali ndi mosemphanitsa. Izi zimakuthandizani kuti muchepetse nsonga zapanthawi (kapena zosakhalitsa).
Monga mukumvetsetsa, magawo awiri omaliza akukhudza makamaka mabizinesi apakati, omwe tsopano atha kugwiritsanso ntchito nsanja zotetezeka. Komabe, funso lomveka lingakhalepo: βChifukwa chiyani Check Point Maestro ili bwino kuposa gulu lokhazikika?βTiyesa kuyankha funsoli.
Classic Cluster vs Check Point Maestro
Ngati tilankhula za gulu lapamwamba la Check Point, ndiye kuti njira ziwiri zogwirira ntchito zimathandizidwa: Kupezeka Kwapamwamba (ie Active/Standby) ndi Load Sharing (ie Active/Active). Tidzafotokoza mwachidule tanthauzo la ntchito, komanso ubwino ndi kuipa kwawo.
Kupezeka Kwapamwamba (Kukhazikika/Kuyimirira)
Monga momwe dzinalo likusonyezera, mumachitidwe ogwiritsira ntchito awa, node imodzi imadutsa magalimoto onse mwa iyo yokha, ndipo yachiwiri ili mu standby mode ndipo imatenga magalimoto ngati node yogwira ntchito ikuyamba kukumana ndi mavuto.
Zotsatira:
- Njira yokhazikika kwambiri;
- Makina a SecureXL omwe ali nawo amathandizidwa kuti afulumizitse kukonza magalimoto;
- Ngati node yogwira ntchito ikulephera, yachiwiri imatsimikiziridwa kuti idzatha "kugaya" magalimoto onse (chifukwa ndizofanana).
Wotsatsa:
M'malo mwake, pali kuchotsera kumodzi kokha - mfundo imodzi ndi yopanda ntchito. Chifukwa chake, chifukwa cha izi, timakakamizika kugula zida zamphamvu kwambiri kuti zitha kuthana ndi magalimoto okha.
Zachidziwikire, mawonekedwe a HA ndiwodalirika kuposa Kugawana Katundu, koma kukhathamiritsa kwazinthu kumasiya zambiri zofunika.
Kugawana Katundu (Yokhazikika/Yokhazikika)
Munjira iyi, ma node onse mumsewu wamagulu amagulu. Mutha kuphatikiza zida 8 kukhala gulu lotere (kupitilira 4 ).
Zotsatira:
- Mukhoza kugawa katundu pakati pa mfundo, zomwe zimafuna zipangizo zopanda mphamvu;
- Kuthekera kwa makulitsidwe osalala (kuwonjezera mpaka ma node 8 pagulu).
Wotsatsa:
- Zodabwitsa ndizakuti, zabwinozo nthawi yomweyo zimasintha kukhala zoyipa. Amakonda kugwiritsa ntchito Load Sharing mode ngakhale kampaniyo ili ndi ma node awiri okha. Pofuna kusunga ndalama, amagula zipangizo, zomwe zimayikidwa pa 40-50%. Ndipo zonse zikuwoneka kuti zili bwino. Koma ngati mfundo imodzi ikulephera, timakhala ndi nthawi yomwe katundu wonse amasamutsidwa kwa otsalawo, omwe sangathe kupirira. Chotsatira chake, palibe kulolerana kolakwa monga momwemo mu dongosolo loterolo.
- Onjezani ku izi mulu wa zoletsa Zogawana Katundu (). Ndipo cholepheretsa chofunikira kwambiri ndikuti SecureXL sichimathandizidwa, njira yomwe imafulumizitsa kwambiri kukonza magalimoto;
- Ponena za makulitsidwe powonjezera ma node atsopano pagulu, mwatsoka Kugawana Kwazinthu sikuli koyenera pano. Ngati zida zopitilira 4 zikuwonjezedwa pagulu, ndiye kuti ntchito imayamba .
Poganizira zovuta ziwiri zoyambirira, kuti tigwiritse ntchito kulekerera zolakwika tikamagwiritsa ntchito mfundo ziwiri, timakakamizika kugula zida zopangira zinthu zambiri kuti zitha "kugaya" magalimoto mumkhalidwe wovuta. Zotsatira zake, tilibe phindu lililonse lazachuma, koma timapeza ndalama zambiri . Komanso, ndizofunika kudziwa kuti kuyambira pa mtundu wa R80.20, Kugawana Kwazinthu sikumathandizidwa. Izi zimalepheretsa ogwiritsa ntchito kusinthidwa kofunikira. Sizikudziwikabe ngati Load Sharing ithandizidwa muzotulutsa zatsopano.
Onani Point Maestro ngati njira ina
Kuchokera pamawonedwe amagulu, Check Point Maestro adatenga zabwino zazikulu za Kupezeka Kwapamwamba ndi Njira Zogawana Katundu:
- Zipata zolumikizidwa ndi orchestrator zitha kugwiritsa ntchito SecureXL, zomwe zimatsimikizira kuthamanga kwambiri kwa magalimoto. Palibe zoletsa zina zomwe zili mu Kugawana Katundu;
- Magalimoto amagawidwa pakati pa zipata mu Gulu limodzi la Chitetezo (chipata chomveka chokhala ndi zingapo zakuthupi). Chifukwa cha izi, titha kukhazikitsa zida zosapanga zambiri, chifukwa tilibenso zipata zopanda ntchito, monga momwe zilili mu High Availability mode. Nthawi yomweyo, mphamvu imatha kuonjezedwa pafupifupi motsatana, popanda kutayika kwakukulu monga munjira yogawana katundu (zambiri pambuyo pake).
Zonsezi ndi zabwino, koma tiyeni tiwone zitsanzo ziwiri zenizeni.
Chitsanzo # 1
Lolani kampani X ikufuna kukhazikitsa gulu la zipata pamanetiweki ozungulira. Adziwa kale zoletsa zonse za Kugawana Katundu (omwe sali ovomerezeka kwa iwo) ndipo akungoganizira za Kupezeka Kwapamwamba kokha. Pambuyo poyesa, zimakhala kuti chipata cha 6800 ndi choyenera kwa iwo, chomwe sichiyenera kunyamulidwa ndi 50% (kuti mukhale ndi malo osungirako ntchito). Popeza iyi idzakhala gulu, muyenera kugula chipangizo chachiwiri, chomwe chidzango "kusuta" mpweya mumayendedwe oima. Ndi nyumba yosuta yokwera mtengo kwambiri.
Koma pali njira ina. Tengani mtolo kuchokera kwa oimba ndi zipata zitatu za 6500. Pankhaniyi, magalimoto adzagawidwa pakati pa zipangizo zonse zitatu. Mukayang'ana mafotokozedwe amitundu iwiriyi, muwona kuti zipata zitatu za 6500 ndi zamphamvu kuposa 6800 imodzi.
Chifukwa chake, posankha Check Point Maestro, kampani X imalandira zabwino izi:
- Kampaniyo nthawi yomweyo imayika nsanja yowopsa. Kuwonjezeka kotsatira kwa ntchito kudzatsika ndikungowonjezera chidutswa china cha hardware 6500. Chingakhale chophweka chiyani?
- Yankho likadali lololera zolakwika, chifukwa Node imodzi ikalephera, awiri otsalawo adzatha kupirira katunduyo.
- Ubwino wofanana komanso wodabwitsa ndikuti ndiwotsika mtengo! Tsoka ilo, sindingathe kuyika mitengo poyera, koma ngati mukufuna, mutha
Chitsanzo # 2
Lolani kampani Y ili kale ndi gulu la HA la zitsanzo za 6500. Node yogwira ntchito imayikidwa pa 85%, yomwe panthawi yolemetsa kwambiri imatsogolera kutayika kwa magalimoto opindulitsa. Njira yothetsera vutoli ikuwoneka ngati ikukonzanso hardware. Chitsanzo chotsatira ndi 6800. Ndizo. kampaniyo iyenera kubwezera zipata kudzera mu pulogalamu ya Trade-In ndikugula zida ziwiri zatsopano (zokwera mtengo).
Koma pali njira ina. Gulani oimba ndi ina chimodzimodzi mfundo (6500). Sonkhanitsani gulu la zida zitatu ndi "kufalitsa" 85% ya katundu pazipata zitatu. Zotsatira zake, mupeza malire ochita bwino (zida zitatu zizingodzazidwa ndi 30% pafupifupi). Ngakhale imodzi mwa mfundo zitatuzi itafa, awiri otsalawo adzatha kuthana ndi magalimoto ndi katundu wapakati wa 45%. Kuphatikiza apo, pakunyamula katundu wambiri, gulu la zipata zitatu zogwira ntchito za 6500 lidzakhala lamphamvu kuposa chipata chimodzi cha 6800, chomwe chili mu gulu la HA (ie yogwira / standby). Kuonjezera apo, ngati chaka chimodzi kapena ziwiri zofuna za kampani Y zikuwonjezekanso, ndiye zonse zomwe adzafunika kuchita ndikuwonjezera node imodzi kapena ziwiri za 6500. Ndikuganiza kuti phindu lachuma pano ndi lodziwikiratu.
Pomaliza
Inde, Check Point Maestro si yankho la SMB. Koma ngakhale bizinesi yaying'ono imatha kuganiza kale za nsanja iyi ndikuyesa kuwerengera momwe chuma chikuyendera. Mudzadabwitsidwa kupeza kuti nsanja zowopsa zitha kukhala zopindulitsa kuposa gulu lakale. Panthawi imodzimodziyo, pali ubwino osati zachuma, komanso luso. Komabe, tikambirana za iwo m'nkhani yotsatira, pomwe, kuwonjezera pa zidule zaukadaulo, ndiyesera kuwonetsa milandu ingapo (topology, zochitika).
Mukhozanso kulembetsa kumasamba athu agulu (, , , ), komwe mungatsatire kuwonekera kwa zinthu zatsopano pa Check Point ndi zinthu zina zachitetezo.
Source: www.habr.com