Mabungwe ambiri amagwiritsa ntchito ntchito zamtambo kapena kusuntha zida kupitako
Data center. Nchiyani chomwe chiri chomveka kuchoka mu chipinda cha seva ndipo ndi njira yotani yokonzekera chitetezo cha ofesi ya ofesi yozungulira muzochitika zoterezi?
Kalekale zonse zinali pa seva
Kumayambiriro kwa chitukuko cha Runet, makampani ambiri adathetsa nkhani ya zomangamanga za IT molingana ndi dongosolo lomwelo: adagawira chipinda chomwe adayika zoziziritsa kukhosi komanso pomwe zida zonse za netiweki ndi seva zidakhazikika.
Woyang'anira dongosolo adakhazikitsa seva imodzi kapena zingapo pa FreeBSD, Linux, kapena OpenSolaris, etc. Ndiyeno pa "host" iyi adayambitsa mautumiki ofunikira: kuchokera pa seva ya intaneti, makalata amakampani, mpaka ku ntchito yosungira mafayilo.
Kampani ikakula ndikukula, imakumana ndi vuto lomwe chipinda cha seva sichimakwaniritsa zofunikira. Ngati muli ndi ndalama, mukhoza kupanga malo anu opangira deta. Zingakhale zopindulitsa kwambiri kubwereka ma racks kuchokera kumalo osungira deta. Mphamvu zamagetsi zapamwamba zochokera ku DRUPS, makina opangira mpweya wa mafakitale, antchito athunthu a akatswiri apadera - zinthu izi sizipezeka m'chipinda cha seva yaofesi.
Kutsatira bizinesi yayikulu, m'malingaliro a oyang'anira makampani apakati ndi ang'onoang'ono pali kusintha pang'onopang'ono kuchokera ku psychology ya "Ndimanyamula chilichonse chomwe ndili nacho" ndi "nyumba yanga ndi linga langa" kuti "ndipereke kwa wina osati kuvutika.β
Kwa mabizinesi ang'onoang'ono, opereka mtambo akhala "njira yakunja". Ngati m'mbuyomu kwa kampani ya anthu 40 omwe ali ndi seva yake yamakalata anali chinthu chopanda pake, lero ntchito yochokera ku Google yomweyo ikupambana kumbali yake onse omwe poyamba sankaganiza zogwira ntchito popanda Sendmail kapena Postfix yawo.
Machitidwe owoneka bwino amapereka chithandizo chachikulu pa "kusamuka" koteroko. Ngati pamaso pa maonekedwe awo kunali koyenera kunyamula seva yonse yakuthupi, kapena kukonza chirichonse pa hardware yatsopano, tsopano ndi zokwanira kusamutsa chithunzi cha makina enieni.
Kodi chitsalira m'kachipinda kakang'ono kamene kamakhala ndi zoziziritsira mpweya?
Choyamba, izi ndi zida zapaintaneti. Onse yogwira ndi kungokhala chete. Nthawi zambiri, kuseri kwa dzina lokweza "seva" amamvetsetsa kulumikizana ndi zotsalira za zida zama network. Ndipo pazifukwa zotere, chipinda chapadera chokhala ndi mpweya wamphamvu, magetsi, ndi zina zotero sizifunikira.
Gulu lachiwiri la zida zomwe zimakhala zovuta kuchotsa ku chipinda cha seva ndi zipata
chitetezo.
Koma zipata izi ndi ziti? Monga tafotokozera pamwambapa, ngati posachedwapa woyang'anira dongosolo anali ndi seva imodzi kapena zingapo zomwe angathe kuyika chilichonse chomwe mtima wake ungafune, ndiye kuti zinthu zapamwambazi sizingakhalepo.
Koma kufunika koteteza ku ziwopsezo zakunja sikunachoke. Mukhoza, ndithudi, kusamutsa mautumiki onse ndi zipangizo zofunika kwathunthu kumalo osungirako deta ndikuyendetsa magalimoto kuchokera pachipata choterocho kupita ku ofesi yolumikizirana kudzera pa njira yotetezeka, mwachitsanzo, kudzera pa VPN.
Chiwembuchi chikuwoneka chokongola poyang'ana koyamba, ngati sichowonjezera kuchuluka kwamayendedwe omwe alipo. Ngati simukufuna kulipira njira yokulirapo, izi sizomwe mukufuna.
Njira ina ndikugula chipangizo chapadera chotetezera magalimoto, mapangidwe ake, chifukwa cha kuyang'ana kwake kochepa, amakulolani kuchita popanda zida zamphamvu zowonjezera mphamvu komanso kutentha.
Palibe chifukwa cha zoo
Popanda chipinda cha seva chapamwamba, ndi bwino kupeza mautumiki angapo "m'bokosi limodzi" nthawi imodzi kusiyana ndi kupanga "zoo" m'chipinda chaching'ono, kapena ngakhale mkati mwa kabati kakang'ono. Panthawi imodzimodziyo, yankho liyenera kukhala lotsika mtengo, lotsimikiziridwa komanso lothandizira bwino mu Russian.
Zindikirani. Tsopano tikukamba za maofesi ang'onoang'ono, apakatikati ndi akuluakulu. Sitikuganizirabe makampani akuluakulu omwe amamanga malo awoawo - m'nkhani ina "ndizosatheka kumvetsa kukula kwake."
Ndipo pazochitika zilizonse, Zyxel ili kale ndi yankho, mkati mwa mzere womwewo wa mankhwala. Mwachidule, simudzasowa "zoo".
ZyWALL ATP Security Gateways
Takambirana kale za mfundo zoyendetsera zipangizo zoterezi pogwiritsa ntchito chitsanzo Mbali yawo yayikulu ndikuphatikiza chowotcha moto ndi ntchito yachitetezo cha Zyxel Cloud. Chifukwa cha kugawa kwa maudindo, ZyWALL ATP imathetsa nkhani zosiyanasiyana zotetezedwa popanda kufunikira zida zowonjezera za hardware.
Mndandanda wa ntchito zoteteza ndizolemera kwambiri (onani Table 1), kuphatikizapo zida zowunikira za SecuReporter ndi Sandboxing - "sandbox" yowunikira koyambirira kwa zomwe zidatsitsidwa.
Ndikoyenera kutsindikanso kuti pamenepa tikungosamutsa mautumiki kuchokera ku ofesi yapafupi kupita kumtambo. Zyxel Cloud imatichitira china chilichonse mwanjira yosadziwika. Kuphatikiza pa kuphweka, njira iyi imapereka chitetezo chokwanira ku ziwopsezo za tsiku la zero kupyolera mu kuphunzira makina ndi kusinthanitsa mauthenga pakati pa zipata za ATP padziko lonse lapansi. Neural network yonse yamangidwa kuti itetezedwe.
: "Fayilo yosadziwika ikapezeka, Cloud Query mwachangu (m'masekondi angapo) imayang'ana kachidindo ka hashi ndikuwunika ngati ili yowopsa kapena ayi. Utumikiwu umafuna zochepa zothandizira maukonde kuti zigwire ntchito, choncho sizichepetsa ntchito ya chipangizocho. Kuchita bwino kwa chitetezo chowopseza kumatsimikiziridwa ndi kugwiritsa ntchito nkhokwe yamtambo yosinthidwa mosalekeza yokhala ndi ziwopsezo mabiliyoni ambiri. Cloud Query imafulumizitsanso nzeru za Zyxel Security Cloud zomwe zikuwonekera paziwopsezo, ndikupititsa patsogolo chitetezo cha pulogalamu yaumbanda pa firewall iliyonse ya ATP. "
Gulu 1. Makhalidwe aukadaulo a mzere wa ZyWALL ATP.
Mfundo:
(1) Kuchita zenizeni kumadalira kwambiri momwe ma network aliri komanso ntchito zogwira ntchito.
(2) Kupititsa patsogolo kwakukulu kumachokera pa RFC 2544 (1,518-byte UDP mapaketi).
(3) Kuyeza kwa VPN kutengera RFC 2544 (mapaketi a UDP 1,424-byte).
(4) AV ndi IDP throughput metrics amagwiritsa ntchito mayeso amakampani a HTTP (1,460-byte HTTP mapaketi). Kuyesa kunachitika mumitundu yambiri.
(5) Poyesa kuchuluka kwa magawo omwe angatheke, zida zogwiritsidwa ntchito pamakampani zidagwiritsidwa ntchito - IXIA IxLoad chida choyesera.
(6) 1Gbps zotsatira za WAN zoyeserera zothamanga zidachitika pansi pa zochitika zenizeni zapadziko lapansi ndipo zimatha kusiyanasiyana pang'ono kutengera mtundu wa ulalo.
(7): Paketi ya Golide ikatha, ma AP awiri okha ndi omwe adzathandizidwa.
(8): Mutha kuloleza kapena kukulitsa magwiridwe antchito pogula malayisensi owonjezera a ntchito za Zyxel.
Samalani ndi gulu lothandizira la mautumiki a VPN. Pafupifupi chilichonse chofunikira kuti tizilankhulana ndi likulu kapena ofesi ya kunyumba zili kale "mu botolo limodzi," kotero tikhoza kulimbikitsa chipangizochi ngati njira yomaliza yolumikizira nthambi ndikuthandizira ntchito yakutali ya antchito.
Njira zothetsera maofesi ang'onoang'ono
Maofesi ang'onoang'ono akhoza kugawidwa m'magulu awiri: mabungwe odziimira okha ndi nthambi zamakampani akuluakulu.
Odziyimira pawokha ndi mabizinesi obadwa kumene komanso omwe akuyenera kukhala ang'onoang'ono. Mwachitsanzo, maofesi opangira, ma studio omanga, maofesi okonza atolankhani ang'onoang'ono, ndi zina zotero. Mabizinesi oterowo nthawi zambiri amagwiritsa ntchito mautumiki amtambo, osachepera makalata ndi kugawana mafayilo.
Nthambi za mabungwe akuluakulu - chinthu chachikulu kwa iwo ndi kukhala ndi chiyanjano chokhazikika ndi ofesi yapakati. Zina zonse zili mu "Center".
Nthawi zambiri "makanda" otere amafunikira mawonekedwe osavuta kuti aziwongolera. Woyang'anira maukonde ochokera ku likulu nthawi zambiri sakhala ndi mwayi wothamangira kumayiko akutali kukathetsa vuto munthambi yatsopano. Makampani ang'onoang'ono am'deralo alibe mwayi umenewu nkomwe. Tiyenera kutembenukira ku ntchito za βkudza
admin." Pazifukwa zotere, ndikofunikira kuwongolera molingana ndi mfundo yakuti "zosavuta, zodalirika."
Kwa maofesi ang'onoang'ono, ndizomveka kugwiritsa ntchito zitsanzo za ZyWALL ATP100 ndi ZyWALL ATP200.
Network gateway adawonekera posachedwa, koma adalowa kale .
Kusiyana kwakukulu ndi mchimwene wake wamkulu () - kuti idapangidwa kuti ikhale yolemetsa yaying'ono, ndipo ilibe mapiri a 19-inch rack. Akulimbikitsidwa maofesi apanyumba, makampani ang'onoang'ono, nthambi ndi zina zotero.
Chithunzi 1. ZyWALL ATP100.
Zopangidwe: ATP100 ndi ATP200 ndi zitsanzo zopanda fan. Chifukwa chiyani izi zili bwino: choyamba, palibe phokoso, ndipo kachiwiri, palibe chifukwa chosinthira fan. Mukakhala ndi "mtsogoleri wobwera", ichi ndi chizindikiro chofunikira kwambiri.
Chithunzi 2. ZyWALL ATP200.
Mtundu wa ATP200 umathandizira madoko awiri a WAN ndipo umatha kulumikizana ndi mizere iwiri yodziyimira pawokha, mwachitsanzo, kuchokera kwa othandizira osiyanasiyana.
Monga tafotokozera pamwambapa, kwa ofesi yaing'ono, chinthu chofunika kwambiri pambuyo popereka magetsi okhazikika ndi kugwirizana kokhazikika. Tsoka ilo, othandizira am'deralo sangatsimikizire nthawi zonse kuti sipadzakhala ngozi. Tiyenera kuyang'ana njira zosunga zobwezeretsera.
ZOFUNIKA KWAMBIRI! Kuphatikiza pa madoko odzipatulira a WAN, mitundu ya ATP ili ndi madoko a USB omwe mutha kulumikiza ma modemu a USB ndikuwagwiritsa ntchito ngati WAN. Izi zimapezeka kwa ma ATP onse.
Ngati chipangizocho chili ndi doko la SFP, izi zitha kugwiritsidwanso ntchito ngati WAN. Izi zimapezeka kwa ma ATP onse.
Nayi kuthyolako kwa moyo kuchokera ku Zyxel.
Makampani apakatikati
Kwa makampani apakatikati, Zyxel ili ndi zida zake zabwino -
Ndi chipata cham'badwo wotsatira chokhala ndi chitetezo chotsogola ku ziwopsezo zomwe zikubwera.
Zina mwa zinthu zosangalatsa:
7 madoko configurable amalola kasinthidwe kusintha, mwachitsanzo, 2 WAN, 2 DMZ ndi 3 LAN madoko pamene kulumikiza 3 osiyana VLANs ntchito mkati. Palinso doko la 1 SFP.
Chithunzi 3. ZyWALL ATP500.
Ndizotheka kugwira ntchito mu Chipangizo cha HA Pro chopezeka kwambiri pamagulu awiri a ZyWALL ATP500. Ngati imodzi sikugwira ntchito, yachiwiri idzaperekabe kulankhulana.
Pogwiritsa ntchito ntchito za ATP500 mokwanira, mutha kusintha,
kulumikizana kodalirika, kotetezeka ndi dziko lakunja kapena node yosiyana, mwachitsanzo,
likulu.
Maofesi akuluakulu
Kwa iwo, mtundu wamphamvu kwambiri wa mzerewu ukulimbikitsidwa - ATP800.
Mtunduwu uli ndi madoko ambiri: 12 RJ-45 ndi 2 SFP, onse amatha kukhazikitsidwa mu WAN, LAN kapena DNZ mode, omwe amakulolani kugwiritsa ntchito ma WLAN angapo, kukonza ma DMZ angapo ndikukhalabe ndi mwayi wolumikizana nawo. maukonde akunja kwa zovuta zamkati zamkati. Oyenera kumaofesi akuluakulu omwe ali ndi netiweki yotukuka komanso zofunika kwambiri pachitetezo ndi kuwongolera mwayi.
Chithunzi 4. ZyWALL ATP800.
Ndizoyeneranso kudziwa kuti mtundu uwu ukulimbikitsidwa kuti ugulidwe ndi chizolowezi "kukula". Ngati mukukonzekera kukulitsa kampani yanu, mwachitsanzo, kupanga masitolo am'deralo, ndiye kuti n'zomveka kuti mugule nthawi yomweyo chitsanzo champhamvu kwambiri kuti musawononge ndalama kawiri.
Monga mukuonera, ngakhale pansi pazikhalidwe za spartan ndizotheka kupereka chitetezo chabwino, kulekerera zolakwika ndi kusinthasintha pakugwira ntchito.
Thandizo laukadaulo, upangiri, zokambirana, nkhani, zotsatsa ndi zolengeza - Lumikizanani nafe pa Telegraph!
maulalo othandiza
Source: www.habr.com