Gwiritsani Ntchito Milandu pa Network Visibility Solutions
Kodi Network Visibility ndi chiyani?
Kuwoneka kumatanthauzidwa ndi Webster’s Dictionary kukhala “kutha kuzindikirika mosavuta” kapena “mlingo womvekera bwino.” Kuwonekera kwa netiweki kapena kugwiritsa ntchito kumatanthawuza kuchotsedwa kwa malo osawona omwe amalepheretsa kuwona mosavuta (kapena kuwerengera) zomwe zikuchitika pa netiweki ndi/kapena mapulogalamu pa netiweki. Kuwoneka uku kumathandizira magulu a IT kuti adzipatula mwachangu ziwopsezo zachitetezo ndikuthana ndi zovuta zogwirira ntchito, ndipo pamapeto pake zimapereka chidziwitso chabwino kwambiri cha ogwiritsa ntchito.
Chidziwitso china ndi chomwe chimalola magulu a IT kuyang'anira ndi kukhathamiritsa maukonde pamodzi ndi mapulogalamu ndi ntchito za IT. Ichi ndichifukwa chake ma netiweki, kugwiritsa ntchito, komanso kuwonekera kwachitetezo ndikofunikira kwambiri ku bungwe lililonse la IT.
Njira yosavuta yokwaniritsira kuwonekera kwa maukonde ndikukhazikitsa zomanga zowoneka, zomwe ndizokhazikika kumapeto mpaka kumapeto komwe kumapereka maukonde owoneka bwino komanso owoneka bwino, kugwiritsa ntchito, komanso kuwonekera kwachitetezo.
Kuyika Maziko a Network Visibility
Pambuyo pakupanga mawonekedwe akuwoneka, milandu yambiri yogwiritsira ntchito imakhalapo. Monga momwe tawonetsera pansipa, zomangamanga zowonekera zimayimira magawo atatu owonekera: mlingo wofikira, mlingo wolamulira, ndi mlingo wowunika.
Pogwiritsa ntchito zinthu zomwe zawonetsedwa, akatswiri a IT amatha kuthana ndi zovuta zosiyanasiyana zamaukonde ndikugwiritsa ntchito. Pali mitundu iwiri yogwiritsira ntchito:
- Mayankho Owonekera Kwambiri
- Kuwonekera kwathunthu kwa netiweki
Mayankho owoneka bwino amayang'ana pachitetezo cha netiweki, kupulumutsa mtengo, ndi kuthetsa mavuto. Izi ndi njira zitatu zomwe zimakhudza IT pamwezi, ngati si tsiku lililonse. Mawonekedwe athunthu a netiweki adapangidwa kuti apereke chidziwitso chokulirapo pamawonekedwe akhungu, magwiridwe antchito komanso kutsata.
Kodi mungatani kwenikweni ndi mawonekedwe a netiweki?
Pali mitundu isanu ndi umodzi yogwiritsira ntchito mawonekedwe a netiweki yomwe imatha kuwonetsa mtengo wake. Izi:
- Kupititsa patsogolo chitetezo cha intaneti
- Kupereka mwayi wokhala ndi kuchepetsa mtengo
- Kufulumizitsa kuthetsa mavuto ndikuwonjezera kudalirika kwa maukonde
- Kuchotsa mawanga akhungu pa intaneti
- Kukometsa maukonde ndi magwiridwe antchito
- Kulimbikitsa kutsata malamulo
M'munsimu muli zitsanzo za kagwiritsidwe ntchito.
Chitsanzo No. 1 - kusefa kwa data pazotsatira zachitetezo zomwe zili pamzere (pamzere), kumawonjezera magwiridwe antchito awa
Cholinga cha njirayi ndikugwiritsa ntchito broker packet network (NPB) kusefa deta yomwe ili pachiwopsezo chochepa (mwachitsanzo, kanema ndi mawu) kuti ichotse pakuwunika kwachitetezo (IPS), kupewa kutayika kwa data (DLP) , web application firewall (WAF), etc.). Magalimoto "osasangalatsa" awa amatha kuzindikirika ndikubwereranso ku by-pass switch ndikutumizidwa ku netiweki. Ubwino wa yankholi ndikuti WAF kapena IPS sayenera kuwononga processor resources (CPU) kusanthula deta yosafunikira. Ngati maukonde anu ali ndi kuchuluka kwa data yamtunduwu, mungafune kugwiritsa ntchito izi ndikuchepetsa zovuta pazida zanu zachitetezo.
Makampani akhala ndi milandu yomwe mpaka 35% ya anthu omwe ali pachiwopsezo chocheperako adachotsedwa pakuwunika kwa IPS. Izi zimangowonjezera bandwidth ya IPS ndi 35% ndipo zikutanthauza kuti mutha kuyimitsa kugula IPS yowonjezera kapena kukweza. Tonse tikudziwa kuti kuchuluka kwa magalimoto pa netiweki kukuchulukirachulukira, ndiye nthawi ina mudzafunika IPS yochita bwino. Ndi funso ngati mukufuna kuchepetsa ndalama kapena ayi.
Chitsanzo No. 2 - kusinthanitsa katundu kumawonjezera moyo wa zipangizo za 1-10Gbps pa intaneti ya 40Gbps
Njira yachiwiri yogwiritsira ntchito ikuphatikizapo kuchepetsa mtengo wa umwini wa zida zapaintaneti. Izi zimatheka pogwiritsa ntchito ma packet brokers (NPBs) kuti azitha kuyendetsa magalimoto ku zida zachitetezo ndi zowunikira. Kodi kusanja katundu kungathandize bwanji mabizinesi ambiri? Choyamba, kuwonjezeka kwa magalimoto pa intaneti ndizochitika zofala kwambiri. Koma nanga bwanji kuyang'anira momwe mphamvu ikukulirakulira? Mwachitsanzo, ngati mukukweza core network kuchoka pa 1 Gbps kupita ku 10 Gbps, mudzafunika zida 10 Gbps kuti muwunikire bwino. Ngati muwonjezera liwiro ku 40 Gbps kapena 100 Gbps, ndiye pa liwiro lotere kusankha kwa zida zowunikira kumakhala kochepa kwambiri ndipo mtengo wake ndi wokwera kwambiri.
Ogulitsa phukusi amapereka kuthekera kokwanira kophatikiza ndi kuwongolera katundu. Mwachitsanzo, 40 Gbps traffic balancing imalola kuyang'anira kuchuluka kwa magalimoto kuti agawidwe pakati pa zida zingapo za 10 Gbps. Mutha kuwonjezera moyo wa zida za 10 Gbps mpaka mutakhala ndi ndalama zokwanira zogulira zida zodula kwambiri zomwe zimatha kuthana ndi ma data apamwamba.
Chitsanzo china ndikuphatikiza zida pamalo amodzi ndikuwadyetsa deta yofunikira kuchokera kwa broker phukusi. Nthawi zina njira zosiyanasiyana zomwe zimagawidwa pa intaneti zimagwiritsidwa ntchito. Kafukufuku wochokera ku Enterprise Management Associates (EMA) akuwonetsa kuti 32% ya mayankho amabizinesi sagwiritsidwa ntchito mochepera, kapena kuchepera 50%. Kuyika zida pakati ndi kusanja katundu kumakupatsani mwayi wophatikiza zinthu ndikuwonjezera kugwiritsa ntchito zida zochepa. Nthawi zambiri mutha kudikirira kuti mugule zida zowonjezera mpaka mtengo wanu wogwiritsa ntchito ukwera mokwanira.
Chitsanzo No. 3 - kuthetsa mavuto kuchepetsa / kuthetsa kufunikira kopeza zilolezo za Change Board
Zida zowonekera (TAPs, NPBs ...) zitayikidwa pa intaneti, simudzasowa kusintha pa intaneti. Izi zimakupatsani mwayi wowongolera njira zothetsera mavuto kuti muwongolere bwino.
Mwachitsanzo, TAP ikangoyikidwa ("ikhazikitseni ndikuyiwalani"), imatumiza mosabisa kope la magalimoto onse ku NPB. Izi zili ndi mwayi waukulu wochotsa zovuta zambiri zaufulu kupeza zilolezo zosintha maukonde. Mukayikanso phukusi la broker, mudzakhala ndi mwayi wopeza pafupifupi zonse zofunika pakuthana ndi mavuto.
Ngati palibe chifukwa chosinthira, mutha kudumpha magawo ovomereza zosintha ndikupita mwachindunji kukonzanso. Njira yatsopanoyi imakhudza kwambiri kuchepetsa Mean Time to Repair (MTTR). Kafukufuku akuwonetsa kuti ndizotheka kuchepetsa MTTR mpaka 80%.
Nkhani Yophunzira #4 - Luntha la Kugwiritsa Ntchito, Kugwiritsa Ntchito Zosefera ndi Kusunga Ma Data Kuti Kupititsa patsogolo Chitetezo Chochita Bwino
Kodi Application Intelligence ndi chiyani? Tekinoloje iyi ikupezeka kuchokera ku IXIA Packet Brokers (NPBs). Izi ndizochita zapamwamba zomwe zimakupatsani mwayi wopitilira kusefa kwa paketi ya 2-4 (mitundu ya OSI) ndikusunthira mpaka 7 (wosanjikiza). Ubwino wake ndikuti machitidwe a ogwiritsa ntchito ndi ogwiritsa ntchito komanso zomwe zili patsamba zitha kupangidwa ndikutumizidwa kunja mwanjira iliyonse yomwe mukufuna - mapaketi aiwisi, mapaketi osefedwa, kapena zambiri za NetFlow (IxFlow). Madipatimenti a IT amatha kuzindikira ntchito zobisika zapaintaneti, kuchepetsa ziwopsezo zachitetezo cha pa intaneti, ndikuchepetsa kutsika kwa maukonde ndi/kapena kukonza magwiridwe antchito a netiweki. Mawonekedwe apadera a mapulogalamu odziwika komanso osadziwika amatha kudziwika, kugwidwa ndikugawidwa ndi zida zapadera zowunikira ndi chitetezo.
- Kuzindikiritsa mapulogalamu okayikitsa/osadziwika
- kuzindikira khalidwe lokayikitsa ndi malo, mwachitsanzo, wogwiritsa ntchito wochokera ku North Korea amalumikiza ku seva yanu ya FTP ndikusamutsa deta
- SSL decryption kuti muwone ndikuwunika zomwe zingawopseze
- kusanthula kulephera kwa ntchito
- kusanthula kuchuluka kwa magalimoto ndi kukula kwa kasamalidwe kazinthu zogwira ntchito komanso kulosera zakukula
- kubisa deta tcheru (ma kirediti kadi, zidziwitso ...) musanatumize
Mawonekedwe a Visibility Intelligence amapezeka muzinthu zakuthupi komanso zenizeni (Cloud Lens Private) phukusi la IXIA (NPB), komanso "mitambo" yapagulu - Cloud Lens Public:
Kuphatikiza pa magwiridwe antchito a NetStack, PacketStack ndi AppStack:
Posachedwapa, magwiridwe antchito awonjezedwanso: SecureStack (kukhathamiritsa kukonzedwa kwa magalimoto achinsinsi), MobileStack (ya ogwiritsa ntchito mafoni) ndi TradeStack (poyang'anira ndi kusefa deta yazachuma):
anapezazo
Mayankho a mawonekedwe a netiweki ndi zida zamphamvu zomwe zimatha kukhathamiritsa kuyang'anira maukonde ndi zomangamanga zomwe zimapanga kusonkhanitsa kofunikira ndikugawana zofunikira.
Kugwiritsa ntchito kumalola:
- perekani mwayi wopeza zofunikira zenizeni zomwe zikufunika pakuwunika ndi kuthetsa mavuto
- onjezani / chotsani njira zotetezera, kuyang'anira zonse zomwe zili pamzere ndi kunja kwa gulu
- kuchepetsa MTTR
- onetsetsani kuyankha mwachangu kumavuto
- fufuzani zowopsa kwambiri
- kuthetsa zivomerezo zambiri za boma
- kuchepetsa zotsatira zachuma za kuthyolako mwa kulumikiza mwamsanga njira zoyenera pa intaneti ndikuchepetsa MTTR
- kuchepetsa mtengo ndi ntchito yokhazikitsa doko la SPAN
Source: www.habr.com