{"id":86610,"date":"2020-06-27T19:42:32","date_gmt":"2020-06-27T17:42:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds"},"modified":"2020-06-27T19:42:32","modified_gmt":"2020-06-27T17:42:32","slug":"nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","title":{"rendered":"Configurando a exporta\u00e7\u00e3o IPFIX no VMware vSphere Distributed Switch (VDS) e o monitoramento subsequente do tr\u00e1fego no Solarwinds","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ol\u00e1, Habr! No in\u00edcio de julho, a Solarwinds anunciou o lan\u00e7amento de uma nova vers\u00e3o da plataforma Orion Solarwinds<\/a><\/noindex> \u2014 2020.2. Uma das novidades no m\u00f3dulo Network Traffic Analyzer (NTA) \u00e9 o suporte \u00e0 detec\u00e7\u00e3o de tr\u00e1fego IPFIX do VMware VDS. <\/p>\n

\"Configurando
\n
\nA an\u00e1lise de tr\u00e1fego em um ambiente de switch virtual \u00e9 importante para entender a distribui\u00e7\u00e3o de carga na infraestrutura virtual. Analisando o tr\u00e1fego, tamb\u00e9m \u00e9 poss\u00edvel detectar a migra\u00e7\u00e3o de m\u00e1quinas virtuais. Neste artigo, falaremos sobre as configura\u00e7\u00f5es de exporta\u00e7\u00e3o IPFIX do lado do switch virtual VMware e as capacidades da Solarwinds em trabalhar com isso. No final do artigo, haver\u00e1 um link para a demonstra\u00e7\u00e3o online da Solarwinds (acesso sem registro e isso n\u00e3o \u00e9 uma figura de linguagem). Detalhes abaixo.
\n<\/a><\/noindex>
\nPara a correta detec\u00e7\u00e3o do tr\u00e1fego do VDS, primeiro \u00e9 necess\u00e1rio configurar a conex\u00e3o atrav\u00e9s da interface vCenter, e s\u00f3 depois analisar o tr\u00e1fego e exibir os pontos de troca de tr\u00e1fego recebidos dos hipervisores. Se desejado, o switch pode ser configurado para receber todos os registros IPFIX de um \u00fanico endere\u00e7o IP vinculado ao VDS, mas, na maioria dos casos, \u00e9 mais informativo ver os dados extra\u00eddos do tr\u00e1fego recebido de cada hipervisor. O tr\u00e1fego que chega representar\u00e1 as conex\u00f5es de ou para m\u00e1quinas virtuais localizadas nos hipervisores.<\/p>\n

Outra op\u00e7\u00e3o de configura\u00e7\u00e3o dispon\u00edvel \u00e9 exportar apenas fluxos internos de dados. Esta op\u00e7\u00e3o exclui fluxos que s\u00e3o processados em um switch f\u00edsico externo, evitando a duplica\u00e7\u00e3o de registros de tr\u00e1fego para conex\u00f5es de e para o VDS. Contudo, \u00e9 mais \u00fatil desativar essa op\u00e7\u00e3o e observar todos os fluxos que s\u00e3o vis\u00edveis no VDS.<\/p>\n

Configura\u00e7\u00e3o do tr\u00e1fego do VDS<\/h1>\n

\nCome\u00e7aremos adicionando uma inst\u00e2ncia do vCenter na Solarwinds. Ap\u00f3s isso, o NTA ter\u00e1 as informa\u00e7\u00f5es sobre a configura\u00e7\u00e3o da plataforma de virtualiza\u00e7\u00e3o.<\/p>\n

V\u00e1 at\u00e9 o menu \u2018Gerenciar N\u00f3s\u2019, depois \u2018Configura\u00e7\u00f5es\u2019 e selecione \u2018Adicionar N\u00f3\u2019. Em seguida, insira o endere\u00e7o IP ou o nome de dom\u00ednio completo da inst\u00e2ncia do vCenter e escolha \u2018Entidades VMware, Hyper-V ou Nutanix\u2019 como m\u00e9todo de sondagem.<\/p>\n

\"Configurando
\n
\nAbra a caixa de di\u00e1logo para adicionar um n\u00f3, adicione as credenciais da inst\u00e2ncia do vCenter e teste-as para concluir a configura\u00e7\u00e3o.<\/p>\n

\"Configurando
\n
\nAp\u00f3s algum tempo, a sondagem inicial da inst\u00e2ncia do vCenter ser\u00e1 realizada, geralmente entre 10 a 20 minutos. \u00c9 necess\u00e1rio aguardar a conclus\u00e3o antes de ativar a exporta\u00e7\u00e3o IPFIX no VDS.<\/p>\n

Ap\u00f3s configurar o monitoramento do vCenter e coletar os dados de invent\u00e1rio sobre a configura\u00e7\u00e3o da plataforma de virtualiza\u00e7\u00e3o, ativaremos a exporta\u00e7\u00e3o de registros IPFIX no switch. A maneira mais r\u00e1pida de fazer isso \u00e9 por meio do cliente vSphere. Vamos para a aba \"Networking\", selecionamos o VDS e na aba \"Configure\" encontraremos as configura\u00e7\u00f5es atuais para NetFlow. A VMware usa o termo \"NetFlow\" para se referir \u00e0 exporta\u00e7\u00e3o de fluxo, mas o protocolo real utilizado \u00e9 o IPFIX.<\/p>\n

\"Configurando
\n
\nPara ativar a exporta\u00e7\u00e3o do fluxo, selecione \"Settings\" no menu \"Actions\" no topo e v\u00e1 para \"Edit NetFlow\".<\/p>\n

\"Configurando
\n
\nNesta janela de di\u00e1logo, insira o endere\u00e7o IP do coletor, que tamb\u00e9m \u00e9 uma inst\u00e2ncia do Orion. O porta padr\u00e3o geralmente utilizada \u00e9 a 2055. Recomendamos deixar o campo \"Switch IP Address\" em branco, o que resultar\u00e1 na recep\u00e7\u00e3o dos registros de fluxo provenientes exclusivamente dos hipervisores. Isso proporcionar\u00e1 flexibilidade ao filtrar o fluxo de dados dos hipervisores posteriormente.<\/p>\n

Mantenha a op\u00e7\u00e3o \"Process internal flows only\" desmarcada, permitindo visualizar todas as comunica\u00e7\u00f5es: tanto internas quanto externas.<\/p>\n

Assim que ativar a exporta\u00e7\u00e3o do fluxo para o VDS, voc\u00ea tamb\u00e9m precisar\u00e1 ativ\u00e1-la para os grupos de portas distribu\u00eddos dos quais deseja receber dados. A maneira mais simples de fazer isso \u00e9 clicar com o bot\u00e3o direito na navega\u00e7\u00e3o do VDS e selecionar \"Distributed Port Group\", em seguida escolher \"Manage Distributed Port Groups\".<\/p>\n

\"Configurando
\n
\n\"Configurando
\n
\nUma janela de di\u00e1logo ser\u00e1 aberta, na qual voc\u00ea deve marcar a op\u00e7\u00e3o \"Monitoring\" e clicar em \"Next\".<\/p>\n

Na pr\u00f3xima etapa, voc\u00ea pode escolher grupos de portas espec\u00edficos ou todos os grupos.<\/p>\n

\"Configurando
\n
\nNa pr\u00f3xima etapa, ative o NetFlow selecionando \"Enabled\".<\/p>\n

\"Configurando
\n
\nQuando a exporta\u00e7\u00e3o do fluxo estiver ativada no VDS e nos grupos de portas distribu\u00eddos, voc\u00ea ver\u00e1 que os registros de fluxo dos hipervisores come\u00e7am a ser recebidos na inst\u00e2ncia do NTA.<\/p>\n

\"Configurando
\n
\nOs hipervisores podem ser vistos na lista de fontes de dados de fluxo na p\u00e1gina \"Manage Flow Sources\" no NTA. Mude para \"Nodes\".<\/p>\n

\"Configurando
\n
\nOs resultados da configura\u00e7\u00e3o podem ser vistos no ambiente de demonstra\u00e7\u00e3o<\/a><\/noindex>. Observe a possibilidade de acessar o n\u00edvel do n\u00f3, protocolo de intera\u00e7\u00e3o, etc. <\/p>\n

\"Configurando
\n
\nA integra\u00e7\u00e3o com outros m\u00f3dulos da Solarwinds em uma \u00fanica interface permite realizar investiga\u00e7\u00f5es sob diferentes perspectivas: ver quais usu\u00e1rios acessaram a m\u00e1quina virtual, o desempenho do servidor (ver demonstra\u00e7\u00e3o)<\/a><\/noindex>, e aplicativos nele, visualizar dispositivos de rede relacionados e muito mais. Por exemplo, se o protocolo NBAR2 estiver sendo usado em sua infraestrutura de rede, o Solarwinds NTA pode reconhecer com sucesso o tr\u00e1fego de Zoom<\/a><\/noindex>, Teams<\/a><\/noindex> ou Webex<\/a><\/noindex>.<\/p>\n

O objetivo principal deste artigo \u00e9 mostrar a simplicidade da configura\u00e7\u00e3o de monitoramento no Solarwinds e a plenitude dos dados coletados. No Solarwinds, h\u00e1 uma chance de ver o quadro completo do que est\u00e1 acontecendo. Se voc\u00ea deseja uma apresenta\u00e7\u00e3o da solu\u00e7\u00e3o ou verificar tudo na sua configura\u00e7\u00e3o, deixe seu pedido em formul\u00e1rio de feedback<\/a><\/noindex> ou ligue.<\/p>\n

No Habr, tamb\u00e9m temos um artigo sobre solu\u00e7\u00f5es gratuitas da Solarwinds<\/a><\/noindex>.<\/p>\n

Siga a nossa grupo no Facebook<\/a><\/noindex>.
\n
Fonte: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440! \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043b\u044f Solarwinds \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u0440\u0435\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Orion Solarwinds \u2014 2020.2. \u041e\u0434\u043d\u043e \u0438\u0437 \u043d\u043e\u0432\u043e\u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 Network Traffic Analyzer (NTA) \u2014 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f IPFIX-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442 VMware VDS. \u0410\u043d\u0430\u043b\u0438\u0437 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430 \u0432\u0430\u0436\u0435\u043d \u0434\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f \u0442\u0440\u0430\u0444\u0438\u043a, \u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u0412 \u044d\u0442\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86611,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-86610","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Configurando a exporta\u00e7\u00e3o IPFIX no VMware vSphere Distributed Switch (VDS) e o monitoramento subsequente do tr\u00e1fego no Solarwinds | ProHoster","description":"Ol\u00e1, Habr!","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c \u044d\u043a\u0441\u043f\u043e\u0440\u0442 IPFIX \u043d\u0430 VMware vSphere Distributed Switch (VDS) \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 Solarwinds | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440!","og:url":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-27T17:42:32+00:00","article:modified_time":"2020-06-27T17:42:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86610","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:12:22","updated":"2022-09-30 12:49:44","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/86610","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=86610"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/86610\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/86611"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=86610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=86610"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=86610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}