{"id":86610,"date":"2020-06-27T19:42:32","date_gmt":"2020-06-27T17:42:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds"},"modified":"2020-06-27T19:42:32","modified_gmt":"2020-06-27T17:42:32","slug":"nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","title":{"rendered":"Configur\u0103m exportul IPFIX pe VMware vSphere Distributed Switch (VDS) \u0219i monitorizarea ulterioar\u0103 a traficului \u00een Solarwinds","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bun\u0103, Habr! La \u00eenceputul lunii iulie, Solarwinds a anun\u021bat lansarea unei noi versiuni a platformei Orion Solarwinds<\/a><\/noindex> \u2014 2020.2. Una dintre nout\u0103\u021bile din modulul Network Traffic Analyzer (NTA) este suportul pentru recunoa\u0219terea traficului IPFIX de la VMware VDS. <\/p>\n

\"Configur\u0103m
\n
\nAnaliza traficului \u00eentr-un mediu de comutator virtual este important\u0103 pentru \u00een\u021belegerea distribu\u021biei sarcinii pe infrastructura virtual\u0103. Prin analiza traficului, se pot descoperi, de asemenea, migrarea ma\u0219inilor virtuale. \u00cen acest articol, vom vorbi despre set\u0103rile de export IPFIX de pe partea comutatorului virtual VMware \u0219i despre capabilit\u0103\u021bile Solarwinds de a lucra cu acesta. La finalul articolului va fi un link c\u0103tre o demonstra\u021bie online Solarwinds (accesibil\u0103 f\u0103r\u0103 \u00eenregistrare \u0219i nu este o figur\u0103 de stil). Detalii sub titlu.
\n<\/a><\/noindex>
\nPentru recunoa\u0219terea corect\u0103 a traficului de la VDS, mai \u00eent\u00e2i trebuie s\u0103 configura\u021bi conexiunea prin interfa\u021ba vCenter, iar apoi analiza traficului \u0219i afi\u0219area punctelor de schimb de trafic primite de la hypervizori. Dac\u0103 se dore\u0219te, comutatorul poate fi configurat pentru a primi toate \u00eenregistr\u0103rile IPFIX de la o adres\u0103 IP legat\u0103 de VDS, dar, \u00een cele mai multe cazuri, este mai informativ s\u0103 vezi datele extrase din traficul primit de la fiecare hypervizor. Traficul care sose\u0219te va reprezenta conexiunile de la sau c\u0103tre ma\u0219inile virtuale situate pe hypervizori.<\/p>\n

O alt\u0103 op\u021biune de configurare disponibil\u0103 este exportul numai al fluxurilor interne de date. Aceast\u0103 op\u021biune exclud fluxurile care sunt procesate pe un comutator fizic extern \u0219i previne duplicarea \u00eenregistr\u0103rilor de trafic pentru conexiunile de la \u0219i c\u0103tre VDS. Dar este mai util s\u0103 dezactiva\u021bi aceast\u0103 op\u021biune \u0219i s\u0103 observa\u021bi toate fluxurile vizibile \u00een VDS.<\/p>\n

Configurarea traficului de la VDS<\/h1>\n

\nS\u0103 \u00eencepem cu ad\u0103ugarea unui exemplat vCenter \u00een Solarwinds. Dup\u0103 aceasta, NTA va avea informa\u021biile despre configura\u021bia platformei de virtualizare.<\/p>\n

Accesa\u021bi meniul \u201eManage Nodes\u201d, apoi \u201eSettings\u201d \u0219i selecta\u021bi \u201eAdd Node\u201d. Dup\u0103 aceea, trebuie s\u0103 introduce\u021bi adresa IP sau numele de domeniu complet al exemplatului vCenter \u0219i s\u0103 alege\u021bi \u201eVMware, Hyper-V, or Nutanix entities\u201d ca metod\u0103 de sondare.<\/p>\n

\"Configur\u0103m
\n
\nAccesa\u021bi fereastra de dialog pentru ad\u0103ugarea nodului, ad\u0103uga\u021bi datele de autentificare ale exemplatului vCenter \u0219i testa\u021bi-le pentru a finaliza configurarea.<\/p>\n

\"Configur\u0103m
\n
\n\u00centr-o perioad\u0103 de timp, va avea loc un sondaj ini\u021bial al instan\u021bei vCenter, de obicei \u00eentre 10 \u0219i 20 de minute. Trebuie s\u0103 a\u0219tepta\u021bi finalizarea acestuia, iar apoi s\u0103 activa\u021bi exportul IPFIX pe VDS.<\/p>\n

Dup\u0103 configurarea monitoriz\u0103rii vCenter \u0219i ob\u021binerea datelor de inventar pentru configurarea platformei de virtualizare, vom activa exportul \u00eenregistr\u0103rilor IPFIX pe switch. Cea mai rapid\u0103 modalitate de a face acest lucru este prin intermediul clientului vSphere. Accesa\u021bi tab-ul \u201eNetworking\u201d, alege\u021bi VDS \u0219i \u00een tab-ul \u201eConfigure\u201d g\u0103si\u021bi set\u0103rile actuale pentru NetFlow. VMware folose\u0219te termenul \u201eNetFlow\u201d pentru a desemna exportul fluxului, dar protocolul efectiv utilizat este IPFIX.<\/p>\n

\"Configur\u0103m
\n
\nPentru a activa exportul fluxului, selecta\u021bi \u201eSettings\u201d din meniul \u201eActions\u201d din partea de sus \u0219i merge\u021bi la \u201eEdit NetFlow\u201d.<\/p>\n

\"Configur\u0103m
\n
\n\u00cen aceast\u0103 fereastr\u0103 de dialog, introduce\u021bi adresa IP a colectorului, care este \u00een acela\u0219i timp o instan\u021b\u0103 Orion. De obicei, se utilizeaz\u0103 portul 2055. Recomand\u0103m s\u0103 l\u0103sa\u021bi c\u00e2mpul \u201eSwitch IP Address\u201d gol, ceea ce va permite primirea \u00eenregistr\u0103rilor de flux provenite direct de la hypervizor. Aceasta va oferi flexibilitate \u00een viitoarea filtrare a fluxului de date din hypervizor.<\/p>\n

L\u0103sa\u021bi c\u00e2mpul \u201eProcess internal flows only\u201d dezactivat, pentru a putea vizualiza toate comunic\u0103rile: at\u00e2t interne, c\u00e2t \u0219i externe.<\/p>\n

Odat\u0103 ce activa\u021bi exportul fluxului pentru VDS, va trebui s\u0103-l activa\u021bi \u0219i pentru grupurile de porturi distribuite de la care dori\u021bi s\u0103 primi\u021bi date. Cea mai simpl\u0103 modalitate de a face acest lucru este s\u0103 face\u021bi clic dreapta pe panoul de navigare VDS \u0219i s\u0103 selecta\u021bi \u201eDistributed Port Group\u201d, apoi \u201eManage Distributed Port Groups\u201d.<\/p>\n

\"Configur\u0103m
\n
\n\"Configur\u0103m
\n
\nSe va deschide o fereastr\u0103 de dialog \u00een care trebuie s\u0103 bifa\u021bi caseta \u201eMonitoring\u201d \u0219i s\u0103 ap\u0103sa\u021bi \u201eNext\u201d.<\/p>\n

La pasul urm\u0103tor, pute\u021bi selecta grupuri de porturi specifice sau toate grupurile.<\/p>\n

\"Configur\u0103m
\n
\nLa pasul urm\u0103tor, comuta\u021bi NetFlow pe \u201eEnabled\u201d.<\/p>\n

\"Configur\u0103m
\n
\nC\u00e2nd exportul fluxului este activat at\u00e2t pe VDS, c\u00e2t \u0219i pe grupurile de porturi distribuite, ve\u021bi observa c\u0103 \u00eenregistr\u0103rile fluxurilor pentru hypervizori \u00eencep s\u0103 ajung\u0103 \u00een instan\u021ba NTA.<\/p>\n

\"Configur\u0103m
\n
\nHypervizorii pot fi v\u0103zu\u021bi \u00een lista surselor de date ale fluxului din pagina \u201eManage Flow Sources\u201d \u00een NTA. Schimba\u021bi pe \u201eNodes\u201d.<\/p>\n

\"Configur\u0103m
\n
\nRezultatele configur\u0103rii le pute\u021bi vedea pe un stand demo<\/a><\/noindex>. Observa\u021bi posibilitatea de a p\u0103trunde la nivelul nodului, protocolului de interac\u021biune etc. <\/p>\n

\"Configur\u0103m
\n
\nIntegr\u0103rile cu alte module Solarwinds \u00eentr-o singur\u0103 interfa\u021b\u0103 permit realizarea de investiga\u021bii din diverse perspective: s\u0103 vedem care utilizatori s-au conectat la ma\u0219ina virtual\u0103, performan\u021bele serverului (vizualiza\u021bi demo)<\/a><\/noindex>, \u0219i aplica\u021biile acestuia, s\u0103 vedem dispozitivele de re\u021bea asociate \u0219i multe altele. De exemplu, dac\u0103 \u00een infrastructura dvs. de re\u021bea se folose\u0219te protocolul NBAR2, Solarwinds NTA poate recunoa\u0219te cu succes traficul din Zoom<\/a><\/noindex>, Teams<\/a><\/noindex> sau Webex<\/a><\/noindex>.<\/p>\n

Scopul principal al articolului este de a ar\u0103ta simplitatea configur\u0103rii monitoriz\u0103rii \u00een Solarwinds \u0219i completitudinea datelor colectate. \u00cen Solarwinds ave\u021bi \u0219ansa de a vedea imaginea de ansamblu a ceea ce se \u00eent\u00e2mpl\u0103. Dac\u0103 dori\u021bi o prezentare a solu\u021biei sau s\u0103 verifica\u021bi totul pe cont propriu, l\u0103sa\u021bi o solicitare \u00een formularele de contact<\/a><\/noindex> sau suna\u021bi.<\/p>\n

Pe Habr avem \u0219i un articol despre solu\u021bii gratuite Solarwinds<\/a><\/noindex>.<\/p>\n

Aboneaz\u0103-te la grupul de pe Facebook<\/a><\/noindex>.
\n
Sursa: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440! \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043b\u044f Solarwinds \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u0440\u0435\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Orion Solarwinds \u2014 2020.2. \u041e\u0434\u043d\u043e \u0438\u0437 \u043d\u043e\u0432\u043e\u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 Network Traffic Analyzer (NTA) \u2014 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f IPFIX-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442 VMware VDS. \u0410\u043d\u0430\u043b\u0438\u0437 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430 \u0432\u0430\u0436\u0435\u043d \u0434\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f \u0442\u0440\u0430\u0444\u0438\u043a, \u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u0412 \u044d\u0442\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86611,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-86610","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Configurarea exportului IPFIX pe VMware vSphere Distributed Switch (VDS) \u0219i monitorizarea ulterioar\u0103 a traficului \u00een Solarwinds | ProHoster","description":"Salut, Habr!","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c \u044d\u043a\u0441\u043f\u043e\u0440\u0442 IPFIX \u043d\u0430 VMware vSphere Distributed Switch (VDS) \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 Solarwinds | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440!","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-27T17:42:32+00:00","article:modified_time":"2020-06-27T17:42:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86610","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:12:22","updated":"2022-09-30 12:49:44","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/86610","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=86610"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/86610\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/86611"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=86610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=86610"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=86610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}