{"id":86610,"date":"2020-06-27T19:42:32","date_gmt":"2020-06-27T17:42:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds"},"modified":"2020-06-27T19:42:32","modified_gmt":"2020-06-27T17:42:32","slug":"nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","title":{"rendered":"Nastavujeme export IPFIX na VMware vSphere Distributed Switch (VDS) a n\u00e1sledn\u00fd monitoring prenosu v Solarwinds","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ahoj, Habr! Za\u010diatkom j\u00fala Solarwinds ozn\u00e1mil vydanie nov\u00fdch verzi\u00ed platformy Orion Solarwinds<\/a><\/noindex> \u2014 2020.2. Jedn\u00fdm z nov\u00fdch prvkov v module Network Traffic Analyzer (NTA) je podpora rozpozn\u00e1vania IPFIX-prenosov od VMware VDS. <\/p>\n

\"Nastavujeme
\n
\nAnal\u00fdza prenosov v prostred\u00ed virtu\u00e1lneho prep\u00edna\u010da je d\u00f4le\u017eit\u00e1 pre pochopenie rozlo\u017eenia z\u00e1\u0165a\u017ee na virtu\u00e1lnej infra\u0161trukt\u00fare. Analyzovan\u00edm prenosov je mo\u017en\u00e9 tie\u017e odhali\u0165 migr\u00e1ciu virtu\u00e1lnych strojov. V tomto \u010dl\u00e1nku sa podel\u00edme o nastavenia exportu IPFIX na strane virtu\u00e1lneho prep\u00edna\u010da VMware a o mo\u017enostiach Solarwinds pri jeho spr\u00e1ve. Na konci \u010dl\u00e1nku n\u00e1jdete odkaz na online demo Solarwinds (pr\u00edstup bez registr\u00e1cie a nie je to len pr\u00e1zdna fr\u00e1za). Podrobnosti n\u00e1jdete ni\u017e\u0161ie.
\n<\/a><\/noindex>
\nPre spr\u00e1vne rozpozn\u00e1vanie prenosov z VDS je najsk\u00f4r potrebn\u00e9 nastavi\u0165 pripojenie cez rozhranie vCenter a potom analyzova\u0165 prenosy a zobrazi\u0165 body v\u00fdmeny prenosov z\u00edskan\u00fdch od hyperv\u00edzorov. Ak si prajete, prep\u00edna\u010d m\u00f4\u017ee by\u0165 nastaven\u00fd na prij\u00edmanie v\u0161etk\u00fdch z\u00e1znamov IPFIX z jednej IP adresy priradenej k VDS, ale vo v\u00e4\u010d\u0161ine pr\u00edpadov je u\u017eito\u010dnej\u0161ie vidie\u0165 d\u00e1ta extrahovan\u00e9 z prenosov z\u00edskan\u00fdch od ka\u017ed\u00e9ho hyperv\u00edzora. Prenosy, ktor\u00e9 prich\u00e1dzaj\u00fa, bud\u00fa predstavova\u0165 spojenia od alebo k virtu\u00e1lnym strojom umiestnen\u00fdm na hyperv\u00edzoroch.<\/p>\n

\u010eal\u0161ou dostupnou mo\u017enos\u0165ou konfigur\u00e1cie je export iba intern\u00fdch prenosov d\u00e1t. T\u00e1to mo\u017enos\u0165 vylu\u010duje prenosy, ktor\u00e9 sa spracov\u00e1vaj\u00fa na vonkaj\u0161om fyzickom prep\u00edna\u010di, a zabra\u0148uje duplicite z\u00e1znamov prenosov pre spojenia od a k VDS. Ale je u\u017eito\u010dnej\u0161ie t\u00fato mo\u017enos\u0165 vypn\u00fa\u0165 a sledova\u0165 v\u0161etky prenosy, ktor\u00e9 s\u00fa vidite\u013en\u00e9 v VDS.<\/p>\n

Nastavenie prenosu z VDS<\/h1>\n

\nZa\u010dneme prid\u00e1van\u00edm in\u0161tancie vCenter do Solarwinds. Po tom bude NTA obsahova\u0165 inform\u00e1cie o konfigur\u00e1cii platformy virtualiz\u00e1cie.<\/p>\n

Prejdite do menu \u201eSpr\u00e1va uzlov\u201c, potom do sekcie \u201eNastavenia\u201c a vyberte \u201ePrida\u0165 uzol\u201c. Potom je potrebn\u00e9 zada\u0165 IP adresu alebo \u00fapln\u00fd dom\u00e9nov\u00fd n\u00e1zov in\u0161tancie vCenter a vybra\u0165 \u201eVMware, Hyper-V alebo Nutanix entity\u201c ako sp\u00f4sob dotazu.<\/p>\n

\"Nastavujeme
\n
\nPrejdite do dial\u00f3gov\u00e9ho okna na pridanie uzla, pridajte prihlasovacie \u00fadaje in\u0161tancie vCenter a otestujte ich na dokon\u010denie nastavenia.<\/p>\n

\"Nastavujeme
\n
\nPo ur\u010dit\u00fa dobu bude prebieha\u0165 po\u010diato\u010dn\u00fd dotaz in\u0161tancie vCenter, zvy\u010dajne 10-20 min\u00fat. Je potrebn\u00e9 po\u010dka\u0165 na jeho dokon\u010denie a a\u017e potom aktivova\u0165 export IPFIX na VDS.<\/p>\n

Po nastaven\u00ed monitorovania vCenter a z\u00edskan\u00ed invent\u00e1rnych \u00fadajov o konfigur\u00e1cii virtualiza\u010dnej platformy, povol\u00edme na prep\u00edna\u010di export z\u00e1znamov IPFIX. Najr\u00fdchlej\u0161\u00ed sp\u00f4sob, ako to urobi\u0165, je cez klienta vSphere. Prejdeme na kartu \u201eNetworking\u201c, vyberieme VDS a na karte \u201eConfigure\u201c n\u00e1jdeme aktu\u00e1lne nastavenia pre NetFlow. VMware pou\u017e\u00edva term\u00edn \u201eNetFlow\u201c na ozna\u010denie exportu toku, ale skuto\u010dn\u00fd protokol, ktor\u00fd sa pou\u017e\u00edva, je IPFIX.<\/p>\n

\"Nastavujeme
\n
\nAby ste povolili export toku, vyberte \u201eSettings\u201c v menu \u201eActions\u201c na vrchu a prejdite na \u201eEdit NetFlow\u201c.<\/p>\n

\"Nastavujeme
\n
\nV tomto dial\u00f3govom okne zadajte IP adresu zbern\u00e9ho miesta, ktor\u00e9 je z\u00e1rove\u0148 in\u0161tanciou Orion. Predvolen\u00fd port je zvy\u010dajne 2055. Odpor\u00fa\u010dame necha\u0165 pole \u201eSwitch IP Address\u201c pr\u00e1zdne, \u010do povedie k z\u00edskaniu tokov\u00fdch z\u00e1znamov, ktor\u00e9 s\u00fa prij\u00edman\u00e9 priamo od hyperv\u00edzorov. To poskytne flexibilitu pri \u010fal\u0161ej filtr\u00e1cii toku \u00fadajov od hyperv\u00edzorov.<\/p>\n

Nechajte pole \u201eProcess internal flows only\u201c vypnut\u00e9, \u010do umo\u017en\u00ed vidie\u0165 v\u0161etku komunik\u00e1ciu: ako intern\u00fa, tak extern\u00fa.<\/p>\n

Akon\u00e1hle povol\u00edte export toku pre VDS, budete ho musie\u0165 povoli\u0165 aj pre distribuovan\u00e9 portov\u00e9 skupiny, z ktor\u00fdch chcete z\u00edskava\u0165 \u00fadaje. Najjednoduch\u0161\u00ed sp\u00f4sob, ako to urobi\u0165, je klikn\u00fa\u0165 prav\u00fdm tla\u010didlom na paneli navig\u00e1cie VDS a vybra\u0165 \u201eDistributed Port Group\u201c, a potom \u201eManage Distributed Port Groups\u201c.<\/p>\n

\"Nastavujeme
\n
\n\"Nastavujeme
\n
\nOtvor\u00ed sa dial\u00f3gov\u00e9 okno, v ktorom je potrebn\u00e9 za\u0161krtn\u00fa\u0165 pol\u00ed\u010dko \u201eMonitoring\u201c a stla\u010di\u0165 \u201eNext\u201c.<\/p>\n

Na \u010fal\u0161om kroku m\u00f4\u017eete vybra\u0165 konkr\u00e9tne alebo v\u0161etky portov\u00e9 skupiny.<\/p>\n

\"Nastavujeme
\n
\nNa \u010fal\u0161om kroku prepnete NetFlow na \u201eEnabled\u201c.<\/p>\n

\"Nastavujeme
\n
\nKe\u010f je na VDS a distribuovan\u00fdch portov\u00fdch skupin\u00e1ch povolen\u00fd export toku, uvid\u00edte, \u017ee z\u00e1znamy tokov pre hyperv\u00edzory za\u010d\u00ednaj\u00fa prich\u00e1dza\u0165 do in\u0161tancie NTA.<\/p>\n

\"Nastavujeme
\n
\nHyperv\u00edzory m\u00f4\u017eete vidie\u0165 v zozname zdrojov \u00fadajov toku na str\u00e1nke \u201eManage Flow Sources\u201c v NTA. Prepnite sa na \u201eNodes\u201c.<\/p>\n

\"Nastavujeme
\n
\nV\u00fdsledky nastavenia m\u00f4\u017eete vidie\u0165 na demo-st\u00e1nku<\/a><\/noindex>. V\u0161imnite si mo\u017enos\u0165 podrobne sa zamera\u0165 na \u00farove\u0148 uzla, protokolu interakcie a pod. <\/p>\n

\"Nastavujeme
\n
\nIntegr\u00e1cia s in\u00fdmi modulmi Solarwinds v jednom rozhran\u00ed umo\u017e\u0148uje vies\u0165 vy\u0161etrovanie v r\u00f4znych poh\u013eadoch: presk\u00fama\u0165, ktor\u00ed u\u017e\u00edvatelia sa prihl\u00e1sili na virtu\u00e1lny stroj, v\u00fdkonnos\u0165 servera (pozrie\u0165 demo)<\/a><\/noindex>, a aplik\u00e1ci\u00ed na \u0148om, zobrazi\u0165 s\u00favisiace sie\u0165ov\u00e9 zariadenia a mnoho \u010fal\u0161\u00edch vec\u00ed. Napr\u00edklad, ak vo va\u0161ej sie\u0165ovej infra\u0161trukt\u00fare pou\u017e\u00edvate protokol NBAR2, Solarwinds NTA m\u00f4\u017ee \u00faspe\u0161ne rozpozna\u0165 prenos od Zoom<\/a><\/noindex>, Teams<\/a><\/noindex> alebo Webex<\/a><\/noindex>.<\/p>\n

Hlavn\u00fdm cie\u013eom \u010dl\u00e1nku je uk\u00e1za\u0165 jednoduchos\u0165 nastavenia monitorovania v Solarwinds a \u00faplnos\u0165 zhroma\u017eden\u00fdch \u00fadajov. V Solarwinds m\u00e1te \u0161ancu vidie\u0165 celkov\u00fd obraz toho, \u010do sa deje. Ak chcete prezent\u00e1ciu rie\u0161enia alebo si to chcete vysk\u00fa\u0161a\u0165 vo vlastnej prev\u00e1dzke \u2014 zanechajte \u017eiados\u0165 v formul\u00e1ri sp\u00e4tnej v\u00e4zby<\/a><\/noindex> alebo zavolajte.<\/p>\n

Na Habr m\u00e1me tie\u017e \u010dl\u00e1nok o bezplatn\u00fdch rie\u0161eniach Solarwinds<\/a><\/noindex>.<\/p>\n

Prihl\u00e1ste sa na na\u0161u skupine na Facebooku<\/a><\/noindex>.
\n
Zdroj: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440! \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043b\u044f Solarwinds \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u0440\u0435\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Orion Solarwinds \u2014 2020.2. \u041e\u0434\u043d\u043e \u0438\u0437 \u043d\u043e\u0432\u043e\u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 Network Traffic Analyzer (NTA) \u2014 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f IPFIX-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442 VMware VDS. \u0410\u043d\u0430\u043b\u0438\u0437 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430 \u0432\u0430\u0436\u0435\u043d \u0434\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f \u0442\u0440\u0430\u0444\u0438\u043a, \u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u0412 \u044d\u0442\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86611,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-86610","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nastavujeme export IPFIX na VMware vSphere Distributed Switch (VDS) a n\u00e1sledn\u00e9 monitorovanie prenosu v Solarwinds | ProHoster","description":"Ahoj, Habr!","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c \u044d\u043a\u0441\u043f\u043e\u0440\u0442 IPFIX \u043d\u0430 VMware vSphere Distributed Switch (VDS) \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 Solarwinds | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440!","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/nastraivaem-eksport-ipfix-na-vmware-vsphere-distributed-switch-vds-i-posleduyushhij-monitoring-trafika-v-solarwinds","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-27T17:42:32+00:00","article:modified_time":"2020-06-27T17:42:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86610","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:12:22","updated":"2022-09-30 12:49:44","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/86610","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=86610"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/86610\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/86611"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=86610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=86610"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=86610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}