Shandisa Nyaya dzeNetwork Visibility Solutions
Chii chinonzi Network Visibility?
Kuoneka kunotsanangurwa neWebster’s Dictionary se“kukwanisa kuonwa zviri nyore” kana kuti “mwero wokujeka.” Manetiweki kana kuoneka kwekushandisa kunoreva kubviswa kwemapofu anovhara kugona kuona zviri nyore (kana kuverengera) zviri kuitika panetiweki uye/kana maapplication panetiweki. Kuonekwa uku kunobvumira zvikwata zveIT kukurumidza kutsaura kutyisidzira kwekuchengetedza uye kugadzirisa nyaya dzekuita, pakupedzisira zvichiunza yakanakisa inogoneka yekupedzisira-mushandisi ruzivo.
Imwe nzwisiso ndiyo inobvumira zvikwata zveIT kuti zvitarise uye nekukwenenzvera network pamwe nemaapplication uye IT masevhisi. Ndosaka network, application, uye kuchengetedzwa kuoneka kwakakosha kune chero IT sangano.
Nzira iri nyore yekuwana kuoneka kwenetiweki ndeyekushandisa inooneka dhizaini, inova yakazara-yekupedzisira-kusvika-kumagumo zvivakwa zvinopa muviri uye chaiwo network, application, uye chengetedzo kuoneka.
Kuisa Nheyo yeNetiweki Kuonekwa
Kana iyo yekuonekwa yekuvaka yave panzvimbo, akawanda ekushandisa makesi anowanikwa. Sezvinoratidzwa pazasi, chivakwa chekuona chinomiririra matatu makuru mazinga ekuonekwa: danho rekupinda, danho rekutonga, uye nhanho yekutarisisa.
Uchishandisa zvinhu zvinoratidzwa, IT nyanzvi dzinogona kugadzirisa akasiyana network uye matambudziko ekushandisa. Pane zvikamu zviviri zvezviitiko zvekushandisa:
- Basic Kuonekwa Solutions
- Yakazara network kuoneka
Core kuoneka mhinduro dzinotarisa pakuchengetedza network, kuchengetedza mutengo, uye kugadzirisa matambudziko. Aya ndiwo matatu maitiro anobata IT pamwedzi, kana isiri zuva nezuva, hwaro. Yakazara network kuoneka yakagadzirirwa kupa nzwisiso huru mumapofu mapofu, kuita uye kutevedzera.
Chii chaungaite chaizvo nekuonekwa kwetiweki?
Pane zvitanhatu zvakasiyana zvekushandisa zvekuonekwa kwetiweki izvo zvinogona kunyatso ratidza kukosha. Izvi:
- Yakavandudzwa kuchengetedzwa kwetiweki
-Kupa mikana yekuisa uye kuderedza mari
-Kumhanyisa kugadzirisa uye kuwedzera kuvimbika kwetiweki
- Kubviswa kwetiweki mapofu mavara
-Kugadzirisa network uye kuita kwekushandisa
- Kusimbisa kutevedza kwemitemo
Pazasi pane mimwe mienzaniso chaiyo yekushandisa.
Muenzaniso Nha. 1 - data kusefa kune zvigadziriso zvekuchengetedza zviri mumutsara (mu-mutsara), zvinowedzera kushanda kwemhinduro idzi.
Chinangwa cheiyi sarudzo ndechekushandisa network packet broker (NPB) kusefa yakaderera-njodzi data (somuenzaniso, vhidhiyo uye izwi) kuti isaibatanidze kubva pakuchengetedzwa kwekuongorora (intrusion kudzivirira system (IPS), data kurasikirwa (DLP) , web application firewall (WAF), nezvimwewo). Iyi "isingafadzi" traffic inogona kuzivikanwa uye kupfuudzwa kumashure kune by-pass switch uye kutumirwa mberi kunetiweki. Chakanakira mhinduro iyi ndechekuti iyo WAF kana IPS haifanirwe kutambisa processor zviwanikwa (CPU) ichiongorora zvisina basa data. Kana network yako traffic ine huwandu hwakakura hwemhando iyi yedata, ungangoda kuita chiitiko ichi uye kuderedza mutoro pamidziyo yako yekuchengetedza.
Makambani anga aine zviitiko apo kusvika ku35% yepasi-njodzi network traffic yakabviswa kubva IPS kuongororwa. Izvi zvinongowedzera iyo inoshanda IPS bandwidth ne35% uye zvinoreva kuti unogona kuverengera kutenga imwe IPS kana kusimudzira. Isu tese tinoziva kuti network traffic iri kuwedzera, saka pane imwe nguva iwe unozoda iri nani kuita IPS. Icho chaicho mubvunzo wekuti iwe unoda kuderedza mari kana kwete.
Muenzaniso Nhamba 2 - kuenzanisa kwekutakura kunowedzera hupenyu hwe1-10Gbps zvishandiso pane 40Gbps network
Chechipiri chekushandisa kesi inosanganisira kudzikisa mutengo wevaridzi wetiweki michina. Izvi zvinowanikwa nekushandisa packet broker (NPBs) kuenzanisa traffic kune chengetedzo uye yekutarisa maturusi. Kurodha kuenzanisa kungabatsira sei mabhizinesi mazhinji? Kutanga, kuwedzera kwema network traffic chinhu chinowanzoitika. Asi zvakadini nekutarisa kukanganisa kwekukura kwesimba? Semuyenzaniso, kana uri kusimudzira network yako musimboti kubva 1 Gbps kusvika 10 Gbps, unozoda gumi Gbps maturusi ekutarisa kwakaringana. Kana iwe ukawedzera kukurumidza kusvika ku10 Gbps kana 40 Gbps, ipapo pakumhanya kwakadaro kusarudzwa kwezvishandiso zvekuongorora kuduku zvikuru uye mutengo wakakwirira zvikuru.
Pakeji vatengesi vanopa iyo inodiwa kuunganidza uye mutoro wekuenzanisa kugona. Semuenzaniso, 40 Gbps traffic balancing inobvumira kutarisa traffic kuti igoverwe pakati pezviridzwa gumi zveGbps. Iwe unogona ipapo kuwedzera hupenyu hwe10 Gbps zvishandiso kusvikira wava nemari yakakwana yekutenga maturusi anodhura anogona kubata yakakwirira data data.
Mumwe muenzaniso ndeyekusanganisa maturusi munzvimbo imwechete uye kuvadyisa iyo inodiwa data kubva kune package broker. Dzimwe nguva mhinduro dzakasiyana dzakagoverwa pamusoro pe network dzinoshandiswa. Ongororo data kubva kune Enterprise Management Associates (EMA) inoratidza kuti makumi matatu neshanu muzana ezvemabhizinesi mhinduro haashandiswe, kana isingasviki makumi mashanu%. Tool centralization uye mutoro kuenzanisa zvinokutendera kuti ubatanidze zviwanikwa uye uwedzere kushandiswa uchishandisa mashoma maturusi. Iwe unogona kazhinji kumirira kutenga mamwe maturusi kusvika chiyero chekushandisa chako chakakwira zvakakwana.
Muenzaniso Nha. 3 - kugadzirisa dambudziko kuderedza / kubvisa kudiwa kwekuwana Kushandura Bhodhi mvumo
Kamwe midziyo yekuona (TAPs, NPBs ...) yaiswa panetiweki, hauzowanzo fanira kuita shanduko kunetiweki. Izvi zvinokutendera kuti ugadzirise mamwe maitiro ekugadzirisa matambudziko kuti uvandudze kushanda zvakanaka.
Semuenzaniso, kana TAP yaiswa ("iise uye ukanganwe"), inongoendesa mberi kopi ye traffic yese kuNPB. Izvi zvine mukana wakakura wekubvisa kwakawanda kwekunetsekana kwemahara kwekuwana mvumo yekuita shanduko kunetiweki. Kana iwe ukaisawo package broker, iwe uchave nekukasira kuwana kune data rese rinodiwa pakugadzirisa matambudziko.
Kana pasina chikonzero chekuchinja, unogona kusvetuka matanho ekubvumidza shanduko uye kuenda zvakananga kukugadzirisa. Iyi nzira itsva ine simba guru pakuderedza Mean Time to Repair (MTTR). Tsvagiridzo inoratidza kuti zvinogoneka kuderedza MTTR nekusvika 80%.
Nyaya yeChidzidzo #4 - Hungwaru yekushandisa, Kushandisa Kusefa Kwekushandisa uye Masking Data Kuvandudza Kuchengetedza Kushanda
Chii chinonzi Application Intelligence? Iyi tekinoroji inowanikwa kubva kuIXIA Packet Brokers (NPBs). Uku ndiko kushanda kwepamberi kunotendera iwe kuti uende kupfuura layer 2-4 packet kusefa (OSI modhi) uye fambisa nzira yese kuenda ku7 (application layer). Chakanakira ndechekuti mushandisi uye maitiro ekushandisa uye data yenzvimbo inogona kugadzirwa uye kutumirwa kunze mune chero yaunoda fomati - mbishi mapaketi, akapepetwa mapaketi, kana NetFlow (IxFlow) ruzivo. Madhipatimendi eIT anogona kuona zvakavanzika network application, kuderedza kutyisidzira kwetiweki, uye kuderedza kuderera kwetiweki uye / kana kuvandudza mashandiro etiweki. Akasarudzika maficha ezvinozivikanwa uye asingazivikanwe maapplication anogona kuzivikanwa, kutorwa uye kugovaniswa neakasarudzika ekutarisa uye ekuchengetedza maturusi.
- kuzivikanwa kweanofungidzirwa / asingazivikanwe maapplication
- kuziva maitiro ekufungidzira ne geolocation, semuenzaniso, mushandisi anobva kuNorth Korea anobatana neFTP server yako uye anotamisa data.
- SSL decryption yekutarisa uye kuongorora zvinogona kutyisidzira
- kuongororwa kwekushandiswa kwemafunctions
- kuongororwa kwehuwandu hwetraffic uye kukura kweanoshanda zviwanikwa manejimendi uye kuwedzera kufanotaura
- masking data sensitive (kiredhiti makadhi, zvitupa ...) usati watumira
Visibility Intelligence mashandiro anowanikwa mune zvemuviri uye zvechisikigo (Cloud Lens Yakavanzika) mapakeji broker IXIA (NPB), uye muruzhinji "makore" - Cloud Lens Public:
Pamusoro peiyo yakajairwa mashandiro eNetStack, PacketStack uye AppStack:
Munguva pfupi yapfuura, mashandiro ekuchengetedza akawedzerwawo: SecureStack (kukwidziridza kugadziridzwa kwetraffic yakavanzika), MobileStack (yevanofambisa nhare) uye TradeStack (yekutarisa uye kusefa data yekutengesa mari):
zvakawanikwa
Manetiweki ekuonekwa mhinduro zvishandiso zvine simba zvinokwanisa kukwenenzvera network yekutarisa uye kuchengetedza zvivakwa zvinogadzira yakakosha kuunganidza uye kugovana data rakakosha.
Kushandisa makesi anobvumira:
- kupa mukana kune inodiwa chaiyo data sezvinodiwa kuongororwa uye kugadzirisa matambudziko
- wedzera / bvisa zvigadziriso zvekuchengetedza, kutarisa zvese zviri mumutsara uye kunze-kwebhendi
- kuderedza MTTR
- chengetedza mhinduro nekukurumidza kumatambudziko
- ita ongororo yekutyisidzira kwepamusoro
- kubvisa zvibvumirano zvakawanda zvehurumende
- kuderedza migumisiro yemari yehack nekukurumidza kubatanidza mhinduro dzinodiwa kune network uye kuderedza MTTR
- kuderedza mutengo uye basa rekumisa chiteshi cheSPAN
Source: www.habr.com