ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ
ื”ืขืœื ื—ื‘ืจื™ื! ื”ื™ื™ึทื ื˜ ืื™ืš ื•ื•ืึธืœื˜ ื•ื•ื™ ืฆื• ื“ื™ืกืงื•ื˜ื™ืจืŸ ืึท ื–ื™ื™ืขืจ ื‘ืึทื˜ื™ื™ึทื˜ื™ืง ื˜ืขืžืข ืคึฟืึทืจ ืคื™ืœืข ื˜ืฉืขืง ืคึผื•ื™ื ื˜ ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจืก: "ืึธืคึผื˜ื™ืžื™ื–ื™ื ื’ ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ." ืขืก ื–ืขื ืขืŸ ืึธืคื˜ ืงืึทืกืขืก ื•ื•ืขืŸ ื“ื™ ื’ื™ื™ื˜ื•ื•ื™ื™ ืื•ืŸ / ืึธื“ืขืจ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืกืขืจื•ื•ืขืจ ืงืึทื ืกื•ืžื– ืึทื ื™ืงืกืคึผืขืงื˜ื™ื“ืœื™ ืึท ืคึผืœืึทืฅ ืคื•ืŸ ื“ื™ ืจืขืกื•ืจืกืŸ, ืื•ืŸ ืื™ืš ื•ื•ืึธืœื˜ ื•ื•ื™ ืฆื• ืคึฟืึทืจืฉื˜ื™ื™ืŸ ื•ื•ื• ื–ื™ื™ "ืœื•ื™ืคืŸ" ืื•ืŸ, ืื•ื™ื‘ ืžืขื’ืœืขืš, ื ื•ืฆืŸ ื–ื™ื™ ืžืขืจ ื™ื ื˜ืขืœื™ื“ื–ืฉืึทื ื˜ืœื™.

1. ืึทื ืึทืœื™ืกื™ืก

ืฆื• ืึทื ืึทืœื™ื™ื– ืคึผืจืึทืกืขืกืขืจ ืžืึทืกืข, ืขืก ืื™ื– ื ื•ืฆื™ืง ืฆื• ื ื•ืฆืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืงืึทืžืึทื ื“ื–, ื•ื•ืึธืก ื–ืขื ืขืŸ ืืจื™ื™ืŸ ืื™ืŸ ืขืงืกืคึผืขืจื˜ ืžืึธื“ืข:

ืฉืคึผื™ืฅ ื•ื•ื™ื™ื–ื˜ ืึทืœืข ืคึผืจืึทืกืขืกืึทื–, ื“ื™ ืกื•ืžืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืจืขืกื•ืจืกืŸ ืงืึทื ืกื•ืžื“ ื•ื•ื™ ืึท ืคึผืจืึธืฆืขื ื˜, ื•ืคึผื˜ื™ืžืข, ืคึผืจืึธืฆืขืก ื‘ื™ืœื›ืขืจืงื™ื™ึทื˜ ืื•ืŸ ืึทื ื“ืขืจืขืจ ืื™ืŸ ืคืึทืงื˜ื™ืฉ ืฆื™ื™ื˜ะธ

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

cpwd_admin ืจืฉื™ืžื” Check Point WatchDog Daemon, ื•ื•ืึธืก ื•ื•ื™ื™ึทื–ืŸ ืึทืœืข ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืžืึทื“ื–ืฉื•ืœื–, ื–ื™ื™ืขืจ PID, ืกื˜ืึทื˜ื•ืก ืื•ืŸ ื ื•ืžืขืจ ืคื•ืŸ ืกื˜ืึทืจืฅ

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

cpstat -f cpu os ืงืคึผื• ื‘ืึทื ื™ืฅ, ื–ื™ื™ืขืจ ื ื•ืžืขืจ ืื•ืŸ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ืคื•ืŸ ืคึผืจืึทืกืขืกืขืจ ืฆื™ื™ื˜ ื•ื•ื™ ืึท ืคึผืจืึธืฆืขื ื˜

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

cpstat -f ื–ื›ึผืจื•ืŸ OS ื•ื•ื™ืจื˜ื•ืขืœ ื‘ืึทืจืึทืŸ ื‘ืึทื ื™ืฅ, ื•ื•ื™ ืคื™ืœ ืึทืงื˜ื™ื•ื•, ืคืจื™ื™ ื‘ืึทืจืึทืŸ ืื•ืŸ ืžืขืจ

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

ื“ื™ ืจื™ื›ื˜ื™ืง ื‘ืึทืžืขืจืงื•ื ื’ ืื™ื– ืึทื– ืึทืœืข ืงืคึผืกื˜ืึทื˜ ืงืึทืžืึทื ื“ื– ืงืขื ืขืŸ ื–ื™ื™ืŸ ื•ื•ื™ื•ื“ ืžื™ื˜ ื“ื™ ื ื•ืฆืŸ cpview. ืฆื• ื˜ืึธืŸ ื“ืึธืก, ืื™ืจ ื ืึธืจ ื“ืึทืจืคึฟืŸ ืฆื• ืึทืจื™ื™ึทืŸ ื“ื™ cpview ื‘ืึทืคึฟืขืœ ืคึฟื•ืŸ ืงื™ื™ืŸ ืžืึธื“ืข ืื™ืŸ ื“ื™ SSH ืกืขืกื™ืข.

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ
ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

ps auxwf ืึท ืœืึทื ื’ ืจืฉื™ืžื” ืคื•ืŸ ืึทืœืข ืคึผืจืึทืกืขืกืึทื–, ื–ื™ื™ืขืจ ืฉื™ื™ึทืŸ, ืคืึทืจื ื•ืžืขืŸ ื•ื•ื™ืจื˜ื•ืึทืœ ื–ื›ึผืจื•ืŸ ืื•ืŸ ื–ื›ึผืจื•ืŸ ืื™ืŸ ื‘ืึทืจืึทืŸ, ืงืคึผื•

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

ืื ื“ืขืจืข ื‘ืึทืคึฟืขืœ ื•ื•ืขืจื™ื™ื™ืฉืึทื ื–:

ps-aF ื•ื•ืขื˜ ื•ื•ื™ื™ึทื–ืŸ ื“ื™ ืžืขืจืกื˜ ื˜ื™ื™ึทืขืจ ืคึผืจืึธืฆืขืก

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

fw ctl ืงื™ืจื‘ื•ืช -ืœ -ืึท ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ืคื•ืŸ ืงืึธืจืขืก ืคึฟืึทืจ ืคืึทืจืฉื™ื“ืขื ืข ืคื™ื™ืจื•ื•ืึทืœ ื™ื ืกื˜ืึทื ืกื™ื–, ื“ืึธืก ืื™ื– CoreXL ื˜ืขื›ื ืึธืœืึธื’ื™ืข

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

fw ctl pstat ื‘ืึทืจืึทืŸ ืึทื ืึทืœื™ืกื™ืก ืื•ืŸ ืึทืœื’ืขืžื™ื™ื ืข ืงืฉืจ ื™ื ื“ื™ืงืึทื˜ืึธืจืก, ืงื™ื›ืœืขืš, NAT

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

ืคืจื™ื™ -ื ื‘ืึทืจืึทืŸ ื‘ืึทืคืขืจ

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

ื“ื™ ืžืึทื ืฉืึทืคึฟื˜ ืคืืจื“ื™ื ื˜ ืกืคึผืขืฆื™ืขืœ ื•ืคืžืขืจืงื–ืึทืžืงื™ื™ึทื˜ netsat ืื•ืŸ ื–ื™ื™ึทืŸ ื•ื•ืขืจื™ื™ื™ืฉืึทื ื–. ืœืžืฉืœ, netstat -i ืงืขื ืขืŸ ื”ืขืœืคืŸ ืกืึธืœื•ื•ืข ื“ื™ ืคึผืจืึธื‘ืœืขื ืคื•ืŸ ืžืึธื ื™ื˜ืึธืจื™ื ื’ ืงืœื™ืคึผื‘ืึธืจื“ื–. ื“ืขืจ ืคึผืึทืจืึทืžืขื˜ืขืจ, RX ื“ืจืึทืคึผื˜ ืคึผืึทืงื™ืฅ (RX-DRP) ืื™ืŸ ื“ืขืจ ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ื“ืขื ื‘ืึทืคึฟืขืœ, ื•ื•ื™ ืึท ื”ืขืจืฉืŸ, ื•ื•ืืงืกื˜ ืื•ื™ืฃ ื–ื™ืš ืจืขื›ื˜ ืฆื• ื˜ืจืืคื ืก ืคื•ืŸ ื™ืœื™ื“ื–ืฉื™ื˜ืึทืžืึทื˜ ืคึผืจืึธื˜ืึธืงืึธืœืก (IPv6, Bad / Unintended VLAN ื˜ืึทื’ืก ืื•ืŸ ืื ื“ืขืจืข). ืึธื‘ืขืจ, ืื•ื™ื‘ ื˜ืจืืคื ืก ืคึผืึทืกื™ืจืŸ ืคึฟืึทืจ ืืŸ ืื ื“ืขืจ ืกื™ื‘ื”, ืื™ืจ ื–ืึธืœ ื ื•ืฆืŸ ื“ืขื ืืจื˜ื™ืงืœืขืŸืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื™ื ื•ื•ืขืกื˜ืึทื’ื™ื™ื˜ื™ื ื’ ืื•ืŸ ืคึฟืึทืจืฉื˜ื™ื™ืŸ ื•ื•ืึธืก ืึท ื’ืขื’ืขื‘ืŸ ื ืขืฅ ืฆื•ื‘ื™ื ื“ ืื™ื– ื“ืจืึทืคึผื™ื ื’ ืคึผืึทืงื™ืฅ. ื ืึธืš ื’ืขืคื•ื ืขืŸ ื“ื™ ืกื™ื‘ื”, ื“ื™ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืึทืคึผ ืงืขื ืขืŸ ืื•ื™ืš ื–ื™ื™ืŸ ืึธืคึผื˜ื™ืžื™ื–ืขื“.

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

ืื•ื™ื‘ ื“ื™ ืžืึธื ื™ื˜ืึธืจื™ื ื’ ื‘ืœื™ื™ื“ ืื™ื– ืขื ื™ื™ื‘ืึทืœื“, ืื™ืจ ืงืขื ืขืŸ ื–ืขืŸ ื“ื™ ืžืขื˜ืจื™ืงืก ื’ืจืึทืคื™ืงืœื™ ืื™ืŸ SmartConsole ื“ื•ืจืš ื’ืขื‘ืŸ ืึท ืงืœื™ืง ืื•ื™ืฃ ื“ื™ ื›ื™ื™ืคืขืฅ ืื•ืŸ ืกืขืœืขืงื˜ื™ืจืŸ "ืžื™ื˜ืœ & ืœื™ืกืขื ืกืข ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข."

ืขืก ืื™ื– ื ื™ืฉื˜ ืจืขืงืึทืžืขื ื“ื™ื“ ืฆื• ื•ื•ืขื ื“ืŸ ื“ื™ ืžืึธื ื™ื˜ืึธืจื™ื ื’ ื‘ืœื™ื™ื“ ืื•ื™ืฃ ืึท ืฉื˜ืขื ื“ื™ืง ื™ืงืขืจ, ืึธื‘ืขืจ ืคึฟืึทืจ ืึท ื˜ืึธื’ ืคึฟืึทืจ ื˜ืขืกื˜ื™ื ื’ ืขืก ืื™ื– ื’ืึทื ืฅ ืžืขื’ืœืขืš.

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

ื“ืขืจืฆื•, ืื™ืจ ืงืขื ืขืŸ ืœื™ื™ื’ืŸ ืžืขืจ ืคึผืึทืจืึทืžืขื˜ืขืจืก ืคึฟืึทืจ ืžืึธื ื™ื˜ืึธืจื™ื ื’, ืื™ื™ื ืขืจ ืคื•ืŸ ื–ื™ื™ ืื™ื– ื–ื™ื™ืขืจ ื ื•ืฆื™ืง - ื‘ื™ื˜ืขืก ื˜ืจื•ืคึผื•ื˜ (ืึทืคึผืคึผืœื™ืงืึทื˜ื™ืึธืŸ ื˜ืจื•ืคึผื•ื˜).

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

ืื•ื™ื‘ ืขืก ืื™ื– ืขื˜ืœืขื›ืข ืื ื“ืขืจืข ืžืึธื ื™ื˜ืึธืจื™ื ื’ ืกื™ืกื˜ืขื, ืœืžืฉืœ, ืคืจื™ื™ ื–ืึทื‘ื‘ื™ืงืก, ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ SNMP, ืขืก ืื™ื– ืื•ื™ืš ืคึผืึทืกื™ืง ืคึฟืึทืจ ื™ื™ื“ืขื ื˜ืึทืคื™ื™ื™ื ื’ ื“ื™ ืคึผืจืึธื‘ืœืขืžืก.

2. ื‘ืึทืจืึทืŸ ืœื™ืงืก ืื™ื‘ืขืจ ืฆื™ื™ึทื˜

ื“ื™ ืงืฉื™ื ืึธืคื˜ ืขืจื™ื™ื–ืึทื– ืึทื– ืื™ื‘ืขืจ ืฆื™ื™ึทื˜, ื“ื™ ื’ื™ื™ื˜ื•ื•ื™ื™ ืึธื“ืขืจ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืกืขืจื•ื•ืขืจ ื”ื™ื™ื‘ื˜ ืฆื• ืคืึทืจื ื•ืฆืŸ ืžืขืจ ืื•ืŸ ืžืขืจ ื‘ืึทืจืึทืŸ. ืื™ืš ื•ื•ื™ืœืŸ ืฆื• ืคืึทืจื–ื™ื›ืขืจืŸ ืื™ืจ: ื“ืึธืก ืื™ื– ืึท ื ืึธืจืžืึทืœ ื’ืขืฉื™ื›ื˜ืข ืคึฟืึทืจ ืœื™ื ื•ืงืก-ื•ื•ื™ ืกื™ืกื˜ืขืžืขืŸ.

ืงื•ืงืŸ ืื™ืŸ ื“ื™ ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ื“ื™ ืงืึทืžืึทื ื“ื– ืคืจื™ื™ -ื ะธ cpstat -f ื–ื›ึผืจื•ืŸ OS ืื™ืŸ ื“ืขืจ ืึทืคึผ ืคึฟื•ืŸ ืขืงืกืคึผืขืจื˜ ืžืึธื“ืข, ืื™ืจ ืงืขื ืขืŸ ืจืขื›ืขื ืขืŸ ืื•ืŸ ื–ืขืŸ ืึทืœืข ืคึผืึทืจืึทืžืขื˜ืขืจืก ืฉื™ื™ึทื›ื•ืช ืฆื• ื‘ืึทืจืึทืŸ.

ื‘ืึทื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ื‘ื ื™ืžืฆื ื–ื›ึผืจื•ืŸ ืื•ื™ืฃ ื“ื™ ื’ื™ื™ื˜ื•ื•ื™ื™ ืื™ืŸ ื“ืขื ืžืึธืžืขื ื˜ Free ืžืขืžืึธืจื™ + ื‘ืึทืคืขืจื– ื–ื›ึผืจื•ืŸ + ืงืึทืฉื˜ ื–ื›ึผืจื•ืŸ = +-1.5 ื’ื™ื’ืื‘ื™ื™ื˜, ื’ืขื•ื•ืขื ืœื™ืš .

ื•ื•ื™ CP ื–ืื’ื˜, ืžื™ื˜ ืฆื™ื™ื˜ ื“ื™ ื’ื™ื™ื˜ื•ื•ื™ื™ / ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืกืขืจื•ื•ืขืจ ืึธืคึผื˜ื™ืžื™ื–ืขืก ืื•ืŸ ื ื™ืฆื˜ ืžืขืจ ืื•ืŸ ืžืขืจ ื–ื›ึผืจื•ืŸ, ืจื™ื˜ืฉื™ื ื’ ื•ื•ืขื’ืŸ 80% ื™ื•ื˜ืึทืœืึทื–ื™ื™ืฉืึทืŸ ืื•ืŸ ืกื˜ืึทืคึผืก. ืื™ืจ ืงืขื ืขืŸ ืจืขื‘ืึธืึธื˜ ื“ื™ ืžื™ื˜ืœ, ืื•ืŸ ื“ืขืจ ื’ืจืื“ืŸ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื‘ืึทืฉื˜ืขื˜ื™ืง. 1.5 ื’ื™ื’ืื‘ื™ื™ื˜ ืคื•ืŸ ืคืจื™ื™ ื‘ืึทืจืึทืŸ ืื™ื– ืคึผื•ื ืงื˜ ื’ืขื ื•ื’ ืคึฟืึทืจ ื“ื™ ื’ื™ื™ื˜ื•ื•ื™ื™ ืฆื• ื“ื•ืจื›ืคื™ืจืŸ ืึทืœืข ื˜ืึทืกืงืก, ืื•ืŸ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืจืึทืจืขืœื™ ืจื™ื˜ืฉืึทื– ืึทื–ืึท ืฉื•ื•ืขืœ ื•ื•ืึทืœื•ืขืก.

ืื•ื™ืš ื“ื™ ืึทื•ื˜ืคึผื•ืฅ ืคื•ืŸ ื“ื™ ื“ืขืจืžืื ื˜ ืงืึทืžืึทื ื“ื– ื•ื•ืขื˜ ื•ื•ื™ื™ึทื–ืŸ ื•ื•ื™ ืคื™ืœ ืื™ืจ ื”ืึธื‘ืŸ ื ื™ื“ืขืจื™ืง ื–ื›ึผืจื•ืŸ (ื‘ืึทืจืึทืŸ ืื™ืŸ ื‘ืึทื ื™ืฆืขืจ ืคึผืœืึทืฅ) ืื•ืŸ ื”ื•ื™ืš ื–ื›ึผืจื•ืŸ (ื‘ืึทืจืึทืŸ ืื™ืŸ ืงืขืจื ืขืœ ืคึผืœืึทืฅ) ื’ืขื ื™ืฆื˜.

ืงืขืจื ืขืœ ืคึผืจืึทืกืขืกืึทื– (ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืึทืงื˜ื™ื•ื• ืžืึทื“ื–ืฉื•ืœื– ืึทื–ืึท ื•ื•ื™ ื˜ืฉืขืง ืคึผื•ื™ื ื˜ ืงืขืจืŸ ืžืึทื“ื–ืฉื•ืœื–) ื ื•ืฆืŸ ื‘ืœื•ื™ื– ื ื™ื“ืขืจื™ืง ื–ื›ึผืจื•ืŸ. ืึธื‘ืขืจ, ื‘ืึทื ื™ืฆืขืจ ืคึผืจืึทืกืขืกืึทื– ืงืขื ืขืŸ ื ื•ืฆืŸ ื‘ื™ื™ื“ืข ื ื™ื“ืขืจื™ืง ืื•ืŸ ื”ื•ื™ืš ื–ื›ึผืจื•ืŸ. ื“ืขืจืฆื•, ื ื™ื“ืขืจื™ืง ื–ื›ึผืจื•ืŸ ืื™ื– ื‘ืขืขืจืขืš ื’ืœื™ื™ึทืš ืฆื• ื’ืึทื ืฅ ื–ื›ึผืจื•ืŸ.

ืื™ืจ ื–ืึธืœ ื ืึธืจ ื–ืึธืจื’ ืื•ื™ื‘ ืขืก ื–ืขื ืขืŸ ืขืจืจืึธืจืก ืื™ืŸ ื“ื™ ืœืึธื’ืก "ืžืึทื“ื–ืฉื•ืœื– ืจืขื‘ืึธืึธื˜ ืึธื“ืขืจ ืคึผืจืึทืกืขืกืึทื– ื–ืขื ืขืŸ ื’ืขื”ืจื’ืขื˜ ืฆื• ืฆื•ืจื™ืงืงืจื™ื’ืŸ ื–ื›ึผืจื•ืŸ ืจืขื›ื˜ ืฆื• OOM (ืื•ื™ืก ืคื•ืŸ ื–ื›ึผืจื•ืŸ)". ื“ืขืจื ืึธืš ืื™ืจ ื–ืึธืœ ืจืขื‘ืึธืึธื˜ ื“ื™ ื’ื™ื™ื˜ื•ื•ื™ื™ ืื•ืŸ ืงืึธื ื˜ืึทืงื˜ ืฉื˜ื™ืฆืŸ ืื•ื™ื‘ ื“ื™ ืจืขื‘ืึธืึธื˜ ื˜ื•ื˜ ื ื™ืฉื˜ ื”ืขืœืคืŸ.

ื ืคื•ืœ ื‘ืึทืฉืจื™ื™ึทื‘ื•ื ื’ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขืคึฟื•ื ืขืŸ ืื™ืŸ ืกืงืงืกื ื•ืžืงืก ะธ ืกืงืงืกื ื•ืžืงืก.

3. ืึธืคึผื˜ื™ืžื™ื–ืึทื˜ื™ืึธืŸ

ื•ื ื˜ืขืจ ื–ืขื ืขืŸ ืคึฟืจืื’ืŸ ืื•ืŸ ืขื ื˜ืคึฟืขืจืก ื•ื•ืขื’ืŸ ืึธืคึผื˜ื™ืžื™ื–ื™ื ื’ ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ. ืื™ืจ ื–ืึธืœ ืขื ื˜ืคึฟืขืจืŸ ื–ื™ื™ ื”ืึธื ืขืกื˜ืœื™ ืฆื• ื–ื™ืš ืื•ืŸ ื”ืขืจืŸ ืฆื• ื“ื™ ืจืขืงืึทืžืึทื ื“ื™ื™ืฉืึทื ื–.

3.1. ืื™ื– ื“ื™ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืจื™ื›ื˜ื™ืง ืื•ื™ืกื“ืขืจื•ื•ื™ื™ืœื˜? ืื™ื– ื’ืขื•ื•ืขืŸ ืึท ืคึผื™ืœืึธื˜ ืคึผืจื•ื™ืขืงื˜?

ื˜ืจืึธืฅ ื’ืขื”ืขืจื™ืง ืกื™ื™ื–ื™ื ื’, ื“ื™ ื ืขืฅ ืงืขืŸ ื ืึธืจ ื•ื•ืึทืงืกืŸ, ืื•ืŸ ื“ื™ ื•ื™ืกืจื™ื›ื˜ ืงืขื ืขืŸ ื ื™ืฉื˜ ืงืึธืคึผืข ืžื™ื˜ ื“ื™ ืžืึทืกืข. ื“ื™ ืจื’ืข ืึธืคึผืฆื™ืข ืื™ื– ืื•ื™ื‘ ืขืก ืื™ื– ืงื™ื™ืŸ ืกื™ื™ื–ื™ื ื’ ื•ื•ื™ ืึทื–ืึท.

3.2. ืื™ื– HTTPS ื“ื•ืจื›ืงื•ืง ืขื ื™ื™ื‘ืึทืœื“? ืื•ื™ื‘ ื™ืึธ, ืื™ื– ื“ื™ ื˜ืขื›ื ืึธืœืึธื’ื™ืข ืงืึทื ืคื™ื’ื™ืขืจื“ ืœื•ื™ื˜ ื‘ืขืกื˜ืขืจ ืคึผืจืึทืงื˜ื™ืกื™ื–?

ืึธืคึผืฉื™ืงืŸ ืฆื• ืึทืจื˜ื™ืงืœ, ืื•ื™ื‘ ืื™ืจ ื–ืขื ื˜ ืื•ื ื“ื–ืขืจ ืงืœื™ืขื ื˜, ืึธื“ืขืจ ืฆื• ืกืงืงืกื ื•ืžืงืก.

ื“ืขืจ ืกื“ืจ ืคื•ืŸ ื“ื™ ื›ึผืœืœื™ื ืื™ืŸ ื“ื™ HTTPS ื“ื•ืจื›ืงื•ืง ืคึผืึธืœื™ื˜ื™ืง ืคื™ืขืกืขืก ืึท ื’ืจื•ื™ืก ืจืึธืœืข ืื™ืŸ ืึธืคึผื˜ื™ืžื™ื–ื™ื ื’ ื“ื™ ืขืคืŸ ืคื•ืŸ HTTPS ื–ื™ื™ื˜ืœืขืš.

ืจืขืงืึทืžืขื ื“ื™ื“ ืกื“ืจ ืคื•ืŸ ื›ึผืœืœื™ื:

  1. ื‘ื™ื™ืคึผืึทืก ื›ึผืœืœื™ื ืžื™ื˜ ืงืึทื˜ืขื’ืึธืจื™ืขืก / URL ืก
  2. ื“ื•ืจื›ืงื•ืงืŸ ื›ึผืœืœื™ื ืžื™ื˜ ืงืึทื˜ืขื’ืึธืจื™ืขืก / URL ืก
  3. ื“ื•ืจื›ืงื•ืงืŸ ื“ื™ ื›ึผืœืœื™ื ืคึฟืึทืจ ืึทืœืข ืื ื“ืขืจืข ืงืึทื˜ืขื’ืึธืจื™ืขืก

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

ืœื•ื™ื˜ ืึทืŸ ืึทื ืึทืœืึทื“ื–ืฉื™ ืžื™ื˜ ื“ื™ ืคื™ื™ืจื•ื•ืึทืœ ืคึผืึธืœื™ื˜ื™ืง, ื˜ืฉืขืง ืคึผื•ื™ื ื˜ ื–ื•ืš ืคึฟืึทืจ ืึท ื’ืœื™ื™ึทื›ืŸ ื“ื•ืจืš ืคึผืึทืงื™ืฅ ืคื•ืŸ ืฉืคึผื™ืฅ ืฆื• ื“ื ืึธ, ืึทื–ื•ื™ ืขืก ืื™ื– ื‘ืขืกืขืจ ืฆื• ืฉื˜ืขืœืŸ ื“ื™ ื‘ื™ื™ืคึผืึทืก ื›ึผืœืœื™ื ืื™ืŸ ื“ื™ ืฉืคึผื™ืฅ, ื•ื•ื™ื™ึทืœ ื“ื™ ื’ื™ื™ื˜ื•ื•ื™ื™ ื•ื•ืขื˜ ื ื™ืฉื˜ ื•ื•ื™ืกื˜ ืจืขืกื•ืจืกืŸ ืื•ื™ืฃ ืœื•ื™ืคืŸ ื“ื•ืจืš ืึทืœืข ื“ื™ ื›ึผืœืœื™ื ืื•ื™ื‘ ื“ืึธืก ืคึผืึทืงืึทื˜ ื“ืึทืจืฃ ื“ื•ืจื›ื’ืขื’ืื ื’ืขืŸ.

3.3 ื–ืขื ืขืŸ ืึทื“ืจืขืก-ืงื™ื™ื˜ ืึทื‘ื“ื–ืฉืขืงืฅ ื’ืขื ื™ืฆื˜?

ืึทื‘ื“ื–ืฉืขืงืฅ ืžื™ื˜ ืึทืŸ ืึทื“ืจืขืก ืงื™ื™ื˜, ืœืžืฉืœ, ื“ื™ ื ืขืฅ 192.168.0.0-192.168.5.0, ื ืขืžืขืŸ ื‘ืื˜ื™ื™ื˜ื™ืง ืžืขืจ ื‘ืึทืจืึทืŸ ื•ื•ื™ 5 ื ืขืฅ ืึทื‘ื“ื–ืฉืขืงืฅ. ืื™ืŸ ืึทืœื’ืขืžื™ื™ืŸ, ืขืก ืื™ื– ื’ืขืจืขื›ื ื˜ ื•ื•ื™ ื’ื•ื˜ ืคื™ืจ ืฆื• ื‘ืึทื–ื™ื™ึทื˜ื™ืงืŸ ืึทื ื™ื•ื–ื“ ืึทื‘ื“ื–ืฉืขืงืฅ ืื™ืŸ SmartConsole, ื•ื•ื™ื™ึทืœ ื™ืขื“ืขืจ ืžืึธืœ ืึท ืคึผืึธืœื™ื˜ื™ืง ืื™ื– ืื™ื ืกื˜ืึทืœื™ืจืŸ, ื“ื™ ื’ื™ื™ื˜ื•ื•ื™ื™ ืื•ืŸ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืกืขืจื•ื•ืขืจ ืคืึทืจื‘ืจืขื ื’ืขืŸ ืจืขืกื•ืจืกืŸ ืื•ืŸ, ืจื•ื‘ึฟ ื™ืžืคึผืึธืจื˜ืึทื ื˜ืœื™, ืฆื™ื™ื˜, ื•ื•ืขืจืึทืคื™ื™ื™ื ื’ ืื•ืŸ ืึทืคึผืœื™ื™ื™ื ื’ ื“ื™ ืคึผืึธืœื™ื˜ื™ืง.

3.4. ื•ื•ื™ ืื™ื– ื“ื™ ื˜ืจืขื˜ ืคึผืจืขื•ื•ืขื ื˜ื™ืึธืŸ ืคึผืึธืœื™ื˜ื™ืง ืงืึทื ืคื™ื’ื™ืขืจื“?

ืขืจืฉื˜ืขืจ ืคื•ืŸ ืึทืœืข, Check Point ืจืขืงืึทืžืขื ื“ื– ืคึผืœื™ื™ืกื™ื ื’ IPS ืื™ืŸ ืึท ื‘ืึทื–ื•ื ื“ืขืจ ืคึผืจืึธืคื™ืœ ืื•ืŸ ืฉืึทืคึฟืŸ ื‘ืึทื–ื•ื ื“ืขืจ ื›ึผืœืœื™ื ืคึฟืึทืจ ื“ืขื ื‘ืœื™ื™ื“.

ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืึท ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจ ื’ืœื•ื™ื‘ื˜ ืึทื– ื“ื™ DMZ ืึธืคึผืฉื ื™ื˜ ื–ืึธืœ ื–ื™ื™ืŸ ืคึผืจืึธื˜ืขืงื˜ืขื“ ื‘ืœื•ื™ื– ืžื™ื˜ IPS. ื“ืขืจื™ื‘ืขืจ, ืฆื• ืคืึทืจืžื™ื™ึทื“ืŸ ื“ื™ ื’ื™ื™ื˜ื•ื•ื™ื™ ืคื•ืŸ ื•ื•ื™ื™ืกื˜ื™ื ื’ ืจืขืกื•ืจืกืŸ ืื•ื™ืฃ ืคึผืจืึทืกืขืกื™ื ื’ ืคึผืึทืงื™ืฅ ื“ื•ืจืš ืื ื“ืขืจืข ื‘ืœืึทื“ืขืก, ืขืก ืื™ื– ื ื™ื™ื˜ื™ืง ืฆื• ืฉืึทืคึฟืŸ ืึท ื”ืขืจืฉืŸ ืกืคึผืึทืกื™ืคื™ืงืœื™ ืคึฟืึทืจ ื“ืขื ืึธืคึผืฉื ื™ื˜ ืžื™ื˜ ืึท ืคึผืจืึธืคื™ืœ ืื™ืŸ ื•ื•ืึธืก ื‘ืœื•ื™ื– IPS ืื™ื– ืขื ื™ื™ื‘ืึทืœื“.

ื•ื•ืขื’ืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืคึผืจืึธื•ืคื™ื™ืœื–, ืขืก ืื™ื– ืจืขืงืึทืžืขื ื“ื™ื“ ืฆื• ืฉื˜ืขืœืŸ ืขืก ืœื•ื™ื˜ ื“ื™ ื‘ืขืกื˜ืขืจ ืคึผืจืึทืงื˜ื™ืกื™ื– ืื™ืŸ ื“ืขื ื“ืขืจ ื“ืึธืงื•ืžืขื ื˜(ื–ื™ื™ื˜ืœืขืš 17-20).

3.5. ืื™ืŸ ื“ื™ IPS ืกืขื˜ื˜ื™ื ื’ืก, ื•ื•ื™ ืคื™ืœืข ืกื™ื’ื ืึทื˜ืฉืขืจื– ื–ืขื ืขืŸ ืื™ืŸ ื“ืขื˜ืขืงื˜ ืžืึธื“ืข?

ืขืก ืื™ื– ืจืขืงืึทืžืขื ื“ื™ื“ ืฆื• ืงืขืจืคืึทืœื™ ืœืขืจื ืขืŸ ืกื™ื’ื ืึทื˜ืฉืขืจื– ืื™ืŸ ื“ืขื ื–ื™ื ืขืŸ ืึทื– ืึทื ื™ื•ื–ื“ ืึธื ืขืก ื–ืึธืœ ื–ื™ื™ืŸ ืคืึทืจืงืจื™ืคึผืœื˜ (ืœืžืฉืœ, ืกื™ื’ื ืึทื˜ืฉืขืจื– ืคึฟืึทืจ ืึทืคึผืขืจื™ื™ื˜ื™ื ื’ ืึทื“ืึธื•ื‘ื™ ืคึผืจืึธื“ื•ืงื˜ืŸ ื“ืึทืจืคืŸ ืึท ืคึผืœืึทืฅ ืคื•ืŸ ืงืึทืžืคึผื™ื•ื˜ื™ื ื’ ืžืึทื›ื˜, ืื•ืŸ ืื•ื™ื‘ ื“ืขืจ ืงื•ื ื” ื”ืื˜ ื ื™ืฉื˜ ืึทื–ืึท ืคึผืจืึธื“ื•ืงื˜ืŸ, ืขืก ืื™ื– ื–ื™ื ืขืŸ ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ ืกื™ื’ื ืึทื˜ืฉืขืจื–). ื“ืขืจื ืึธืš, ืฉื˜ืขืœืŸ ืคึผืจืขื•ื•ืขื ื˜ ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ ื“ืขื˜ืขืงื˜ ื•ื•ื• ืžืขื’ืœืขืš, ื•ื•ื™ื™ึทืœ ื“ื™ ื’ื™ื™ื˜ื•ื•ื™ื™ ืกืคึผืขื ื“ื– ืจืขืกื•ืจืกืŸ ืฆื• ืคึผืจืึทืกืขืกื™ื ื’ ื“ื™ ื’ืื ืฆืข ืงืฉืจ ืื™ืŸ ื“ืขื˜ืขืงื˜ ืžืึธื“ืข; ืื™ืŸ ืคึผืจืขื•ื•ืขื ื˜ ืžืึธื“ืข, ืขืก ื’ืœื™ื™ืš ืึทื•ื•ืขืง ื“ื™ ืงืฉืจ ืื•ืŸ ื˜ื•ื˜ ื ื™ืฉื˜ ื•ื•ื™ืกื˜ ืจืขืกื•ืจืกืŸ ืื•ื™ืฃ ื’ืึธืจ ืคึผืจืึทืกืขืกื™ื ื’ ื“ื™ ืคึผืึทืงืึทื˜.

3.6. ื•ื•ืึธืก ื˜ืขืงืขืก ื–ืขื ืขืŸ ืคึผืจืึทืกืขืกื˜ ื“ื•ืจืš ื˜ืจืขื˜ ืขืžื™ืึทืœื™ื™ืฉืึทืŸ, ื˜ืจืขื˜ ื™ืงืกื˜ืจืึทืงืฉืึทืŸ, ืึทื ื˜ื™-ื•ื•ื™ืจื•ืก ื‘ืœืึทื“ืขืก?

ืขืก ืžืื›ื˜ ืงื™ื™ืŸ ื–ื™ื ืขืŸ ืฆื• ืขืžื™ืึทืœื™ื™ื˜ ืื•ืŸ ืคื•ื ืึทื ื“ืขืจืงืœื™ื™ึทื‘ืŸ ื˜ืขืงืขืก ืคื•ืŸ ื™ืงืกื˜ืขื ืฉืึทื ื– ื•ื•ืึธืก ื“ื™ื™ืŸ ื™ื•ื–ืขืจื– ื˜ืึธืŸ ื ื™ื˜ ืืจืืคืงืืคื™ืข, ืึธื“ืขืจ ืื™ืจ ื‘ืึทื˜ืจืึทื›ื˜ืŸ ื•ืžื ื™ื™ื˜ื™ืง ืื•ื™ืฃ ื“ื™ื™ืŸ ื ืขืฅ (ืœืžืฉืœ ืคืœืขื“ืขืจืžื•ื™ื–, ืขืงืกืข ื˜ืขืงืขืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ืœื™ื™ื›ื˜ ืืคื’ืขืฉื˜ืขืœื˜ ื ื™ืฆืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ื•ื•ื™ืกื™ืงื™ื™ึทื˜ ื‘ืœื™ื™ื“ ืื•ื™ืฃ ื“ื™ ืคื™ื™ืจื•ื•ืึทืœ ืžื“ืจื’ื”, ืึทื–ื•ื™ ื•ื•ื™ื™ื ื™ืงืขืจ ื’ื™ื™ื˜ื•ื•ื™ื™ ืจืขืกื•ืจืกืŸ ื•ื•ืขื˜ ื–ื™ื™ืŸ ืคืืจื‘ืจืื›ื˜). ื“ืขืจืฆื•, ืื™ืŸ ื“ื™ ื˜ืจืขื˜ ืขืžื™ืึทืœื™ื™ืฉืึทืŸ ืกืขื˜ื˜ื™ื ื’ืก ืื™ืจ ืงืขื ืขืŸ ืื•ื™ืกืงืœื™ื™ึทื‘ืŸ ืขื ื•ื•ื™ืจืึธื ืžืขื ื˜ (ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขื) ืฆื• ืขืžื™ืึทืœื™ื™ื˜ ื˜ืจืขืฅ ืื™ืŸ ื“ื™ ื–ืึทืžื“ืงืึทืกื˜ืŸ ืื•ืŸ ื™ื ืกื˜ืึธืœื™ื ื’ ืกื•ื•ื™ื•ื•ืข Windows 7 ื•ื•ืขืŸ ืึทืœืข ื™ื•ื–ืขืจื– ืืจื‘ืขื˜ืŸ ืžื™ื˜ ื•ื•ืขืจืกื™ืข 10 ืื™ื– ืื•ื™ืš ื ื™ืฉื˜ ื–ื™ื ืขืŸ.

3.7. ื–ืขื ืขืŸ ืคื™ืจืขื•ื•ืึทืœืœ ืื•ืŸ ืึทืคึผืคึผืœื™ืงืึทื˜ื™ืึธืŸ ืžื“ืจื’ื” ื›ึผืœืœื™ื ืขืจื™ื™ื ื“ื–ืฉื“ ืื™ืŸ ืœื•ื™ื˜ ืžื™ื˜ ื‘ืขืกื˜ืขืจ ืคื™ืจ?

ืื•ื™ื‘ ืึท ื”ืขืจืฉืŸ ื”ืื˜ ืึท ืคึผืœืึทืฅ ืคื•ืŸ ื”ื™ืฅ (ืฉื•ื•ืขื‘ืขืœืขืš), ืขืก ืื™ื– ืจืขืงืึทืžืขื ื“ื™ื“ ืฆื• ืฉื˜ืขืœืŸ ื–ื™ื™ ืื™ืŸ ื“ื™ ืฉืคึผื™ืฅ, ืื•ืŸ ื›ึผืœืœื™ื ืžื™ื˜ ืึท ืงืœื™ื™ืŸ ื ื•ืžืขืจ ืคื•ืŸ ื”ื™ืฅ - ืื™ืŸ ื“ื™ ื“ื ืึธ. ื“ื™ ื”ื•ื™ืคึผื˜ ื–ืึทืš ืื™ื– ืฆื• ืขื ืฉื•ืจ ืึทื– ื–ื™ื™ ื˜ืึธืŸ ื ื™ื˜ ื™ื ื˜ืขืจืกืขืงื˜ ืึธื“ืขืจ ืึธื•ื•ื•ืขืจืœืึทืคึผ ื™ืขื“ืขืจ ืื ื“ืขืจืขืจ. ืจืขืงืึทืžืขื ื“ื™ื“ ืคื™ื™ืจื•ื•ืึทืœ ืคึผืึธืœื™ื˜ื™ืง ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจ:

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

ื“ืขืจืงืœืขืจื•ื ื’ืขืŸ:

ืขืจืฉื˜ืขืจ ื›ึผืœืœื™ื - ื›ึผืœืœื™ื ืžื™ื˜ ื“ื™ ื’ืจืขืกื˜ืข ื ื•ืžืขืจ ืคื•ืŸ ืฉื•ื•ืขื‘ืขืœืขืš ื–ืขื ืขืŸ ื’ืขืฉื˜ืขืœื˜ ื“ืึธ
ืจืึทืฉ ื”ืขืจืฉืŸ - ืึท ื”ืขืจืฉืŸ ืคึฟืึทืจ ืึธืคึผื•ื•ืึทืจืคืŸ ืคืึทืœืฉ ืคืึทืจืงืขืจ ืึทื–ืึท ื•ื•ื™ NetBIOS
ืกื˜ืขืœื˜ ืจื•ืœ - ืคึผืจืึธื•ื›ื™ื‘ืึทืฅ ืงืึทืœืœืก ืฆื• ื’ื™ื™ื˜ื•ื•ื™ื™ื– ืื•ืŸ ืžืึทื ืึทื“ื–ืฉืขืจื– ืฆื• ืึทืœืข ืึทื—ื•ืฅ ื“ื™ ืงื•ื•ืืœืŸ ื•ื•ืึธืก ื–ืขื ืขืŸ ืกืคึผืขืกื™ืคื™ืขื“ ืื™ืŸ ื“ื™ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืฆื• ื’ื™ื™ื˜ื•ื•ื™ื™ ื›ึผืœืœื™ื
ืจื™ื™ืŸ-ืึทืจื•ื™ืฃ, ืœืขืฆื˜ืข ืื•ืŸ ื“ืจืึธืคึผ ื›ึผืœืœื™ื ื–ืขื ืขืŸ ื™ื•ื–ืฉืึทื•ื•ืึทืœื™ ืงืึทืžื‘ื™ื™ื ื“ ืื™ืŸ ืื™ื™ืŸ ื”ืขืจืฉืŸ ืฆื• ืคืึทืจื•ื•ืขืจืŸ ืึทืœืฅ ื•ื•ืึธืก ืื™ื– ื ื™ืฉื˜ ืขืจืœื•ื™ื‘ื˜ ื‘ื™ื– ืึทื”ืขืจ

ื‘ืขืกื˜ืขืจ ืคื™ืจ ื“ืึทื˜ืŸ ื–ืขื ืขืŸ ื“ื™ืกืงืจื™ื™ื‘ื“ ืื™ืŸ ืกืงืงืกื ื•ืžืงืก.

3.8. ื•ื•ืึธืก ืกืขื˜ื˜ื™ื ื’ืก ื”ืึธื‘ืŸ ื“ื™ ืกืขืจื•ื•ื™ืกืขืก ื‘ืืฉืืคืŸ ื“ื•ืจืš ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจืก?

ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืขื˜ืœืขื›ืข TCP ืกืขืจื•ื•ื™ืก ืื™ื– ื‘ืืฉืืคืŸ ืื•ื™ืฃ ืึท ืกืคึผืขืฆื™ืคื™ืฉ ืคึผืึธืจื˜, ืื•ืŸ ืขืก ืื™ื– ื–ื™ื ืขืŸ ืฆื• ื•ื™ืกืžืขืงืŸ "ืžืึทื˜ืฉ ืคึฟืึทืจ ืงื™ื™ืŸ" ืื™ืŸ ื“ื™ ืึทื•ื•ืึทื ืกื™ืจื˜ืข ืกืขื˜ื˜ื™ื ื’ืก ืคื•ืŸ ื“ื™ ื“ื™ื ืกื˜. ืื™ืŸ ื“ืขื ืคืึทืœ, ื“ื™ ื“ื™ื ืกื˜ ื•ื•ืขื˜ ืคืึทืœืŸ ืกืคึผืึทืกื™ืคื™ืงืœื™ ืื•ื ื˜ืขืจ ื“ื™ ื”ืขืจืฉืŸ ืื™ืŸ ื•ื•ืึธืก ืขืก ืื™ื– ืืจื•ื™ืก, ืื•ืŸ ื•ื•ืขื˜ ื ื™ืฉื˜ ืึธื ื˜ื™ื™ืœ ื ืขืžืขืŸ ืื™ืŸ ื“ื™ ื›ึผืœืœื™ื ื•ื•ื• ืงื™ื™ืŸ ืื™ื– ืœื™ืกื˜ืขื“ ืื™ืŸ ื“ื™ ืกืขืจื•ื•ื™ืก ื–ื™ื™ึทืœ.

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

ื’ืขืจืขื“ื˜ ื•ื•ืขื’ืŸ ืกืขืจื•ื•ื™ืกืขืก, ืขืก ืื™ื– ื•ื•ืขืจื˜ ื“ืขืจืžืึธื ืขืŸ ืึทื– ืžืืœ ืขืก ืื™ื– ื ื™ื™ื˜ื™ืง ืฆื• ืกื˜ืจื•ื™ืขืจืŸ ื˜ื™ื™ืžืึทื•ืฅ. ื“ืขืจ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื•ื•ืขื˜ ืœืึธื–ืŸ ืื™ืจ ืฆื• ื ื•ืฆืŸ ื“ื™ ื’ื™ื™ื˜ื•ื•ื™ื™ ืจืขืกื•ืจืกืŸ ื•ื•ื™ื™ื–ืœื™, ืึทื–ื•ื™ ื ื™ืฉื˜ ืฆื• ื”ืึทืœื˜ืŸ ืขืงืกื˜ืจืข ืฆื™ื™ื˜ ืคึฟืึทืจ TCP / UDP ืกืขืฉืึทื ื– ืคื•ืŸ ืคึผืจืึธื˜ืึธืงืึธืœืก ื•ื•ืึธืก ื˜ืึธืŸ ื ื™ื˜ ื“ืึทืจืคึฟืŸ ืึท ื’ืจื•ื™ืก ื˜ื™ื™ืžืึทื•ื˜. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืื™ืŸ ื“ื™ ืกืงืจืขืขื ืฉืึธื˜ ืื•ื ื˜ืŸ, ืื™ืš ื˜ืฉื™ื™ื ื“ื–ืฉื“ ื“ื™ ืคืขืœื“-ื•ื“ืคึผ ื“ื™ื ืกื˜ ื˜ื™ื™ืžืึทื•ื˜ ืคื•ืŸ 40 ืกืขืงื•ื ื“ืขืก ืฆื• 30 ืกืขืงื•ื ื“ืขืก.

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

3.9. ืื™ื– SecureXL ื’ืขื•ื•ื™ื™ื ื˜ ืื•ืŸ ื•ื•ืึธืก ืื™ื– ื“ื™ ืกืคึผื™ื“ืึทืคึผ ืคึผืจืึธืฆืขื ื˜?

ืื™ืจ ืงืขื ืขืŸ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ืงื•ื•ืึทืœื™ื˜ืขื˜ ืคื•ืŸ SecureXL ื ื™ืฆืŸ ื™ืงืขืจื“ื™ืง ืงืึทืžืึทื ื“ื– ืื™ืŸ ืขืงืกืคึผืขืจื˜ ืžืึธื“ืข ืื•ื™ืฃ ื“ื™ ื’ื™ื™ื˜ื•ื•ื™ื™ fwaccel ืกื˜ืึทื˜ ะธ fw ืึทืงืกืขืœ ืกื˜ืึทืฅ -s. ื•ื•ื™ื™ึทื˜ืขืจ, ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืจืขื›ืขื ืขืŸ ืื•ื™ืก ื•ื•ืึธืก ืžื™ืŸ ืคื•ืŸ ืคืึทืจืงืขืจ ืื™ื– ืึทืงืกืขืœืขืจื™ื™ื˜ื™ื“ ืื•ืŸ ื•ื•ืึธืก ืื ื“ืขืจืข ื˜ืขืžืคึผืœืึทื˜ืขืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื‘ืืฉืืคืŸ.

ื“ืจืึธืคึผ ื˜ืขืžืคึผืœืึทื˜ืขืก ื–ืขื ืขืŸ ื ื™ืฉื˜ ืขื ื™ื™ื‘ืึทืœื“ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜; ื’ืขื‘ืŸ ื–ื™ื™ ื•ื•ืขื˜ ื ื•ืฅ SecureXL. ืฆื• ื˜ืึธืŸ ื“ืึธืก, ื’ื™ื™ืŸ ืฆื• ื“ื™ ื’ื™ื™ื˜ื•ื•ื™ื™ ืกืขื˜ื˜ื™ื ื’ืก ืื•ืŸ ื“ื™ ืึธืคึผื˜ื™ืžื™ื–ืึทื˜ื™ืึธื ืก ืงื•ื•ื™ื˜ืœ:

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

ืื•ื™ืš, ื•ื•ืขืŸ ืื™ืจ ืึทืจื‘ืขื˜ ืžื™ื˜ ืึท ืงื ื•ื™ืœ ืฆื• ืึทืคึผื˜ืึทืžื™ื™ื– ื“ื™ ืงืคึผื•, ืื™ืจ ืงืขื ืขืŸ ื“ื™ืกื™ื™ื‘ืึทืœ ืกื™ื ื’ืงืจืึทื ืึทื–ื™ื™ืฉืึทืŸ ืคื•ืŸ ื ื™ื˜-ืงืจื™ื˜ื™ืฉ ื‘ืึทื“ื™ื ื•ื ื’ืก, ืึทื–ืึท ื•ื•ื™ UDP DNS, ICMP ืื•ืŸ ืื ื“ืขืจืข. ืฆื• ื˜ืึธืŸ ื“ืึธืก, ื’ื™ื™ืŸ ืฆื• ื“ื™ ืกืขืจื•ื•ื™ืก ืกืขื˜ื˜ื™ื ื’ืก โ†’ ืึทื•ื•ืึทื ืกื™ืจื˜ืข โ†’ ืกื™ื ื’ืงืจืึทื ื™ื™ื– ืงืึทื ืขืงืฉืึทื ื– ืคื•ืŸ ืฉื˜ืึทื˜ ืกื™ื ื’ืงืจืึทื ืึทื–ื™ื™ืฉืึทืŸ ืื™ื– ืขื ื™ื™ื‘ืึทืœื“ ืื•ื™ืฃ ื“ืขื ืงื ื•ื™ืœ.

ื˜ืฉืขืง ืคื•ื ื˜: ืงืคึผื• ืื•ืŸ ื‘ืึทืจืึทืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ

ืึทืœืข ื‘ืขืกื˜ืขืจ ืคึผืจืึทืงื˜ื™ืกื™ื– ื–ืขื ืขืŸ ื“ื™ืกืงืจื™ื™ื‘ื“ ืื™ืŸ ืกืงืงืกื ื•ืžืงืก.

3.10. ื•ื•ื™ ืื™ื– CoreXl ื’ืขื ื™ืฆื˜?

CoreXL ื˜ืขื›ื ืึธืœืึธื’ื™ืข, ื•ื•ืึธืก ืึทืœืึทื•ื– ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ืงื™ื™ืคืœ ืงืคึผื•ืก ืคึฟืึทืจ ืคื™ื™ืจื•ื•ืึทืœ ื™ื ืกื˜ืึทื ืกื™ื– (ืคื™ืจืขื•ื•ืึทืœ ืžืึทื“ื–ืฉื•ืœื–), ื‘ืืฉื˜ื™ืžื˜ ื”ืขืœืคึผืก ืึทืคึผื˜ืึทืžื™ื™ื– ื“ื™ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืžื™ื˜ืœ. ืžืึทื ืฉืึทืคึฟื˜ ืขืจืฉื˜ืขืจ fw ctl ืงื™ืจื‘ื•ืช -ืœ -ืึท ื•ื•ืขื˜ ื•ื•ื™ื™ึทื–ืŸ ื“ื™ ืคื™ื™ืจื•ื•ืึทืœ ื™ื ืกื˜ืึทื ืกื™ื– ื’ืขื•ื•ื™ื™ื ื˜ ืื•ืŸ ื“ื™ ืคึผืจืึทืกืขืกืขืจื– ืึทืกื™ื™ื ื“ ืฆื• ื“ื™ SND (ืึท ืžืึธื“ื•ืœืข ื•ื•ืึธืก ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฅ ืคืึทืจืงืขืจ ืฆื• ืคื™ื™ืจื•ื•ืึทืœ ืขื ื˜ื™ื˜ื™ื–). ืื•ื™ื‘ ื ื™ื˜ ืึทืœืข ืคึผืจืึทืกืขืกืขืจื– ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜, ื–ื™ื™ ืงืขื ืขืŸ ื–ื™ื™ืŸ ืžื•ืกื™ืฃ ืžื™ื˜ ื“ื™ ื‘ืึทืคึฟืขืœ cpconfig ื‘ืฒื ื˜ื•ื™ืขืจ.
ืื•ื™ืš ืึท ื’ื•ื˜ ื’ืขืฉื™ื›ื˜ืข ืื™ื– ืฆื• ืฉื˜ืขืœืŸ ื”ืึธื˜ืคื™ืงืก ืฆื• ื’ืขื‘ืŸ Multi-Queue. ืžื•ืœื˜ื™-ืงื™ื™ ืกืึทืœื•ื•ื– ื“ื™ ืคึผืจืึธื‘ืœืขื ื•ื•ืขืŸ ื“ื™ ืคึผืจืึทืกืขืกืขืจ ืžื™ื˜ SND ืื™ื– ื’ืขื ื™ืฆื˜ ืื™ืŸ ืคื™ืœืข ืคึผืจืึธืฆืขื ื˜, ืื•ืŸ ืคื™ื™ืจื•ื•ืึทืœ ื™ื ืกื˜ืึทื ืกื™ื– ืื•ื™ืฃ ืื ื“ืขืจืข ืคึผืจืึทืกืขืกืขืจื– ื–ืขื ืขืŸ ืœื™ื™ื“ื™ืง. ื“ืขืจื ืึธืš SND ื•ื•ืึธืœื˜ ื”ืึธื‘ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืฉืึทืคึฟืŸ ืคื™ืœืข ืงื™ื•ื– ืคึฟืึทืจ ืื™ื™ืŸ NIC ืื•ืŸ ืฉื˜ืขืœืŸ ืคืึทืจืฉื™ื“ืขื ืข ืคึผืจื™ื™ืึธืจืึทื˜ื™ื– ืคึฟืึทืจ ืคืึทืจืฉื™ื“ืขื ืข ืคืึทืจืงืขืจ ืื•ื™ืฃ ื“ื™ ืงืขืจืŸ ืžื“ืจื’ื”. ื“ืขืจื™ื‘ืขืจ, ืงืคึผื• ืงืึธืจืขืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืžืขืจ ื™ื ื˜ืขืœื™ื“ื–ืฉืึทื ื˜ืœื™. ื“ื™ ืžืขื˜ื”ืึธื“ืก ื–ืขื ืขืŸ ืื•ื™ืš ื“ื™ืกืงืจื™ื™ื‘ื“ ืื™ืŸ ืกืงืงืกื ื•ืžืงืก.

ืื™ืŸ ืžืกืงื ื, ืื™ืš ื•ื•ืึธืœื˜ ื•ื•ื™ ืฆื• ื–ืึธื’ืŸ ืึทื– ื“ืึธืก ื–ืขื ืขืŸ ื ื™ืฉื˜ ืึทืœืข ื“ื™ ื‘ืขืกื˜ืขืจ ืคึผืจืึทืงื˜ื™ืกื™ื– ืคึฟืึทืจ ืึธืคึผื˜ื™ืžื™ื–ื™ื ื’ ื˜ืฉืขืง ืคึผื•ื™ื ื˜, ืึธื‘ืขืจ ื–ื™ื™ ื–ืขื ืขืŸ ื“ื™ ืžืขืจืกื˜ ืคืึธืœืงืก. ืื•ื™ื‘ ืื™ืจ ื•ื•ืึธืœื˜ ื•ื•ื™ ืฆื• ืกื“ืจ ืึท ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืคื•ืŸ ื“ื™ื™ืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคึผืึธืœื™ื˜ื™ืง ืึธื“ืขืจ ืกืึธืœื•ื•ืข ืึท ืคึผืจืึธื‘ืœืขื ืฉื™ื™ึทื›ื•ืช ืฆื• ื˜ืฉืขืง ืคึผื•ื™ื ื˜, ื‘ื™ื˜ืข ืงืึธื ื˜ืึทืงื˜ [ืื™ืžืขื™ืœ ื‘ืืฉื™ืฆื˜].

ื’ื•ื˜ ื’ืœื™ืง!

ืžืงื•ืจ: www.habr.com

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’