Sebenzisa Amakesi ukuze uthole Izixazululo Zokubonakala Kwenethiwekhi
Kuyini Ukubonakala Kwenethiwekhi?
Ukubonakala kuchazwa i-Webster's Dictionary ngokuthi “ikhono lokuqashelwa kalula” noma “izinga lokucaca.” Ukubonakala kwenethiwekhi noma uhlelo lokusebenza kubhekisela ekususweni kwezindawo eziyizimpumputhe ezisitha amandla okubona kalula (noma ukulinganisa) okwenzeka kunethiwekhi kanye/noma izinhlelo zokusebenza kunethiwekhi. Lokhu kubonakala kuvumela amaqembu e-IT ukuthi ahlukanise ngokushesha izinsongo zokuphepha futhi axazulule izinkinga zokusebenza, ekugcineni alethe umuzwa ongcono kakhulu ongakhona womsebenzisi wokugcina.
Okunye ukuqonda yilokho okuvumela amaqembu e-IT ukuthi aqaphe futhi athuthukise inethiwekhi kanye nezinhlelo zokusebenza nezinsizakalo ze-IT. Yingakho inethiwekhi, uhlelo lokusebenza, nokuvikeleka ukubonakala kubaluleke kakhulu kunoma iyiphi inhlangano ye-IT.
Indlela elula yokufinyelela ukubonakala kwenethiwekhi ukusebenzisa ukwakheka kokubonakala, okuyingqalasizinda ebanzi yokuphela ukuya ekupheleni ehlinzeka ngenethiwekhi ebonakalayo nebonakalayo, uhlelo lokusebenza, nokubonakala kokuvikeleka.
Ukubeka Isisekelo Sokubonakala Kwenethiwekhi
Lapho ukwakheka kokubonakala sekusendaweni, izimo eziningi zokusebenzisa ziyatholakala. Njengoba kuboniswe ngezansi, ukwakheka kokubonakala kumelele amazinga amathathu amakhulu okubonakala: izinga lokufinyelela, izinga lokulawula, kanye nezinga lokuqapha.
Ngokusebenzisa izakhi ezibonisiwe, ochwepheshe be-IT bangaxazulula izinkinga ezihlukahlukene zenethiwekhi nezinhlelo zokusebenza. Kunezigaba ezimbili zokusebenzisa izimo:
- Izixazululo Eziyisisekelo Zokubonakala
- Ukubonakala kwenethiwekhi okugcwele
Izixazululo zokubonakala eziyinhloko zigxile ekuvikelekeni kwenethiwekhi, ukonga izindleko, nokuxazulula izinkinga. Lezi izindlela ezintathu ezithinta i-IT nyanga zonke, uma kungenjalo nsuku zonke. Ukubonakala kwenethiwekhi okuphelele kuklanyelwe ukunikeza ukuqonda okukhulu ezindaweni eziyimpumputhe, ukusebenza nokuhambisana.
Yini ngempela ongayenza ngokubonakala kwenethiwekhi?
Kunezimo ezihlukene eziyisithupha zokusebenzisa ukubonakala kwenethiwekhi ezingabonisa ngokucacile inani. Lokhu:
- Ukuphepha kwenethiwekhi okuthuthukisiwe
- Ukuhlinzeka ngamathuba okuqukatha nokunciphisa izindleko
- Ukusheshisa ukuxazulula izinkinga nokwandisa ukwethembeka kwenethiwekhi
- Ukuqedwa kwezindawo eziyimpumputhe zenethiwekhi
- Ukuthuthukisa inethiwekhi nokusebenza kohlelo lokusebenza
- Ukuqinisa ukuthobela imithetho
Ngezansi kunezibonelo ezithile zokusebenzisa.
Isibonelo No. 1 - ukuhlunga idatha yezixazululo zokuphepha ezise-line (in-line), kwandisa ukusebenza kahle kwalezi zixazululo
Injongo yale nketho ukusebenzisa i-network packet broker (NPB) ukuhlunga idatha enobungozi obuncane (isibonelo, ividiyo nezwi) ukuze ikhiphe ekuhlolweni kokuphepha (uhlelo lokuvimbela ukungena (IPS), ukuvimbela ukulahleka kwedatha (DLP) , i-firewall yesicelo sewebhu (WAF), njll.). Le thrafikhi "engathandeki" ingakhonjwa futhi idluliselwe emuva kuswishi ye-by-pass futhi ithunyelwe kunethiwekhi. Inzuzo yalesi sixazululo ukuthi i-WAF noma i-IPS akudingeki ukuthi ichithe izinsiza zokucubungula (CPU) ihlaziya idatha engadingekile. Uma ithrafikhi yenethiwekhi yakho iqukethe inani elibalulekile lalolu hlobo lwedatha, ungase ufune ukusebenzisa lesi sici futhi unciphise umthwalo kumathuluzi akho okuvikela.
Izinkampani zibe nezimo lapho kufika ku-35% wethrafikhi yenethiwekhi enengozi ephansi ikhishwe ekuhlolweni kwe-IPS. Lokhu kwandisa ngokuzenzakalelayo umkhawulokudonsa we-IPS osebenzayo ngo-35% futhi kusho ukuthi ungakuhlehlisa ukuthenga i-IPS eyengeziwe noma ukuthuthukisa. Sonke siyazi ukuthi ithrafikhi yenethiwekhi iyakhula, ngakho-ke ngesinye isikhathi uzodinga i-IPS esebenza kangcono. Kuwumbuzo ngempela ukuthi uyafuna ukunciphisa izindleko noma cha.
Isibonelo No. 2 - ukulinganisa komthwalo kwandisa impilo yamadivayisi angu-1-10Gbps kunethiwekhi ye-40Gbps
Icala lokusebenzisa lesibili lihilela ukunciphisa izindleko zobunikazi bemishini yenethiwekhi. Lokhu kufezwa ngokusebenzisa ama-packet broker (NPBs) ukulinganisa ithrafikhi kumathuluzi okuphepha nawokuqapha. Ukulinganisa kokulayisha kungawasiza kanjani amabhizinisi amaningi? Okokuqala, ukwanda kwethrafikhi yenethiwekhi kuyisenzakalo esivame kakhulu. Kodwa kuthiwani ngokuqapha umthelela wokukhula kwamandla? Isibonelo, uma uthuthukisa ingqikithi yenethiwekhi yakho ukusuka ku-1 Gbps ukuya ku-10 Gbps, uzodinga amathuluzi angu-10 Gbps ukuze uqaphe ngendlela efanele. Uma ukhuphula ijubane ku-40 Gbps noma ku-100 Gbps, khona-ke ngesivinini esinjalo ukukhetha kwamathuluzi okuqapha kuncane kakhulu futhi izindleko ziphezulu kakhulu.
Abadayisi bephakheji bahlinzeka ngamakhono adingekayo wokuhlanganisa kanye nokulinganisa umthwalo. Isibonelo, ukulinganisa kwethrafikhi okungu-40 Gbps kuvumela ithrafikhi yokuqapha ukuthi isatshalaliswe phakathi kwamathuluzi amaningi we-10 Gbps. Ungakwazi ke ukunweba impilo yamadivayisi angu-10 Gbps uze ube nemali eyanele yokuthenga amathuluzi abiza kakhulu akwazi ukuphatha amanani edatha aphezulu.
Esinye isibonelo ukuhlanganisa amathuluzi endaweni eyodwa futhi uwaphakele idatha edingekayo evela kumthengisi wephakheji. Kwesinye isikhathi kusetshenziswa izixazululo ezihlukene ezisatshalaliswa kunethiwekhi. Idatha yocwaningo evela ku-Enterprise Management Associates (EMA) ikhombisa ukuthi ama-32% ezixazululo zebhizinisi asetshenziswa kancane, noma ngaphansi kwama-50%. Ukufakwa endaweni eyodwa kwamathuluzi nokulinganisa umthwalo kukuvumela ukuthi uhlanganise izinsiza futhi wandise ukusetshenziswa usebenzisa amadivaysi ambalwa. Ungase ulinde ukuthenga amathuluzi engeziwe kuze kube yilapho izinga lakho lokusebenzisa seliphezulu ngokwanele.
Isibonelo No. 3 - ukuxazulula izinkinga zokunciphisa/ukuqeda isidingo sokuthola izimvume zeBhodi Lokushintsha
Uma izinto ezibonakalayo (ama-TAP, ama-NPB...) sezifakiwe kunethiwekhi, ngeke udinge ukwenza izinguquko kunethiwekhi. Lokhu kukuvumela ukuthi wenze lula ezinye izinqubo zokuxazulula izinkinga ukuze uthuthukise ukusebenza kahle.
Isibonelo, uma i-TAP isifakiwe (“isethe bese uyikhohlwa”), idlulisela kancane ikhophi yakho konke ithrafikhi ku-NPB. Lokhu kunenzuzo enkulu yokuqeda ubunzima obukhulu bokuthola imvume yokwenza izinguquko kunethiwekhi. Uma futhi ufaka umthengisi wephakheji, uzoba nokufinyelela okusheshayo cishe kuyo yonke idatha edingekayo ukuze uxazulule inkinga.
Uma singekho isidingo sokwenza izinguquko, ungeqa izigaba zokugunyaza izinguquko futhi uye ngqo ekususeni iphutha. Le nqubo entsha inomthelela omkhulu ekwehliseni iMean Time to Repair (MTTR). Ucwaningo lubonisa ukuthi kungenzeka ukunciphisa i-MTTR kuze kufike ku-80%.
I-Case Study #4 - I-Application Intelligence, Ukusebenzisa Ukuhlunga Kwezicelo kanye Nokufakwa Kwedatha Ukuze Kuthuthukiswe Ukusebenza Kahle Kwezokuphepha
Yini i-Application Intelligence? Lobu buchwepheshe butholakala kwa-IXIA Packet Brokers (NPBs). Lokhu ukusebenza okuthuthukisiwe okukuvumela ukuthi wedlulele ngale kokuhlunga kwephakethe lesendlalelo esingu-2-4 (amamodeli we-OSI) futhi uhambe yonke indlela uye kungqimba 7 (ungqimba lohlelo lokusebenza). Inzuzo ukuthi ukuziphatha komsebenzisi nohlelo lokusebenza kanye nedatha yendawo ingakhiqizwa futhi ithunyelwe kunoma iyiphi ifomethi oyifunayo - amaphakethe angavuthiwe, amaphakethe ahlungiwe, noma ulwazi lwe-NetFlow (IxFlow). Iminyango ye-IT ingakwazi ukuhlonza izinhlelo zokusebenza zenethiwekhi ezifihliwe, ukunciphisa izinsongo zokuphepha kwenethiwekhi, futhi yehlise isikhathi sokuphumula senethiwekhi kanye/noma ithuthukise ukusebenza kwenethiwekhi. Izici ezihlukile zezinhlelo zokusebenza ezaziwayo nezingaziwa zingakhonjwa, zithwetshulwe futhi kwabelwane ngazo ngamathuluzi akhethekile okuqapha nawokuvikela.
- ukuhlonza izinhlelo zokusebenza ezisolisayo/ezingaziwa
- ukuhlonza ukuziphatha okusolisayo nge-geolocation, isibonelo, umsebenzisi osuka eNyakatho Korea uxhuma kuseva yakho ye-FTP futhi adlulisele idatha
- Ukukhishwa kwemfihlo kwe-SSL ukuze kuhlolwe futhi kuhlaziywe izinsongo ezingaba khona
- ukuhlaziya ukungasebenzi kahle kohlelo
- ukuhlaziywa komthamo wethrafikhi nokukhula kokuphathwa kwezinsiza ezisebenzayo kanye nokubikezela ukwanda
- ukufihla idatha ebucayi (amakhadi esikweletu, imininingwane...) ngaphambi kokuyithumela
Ukusebenza kwe-Visibility Intelligence kuyatholakala kokubili kubathengi bephakheji bangempela nababonakalayo (I-Cloud Lens Private) i-IXIA (NPB), kanye “namafu” asesidlangalaleni - I-Cloud Lens Public:
Ngokungeziwe ekusebenzeni okujwayelekile kwe-NetStack, i-PacketStack ne-AppStack:
Muva nje, ukusebenza kwezokuphepha kungeziwe: I-SecureStack (ukuthuthukisa ukucutshungulwa kwethrafikhi eyimfihlo), i-MobileStack (yabaqhubi beselula) kanye ne-TradeStack (yokuqapha nokuhlunga idatha yokuhweba ngezezimali):
okutholakele
Izixazululo zokubonakala kwenethiwekhi zingamathuluzi anamandla akwazi ukuthuthukisa ukuqapha kwenethiwekhi kanye nezakhiwo zokuphepha ezidala ukuqoqwa okuyisisekelo nokwabelana kwedatha ebalulekile.
Izimo zokusetshenziswa zivumela:
- nikeza ukufinyelela kudatha ethile edingekayo njengoba kudingeka ukuze kuhlolwe futhi kuxazululwe izinkinga
- engeza/susa izixazululo zokuphepha, ukuqapha kokubili okuku-inthanethi nokungaphandle kwebhendi
- ukunciphisa i-MTTR
- qinisekisa ukusabela okusheshayo ezinkingeni
- yenza ukuhlaziywa kwezinsongo ezithuthukile
- ukuqeda izimvume eziningi ze-bureaucratic
- ukunciphisa imiphumela yezezimali ye-hack ngokuxhuma ngokushesha izixazululo ezidingekayo kunethiwekhi nokunciphisa i-MTTR
- ukunciphisa izindleko nomsebenzi wokusetha ichweba le-SPAN
Source: www.habr.com