I ngā taiao whatunga uaua, tere-nui, ā, he maha ngā wā kua whakamunatia o ēnei rā, he mea tino nui te tirohanga whānui mō te haumarutanga, te aroturukitanga mahi, me te tutuki i ngā whakaritenga.Ngā Kaihokohoko Mōkihi Whatunga (NPB)kua whanake mai i ngā kaiwhakaemi TAP māmā ki ngā tūāpapa matatau, atamai hoki, he mea nui mō te whakahaere i te waipuke o ngā raraunga waka me te whakarite kia pai te mahi a ngā taputapu aroturuki me te haumarutanga. Anei tētahi tirohanga taipitopito ki ā rātou horopaki tono matua me ngā otinga:
Ngā Raru Matua e Whakatauhia ana e ngā NPB:
He nui ngā rerenga raraunga e whakaputaina ana e ngā whatunga hou. Kāore e whai hua te hono tika i ngā taputapu haumarutanga me te aroturuki nui (IDS/IPS, NPM/APM, DLP, tātaritanga tūmatanui) ki ngā hononga whatunga (mā ngā tauranga SPAN, TAP rānei) ā, he maha ngā wā kāore e taea te whakatutuki nā:
1. Te Utauta Nui rawa: Ka kī tonu ngā taputapu i ngā raraunga kāore e tika ana, ka taka ngā mōkihi me ngā tūmomo riri ngaro.
2. Kore Whai Hua o ngā Utauta: Ka moumou rauemi ngā taputapu ki te tukatuka raraunga tāruarua, kāore rānei e hiahiatia ana.
3. Te Āhua Matatini: Nā ngā whatunga tohatoha (Ngā Pokapū Raraunga, Kapua, Ngā Tari Peka) ka uaua te aroturuki pokapū.
4. Ngā Wāhi Matapo Whakamuna: Kāore e taea e ngā taputapu te tirotiro i ngā rerenga kua whakamunatia (SSL/TLS) me te kore e wetemunatia.
5. Ngā Rauemi SPAN Iti: Ka pau ngā rauemi pana i ngā tauranga SPAN, ā, he maha ngā wā kāore e taea te whakahaere i te rerenga tere-raina katoa.
Otinga NPB: Te Takawaenga Waka Atamai
Kei waenganui i ngā tauranga TAP/SPAN whatunga me ngā taputapu aroturuki/haumarutanga ngā NPB. Ka mahi rātou hei "pirihimana waka atamai," e mahi ana i:
1. Whakakotahitanga: Whakakotahitia ngā rerenga mai i ngā hononga maha (tinana, mariko) ki roto i ngā whāngai whakakotahi.
2. Tātari: Tukua ngā raraunga e tika ana ki ngā taputapu motuhake i runga i ngā paearu (IP/MAC, VLAN, kawa, tauranga, tono) mā te tīpakonga.
3. Taurite Utaina: Tohatohahia ngā rerenga waka kia ōrite puta noa i ngā tauira maha o te taputapu kotahi (hei tauira, ngā pūoko IDS kua whakarōpūhia) kia taea ai te whakawhanui me te manawanui.
4. Tangohia te tāruarua: Mukua ngā tārua ōrite o ngā mōkihi i hopukina i runga i ngā hononga tauhou.
5. Te Tapatapa i ngā Mōkihi: Ka tapahia ngā mōkihi (te tango i ngā kawenga) me te tiaki i ngā pane, ka whakaiti i te whānui o te raraunga ki ngā taputapu e hiahia ana ki ngā raraunga raraunga anake.
6. Wetewete SSL/TLS: Whakamutua ngā wātū whakamuna (mā te whakamahi i ngā kī), mā te whakaatu i ngā karere kuputuhi mārama ki ngā taputapu tirotiro, kātahi ka whakamuna anō.
7. Tāruarua/Whakapāho maha: Tukuna te rerenga rerenga kotahi ki ngā taputapu maha i te wā kotahi.
8. Tukatuka Matatau: Te tango raraunga matua, te whakaputa rere, te tā wā, te huna i ngā raraunga tairongo (hei tauira, PII).
Kimihia ki konei kia mōhio ai koe ki tēnei tauira:
Kaihoko Mōkihi Whatunga Mylinking™ (NPB) ML-NPB-3440L
16*10/100/1000M RJ45, 16*1/10GE SFP+, 1*40G QSFP me te 1*40G/100G QSFP28, Teitei 320Gbps
Ngā horopaki me ngā otinga tono taipitopito:
1. Te Whakapai Aroturuki Haumarutanga (IDS/IPS, NGFW, Threat Intel):
○ Horopaki: Kua taupokina ngā taputapu haumarutanga e te nui o ngā raraunga e rere ana mai i te Rawhiti ki te Hauāuru i roto i te pokapū raraunga, e taka ana ngā mōkihi me te ngaronga o ngā tūmomo mōrearea nekehanga taha. Ka huna e ngā raraunga whakamunatia ngā kawenga kino.
○ Otinga NPB:Te kohikohi i ngā waka mai i ngā hononga matua o roto i te DC.
* Whakamahia ngā tātari matatini hei tuku noa i ngā wāhanga waka whakapae (hei tauira, ngā tauranga kore-paerewa, ngā whatunga iti motuhake) ki te IDS.
* Taurite kawenga puta noa i te rōpū o ngā pūoko IDS.
* Mahi i te wetemunatanga SSL/TLS ka tuku i ngā karere kuputuhi mārama ki te tūāpapa IDS/Threat Intel hei tirotiro hohonu.
* Tangohia te tārua o ngā waka mai i ngā ara tauhou.Hua:Te tere teitei ake o te kitenga i ngā tūmomo mōrearea, te whakaiti i ngā whakapae teka, te whakamahi rauemi IDS kua pai ake.
2. Te Arotau i te Aroturukitanga Mahi (NPM/APM):
○ Horopaki: He uaua ki ngā taputapu Aroturuki Mahi Whatunga te hono i ngā raraunga mai i ngā rau hononga marara (WAN, tari peka, kapua). He nui rawa te utu mō te hopu mōkihi katoa mō te APM, ā, he nui hoki te whānui o te hononga.
○ Otinga NPB:
* Whakakotahitia ngā waka mai i ngā TAP/SPAN kua marara ki tētahi papanga NPB pokapū.
* Tātarihia ngā rerenga hei tuku i ngā rerenga motuhake ki ngā tono (hei tauira, VoIP, SaaS nui) ki ngā taputapu APM.
* Whakamahia te tapahi pākete mō ngā taputapu NPM e hiahia ana ki ngā raraunga wā rere/tauwhitinga (ngā pane), ka whakaiti nui i te whakamahinga whānui.
* Tāruatia ngā awa inenga mahi matua ki ngā taputapu NPM me APM.Hua:He tirohanga whānui, he tirohanga mahi honohono, he utu taputapu kua whakaitihia, he utu whānui mō te roanga o te hononga.
3. Te Tirohanga o te Kapua (Tūmatanui/Tūmataiti/Ranu):
○ Horopaki: Te korenga o te urunga TAP taketake i roto i ngā kapua tūmatanui (AWS, Azure, GCP). Te uaua ki te hopu me te whakahaere i te waka mīhini/ipu mariko ki ngā taputapu haumarutanga me te aroturuki.
○ Otinga NPB:
* Whakatakotoria ngā NPB mariko (vNPB) ki roto i te taiao kapua.
* Ka patopato ngā vNPB i te waka whakawhiti mariko (hei tauira, mā te ERSPAN, VPC Traffic Mirroring).
* Tātari, whakakotahi, me te taurite i ngā waka kapua o te Rawhiti-Hauāuru me te Raki-Tonga.
* Whakapūmautia te rere o ngā waka e tika ana ki ngā NPB tūturu kei roto i te papaanga, ki ngā taputapu aroturuki kapua rānei.
* Whakauru atu ki ngā ratonga tirohanga kapua taketake.Hua:Te tūnga haumarutanga pumau me te aroturukitanga mahi puta noa i ngā taiao ranu, hei wikitoria i ngā herenga tirohanga kapua.
4. Te Ārai i te Ngaronga Raraunga (DLP) me te Whakatutukitanga:
○ Horopaki: Me tirotiro e ngā taputapu DLP ngā raraunga e haere atu ana ki waho mō ngā raraunga tairongo (PII, PCI) engari kua waipuketia e ngā raraunga ā-roto kāore e tika ana. Me aroturuki ngā rerenga raraunga kua whakaritea kia tutuki ai ngā whakaritenga.
○ Otinga NPB:
* Tātarihia ngā rerenga raraunga hei tuku noa i ngā rerenga atu (hei tauira, mō te ipurangi, mō ngā hoa mahi motuhake rānei) ki te miihini DLP.
* Whakamahia te tirotiro hohonu mōkihi (DPI) ki te NPB hei tautuhi i ngā rerenga kei roto ngā momo raraunga kua whakaritea, me te whakarite i aua rerenga mō te taputapu DLP.
* Hunaia ngā raraunga tairongo (hei tauira, ngā tau kāri nama) i roto i ngā mōkihii mua ite tuku ki ngā taputapu aroturuki kāore i te tino hira mō te takiuru i ngā hanganga ture.Hua:He pai ake te whakahaere DLP, he whakaiti i ngā hua teka, he whakahaere māmā ake i te arotake hanganga ture, he whakapai ake i te tūmataitinga raraunga.
5. Ngā Arotakenga Whatunga me te Rapurongoā:
○ Horopaki: Me hopu katoa ngā pākete (PCAP) mai i ngā pūwāhi maha i roto i te wā e tika ana kia kitea he raruraru mahi uaua, he takahi rānei. He puhoi te whakaoho ā-ringa i ngā hopunga; he uaua te penapena i ngā mea katoa.
○ Otinga NPB:
* Ka taea e ngā NPB te ārai tonu i ngā waka (i te tere raina).
* Whirihorahia ngā mea whakaoho (hei tauira, te āhua hapa motuhake, te pikinga o te waka, te whakatūpato mōrearea) i runga i te NPB hei hopu aunoa i ngā waka e tika ana ki tētahi taputapu hopu mōkihi hono.
* Tātarihia i mua ngā raraunga i tukuna ki te taputapu hopu hei penapena i ngā mea e tika ana anake.
* Tāruatia te rerenga rerenga nui ki te taputapu hopu me te kore e pā ki ngā taputapu whakaputa.Hua:Te tere ake o te wā-waenga-ki-te-taumira (MTTR) mō ngā motuhanga/ngā takahi hiko, te hopunga ā-ture kua āta whakaritea, me te whakaiti i ngā utu rokiroki.
Ngā Whakaaro me ngā Otinga mō te Whakatinanatanga:
○Tauine: Kōwhiria ngā NPB he nui te kiato o te tauranga me te putanga whakawhiti (1/10/25/40/100GbE+) hei whakahaere i ngā waka o nāianei me ngā waka o muri mai. He maha ngā wā ka whakaratohia e te chassis modular te tauine pai rawa atu. Ka tauine ngā NPB mariko i roto i te kapua.
○Manawanui: Whakatinanahia ngā NPB tāpiripiri (ngā takirua HA) me ngā ara tāpiripiri ki ngā taputapu. Whakarite kia rite te āhua o te mahi i roto i ngā tatūnga HA. Whakamahia te taurite kawenga NPB mō te manawanui o ngā taputapu.
○Whakahaere me te Aunoatanga: He mea nui ngā papatohu whakahaere pokapū. Rapua ngā API (RESTful, NETCONF/YANG) hei whakauru atu ki ngā tūāpapa whakarite (Ansible, Puppet, Chef) me ngā pūnaha SIEM/SOAR mō ngā huringa kaupapa here hihiri i runga i ngā matohi.
○Haumarutanga: Tiakina te atanga whakahaere NPB. Whakahaerehia te urunga kia kaha. Ki te wetewete i te whakawhitiwhiti, kia tino tika ngā kaupapa here whakahaere kī me ngā hongere haumaru mō te whakawhiti kī. Whakaarohia te huna i ngā raraunga tairongo.
○Whakaurunga Taputapu: Me whakarite kia tautoko te NPB i te hononga taputapu e hiahiatia ana (atanga ā-tinana/mariko, ngā kawa). Manatokohia te hototahitanga ki ngā whakaritenga taputapu motuhake.
Nō reira,Ngā Kaihokohoko Mōkihi WhatungaKāore i te mea he taonga whiriwhiri noa iho; he wāhanga hanganga taketake ēnei mō te whakatutuki i te tirohanga whatunga mahi i tēnei ao hou. Mā te kohikohi, te tātari, te taurite kawenga, me te tukatuka i ngā waka, ka whakamanahia e ngā NPB ngā taputapu haumarutanga me te aroturuki kia mahi i te tino pai me te whai hua. Ka pakaruhia e rātou ngā ara tirohanga, ka hinga i ngā wero o te tauine me te whakamunatanga, ā, i te mutunga ka whakaratohia te māramatanga e hiahiatia ana hei tiaki i ngā whatunga, hei whakarite i te mahi tino pai, hei whakatutuki i ngā ture ture, me te whakatau tere i ngā take. Ko te whakatinana i tētahi rautaki NPB pakari he taahiraa nui ki te hanga i tētahi whatunga e kitea ake ana, e haumaru ake ana, e pakari ake ana hoki.
Wā tuku: Hōngongoi-07-2025
