Tirotiro i te Mōkihi Hōhonu ((DPI)He hangarau e whakamahia ana i roto i ngā Network Packet Brokers (NPB) hei tirotiro me te tātari i ngā ihirangi o ngā pākete whatunga i te taumata whānui. Kei roto i tēnei ko te tirotiro i te kawenga, ngā pane, me ētahi atu mōhiohio motuhake ki te kawa i roto i ngā pākete hei whiwhi māramatanga taipitopito ki te haere o te whatunga.
Kei tua atu i te tātari pane noa iho te DPI, ā, ka whakaratohia he māramatanga hōhonu mō ngā raraunga e rere ana i roto i te whatunga. Mā tēnei ka taea te tirotiro hōhonu i ngā kawa o te paparanga tono, pērā i te HTTP, FTP, SMTP, VoIP, ngā kawa roma ataata rānei. Mā te tirotiro i ngā ihirangi tuturu i roto i ngā mōkihi, ka taea e te DPI te kite me te tautuhi i ngā tono motuhake, ngā kawa, tae atu ki ngā tauira raraunga motuhake.
Haunga te tātaritanga whakarōpū o ngā wāhitau pūtake, ngā wāhitau ūnga, ngā tauranga pūtake, ngā tauranga ūnga, me ngā momo kawa, ka tāpirihia hoki e te DPI te tātaritanga paparanga-tono hei tautuhi i ngā tono me ō rātou ihirangi. Ina rere ngā raraunga mōkihi 1P, TCP, UDP rānei mā te pūnaha whakahaere whānui i runga i te hangarau DPI, ka pānuihia e te pūnaha te ihirangi o te kawenga mōkihi 1P hei whakarite anō i ngā mōhiohio paparanga tono i roto i te kawa OSI Layer 7, kia whiwhi ai i ngā ihirangi o te kaupapa tono katoa, kātahi ka hanga i te waka kia rite ki te kaupapa here whakahaere kua tautuhia e te pūnaha.
Me pēhea te mahi a te DPI?
He maha ngā wā kāore i te kaha tukatuka ngā pareārai tuku iho ki te whakahaere i ngā tirotiro wā-tūturu mō ngā rahinga nui o te waka. I te whanaketanga o te hangarau, ka taea te whakamahi i te DPI ki te whakahaere i ngā tirotiro uaua ake hei tirotiro i ngā pane me ngā raraunga. I te nuinga o te wā, ka whakamahia e ngā pareārai me ngā pūnaha kimi urutomo te DPI. I roto i te ao e tino hira ana ngā mōhiohio matihiko, ka tukuna ia wāhanga o ngā mōhiohio matihiko mā te Ipurangi i roto i ngā mōkihi iti. Kei roto i tēnei ko te īmēra, ngā karere i tukuna mā te taupānga, ngā paetukutuku i tirohia, ngā kōrero ataata, me ētahi atu. Haunga ngā raraunga tuturu, kei roto i ēnei mōkihi ngā raraunga e tautuhi ana i te pūtake waka, te ihirangi, te ūnga, me ētahi atu mōhiohio nui. Mā te hangarau tātari mōkihi, ka taea te aroturuki tonu me te whakahaere i ngā raraunga kia pai ai te tuku atu ki te wāhi tika. Engari hei whakarite i te haumarutanga whatunga, kāore i te rawaka te tātari mōkihi tuku iho. Ko ētahi o ngā tikanga matua o te tirotiro hohonu mōkihi i roto i te whakahaere whatunga kua whakarārangihia i raro nei:
Aratau/Waitohu Taurite
Ka tirohia ia kete mō te ōrite ki tētahi pātengi raraunga o ngā whakaeke whatunga e mōhiotia ana e tētahi pareārai ahi me ngā āheinga pūnaha kite urutomo (IDS). Ka rapua e te IDS ngā tauira kino motuhake e mōhiotia ana, ā, ka monoa te waka ina kitea ngā tauira kino. Ko te ngoikoretanga o te kaupapa here taurite waitohu ko te mea ka pā anake ki ngā waitohu e whakahoutia ana i ngā wā katoa. Hei tāpiri, ka taea anake e tēnei hangarau te tiaki i a ia anō mai i ngā tūmomo riri, ngā whakaeke rānei e mōhiotia ana.
Tūnga Whakakorenga Kawa
Nā te mea kāore te tikanga hapa kawa e whakaae noa i ngā raraunga katoa kāore e ōrite ki te pātengi raraunga waitohu, kāore he ngoikoretanga o te tikanga taurite tauira/waitohu i roto i te tikanga hapa kawa e whakamahia ana e te pareāra IDS. Engari, ka whakamahia e ia te kaupapa here whakakore taunoa. Mā te whakamāramatanga kawa, ka whakatauhia e ngā pareāra ko ēhea waka me whakaaetia, ā, ka tiakina te whatunga mai i ngā tūmomo riri kāore i te mōhiotia.
Pūnaha Ārai Urupare (IPS)
Ka taea e ngā otinga IPS te aukati i te tuku i ngā mōkihi kino i runga i ō rātou ihirangi, ā, ka aukati i ngā whakaekenga whakapae i te wā tūturu. Ko te tikanga tēnei, mēnā he mōrearea haumarutanga e mōhiotia ana te mōkihi, ka aukati wawe te IPS i te haere o te whatunga i runga i tētahi huinga ture kua tautuhia. Ko tētahi ngoikoretanga o te IPS ko te hiahia ki te whakahou i te pātengi raraunga mōrearea ipurangi me ngā taipitopito mō ngā mōrearea hou, me te tūponotanga o ngā hua teka. Engari ka taea te whakaiti i tēnei mōrearea mā te waihanga kaupapa here matawhānui me ngā paepae ritenga, te whakatū i te whanonga taketake tika mō ngā wāhanga whatunga, me te arotake i ngā whakatūpato me ngā kaupapa kua pūrongohia i ia wā hei whakarei ake i te aroturukitanga me te whakatūpato.
1- Te DPI (Tirohanga Pākete Hōhonu) i roto i te Kaihokohoko Pākete Whatunga
Ko te "hōhonu" he whakataurite i te taumata me te tātaritanga mōkihi noa, "tirotiro mōkihi noa" ko te tātaritanga anake o te paparanga mōkihi IP 4, tae atu ki te wāhitau pūtake, te wāhitau ūnga, te tauranga pūtake, te tauranga ūnga me te momo kawa, me te DPI engari me te tātaritanga hierarchical, i whakanuia hoki te tātaritanga paparanga tono, te tautuhi i ngā tono me ngā ihirangi, kia tutuki ai ngā mahi matua:
1) Tātari Taupānga -- tātari hanganga waka whatunga, tātari mahi, me te tātari rere
2) Tātari Kaiwhakamahi -- te rerekētanga o ngā rōpū kaiwhakamahi, te tātari whanonga, te tātari whakamutunga, te tātari ia au, me ētahi atu.
3) Tātari Huānga Whatunga -- tātari i runga i ngā āhuatanga ā-rohe (tāone, rohe, tiriti, me ētahi atu) me te kawenga teihana turanga
4) Whakahaere Waka -- Te whakawhāiti tere P2P, te whakapūmau QoS, te whakapūmau whānui, te arotau rauemi whatunga, me ētahi atu.
5) Te Whakapūmau Haumarutanga -- Ngā whakaekenga DDoS, te awha o te horapa raraunga, te aukati i ngā whakaekenga huaketo kino, me ētahi atu.
2- Te Whakarōpūtanga Whānui o ngā Taupānga Whatunga
He tini ngā taupānga kei runga i te Ipurangi i ēnei rā, engari he whānuitia ngā taupānga tukutuku noa.
Ki taku mōhio, ko Huawei te kamupene mohio taupānga pai rawa atu, e kī ana ka mohio ia ki te 4,000 taupānga. Ko te tātari kawa te kaupapa matua o te maha o ngā kamupene pareārai (Huawei, ZTE, me ētahi atu), ā, he kaupapa tino nui hoki, e tautoko ana i te whakatinanatanga o ētahi atu kaupapa mahi, te tautuhi tika i ngā taupānga, me te whakapai ake i te mahi me te pono o ngā hua. I te whakatauira i te tautuhi pūmanawa kino i runga i ngā āhuatanga o te haere o te whatunga, pērā i taku mahi i nāianei, he mea tino nui hoki te tautuhi kawa tika me te whānui. Ki te kore e whakaurua te haere o te whatunga o ngā taupānga noa mai i te haere o te kamupene ki tāwāhi, ka iti noa te ōwehenga o te haere e toe ana, he pai ake mō te tātari pūmanawa kino me te whakaoho.
E ai ki aku wheako, ka whakarōpūtia ngā taupānga e whakamahia whānuitia ana i runga i ā rātou mahi:
PS: E ai ki te māramatanga whaiaro mō te whakarōpūtanga tono, mēnā he pai āu whakaaro, nau mai waiho mai he karere tono.
1). Ī-mēra
2). Ataata
3). Ngā Kēmu
4). Akomanga OA o te Tari
5). Whakahōu pūmanawa
6). Pūtea (pēke, Alipay)
7). Ngā hea
8). Whakawhitiwhiti Kōrero Hapori (pūmanawa IM)
9). Te tirotiro tukutuku (tērā pea he pai ake te hono atu ki ngā URL)
10). Ngā taputapu tango (kōpae tukutuku, tango P2P, e pā ana ki te BT)
Kātahi, me pēhea te mahi a te DPI (Deep Packet Inspection) i roto i te NPB:
1). Hopu Pākete: Ka hopu te NPB i ngā waka whatunga mai i ngā momo pūtake, pērā i ngā pana, ngā pouara, ngā taputapu rānei. Ka whiwhi ia i ngā pākete e rere ana i roto i te whatunga.
2). Te Tātaritanga Pākete: Ka tātarihia ngā pākete kua hopukina e te NPB hei tango i ngā paparanga kawa me ngā raraunga e pā ana. Mā tēnei tukanga tātaritanga ka āwhina i te tautuhi i ngā wāhanga rerekē i roto i ngā pākete, pērā i ngā pane Ethernet, ngā pane IP, ngā pane paparanga kawe (hei tauira, TCP, UDP rānei), me ngā kawa paparanga tono.
3). Tātari Utu: Mā te DPI, ka neke atu te NPB i te tirotiro pane anake, ā, ka arotahi ki te utu, tae atu ki ngā raraunga tuturu i roto i ngā mōkihi. Ka tirotirohia hōhonutia te ihirangi o te utu, ahakoa te tono, te kawa rānei e whakamahia ana, hei tango i ngā mōhiohio e tika ana.
4). Te Tāututanga Kawa: Mā te DPI ka taea e te NPB te tautuhi i ngā kawa me ngā tono motuhake e whakamahia ana i roto i te waka whatunga. Ka taea e ia te kite me te whakarōpū i ngā kawa pēnei i te HTTP, FTP, SMTP, DNS, VoIP, ngā kawa roma ataata rānei.
5). Tirotiro Ihirangi: Mā te DPI ka taea e te NPB te tirotiro i ngā ihirangi o ngā mōkihi mō ngā tauira, waitohu, kupumatua rānei. Mā tēnei ka taea te kite i ngā tūmomo riri whatunga, pērā i te pūmanawa kino, ngā huaketo, ngā nganatanga urutomo, ngā mahi whakapae rānei. Ka taea hoki te whakamahi i te DPI mō te tātari ihirangi, te whakatinana i ngā kaupapa here whatunga, te tautuhi rānei i ngā takahi ture raraunga.
6). Te Tangohanga Raraunga Meta: I te wā o te DPI, ka tangohia e te NPB ngā raraunga meta e tika ana mai i ngā mōkihi. Kei roto pea i tēnei ko ngā mōhiohio pēnei i ngā wāhitau IP pūtake me te wāhitau IP ūnga, ngā tau tauranga, ngā taipitopito wātū, ngā raraunga tauwhitinga, me ētahi atu āhuatanga e tika ana.
7). Te Arataki, te Tātari rānei i ngā Waka: I runga i te tātaritanga DPI, ka taea e te NPB te arataki i ngā mōkihi motuhake ki ngā ūnga kua tohua hei tukatuka atu, pērā i ngā taputapu haumarutanga, ngā taputapu aroturuki, ngā tūāpapa tātari rānei. Ka taea hoki e ia te whakamahi i ngā ture tātari hei maka atu, hei tuku anō rānei i ngā mōkihi i runga i ngā ihirangi, i ngā tauira rānei kua tautuhia.
Wā tuku: Pipiri-25-2023
