I aso nei lavelave, maualuga-saosaoa, ma e masani ona faʻailogaina siosiomaga fesoʻotaʻiga, ausia le vaʻaia atoatoa e sili ona taua mo le saogalemu, mataʻituina o faʻatinoga, ma le tausisia.Network Packet Brokers (NPBs)ua fa'atupula'ia mai fa'aputuga faigofie TAP i fa'amatalaga fa'apitoa, atamai e mana'omia mo le fa'afoeina o le lolovaia o fa'amaumauga o femalagaiga ma fa'amautinoa o lo'o fa'agaoioi lelei meafaigaluega e mata'ituina ma saogalemu. O se fa'amatalaga au'ili'ili ia latou fa'ata'ita'iga autu o fa'aoga ma fofo:
Fa'afitauli Autu NPBs Fo'ia:
O feso'ota'iga fa'aonaponei e fa'atupuina ai le tele o feoaiga. Fa'afeso'ota'i sa'o mo feso'ota'iga (e ala i SPAN ports po'o TAPs) e le lelei ma e masani ona le mafai ona o:
1. Ova Meafaigaluega: Ua tumu mea faigaluega i feoaiga le talafeagai, lafoa'i pepa ma misi taufaamata'u.
2. Le lelei o Meafaigaluega: Meafaigaluega faʻaumatia punaoa o loʻo faʻaaogaina faʻamatalaga faʻalua pe le manaʻomia.
3. Topology Lavelave: O feso'ota'iga tu'ufa'atasia (Fa'amaumauga Fa'amaumauga, Ao, Ofisa Paranesi) e fa'afaigata ai le mata'ituina.
4. Fa'ailoga Tauaso: E le mafai e mea faigaluega ona su'esu'eina fe'avea'i fa'ailoga (SSL/TLS) e aunoa ma le decryption.
5. Fa'atapula'a Punaoa a le SPAN: O uafu SPAN e fa'aaogaina puna'oa sui ma e masani ona le mafai ona fa'atautaia femalaga'iga atoa.
NPB Fofo: Fa'atalanoaga Fa'ata'avale Atamai
NPBs o lo'o nofo i le va o feso'ota'iga TAPs/SPAN ports ma meafaigaluega mata'ituina/saogalemu. Latou te galulue o ni "polisi tau fefaʻatauaʻiga," faʻaalia:
1. Fa'aputuga: Fa'atasi fefa'ataua'iga mai feso'ota'iga e tele (fa'aletino, fa'apitoa) i faga fa'atasi.
2. Filifiliga: Filifilia e tu'u atu na'o felauaiga talafeagai i meafaigaluega fa'apitoa e fa'atatau i ta'iala (IP/MAC, VLAN, protocol, port, application).
3. Fa'apaleni o uta: Fa'asoa fa'atasi auala feoa'i i le tele o mea faigaluega tutusa (fa'ata'ita'iga, fa'apipi'i IDS sensor) mo le fa'alauteleina ma le maufetuuna'i.
4. To'esea: Ave'ese kopi tutusa o pepa o lo'o pu'eina i luga o so'oga fa'agasolo.
5. Fa'a'a'ai Fa'aputu: Fa'a'oti pepa (ave'esea le uta) a'o fa'asaoina ulutala, fa'aitiitia le bandwidth i meafaigaluega e na'o metadata e mana'omia.
6. SSL/TLS Decryption: Fa'amutaina sauniga fa'ailoga (fa'aoga ki), fa'aalia manino-tusi fe'avea'i i meafaigaluega su'esu'e, ona toe fa'ailoga.
7. Fa'aliliuina/Fa'atele: Auina atu le ala tutusa o feoaiga i le tele o meafaigaluega i le taimi e tasi.
8. Fa'agasolo A'e: Ave'esea metadata, fa'atupu fa'asolo, fa'ailoga taimi, fa'amaufa'ailoga ma'ale'ale (fa'ata'ita'iga, PII).
Su'e iinei e iloa atili e uiga i lenei fa'ata'ita'iga:
Mylinking™ Network Packet Broker(NPB) ML-NPB-3440L
16*10/100/1000M RJ45, 16*1/10GE SFP+, 1*40G QSFP ma 1*40G/100G QSFP28, Max 320Gbps
Fa'amatalaga Fa'amatalaga Fa'amatalaga & Fofo:
1. Fa'aleleia le Mata'ituina o le Saogalemu (IDS/IPS, NGFW, Fa'amata'u Intel):
○ Fa'ata'ita'iga: O mea faigaluega saogalemu e lofia i le maualuga o le tele o feoaiga i Sasa'e-Sisifo i totonu o le nofoaga autu o fa'amaumauga, lafoa'i pepa ma misi fa'amata'u fa'amata'u. O fefa'ataua'iga fa'aigoaina e natia ai uta leaga.
○ NPB Fofo:Fefa'ataua'iga fa'atasi mai feso'ota'iga i totonu-DC.
* Fa'aaogā fa'amama fa'asili e lafo ai na'o vaega fe'avea'i masalomia (fa'ata'ita'iga, uafu e le masani ai, subnets fa'apitoa) i le IDS.
* Uta paleni i luga o se fuifui o masini IDS.
* Fa'atino fa'alilolilo SSL/TLS ma lafo atu fa'amatalaga manino i le IDS/Threat Intel platform mo su'esu'ega loloto.
* Fa'a'ese'ese le ta'avale mai auala fa'aletonu.I'uga:Fa'amata'u maualuga fua fa'amata'u, fa'aitiitia fa'aletonu sese, fa'asili le fa'aogaina o puna'oa IDS.
2. Fa'ateleina le Mata'ituina o Galuega (NPM/APM):
○ Fa'ata'ita'iga: Feso'ota'iga Su'esu'ega Fa'atinoga o meafaigaluega e tauivi e fa'amaopoopo fa'amaumauga mai le faitau selau o feso'ota'iga ta'ape (WAN, ofisa lala, ao). O le pu'eina atoa o pepa mo le APM e taugata tele ma e mamafa tele le bandwidth.
○ NPB Fofo:
* Tu'ufa'atasiga o fe'avea'iga mai TAPs/SPANs fa'afanua fa'asalalau i luga ole ie NPB fa'atotonugalemu.
* Fa'amama fefa'ataua'iga e lafo ai na'o fa'asologa fa'apitoa (fa'ata'ita'iga, VoIP, SaaS taua) i meafaigaluega APM.
* Fa'aaogā fa'ailoga pepa mo meafaigaluega a le NPM e mana'omia tele fa'amaumauga o taimi fa'agasolo (ulutala), fa'aitiitia le fa'aogaina o le bandwidth.
* Toe fa'atusa auala autu o fa'atinoga fa'atinoga i mea faigaluega NPM ma APM.I'uga:Fa'ato'atoa, va'aiga fa'atasi, fa'aitiitiga tau meafaigaluega, fa'aiti'itia le bandwidth i luga.
3. Va'aiga i le Ao (Fa'alaua'itele/Tu'atasi/Fa'a'au'au):
○ Fa'ata'ita'iga: Leai se avanoa o le TAP masani i ao lautele (AWS, Azure, GCP). Faigata le pu'eina ma le fa'atonuina o masini/koneteina fe'avea'i i mea faigaluega saogalemu ma mata'ituina.
○ NPB Fofo:
* Faʻapipiʻi NPBs (vNPBs) i totonu ole siosiomaga ao.
* vNPBs tap virtual switch traffic (fa'ata'ita'iga, e ala i le ERSPAN, VPC Traffic Mirroring).
* Fa'amama, fa'aputu'e, ma paleni uta i Sasa'e-Sisifo ma Matu-Saute fe'avea'i ao.
* Saogalemu alavai talafeagai i tua atu i luga o fale NPBs faaletino po o le ao-mataʻituina meafaigaluega.
* Fa'atasi ma 'au'aunaga va'aia o le ao.I'uga:Tulaga saogalemu tumau ma le mataituina o faatinoga i totonu o siosiomaga faʻafefiloi, faʻatoʻilaloina tapulaʻa vaʻaia ao.
4. Puipuiga o Fa'amaumauga (DLP) & Usita'i:
○ Fa'ata'ita'iga: E mana'omia e mea faigaluega a le DLP ona su'esu'eina feoaiga i fafo mo fa'amatalaga ma'ale'ale (PII, PCI) ae o lo'o lofia i fe'avea'i i totonu e le talafeagai. O le tausisia e mana'omia ai le mata'ituina o fa'amaumauga fa'atulafonoina.
○ NPB Fofo:
* Fa'amama fefa'ataua'iga e lafo ai na'o tafega i fafo (fa'ata'ita'iga, fa'atatau mo le initaneti po'o pa'aga fa'apitoa) i le afi DLP.
* Fa'aoga le su'esu'ega loloto (DPI) ile NPB e fa'ailoa ai tafega o lo'o iai fa'amaumauga fa'atulafonoina ma fa'amuamua mo le meafaigaluega DLP.
* Ufiufi fa'amatalaga ma'ale'ale (fa'ata'ita'iga, numera kata fai aitalafu) i totonu o fa'amaumaugamuamuaauina atu i mea faigaluega mata'ituina e le taua tele mo le tausisia o la'au.I'uga:Fa'agaioiga DLP sili atu ona lelei, fa'aitiitia mea sese, fa'amalieina le su'eina o su'ega, fa'aleleia fa'alilolilo fa'amatalaga.
5. Network Forensics & Troubleshooting:
○ Fa'ata'ita'iga: O le su'esu'eina o se fa'afitauli lavelave po'o le soli e mana'omia ai le pu'eina atoa o pepa (PCAP) mai le tele o vaega i le taimi. O le fa'aosoina o pu'e ma le lima e tuai; teuina mea uma e le mafai.
○ NPB Fofo:
* E mafai e NPB ona faʻafefe feʻaveaʻi faʻaauau (i laina laina).
* Fa'atonu mea fa'aoso (fa'ata'ita'iga, tulaga fa'aletonu fa'apitoa, fe'avea'i fe'avea'i, mataala fa'amata'u) i luga o le NPB e otometi ai ona pu'e fe'avea'i talafeagai i se masini pu'e fa'apipi'i.
* Mu'i fa'amama le fe'avea'i na lafo i le masini pu'e e teu ai na'o mea e mana'omia.
* Toe fa'afo'i le auala fa'atauva'a i le masini pu'e e aunoa ma le a'afiaina o meafaigaluega gaosi.I'uga:Fa'atosina vave-taimi-i-fa'ai'uga (MTTR) mo ta'otoga/solia, fa'atatau mo su'esu'ega, fa'aitiitia tau e teu ai.
Fa'atinoga Mana'oga & Fofo:
○Scalability: Filifili NPBs e lava le tele o le taulaga ma faʻaogaina (1/10/25/40/100GbE+) e faʻatautaia feʻaveaʻi o loʻo iai nei ma le lumanaʻi. Modular chassis e masani ona maua ai le scalability sili. O NPB fa'apitoa e fuaina i le ao.
○Maufetuuna'i: Fa'atino NPBs toe fa'atupuina (paiga HA) ma auala toe fa'aopoopo i meafaigaluega. Faʻamautinoa le tuʻufaʻatasia o le setete i faʻatulagaga HA. Fa'aogaina le paleni o uta NPB mo le maufetuuna'i meafaigaluega.
○Pulea & Fa'autometi: E taua tele fa'amafanafanaga fa'atonu. Vaavaai mo APIs (RESTful, NETCONF/YANG) mo le tuʻufaʻatasia ma faʻasalalauga faʻapipiʻi (Ansible, Puppet, Chef) ma SIEM/SOAR faiga mo suiga malosi o faiga faʻavae e faʻavae i luga o faʻasalalauga.
○Saogalemu: Faʻamautu le faʻaogaina o le pulega o le NPB. Pulea lelei le avanoa. Afai e decrypting felauaiga, faʻamautinoa faiga faʻavae pulega autu ma malupuipuia auala mo le fesiitaiga autu. Mafaufau e ufiufi faʻamatalaga maaleale.
○Tu'ufa'atasiga Meafaigaluega: Fa'amautinoa o lo'o lagolagoina e le NPB le feso'ota'iga meafaigaluega mana'omia (feso'ota'iga fa'aletino/virtual, protocols). Fa'amaonia le fetaui ma mea e mana'omia fa'apitoa.
O lea,Network Packet Brokerse le o toe tu'uaiga; o vaega fa'avae autu mo le ausiaina o feso'ota'iga va'aia fa'atino i le vaitau fa'aonaponei. E ala i le fa'apotopotoina ma le atamai, fa'amamāina, fa'apaleniina o uta, ma le fa'agaioiina o fefa'ataua'iga, e fa'amalosia e NPB le puipuiga ma le mata'ituina o meafaigaluega e fa'agaoioi i le maualuga ma le lelei. Latou te talepeina silo va'aia, fa'ato'ilaloina lu'itau o le fua ma fa'ailoga, ma i'u ai ina maua le manino e mana'omia e fa'amautu ai feso'ota'iga, fa'amautinoa lelei le fa'atinoga, fa'amalieina fa'atonuga, ma vave fo'ia fa'afitauli. O le fa'atinoina o se ta'iala malosi a le NPB ose la'asaga taua lea i le fausiaina o se feso'ota'iga e sili atu ona mata'ituina, malupuipuia, ma mautu.
Taimi meli: Iul-07-2025
