O le a le eseesega i le va o le NetFlow ma le IPFIX mo le Mata'ituina o Fesootaiga?

NetFlow ma le IPFIX o tekinolosi uma ia e faʻaaogaina mo le mataʻituina ma auʻiliʻiliga o fesoʻotaiga. Latou te tuʻuina atu faʻamatalaga i faʻasologa o fefaʻatauaʻiga o fesoʻotaʻiga, fesoasoani i le faʻatinoina o galuega, faʻafitauli, ma suʻesuʻega saogalemu.

NetFlow:

Ole a le NetFlow?

NetFlowo le vaifofo mataituina tafe muamua, muamua atiina ae e Cisco i le faaiuga o le 1990s. E tele ituaiga eseese o loʻo iai, ae o le tele o faʻatinoga e faʻavae i luga ole NetFlow v5 poʻo NetFlow v9. E ui o faʻaliliuga taʻitasi e eseese gafatia, o le faʻatinoga autu e tumau pea:

Muamua, o se router, ki, firewall, poʻo se isi ituaiga masini o le a puʻeina faʻamatalaga i luga o le upega tafaʻilagi "tafe" - e masani lava o se seti o afifi e faʻasoa se seti masani o uiga e pei o le puna ma le tuatusi, puna, ma le taulaga, ma le protocol. ituaiga. A mae'a le tafe o le tafe po'o le taimi ua fa'atulaga muamua, o le a fa'aulufale atu e le masini fa'amaumauga o tafega i se fa'alapotopotoga ua ta'ua o le "fa'aputuga o le tafe".

Ma le mea mulimuli, o le "faʻasologa o le tafe" e faʻamaonia ai na faʻamaumauga, e tuʻuina atu ai faʻamatalaga i foliga vaaia, fuainumera, ma faʻamatalaga auiliili faʻasolopito ma taimi moni. I le fa'atinoga, o le au aoina ma le au su'esu'e e masani lava o se fa'alapotopotoga e tasi, e masani ona tu'ufa'atasia i se fofo mata'ituina fa'atinoga o feso'otaiga.

NetFlow o loʻo galue i luga o se faʻavae faʻavae. A o'o atu se masini fa'atau i se 'au'aunaga, NetFlow o le a amata ona pu'eina ma fa'aputu fa'atasi metadata mai le tafe. A mae'a le sauniga, NetFlow o le a auina atu se fa'amaumauga atoa i le tagata aoina.

E ui lava e masani ona faʻaaogaina, NetFlow v5 e iai le tele o tapulaʻa. O fanua e auina atu i fafo o loʻo faʻamautu, o le mataʻituina e lagolagoina naʻo le faʻaogaina o mea, ma tekinolosi faʻaonaponei e pei o le IPv6, MPLS, ma le VXLAN e le lagolagoina. NetFlow v9, faʻaigoaina foʻi o le Flexible NetFlow (FNF), faʻasalalau nisi o nei tapulaʻa, faʻatagaina tagata faʻaoga e fausia faʻataʻitaʻiga masani ma faʻaopoopo le lagolago mo tekinolosi fou.

O le tele o tagata faʻatau e iai a latou lava faʻatinoga faʻapitoa o NetFlow, pei o le jFlow mai Juniper ma NetStream mai Huawei. E ui lava atonu e ese le faʻatulagaga, o nei faʻatinoga e masani ona maua ai faʻamaumauga tafe e fetaui ma NetFlow aoina ma suʻega.

Vaega Autu ole NetFlow:

~ Fa'amatalaga Fa'asolo: NetFlow fa'atupu fa'amaumauga tafe e aofia ai fa'amatalaga e pei o fa'apogai ma tuatusi IP, ports, timestamps, packet ma byte counts, ma ituaiga protocol.

~ Mata'ituina o Ta'avale: NetFlow e tuʻuina atu le vaʻaia i faʻasologa o fesoʻotaʻiga fesoʻotaʻiga, faʻatagaina pule e faʻamaonia talosaga pito i luga, faʻaiʻuga, ma faʻapogai o auala.

~Su'esu'ega Fa'aletonu: E ala i le su'esu'eina o fa'amaumauga o tafega, e mafai ai e NetFlow ona iloa fa'aletonu e pei o le fa'aogaina tele o le bandwidth, fa'apipi'i feso'otaiga, po'o le fa'aogaina o auala e le masani ai.

~ Iloiloga Puipuiga: NetFlow e mafai ona faʻaogaina e suʻesuʻe ma suʻesuʻe faʻalavelave faʻalavelave, e pei o osofaʻiga faʻafitia-o-auaunaga (DDoS) tufatufaina poʻo taumafaiga faʻatagaina e le faʻatagaina.

NetFlow Versions: NetFlow ua tupu aʻe i le taimi, ma faʻasalalauga eseese ua faʻasaʻolotoina. O nisi fa'aaliga iloga e aofia ai NetFlow v5, NetFlow v9, ma Flexible NetFlow. O fa'asologa ta'itasi o lo'o fa'ailoa mai ai fa'alelei ma agava'a fa'aopoopo.

IPFIX:

O le a le IPFIX?

O se tulaga IETF na aliaʻe i le amataga o le 2000s, Internet Protocol Flow Information Export (IPFIX) e matua tutusa lava ma NetFlow. O le mea moni, NetFlow v9 na avea ma faavae mo IPFIX. O le eseesega muamua i le va o le lua o le IPFIX o se tulaga tatala, ma o loʻo lagolagoina e le tele o faʻatau fesoʻotaʻiga e ese mai Cisco. Se'i vagana ai nai vaega fa'aopoopo ua fa'aopoopoina ile IPFIX, ole fa'atulagaga e toeitiiti lava tutusa. O le mea moni, IPFIX o nisi taimi e taʻua o le "NetFlow v10".

Ona o se vaega i ona foliga tutusa ma NetFlow, IPFIX e fiafia tele i le lagolago lautele i fofo mataʻituina fesoʻotaʻiga faʻapea foʻi ma masini fesoʻotaʻiga.

O le IPFIX (Internet Protocol Flow Information Export) o se faʻasalalauga faʻasalalau matala na atiaʻe e le Initaneti Inisinia Task Force (IETF). E faʻavae i luga ole NetFlow Version 9 faʻamatalaga ma tuʻuina atu se faʻasalalauga faʻasalalau mo le auina atu o faʻamaumauga tafe mai masini fesoʻotaʻiga.

IPFIX fa'avae i luga o manatu o NetFlow ma fa'alauteleina e ofoina atu le tele o fetu'una'iga ma feso'ota'iga i luga o fa'atauga eseese ma masini. O loʻo faʻaalia ai le manatu o faʻataʻitaʻiga, faʻatagaina mo le faʻamalamalamaga malosi o le faʻasologa o faʻamaumauga faʻamaumauga ma anotusi. Ole mea lea e mafai ai ona fa'aofiina fanua fa'aleaganu'u, lagolago mo tulafono fou, ma fa'alauteleina.

O mea taua ole IPFIX:

~ Fa'ata'ita'iga Fa'avae: IPFIX fa'aoga fa'ata'ita'iga e fa'amalamalama ai le fausaga ma mea o lo'o i totonu o fa'amaumauga o tafega, e ofoina atu le fetuutuuna'i i le fa'aogaina o fa'amaumauga eseese ma fa'amatalaga fa'apitoa.

~ Felagolagomai: O le IPFIX o se tulaga tatala, faʻamautinoa le mafai ona mataʻituina le tafe solo i luga o faʻatauga fesoʻotaʻiga eseese ma masini.

~ IPv6 Lagolago: E lagolagoina e le IPFIX le IPv6, e talafeagai mo le mataʻituina ma le auʻiliʻili o feoaiga i IPv6 fesoʻotaʻiga.

~Siitia le Puipuiga: IPFIX o lo'o aofia ai fa'amatalaga saogalemu e pei o le Transport Layer Security (TLS) encryption ma fe'au sa'o siaki e puipuia ai le agatapuia ma le fa'amaoni o fa'amatalaga tafe i le taimi o felauaiga.

O le IPFIX o lo'o lagolagoina lautele e le tele o fa'atauga meafaigaluega feso'ota'iga, ma avea ai ma fa'atauga fa'atauva'a ma fa'aaogaina lautele mo le mata'ituina o feso'otaiga.

 

O lea la, o le a le eseesega i le va o NetFlow ma IPFIX?

Ole tali faigofie ole NetFlow ole Cisco proprietary protocol na faʻalauiloaina ile 1996 ma le IPFIX o lona faʻataʻitaʻiga o le uso faʻamaonia.

E tutusa uma fa'amoemoega e lua: fa'ataga e inisinia feso'ota'iga ma pule e aoina ma au'ili'ili le tulaga o feso'ota'iga feso'otaiga IP. Cisco na atiina ae NetFlow ina ia mafai e ona sui ma alalaupapa ona faʻaalia lenei faʻamatalaga taua. Ona o le pule a le Cisco gear, na vave ona avea NetFlow ma tulaga faʻamaonia mo suʻesuʻega o fefaʻatauaiga. Ae ui i lea, na iloa e le au tauva pisinisi o le faʻaaogaina o se faʻasalalauga faʻapitoa e pulea e lona fili sili e le o se manatu lelei ma o lea na taʻitaʻia ai e le IETF se taumafaiga e faʻataʻatia se faʻasalalauga tatala mo suʻesuʻega o feoaiga, o le IPFIX.

O le IPFIX e fa'avae i luga ole NetFlow version 9 ma na fa'alauiloa muamua ile 2005 ae na fa'aalu ni nai tausaga e maua ai le fa'aaogaina o pisinisi. I le taimi nei, o tulafono e lua e tutusa lava ma e ui o le upu NetFlow o loʻo sili atu ona taatele le tele o faʻatinoga (e ui e le o mea uma) e fetaui ma le tulaga IPFIX.

Ole laulau lea e aotele ai le eseesega ile va ole NetFlow ma le IPFIX:

Ituaiga	NetFlow	IPFIX
Amataga	Tekinolosi faʻapitoa na atiaʻe e Cisco	Alamanuia-standard protocol e fa'avae ile NetFlow Version 9
Fa'atonuga	Cisco-fa'apitoa tekinolosi	Tatala tulaga faʻamatalaina e le IETF ile RFC 7011
Fetuuna'i	Fa'asologa fa'atupuina fa'atasi ma vaega fa'apitoa	Sili atu fetuutuunai ma felagolagomai i le au faatau
Fa'amatalaga Fa'amaumauga	Pepa lapopoa tumau	Fa'ata'ita'iga fa'avae mo fa'amaumauga fa'amaufa'ailoga fa'apitoa
Fesoasoani Fa'atusa	Le lagolagoina	Fa'ata'ita'iga fa'amalosi mo le fa'aofiina o fanua fe'avea'i
Lagolago Fa'atau	Muamua masini Cisco	Lagolago lautele i luga o upegatafa'ilagi fa'atau
Fa'alautele	Fa'atapula'a aganu'u	Fa'aofiina o fanua fa'ale-aganu'u ma fa'amaumauga fa'apitoa
Eseesega ole Polokalama	Cisco-fa'apitoa fesuiaiga	Lagolago IPv6 moni, fa'aleleia filifiliga fa'amaumauga o tafega
Vaega Puipuiga	Fa'atapula'a vaega saogalemu	Felauaiga Layer Security (TLS) encryption, savali faamaoni