DMZ - dab tsi nws yog ib thiab yuav ua li cas nws ua hauj lwm

Nyob rau hauv no tsab xov xwm peb tsom xam nyob rau hauv kom meej lub tswvyim ntawm tus DMZ. Peb sim muab cov lus teb rau cov lus nug txog dab tsi lub DMZ, nws nyob, thiab yuav ua li cas rau configure cov DMZ. Txhua leej txhua tus yuav kawm tau rau lawv tus kheej rau ntawm tsawg kawg yog lus qhia dav dav nyob rau hauv no lub npe.

Ua rau demilitarized aav

Tam sim no tsawg tsawg tau kom tau raws li tej lub tuam txhab tsis muaj computers. Thiab nyob qhov twg muaj computers, muaj kuj yog ib tug nrog hauv zos cheeb tsam network txuas lawv ua ke.

Lub hav zoov ntawm ib tug ntau nrog network - qhov no yog ib tug heev cov tswv yim thiab muaj kev nyab xeeb. Tiam sis nrog lub advent ntawm lub ntiaj teb dav Web tag nrho los ua ib tug me ntsis ntau tham. Tam sim no feem coob ntawm cov tuam txhab uas muag siv lub ntiaj teb dav Web kev pab. Qhov no zoo heev tswj lub workflow, raws li leej twg muaj peev xwm nyob rau hauv ib tug teeb meem ntawm cov xis nkoos yuav nrhiav tau tej kev nthuav lus qhia.

Tab sis, nrog txoj kev loj hlob ntawm lub Internet muaj cov kev hem thawj ntawm allergic rau hauv lub zuag qhia tag nrho lub zos network los ntawm sab nraum lub tuam txhab. Ua ntej ntawm tag nrho cov, nws muaj kev txhawj xeeb tuam txhab uas muag pej xeem Internet kev pab muaj nyob rau cov neeg siv ntawm lub ntiaj teb dav Web. Cov kev txaus ntshai yog hais tias ib tug attacker uas gains nkag tau mus rau lub Web kev pab cuam, kuj nce mus tej ntaub ntawv khaws tseg rau ib yam ntawm cov computers kev cob cog rua rau lub internal network. Qhov no tshwm sim los ib tug xov tooj ntawm cov teeb meem, uas yog daws tau los ntawm kev tsim ib tug DMZ.

fountainhead

Tus thawj tshaj plaws rau peb paub txog lub DMZ, nws yog, feem ntau, ib tug tub rog lub sij hawm, originating los ntawm cov ntawv "demilitarized tsam." Nws txhais tau tias ib tug tej yam thaj tsam ntawm lub chaw uas zoo heev, nyob nruab nrab ntawm ob tug warring lub xeev. Nws yog txwv tsis pub tej daim ntawv ntawm cov tub rog kev ua si - seb nws yog tshwj xeeb lag luam, kev ua phem los yog espionage.

DMZ DMZ: architecture thiab siv

Los ntawm cov thawj txhais ntawm lub sij hawm nws yog ib qhov tseeb rau peb, DMZ - nws yog ib tug tej yam cheeb tsam ntawm thaj av, uas txwv tsis pub tej yam kev cib kev ua si. Thiab nws yog heev zoo characterizes lub essence ntawm no, peb yuav hais tias, tricks.

Peb yuav tsum to taub txog tus heev tswvyim ntawm DMZ, nws yog tsis tshua muaj tej yam yooj yim tov, uas yog cov creation ntawm ib tug nyias muaj nyias ib network ya, insulated los ntawm tag nrho cov sab nraud Internet fwjchim luj kawg nkaus thiab los ntawm lub tuam txhab nrog network. Nws kuj yog ib tug limited tswj los yog ib tug ua kom tiav txiav npluav ntawm kev nkag tau rau ob lub Internet thiab lub internal network.

Tsim ib daim network ya tau yooj yim txaus. Rau lub hom phiaj no, firewalls, los yog firewalls. Lo lus "firewall" zoo tib yam neeg siv yuav tsum paub los ntawm cov films txog nto moo hackers, tab sis ob peb paub dab tsi nws yog.

Firewall - ib tug kho vajtse thiab software chav tsev ntawm ib tug computer network, faib nws mus rau hauv sectors thiab tso cai rau koj mus lim khoom network tsheb nyob rau lub teev neeg teb xov tooj (administrator) cov kev cai. Tsis tas li ntawd, nyob rau hauv cov kev tshwm sim ntawm tsis tau tso cai siv, cov attacker muaj kev nkag tau mus rau cov ntaub ntawv uas muaj nyob rau hauv lub cais sectors, tsis muaj prejudice rau lwm leej lwm tus.

Muaj tsawg kawg yog ob hom configuration ntawm demilitarized aav - nrog ib tug ib firewall los yog muaj ntau yam. Nyob rau hauv thawj configuration ntawm cov firewall separates lub network rau hauv peb sectors:

• nrog network;
• DMZ;
• Internet channel.

Tsis tau rau cov qauv no muaj tsis txaus tiv thaiv. Nyob rau hauv feem ntau loj tuam txhab uas muag tseem siv tus thib ob txoj kev - ib tug loj tus naj npawb ntawm firewalls. Nyob rau hauv cov ntaub ntawv no, ib tug attacker yuav tau kov yeej twb, yam tsawg kawg ib tug ntxiv puag ncig system nrog nws lim tsheb, uas zoo heev tsub kom muaj kev ruaj ntseg.

hloov

Nco ntsoov ntau twb txaus nug txog lub DMZ, nws yog ib tug yooj yooj yim thiab siv tau txoj kev los xyuas kom meej qhov kev ruaj ntseg ntawm koj lub computer network. Cov neeg multichannel Internet routers yuav kwv yees qhov no ci ntsa iab ua kom yuam kev rau hackers.

Tag nrho cov uas yuav tsum tau mus kho cov DMZ, nws tso saib ib tug ntaus ntawv raws li ib tug hauv zos cov cheeb tsam network, txuas nws feem ntawm cais lub hwj huam qaum nkaus rau hauv lub dawb router, ces cob rau zoo li qub tus IP-qhov chaw nyob, ces qhib ib tug DMZ box thiab pib dua ntaus ntawv.

Ua ntej tej manipulation, kom paub tseeb tias tag nrho cov pab kiag li lawm muaj qhov tseeb kev tiv thaiv. Ces koj yuav siv nws dawb do, tab sis yog yooj yim, tab sis zoo tiv thaiv tawm tsam tawm tsam nyob rau hauv koj tus kheej cov ntaub ntawv.

Qhov tsab xov xwm tau luv luv izlozhen3y tag nrho cov tseem ceeb tshaj plaws cov lus tseeb hais txog tus DMZ: nws yog dab tsi, yuav ua li cas nws ua hauj lwm, thiab tseem ceeb tshaj, nws lub hom phiaj.