Inline Bypass Network TAP Detect Heartbeat Message Respond for Anti DDos Protector

1. Anti DDos Protector Bypass TAP Intelligent Heartbeat Message Detection Technology

Define Heartbeat Messages

The heartbeat packets of the NetTAP® policy traction protector default to Ethernet Layer 2 frames. When deploying transparent Layer 2 bridging mode (such as IPS / FW), Layer 2 Ethernet frames are normally forwarded,blocked or discarded. At the same time, NetTAP® policy traction protector also supports custom heartbeat message format to meet the situation that some special serial security devices can not normally forward ordinary Layer 2 Ethernet frames.

The NetTAP® Policy Traction Protector also supports heartbeat packet detection based on VLAN tag, Layer 3 and Layer 4 custom message types. Based on this mechanism, the user can implement a service safety test function of the connection safety device to make it more effective to ensure that the corresponding security services work properly.

NetTAP® "Strategic Traffic Traction Protector" can also support the monitor to send different heartbeat packets in both directions. For example, TCP and UDP type heartbeat packets are customized on the "Strategy Traffic Traction Protector", according to the particularity of the serial device. You can configure the sending of TCP heartbeat packets on the uplink monitor A port and the sending of UDP heartbeat packets on the downlink monitor B port to accommodate the message forwarding mechanism of the serial security device. This function can more effectively guarantee the string. Connect the safety equipment to normal operation.

2. Intelligent Anti DDos Protector Application Solution​
Based on the dynamic strategy of traffic traction security detection protection
"Bypass Switch" Another advanced application scenario is based on the dynamic strategy of traffic traction security detection protection applications, the deployment of the way as shown below:

Take the "anti-DDoS attack protection and detection" security testing equipment, for example, through the front-end deployment of "bypass switch" and then anti-DDOS protection equipment and then connected to the "bypass switch", in the usual " Traction protector "to the full amount of traffic wire-speed forwarding at the same time the flow mirror output to the" anti-DDOS attack protection device ", once detected for a server IP (or IP network segment) after the attack," anti-DDOS attack protection device " will generate the target traffic flow matching rules and send them to the "bypass switch" through the dynamic policy delivery interface. The "bypass switch" can update the "traffic traction dynamic" after receiving the dynamic policy rules Rule pool "and immediately" rule hit the attack server traffic "traction to the" anti-DDoS attack protection and detection "equipment for processing, to be effective after the attack flow and then re-injected into the network.

The application scheme based on the "bypass switch" is easier to implement than the traditional BGP route injection or other traffic traction scheme, and the environment is less dependent on the network and the reliability is higher.

"Bypass Switch" has the following characteristics to support dynamic policy security detection protection:

1,"bypass switch" to provide outside the rules based on WEBSERIVCE interface, easy integration with third-party security devices.

2,"bypass switch" based on the hardware pure ASIC chip forwarding up to 10Gbps wire-speed packets without blocking switch forwarding, and "traffic traction dynamic rule library" regardless of the number.

3,"policy flow traction protector" built-in professional BYPASS function, even if the protector itself failure, can also bypass the original serial link immediately, does not affect the original link of normal communication.

3. Anti DDos Protector Bypass TAP Technical Specifications

2*GE Optical BYPASS Links(NT-FBYP-L2G)

Product Model		NT-FBYP-L2G
Interface form	SFP slot	4 * SFP slot, support 1000BASE-LX / SX module, support 1000BASE-T optical module
	SFP+ slot	-
	GE optical BYPASS link	2 link,4*1Gbase-SX multimode interface
Deploy mode	Number of link protection links	Maximum support for 2 GE optical BYPASS link
	Monitor	Maximum support 2 GE optical / electrical link monitor
Index parameter	Multi-mode insertion loss	1.1dB to 1.6dB
	Multimode emission optical power	-9dB to -4dB
	Multimode receive optical power	≥-18dB
	Multimode operating wavelength	850nm
	Multimode transmission distance	300M
	Single mode short insertion loss	1.1dB to 1.6dB
	Single mode short distance emission optical power	-9dB to -3dB
	Single mode short distance receiving optical power	≥-24dB
	Single mode short working wavelength	1310nm
	Single mode short distance transmission distance	20KM
	Single mode mid - range insertion loss	1.1dB to 1.6dB
	Single mode mid - range emitting optical power	-5dB to 0dB
	Single mode mid - range received optical power	≥-25dB
	Single mode midpoint working wavelength	1310nm
	Single mode distance transmission distance	40KM
	Single mode long distance insertion loss	1.1dB to 1.6dB
	Single mode long distance emission optical power	0dB to 5dB
	Single mode long distance receiving optical power	≥-26dB
	Single mode long distance working wavelength	1550nm
	Single mode long distance transmission distance	80KM
Functional performance	Total number of interfaces	8
	Line speed processing capacity	8Gbps
	Cross - link protection based on IP / protocol / port quintuple specific traffic	Support
	Based on the total flow of the series protection	Support
	Multi - channel load balancing function	Support
	Custom heartbeat message function	Support
	Ethernet encapsulation support	Support
	BYPASS switching function	Support
	Bypass switch without flash	Support
	CONSOLE network management	Support
	IP/WEB network management	Support
	SNMP V1/V2C network management	Support
	TELNET/SSH network management	Support
	SYSLOG protocol	Support
	User authentication function	Based on user name and password authentication
Electric	Rated supply voltage	AC-220V/DC-48V【Optional】
	Rated power frequency	50HZ
	Rated input current	AC-3A / DC-10A
	Rated Power	40W
Environment	Working Temperature	0－50℃
	Storage temperature	-20-70℃
	Working humidity	10％-95％,No condensation
User configuration	console configuration	RS232 interface,9600,8,N,1
	Outside network management interface	1*10/100/1000M Ethernet interface
	Password authentication	Support
Dimension	Chassis dimension (U)	1U 485mm*44.5mm*350mm

NT-MBYP-CHS Bypass Switch.pdf

NetTAP® (Full named Chengdu Shuwei Communication Technology Co., Ltd.)was established in 2007. Focusing on the Research and Development of Network TAPs/NPBs Communication Equipment, Data Security Analysis Equipment, which provides products and solutions in Big Data Acquisition, Data Storage, Data Monitoring, Data Processing and Data Analysis for Telecom, TV Broadcasting, Government, Education, IT, Finance, Bank, Hospital, Transportation, Energy, Power, Petroleum, Enterprise and other industries.

NetTAP® has launched various types of high-density devices such as: Fast Gigabit, 10 Gigabit Ethernet Network Traffic Replication, Aggregation, Distribution Network TAPs/NPBs (Network Packet Broker), intelligent Hybrid Traffic Network TAPs, 25G, 40G, 100G, etc. high density and Performance Network TAPs/NPBs(Network Packet Broker).

NetTAP® has a hardware production plant, all the communication products have complete Software and Hardware Independent Intellectual Property Rights, with complete Copyright Registration and Product Certification.

MATRIX NetInsight™ - A Fully Function Network Visibility Control Platform

MATRIX NetInsight™ Network System Value

1- Data Acquisition with centralized planning, eliminate monitoring blind spot

2- Free distribution of data, saving analysis of the overall investment

3- Data Security Control, Reduce the risk of disclosure

4- Overall Traffic visible, Abnormal Located more accurate, Fault analysis more useful

MATRIX NetInsight™ Function Architecture

1- User Interaction Layer

2- Big Data Analysis Layer

3- Data Storage Layer

4- Analysis Visibility Layer

5- Data Acquisition Layer

                                                                                       Zain Cloud Project of Saudi Arabia Telecom