Abasebenzisi abanamava kwintsimi ye IT kunye nokhuseleko ukuqhelile ukudibana namagama obuchule kakhulu abanye abantu abangenakwazi ukuba bawachaza njani. Namhlanje siza kuthetha nge I-DMZ kwaye siza kuchaza ukuba yenzelwe ntoni kunye nendlela yokuyenza isebenze.
Namhlanje, uthungelwano lwekhompyuter luyinxalenye ebalulekileyo yayo nayiphi na imeko yeshishini kwaye, ngokwemigaqo yokhuseleko, kufuneka isebenze ngokusemandleni ukuba sifuna ukhuseleko lulawule kwindawo yokusebenza. Omnye wemisebenzi ye-router kuku ibhlokhi inethiwekhi yokungena kumazibuko ukuyigcina ikhuselekile kuqhagamshelwano lwangaphandle. Apha sithetha nge DMZ.
Ngaphambi kokuba sichaze ukuba yintoni i-DMZ kwaye yeyantoni, sifuna ukugxininisa into ebaluleke kakhulu. Kulo naluphi na uhlobo lwesenzo oluthetha amagama ukhuseleko kunye nolwazi, Kufuneka silumke kakhulu kwaye sisoloko siqhuba olu lungelelwaniso ukuba sinolwazi oluyimfuneko okanye sinenkxaso yobungcali. Sesitshilo, makhe sibone ukuba yintoni iDMZ.
Yintoni iDMZ?
I-DMZ okanye i-"Demilitarized Zone" yindlela esetyenziswa ngokuqhelekileyo kwindawo yoshishino ukuya khusela unxibelelwano lwenethiwekhi. Yinethiwekhi yendawo (i-IP yabucala) ebekwe phakathi inethiwekhi yangaphakathi yayo nayiphi na inkampani kunye nenethiwekhi yangaphandle kuyo (i-Intanethi).
Indawo esuswe umkhosi yinethiwekhi eyodwa efumaneka kuthungelwano lwangaphakathi lwenkampani okanye umbutho. Oko kukuthi, iDMZ isebenza njengesihluzi phakathi koqhagamshelo lwe-intanethi kunye nothungelwano lweekhompyuter zabucala apho lusebenza khona. Ke, eyona njongo iphambili kukuqinisekisa ukuba unxibelelwano phakathi kweenethiwekhi zombini luvumelekile.
Kule nethiwekhi kukho ezo fayile kunye nezibonelelo zombutho ekufuneka zifikeleleke kwi-intanethi (iiseva ze-imeyile, iiseva zefayile, izicelo zeCRM, iiseva ze-DNS okanye ze-ERP, amaphepha ewebhu, njl.). Ke ngoko, iDMZ iseka i "indawo yokhuseleko" yeekhompyuter ezininzi eziqhagamshelwe kwinethiwekhi.
Yintoni na?
I-DMZ inomsebenzi ophambili wokuvumela iikhomputha okanye iiNdawo ukuba zibonelele ngeenkonzo kwinethiwekhi yangaphandle (i-imeyile) kwaye isebenze njenge isihluzo esikhuselayo sothungelwano lwangaphakathi, esebenza njenge "firewall" kwaye ayikhusele kwizinto ezinobungozi ezinokuthi zonakalise ukhuseleko.
IiDMZ zisetyenziswa ngokuqhelekileyo ukukhangela iikhompyuter eziza kusetyenziswa njengabancedisi, ekufuneka ifikelelwe ngodibaniso lwangaphandle. Olu nxulumaniso lunokulawulwa kusetyenziswa iNguqulelo yedilesi yezibuko (PAT).
I-DMZ, njengoko sesitshilo, isoloko isetyenziswa kwiindawo zoshishino, kodwa ingasetyenziswa nakwi iofisi encinci okanye ikhaya. I-DMZ inokusetyenziselwa ukwenza iimvavanyo ze-firewall kwikhompyuter yakho okanye ngenxa yokuba sifuna ukutshintsha i-router enikezwe yinkampani.
Ukusebenzisa i-DMZ yerouter kunokuba luncedo kakhulu kwimeko yokungakwazi ukuxhuma ukude ngaphandle kwenethiwekhi yethu. Ivumela ukuba sibone ukuba yintoni ukusilela ukuba asazi ukuba sinengxaki yezibuko, uqwalaselo lwesicelo okanye ukusilela kweDDNS.
Yintoni uqwalaselo oluqhelekileyo lweDMZ?
IiDMZs ziqhele ukumiswa kunye neFirewall ezimbini, ukongeza i-plus yokhuseleko kwinethiwekhi abayikhuselayo. Ngokubanzi, ngokuqhelekileyo zibekwe phakathi kwe-firewall ekhusela kuqhagamshelo lwangaphandle kunye nenye i-firewall, ifumene ungeno lwenethiwekhi yangaphakathi okanye i-subnet firewall.
Ekugqibeleni, iiDMZ zinjalo iimpawu zokhuseleko womnatha ezibalulekileyo ezilungiselelwe ukugcina idatha ikhuselekile kwaye ithintele ukungena okungafunekiyo.
Uyiqwalasela njani iDMZ?
Ukuze kulungiswe i-DMZ, umsebenzisi kufuneka aphumeze a I-IP emiselweyo kunye neyodwa yekhompyuter efuna inkonzo. Eli nyathelo libalulekile ukuze le IP ingalahleki kwaye imiselwe kwenye ikhompyuter. Emva koko kufuneka kulandelwe la manyathelo alandelayo:
- Faka imenyu uqwalaselo lweDMZ (Ifumaneka kwi-router. Ungazama ukuyijonga kwisikhokelo somzila wakho). Oku kunokufumaneka kwindawo ye "Ubumbeko lwezibuko oluphezulu".
- Siza kukhetha ukhetho olusivumelayo fikelela kwidilesi ye-IP.
- Apha siza susa i-firewall ukuba sifuna ukurhoxa.
Izinto eziluncedo kunye nezingeloncedo zokuqwalasela iDMZ
Inzuzo
Ngokubanzi, uqwalaselo lwe-DMZ lubonelela ngokhuseleko olukhulu ngokwemigaqo yokhuseleko lwekhompyuter, kodwa kufuneka kuqatshelwe ukuba inkqubo inzima kwaye kufuneka yenziwe kuphela ngumsebenzisi onolwazi oluyimfuneko lokhuseleko lwenethiwekhi.
Ngokubanzi, abasebenzisi baqwalasela i-DMZ ukwenza ngcono ukusebenza kwe izicelo, iinkqubo, imidlalo yevidiyo okanye iwebhu kunye neenkonzo ze-intanethi. Umzekelo, ukunika amandla iDMZ kunenzuzo dlala ngee-consoles, kumaxesha amaninzi sifuna oku kusebenza ngokuchanekileyo ukuze sidlale kwi-intanethi ngokuchanekileyo kwaye singabi nangxaki ngayo Imodareyitha ye-NAT kunye namazibuko avulekileyo.
Ubumbeko lweDMZ luvumela khubaza iinkonzo ezingasetyenziselwa thintela abanye abantu ekufikeleleni kulwazi eziqulathe izixhobo ezidityaniswe kuthungelwano.
Iingxaki
Ukuseta i-DMZ yinto engenguye wonke umntu owaziyo ukuba makwenziwe njani, ke ukuyenza ngendlela engalunganga kunokukhokelela ekubeni kunokwenzeka ulahlekelwe okanye uhlupheke kuhlobo oluthile lwekopi kulo lonke ulwazi olunayo inkqubo. Ke ngoko, kuya kuba yimfuneko ngokungqongqo ukuba kuphela ngabo baqiniseke ngokupheleleyo ngento abayenzayo.
Ngokuqhelekileyo, ukuseta i-DMZ ku luncedo kakhulu kwezo ndawo zoshishino apho kuyimfuneko kakhulu ukubonelela kakhulu khu seleko kwingqikelelo yoqhagamshelo lwenethiwekhi. Ke ngoko, kuya kufuneka ube neengcali ze-IT ezilungiselela ngokuchanekileyo iDMZ.
Ngaphandle koko, ukuba ukuqinisekiswa kwe-DMZ akwenziwanga ngokucocekileyo kunye neenkcukacha, kunokuba yingozi kakhulu kwaye kunokukhokelela ilahleko yolwazi yeqela lethu okanye umtsalane ukungena okunonya kwangaphandle. Sincoma ukuba ube nenkxaso yokhuseleko lwekhompyuter ukuba ucinga ngokujongana nalo mba.
Kwaye wena, ngaba uyiqwalasele i-DMZ yomzila wakho? Sazise kwizimvo.