Abasebenzisi abanolwazi emkhakheni we IT nokuphepha ukujwayele kakhulu ukuthola amagama ezobuchwepheshe kakhulu abanye abantu abangakwazi ukuwachaza. Namuhla sizokhuluma nge I-DMZ futhi sizochaza ukuthi yenzelwe ini nokuthi siyisebenzisa kanjani.
Namuhla, amanethiwekhi wamakhompiyutha ayingxenye ebalulekile yanoma iyiphi indawo yebhizinisi futhi, ngokuphepha, kufanele isebenze ngangokunokwenzeka uma sifuna ukuphepha kubuse endaweni yokusebenza. Omunye wemisebenzi ye-router ukwenza vimba izimbobo zokungena kwenethiwekhi ukuyigcina iphephile ekuxhumaneni kwangaphandle. Lapha sikhuluma nge- DMZ.
Ngaphambi kokuchaza ukuthi iyini i-DMZ nokuthi yenzelwe ini, sifuna ukugqamisa isici esibaluleke kakhulu. Kunoma yiluphi uhlobo lwesenzo olusikisela amagama ukuphepha kanye ne-informatics, Kufanele siqaphele kakhulu futhi ngaso sonke isikhathi sikwenze lokhu kulungiselelwa uma sinolwazi oludingekayo noma sisekelwa ngochwepheshe. Ngalokho kusho, ake sibone ukuthi yini i-DMZ.
Yini i-DMZ?
I-DMZ noma i- "Demilitarized Zone" iyindlela esetshenziswa kakhulu endaweni yebhizinisi uku vikela ukuxhumana kwenethiwekhi. Yinethiwekhi yendawo (i-IP yangasese) etholakala phakathi inethiwekhi yangaphakathi yanoma iyiphi inkampani kanye nenethiwekhi yangaphandle kuyo (i-Intanethi).
Indawo ehlukunyezwe ngabasebenzi yinethiwekhi engayodwa etholakala ngaphakathi kwenethiwekhi yenkampani noma yenhlangano. Okungukuthi, i-DMZ isebenza njengesihlungi phakathi kokuxhumeka kwe-inthanethi nenethiwekhi yamakhompyutha wangasese lapho isebenza khona. Ngakho-ke, inhloso enkulu ukuqinisekisa ukuthi ukuxhumana phakathi kwawo womabili amanethiwekhi kuvunyelwe.
Kule nethiwekhi kukhona lawo mafayili nezinsizakusebenza zenhlangano okumele zitholakale ku-inthanethi (amaseva we-imeyili, iseva yefayela, izinhlelo ze-CRM, amaseva we-DNS noma ama-ERP, amakhasi e-web, njll.). Ngakho-ke, i-DMZ isungula i- "indawo yokuphepha" yamakhompyutha amaningi axhumeke kunethiwekhi.
Kuyini?
I-DMZ inomsebenzi oyinhloko wokuvumela amakhompyutha noma Abaphathi ukuba banikeze izinsizakalo kunethiwekhi yangaphandle (i-imeyili) futhi basebenze njenge isihlungi esivikelayo senethiwekhi yangaphakathi, esebenza njenge "firewall" futhi ayivikele ekungenweni okubi okungabeka engozini ukuphepha.
Ama-DMZ asetshenziswa kakhulu ukuthola amakhompyutha azosetshenziswa njengamaseva, okumele itholakale ngokuxhumeka kwangaphandle. Lokhu kuxhumana kungalawulwa kusetshenziswa i-Port Address Translation (PAT).
I-DMZ, njengoba sesishilo, ivame ukusetshenziswa ezindaweni zebhizinisi, kepha futhi ingasetshenziswa kufayela le- ihhovisi elincane noma ikhaya. I-DMZ ingasetshenziselwa yenza izivivinyo ze-firewall kwikhompyutha yakho noma ngoba sifuna ukushintsha i-router enikezwe yinkampani.
Ukwenza kusebenze i-DMZ yomzila kungasiza kakhulu uma ungakwazi ukuxhuma ukude kusuka ngaphandle kwenethiwekhi yethu. Ake sibone ukuthi ukwehluleka yini uma singazi ukuthi sinenkinga yetheku, ukumiswa kohlelo lokusebenza noma ukwehluleka kwe-DDNS.
Kuyini ukumiswa okujwayelekile kwe-DMZ?
Ama-DMZ ngokuvamile amisiwe enezinhlaka ezimbili ze-Firewall, ungeza i-plus plus kunethiwekhi abayivikelayo. Ngokuvamile, zivame ukubekwa phakathi kwe-firewall evikela ekuxhumaneni kwangaphandle kanye nenye i-firewall, ithole ukungena kwenethiwekhi yangaphakathi noma i-subnet firewall.
Ekugcineni, ama-DMZ anjalo izici ezibalulekile zokuphepha kwenethiwekhi ezenzelwe ukugcina idatha iphephile futhi ivimbele ukungena okungafuneki.
Ungayilungiselela kanjani i-DMZ?
Ukuze umise i-DMZ, umsebenzisi kufanele asebenzise ifayela le- I-IP enqunyiwe futhi eyingqayizivele yekhompyutha edinga insiza. Lesi sinyathelo sibalulekile ukuze le IP ingalahleki nokuthi yenzelwe enye ikhompyutha. Ngemuva kwalokho izinyathelo ezilandelayo kufanele zilandelwe:
- Faka imenyu Ukumiswa kwe-DMZ (Kutholakala ku-router. Ungazama ukuyifuna kumhlahlandlela we-router yakho). Lokhu singakuthola nasendaweni yase "Ukulungiswa kwembobo okuthuthukile".
- Sizokhetha inketho esivumela finyelela ikheli le-IP.
- Lapha sizokwenza susa i-Firewall ukuthi sifuna ukuhoxa.
Izinzuzo nezinkinga zokuhlela i-DMZ
Izinzuzo
Ngokuvamile, ukumisa i-DMZ kunikeza ukuphepha okukhulu maqondana nokuphepha kwekhompyutha, kepha kufanele kuqashelwe ukuthi inqubo kuyinkimbinkimbi futhi kufanele kwenziwe kuphela ngumsebenzisi onolwazi oludingekayo lokuphepha kwenethiwekhi.
Ngokuvamile, abasebenzisi balungiselela i-DMZ ukukhulisa ukusebenza kwe- izinhlelo zokusebenza, izinhlelo, imidlalo yevidiyo noma izinsiza zewebhu neziku-inthanethi. Isibonelo, ukunika amandla i-DMZ kuzuzisa i- dlala ngamakhonsoli, ezikhathini eziningi sidinga lokhu kusebenza ngqo ukuze sidlale online ngokufanele futhi singabi nezinkinga nge I-NAT emaphakathi namachweba avulekile.
Ukumiswa kwe-DMZ kuvumela khubaza izinsizakalo ezingasetshenziswanga vimbela abanye abantu ekufinyeleleni ulwazi equkethe okokusebenza okuxhunywe kunethiwekhi.
nebubi
Ukusetha i-DMZ kuyinto okungewona wonke umuntu owaziyo ukuthi ungayenza kanjani, ngakho-ke ukuyenza ngendlela engafanele kungaholela ekutheni kwenzeke alahlekelwe noma ahlupheke ngohlobo oluthile lwekhophi kuyo yonke imininingwane uhlelo olunayo. Ngakho-ke, kuzodingeka kakhulu ukuthi kube yilabo kuphela abaqiniseke ngokuphelele ngokwenzayo abenza lesi senzo.
Ngokuvamile, ukusetha i-DMZ kuyinto kuzuzisa kakhulu kulezo zindawo zebhizinisi lapho kudingeka khona kakhulu ukuhlinzeka okukhulu kakhulu ukuphepha ngomqondo wokuxhumeka kwenethiwekhi. Ngakho-ke, kufanele ube nochwepheshe be-IT abalungiselela kahle i-DMZ.
Ngaphandle kwalokho, uma isiqinisekiso se-DMZ singenziwanga ngobunono nangemininingwane, singaba yingozi kakhulu futhi singaholela ukulahleka kolwazi weqembu lethu noma ukuheha ukungena kwangaphandle okunonya. Sincoma ukuthi ube nokusekelwa okuvikelekile kwekhompyutha uma ucabanga ukubhekana nale nkinga.
Futhi wena, ngabe uyilungisile i-DMZ yomzila wakho? Sazise emazwaneni.