Ntuziaka onye ọrụ VAST Data Platform

N'ụwa nke data a na-achụ taa, nzuzo na nchekwa nke data na-edochaghị anya bụ ihe kacha mkpa. Nchekwa nke ọtụtụ (MCS) na atụmatụ ụlọ nwere nchekwa na-enye usoro siri ike iji gboo nchegbu ndị a. MCS, usoro njikwa ohere na Linux Security-Enhanced (SELinux), na-eme ka nzuzo data dịkwuo mma site n'ịkenye otu ụdị na files na usoro. Nke a na-eme ka o doo anya na ọ bụ naanị ndị ọrụ na usoro ikike nwere ike ịnweta ozi dị nro, na-enye nchekwa ọzọ maka data emebereghị dịka akwụkwọ, onyonyo na vidiyo.

Ịgbazinye ụlọ nwere ntụkwasị obi na-eme ka ikewapụ data dịkwuo ike site na ịmepụta gburugburu dị iche iche maka otu dị iche iche, ngalaba, ma ọ bụ òtù dị iche iche n'ime otu akụrụngwa. Usoro a na-achọpụta na data onye nwe ụlọ ọ bụla bụ nke ezi uche dị na ya ma ọ bụ kewapụrụ n'ụzọ anụ ahụ, na-egbochi ohere na-enweghị ikike yana idobe nzuzo data. Akụkụ ndị dị mkpa nke ịgbazinye ụlọ nwere nchebe gụnyere ikewapụ akụrụngwa, nkewa data, nkewa netwọkụ, yana njikwa ohere granular.

VAST Data Platform na-egosipụta ụkpụrụ ndị a site na njiri mara ya, gụnyere VLAN. tagging, njikwa ohere dabere na ọrụ yana njirimara, yana usoro nzuzo siri ike. Akwụkwọ a na-enyocha ka ijikọ MCS na ụlọ obibi echekwara n'ime VAST Data Platform na-enye ngwọta zuru oke na nchekwa maka ijikwa data emebereghị ya, ọkachasị maka otu ndị nwere nnukwu ihe chọrọ nzuzo data. Okwu mmeghe a dị nkenke, lekwasịrị anya, ma na-enye ntụzịaka doro anya maka ọdịnaya nke akwụkwọ ahụ, kwekọọ na omume kacha mma maka akwụkwọ teknụzụ.

Kedu ihe bụ VAST Data Platform

Platform VAST Data Platform bụ ihe ngwọta zuru oke maka ijikwa data emebereghị, ọkachasị maka AI na ngwa mmụta miri emi. Ọ na-ejikọta ike dị iche iche iji weghara, katalọgụ, labelụ, ịba ụba na ichekwa data, na-enye ohere data enweghị nkebi site na nsọtụ ruo igwe ojii.

Nhazi nke ekewapụrụ na ekekọrịtara-Ihe niile (DASE).

Ihe owuwu ụlọ a na-agbakọ mgbagha sitere na steeti sistemụ, na-enye ohere maka ịbelata ikike nke onwe site na ịgbakwunye Nodes Data (DNodes) na arụmọrụ site na ịgbakwunye Nodes Compute (CNodes). Ọ na-ejikọta usoro data nkekọrịta na azụmahịa iji merie njedebe nke usoro ekesa omenala.

Ndị ahịa akwadoro: NFS, NFSoRDMA Server Message Block (SMB), Amazon S3, na Containers (CSI)

Sava Protocol enweghị steeti (CNodes)

VAST DataStore

Ewebata na 2019, a haziri DataStore maka ịchekwa na ịnye data na-enweghị nhazi. Ọ na-agbaji ahia dị n'etiti arụmọrụ na ikike, na-eme ka ọ dabara maka ụlọ ọrụ AI-njikere nchekwa data enweghị nhazi.
VAST DataBase

Akụkụ a na-ebuga arụmọrụ azụmahịa nke nchekwa data, arụmọrụ nyocha nke ụlọ nkwakọba data, na ọnụ ọgụgụ na ikike nke ọdọ data. Ọ na-akwado ma ahịrị na nchekwa data columnar.
VAST DataSpace

Amalitere na 2023, DataSpace na-enye ohere data zuru ụwa ọnụ site na nsọtụ ruo ígwé ojii, na-edozi nkwụsi ike na arụmọrụ mpaghara. Ọ na-enyere aka ịgbakọ na data sitere na ikpo okwu igwe ojii ọhaneze, nzuzo ma ọ bụ ihu.

Ikpo okwu na-ejikọta data ahaziri ahazi na nke a na-ahazighị, nyocha nchekwa data, ma na-enye oghere aha zuru ụwa ọnụ. Ọ na-akwado ụkpụrụ dị iche iche dị ka NFS, SMB, S3, SQL, na agbakwunyere Apache Spark maka mgbanwe data na oriri site na usoro izi ozi.

Ewubere ikpo okwu iji mee ka AI na ngwa ụlọ ọrụ dị ike, na-enye nyocha data miri emi nke oge na ikike mmụta miri emi. Ọ na-ejide ma na-ahazi data ozugbo, na-eme ka ntinye aka AI, ịba ụba metadata, na ịzụghachi ihe nlereanya.

Netwọk na Node ngalaba

Platform VAST Data gụnyere ọtụtụ atụmatụ metụtara arụmọrụ njikwa yana nkewa netwọkụ, gụnyere ọrụ nchịkọta CNode, yana ike ijikọ CNodes na VLAN. Nke a bụ nkọwa zuru ezu nke njirimara ndị a, yana akụkụ ndị dị mkpa sitere na VAST Cluster 5.1 Documentation:

Nchịkọta CNode na ọdọ mmiri

Ihe nkesa (CNode) Ọdọ mmiri: A na-enye usoro nchekwa nchekwa site na Nodes Compute (CNodes). VAST Data Platform na-enye ohere ijikọ CNodes n'ime ọdọ mmiri sava dị iche. Ọdọ mmiri nkesa ọ bụla nwere adreesị IP nke mebere ya (VIP) nke ekesara gafee CNodes na ọdọ mmiri. Nke a na-enye usoro maka Ogo Ọrụ (QoS) site n'ịchịkwa ọnụ ọgụgụ nke sava e kenyere na ọdọ mmiri ọ bụla. Mgbe CNode na-anọghị n'ịntanetị, VIP ndị ọ na-eje na-ekesa anaghị emebi emebi n'ofe CNode ndị fọdụrụ na ọdọ mmiri ahụ. Nke a na-eme ka a hụ na ị na-edozi ibu na nnweta dị elu.

Nkebi: VAST ụyọkọ Documentation, "Ijikwa Virtual IP ọdọ mmiri" [p. 593]

VLAN Tagging na njikọ

VLAN Tagokwu: VLAN tagging na-enye ndị ọrụ nchịkwa aka ịchịkwa nke Virtual IP ekpughere nke VLAN na netwọkụ ahụ. Njirimara a na-achọpụta na okporo ụzọ netwọk dịpụrụ adịpụ n'etiti VLAN dị iche iche, na-egbochi ohere na-enweghị ikike na ntapu data n'etiti ndị nwe ụlọ. VLAN tagA na-ahazi ging site na ịmepụta ọdọ mmiri IP mebere n'ime VLAN na ikpo okwu VAST, na-enye nkewa na ikewapụ netwọkụ echekwara.

Nkebi: VAST ụyọkọ Documentation, "Tagging Virtual IP ọdọ mmiri nwere VLAN" [p. 147]
Nkebi: Nweta netwọkụ na inye nchekwa (v5.1) [p. 141]

Nkeji netwọkụ

Nweta njikwa Views na Protocols: VAST View bụ ihe nnọchite anya ọtụtụ protocol nke oke nchekwa netwọkụ, mbupụ, ma ọ bụ bọket. Ikpo okwu na-enye ndị ọrụ nchịkwa aka ịchịkwa nke VLAN nwere ohere ịnweta kpọmkwem Views na nke akwadoro ka eji mee ihe mgbe ị na-abanye VIP na VLAN ndị ahụ. Njirimara a na-akwalite nchekwa site n'ịhụ na naanị VLAN nwere ikike nwere ike ịnweta ụfọdụ data na ọrụ. A na-ahazi ya site na iji View Atumatu, nke nwere ike ezipụta ikike ịnweta dabere na VLAN.

Nkebi: VAST ụyọkọ Documentation, "Ịmepụta View Atumatu” [p. 628]

Mgbazinye mgbazinye

VAST Data Platform na-enye ọtụtụ atụmatụ metụtara ọtụtụ ụlọ nke na-eme ka ikewapụ iche na njikwa ndị nwe ụlọ nwee nchebe. Nke a bụ atụmatụ ndị isi ụlọ yana nkọwa zuru ezu yana ngalaba ndị dabara na akwụkwọ VAST Cluster 5.1:

Ndị bi n'ụlọ

Nkọwa: Ndị bi na VAST Data Platform na-akọwa ụzọ data dịpụrụ adịpụ ma nwee ike ịnwe isi mmalite nyocha nke ha dị ka Active Directory (AD), LDAP, ma ọ bụ NIS. Onye ọ bụla bi n'ụlọ nwekwara ike ijikwa igodo nzuzo nke ya, hụ na data na-anọpụ iche na ndị nwe ụlọ ọzọ. Njirimara a dị oke mkpa maka gburugburu ọtụtụ ndị nwe ụlọ ebe ụlọ ọrụ ma ọ bụ ngalaba dị iche iche kwesịrị idowe nkewa data siri ike.

Nkebi: Ndị bi n'ụlọ (v5.1) [p. 251]

View Atumatu

Nkọwa: View Atumatu na-akọwapụta ikike ịnweta, protocol na ntọala nchekwa maka Views e kenyere ndị nwe ụlọ. Amụma ndị a na-enye ndị nchịkwa ohere ijikwa onye nwere ike ịnweta data, ihe omume ha nwere ike ime, yana ụkpụrụ ndị ha nwere ike iji. Njikwa granular a dị mkpa maka idobe nchekwa na nnabata na gburugburu ọtụtụ ndị nwe ụlọ.

Nkebi: Ijikwa Views na View Atumatu (v5.1) [p. 260]

Mwepu VLAN

Nkọwa: Enwere ike ijikọ VLAN na onye nwe ụlọ ka ọ na-ekewapụ okporo ụzọ dị n'etiti ndị bi n'ụlọ, na-egbochi ụzọ gafere ma ọ bụ mgbasa ozi ka ọ ghara ime n'ofe L2.

Ngalaba: Tagging Virtual IP ọdọ mmiri nwere VLANs [p. 147]

Ogo Ọrụ (QoS)

Nkọwa: Amụma QoS na-enye njikwa arụmọrụ granular maka bandwit na IOPs (ọrụ ntinye / mmepụta kwa sekọnd) maka Views e kenyere ndị nwe ụlọ. Amụma ndị a na-eme ka arụmọrụ a na-ahụ anya ma na-egbochi okwu esemokwu akụrụngwa, nke dị mkpa karịsịa na gburugburu ọtụtụ ndị nwe ụlọ ebe ndị nwe ụlọ dị iche iche nwere ike ịnwe ihe dị iche iche chọrọ ịrụ ọrụ. Na mgbakwunye na ọnụ ụzọ QoS kacha nke na-enyere aka igbochi ike ọgwụgwụ arụmọrụ, ọnụ ụzọ kacha nta nke QoS dịkwa, iji nyere aka gbochie nsogbu nke agbata obi mkpọtụ nke ọtụtụ ụlọ.

Nkebi: Ogo nke ọrụ (v5.1) [p. 323]

Oke

Nkọwa: Oke na-enye ndị nchịkwa ohere ịtọ oke ikike na Views na akwụkwọ ndekọ aha maka ikewapụ ndị nwe ụlọ. Njirimara a na-eme ka o doo anya na ọ nweghị otu onye bi n'ụlọ nwere ike iri ihe karịrị òkè nke akụrụngwa ha kenyere, na-enyere aka igbochi ike ọgwụgwụ akụrụngwa na-atụghị anya ya.

Nkebi: Ijikwa oke (v5.1) [p. 314]

Ikike na njikwa njirimara

Onye nwe ụlọ na njikwa njirimara

Nkọwa: Ndị bi na VAST Data Platform na-akọwa ụzọ data dịpụrụ adịpụ ma nwee ike ịnwe isi mmalite nyocha nke ha dị ka Active Directory (AD), LDAP, ma ọ bụ NIS. Ikpo okwu na-akwado ihe ruru asatọ ndị na-enye njirimara pụrụ iche nke enwere ike ịhazi maka ojiji na ọkwa onye nwe ụlọ.

Nkebi: Ndị bi n'ụlọ (v5.1) [p. 251]

Views

Nkọwa: Views bụ mbak ọtụtụ protocol, mbupụ, ma ọ bụ bọket nke ndị nwe ụlọ dị kpọmkwem. Ha na-enye ohere data dịpụrụ adịpụ, na-ahụ na onye nwe ụlọ ọ bụla nwere ike ịnweta naanị data nke ha. ViewEnwere ike ịhazi s site na iji ikike ịnweta na usoro iwu, na-eme ka ha nwee ike ịdị iche iche maka ikpe ojiji dị iche iche.

Nkebi: Ijikwa Views na View Atumatu (v5.1) [p. 260]

View Atumatu

Nkọwa: View Atumatu na-akọwapụta ikike ịnweta, protocol na ntọala nchekwa maka views e kenyere ndị nwe ụlọ. Amụma ndị a na-enye ndị nchịkwa ohere ijikwa onye nwere ike ịnweta data, ihe omume ha nwere ike ime, yana ụkpụrụ ndị ha nwere ike iji. Njikwa granular a dị mkpa maka idobe nchekwa na nnabata na gburugburu ọtụtụ ndị nwe ụlọ.

Nkebi: Ijikwa Views na View Atumatu (v5.1) [p. 260]

Njikwa nnweta

VAST Data Platform na-enye atụmatụ zuru oke maka ikike na njikwa njirimara. Nke a bụ nkọwa zuru ezu nke njirimara ọ bụla yana akụkụ dị mkpa yana ọnụọgụ ibe sitere na VAST Cluster 5.1 Documentation:

Njikwa nnweta dabere na ọrụ (RBAC)

Nkọwa: VAST Cluster na-eji sistemu njikwa nnweta Role-Based Access (RBAC) maka ijikwa ịnweta VAST Management System (VMS). RBAC na-enye ohere ka ndị nchịkwa kọwapụta ọrụ nwere ikike dị iche iche wee kenye ndị ọrụ ọrụ ndị a. Nke a na-eme ka ndị ọrụ nwee ohere ịnweta naanị akụrụngwa na omume dị mkpa maka ọrụ ha, na-eme ka nchekwa dị mfe na njikwa dị mfe.

Nkebi: Inye ikike ịnweta na ikike VMS [p. 82]

Njikwa nnweta dabere na njirimara (ABAC)

Nkọwa: A na-akwado njikwa nnweta dabere na njirimara (ABAC). viewenwetara site na NFSv4.1 site na nyocha Kerberos ma ọ bụ site na SMB na nyocha Kerberos ma ọ bụ NTLM. ABAC na-enye ohere ịnweta a view Ọ bụrụ na akaụntụ onye ọrụ na Active Directory nwere njirimara ABAC jikọtara ya na ABAC tag ekenyere na view. Nke a na-enye njikwa ohere nke ọma dabere na njirimara onye ọrụ.

Nkebi: Njikwa Nweta dabere na njirimara (ABAC) [p. 269]

Nyocha otu nbanye (SSO).

Nkọwa: VAST VMS na-akwado nkwado otu nbanye (SSO) site na iji ndị na-eweta njirimara dabere na SAML (IdP). Nke a na-enye ndị njikwa VMS ohere ịbanye na ụyọkọ VAST site na iji nzere ha sitere na IdP dị ka Okta, nke nwekwara ike ịnye ikike nyocha multi-factor (MFA). SSO na-eme ka usoro nbanye dị mfe ma na-akwalite nchekwa site na ịhazi nyocha.

Nkebi: Hazie nyocha SSO na VMS [p. 90]

Njikọ ndekọ na-arụ ọrụ

Nkọwa: VAST Cluster na-akwado mwekota na Active Directory (AD) maka ma VMS na data protocol njirimara njirimara na ikike. Nke a na-enye ndị otu ụlọ ọrụ ohere itinye akụrụngwa AD ha dị ugbu a iji jikwaa ohere onye ọrụ na akụrụngwa VAST Cluster. Njikọ AD na-akwado atụmatụ dị ka SID History maka otu na ndị ọrụ, na-ahụ na njikwa ohere enweghị nkebi.

Nkebi: Ijikọ na ndekọ ndekọ aha (v5.1) [p. 347]

Mmekọrịta LDAP

Nkọwa: Ikpo okwu na-akwado mwekota na sava LDAP maka ma VMS na data protocol njirimara njirimara na ikike. Nke a na-enye ndị otu ohere ohere iji akwụkwọ ndekọ aha LDAP ha dị ugbu a iji jikwaa ịnweta akụrụngwa VAST Cluster, na-enye azịza nyocha na-agbanwe agbanwe na nke nwere ike ịgbatị.

Nkebi: Ijikọ na sava LDAP (v5.1) [p. 342]

Njikọ NIS

Nkọwa: Ụyọkọ VAST na-akwado mwekota na Ọrụ Ozi Network (NIS) maka njirimara onye ọrụ protocol data. Njirimara a bara uru maka gburugburu na-adabere na NIS maka ijikwa ozi onye ọrụ na njikwa ịnweta.

Nkebi: Ijikọ na NIS (v5.1) [p. 358]

Ndị ọrụ mpaghara na otu

Nkọwa: Ndị nchịkwa nwere ike ijikwa ndị ọrụ na otu mpaghara ozugbo n'ime ụyọkọ VAST. Nke a gụnyere ịmepụta, gbanwee na ihichapụ akaụntụ na otu ndị ọrụ mpaghara, yana ịnye ikike na ọrụ na akaụntụ ndị a.

Nkebi: Ijikwa ndị ọrụ mpaghara (v5.1) [p. 335]
Nkebi: Ijikwa otu mpaghara (v5.1) [p. 337]

Protocol ACLs na akara SELinux

VAST Data Platform na-akwado ACLs protocol dị iche iche na njirimara akara SELinux, na-ahụ maka njikwa na nchekwa siri ike. Nke a bụ nkọwa zuru ezu nke njirimara ọ bụla yana akụkụ dị mkpa yana ọnụọgụ ibe sitere na VAST Cluster 5.1 Documentation:

Ndepụta njikwa nnweta POSIX (ACLs)

Nkọwa: Sistemu VAST na-akwado POSIX ACLs, na-enye ndị nchịkwa ohere ịkọwapụta ikike zuru ezu maka files na nchekwa gafere ụdị Unix/Linux dị mfe. POSIX ACL na-enyere aka ikenye ikike nye ọtụtụ ndị ọrụ na ndị otu, na-enye njikwa ohere mgbanwe na granular.

Akụkụ: NFS File Protocol nkekọrịta (v5.1) [p. 154]

NFSv4 ACL

Nkọwa: NFSv4 bụ ụkpụrụ mara ọkwa nke nwere nkwenye echekwara site na Kerberos nke na-akwado ACL zuru ezu. Ndị ACL ndị a yitere n'ọkwa dị na SMB na NTFS, na-enye ohere maka njikwa nnweta siri ike. Enwere ike ijikwa NFSv4 ACL site na iji ngwaọrụ Linux ọkọlọtọ n'elu usoro NFS.

Akụkụ: NFS File Protocol nkekọrịta (v5.1) [p. 154]

SMB ACL

Nkọwa: A na-ejikwa SMB ACL n'otu ụzọ ahụ dịka òkè Windows, na-enye ndị ọrụ ohere ịtọ Windows ACL nke ọma site na scripts PowerShell na Windows. File Explorer n'elu SMB. Enwere ike ịmanye ACL ndị a, gụnyere ndenye ndenye aha, na ndị ọrụ na-enweta site na usoro SMB na NFS n'otu oge.

Akụkụ: SMB File Ịkekọrịta Protocol na VAST Cluster (v5.1) [p. 171]

Atumatu njirimara S3

Nkọwa: S3 Native Security Flavor na-enye ohere maka iji S3 Identity Atumatu iji chịkwaa ịnweta yana ikike ịtọ ma gbanwee ACL dịka iwu S3 siri dị. Njirimara a na-enye njikwa ohere granular maka bọket S3 na ihe.

Nkebi: S3 Protocol Nchekwa Ihe (v5.1) [p. 182]

Multi-Protocol ACLs

Nkọwa: VAST na-akwado multi-protocol ACLs, na-enye ụdị ikike ejikọtara ọnụ maka ịnweta data n'ofe ụkpụrụ dị iche iche. Nke a na-eme ka njikwa nnweta na nchekwa na-agbanwe agbanwe n'agbanyeghị usoro ejiri iji nweta data ahụ.

Nkebi: Nweta ọtụtụ protocol (v5.1) [p. 151]

Njirimara akara SELinux

1. NFSv4.2 Nchedo Label

Nkọwa: Ụyọkọ VAST 5.1 na-akwado akara NFSv4.2 na ọnọdụ nkesa nwere oke. N'ụdị a, ụyọkọ VAST nwere ike chekwaa ma weghachite akara nchekwa files na akwụkwọ ndekọ aha na NFS views nke ndị nwe ụlọ nyere NFSv4.2, mana ụyọkọ anaghị amanye ime mkpebi ohere dabere na akara. Ndị ahịa NFSv4.2 na-arụ ọrụ akara na nkwado.

Nkebi: NFSv4.2 Label Nche (v5.1) [p. 169]

Njikwa Asambodo na izo ya ezo

VAST Data Platform na-enye atụmatụ zuru oke maka izo ya ezo na njikwa asambodo. Nke a bụ nkọwa zuru ezu nke njirimara ọ bụla yana akụkụ dị mkpa yana ọnụọgụ ibe sitere na VAST Cluster 5.1 Documentation:

Data ezoro ezo na ezumike

Nkọwa: VAST Data Platform na-akwado izo ya ezo na izu ike site na iji ngwọta njikwa igodo mpụga. Njirimara a na-achọpụta na echekwara data echekwara n'elu ikpo okwu yana igodo echekwara na mpụga ụyọkọ VAST, na-echebe data site na ịnweta enweghị ikike. Ikpo okwu na-akwado Thales CipherTrust Data Security Platform na Fornetix Vault Core maka njikwa igodo mpụga. Ụyọkọ ọ bụla nwere igodo nna ukwu pụrụ iche, yana enwere ike ịme ka ezoro ezo n'oge nhazi mbụ nke ụyọkọ ahụ.

Nkebi: Ihe nzuzo data (v5.1) [p. 128]

FIPS 140-3 Ọkwa 1 nkwado

VAST Data Platform tinyere OpenSSL 1.1.1 Cryptographic Module, nke FIPS 140-3 Level 1 kwadoro. Nọmba asambodo maka nkwado a bụ #4675. Ejikọtara ihe nzuzo niile maka data na ụgbọ elu yana ezumike na FIPS kwadoro OpenSSL 1.1.1 Module Cryptographic. Ikpo okwu na-eji TLS 1.3 maka nnyefe data echekwara yana 256-bit AES-XTS izo ya ezo maka data na ezumike, na-ahụ maka nchekwa siri ike na nnabata na ụkpụrụ ụlọ ọrụ. Ịkwalite nchekwa na njikwa data yana nchekwa ọtụtụ na ụlọ obibi echekwara 14

Isi mmalite: Mmemme nkwado Module Cryptographic (CMVP)

Njikwa Asambodo TLS

Nkọwa: ikpo okwu na-akwado nrụnye na njikwa nke asambodo TLS maka ichekwa nkwukọrịta
na VAST Management System (VMS). Ndị nchịkwa nwere ike iwunye asambodo TLS iji hụ na ebufere data
n'etiti ndị ahịa na VMS ezoro ezo ma chekwaa.

• Nkebi: Ịwụnye asambodo SSL maka VMS (v5.1) [p. 78]

Nyocha mTLS maka ndị ahịa VMS

Nkọwa: Igwe ikpo okwu na-akwado nkwenye TLS (mTLS) maka VMS GUI na ndị ahịa API. Mgbe agbanyere mTLS, VMS chọrọ ka onye ahịa weta asambodo nke otu Asambodo bịanyere aka na ya. Nke a na-agbakwụnye oyiri nyocha nke ibe, nke ma onye ahịa na ihe nkesa na-enyocha ibe ya, na-enye nchekwa nchekwa ọzọ maka nkwukọrịta na VMS iji kwado kaadị PIV/CAC na nhọrọ.

Nkebi: Na-enyere mTLS Nyocha maka ndị ahịa VMS (v5.1) [p. 78]

Na-echekwa nzikọrịta ozi ndekọ na-arụ ọrụ

VAST Data Platform na-enye usoro nchekwa siri ike maka nyocha Active Directory (AD) site n'ikwe ka ndị nchịkwa gbanyụọ NTLM v1 na v2 protocol. NTLM (NT LAN Manager) bụ usoro nyocha ochie nke maara adịghị ike, na-eme ka ọ ghara ịdị nchebe ma e jiri ya tụnyere ụkpụrụ ọgbara ọhụrụ dị ka Kerberos.

Nkebi: Ijikọ na ndekọ ndekọ aha (v5.1) [p. 347]

Na-echekwa ohere S3

VAST Data Platform na-eme ka nchekwa nke ohere S3 dịkwuo mma site n'ikwe ka ị gbanyụọ Signature Version 2 (SigV2) mbinye aka, hụ na a na-eme mmekọrịta S3 niile site na iji ụdị mbinye aka dị nchebe karị 4 (SigV4). Na mgbakwunye, ikpo okwu na-amanye iji TLS 1.3 maka nkwukọrịta S3, na-eji FIPS 140-3 akara ciphers kwadoro.

Nkebi: S3 Protocol Nchekwa Ihe (v5.1) [p. 182]

Crypto mkpochapu

Nkọwa: Crypto erase bụ usoro iji wepụ data onye nwe ụlọ na sistemụ VAST. A na-eme nke a site na ịkagbu ma ọ bụ ihichapụ igodo onye nwe ụlọ site na iji sistemụ VAST ma ọ bụ Njikwa igodo Mpụga. Sistemu VAST ga-ehichapụ igodo nzuzo data (DEK) na igodo nzuzo (KEKs) na sistemụ RAM, si otú ahụ wepụ ohere ịnweta data niile ejiri igodo ndị ahụ ozugbo. Sistemu VAST nwekwara ike ihichapụ data ezoro ezo. Njirimara a na-enye usoro iji hichapụ data n'enweghị nsogbu ma ọ bụrụ na wụsa data ma ọ bụ mgbe onye nwe ụlọ hapụrụ ikpo okwu.

Nkebi: Ihe nzuzo data (v5.1) [p. 128]

Katalọgụ na nyocha

VAST Data Platform na-enye atụmatụ zuru oke maka nyocha na katalọgụ, na-ahụ maka njikwa data siri ike na nnabata. Nke a bụ nkọwa zuru ezu nke njirimara ọ bụla yana akụkụ dị mkpa yana ọnụọgụ ibe sitere na VAST Cluster 5.1 Documentation:

Nyochaa Protocol

Nkọwa: Nyochaa protocol na arụmọrụ VAST Data Platform na-emepụta, ihichapụ, ma ọ bụ gbanwee files, akwụkwọ ndekọ aha, ihe, na metadata. Ọ na-edekọ ọrụ ịgụ na mmemme nnọkọ. Njirimara a na-enyere aka n'ịchọ ihe omume onye ọrụ yana hụ na nrube isi na atumatu nchekwa. Ndị nchịkwa nwere ike hazie ntọala nyocha ụwa na view ndekọ nyocha site na VAST Web UI ma ọ bụ CLI.

Nkebi: Protocol Auditing Overview [p. 243]
Nkebi: Ịhazi Ntọala Nleba anya zuru ụwa ọnụ [p. 243]
Nkebi: Ịhazi Auditing na View Atumatu [p. 245]
Nkebi: Audited Protocol Operations [p. 245]
Ngalaba: Viewing Protocol Audit Logs [p. 248]

Ịchekwa akwụkwọ nyocha nyocha Protocol na tebụl data VAST

Nkọwa: VAST Data Platform na-enye ohere nhazi nke VMS iji chekwaa ndekọ nyocha protocol na tebụl VAST Database. A na-echekwa ndenye ndekọ dị ka ndekọ JSON, nke nwere ike ịbụ viewed ozugbo site na VAST Web UI na VAST Audit Log page. Njirimara a na-eme ka ikike ịme nyocha zuru ezu na nyocha nke ọrụ onye ọrụ. Nkebi: Ịchekwa Ndekọ Nyochaa Protocol na VAST Database Tebụl [p. 25]

VAST katalọgụ

Nkọwa: Katalọgụ VAST bụ ndenye metadata arụnyere n'ime nke na-enye ndị ọrụ ohere ịchọ ma chọta data ngwa ngwa. Ọ na-emeso ndị file Sistemu dị ka nchekwa data, na-eme ka ọgbọ AI na ngwa ML na-abịa n'ọgbọ iji ya dị ka ụlọ ahịa njiri mara onwe. Katalọgụ ahụ na-akwado ajụjụ ụdị SQL ma na-enye nghọta WebUI, CLI bara ụba na API maka mmekọrịta.

Nkebi: VAST katalọgụ gafereview [p. 489]
Nkebi: Na-ahazi VAST katalọgụ [p. 491]
Nkebi: Na-achọ katalọgụ VAST sitere na VAST Web UI [p. 492]
Nkebi: Inye ndị ahịa ohere VAST katalọgụ CLI [p. 493]

VAST DataBase

Nkọwa: VAST DataBase na-agbatị ike nke VAST katalọgụ site na ịchekwa ọdịnaya dị mgbagwoju anya na nchekwa data egosipụtara nke ọma. Ọ na-akwado ajụjụ data dị elu na nnukwu, na-echekwa data n'ụdị kọlụm dị mma nke yiri Apache Parquet. Emebere nchekwa data ahụ maka ajụjụ dị adị nke ọma n'ime nnukwu nchekwa data tabular yana metadata ewepụtara.

Nkebi: VAST DataBase Overview [p. 495]
Nkebi: Ịhazi ụyọkọ VAST maka ịnweta nchekwa data [p. 499]
Nkebi: VAST Database CLI Ntuziaka mmalite ngwa ngwa [p. 494]

Ogige ndekọ ndekọ ego nyocha

Nkọwa: ubi ndekọ ndekọ nyocha na-enye ozi zuru ezu gbasara mmemme ọ bụla abanyela, gụnyere ụdị ọrụ, nkọwa onye ọrụ, oge.amps, na akụrụngwa emetụtara. Ndekọ osisi a zuru oke dị oke mkpa maka nnabata na nyocha nyocha.

Nkebi: Ebe ndekọ ndekọ ego nyocha [p. 250]

Viewing Protocol Audit ndekọ

Nkọwa: Ndị nchịkwa nwere ike view ndekọ nyocha protocol site na VAST Web UI ma ọ bụ CLI. Ndekọ ndekọ ahụ na-enye nghọta n'ime ọrụ onye ọrụ na arụmọrụ sistemụ, na-enyere aka hụ na nnabata na ịchọpụta omume ọ bụla na-akwadoghị.

Ngalaba: Viewing Protocol Audit Logs [p. 248]

Sistemu eji arụ ọrụ echekwara yana echekwara

VAST Data Platform na-eji usoro zuru oke iji chekwaa sistemụ arụmọrụ ya, na-eme ka ọ sie ike.
nchebe na nnabata na ụkpụrụ ụlọ ọrụ. Nke a bụ akụkụ bụ isi nke sistemụ arụmọrụ yana usoro nchekwa etinyere:

Sistemu eji arụ ọrụ ejigidere

Nkọwa: VAST Data Platform na-eji sistemụ arụ ọrụ ejiri CIQ nyere, ọkachasị Enterprise Rocky 8, nke bụ onyonyo sistemụ arụmọrụ dakọtara ọnụọgụ abụọ RHEL. CIQ's Mountain Platform na-ebunye onyonyo, ngwugwu, yana ihe ngwọta dị n'igwe ojii na n'ime ụlọ nwere nchekwa, ikike yana nke ukwuu.

Nchichi mgbe niile na njikwa adịghị ike

Nkọwa: VAST na-ahụ na a na-akwachi ma na-emelite sistemụ arụmọrụ mgbe niile site na ịmara maka adịghị ike nchekwa kachasị ọhụrụ, itinye patches dị mkpa, na mejuputa mbelata kwesịrị ekwesị n'oge. Ụzọ a na-arụsi ọrụ ike na-enyere aka idobe ọnọdụ nchekwa nke sistemụ arụmọrụ.

Nleba anya na-aga n'ihu

Nkọwa: A na-emejuputa usoro nleba anya na-aga n'ihu iji kwado ọnọdụ nchekwa nke sistemụ arụmọrụ. Nke a na-agụnye ntule oge niile, nyocha, na reviews nke njikwa nchekwa na nhazi nke sistemu ahụ, yana inye ohere ịdebanye aha maka mmemme enyo yana ihe nchekwa nwere ike ime.

Nkwekọrịta DISA STIG

Nkọwa: VAST Data Platform na-akwado DISA STIG (Ntuziaka Nzube Nkà na Ụzụ) maka RedHat Linux 8, MAC 1 Profile – Mission Critical Classified. Nrube isi a na-eme ka o doo anya na sistemụ arụmọrụ na-agbaso ụkpụrụ nchekwa siri ike nke ndị ahịa chọrọ na gburugburu akwadoro.

Njikwa nhazi

Nkọwa: ikpo okwu na-edobe nhazi ntọala maka sistemụ RHEL 8, gụnyere ntọala maka akụrụngwa sistemụ, file ikike, na nrụnye ngwanrọ. Ọ na-emejuputa usoro njikwa mgbanwe iji soro, review, ma kwadoro mgbanwe na nhazi usoro, na-eme ka usoro ahụ na-akwado nhazi nke ọma na nhazi.

Ọrụ kacha nta

Nkọwa: A na-emesi ụkpụrụ nke ịrụ ọrụ kacha nta ike site n'ịkwado iwepụ ma ọ bụ gbanyụọ nke ngwanro, ọrụ na akụrụngwa na-adịghị mkpa. Nke a na-ebelata ihe ọghọm ndị nwere ike ime yana ọgụ vectors.

Sistemu na ozi iguzosi ike n'ezi ihe

Nkọwa: Ihe nzuzo nzuzo nke ikpo okwu na njirimara njikwa isi, yana njikọta ya na sistemụ SIEM, na-enyere aka hụ na iguzosi ike n'ezi ihe nke data na ozi. Nke a gụnyere nyocha nchekwa oge niile, nnwale nnabata, yana njikwa adịghị ike iji hụ na patches nche ọhụrụ, nhazi na omume kacha mma.

Chain Nbunye Ngwanrọ echedoro

Ịhụ na yinye sọftụwia echekwara echekwabara dị oke mkpa maka irube isi na ụkpụrụ dịka Iwu Agreement Trade (TAA), Federal Acquisition Regulation (FAR), na ụkpụrụ ISO. VAST Data Platform na-emejuputa usoro zuru oke iji chekwaa ụdọ ọkọnọ sọftụwia ya, na-ahụ na emepụtara sọftụwia nke ọma ma zuo oke nchekwa chọrọ.

Usoro Mmepe Software echekwara (SSDF)

VAST Data Platform nakweere NIST Secure Software Development Framework (SSDF), nke na-enye ntuziaka maka mmepe ngwanrọ echedoro. Usoro a na-enyere aka ichekwa ụdọ ọkọnọ software megide ihe egwu site n'ịkọwapụta omume maka itinye nzuzo, njikwa adịghị ike, na nleba anya na-aga n'ihu.

Ngwanrọ mejupụtara nyocha (SCA)

A na-eji ngwa dị ka GitLab maka Nnwale Nchebe Ngwa Static (SAST) na Nnwale Nchebe Ngwa dị omimi (DAST) iji nyochaa ma koodu nwe ya na nke mepere emepe maka adịghị ike. Nke a dị oke mkpa maka ịchọpụta adịghị ike nchekwa tupu ebuga ya.

Ụgwọ Ngwa Ngwa Ngwa (SBOM)

Ikpo okwu na-ewepụta ma na-ejikwa SBOM iji soro akụrụngwa eji na mmepe ngwanrọ. A na-etinye GitLab na Artifacty na pipeline iji kwalite nghọta na nrube isi na Iwu Executive 14028.

Njikọ aka na-aga n'ihu na pipeline na-aga n'ihu (CI/CD).

Otu ọkpọkọ CI/CD na-etinye ule nchekwa, koodu review, na nlele nnabata. A na-akwado ọkpọkọ a n'elu ikpo okwu igwe ojii dabere na US iji zute ihe TAA/FAR chọrọ, na-ahụ na a na-arụ ọrụ niile n'ime US yana ndị ụlọ ọrụ US jikwaa ya.

Mpempe akwụkwọ na ngwugwu

A na-emejuputa nbinye aka dijitalụ nke arịa na ngwugwu iji hụ na iguzosi ike n'ezi ihe na izi ezi. Docker Content Trust na RPM mbinye aka ka akwadoro omume maka ichekwa ngwa etinyere na nkesa ngwugwu.

Ihe ọghọm yana nyocha nnabata

A na-eji ngwaọrụ dị ka Tenable na Qualys maka nyocha sistemu arụ ọrụ ma wuo ngwugwu, yana maka nchọpụta nje na malware. A na-etinye ngwá ọrụ ndị a n'ime pipeline iji chọpụta na ibelata ihe egwu nwere ike na gburugburu software.

Njikwa ngwanrọ nke ndị ọzọ

Ngwa ngwa ndị ọzọ niile, ma ọ bụ isi mmalite ma ọ bụ nke nwe ya, esitere na ebe US iji kwado ụkpụrụ TAA/FAR. Akụrụngwa a gụnyere na usoro nyocha SAST na DAST iji hụ na nchekwa.

Ụzọ akwụkwọ na nyocha

A na-edobe akwụkwọ zuru oke nke usoro niile site na ntinye koodu na ngwugwu nbudata nke ndị ahịa na-eji. Enwere ike ịnweta akwụkwọ a n'okpuru NDA maka nyocha na nkwado ndị ahịa, dịka onye ndu chọrọ.

Onye ọrụ na njikwa akụ

Ndị ọrụ nke ụlọ ọrụ US (Vast Federal) na-ahụ maka usoro a, yana akụ niile ejiri na mmepe ngwanrọ na usoro mbugharị bụ ụlọ ọrụ a nwere. Nrube isi a dị oke mkpa maka imezu ụkpụrụ nnweta nke gọọmentị etiti.

gburugburu mmepe echedoro

Emepụtara ma wuo ngwanro a na gburugburu ebe echedoro, yana usoro dị ka nyocha ọtụtụ ihe, ohere ọnọdụ, na izo ya ezo nke data nwere mmetụta. A na-amanye itinye ndekọ oge niile, nleba anya na nyocha nke mmekọrịta ntụkwasị obi.

Chains inyefe koodu isi mmalite ntụkwasị obi

A na-eji ngwa akpaghị aka ma ọ bụ usoro atụnyere iji kwado nchekwa nke koodu ime yana ngwa ndị ọzọ, na-ejikwa adịghị ike ndị metụtara ya nke ọma.

Nyochaa adịghị ike nchekwa

Ongoing vulnerability checks are conducted before releasing new products, versions, or updates. A vulnerability disclosure program is maintained to assess and address disclosed software vulnerabilities promptly.

Mmechi

Njikọ nke Multi-category Security (MCS) na njirimara ụlọ nwere nchekwa na-enye usoro siri ike maka ịkwalite nzuzo na nchekwa nke data enweghị nhazi. Site n'itinye MCS n'ọrụ, otu nwere ike kenye otu ụdị dị iche iche files, n'ịhụ na ọ bụ naanị usoro ikike na ndị ọrụ nwere ike ịnweta ozi nwere mmetụta. Nchekwa agbakwunyere a dị oke mkpa maka ichekwa data emebereghị dịka akwụkwọ, onyonyo na vidiyo.

Ịgbazinye ụlọ nwere ntụkwasị obi na-eme ka ikewapụ data dịkwuo ike site na ịmepụta gburugburu dị iche iche maka otu dị iche iche, ngalaba, ma ọ bụ òtù dị iche iche n'ime otu akụrụngwa. Akụkụ ndị dị mkpa dị ka ikewapụ akụrụngwa, nkewa data, nkewa netwọkụ, yana njikwa ohere granular na-ahụ na data onye nwe ụlọ ọ bụla na-anọgide na nzuzo na nchekwa. VAST Data Platform na-egosipụta ụkpụrụ ndị a site na njiri mara ya, gụnyere VLAN. tagging, njikwa ohere dabere na ọrụ yana njirimara, yana usoro nzuzo siri ike.

Na nchịkọta, VAST Data Platform, yana njikọta nke MCS na ụlọ obibi echekwara, na-enye ngwọta zuru oke na nchekwa maka ijikwa data na-ahazighị ya. Usoro a dị mkpa maka ụlọ ọrụ nwere ihe siri ike chọrọ nzuzo data, dị ka ụlọ ọrụ gọọmentị, ụlọ ọrụ ego na ndị na-ahụ maka ahụike. Site na itinye usoro nchekwa ndị a dị elu, ndị otu nwere ike iji obi ike chebe data ha nwere mmetụta ma na-enye njikwa data nke ọma na nke nwere ike ịgbatị. Nkwubi okwu a na-edobe isi ihe ka ọ na-eme ka o doo anya na nkenke.

Maka ozi ndị ọzọ na VAST Data Platform yana otu ọ ga-esi nyere gị aka idozi nsogbu ngwa gị, kpọtụrụ anyị na ndewo@vastdata.com.

Akwụkwọ / akụrụngwa

	Ngwa ngwa VAST Data Platform [pdf] Ntuziaka onye ọrụ Data Platform Software, Platform Software, Software
	Ngwa ngwa VAST Data Platform [pdf] Ntuziaka onye ọrụ Data Platform Software, Platform Software, Software

Ntụaka

Akwụkwọ ntuziaka onye ọrụ

Okwu mmalite