Technical exchange | why should network security equipment use bypass function

Bypass What is it? ？ Let's take a simple example ： As we all know, network security devices are generally used between more than two networks , For example, between intranet and extranet . The application in the network security device will perform network packet analysis on the internal information , After judging that there is no threat , Then the packets are delivered according to certain routing rules . however , The premise is that there is no problem with the network communication equipment .
When the network security device crashes 、 In case of power failure , The network connected to this device will lose contact with each other , At that time, if we still needed to require that all networks be connected , This requires Bypass Here we go .
Bypass function
seeing the name of a thing one thinks of its function ,Bypass Function is bypass function , In case of power failure or crash between network security devices , By specific triggering methods , A system that physically prevents two networks from passing through network security devices , Direct conduction . At the firewall 、 Anti-Virus Gateway , Gatekeeper 、 It is especially suitable for network security equipment platforms such as data monitoring .
Bypass Three types of applications （ Control mode or trigger mode classification ）：
1、 Triggered by the power supply . In this way , Generally, when the equipment is not powered on ,Bypass Function on , If once the equipment is powered on ,Bypass Immediately adjust to the off state .
2、 from GPIO To control . When entering OS after , Can pass GPIO To operate on a specific port , So as to realize the right to Bypass Switch control .
3、 from Watchdog To control . This situation is actually the right way 2 An extended application of , Can pass Watchdog To control GPIO Bypass Program startup and shutdown , So as to realize the right to Bypass State control . After using this method , If the device crashes, it can be controlled by Watchdog Open up Bypass.
Product overview
LREM3501BP-4T It is a support product independently developed by Shenzhen Lianrui electronics PCIe The protocol has four electric ports and two circuits Bypass Gigabit mezzanine Ethernet network adapter . In Gigabit Ethernet BYPASS Normal... Is supported on the server adapter , There are three functional modes of disconnection and bypass .
LREM3501BP-4T Function is introduced

1. be based on Intel I350 Research and development of master control scheme
2. Support IP / TCP and IP / UDP Receive checksum offload
3. In case of power failure . Bypass when the system is suspended or the software application is suspended / Disconnect the Ethernet port
4. Software programmable bypass . Disconnected or normal mode
5. Support four Gigabit ports full duplex working mode
6. Support IEEE802.3az、IEEE802.3ab And other Ethernet energy-saving standards
7. PXE、DPDK Support
8. Strong compatibility 、 High stability
9. operating system ： windows、windows server、Linux、VMware、FreeBSD etc.
   In addition Intel master control Bypass Function network card , Shenzhen Lianrui Electronics Co., Ltd. also has localization support PCIe x8 Four electric ports and two circuits of bus protocol Bypass Gigabit mezzanine Ethernet network adapter , It has been running stably in the customer equipment of the global network security platform . at present , Shenzhen Lianrui Electronics Co., Ltd. is developing more Bypass Series function network card , High quality network card , Not to miss .
   Source URL ：lrnic.cn