I-De-Militarized Zone kwi-Computer Networking

Kwi-intanethi ye-computer, i-De-Militarized Zone (iDMZ) yinkqubo ekhethekileyo yomnatha wendawo eyenzelwe ukuphucula ukhuseleko ngokuhlukanisa iikhomputha kwicala ngalinye lomlilo . I-DMZ inokusekwa kumanethiwekhi asekhaya okanye kwishishini, nangona ukusetyenziswa kwabo kumakhaya kunciphise.

Uphi iDMZ Usetyenzisayo?

Kwi-intanethi yekhaya, iikhomputha kunye nezinye izixhobo ziqhelekelelwe kwinethiwekhi yommandla wengingqi (LAN) exhunywe kwi-intanethi nge- router roulette . I-router isebenza njenge-firewall, ngokukhetha ukhenketho lwezithuthi ukusuka ngaphandle ukukunceda ukuqinisekisa ukuba kuphela imilayezo esemthethweni idlulayo. I-DMZ ihlula ukwahlula okunjalo inethiwekhi zibe ngamacandelo amabini ngokuthatha esinye sezixhobo okanye ngaphezulu kwi-firewall nokuzihambisa ngaphandle. Olu lungiso olungcono lukhusela amacebo angaphakathi ukusuka ekuhlaselweni okusemandleni angaphandle (kunye nakwezinye izinto).

I-DMZ iluncedo emakhaya xa inethiwekhi isebenza kumncedisi . Umncedisi angasetwa kwi-DMZ ukuze abasebenzisi be-intanethi bafikelele kwidilesi yakhe ye-IP yekharityhulam , kwaye yonke inethiwekhi yendlu ikhuselekile ekuhlaselweni kwiimeko apho umncedisi ehlelwe khona. Kwiminyaka edlulileyo, ngaphambi kokuba iinkonzo zefu zifumaneke ngokubanzi kwaye zithandwa, abantu abaninzi bavame ukugijima kwiWebhu, iVoIP okanye iifayile zeefayile ezisuka kumakhaya abo kunye nee-DMZ zenza ingqiqo.

Ngakolunye uhlangothi, amanethiwekhi ekhompyutheni yezoshishino, anokusebenzisa i-DMZ ngokubanzi ukukunceda ukulawula iWeb kwi-Web kunye namanye amaseva ajongene noluntu. Amanethiwekhi asekhaya namhlanje azuza ngokubanzi kwi-DMZ ebizwa ngokuba yi-DMZ yokubamba (jonga ngezantsi).

I-DMZ Inkxaso Yenkxaso kwiResband Routers

Ulwazi malunga ne-DMZ yomnatha lunokudideka ukuqonda ekuqaleni okokuba ixesha libhekisela kwiintlobo ezimbini zokuqwalasela. Umgangatho osemgangathweni we- DMZ wombane wee-routers awuyi kubeka i-subnetwork epheleleyo ye-DMZ kodwa kunoko uchonga esinye isixhobo kwinethiwekhi esele ikhona ukuba isebenze ngaphandle kwe-firewall ngelixa yonke inethiwekhi isebenza njengesiqhelo.

Ukuqwalasela inkxaso ye-DMZ kumnatha wekhaya, ungene kwikhonsole ye-router kwaye ukhethe ukhetho lwe-DMZ olusesikweni olungakhutshwayo. Faka idilesi ye-IP yangasese kwidivaysi yendawo ekhethiweyo njengommkeli. I-Xbox okanye i-PlayStation game consoles ikhethiweyo ikhethwe njenge-DMZ yokusingatha ukukhusela i-firewall yasekhaya ekuphazamiseni ukudlala kwe-intanethi. Qinisekisa ukuba ummkeli usebenzisa idilesi ye- static (ngaphandle kokunikezelwa ngamandla), ngaphandle koko, idivaysi eyahlukileyo ingayifumana idilesi ye-IP ekhethiweyo kwaye ibe ngummkeli we-DMZ esikhundleni.

Inkxaso yeNkxaso yeDMZ

Ngokuphambene nolawulo lwe-DMZ, i-DMZ yangempela (ngezinye izihlandlo ebizwa ngokuba yi-DMZ yorhwebo) iseka entsha subnetwork ngaphandle kwe-firewall apho enye ikhompyutha okanye ngaphezulu ikhompyutha. Ezi khomputha zangaphandle zongeza ukhuseleko olongezelelweyo lweekhompyutha emva kwe-firewall njengoko zonke izicelo ezingenayo zifunyenwe kwaye kufuneka ziqale zidlule kwi-computer ye-DMZ ngaphambi kokufikelela kwi-firewall. I-DMZ yeeNqobo iyanqanda iikhompyutri emva kwe-firewall ekunxibelelaneni ngqo kunye namadivayisi e-DMZ, efuna ukuba imilayezo ifike kumnatha woluntu kunoko. Ama-DMZ amanqanaba amaninzi kunye neendawo eziliqela zenkxaso ye-firewall zingasetyenziselwa ukuxhasa amanethiwekhi amaninzi.