Produkte > Virtual Taps

Today’s networks are virtualizing with explosive speed, raising complex challenges and demanding a new approach to security, management and compliance. Virtualization brings sweeping gains in scalability and efficiency, but also creates the severe threat of intrusion. Lack of visibility into the traffic flow between Virtual Machines (VMs) leaves your network vulnerable and uncontrollable, resulting in potential loss of productivity, customers, and revenue.

The Phantom Virtualization Tap Provides the Total Visibility You Need
Like a magnifying glass, the landmark Phantom Virtualization Tap exposes the true scope of your virtualized and physical infrastructure. You see every bit of traffic passing between VMs on hypervisor stacks, as well as between VMs residing on separate blades in the same chassis. It taps traffic between your VMs on a physical server and enables rigorous, Best Practices network management and control.

The Phantom Virtualization Tap integrates directly into the hypervisor kernel, enabling full access to the entire network stack without the performance penalty of running your vSwitch in promiscuous mode. That way, you don’t lose important network-layer errors which may be cleaned off before sharing and become becoming invisible to other monitoring resources when those very errors are key to troubleshooting your issue.

Eliminate the Black Hole and Illuminate Your Network Data
The Phantom Virtualization Tap gives you a complete monitoring perspective. As virtualization expands, many instrumentation layer tools are developed for hypervisors and virtual machines. However when users cannot monitor both the virtual and physical aspects of an environment, you run the risk of a “black hole”—when the speed of virtualization outpaces your ability to control and protect your network. That’s why Net Optics supports total access capabilities and unrestricted monitoring by any tool of choice, whether virtual or physical.

The Phantom Virtualization Tap

• Performs smart filtering of traffic of interest at the collection point
• Integrates kernel-level monitoring into the heart of your hypervisor and integrated with your virtual switching vendor of choice
• Enables monitoring and access control in dynamic and distributed virtual environments
• Eliminates the need for promiscuous mode switches, dedicated probes or counterintuitive shaping and routing.

Phantom for Virtual Visibility
The Phantom Solution for monitoring in a virtualized computing environment consists of four key components:
The Phantom™ Virtual Tap installs in the hypervisor of each physical server to provide access to all traffic in the server, including previously invisible inter-VM traffic.
The Phantom HD™ is a high-throughput tunneling appliance that decapsulates traffic from numerous Phantom Virtual Taps, aggregates the resulting raw traffic, and sends it at 10 Gbps for
inspection by instrumentation layer tools. Phantom HD also encapsulates raw traffic from virtual or physical devices and sends it to remote locations for processing at 10 Gbps.
The Director™ data monitoring switch is an optional component that can manage the Phantom HD, aggregate raw traffic from the Phantom HD with traffic from physically monitored sources, and filter and switch it to monitoring tools.
Physical monitoring tools are the final component of the Phantom Solution for performance, security, and compliance monitoring in the virtualized environment.

High-Throughput Decapsulation
The Phantom HD terminates tunnelled traffic from Phantom Virtual Taps or other sources. It decapsulates the traffic and defragments those packets that occasionally become fragmented during tunnel encapsulation. The Phantom HD then lays out the resulting raw traffic stream on a monitoring port that is connected to a switch such as Net Optics Director, or to another monitoring tool of choice.

Raw Traffic Encapsulation
The Phantom HD receives raw traffic from either virtual or physical devices, encapsulates it, and tunnels it over to the remote instrumentation layer for inspection. The Phantom HD supports 10 Gbps continuous throughput. This is ample for handling traffic of interest from many virtual servers on multiple hypervisors and many ESXs. Fiber SR 10 Gigabit ports provide the input for the tunneled traffic and the output for the raw traffic.

Easy Deployment
The compact, 1U Phantom HD is easy to add to your data center and simple to deploy. It can be conveniently managed by a Director CLI or by Phantom HD™s own CLI. Just plug it in, configure the IP addresses, and decapsulation begins.