NSFOCUS ADS NX3 10000 Series, Руководство по установке

Страница: 33 / 46

NSFOCUS ADS Installation Guide
Copyright © NSFOCUS 27 V4.5R90F01SP07C236 (2019-11-19)
3.5
Deploying the System
Currently, the ADS device can be deployed in in-path mode or out-of-path mode based on
different network environments. The following sections detail the two modes.
A DS NX3-2020/2020E/2010, NX3-200E/600E/800E, NX5-4020/4020E, NX5-
6025/6025E, NX3-HD2500/NX5-HD4500/NX5-HD6500, and NX5-8000 support both
in-path and out-of-path deployment modes, whereas ADS
NX5-10000 supports the out-
of-path deployment mode only.
3.5.1 In-Path Deployment
In-path deployment is suitable for enterprises' intranets that are characterized by fewer servers
and smaller outgoing bandwidth. In this mode, an ADS device is transparently deployed at the
network entry to detect, analyze, and block DDoS attacks.
Figure 3-2 shows the deployment
topology.
Figure 3-2 In-path deployment of an ADS device
3.5.2 Out-of-Path Deployment
To protect crucial businesses of Internet data centers (IDCs), Internet content providers
(ICPs), or telecom carriers, ADS devices can be deployed in out-of-path mode, which
employs the traffic diversion mechanism. In this mode, an ADS device is usually deployed at
the network entry to interact with other routers, performing traffic diversion and injection on
one line to protect servers on the network.
Figure 3-3 shows the deployment topology.