EC2 Windows: abokin ciniki na VPN, sabar VPN, ko ƙofar AWS?
Kwakwalwar EC2 ta Windows na iya gudanar da manhajar VPN, amma abokin ciniki, sabar da ake sarrafawa da kai, da ƙofar AWS suna da matsayi daban-daban da masu su daban.
Ƙungiya na buƙatar haɗin VPN don manhaja da ke gudana a kan kwakwalwar EC2 ta Windows, ta sami manhajar abokin ciniki mai dacewa, ta shigar da ita, sannan ta tambaya me ya sa sauran VPC ba za su iya amfani da ita ba. Shigarwar ta yi aiki; ba a taɓa yanke shawarar matsayin ba. Manhajar da ke gudana a cikin baƙo na iya zama abokin ciniki da ke shiga cibiyar wani, sabar da ke karɓar wasu abokan ciniki, ko kuma ɗaya daga cikin kayan VPN da AWS ke sarrafawa, kuma kowane matsayi yana barin aiki daban a gare ku.
Alamar yawanci matsayi mara kyau ne
Alamar da aka saba ita ce rami mai aiki wanda ke warware matsalar da ba daidai ba. Abokin ciniki a cikin VM yana ba wa wannan VM hanyar fita; ba ya ba wa kwamfutarka, ofishinka ko wani yanki na cibiyar hanyar shiga. Sabar a cikin VM tana ba wa wasu hanyar shiga, amma yanzu kai ne mai sauraro, tabbatarwa da turawa.
Ayyukan da ake sarrafawa suna motsa gudanar da sabis zuwa AWS kuma suna barin ƙira gare ku. Site-to-Site VPN yana haɗa cibiyoyi ta hanyar ƙofar abokin ciniki da ƙofar AWS, kuma Client VPN yana ba wa na'urori masu nisa wurin ƙarshe da ake sarrafawa. A kowane hali hanyoyi, ka'idojin izini da tushen ainihi su ne tsarin ku, kuma babu ɗaya daga cikin kayayyakin da ke shigar da abokin ciniki na gama-gari a cikin baƙon Windows.
Siffofi huɗu suna yiwuwa, kuma teburin yana raba su bisa abin da ke haɗawa da abin da kuma wanda ke ɗaukar nauyin aiki.
| Role | What connects | Who owns the VPN software |
|---|---|---|
| Client in the Windows VM | This VM dials out into someone else's network | You, plus the software vendor |
| Server in the Windows VM | Inbound clients and sites attach to this VM | You, end to end |
| AWS Site-to-Site VPN | Two networks meet through a customer gateway and an AWS gateway | AWS operates the tunnels; you own the peer and route design |
| AWS Client VPN | User devices attach to an endpoint AWS operates | AWS operates it; you own the access rules |
Karanta layin maimakon sunan samfur: kwakwalwar Windows ɗaya na iya zama a cikin layi biyu daban-daban dangane da manhajar da ke gudana a cikinta.
Abokin ciniki a cikin VM: VM ɗin yana shiga cibiya
Abokin ciniki mai fita yana buƙatar a duba sigar Windows, gine-gine da buƙatun direba kafin a shigar da wani abu. Abokin ciniki zai canza hanyoyi da DNS a kan kwakwalwar, wanda zai iya shafar ayyukan da ke gudana a can, ciki har da hanyar da kuke amfani da ita don gudanarwa daga nesa. Rubuta sunan adafta da ma'aunin fuska da abokin ciniki ya saita, domin sabuwar fuska na iya samun fifiko kan wadda take. Idan ana sarrafa kwakwalwar ta hanyar manajan zama maimakon SSH ko RDP, tabbatar cewa wannan hanyar tana aiki bayan abokin ciniki ya haɗa.
Yanke shawarar wane zirga-zirge abokin ciniki zai ɗauka kafin ka kunna shi. Cikakken rami na iya kama zaman gudanarwa ya kulle ka waje, kuma rabin rami na iya barin kwakwalwar ta isa cibiyar sirri yayin da sauran zirga-zirgarta ke ɗaukar wata hanyar fita. Gwada tare da samun hanyar gudanarwa ta biyu, kuma rubuta hanyoyin da abokin ciniki ya shigar domin wani canji na gaba ya zama abin bayani.
Sabar a cikin VM: wasu abokan ciniki suna shiga cikinta
Don sabar da ake sarrafawa da kai, kai ne mai sauraro, takardar shaida ko kayan maɓalli, bayanan masu amfani da ka'idojin turawa. Idan sabar tana tura zirga-zirge don wasu abokan ciniki, kwakwalwar ta zama na'urar turawa, kuma hakan yana buƙatar turawa a matakin baƙo tare da canje-canjen hanyoyi da ƙungiyoyin tsaro a matakin AWS.
Gwada mai sauraro daga baƙo sannan daga wani yanki na cibiyar, sannan gwada mai masauki wanda kwakwalwar ke turawa zuwa gare shi. Lafiyayyen sabis na gida ba ya tabbatar da komai game da hanyar da aka tura, don haka rubuta sakamakon biyu a cikin bayanin canji.
Ƙofofin da ake sarrafawa suna riƙe sabis ɗin, ba ƙirar shigarku ba
AWS Site-to-Site VPN yana rubuta matsayin ramin ƙofar abokin ciniki da ƙofar AWS, kuma sayan wannan haɗin ba ya maye gurbin kowace ƙirar shiga daga nesa. Client VPN yana rubuta wurin ƙarshe da ake sarrafawa tare da siffofin abokin ciniki, yayin da ka'idojin izini da hanyoyin manufa suka kasance naku. AWS yana riƙe wurin ƙarshe da takardun shaidarsa suna aiki; wanda zai iya isa wace manhaja har yanzu ka'ida ce ta izini da kuke rubutawa da kula da ita.
Zaɓi tsakanin kayayyakin a kan gatura biyar: wane matsayi kowanne yake takawa, waɗanne ka'idoji yake karɓa, wane tushen ainihi yake tsammani, yadda ake tura zirga-zirge da yadda ake bayar da samuwa. Yi watsi da kowace lambar saurin da aka ambata a cikin zaren dandalin tattaunawa, domin ƙarfin da aka buga yana motsawa tare da sabis ɗin. Kuma kada ka ɗauka cewa ma'auratan rami da ake sarrafawa suna canza halin kowane abokin ciniki na baƙo.
Zaɓi matsayin kafin samfurin
Rubuta jumla ɗaya da ke ambaton alkibla: wannan VM tana shiga cibiya, wannan VM tana karɓar abokan ciniki, ko ƙofar AWS tana haɗa cibiyoyin da aka ayyana.
Wannan jumlar ita ce ke yanke shawarar gajeren jerin kayayyaki, mai manhajar, da hanyoyin gazawa da za ku gyara. Idan buƙatar ita ce masu amfani daga nesa su isa manhaja, abokin ciniki da aka shigar a cikin VM na manhajar shine siffa mara kyau. Idan buƙatar ita ce VM ɗaya ta isa cibiyar abokin tarayya, ƙofar site-da-site da ake sarrafawa ta fi inji fiye da yadda aikin ke buƙata. Duk amsoshin biyu suna da izini; ɗaya kawai ya dace da jumlar da ka rubuta.