GeoServer da PostGIS: hanyar VPN da ta fi muhimmanci ita ce ta uwar garke

Kuna buɗe Layer a QGIS kuma yana nunawa. Abokin aiki a kan VPN ɗaya yana samun kuskure ga wannan Layer ɗin. Wani ya kammala cewa VPN ɗin ya lalace, kuma sa'a ta gaba tana wucewa wajen matsar da bayanai ko buɗe tashar da ba ta taɓa buƙatar ɗaya daga cikinsu ba. Buƙatar daga tebur ɗin da tambayar da GeoServer ke yi wa PostGIS suna tashi daga na'urori daban-daban, a cikin wuraren sunan cibiyar sadarwa daban-daban, da takardun shiga daban-daban. Raba waɗannan hanyoyi biyu shi ne yawancin binciken.

Haɗi biyu, mafari biyu

QGIS  ->  client's permitted path (often the VPN)  ->  GeoServer listener
GeoServer -> server's permitted path  ->  PostGIS listener

Kibiya ta biyu ba ta gaji ramin kwamfutar farko ba. GeoServer a cikin kwandon yana da tarin cibiyar sadarwar kwandon, ba na mai masauki ba, kuma kwando a kan hanyar sadarwar gada na iya isa ga bayanan da mai masaukin ba ya isa, ko akasin haka. Don haka mai amfani ɗaya na iya yin nasara da gazawa a cikin zama ɗaya, gwargwadon ko amsar ta fito daga ajiya ko daga sabuwar tambaya.

Nemo matakin da ya gaza da gaske

Ƙin a matakin sabis, buƙatar hoto da ba ta isa ga ajiyar bayananta, da matsalar izini a cikin Layer ɗaya suna kama da juna a shafin burauza kuma sun bambanta sosai a cikin littafin uwar garke. Nemi takamaiman aiki, sannan ka karanta abin da ya faru na GeoServer ɗin kansa na wannan hatimin lokaci.

curl -s -o /dev/null -w '%{http_code}\n' \
  "https://gis.example.com/geoserver/wms?service=WMS&version=1.3.0&request=GetCapabilities"

curl -s -o /tmp/tile.png -w '%{http_code} %{size_download}\n' \
  "https://gis.example.com/geoserver/wms?service=WMS&version=1.3.0&request=GetMap&layers=corp:parcels&bbox=-13650000,4500000,-13600000,4550000&width=256&height=256&srs=EPSG:3857&format=image/png"

200 daga buƙata ta biyu da hoto mai ma'ana yana tabbatar da ajiyar bayanai ta amsa. 200 da takardar keɓewa ta sabis tana tabbatar da ba ta amsa ba, kuma rubutun keɓewar yawanci yana ambaton ajiyar maimakon abokin ciniki.

Karanta ajiyar bayanai daga gefen uwar garke

Littafin PostGIS na GeoServer yana lissafa abin da ajiyar ke buƙata: mai masauki, tasha, bayanai da takardun shiga. Duk waɗannan suna bayyana haɗin da GeoServer ke buɗewa. Babu ɗaya daga cikinsu da ke bayyana shiga daga abokin ciniki na tebur. Karanta waɗannan filaye huɗu a matsayin sanarwa game da mahallin cibiyar sadarwar uwar garke, kuma dukan rukunin tikitin «a wajensu yana aiki» ya zama abin iya magancewa.

Shi ya sa localhost a cikin ajiyar bayanai ya zama kuskure da ya zama ruwan dare. Yana nufin mahallin cibiyar sadarwar aikin GeoServer ɗin kansa. Idan GeoServer yana gudana a Docker yayin da PostGIS ke gudana a kan mai masauki, localhost yana nuni zuwa cikin kwandon kuma ba ya samun kome, kuma babu wani tsarin VPN da zai canza hakan.

A kan uwar garke, duba hanya, mai sauraro da manufar tabbatarwa a wannan tsari. Tabbatarwar PostgreSQL da ta dogara da mai masauki tana kwatanta adireshin tushen da take gani, wanda ƙofa na iya fassarawa, don haka ƙara tafkin VPN na abokin ciniki a cikin fayil ɗin HBA ba ya gyara haɗin gefen uwar garke. Gwada kamar yadda uwar garke za ta yi: mai masauki ɗaya, tasha ɗaya, mai amfani ɗaya. Idan wannan gwajin ya yi nasara yayin da GeoServer har yanzu yana gaza, bambancin yana cikin mahallin aiki ba a cikin bayanai ba.

ip route get 10.20.5.11
ss -tnp | grep 5432
psql "host=10.20.5.11 dbname=gis user=geoserver" -c 'select 1'

Tafkuna da ajiya suna riƙe yanayi a cikin canje-canje

Tafkunan haɗi na ajiyar bayanai suna riƙe soket a buɗe. Ramin da ya taso sa'a ɗaya bayan an ƙirƙiri tafkin ba lalle yana ba tafkin sabuwar hanya ba, kuma haɗin da ba ya aiki na iya zama a kan matacciyar hanya har sai tabbatarwa ko ƙayyadadden lokaci ya rufe shi. Duba saitunan tabbatarwa na ajiyar da aka shigar maimakon ɗauka cewa zai warke, kuma ka guje wa sha'awar sake kunna dukan sabis kafin ka san wane Layer ya gaza.

Ajiyar fale-falen tana ƙirƙirar kwatancin wannan matsalar: suna iya ba da taswira mai kama da daidai da daɗewa bayan haɗin bayanai ya tsage. Share ajiyar don «ganin ko yana taimakawa» yana lalata shaidar ɗaya da za ta gaya maka wace hanya ce take rai.

Miƙa tare da ambaton mafari biyu

Bayanin da ke samun gyara cikin sauri yana ambaton abubuwa biyu: buƙatar abokin ciniki da ta isa GeoServer, da aikin baya da GeoServer ya kasa kammalawa. Da duka biyun, mai shi da ya dace zai iya gyara hanyar da ta gaza. Da na farko kawai, gyaran da ya dace shi ne fallasa bayanan a fili, wanda ke magance tikit ɗin ta hanyar ƙirƙirar matsala mafi muni.

Rubuta Layer, lambar amsa, keɓewar gefen uwar garke da kwando ko mai masaukin da ya samar da ita. Waɗannan layuka huɗu ne, kuma suna kawar da shakku gaba ɗaya.