Yawancin ayyukan Google Cloud, VPN haɗe-haɗe ɗaya? Fara yanke shawara
VPC da aka raba, peering da cibiyar haɗin kai suna amsa tambayoyin mallaka daban-daban. Zaɓi iyakar cibiyar sadarwa kafin ka tura VPN ɗaya ga kowane aiki.
Lokacin da ayyukan Google Cloud da yawa ke buƙatar damar haɗe-haɗe, ilham ita ce VPN ɗaya ga kowane aiki, kuma kusan koyaushe wannan shine siffar da ba daidai ba. Mallakar aiki da tuƙin fakiti suna da alaƙa amma tambayoyi ne daban-daban, kuma ingantaccen tsarin gine-gine yana kiyaye iyakokin gudanarwa da kuke buƙata yayin ba da gabobin da aka yi niyya hanyar da aka zaɓa zuwa ofishi ko cibiyar bayanai. Waɗannan binciken suna yanke shawara wace ƙirar cibiyar sadarwa kuke so da gaske, a cikin tsari da ke guje wa sake yin aiki. Kowanne daga cikinsu na iya kawo ƙarshen tattaunawar da wuri, kuma wannan shine ma'anar.
Iyakar aiki ba ta buƙatar nata ramin kai tsaye ba.
Duba ko abin da aka raba shine cibiyar sadarwa
Fara da tambaya game da mallaka, ba game da haɗin kai ba: shin mallakar cibiyar sadarwa ta tsakiya za ta iya tallafawa waɗannan lodin aiki? Idan amsar ita ce eh kuma ƙungiyar tana da ingantaccen tsari, aikin mai masauki yana da VPC, ƙananan cibiyoyin sadarwa da haɗin kai, yayin da ayyukan sabis ke da albarkatun aikace-aikacen su. Haɗin Cloud VPN ɗaya a cikin wannan rabaffen cibiyar sadarwa zai iya hidimar gabobin lodin aikin da aka yi niyya, dangane da manufofin tuƙi da tsaro .
Kasance daidai game da abin da haɗin ke yi. Haɗa aikin sabis baya haɗa VPC mai zaman kansa da ke akwai cikin cibiyar sadarwar mai masauki, kuma baya motsa kowane albarkatu kai tsaye. Haɗin lodin aiki, izini, sararin adireshi da DNS duk wani ɓangare ne na gine-gine, ba sakamakon saitin ba. Karanta haɗin a matsayin canjin izini da farko sannan canjin tuƙi, domin ƙungiyoyi yawanci suna gano bambancin yayin sauyawa.
Idan mallakar tsakiya ba ta karɓu ga ƙungiyoyin da abin ya shafa, tsaya a nan kuma ɗauki sauran a matsayin ƙirar peering ko cibiya. Tilasta Shared VPC akan rukunin da ke buƙatar rayuwar cibiyar sadarwa mai zaman kanta yana haifar da matsalar siyasa da suna na fasaha.
Duba ko VPC masu zaman kansu za su iya kasancewa masu zaman kansu
Peering yana kiyaye VPC daban-daban, kuma shine dalilin da yasa yake jawo ƙungiyoyin da ke son tsare-tsaren adireshi nasu da kula da canjin nasu. Karyar ita ce peering ba mai wucewa ba ne: peering daga A zuwa B da B zuwa C ba ya ƙirƙirar tuƙi daga A zuwa C ta B da kansa. Idan ayyuka uku suna buƙatar isa wuri ɗaya na haɗe-haɗe, kana buƙatar tsarin musayar da aka yi niyya maimakon sarkar peering.
Raba isar da haɗe-haɗe kuma ya dogara da rubutaccen musayar hanyoyin da aka keɓance da sanarwar Cloud Router da aka yi niyya. Matsayin peering na aiki yana tabbatar da cewa peering ya wanzu, ba cewa gabobin da kowane gefe ke damu da su an taɓa fitar da su ba. Duba jeri da aka fitar a ɓangarorin biyu na peer, a cikin tsarin da ke yin fitarwa, kuma kwatanta su da adireshin da lodin aikinku ke amfani da su a zahiri. Rashin daidaituwa a can shine dalilin da ya fi yawa da yasa peering yake kama da lafiya yayin da gabo ya kasance ba a iya isa ba.
Rubuta tsarin adireshi kafin komai. Jeri marasa juna, hanyoyin zuwa kowace manufa da aka yi niyya da sanarwar dawowa sune kayan aiki uku da wannan ƙirar ke rayuwa ko mutuwa akansu.
Duba ko ƙirar cibiya ta dace da yanayin sadarwa
Don ƙira mafi girma ko kuma daban-daban, bayanin Google Network Connectivity Center yana bayyana ƙirar cibiya da reshe. Karanta shi don abin da fitowar yanzu ke tallafawa ba don abin da zane ke nunawa ba: waɗanne haɗuwar VPC da haɗe-haɗe, waɗanne iyalan hanyoyi da waɗanne manufofi kowane nau'in reshe ke yarda da su.
Duba iyalin adireshi a bayyane. Misalan tsari a yawancin jagorori, gami da wannan, sun shafi IPv4, kuma fasalin da ke wanzu ga nau'in reshe ɗaya baya aiki kai tsaye ba tare da canji ba ga wani. Idan yankinku yana da tari biyu, wannan tambayar tana cikin zaɓin ƙira, ba cikin ƙaura na gaba ba.
Teburin da ke ƙasa shine taƙaitaccen ƙirar uku da tambayar da ke yanke shawarar kowace.
| Model | Network relationship | Planning question |
|---|---|---|
| Shared VPC | Service projects use subnets of a host project's VPC | Can central network ownership support these workloads? |
| VPC Network Peering | Independent VPCs exchange supported routes through explicit peers | Are direct peer and hybrid route exchanges sufficient? |
| Network Connectivity Center | Supported VPC and hybrid spokes join a managed hub | Does the required topology fit current routing and policy? |
Duba abin da tuƙi ba ya bayarwa
Musayar hanya ba ita ce cikakkiyar bayar da amana ba. Warwarewar DNS, izinin wutar bango da izinin aikace-aikace sun kasance nasu nauyin, kuma kowanne mai shi daban ne ke daidaita shi a yawancin ƙungiyoyi. Ƙirar da ke ɗauka cewa isa yana nufin izini zai wuce gwajin haɗin kai kuma ya faɗi bitar tsaro.
Tabbatar da labarin DNS ga kowace ƙira kuma, domin tsarin yanki da tura gaba sun bambanta tsakanin cibiyar sadarwar da aka raba da cibiyoyin sadarwar peer. Sunaye na sirri da ke warwarewa a aikin ɗaya ba sa bin hanya zuwa wani.
Yi rikodin shawarar da mai ita
Mayar da hankali inda ƙungiyar ke son mai mallakar cibiyar sadarwa da aka raba; riƙe VPC daban inda rayuwa ko manufa ke buƙata. Sannan zaɓi ingantaccen dangantakar haɗin kai kuma rubuta wanda ka zaɓa, wanene ya mallaki rabaffen cibiyar sadarwa, da abin da kowane aiki ke da izinin sanarwa.
Ƙidaya ayyuka da sayen VPN ɗaya ga kowanne ba shine madadin wannan shawarar mallaka ba. Ita ce shawarar ɗaya, da aka yanke daga baya, ta wanda ya gaji lissafin da teburin tuƙi.