VPN na masu haya da yawa: ƙofa ɗaya, ta kowane mai haya ko ta kowace na'ura
Ramin ba keɓewar masu haya ba ne. Kwatanta ƙofa ɗaya, ƙofofi ga kowane mai haya da haɗin kai ga kowace na'ura ta fuskar taswirar asali, tuƙi da cirewa.
Yanke shawara kan wanda zai karɓi abokin ciniki da abin da ke hana wannan abokin ciniki isa albarkatun wani mai haya. Waɗannan shawarwari biyu ne, kuma zaɓin IPsec, WireGuard ko kayan mesh ba ya amsa ɗayansu. Ramin da ke tashi daidai yana iya barin kowane mai haya ya isa kowa, kuma bita da ke ɗaukar su biyu a matsayin abu ɗaya tana amincewa da ƙirar da ba daidai ba. Rubuta taswirar abokin ciniki zuwa albarkatu da farko: masu gudanarwa, damar tallafi, ayyukan da aka raba da hanyoyin da dole su kasance a hana.
Fara da taswirar, ba da kayan ba
Wannan taswirar ita ce kayan farko, kuma kowane zaɓi da ke ƙasa shawara ce kawai kan inda iyakar da ke aiwatar da ita take. Riƙe ta a iya bita: layi ɗaya ga kowane abokin ciniki, layi ɗaya ga kowace aikin da aka raba da hanyoyin da aka hana a rubuce.
Taswirar da babu wanda zai iya karantawa ita ce taswirar da babu wanda zai aiwatar.
Wurin shiga ɗaya da matsalar taswirarsa
Kowane wuri ana yanke hukunci da tambaya ɗaya ta aiki, kuma jadawalin shi ne dukan kwatancen.
| Placement | The question it lives or dies on |
|---|---|
| One shared gateway | How does an admitted identity end up limited to its own resources and its own routing context? |
| A gateway per tenant | Who owns each gateway, its credentials, its policy, its updates and its eventual retirement? |
| A connection per hosted machine | How do enrollment, per-machine policy and replacement work at fleet scale? |
Ƙofar da aka raba tana tattara shiga kuma tana tattara haɗarin a wuri ɗaya: dangantakar tsakanin asalin mai haya da manufofinsa. Ƙungiyoyi ko adiresoshin rami dole su biya izinin albarkatun da suka dace, kuma alama daban ga kowane abokin ciniki ba ta hana komai da kanta. Mahalli daban na tuƙi na iya riƙe prefiso masu haɗuwa idan dandalin ya goyi bayan hakan kuma ƙirar ta cika. Jadawalin tuƙi na gama gari ba zai iya bambanta prefiso biyu iri ɗaya ba kawai domin mutanen da ke bayansu suna da asusu daban.
Wannan shi ne gwajin yawancin ƙira. Masu haya biyu da ke lissafin ciki da 10.0.0.0/8 suna buƙatar yanayin tuƙi dabam, ba ka'idar suna ba.
Ƙofa ga kowane mai haya tana sayen iyakoki da tsarin
Ƙofa ɗaya ga kowane abokin ciniki tana sauƙaƙa bayanin wasu iyakokin gudanarwa, domin shiga da manufofin wannan abokin ciniki suna tare. Haka kuma tana ninka tsarin da ke buƙatar takardun shaida, faci, sa ido da mai shi. Kuma ba ta tilasta wani tsarin adiresoshin jama'a guda ɗaya: raba wuraren ƙarshe, fassara da rarraba ka'idoji sun dogara da abin da aiwatarwar ke goyi bayan gaske.
Ƙidaya tsarin da mutane kafin ka ƙidaya ribar tsaro. Ƙirar da ke da ƙofofi huɗu fiye da abin da ƙungiyar za ta iya faci ba ta fi keɓewa a aikace.
Idan adadin masu haya yana motsi kowane wata, wannan tsarin yana buƙatar labarin sarrafa kansa maimakon samfuri.
Haɗin kai ga kowace na'ura yana motsa aikin
Haɗi a kowace na'urar da aka karɓi ba ya kawar da aikin aiki, yana mayar da shi cikin rayuwar na'urar. Rajista, manufa ta kowace na'ura, juya maɓalli da maye gurbi duk sun zama ɓangare na tanadi, kuma suna kasawa cikin tagar da na'urar kanta ke kasawa. Ga 'yan ma'aurata kaɗan na dogon rai a cibiyoyin sadarwa daban hakan yakan zama daidai, kuma ga jirgin da ya riga ya ɓata waƙa kan wane hoto ke gudana a ina ba safai ba.
Bayar da rawar fitar da asali, sabuntawa, cire dama, sa ido da dawo da ita a ƙarƙashin kowane zaɓi. Sannan ka tambaya abin da zai faru ranar da wani abokin ciniki zai tafi.
Cirewa yana cikin kwatancen
Yawancin kwatancen suna tsallake cirewa. Cire mai haya ya kamata ya ɓata takardun shaidarsa, ya sauke manufofinsa, ya saki adiresoshinsa da yanayin tuƙi, ya bar kowa da kowa ba tare da an taɓa shi ba. Jagorar NIST ta gine-ginen amincewa sifili ita ce madaidaiciyar magana a nan, domin tana sanya tabbatarwa da izini a kan albarkatu maimakon dogaro da matsayin cibiyar sadarwa, kuma hakan ya shafi cikin ɓangaren abokin ciniki kansa ma.
Auna kwararar da aka yarda da waɗanda aka hana, yadda ake mu'amala da adiresoshi masu haɗuwa da tsarin cirewa kafin ka auna ma'aunin ka'idoji. Sannan zaɓi hanyar jigilar kaya da hanyar tabbatarwa da ta dace da iyakar da ka zaɓa. Tsohon sunan kaya, ko da'awar cewa kowane kasuwanci dole ya daidaita kan ka'ida ɗaya, ba ya warware kome daga ciki. Taswirar da ka fara rubutawa ce ke warwarewa.