Ƙarshen wuri mai zaman kansa, sunan sabar ɗaya: igiyoyin haɗin Azure SQL

Private Link yana canza inda haɗi ya isa, ba yadda ake kiran haɗin ba. Ga Azure SQL Database wannan bambanci shi ne dukan ƙira: sabar ma'ana tana riƙe sunanta, kuma ƙarshen wuri na sirri yana bayar da shigarwar cibiyar sadarwa da sunan ke warwarewa zuwa gare ta. Maye gurbin sunan da adireshin IP shi ne canji ɗaya da ke karya TLS, bayanan shiga da kayan aiki a lokaci ɗaya. Igiyoyin haɗi biyu na iya kamanceceniya da yin daban sosai.

Riƙe orders-db.database.windows.net kuma ba abokin ciniki amsa ta sirri dominsa.

Suna da adireshi suna da ayyuka daban-daban

Sunan yana gane sabis ɗin SQL, kuma abin da takardar shaida da shiga suke tsammani ke nan. Adireshin sirri yana bayar da shigarwar cibiyar sadarwa a cikin cibiyar sadarwar kama-da-wane da aka haɗa. Rinjayar ɗaya da ɗayan yana haifar da haɗin da ya isa wani abu kuma ba ya tabbatar da kome.

Jagorar Microsoft ga Azure SQL tana buƙatar sunan sabar na al'ada daga abokan ciniki. IP kai tsaye, haka ma sunan da ke da prefix privatelink, ba makasudin shiga mai musanya ba ne. Kayan aikin da suka karɓi IP za su karɓe shi sannan su kasa a TLS ko a tabbatarwa, wanda ke ɓoye ainihin kuskuren. Waɗannan gazawar ana karanta su kamar matsalolin bayanan shiga har sai ka kalli sunan mai masauki a cikin kuskuren.

Abin da yankin sirri ke canzawa da gaske

Yankin DNS na sirri yana rubuta adireshi ɗaya ga sabar a cikin sararin suna privatelink, kuma an haɗa yankin da cibiyar sadarwar kama-da-wane da ya kamata ta yi amfani da shi. Warwarewa tana motsawa; igiyar haɗin ba ta motsa. Siffar da ke ƙasa misali ne, ba rikodin da za a liƙa a yankin jama'a ba.

Application name:        orders-db.database.windows.net
Private DNS zone:        privatelink.database.windows.net
Resolved private entry:  the approved private endpoint address

Kula da wannan rikodin da haɗin yankinsa a matsayin kayan more rayuwa, tare da mai shi da ranar bita.

Yankuna biyu da asali ɗaya da amsoshi daban-daban shine yanayin ƙarshe na al'ada, ba rikici ba. Abokan cinikin jama'a suna riƙe amsar jama'a, kuma abokan cinikin sirri suna samun adireshin ƙarshen wuri. Yanayin gazawar da ya kamata a lura da shi shine yaɗuwar ɓangare na hangen sirri, inda wata cibiyar sadarwa ta warware a asirce wata kuma a shiru ba ta yi ba.

Abokan ciniki a wajen Azure suna buƙatar hanyar shiga wannan yankin

Abokin cinikin VPN yana zaune a wajen mai warware na Azure, don haka yankin sirri dole ne ya zama mai isa daga hanyar haɗin gauraye. Mai tura DNS na Azure ko Azure DNS Private Resolver na iya ba da tambayoyin da suka zo ta wannan cibiyar sadarwa. Jagorar Microsoft ita ce a tura yankin sabis na jama'a da ya dace ta wannan tsari maimakon ɗauka cewa abokan ciniki suna tambayar sunan privatelink kai tsaye. Abokan cinikin da ba za su iya warware amsar sirri ba suna komawa ga ta jama'a ba tare da gunaguni ba.

Riƙe iyakar turawa da gangan, domin maye gurbin yankin jama'a da ake amfani da shi yana karya sunayen da maye gurbin bai ƙunsa ba.

Samar da tsari wanda ke riƙe ainihi a tsaye

Matakan suna da masu shi daban: ƙirƙiri kuma amince da ƙarshen wuri, samar da hanyar VPN, haɗa DNS na sirri, sannan saita abokin ciniki da sunan sabarsa na al'ada. Yin DNS kafin hanya yana haifar da lokutan ƙarewa waɗanda suke kama da gazawar DNS. Yin abokin ciniki a ƙarshe yana riƙe mai canzawa ɗaya yana motsi a lokaci ɗaya. Kowane mataki yana da sakamakon da ake iya gani, don haka babu ɗaya da za a gwada shi da tsammani.

Alamar VPN da aka haɗa ba ta zaɓar makoma ta sirri da kanta ba.

Abin da ƙarshen wuri na sirri ba ya kashewa

Ƙirƙirar ƙarshen wuri na sirri ba ya kashe damar jama'a ga sabar ma'ana kai tsaye. Wannan shawara ce ta turawa daban, kuma tana zuwa bayan an tabbatar da abokan cinikin sirrin da aka nufa suna aiki. Riƙe hanyar dawowa kuma yi lissafin aikace-aikacen da har yanzu suke amfani da shigarwar jama'a. Kashe damar jama'a da farko ita ce hanyar da sabis mai aiki ke zama katsewa tare da tsaftataccen sawun dubawa.

Duba kuma wace manufar haɗi sabar take amfani da ita.

Redirect yana tura abokin ciniki zuwa tashar jiragen ruwa a kan kumburi bayan haɗin ƙofa na farko, wanda ke canza abin da cibiyar sadarwar abokin ciniki dole ta yarda. Proxy yana riƙe da zirga-zirga a kan ƙofa. Nasarar musafaha TCP a tashar jiragen ruwa ɗaya ba ita ce dukan aikin shiga ba.

Wannan Azure SQL Database ne, ba SQL Managed Instance ba, wanda ke da nasa tsarin haɗi kuma ba shi da labarin ƙarshen wuri na sirri daidai. A kowane hali, riƙe abubuwa uku da aka yi wa lakabi daban: suna, shigarwar cibiyar sadarwa da bayanan shiga. Canza inda haɗi ke tafiya bai kamata ya canza wace sabis ɗin abokin ciniki yake tsammanin yana magana da ita ba.