Asusu biyu na AWS, cibiyar sadarwa ɗaya ta gida: wace hanya?
Transit Gateway ɗin da aka raba, VPN biyu masu zaman kansu ko wata ƙunƙuntar proxy: zaɓi bisa mallaka da girman tasiri, ba bisa wace hanya ce mafi sauƙin ƙarawa a yau ba.
Tsarin da ya bayyana a fili shine peering da VPN, kuma wannan shine tsarin da ba daidai ba. VPC da aka haɗa da peering ba zai iya aron haɗin VPN na maƙwabcinsa don tafiyar da hanya daga gefe zuwa gefe ba, don haka wannan zaɓi bai taɓa kasancewa a kan tebur ba, ko menene teburin hanya ya ba da shawara. Abin da kuke zaɓa a zahiri shine tsakanin cibiyar sadarwa da aka raba, hanyoyin VPN biyu masu zaman kansu da wata ƙunƙuntar hanyar shiga aikace-aikace. Kowanne yana amsa wata tambaya daban game da wanene ya mallaki tafiyar da hanya.
Zaɓuɓɓuka uku da wanda ba zaɓi ba
Fara da share tunanin peering, sannan kwatanta abin da ya rage bisa mallaka maimakon sauƙin zane. Jadawalin da ke ƙasa shine shawarar a taƙaice.
| Option | Who owns the path | Main cost |
|---|---|---|
| Shared transit gateway | Hub owner, used by both VPC owners | Shared blast radius, attachment and data-processing charges |
| Separate VPNs per account | Each account independently | Peer capacity, duplicated tunnels, overlapping prefixes to coordinate |
| Application proxy | The account that hosts the intermediary | New auth, logging and availability surface, and only one service |
Idan asusu A yana buƙatar isa ga dukan cibiyar sadarwar gida, layin proxy yana da siffar da ba daidai ba. Idan asusu A yana buƙatar API ɗaya, layuka biyu na farko sun fi yawan cibiyar sadarwa fiye da abin da buƙatar ta nema.
Lokacin da Transit Gateway ɗin da aka raba ya yi nasara
Transit Gateway yana haɗa kowane VPC da VPN a matsayin cibiyoyin sadarwa daban, kuma raba tsakanin asusu yana ba masu VPC damar amfani da cibiyar ba tare da haɗa asusu ba. Wannan shine jan hankali: wuri ɗaya inda prefixes na gida suka haɗu da cibiyoyin sadarwar AWS, da wuri ɗaya don yin tunani kan wanne haɗi yake koyon wace hanya.
Haɗa komai ba yana nufin yarda da komai ba. Haɗin kai da yadawa suna yanke shawara wanne haɗi yake amfani da wane teburin hanya, don haka prefixes biyu na VPC kowanne zai iya isa wata hidima ta gida yayin da hanyar juna ta kasance an cire ta ta hanyar ƙirar cibiyar. Gefen gida har yanzu yana buƙatar hanyoyin dawowa don prefixes na AWS, kuma wannan tikitin canji ne na wata ƙungiya.
Kuɗin na ƙungiya ne kamar yadda yake na kuɗi. Mai cibiyar yana sarrafa dangantakar tafiyar da hanya da wasu ƙungiyoyi suka dogara da ita, don haka canji a haɗi ɗaya zai iya motsa zirga-zirgar hidima da mai cibiyar bai taɓa jin labarinta ba. Sa'o'in haɗi da sarrafa bayanai suna taruwa da kowace cibiyar sadarwa da kuka haɗa, shi ya sa cibiyoyi sukan girma fiye da ƙungiyar da ke tafiyar da su.
Lokacin da VPN daban ko ƙunƙuntar proxy ya yi nasara
VPN biyu masu zaman kansu sun dace da ƙaramin turawa mai ainihin iyakokin aiki: kowane asusu yana canza ramukansa, kuma babu ɗaya da zai iya lalata ɗayan ta hanyar gyara teburin hanya. Iyakokin suna gefen gida. Ƙofar takwararta tana buƙatar ƙarfin ramuka na ƙari, shirye-shiryen adireshi ba dole ba su haɗu, kuma saitin biyu da ke tallata prefixes iri ɗaya suna buƙatar fifiko da gangan maimakon bege.
Proxy shine mafi ƙunƙuntar fuska. Idan asusu A yana buƙatar bayanan bayanai ɗaya ko API ɗaya a cikin asusu B, matsakaici mai iyaka yana ba ku ƙofar da aka ayyana tare da labarin tabbatarwa, rubutun ajiya da samuwarta. Hakanan shine zaɓin da aka fi yin amfani da shi ba daidai ba: matsakaici da ke tura zuwa kowace manufa ta sirri ya zama relay marar iyaka tare da ƙarin matakai, kuma ba zai yi kama da wucewa ta zahiri daga VPC zuwa cibiyar sadarwar gida ba don wani abu dabam.
Ya dace a karanta iyakokin peering na VPC kafin duk wannan, domin suna bayyana dalilin da ya sa tunani na huɗu yake komawa akai-akai da kuma dalilin da ya sa ba zai iya aiki ba.
Zaɓi mafi ƙunƙuntar fuskar da ta biya buƙatar
Tsara tambayoyin: shin A yana buƙatar cibiyar sadarwa ɗaya, tarin cibiyoyin sadarwa ko hidima ɗaya? Shin ƙungiyar gida tana son hanya ɗaya ko da yawa? Wanene aka yarda ya canza tafiyar da hanya don zirga-zirgar wata ƙungiyar? Amsar farko da ta samar da mafi ƙunƙuntar fuska ita ce gine-gine, kuma duk abin da ya biyo baya aiwatarwa ne.
Rubuta amsar tare da shirin prefixes, mallakar hanyoyi, lissafin ramuka ko haɗe-haɗe da yanayin gazawa da kowane gefe yake tsammani. Lokacin da wani ya tambaya daga baya dalilin da ya sa asusu A ba zai iya amfani da VPN na asusu B kawai ba, wannan rikodin shine amsar, kuma yana ceton ku daga sake tattauna zaɓuɓɓukan uku ɗin a aikin na gaba.