Qeex hawsha VPN ka hor intaadan isbarbardhigin API-yada
Xakamaynta xidhiidhka, diyaarinta profile-ka, maamulka isticmaalayaasha iyo indho-indhayntu waa API-yo kala duwan. Marka hore magacow shayga, ficilka iyo shardiga guusha.
Bogga badeecaduhu wuxuu sheegaya in uu leeyahay API, shirka is-dhexgalkuna wuxuu ku hakadaa su'aasha labaad. Hawshee, shay gee, yaa wacaya, oo maxaa loo arkaa guul? Ka jawaabista afartaas ka hor isbarbardhigga badeecadaha waxay badanaa tirtirtaa kala badh musharixiinta. Waxay kaloo isbarbardhigga hadhay u beddelaa wax tijaabo xallin karto.
Ku beddel «waxay leedahay API» hal hawl
API waa gaadiid, ma aha awood. Dul-joog REST, socket maxalli ah iyo duubista khadka amarka dhammaantood waxaa loo yaqaan API, mana bixiyaan hawlo isle'eg.
U qor hawsha jumlad ahaan ka hor intaadan eegin dukumeentiga.
Bilowga xidhiidh maxalli ah waa ficil dhinaca macmiilka ah oo isticmaale hortiisa joogo. Soo saarista profile qalab waa ficil diyaarin oo liis agtiisa leh. Daminta gelitaanka isticmaale waa ficil maamul oo raad hubin leh. Saddexdaas badanaa waxay ku noolaadaan qaybo kala duwan, oo ay leeyihiin kooxo kala duwan, oo leh awood kala duwan.
Afar goobood oo qandaraaska tijaabo ka dhigaya
Buuxi afar goobood hawlo kasta: shayga, ficilka, wacaha iyo shardiga guusha. Qandaraas goob ka maqan waa rajo.
Shaxdu waa warqadda shaqada oo dhan:
| Field | Question | Example |
|---|---|---|
| Object | What is being acted on? | One enrolled device |
| Action | Observe, create, change, start, stop, or revoke? | Revoke |
| Caller | Which identity calls it? | Deployment service |
| Success | What observable state proves it? | Future sign-in denied |
Shardiga guushu waa goobta dadku boodaan, waana tan go'aamisa in is-dhexgalku shaqeeyo. Dejinta la kaydiyay ma aha tunnel firfircoon, iyo akoon la damiyay ma aha fadhi dhammaaday.
Haddii laba hawlood ay u baahan yihiin wacayaal kala duwan, waa laba is-dhexgal. Ku daridda hal akoon adeeg badanaa macnaheedu waa siinta awood ka badan inta mid kasta u baahan yahay.
Isku waafaji interface-ka lakabka uu runtii leeyahay
OpenVPN ee bulshada interface maamulka wuxuu daemon kala hadlaa TCP ama socket Unix. Amarradiisa waxaa ka mid ah indho-indhaynta xaaladda iyo calaamadaha daemon-ka.
Taasi waxay ka dhigtaa kanaal xakamayn daemon, ma aha API rukhsad martigeliyay ama adeeg diiwaangelin isticmaale. Akhriska taxaddar leh ee dukumeentigiisa waxay kaa badbaadinaysaa inaad ka dhisto lakab aan shayga lahaan.
Dukumeentigaas wuxuu kaloo sheegayaa in borotokoolku aanu lahayn sireed u gaar ah. Qof kasta oo gaadha socket-ka wuu xakamayn karaa daemon-ka, marka ula dhaqan sida xakamayn xasaasi ah, ma aha qulqulka cabbirka. Ku xir loopback ama socket Unix, oo dhig ka dambeeya habayn xaddidan haddii wacaha fog u baahan yahay. U soo bandhigidda internet-ka si fudud waxay kanaalka xakamaynta ka dhigtaa dhacdo.
Qeex dhaqanka wicitaanka ka dib
Aqbalid ma aha mid la mid ah dhamaystir. Daemon-ku wuu soo noqon karaa ka hor inta tunnel-ku kacsan, marka sug dhacdada dhamaystir ama guuldarro ee dukumeentiga ku qoran oo ku xir codsiga aad dirtay.
Go'aanso waxa wacahu sameeyo haddii jawaabtu lumo. Ku celcelinta indho la'aan ee abuur ama dib u xidhiidh ma aha mid la mid ah hubinta in codsiga ugu horreeyay hore u shaqeeyay.
Ka qaadista gelitaanku waa ugu yaraan saddex ficil oo kala duwan: xannibid gelitaanka mustaqbalka, joojinta fadhi firfircoon iyo burinta aqoonsiga. Weydiiso kuwa siyaasaddu runtii u baahan tahay, oo qandaraaska ku sheeg kee kee. Ha u calaamadin hal cusboonaysiin akoon oo guulaystay inuu yahay burin buuxda oo aan caddayn lahayn. Farqigaas wuxuu muhiim u yahay inta lagu jiro dhacdo, marka saacaddu socoto.
Ku hubi qandaraaska tijaabo yar
Tijaabo yar oo la ansixiyay waa inay daboolaan guul, diidmo, hakad iyo dib u celis, kadib hawsha barnaamijka ee la ogolaanayo ama la diidanayo.
Interface heer daemon ah, laba amar ayaa tababara indho-indhayn iyo calaamad:
echo state | nc -w 2 127.0.0.1 7505
echo signal SIGTERM | nc -w 2 127.0.0.1 7505Bixi oo kaliya awoodda hawshu u baahan tahay. Sirta ka fogee diiwaannada caadiga ah, oo diiwaangeli faahfaahin gaar ah oo ku filan inaad sheegto yoolka saameeyay iyo sida ay u dhammaatay.
Qor waddada soo kabashada ee kiiska API xakamaynta laftiisu hoos u dhaco. Dooro interface-ka leh shayga iyo meertada noloshiisa; sheegashooyinka otomaatigga ee bogga badeecada ma aha beddel.