Mashruucyo badan oo Google Cloud ah, hal VPN isku-dhafan? Marka hore go'aan gaar
VPC la wadaago, peering iyo xarun isku-xir ah waxay ka jawaabaan su'aalo lahaansho oo kala duwan. Dooro xadka shabakadda ka hor intaadan ku dhajin hal VPN mashruuc kasta.
Marka mashruucyo badan oo Google Cloud ah ay u baahan yihiin marin isku-dhafan, dareenka ayaa ah hal VPN mashruuc kasta, taasna inta badan waa qaabka khaldan. Lahaanshaha mashruuca iyo dariiqa baakadaha waa arrimo xiriir la leh laakiin kala duwan, munaasabadda firfircoon waxay ilaalisaa xuduudaha maamulka ee aad u baahan tahay iyadoo siisay prefix-yada loogu talagalay hal waddo oo ula kac ah xafiiska ama xarunta xogta. Hubintan ayaa go'aamisa qaabka shabakadda ee aad runtii rabto, sida ay u kala horreeyaan ee ka fogaata dib-u-shaqayn. Mid kasta oo iyaga ka mid ah ayaa goor hore soo afjari kara doodda, taasna waa ujeedka.
Xadka mashruucu si otomaatig ah uma baahna tunnel u gaar ah.
Hubi in shayga la wadaago uu yahay shabakadda
Ku bilow su'aal ku saabsan lahaanshaha, ma aha isku-xirka: miyay lahaanshaha shabakadda dhexe taageeri kartaa culaysyadan shaqada? Haddii jawaabtu tahay haa oo ururku leeyahay jaangooyo ku habboon, mashruuc martigeliyaha ayaa leh VPC, subnet-yada iyo isku-xirka, halka mashruucyada adeeggu ay leeyihiin kheyraadkooda codsiga. Hal xiriir Cloud VPN oo ku yaal shabakaddaas la wadaago ayaa markaas u adeegi kara prefix-yada culayska shaqada ee loogu talagalay, iyadoo la hoggaansamayo siyaasadaha dariiqa iyo amniga .
Noqo mid sax ah waxa xidhiidhku sameeyo. Ku-xirka mashruuc adeeg kuma daro VPC-da madaxbannaan ee jira shabakadda martigeliyaha, mana guuriyo kheyraad kasta si otomaatig ah. Ku-xirka culayska shaqada, oggolaanshaha, booska cinwaanka iyo DNS dhammaantood waa qayb ka mid ah naqshadda, ma aha natiijooyinka dejinta. U akhri xidhiidhka marka hore isbeddel oggolaansho iyo ka dib isbeddel dariiq, sababtoo ah kooxuhu inta badan waxay ogaadaan farqiga inta lagu jiro wareejinta.
Haddii lahaanshaha dhexe aan la aqbali karin kooxaha ku lug leh, halkan joogso oo u qaado inta soo hartay naqshad peering ama xarun. Ku qasbida Shared VPC koox u baahan wareeg nololeed shabakadeed madaxbannaan waxay abuurtaa dhibaato siyaasadeed oo leh magac farsamo.
Hubi in VPC-yada madaxbannaan ay sii ahaan karaan kuwo madaxbannaan
Peering waxay ilaalisaa VPC gooni ah, taasna waa sababta ay u soo jiidato kooxaha raba qorshayaashooda cinwaan iyo kontorolkooda isbeddel. Dabin ahaan, peering ma aha mid gudba: peering A-ilaa-B iyo B-ilaa-C laftiisa ma abuurto dariiqa A-ilaa-C iyada oo loo marayo B. Haddii saddex mashruuc ay u baahan yihiin inay gaaraan hal meel oo isku-dhafan, waxaad u baahan tahay qorshe is-dhaafsi oo ula kac ah halkii aad ka heli lahayd silsilad peering ah.
Wadaagga gaaritaanka isku-dhafan waxay sidoo kale ku xiran tahay is-dhaafsiga dariiqooyinka gaarka ah ee la diiwaangeliyay iyo ogeysiisyada Cloud Router ee loogu talagalay. Xaaladda peering ee firfircoon waxay caddaynaysaa in peering-ku jiro, ma aha in prefix-yada ay qolo kastaa danaynayso ay waligood la dhoofiyay. Hubi baaxadda la dhoofiyay labada dhinac ee peer-ka, jaangooyada sameysa dhoofinta, oo la barbardhig cinwaannada ay culaysyadaada shaqadu runtii isticmaalaan. Is-waafaqa la'aanta halkaas ayaa ah sababta ugu badan ee peering uu u muuqdo mid caafimaad qaba halka prefix-ku uu ahaanayo mid aan la gaari karin.
Qor qorshaha cinwaanka wax kasta ka hor. Baaxadda aan is-dulsaarin, dariiqooyinka loo maro meel kasta oo loogu talagalay iyo ogeysiisyada soo noqodka waa saddexda farshaxan ee qaabkani ku noolaado ama ku dhinto.
Hubi in qaabka xaruntu uu ku habboon yahay topolojiyada
Naqshad weyn ama si kale loo qaybiyay, Google Network Connectivity Center dulmar waxay sharraxaysaa qaababka xarunta iyo shucaaca. U akhri waxa daabacaadda hadda taageerto, ma aha waxa jaantusku tilmaamayo: isku-darka VPC iyo isku-dhafan, qoysaska dariiqa iyo siyaasadaha nooc kasta oo shucaac u ogolaado.
Si cad u hubi qoyska cinwaanka. Tusaalooyinka qorshaynta ee hagaha intooda badan, oo ay ku jiraan kan, waxay khuseeyaan IPv4, sifo ka jirta hal nooc oo shucaac si otomaatig ah uma khuseeyso mid kale iyada oo aan isbeddel la samayn. Haddii deegaankaagu yahay laba-stack, su'aashaasi waxay ka tirsan tahay doorashada qaabka, ma aha guuritaan dambe.
Shaxda hoose waa soo-koobka saddexda qaab iyo su'aasha go'aamisa mid kasta.
| Model | Network relationship | Planning question |
|---|---|---|
| Shared VPC | Service projects use subnets of a host project's VPC | Can central network ownership support these workloads? |
| VPC Network Peering | Independent VPCs exchange supported routes through explicit peers | Are direct peer and hybrid route exchanges sufficient? |
| Network Connectivity Center | Supported VPC and hybrid spokes join a managed hub | Does the required topology fit current routing and policy? |
Hubi waxa dariiqu uusan siin
Is-dhaafsiga dariiqyadu ma aha bixin kalsooni guud. Xallinta DNS, oggolaanshaha dab-damiska iyo fasaxa codsigu waxay sii ahaanayaan mas'uuliyadahooda, mid kastana waxaa jaangooya milkiile kala duwan ururrada intooda badan. Naqshad u malaynaysa in gaaritaanku macneheedu yahay fasax ayaa ka gudbi doonta imtixaanka isku-xirka oo ku dhici doonta dib-u-eegista amniga.
Sidoo kale xaqiiji sheekada DNS ee qaab kasta, sababtoo ah habaynta aagga iyo gudbinta way kala duwan yihiin shabakad la wadaago iyo shabakado peer ah. Magacyada gaarka ah ee lagu xalliyo hal mashruuc uma raacaan dariiq galay mid kale.
Diiwaangeli go'aanka iyo milkiilaha
Dhexdhexaadi halka ururku rabo milkiile shabakad la wadaago; ku hay VPC gooni ah halka wareegga nololeed ama siyaasadu u baahan tahay. Kadib dooro xiriir isku-xir la taageeray oo qor midka aad dooratay, yaa leh shabakadda la wadaago, iyo waxa mashruuc kastaa ku dhawaaqi karo.
Tirinta mashruucyada iyo iibsashada hal VPN mid kasta ma noqonayso beddelka go'aankaas lahaanshaha. Waa isla go'aankaas, oo la qaatay mar dambe, qofka dhaxla biilka iyo shaxda dariiqa.