Tailscale Serve ama Funnel: yaa run ahaantii furan kara xiriirka?

Labada amar waxay daabacaan adeeg maxalli ah iyagoo maraya magac HTTPS oo Tailscale, oo mishiinka ay ku socdaan waxay u muuqdaan kuwo isku mid ah. Farqigu waa yaa hadhow gaari kara URL-ka, farqigaasna wuxuu go'aamiyaa kontaroolada ay codsigaagu wali u baahan yahay. Serve wuxuu dhagaystayaasha ku hayaa tailnet-ka dhexdiisa, Funnel-na wuxuu u rarayaa internetka furan. Marka hore dooro dhagaystayaasha, ka dibna dooro amarka la jaanqaadaya.

Serve wuxuu ka jawaabaa su'aal ku dhex jirta tailnet-kaaga

Serve wuxuu proxy ka sameeyaa deked maxalli ah ama wuxuu aaladda ku jira tailnet-kaaga u bixiyaa waxyaabo maxalli ah, oo xeerarka gelitaanka tailnet-ka ayaa wali khuseeya codsi kasta. Dashboard ku yaal dekedda 3000 wuxuu noqonayaa mid laga gaari karo magac HTTPS oo kaliya aaladahaagu xallin karaan oo ku xirmi karaan. Kani waa bangiga saxda ah ee qalabka gudaha, sababtoo ah dhagaystayaasha hore ayaa loo xaqiijiyay tailnet-ka oo ma kordhiso dushiin dadweyne. URL-ku wuxuu u eg yahay shabakad caadi ah, sababtaas awgeedna dadku waxay u qaataan sidaas.

Serve wuxuu kaloo ku lifaaqi karaa codsiyada uu gudbiyo madaxyada aqoonsiga ee qeexaya isticmaalaha tailnet-ka. Haddii codsigaagu ku kalsoonaado madaxyadaas xaqiijin ahaan, ku xir backend-ka localhost si wax kale oo aan si toos ah u gaari karin; backend-ka dhageysanaya ciwaan la marayn karo wuxuu heli karaa codsiyo aan waligood soo maray proxy-ga.

Funnel wuxuu dhagaystayaasha u beddelaa internetka furan

Funnel wuxuu daabacaa adeeg la doortay qof kasta oo haysta URL-ka, oo booqdayaashu uma baahna macmiilka, akoon ama xubinimo tailnet-kaaga. Sidaas darteed kheyraadku wuxuu u baahan yahay xaqiijinta, xaddidka heerka iyo patch-yada aad ku dabaqi lahayd adeeg kasta oo dadweyne. Codsiyada dadweynuhu ma qaadaan madaxyada aqoonsiga tailnet-ka ee Serve, sidaas darteed codsiga ku tiirsanaa ma laha aqoonsi isticmaale ah gabi ahaanba Funnel hoostiisa. Doorashada amar daabacaad kale kuma jawaabto su'aasha xaqiijinta adiga.

Funnel wuxuu kaloo leeyahay xaddidaadyo ay suurtogal tahay in tilmaame ka soo baxay nooc hore uusan xusin. Wuxuu ku dhammeeyaa TLS shahaado uu Tailscale u helo magaca, oo wuxuu taageeraa kaliya dekedo dhageysi gaar ah, sida dokumentiga Funnel qeexayo. Haddii adeeggaagu ka filanayo borotokool aan HTTPS ahayn mid ka mid ah dekedahaas, Funnel waa qalab khaldan ee ma aha halxiraale qaabeynta.

Qaabka ka akhri macmiilka, ee ha ka akhrin dekedda

Ka hubi xaaladda hadda jirta ka hor intaadan wax wadaagin, sababtoo ah labada qaab ayaa loo qaabeyn karaa isla deked maxalli ah waqtiyo kala duwan. Amarrada xaaladdu waxay soo sheegaan waxa dhab ahaan la daabacay iyo qofka loo daabacay. Ha ka soo saarin dhagaystayaasha xaqiiqda ah in URL-ku jawaabayo.

tailscale serve status
tailscale funnel status
tailscale status --json | head -40

Habka amarradu waxay isbeddelay intii u dhaxeysay noocyada macmiilka, sidaas darteed wicitaan la koobiyeeyay wuxuu dooran karaa qaab ka duwan kii aad damacday. Dooro qaabka la diiwaangeliyay ee nooca aad ku socoto, oo akhri xaqiijinta uu macmiilku daabaco halkii aad ka fikiri lahayd. Haddii ay jiraan qaabeynta Serve iyo Funnel labadaba, tan dadweynuhu waa tan muhiimka u ah soo bandhigidda. Dib u dhig qaabeynta aadan damcin halkii aad mid kale dul saari lahayd.

Iso jooji oo mar labaad akhri xaaladda haddii natiijadu aanay magacaabin dhagaystayaasha. URL la daabacay oo aan la sheegin dhagaystayaal waa mala-awaal, mala-awaalkuna waa dariiqa ay dashboard-yada gudaha u gaaraan internetka furan.

Ku tijaabi dhagaystayaashii aad run ahaantii damacday

Ka tijaabi bannaanka tailnet-ka, ee ha ka tijaabin mishiinka daabacay adeegga. Codsiga ka yimid aaladda tailnet-ka wuxuu caddeeyaa in proxy-gu shaqeynayo, laakiin ma caddeeyo in shisheeye laga reebay. Isticmaal shabakad aan lahayn macmiil Tailscale iyo dariiqa tailnet-ka.

curl -sI https://host.tailnet-name.ts.net
curl -sI https://host.tailnet-name.ts.net --resolve host.tailnet-name.ts.net:443:203.0.113.10

Dashboard gudaha ah, codsiga dibadda waa inuu ku guuldareystaa xiriirka ama ku guuldareystaa fasaxa, codsiga gudahana waa inuu ku guuleystaa aqoonsiga aad filanayso. Adeeg dadweyne, codsiga dibadda waa inuu ku guuleystaa oo codsigaagu waa inuu weydiistaa aqoonsigiisa gaar ah. Qor mid ka mid ah labadan natiijo aad aragtay, sababtoo ah URL keligiis ma sheegayo. Haddii natiijadu ka soo horjeeddo ujeeddada, marka hore ka saar qaabeynta dadweynaha kadibna baadh.

Daabacaadda adeeg ma aha isla go'aan qaadashada doorashada noodka bixitaanka, kaas oo xakameeya halka taraafikadaada bixitaanku ka baxdo. Serve iyo Funnel waxay ka jawaabaan yaa gaari kara wax aad socodsiiso; noodka bixitaanku wuxuu ka jawaabaa halka xiriiradaada u muuqdaan inay ka yimaadaan. Kala fogee labada su'aal oo isbarbardhiggu wuu fududaadaa.