Laba akoon AWS, hal shabakad gudaha: waddo kee?
Transit Gateway la wadaago, laba VPN oo madax banaan ama hal proxy cidhiidhi ah: ku dooro lahaanshaha iyo baaxadda saameynta, ma aha waddada maanta ugu fudud in lagu daro.
Qaabka muuqda waa peering iyo VPN, waana qaabka khaldan. VPC la isku xiray ma awoodo in uu amaahdo xiriirka VPN ee deriskiisa si uu u maro gees ilaa gees, marka ikhtiyaarkaas waligiis ma joogin miiska, waxa kasta oo shaxda waddooyinku soo jeediso. Waxa aad dhab ahaan ka dooranayso waa xarun shabakadeed la wadaago, laba waddo oo VPN madax banaan iyo hal irid oo cidhiidhi ah oo barnaamijka ah. Mid kastaa wuxuu ka jawaabaa su'aal ka duwan yaa leh maamulka waddooyinka.
Saddex ikhtiyaar iyo midda aan ikhtiyaar ahayn
Ku bilow tirtiridda fikradda peering, ka dibna isbarbar dhig waxa hadhay iyadoo lagu saleynayo lahaanshaha halkii ay ka ahaan lahayd fududaynta jaantuska. Shaxda hoose waa go'aanka oo qaab kooban.
| Option | Who owns the path | Main cost |
|---|---|---|
| Shared transit gateway | Hub owner, used by both VPC owners | Shared blast radius, attachment and data-processing charges |
| Separate VPNs per account | Each account independently | Peer capacity, duplicated tunnels, overlapping prefixes to coordinate |
| Application proxy | The account that hosts the intermediary | New auth, logging and availability surface, and only one service |
Haddii akoonka A uu u baahan yahay gaaritaan shabakad gudaha oo dhan, safka proxy waa qaab khaldan. Haddii akoonka A uu u baahan yahay hal API, labada saf ee ugu horreeya waa shabakad ka badan inta shuruuddu codsatay.
Marka Transit Gateway la wadaago guuleysto
Transit Gateway wuxuu isku xiraa VPC kasta iyo VPNka oo ah shabakado gaar ah, wadaagga akoonnada dhexdooda wuxuu u oggolaanayaa milkiilayaasha VPC in ay isticmaalaan xarunta iyagoon isku darin akoonnada. Taasi waa soo jiidashada: hal meel oo horgalaha guduhu kula kulmaan shabakadaha AWS, iyo hal meel lagu fikiro lifaaq kee barto waddo kee.
In wax walba la lifaaqo macnaheedu ma aha in wax walba la oggolaado. Xiriirka iyo faafinta ayaa go'aamiya lifaaq kee isticmaalo shaxda waddo kee, marka laba horgale oo VPC ah mid kastaa wuxuu gaari karaa adeeg gudaha ah halka gelitaankooda wadaaggan uu ku sii jiro meesha laga saaray naqshadda xarunta. Dhinaca guduhu wali wuxuu u baahan yahay waddooyin soo noqod ah horgalaha AWS, taasna waa tikit beddel oo koox kale.
Kharashku waa mid hay'adeed iyo mid maaliyadeedba. Milkiilaha xaruntu wuxuu maamulaa xiriirka waddooyinka oo kooxo kale ku tiirsan yihiin, marka beddel ku yimaada hal lifaaq wuxuu dhaqaajin karaa taraafikada adeeg uu milkiilaha xaruntu waligiis maqal. Saacadaha lifaaqa iyo habaynta xogta way isku darsamaan shabakad kasta oo aad lifaaqdo, taasina waa sababta xarumuhu inta badan u koraan si ka dhaqso badan kooxda maamusha.
Marka VPN gooni ah ama proxy cidhiidhi ah guuleysto
Laba VPN oo madax banaan waxay ku habboon yihiin hawlo yar oo leh xuduudo shaqo oo dhab ah: akoon kastaa wuxuu beddelaa tunnelkiisa, midkoodna ma burburin karo kan kale isagoo wax ka beddelaya shaxda waddooyinka. Xuduuduhu waxay ku yaallaan dhinaca gudaha. Gateway-ka lammaanuhu wuxuu u baahan yahay awood tunnellada dheeraadka ah, qorshayaasha cinwaanku waa in aanay is dulsaarnaan, laba habaynta oo isla horgalaha xayeysiisa waxay u baahan yihiin doorbidid ula kac ah halkii ay ka ahaan lahaayeen rajada.
Proxy waa is-dhexgalka ugu cidhiidhisan. Haddii akoonka A uu u baahan yahay hal xogta ama hal API akoonka B, dhexdhexaadiye xaddidan wuxuu ku siinayaa irid qeexan oo leh sheekadiisa xaqiijinta, diiwaangelinta iyo helitaanka. Waa sidoo kale ikhtiyaarka ugu badan ee si xun loo isticmaalo: dhexdhexaadiye u gudbiya meel kasta oo gaar ah wuxuu noqday gudbiye aan xadidnayn oo leh tallaabooyin dheeraad ah, mana u dhaqmi doono sida gudbin hufan oo VPC ilaa shabakad gudaha wax kale.
Waxaa mudan in la akhriyo xaddidyada peering ee VPC ka hor wax kasta oo kuwan, sababtoo ah waxay sharraxaan sababta fikradda afraad ay had iyo jeer ku soo noqoto iyo sababta aanay u shaqayn karin.
Dooro is-dhexgalka ugu cidhiidhisan ee buuxiya shuruudda
Nidaami su'aalaha: akoonka A ma u baahan yahay shabakad, shabakado badan ama hal adeeg? Kooxda guduhu ma rabtaa hal waddo ama dhowr? Yaa loo oggol yahay in uu beddelo maamulka waddooyinka taraafikada kooxda kale? Jawaabta ugu horreysa ee soo saarta is-dhexgalka ugu cidhiidhisan waa naqshadda, wax kasta oo ka dambeeyana waa fulin.
Diiwaangeli jawaabta oo la socota qorshaha horgalaha, lahaanshaha waddooyinka, liiska tunnellada ama lifaaqyada iyo qaabka guuldarrada oo dhinac kastaa filayo. Marka qof dambe weydiiyo sababta akoonka A aanu si fudud u isticmaali karin VPNka akoonka B, diiwaankaas waa jawaabta, wuxuuna kaa badbaadinayaa inaad mar kale ka dooddo saddexda ikhtiyaar ee isku midka ah mashruuca xiga.