Izingcingo ze-Apex ziphuma ku-Salesforce, hhayi ku-VPN yakho
I-VPN kukhompyutha ephathwayo inika isiphequluli sakho indlela, hhayi i-Apex noma i-Marketing Cloud. Hlanganisa umshayi wangempela negetiwe yomphakathi noma uxhumano oluyimfihlo olufanele.
I-API eyimfihlo iphendula kusiphequluli sakho ngaso leso sikhathi lapho ikhompyutha ephathwayo ijoyina i-VPN, ngakho ukuhlanganiswa kufanele kusebenze. Akusebenzi, ngoba ikhodi eyenza ucingo isebenza kwenye indawo ngokuphelele. I-Apex isebenza kumaseva ezinhlelo zokusebenza e-Salesforce, kanti umsebenzi oseceleni kweseva ku-Marketing Cloud usebenza endaweni yokusebenza yalowo mkhiqizo. Akukho kukho okubili okuzuza ifa lomhubhe wekhompyutha yakho. Kwenze lokhu njengenqubo emfushane: khomba umshayi, khetha indlela yokungena umshayi angayifinyelela, xhumanisa indlela kusukela ekuqaleni kuze kube sekugcineni, bese uqinisekisa kusukela endaweni yokusebenza ngokwayo.
Bhala ikhadi lomshayi ngaphambi kwanoma yiluphi ushintsho lwenethiwekhi
Gcwalisa izinkambu ezinhlanu futhi wenqabe ukuqagela noma iyiphi yazo. Umkhiqizo wokwenza kanye nomongo kunquma konke okulandelayo, ngakho qala lapho hhayi kufayela lomlilo leseva.
| Field | What it must answer |
|---|---|
| Runtime | Which product and execution context issues the request? |
| Endpoint | Which hostname must that runtime resolve, and to what? |
| Path | Which supported public entry or private connection carries it? |
| Identity | Which credential and which operation is the API asked to authorize? |
| Failure | How do responses return, and what happens when the path is down? |
Ithebhu yesiphequluli nocingo lwe-Apex kungamakhasimende amabili ahlukene, futhi isiphequluli esisebenzayo sifakazela kuphela ukuthi indlela ikhona isuka etafuleni lakho. Uma inkambu yendawo yokusebenza ithi Apex, umbuzo ofanele ukuthi i-Salesforce iphuma kumakheli apHI, hhayi ukuthi ikhompyutha yakho inamakheli apHI. Yingakho umhubhe owenza i-API ilayishe kusiphequluli ungashiya ukuhlanganiswa kwehluleka ngesikhathi esifanayo sokulinda njengakuqala. Ikhadi lomshayi likhona ukuze limelela lelo phutha ngaphambi kokuba othile ahlele ifayela lomlilo.
Khetha indlela yokungena umshayi angayisebenzisa ngempela
Zombili izakhiwo zisemthethweni, futhi zixazulula izinkinga ezihlukene. Eyokuqala iyindawo yokungena yomphakathi eyenziwe ngamabomu: igethiwe ye-API ye-HTTPS noma insizakalo yokuhlanganisa eqinisekisa umshayi, isebenzisa izimvume ezincane futhi igcina uxhumano oluvikelwe ku-backend eyimfihlo. Lokho akufani nokudalula yonke insizakalo ye-backend noma ukudlulisela imbobo yokuphatha ku-inthanethi.
Eyesibili uxhumano oluyimfihlo olufanele. Imibhalo ye-Private Connect ephumayo ye-Salesforce ichaza ukuhamba kwezingcingo ezisekelwayo nge-Outbound Network Connection eboshelwe kwisithi sokugunyaza esinesibonelo, phezu kokuhlelwa kwayo okuchaziwe kwe-AWS PrivateLink. Lesi sici sinemingcele yohlelo, ilayisense nomkhiqizo, ngakho qinisekisa ukuthi inhlangano iyafaneleka ngaphambi kokuklama mayelana naso.
Asikho isakhiwo esiyiklayenti le-OpenVPN efakwe ngaphakathi ku-Salesforce, futhi isitatimende sakudala sokuthi yonke intengo kufanele ifinyelele i-backend yomphakathi sibanzi kakhulu lapho kufaneleka khona uxhumano oluyimfihlo olusekelwayo. Khetha lokho okusekelwa yindawo yokusebenza, bese uqedela indlela eya ku-API yangempela: iphoyinti lokugcina le-AWS aliwazi umthombo wakho wasekhaya futhi alizuzi ifa lomzila wekhompyutha yakho. I-DNS, ukuhamba kwe-backend, inqubomgomo yokufinyelela kanye nokuhamba kwezimpendulo konke kufanele kulandele isakhiwo osikhethile. Indlela eyimfihlo eyakhiwe yingxenye ihluleka ngendlela ebukeka ifana ncamashi nenkinga yokuqinisekisa.
Xhumanisa indlela eyimfihlo kusukela ekuqaleni kuze kube sekugcineni
Sebenza usuka ku-API uye phandle futhi ume esikhaleni sokuqala. Qinisekisa ukuthi i-backend iphendula endaweni, bese kuthi iphoyinti lokugcina eliyimfihlo liyifinyelela, bese kuthi isithi sokugunyaza esinesibonelo nokuxhumana kwalo okuphumayo kubhekise kuleyo phoyinti.
curl -sS -m 5 -o /dev/null -w '%{http_code}\n' http://10.40.8.20:8080/health
dig +short api.partner.example
sf apex run --file scripts/apex/callout-check.apex --target-org integrationUmyalo wokuqala ufakazela ukuthi i-backend inempilo ngaphakathi kwenethiwekhi eyimfihlo, owesibili ukhombisa ukuthi igama lixazululeka liba yini, futhi owesithathu wenza ucingo kusuka endaweni yokusebenza yangempela ye-Salesforce. I-200 evela kowokuqala nokwehluleka okuvela kowesithathu kuhlukanisa isikhala sibe sendleleni noma kwisithi sokugunyaza, hhayi ensizakalweni.
Gcina ubukhulu bobuwena bunemba ngenkathi uxhumanisa. Isithi sokugunyaza esinesibonelo asilungisi sodwa iphoyinti lokugcina elingafinyeleleki, ngoba isithi sokugunyaza nokuxhumana okuyimfihlo kuyizilungiselelo ezihlobene ezinemisebenzi ehlukene. Uhlu lwe-IP oluvunyelwe lunciphisa ukwamukelwa kwenethiwekhi futhi akusona isithi sokugunyaza se-API, ngakho gcina ukuqinisekisa okujwayelekile kwe-TLS kanye nenqubo yensizakalo yokuqinisekisa nokushintsha. Uma isivivinyo siphumelela kuphela ngemva kokuthi uvale ukuhlola isitifiketi, uthole inkinga yegama lomsingathi hhayi yendlela, futhi isitifiketi kusafanele sihambisane.
Qinisekisa kusuka endaweni yokusebenza, bese urekhoda ukuhoxiswa
Yamukela isicelo esingenabungozi esivunyelwe kusuka endaweni yokusebenza yokuhlanganisa, hhayi kumshini wakho. Rekhoda umthombo oboniwe wensizakalo eyamukelayo, umuntu oqinisekisiwe, umphumela kanye nesicelo esisodwa esenqatshwe ngamabomu okufanele sehluleke.
curl -sS -o /dev/null -w '%{http_code} %{remote_ip}\n' https://api.partner.example/v1/ping
curl -sS -o /dev/null -w '%{http_code}\n' -H 'Authorization: Bearer invalid' https://api.partner.example/v1/pingGijimisa ukuhlola okufanayo kokubili kusuka kunethiwekhi ye-backend uqobo ukuze umthombo oboniwe uqhathaniswe nalokho okukhiqizwe yindawo yokusebenza. I-200 elandelwa i-401 noma i-403 iyisimo osifunayo; ama-200 amabili asho ukuthi indlela yokwenqaba ayiphogeleki ngempela.
Bhala ukuhoxiswa ngaphambi kokuba ukudinga: yiluphi uhlu lwemvume, isithi sokugunyaza esinesibonelo noma ukuxhumana okuphumayo okushintshile, ngubani umnikazi futhi kungabuyiselwa kanjani inani langaphambilini. Bese uvala umjikelezo ngokusho kwithikithi umshayi wefu kanye nendlela ephelele yensizakalo, ukuze kungabikho ophinda avule leyo ndaba njengenkinga ye-VPN.