I-App Engine ingafinyelela idathabheyisi yakho ye-VPN: yini okufanele ihambisane

Isimangalo sokuthi i-App Engine Standard ayikwazi ukufinyelela idathabheyisi eyimfihlo nge-Cloud VPN iyinsalela yesizukulwane sangaphambili seplatifomu. Ama-Standard instance awatholi ikheli lomdabuko le-VPC njengezinye izindawo zokusebenza, kodwa angathumela i-egress nge-connector ye-Serverless VPC Access ehlala kunethiwekhi yakho. Uma leyo ndlela isikhona, i-Cloud VPN kanye ne-firewall ekude ibona ithrafikhi ye-connector njenganoma yimuphi omunye umthombo. Okuvamile ukwehluleka akuyona ikhono ngokwalo. Kungenye yezilungiselelo ezintathu ezingakaze zihambisane.

Imphendulo endala yaqhamuka kuphi

Ngaphambi kokuba ama-connector abekhona, imphendulo esebenzayo kwakungukuthi i-Standard ingakhuluma kuphela namaphoyinti okugcina omphakathi, futhi amaqembu athuthela ku-proxy VM noma kwenye indawo yokusebenza ukuze akugweme lokho. Iplatifomu yashintsha, inganekwane ayizange ishintshe. Izeluleko eziningi eziku-inthanethi zisabonisa inkathi lapho kwakungekho khona ukukhetha kwe-egress.

Ukulungisa kuncane kunalokho okuzwakala kukho. I-Standard ingafinyelela inethiwekhi eyimfihlo, kodwa kuphela ngokuhlanganiswa kwe-egress okusekelwayo, futhi kuphela eziqondisweni ezitholwa ngokweqiniso yilokho kuhlanganiswa.

Khetha umzila we-egress kuqala

I-connector exhunywe kusevisi iyona efaka ithrafikhi yayo ku-VPC. Imibhalo ye-connector ibala isidingo sesifunda kanye nezilungiselelo ze-egress; i-connector kufanele ibe khona esifundeni sesevisi futhi isetshenziswe ubunikazi obuthumelayo.

vpc_access_connector:
  name: projects/PROJECT_ID/locations/REGION/connectors/CONNECTOR_NAME
  egress_setting: private-ranges-only

private-ranges-only ithumela iziqondiso eziyimfihlo ku-VPC futhi ishiya konke okunye emzileni ojwayelekile we-inthanethi, okuyinto evamile edingwa ukuxhumana kwedathabheyisi. all-traffic icindezela ithrafikhi ephumayo ihambe nge-VPC ngokubanzi, ngakho izingcingo ezijwayelekile ze-inthanethi zifuya indlela ye-NAT ne-firewall ye-VPC.

Ukuhlela ifayela endaweni akushintshi lutho kuze kube yilapho uthumela. Ingxenye esebenzayo igcina ukucushwa eyakhiwe ngakho.

Ikheli lomthombo yi-connector, hhayi ikhompyutha yakho ephathwayo

Isikhathi esiningi sokulungisa izinkinga siya lapha. Isango le-VPN elikude kanye ne-firewall yedathabheyisi kufanele zamukele ibanga elabelwe i-connector ngaphakathi kwe-VPC, hhayi ikheli lehhovisi lakho futhi hhayi ikheli le-egress lomphakathi lesevisi. Sesha lelo banga kukhonsoli ngaphambi kokubhala ngisho umthetho owodwa.

Ezinye izindawo ezimbili kufanele zivumelane. Ithebula lemizila ye-VPC lidinga umzila oya kunethiwekhi yedathabheyisi ekude, futhi uhlangothi olukude ludinga umzila wokubuya webanga le-connector. Uma ithuneli isebenzisa izikhethi zethrafikhi, qinisekisa ukuthi ibanga le-connector lingaphakathi kobubanzi obuxoxiwe. Umzila okhona kuphela ohlangothini olusuka kude uya endaweni uvamile ukushiywa, futhi udlulisa ama-ping kodwa awuqedi neze ukuxhawulana kwe-TCP.

Ithuneli evumela kuphela isubneti ye-VM izokulahla amaphakethe e-connector ngaphandle komlayezo wephutha owusizo, yingakho ukuphela kwesikhathi kwedathabheyisi kubonakala njengenkinga yezifakazelo.

I-DNS ihamba ngomunye umzila

Igama lomsingathi ledathabheyisi eyimfihlo kufanele lixazululwe ngaphakathi kwenethiwekhi efinyelelwa yi-connector, nge-Cloud DNS peering noma indawo yokudlulisela i-VPC engayisebenzisa. Ukulixazulula esiteshini sakho sokusebenza akufakazi lutho ngesevisi ethunyelwe, ngoba ikhompyutha yakho ephathwayo ayisebenzisi leso sixazululi.

Uma igama lixazululeka libe yikheli lomphakathi ngaphakathi kwe-VPC, usuzolungisa i-firewall engalungile.

I-URL Fetch ayisebenzisi i-connector

Isilungiselelo se-egress sihlanganisa amasokhethi aphumayo ajwayelekile endawo yokusebenza, futhi isevisi endala ye-URL Fetch ayiyona ingxenye yalowo mzila. Isicelo esikhishwe nge-urlfetch siziba i-connector noma ngabe ukucushwa kuthini. Uma ucingo olwehlulayo lusekhona kulabhulali endala esasebenzisa i-URL Fetch, isixazululo siwukuhambisa lowo cingo ku-HTTP client ejwayelekile.

Kumshayeli wedathabheyisi lokhu akuvamile ukuba yinkinga, kodwa yisizathu esijwayelekile sokuthi iphoyinti lokugcina elilodwa lisebenze kanti elinye lingasebenzi kusuka kusevisi efanayo.

Qinisekisa ngombuzo owodwa omncane

Thumela, bese wenza umsebenzi owodwa wedathabheyisi ovunyelwe kusuka kungxenye ethunyelwe ngenkathi ubheka uhlangothi olukude. Ikheli lomthombo eliqoshwa yidathabheyisi noma isango le-VPN kufanele kube elase-connector. Uma kungenjalo, isicelo asizange singene ku-VPC futhi akukho kucushwa kwethuneli okuzokulungisa. Qhathanisa nebanga olifune kukhonsoli; ukungafani ngokuvamile kusho ukuthi i-connector yesibili isebenzela ingxenye leyo.

Umbuzo ophumelelayo ovela ku-VM ngaphakathi kwe-VPC ufakazela ukuthi umzila ukhona. Awufakazeli ukuthi isevisi iwukhethile.