I-AWS Client VPN noma i-Site-to-Site: hlola ukuthi ubani ovula uxhumano
I-Client VPN iqinisekisa idivayisi noma umsebenzisi; i-Site-to-Site ixhumanisa isango ne-AWS. Izihlolo ezine zinquma ukuthi yikuphi okuyikho ngempela okudingwa yilaptop noma igatsha lakho.
Izihlolo ezine zinquma lokhu, futhi akukho nesisodwa sazo okuyigama leprotokholi. Ubani ovula uxhumano, yini eqinisekiswa yi-AWS, uxhumano luxhumana kanjani nenethiwekhi yakho, futhi yikuphi ukuqondisa nengqubomgomo eziza nakho. Phendula lezi ngokulandelana futhi ukukhethwa komkhiqizo ngokuvamile kwenzeka ngokwako; phendula ngemva kokuba usuthengile umklamo futhi uzobe uvikela ithumbu elixazulula ingxenye engalungile yenkinga. Akukho kokune okucela ukuthi ukhethe i-cipher, yingakho umklamo oqala ngeprotokholi ngokuvamile uwuphawu lokuthi izidingo azikaze zibhalwe phansi.
Yenza isihlolo ngasinye ngokumelene nendawo yokugcina yangempela, iklayenti nomndeni wamakheli ohlose ukuwusebenzisa, hhayi ngokumelene nesigaba. Imikhiqizo ye-VPN ephethwe yehlukile kumabhulokhi wokwakha e-OpenVPN ne-IPsec efana nawo.
Okokuqala, ubani ovula uxhumano
Uma into edinga ukufinyelela iyilaptop, ifoni noma isiteshi sokusebenza somlawuli oyedwa, uxhumano luqala kudivayisi ekude futhi umklamo uwukufinyelela kweklayenti elikude. Uma into edinga ukufinyelela iyigatsha eligcwele imishini ngemva kwesiphathi-mendo oyedwa, uxhumano luqala kuleso siphathi-mendo futhi umklamo uyingosi-kuya-ngosi. Lesi isihlolo esinquma izimo eziningi, futhi yiso lesi abantu abasidlulayo lapho isethulo somthengisi sesivele sahlanganisa ingxoxo nge-cipher.
Misa lapha uma ungeke ukwazi ukusho ingxenye eqalayo. Umklamo ozama ukusiza zombili izimo ngethumbu elilodwa ngokuvamile ugcina ngokuba nesikhathi seklayenti elizenza sengathi liyingosi.
Okwesibili, yini eqinisekiswa yi-AWS
Ku-Client VPN, i-AWS iqinisekisa ubunikazi beklayenti noma bomsebenzisi obulungisiwe: izitifiketi, incwadi yokubhalisa noma ubunikazi obuhlangene, kuye ngokulungiselelwa. Ku-Site-to-Site VPN, i-AWS iqinisekisa ubunikazi bozakwabo bengosi. Lowo mehluko awuwona wowokuhlobisa. Enye imodeli ikhula ngokwengeza abasebenzisi nokuhoxisa izifakazelo zabo; enye ikhula ngokuthemba konke okungemva kwengosi eyodwa.
Ukuqinisekiswa kwengosi akukuqinisekisi wonke umsebenzi noma uhlelo lokusebenza olungemva kwayo, ngakho gcina ubunikazi bezinhlelo nokufinyelela ezingeni lomthombo ngisho lapho ithumbu ngokwalo lithenjwa. Igatsha elinesiphathi-mendo esinobunikazi bozakwabo obuvumelekile akumele lifundwe ngokuzenzakalela njengokuthi yonke itafula kuleyo sakhiwo igunyaziwe.
Okwesithathu, uxhumano luxhumana kanjani
I-Client VPN ixhumana ngokuhlanganiswa kwamasebnethi e-VPC noma ngokuxhumeka okuqondile kwe-Transit Gateway okusekelwayo. I-Site-to-Site VPN ixhumana nomgomo we-AWS VPN, ngokuvamile ingosi yangasese ebonakalayo noma i-Transit Gateway. Umhlahlandlela wokwakheka kwe-Client VPN ubhala phansi inketho ye-Transit Gateway, futhi ukuba khona kwayo akukwenzi isikhathi selaptop sibe ingosi yegatsha noma kususe ukuqinisekiswa nokugunyazwa kweklayenti okuchazwe ngenhla.
Hlola ukuxhumeka okusekelwa ngempela yikhasi lakho nesifunda sakho ngaphambi kokuklama imizila ezizungezile, bese uhlola ukuthi lowo mxhumano ngokabani. Inketho ekhona emibhalweni kodwa ehleli kunethiwekhi ongeke ukwazi ukuyilungisa ayiyona inketho.
Okwesine, yikuphi ukuqondisa nengqubomgomo eziza nakho
I-Client VPN iletha ukuphathwa koxhumano lweklayenti nemithetho yokugunyaza yamanethiwekhi okuhlosiwe okuwavumayo. Umsebenzisi oxhunyiwe usadinga umzila ohlosiwe wokuya endaweni yokugcina, umthetho wokugunyaza oyivumayo, nanoma yikuphi ukufinyelela okudingwa umthombo ngokwalo. I-Site-to-Site VPN iqondisa phakathi kwamanethiwekhi amelelwa ingosi yekhasimende, isebenzisa imizila emile esekelwayo noma i-BGP kuye ngomklamo, ngakho imishini ngayinye engemva kwesiphathi-mendo segatsha ayidingi ukungena njengeklayenti ngayinye.
Ungasihlungeli phansi isimilo esingasekelwa yisigaba kunoma yiluphi uhlangothi. Ama-VPN okufinyelela kude awakona ngokuphelele angakwazi ukuthwala ithrafikhi ebuyayo noma ukusekela izinhlelo zengosi, futhi i-IPsec ayivinjelwa ngokuzenzakalela yi-NAT — i-AWS ibhala phansi ukudlula kwe-NAT kanye nezidingo zengosi yekhasimende, futhi umkhawulo wangempela ukulungiselelwa kwengosi okusekelwayo. Hlola imikhawulo yendawo yakho yokugcina ngaphambi kokudinga ukuxhumana okuqalwa kubaklayenti noma ukudlulisa i-LAN engemva kwesikhathi esisodwa. Ukuqapha okufanayo kuyasebenza emindenini yamakheli: indawo yokugcina esebenza ku-IPv4 ayisho umzila we-IPv6, ngakho qinisekisa umndeni iklayenti lakho noma ingosi yakho ezoxoxisana ngawo ngempela.
I-Site-to-Site VPN ikunika amathumbu amabili ngokuxhumana ngakunye, futhi lokho kubuyisela akusona isici ongakucabanga, kuwumsebenzi womklamo. Ukusebenza kwengosi yekhasimende, ukushintshwa kwemizila lapho kwehluleka kanye nokumboza kokuhlolwa konke kufanele kuhlelwe; ukuqhathanisa isikhathi selaptop esisodwa neseva ye-VPN engabonakali akufakazeli lutho nganoma yikuphi kokubili.
Lapho imiklamo emibili ihlangana khona
Izinsizakalo azikhiphani, futhi indlela evamile yokukhiqiza isebenzisa zombili: abasebenzi ku-Client VPN, amanethiwekhi egatsha ku-Site-to-Site, nemizila ecacile kanye nengqubomgomo yokufinyelela phakathi kwezindawo okufanele zikhulume. Ithebula isifinyezo sezihlolo ezine, akuwona umfelandawonye wokuzenza.
| Question | AWS Client VPN | AWS Site-to-Site VPN |
|---|---|---|
| Who establishes it? | A client on a remote device | A customer gateway device or appliance |
| What is authenticated? | The client or user identity | The gateway peer identity |
| How does it attach? | VPC subnet association or Transit Gateway | Virtual private gateway or Transit Gateway |
| What carries the path? | An OpenVPN-based client tunnel | IPsec tunnels to AWS endpoints |
Into eyodwa okungekho mkhiqizo kokubili oyifaka esikhundleni sayo: i-TLS eya kuhlelo lokusebenza oludinga ukubethelwa okudlula indawo yokugcina ye-VPN. Uma ububanzi bakho bokuhambisana buphela kuhlelo lokusebenza, ithumbu liwukuthutha futhi isitifiketi sisewukulawula.
Bhala izimpendulo ezine ngaphambi kokubuyekezwa komklamo, enye emugqeni ngamunye. Lapho ezimbili zazo zingavumelani — ake sithi, umklamo weklayenti oqinisekiswe ngumsebenzisi kanye nesidingo sokuqondisa esilingana negatsha — lowo mehluko uyitholakalo, futhi ukubona manje kushibhe kakhulu kunokubona ngesikhathi sokushintsha.