Ukufaka isubneti yendawo ku-AWS VPN: i-VGW ngokuqhathanisa ne-Transit Gateway
Isimemezelo se-BGP sitshela i-AWS ukuthi kuthunyelwe kuphi amaphakethe; asidali indlela yendawo. Hlola umngcele we-VGW noma we-transit gateway, bese kuba umgomo wokubuyela.
I-Site-to-Site VPN ekhona ithwala i-10.60.0.0/16, inethiwekhi entsha yesevisi ivela ngemuva kwegesi yendawo efanayo njenge-10.70.0.0/16, futhi othile uyabuza ukuthi ingabe kudingeka i-proxy. Ngokuvamile akudingeki: indlela eqondisiwe ingathwala isiqalo, kodwa kuphela uma izinto ezintathu zivumelana, futhi ukuthi ziphi ezintathu kuncike ekwakhiweni kwe-AWS osuvele uyisebenzisa. Igesi yangasese ebonakalayo inomngcele owodwa wethebula lemizila; i-transit gateway yengeza owesibili. Isimemezelo esilungile nethebula elingalungile kukhiqiza isikhathi esibonakala siphilile futhi singalethi lutho.
Memeza isiqalo igesi engasiletha ngempela
Igesi yendawo idinga indlela eya kunethiwekhi entsha ngaphambi kokuba noma isiphi isimemezelo sibe nencazelo. Ukumemezela i-10.70.0.0/16 nge-BGP sitshela i-AWS ukuthi amaphakethe alelo banga ayo kuphi; asidali indlela yokudlulisela yendawo eyenza ibanga lifinyeleleke kwelinye uhlangothi. Qinisekisa ukuthi igesi inendlela yesiqalo ekhomba kudivayisi ebamba isiqalo, nokuthi idivayisi ilungiselelwe ukuphendula kuleyo mikhele. Umgomo wokuthumela ngaphandle kanye nemikhawulo yesiqalo eyamukelekayo ingumkhawulo olandelayo, ngoba isiqalo esihlungwa isikhathi asifiki neze ku-AWS.
Gcina ama-aggregate nemizila eqondile ngamabomu. Izindlela ezihlangana ezivela ezinhlangothini ezimbili ziyisinqumo sokuklama, akuwona umininingwane otholakala kamuva.
Indlela yokuqala: umngcele wegesi yangasese ebonakalayo
Ngegesi yangasese ebonakalayo, imibhalo yokuhola ye-AWS VPN ichaza izindlela ezimbili zokusabalalisa, imizila emile kanye nezimemezelo ze-BGP, futhi zombili zincike kuthebula lemizila lesubneti elisetshenziswa ngempela uhlelo. Ukusakazeka kulula uma ulawula lonke ibanga, futhi indlela ecacile kulula ukuyicabanga uma ufuna indawo ekuyiwa kuyo ibalwe eduze komgomo. Kunoma yikuphi, ukuhlola kuyafana: ingabe ithebula lesubneti ethile yohlelo linendlela esebenzayo eya emgomeni we-VPN wesiqalo esisha, futhi ingabe iyanqoba kunoma yini eqondile kakhulu?
Isikhathi se-BGP esiphilile sifakazela ukuthi umsele ukhona. Asisho lutho mayelana nokuthi ithebula lesubneti elithile lasithatha yini umzila.
Indlela yesibili: i-transit gateway yengeza ithebula
I-transit gateway ihlukanisa lowo mbuzo owodwa kubabili. Isubneti ye-VPC kufanele ithumele indawo ekuyiwa kuyo esixhumanisini se-transit gateway, bese ithebula lemizila ye-transit gateway kufanele ikhethe isixhumanisi se-VPN saleso siqalo. Izinqumo zokuxhumanisa nokusabalalisa zinquma ukuthi yimaphi amanethiwekhi axhunyiwe athola umzila, ngakho isiqalo singamenezwa ngendlela efanele yi-VPN futhi singafiki neze kuleyo VPC ithebula layo elingakaze lixhunywe nethebula lemizila elifanele.
Ukwehluleka okuvamile umzila okhona kuthebula elilodwa kodwa ongekho kwelinye , kanti iqembu ngalinye liqinisekile ukuthi uhlangothi lwalo lulungile. Uma uqhathanisa izakhiwo ezimbili, lowo mngcele owengeziwe uyiwona mehluko wonke: izindawo eziningi zokubheka, nokuphathwa okunembile kokuthi ubani uthola umzila.
Ukusabalalisa imizila nakho akunikezi wonke isixhumanisi isiqalo. Kuyisabalalisa emathelini alungiselelwe ukuyithola.
Indlela yokubuyela iyisinqumo sayo somgomo
Ithrafikhi engenayo iyingxenye eyodwa kuphela yokushintshana. Inethiwekhi entsha yendawo idinga indlela yokubuyela eziqalweni zomthombo ze-AWS ngokusebenzisa igesi efanele, futhi umgomo wokuphepha ezinhlangothini zombili kufanele uvume leyo ndawo yomthombo nendawo ekuyiwa kuyo. Uma ithuneli lixoxisana nobubanzi bokuvikela ngezikhombi zethrafikhi, isiqalo esisha kufanele sibe ngaphakathi kwaso, ngaphandle kwalokho iphakethe liyalahlwa ngaphambi kokuba kubhekwe noma yiliphi ithebula lemizila.
Ukuhlangana kwamakheli kungenye ingibe. Amabanga ahlukene anobunikazi obucacile agcina lokhu kulula; amabanga ahlanganayo asho ukuhumusha noma ukuklama kabusha, futhi akukho kukodwa okuwuhlobo olushintshiswayo lweresiphi efanayo.
Hlola ngomthombo kunethiwekhi entsha nendawo ekuyiwa kuyo kusubneti yohlelo, bese uphinda ngakolunye uhlangothi. Ukuhlola kohlangothi olulodwa kufakazela uhlangothi olulodwa kuphela.
Lapho i-proxy iwumngcele ongcono ngempela
I-proxy ithola indawo yayo lapho imfuneko iyisixhumanisi sesevisi esincane, lapho uhlelo selulindele leso sakhiwo, noma lapho indlela yenethiwekhi ingenakwenziwa ithwale isiqalo ngaphandle kokuhumusha ongakufuni. Akuyona isisombululo esiyisipele sokufakwa kwethebula lemizila okungekho muntu okuhlolile.
Nquma ngalokhu kulandelana: ukudlulisela kwendawo, isimemezelo, umngcele wethebula, umgomo wokubuyela. Lungisa okokuqala okwehlulwayo, bese kuthi kuphela ubuze ukuthi ingabe indlela eqondisiwe iyona impendulo efanele.