I-Peering ye-Azure noma i-VPN isuka ku-VNet iye ku-VNet? Nquma ngaphambi kokuhlela umzila

I-Azure ikunika okungenani izindlela ezimbili zokuxhumanisa amanethiwekhi amabili angokoqobo, futhi lezi akuzona izilungiselelo ezishintshayo entweni eyodwa. I-Peering ixhumanisa ama-VNet emgqeni omkhulu we-Microsoft ngaphandle kwesango; i-VPN isuka ku-VNet iye ku-VNet ibeka ubudlelwano be-IPsec phakathi kwamasango amabili owasetshayo, owalinganisa futhi owaqaphelayo. Isinqumo sehla emibandelezweni emithathu, futhi uma ungeke ukwazi ukuphendula yomithathu ngaphambi kokwengeza umzila, usuzokwakha indlela yokuzungeza yemodeli ongakaze uyikhethe.

Imibandelezwe emithathu enquma imodeli

Owokuqala ukuthi ngabe kukhona okudingayo okudinga umngcele we-IPsec ongowakho futhi ongakhomba kuwo. Owesibili ukuthi izikhala zamakheli zihlanzekile futhi ama-VNet amabili adinga ukukhuluma kuphela. Owesithathu ukuthi ubani ongumnikazi wanoma yimuphi umzila wokudlula kanye nebhili yesango. Phendula ngalolo hlelo, ngoba owokuqala ungase ususe i-peering kungakhathaliseki ukuthi owesibili ubonakala uheha kangakanani.

Okwabiwe yimodeli zombili umthetho oqinile wamakheli: izikhala zamakheli ze-VNet akumele zidlulane. I-Peering noma i-VPN isuka ku-VNet iye ku-VNet akuzona izindlela ezisekelwayo zokwenza izigaba ezimbili ezifanayo zicace, futhi ukudlulana kudinga idizayini yemephu noma ukuhlelwa kabusha, hhayi olunye uhlobo lokuxhumana.

Umbundelezwe 1: ingabe udinga umngcele we-IPsec ongowakho?

I-Peering ithwala ithrafikhi emgqeni omkhulu wangasese we-Azure futhi ayidingi isango le-VPN kulokho ukuxhumana kwe-peered uqobo. Lesi isitatimende mayelana nokuthutha, hhayi isitatimende mayelana nokubethela ongayinika umhloli ngokuthi «sisebenzisa i-IPsec». Uma isidingo sisho ithuneli elilungiselelwe ikhasimende, inqubomgomo ethile ye-IKE noma umngcele ogcina emishinini oyilawulayo, i-peering ayikufezi, kungakhathaliseki ukuthi umgqa omkhulu ungasese kangakanani.

I-VPN isuka ku-VNet iye ku-VNet inikeza lowo mngcele: amasango amabili, ubudlelwano be-IPsec/IKE, okhiye ababiwe kanye nayo yonke indawo yokusebenza ehamba nakho. Uzuzwa ifa lesimo sethuneli, umthamo wesango, imikhawulo ye-SKU kanye nokugadwa okufakazela ukuthi ithuneli iyasebenza. Yilokho impendulo efanele uma isidingo sikhuluma ngqo ngalowo mngcele, ochazwe ku-umbono jikelele we-peering njengohlobo lokuxhumana oluhlukile ku-peering.

Qaphela ngokulinganayo kolunye uhlangothi. «Sidinga ukubethela phakathi kwama-VNet» kuvame ukwaneliswa i-TLS yomsebenzi uqobo, bese isango liba yindleko ngaphandle kwesidingo esingemuva. Bhala umusho umhloli azowufunda ngaphambi kokukhetha indlela.

Umbundelezwe 2: ingabe ukuhleleka kuqondile, noma kukhona okudinga ukudlula?

I-Peering ayidluli. Ama-VNet amabili a-peerwe esiteshini awaxhumekile ngalokho, futhi umzila obonakala usebenza ohlangothini olulodwa uvame ukuba i-peering efinyelele i-Connected ohlangothini olulodwa kuphela. Izinhlangothi zombili kumele zibe khona futhi zombili zibonise i-Connected, futhi yilokho okokuqala okuhlolayo lapho ithrafikhi inyamalala buthule.

Uma isidingo siwukufinyelela kunethiwekhi yasendaweni ngesiteshi, ukudlula kwesango kuwukuhleleka okuhlukile okunezindima ezithile: isiteshi singumnikazi wesango, i-peering yesipikha ivumela ukudlula kwesango, futhi isipiko kumele sivume ithrafikhi edlulisiwe. Lezi izici ku-peering, hhayi imiphumela ezenzakalelayo yokuxhumanisa ama-VNet:

az network vnet peering create -g hub-rg -n hub-to-spoke1   --vnet-name hub-vnet --remote-vnet /subscriptions/SUB/resourceGroups/spoke-rg/providers/Microsoft.Network/virtualNetworks/spoke1-vnet   --allow-vnet-access --allow-gateway-transit --allow-forwarded-traffic

az network vnet peering list -g hub-rg --vnet-name hub-vnet -o table
az network nic show-effective-route-table -g spoke-rg -n app-nic -o table

Ithebula lomzila elisebenzayo liyimpendulo eqotho ku-«ngabe umzila ukhona?». Likhonisa uhlobo lwesinyathelo esilandelayo iplathifomu ezolisebenzisa ngempela, ngakho i-peering ebonakala ilungisiwe kodwa ingaxhunyiwe ivela njengomzila ongekho noma ongafanele, hhayi njengemfihlakalo.

Umbundelezwe 3: ubani ongumnikazi womzila wokudlula kanye nebhili?

Isinyathelo ngasinye esengeziwe sinomnikazi. Ku-peering, i-VNet entsha isho ipheya elisha le-peering kuzo zombili izinhlangothi futhi, ekudluleni, isiteshi esiqhubeka sidlulisa ithrafikhi kanye nethebula lomzila eliqhubeka likhomba kuso. Ku-VPN, i-VNet entsha isho elinye isango noma okunye ukuxhumana esangweni elikhona, nomkhawulo walo womthamo okumele ugadwe.

Izindleko zilandela isimo esifanayo kodwa hhayi izinto ezifanayo: izindleko ze-peering ukuxhumana nokudluliswa kwedatha, kuyilapho i-VPN ingeza amahora esango kanye nezindleko zayo zokudluliswa. Qhathanisa isamba sokuhleleka ozokusebenzisa ngempela unyaka, kufaka ithuneli lesibili nokugadwa, hhayi intengo yokuxhumana okukodwa namuhla. Faka umsebenzi ongabhalelwa yinoma ubani: othile kumele aguqule okhiye, abheke isimo sethuneli futhi aphendule isixwayiso ngesithathu ekuseni lapho isango liqala kabusha. Yileso sici esivame ukunquma ingxabano, ngoba yisona sodwa esingaveli kunikezelo lwentengo.

Noma yini oyikhethayo, hlola imisakazo emithathu: eyayihlosiwe, eyenqatshiwe okumele ihlale inqatshiwe, kanye nesimo sokubuyisela lapho isango lesiteshi noma i-peering yehlile. Imodeli echaza kuphela umzila ojabulisayo ayikaqinisekiswa, ikhonjisiwe.

Qinisekisa ukukhetha ngokumelene nesitatimende sako

Bhala umusho owodwa osho imodeli, umngcele kanye nomnikazi, bese uhlola ukuthi isimo esisetshenzisiwe siyahambisana. Ku-peering lokho kusho ukuthi zombili izimo ze-peering ziku-Connected, umzila osebenzayo ukhonisa isinyathelo se-peering esilandelayo sesiqalo sendawo, futhi akunasango emzileni. Ku-VPN isuka ku-VNet iye ku-VNet kusho ukuthi zombili izixhumanisi ziku-Connected, okhiye nezinqubomgomo kuyahambisana kuwo womabili amasango, futhi umzila onesinyathelo esilandelayo okuyisango lenethiwekhi engokoqobo.

Uma ukuhlola kuphikisana nomusho, lungisa umusho kuqala. Iningi lokudideka kulezi zinhlelo livela ku-hybrid ongachazwanga muntu: i-peering yesubneti yomsebenzi, i-VPN yensizakalo eyodwa endala kanye nethebula lomzila elikhetha ngasese elinye lawo.