Ukuqapha kwe-VPN ye-Azure Site: hlanganisa isimo somhubhe nokuhlolwa kwangempela

Yonke idashibhodi iluhlaza, umhubhe ungenile izinsuku eziyishumi nanye, kodwa igatsha alikwazi ukulayisha uhlelo lwangaphakathi. Lesi yisimo okwadalelwa sona lo mklamo, futhi akulona iphutha lokuqapha. Isimo somhubhe siphendula umbuzo mayelana nokuxoxisana, kuyilapho umsebenzisi ebuza ngombuzo odlula izinqumo ezine zomzila kanye nongqimba womgomo. Udinga izimpawu zombili, zigcinwe zehlukene, nendlela yokuzihlukanisa phakathi nobusuku.

Qala ngesimo esihlulekayo, hhayi ngomhubhe

Ubudlelwano bokuphepha obusunguliwe busho ukuthi izinhlangothi zivumelene ngesiphakamiso futhi zafaka okhiye. Akusho ukuthi izikhethi zihlanganisa isubnet edingwa umsebenzisi, ukuthi uhlangothi olukude lunendlela yokubuya, noma ukuthi i-firewall yamukela imbobo ngemva kokunciphisa ukubethela. Ithrafikhi ingase yehluleke ohlangothini lwegatsha lomhubhe, bese kuthi i-Azure ingaboni lutho futhi ibike impilo ephelele. Isilinganiso somhubhe siyadingeka futhi asikaze sanele.

Izimo ezintathu kufanele zihlukaniswe: umhubhe uphansi, umhubhe uphezulu kodwa insiza iyahluleka, kanye nomthombo wokuqapha ngokwawo awutholakali.

Beka ukuhlolwa lapho abasebenzisi bakhona

Ohlelweni olusuka egatsheni luye ku-Azure, sebenzisa ukuhlolwa kokwenziwa kusuka kusibambi esikusebenza kwengcingo yegatsha futhi ukubhekise endaweni yokungena ye-HTTPS eyimfihlo abasebenzisi abayifinyelela ngempela. Ukuhlolwa okuqalwa kusuka esangweni kusebenzisa ikheli lomthombo elihlukile futhi ngokuvamile indlela ehlukile yomgomo, ngakho kungase kudlule kuyilapho wonke umsebenzisi ehluleka. I-Azure Connection Monitor isekela ukuhlolwa kwe-TCP, ICMP ne-HTTP ngamaqembu okuhlola kanye nemikhawulo, futhi imithombo yayo yasendaweni inezidingo ze-ejenti ezihlukile kulezo ezisehlangothini lwe-Azure. Hlola ukuhlelwa okusekelwayo njengamanje esikhundleni sokukopisha iresiphi yakudala yokuqapha eseyekiwe emabhulogini.

Gcina ukuhlolwa kuncane futhi kuyisicefe: indawo eyodwa, imbobo eyodwa, imvamisa ehambisana nesidingo sokusebenza, kanye nomthetho wemvume ocacile walowo mthombo.

Khetha ukuhlolwa okuhambisana nensiza

Ukuxhumana kwe-TCP embotsheni yensiza kufakazela ukufinyeleleka kokuthutha emhubheni futhi akusho lutho nge-TLS noma ngohlelo. Ukuhlolwa kwe-HTTP kwengeza okulindelekile kwesimo futhi kubamba isilaleli esamukela ukuxhumana kodwa singakwazi ukukhonza, okuyiphutha elivame kakhulu ngemva kokushintsha isitifiketi noma i-backend. Akukho kokubili okuwukuthengiselana kwebhizinisi okuqinisekisiwe ngaphandle uma ukuhlolwa kuqinisekisa ngempela, ngakho ungakufaki ilebula kanjalo kudashibhodi. Khetha ukuhlolwa okwehluleka lapho isikhalo somsebenzisi senzeka.

I-ICMP iyinketho ebuthakathaka kakhulu kwezintathu, ngoba izitaki eziningi ziyilahla ngokomgomo futhi i-ping ehlulekile ifakazela okuncane kakhulu.

Letha izimpawu zombili ku-Elastic ngaphandle kokuqamba

Isango le-VPN sikhipha izilinganiso zeplatifomu njengamabhayithi okuphuma nokungena komhubhe kanye nezibali zokulahleka kwamaphakethe, futhi singathumela amarekhedi okuxilonga ezigabeni ezihlanganisa imicimbi yomhubhe ne-IKE. Imiphumela ye-Connection Monitor ifika nge-Azure Monitor njengezilinganiso nangendawo yokusebenza ye-Log Analytics njengamarekhedi. Akukho kulokhu okuzivelela ku-index ye-Elastic. Khetha ipayipi elilodwa elisekelwayo lezilinganiso nelinye lamarekhedi, ngokuvamile okokufaka kwe-Azure Event Hub noma ukuhlanganiswa kwe-Azure Monitor, futhi uqinisekise ukuthi ukuhlanganiswa okufakiwe kuthatha ini ngempela ngaphambi kokuthemba iphethini ye-index.

Gcina amalebula avumela umqhubi ukuhlanganisa amasethi amabili edatha: iphoyinti lokuphela lomthombo, indawo, iphrothokholi nembobo yokuhlolwa, kanye nobuwena bomhubhe nekheli lozakwabo lesango.

Qinisekisa ipayipi ngomcimbi owodwa olawulwayo, bese uwuthola ku-Elastic futhi uhlole isitembu sakho sesikhathi namalebula ezinsiza. Idokhumenti enesitembu sesikhathi esingalungile imbi kunaleyondlela, ngoba yenza idatha endala ibonakale njengamanje.

Xwayisa ngomehluko, hhayi ngombala

Injongo yokugcina izimpawu ezimbili iyizinhlanganisela. Umhubhe uphansi kufanele ubize umnikazi wenethiwekhi; umhubhe uphezulu nokuhlolwa okuhlulekile kufanele kubize umnikazi wohlelo; umphumela wokuhlolwa ongekho kufanele ubize lowo ongumnikazi we-ejenti yokuqapha. Ukuhlanganisa konke lokhu kudashibhodi elilodwa elibomvu kuqinisekisa ukuthi isexwayiso sizothuliswa phakathi nenyanga. Xwayisa ngokwehluleka okuqhubekayo ngewindi lokuqina esikhundleni sesampula eyodwa, futhi wengeze ukuhlolwa okuhlukile kwempilo yepayipi lokungenisa ngokwalo.

Idashibhodi eligcwele amasampula aphumelele izolo akufanele lifundwe njengendlela enempilo namuhla.

Lapho kubhalwa phansi, isivumelwano sincane: isilinganiso somhubhe sisho ukuthi isango laxoxisana, ukuhlolwa kusho ukuthi indlela iyasebenza lapho abasebenzisi behlezi khona, futhi impilo yepayipi isho ukuthi ngabe eyiphi impendulo esemanzini. Konke okunye kudashibhodi kungukuphawula.