I-Azure VM eyodwa idinga umhubhe: iklayenti lesivakashi noma isango le-VPN?
Izimo ezintathu zinquma ukuthi i-Azure VM eyodwa kufanele isebenzise iklayenti layo le-VPN noma ukuxhumana kungaphansi kwesendlalelo senethiwekhi.
Umsebenzi owodwa ku-Azure VM eyodwa kufanele ufinyelele inethiwekhi eyimfihlo ngomhubhe. Umbuzo onquma umklamo akuwona ukuthi iyiphi imikhiqizo ye-VPN engcono, kodwa ukuthi ngabe enye imshini izowudinga yini lowo mzila. Phendula lokho kuqala futhi okunye ukwakheka kuvame ukuzikhethela. Uma wenza iphutha, uzothola njengefa i-VM eyaphenduka buthule yaba umhleli wezindlela okungekho noyedwa owabhala phansi.
Imisebenzi emibili ebukeka ifana
I-VM ingaba yindawo yokugcina noma indawo yokudlulisa, futhi umehluko akuwona isoftware oyifakayo kodwa ukuthi ngubani osebenzisa umhubhe. Njengendawo yokugcina, isivakashi sisebenzisa iklayenti lezinqubo zaso. Njengendawo yokudlulisa, idlulisela amaphakethe eminye imisebenzi, okwenza ibe yingxenye yokuhlelwa kwenethiwekhi yakho.
| Umsebenzi | I-VM yenzani | Ubani onomhleli wezindlela |
|---|---|---|
| Indawo yokugcina yomsebenzi | Isebenzisa iklayenti elisekelwayo lezinqubo zayo | Izindlela zesivakashi zikhetha izindawo ezigunyaziwe |
| Ithuluzi lokudlulisa | Idlulisela eminye imisebenzi ekuxhumaneni kwesayithi | Amathebula emizila ye-subnet, ukudluliswa kwe-NIC, inqubomgomo yesivakashi nemizila yokubuyela |
Iningi lezicelo ze-VM eyodwa umsebenzi wokuqala ogqoke ulimi lwesesibili. Othile uthi “i-VM iyi-VPN yethu” lapho esho ukuthi uhlelo lokusebenza olulodwa kuyo kufanele lufinyelele isizindalwazi kolunye uhlangothi.
Isimo sokuqala: ingabe okunye kudinga uhlangothi olukude?
Uma impendulo ingu-cha, faka iklayenti esivakashini bese uyeka ukuklama. Akukho lutho kulokho kukhetha okudinga isango elilawulwayo, futhi akukho lutho olwenza i-VM ibe isango komakhelwane bayo. Wengeza umzila ngaphakathi kwesistimu yokusebenza eyodwa.
Uma impendulo ingu-yebo, noma cishe yebo phakathi nonyaka, kubheke njengomklamo wenethiwekhi manje. Amanye ama-VM afinyelela i-VM yokudlulisa kuphela lapho ithebula lemizila ye-subnet liwathumela khona futhi i-NIC yamukela ithrafikhi edlulisiwe, ngakho umsebenzi amanthebula emizila nezimvume zokudlulisela, hhayi okunye ukufakwa kweklayenti.
Isimo sesibili: ingabe ungaqhubeka ugcina indlela yokuphatha?
Iklayenti le-VPN elifaka umzila obanzi lingabamba indlela oyisebenzisayo ukuphatha i-VM. Uma uhlu lwezindawo zomhubhe luhlangana nenethiwekhi yokuphatha, iseshini yakho ye-SSH noma ye-RDP iyawa ngomzuzu lapho iklayenti lixhuma, futhi ukulungisa kufanele kwenziwe ngekhonsoli ye-serial noma ngokwakha kabusha.
Hlola ngaphambi nangemuva. Ku-Linux, ip route get <management-ip> kukhombisa ukuthi iyiphi i-interface nomthombo i-kernel engakusebenzisa manje; qhathanisa nalokho nempendulo ngenkathi umhubhe uvuliwe. Umhubhe ohlukanisiwe onohlu olucacile lwezindawo kulula ukuwuvikela kunomzila ozenzakalelayo, futhi ngokuvamile yilokho umsebenzi okudinga ngempela.
Isimo sesithathu: ubani oxosha amaphutha phakathi nobusuku?
Iklayenti lesivakashi iyisistimu yakho yokusebenza, inguqulo yeklayenti lakho nezitifiketi zakho. Lokho kulungile uma usuvele uqhuba i-VM nomjikelezo wayo wokuxosha amaphutha. Lokho kuwukushintshana okubi uma i-VM ikhona kuphela ukuze ibambe umhubhe. Bala amahora okuxosha amaphutha ngaphambi kokubiza iklayenti lesivakashi ngokuthi ishibhile. Ukuthuthukiswa kweklayenti okudinga ukuqalisa kabusha ukuphazamiseka owakuhlela wena kwimshini ekhona ukuze umhubhe uhlale unjalo.
Isango elilawulwayo lihambisa lokho kunakekela epulatifomuni. Usengumnikazi wobunikazi, imvume nemizila yenethiwekhi engemuva kwayo, kodwa awuqalisi kabusha imshini ukuze usebenzise ukubuyekezwa kweklayenti.
Lokho isango elilawulwayo elingakwenzi
I-Azure VPN Gateway iyisevisi yokuxhumana kwe-VNet enezinhlelo zayo ze-site-to-site ne-point-to-site. Akusona isimiso esivimbela isoftware ye-VPN esivakashini, futhi akusona isikhundla esiqondile seklayenti elidingwa uhlelo lokusebenza olulodwa.
Lokho elikunikezayo ukuxhumana esendlalelweni senethiwekhi, okufinyeleleka yimisebenzi eminingi ngokuhlela izindlela. Lokho elingakunikezi umhubhe osebenziwe yinqubo eyodwa kuphela ku-VM eyodwa, futhi ukhawulelwe kubunikazi bale nqubo. Lokho kukhawulela akusona ukushoda okufanele kuxoliswe ngakho; yiyo kanye injongo yomklamo weklayenti lesivakashi. Uhlelo olulodwa, umzila owodwa, isethi eyodwa yezifakaziso, akukho mphumela kwamanye ama-VM ku-subnet.
Ngakho ukuqhathanisa akukona okulawulwayo ngokumelene nesoftware. Ukuxhumana kobukhulu benethiwekhi ngokumelene nokuxhumana kobukhulu benqubo, futhi okwesibili kusemthethweni lapho inqubo eyodwa kuphela ikudinga.
Hlela indlela yokukhula ngaphambi kokuba uyidinge
Uma isidingo sikhula sisuka ku-VM eyodwa siye ku-subnet, yakha kabusha umklamo esikhundleni sokwandisa iziqalo ezivunyelwe zeklayenti. Ukusebenzisa kabusha iseshini elula njengomhleli wezindlela ongabhalwanga kubopha wonke umsebenzisi empilweni yale-VM, kuzifakaziso zayo nasewindini layo lokuxosha amaphutha.
Indawo yokuqala efanele, lapho ukuxhumana kungokobukhulu benethiwekhi hhayi benqubo, yi-umbono jikelele we-Azure VPN Gateway.
Ngaphambi kokukhetha, bhala imigqa emithathu: yini edinga uhlangothi olukude, ubani uphatha i-VM, futhi ubani uxosha amaphutha kumhubhe. Uma izimpendulo zontathu zikhomba emsebenzini owodwa, iklayenti lesivakashi umklamo othembekile. Uma okukodwa kuzo kukhomba ku-subnet, klama isendlalelo senethiwekhi manje.