I-Cassandra nge-VPN: ukufinyelela okwehlukile kwabaklayenti namanodi

Ukufakwa kwe-Cassandra akunalo inethiwekhi eyodwa yedatha esetshenziswa yonke. Izinhlelo zikhuluma nensizakalo yeklayenti, amalungu eqoqo akhuluma omunye nomunye, futhi abaqhubi basebenzisa izixhumanisi zokuphatha, futhi lezi zethameli ezintathu akufanele zidlule ifa lokufinyeleleka komunye nomunye. Indlela eyimfihlo efana ne-VPN iyisiqalo esihle, kodwa akuwona ubunikazi bomsebenzisi bedatha futhi akuwona umgomo wayo wokubethela. Thatha isinqumo sokuxhumana nesinqumo sokugunyazwa njengokubuyekezwa okubili okwehlukile.

Isethameli ngasinye kwezintathu sithola impendulo yaso, futhi izigaba ezingezansi zizithatha ngokulandelana kokuchayeka.

Izethameli ezintathu, izinqumo ezintathu

Khomba ukuthi iqembu ngalinye lidinga ini ngempela ngaphambi kokuthinta umthetho. Abaklayenti badinga isilaleli sekhayenti nolwazi olwanele lokufinyelela inodi ngayinye abangayithola, amanodi angabalingani adinga omunye nomunye embobeni ye-internode, futhi abaqhubi badinga isixhumanisi sokuphatha salokho okudingwa i-runbook ngempela. Izinhlu ezintathu, izethameli ezintathu, amazinga amathathu okwethemba.

Iphutha elijwayelekile ukwakha ingxenye eyodwa eyisicaba yomuntu siqu bese ucabanga ukuthi umngcele we-VPN uzokwenza okunye. Ngaphakathi kwayo, uhlelo olufinyelela imbobo yeklayenti ngokuvamile lufinyelela nembobo ye-internode, futhi amathuluzi okuphatha omqhubi avame ukuhlala kusibungu sokugxuma esifanayo nohlelo. Ukubenza babe yisicaba ndawonye kusho ukuthi ubunikazi bohlelo obugxiliwe sebudlule ifa lokufinyelela okukhulu kunezicelo zaso. Dweba izethameli ezintathu njengemigqa emithathu kudokhumenti yokuklama, umugqa ngamunye unomthetho owuvumelayo, futhi izikhala zizobonakala ngaphambi kokuthi noma ubani azakhe.

Okudingwa abaklayenti, futhi akukho okunye

Vumela imithombo yohlelo ehlosiwe ukufinyelela iziphetho zeklayenti zenguqulo esetshenzisiwe, futhi gcina izinsizakalo zeqoqo nokuphatha ezingahlobene ngaphandle kwalokho kufinyelela. Bese uhlola ukuthi umshayeli uthola kanjani amanodi. Iphedi lokuqala lokuxhumana elifinyelelekayo alifakazeli ukuthi ikheli ngalinye lenodi umshayeli alikhethayo kamuva liyafinyeleleka kusuka kuleso simo sekhayenti, ngoba umshayeli ubuza iqoqo ngabalingani bese exhumana namakheli iqoqo eliwamenyezelayo.

Yingakho ukungafani kwekheli elilodwa lomuntu siqu kukhiqiza iphethini ejwayelekile: ukuxhumana kokuqala okuphumelelayo kulandelwe ukuphela kwesikhathi. Hlela amakheli amenyezelwe nokuqondisa kwekhayenti ngamabomu; ukushicilela lonke iqoqo kuyi-inthanethi ukulungisa ukungafani okukodwa kushintsha iphutha lokuqondisa ngokuchayeka ongeke ukwazi ukukubuyisa.

Gcina futhi ukuqinisekiswa kwedatha nezimvume zezindima zohlelo. Ikheli le-VPN elihunyushiwe elabelwana ngabaningi lingamela abasebenzisi abaningi noma izinsizakalo, ngakho alikaze libe isikhundla sobunikazi obuhlukile bedatha.

Bethela ngokwehlukile ikhayenti-kuya-kunodi ne-internode

Idokhumenti yokuphepha ye-Apache ibheka ukubethela kwekhayenti-kuya-kunodi ne-internode njengezilungiselelo ezihlukile, futhi ukuvula okukodwa akukuvuli okunye. Lowo mehluko usasebenza ngaphakathi kwe-VPN, ngoba umhubhe uvikele ingxenye yawo futhi awusakazeki ngokuzenzakalela kusuka kunqubo yohlelo kuya kunqubo yedatha noma phakathi kwabalingani ababili abangamalungu eqoqo.

Isilungiselelo esivula kokubili ngokusobala, esikhundleni sokudla ifa lesimo esizenzakalelayo sethempulethi, sibonakala cishe kanje:

client_encryption_options:
  enabled: true
  optional: false
server_encryption_options:
  internode_encryption: all

Kuzilungiselelo zeseva ezivumela ukubethela kwekhayenti okuzikhethelayo, ukwamukela i-TLS kungahlala kanye nokwamukela ukuxhumana okungabethelwe, ngakho funda umgomo osebenzayo hhayi inhloso. Hlela amagama ezitifiketi, ukusatshalaliswa kokwethemba nokuvuselelwa kweziphetho uhlelo ngalunye oluxhumana ngempela nazo; ukushintsha igama lomsingathi ngekheli le-IP kushintsha ukuhlola kobunikazi bekhayenti, hhayi indlela yalo kuphela.

Gcina ukuphatha endleleni yako

Ithrafikhi ye-internode idinga isethi evunyelwe yabalingani nomgomo wayo wokuvikela. Ukufinyelela kokuphatha, kuhlanganise ne-JMX lapho kusetshenziswa khona, kudinga isethameli esihlukile nokuqinisekiswa kwako. Uhlelo oluvunyelwe ukukhipha izicelo ezijwayelekile aludingi ngenxa yalokho wonke amandla okuphatha, futhi okuphambene nakho kubi kakhulu: indlela yokuphatha evezwe engxenyeni yohlelo iyindlela emfushane kusuka ephutheni kuya ekwakhiweni kabusha. Bhala lezo zethameli ezimbili ngokwehlukile futhi usho abanikazi bazo, ngoba ngokuvamile bangamathimba ahlukile imithetho yawo ehlanganiswe ngengozi.

Gcina imithetho esebenzayo yefu, imithetho yomsingathi nesilungiselelo sesilaleli kuhambisana. Isilaleli esiyimfihlo sisengavezwa ngokuhunyushwa noma nge-proxy engahlosiwe, futhi umthetho obanzi womphakathi ungahlala buthule eceleni komthetho we-VPN omncane kuze kube umuntu uhlola kokubili ngasikhathi sinye.

Lapho abaqhubi bedinga ngempela indlela yokuphatha, yinike umnikazi oqanjwe ngegama nesikhathi esifushane semifakazo yezitifiketi kunokwasehlelweni. Lokho kugcina ukuthunyelwa kubonakala lapho umuntu olandelayo ethola iqoqo njengefa.

Okuthenjiswa ukuklama

Qinisekisa zonke izithembiso ezintathu ngezindima zangempela hhayi ngezivivinyo zokuxhumana kuphela. Uhlelo olugunyaziwe kufanele luqede umsebenzi wabo ovunyelwe futhi kungabi okunye, umthombo okhishiwe kufanele wehluleke ekungeneni kwekhayenti, futhi ubunikazi bohlelo kufanele bunqatshwe ezindleleni zokuphatha ezigciniwe. Engeza ukuxhumana kabusha kwekhayenti nokukhethwa kwenodi esivivinyweni esifanayo sokwethulwa, ngoba yilapho iziphambeko zokuthola zivela khona.

Qeda ngemisho emithathu kudokhumenti yokuklama: abaklayenti bani abangabuza, amanodi ani angakwazi ukuxhumana, futhi abaqhubi bani abangaphatha. Ukuba ngemuva kwe-VPN kuwulwazi lwesakhiwo olusizayo, kodwa akusiyo impendulo kuyo yonke imibuzo emithathu.