I-IP yangasese ye-Cloud SQL nge-VPN: umzila ongeke uphume

Amaqembu amaningi akholelwa ukuthi i-IP yangasese ye-Cloud SQL isebenza kuphela ngaphakathi kwe-VPC, futhi le nkolelo ihlala ngoba ukwehluleka kubonakala njengenkinga yesizindalwazi. I-Google ibhala ukufinyelela okuvela kunethiweki exhunywe nge-Cloud VPN noma i-Cloud Interconnect. Lezo nethiweki azidingi isici esikhethekile sesizindalwazi, kodwa zidinga ukushintshana kwemizila emibili okulula ukuyishiya isingxenye. Ithuneli liyaphakama, izigaba zokubala ziyaphendula, futhi ukuxhumana kwesizindalwazi kuphelelwa isikhathi — yikho kanye lokho okuthumela abantu kukhonsoli engalungile.

Inganekwane: i-IP yangasese isho ukuthi iyimfihlo ku-VPC

Ukufinyelela ezinsizeni eziyimfihlo i-VPC peering phakathi kwenethiweki yakho nenethiweki yomkhiqizi ephethwe i-Google. Ibanga elabiwe lensevisi likwelinye uhlangothi lomkhiqizi, futhi ikheli lesigaba lingaphakathi kwalo. Ngenxa yalokho peering, isizindalwazi esiprojekthini yakho singahlala ekhelini i-VPC yakho eqondisa kulo ngaphandle kokuthi noma yisiphi isubneti sakho esicacile siqukethe lona.

Njengoba kuyi-peering, kunokuziphatha kwe-peering futhi, kuhlanganise nengxenye lapho imizila yangokwezifiso ingadluli ngokuzenzakalela.

Inganekwane: ithuneli elisebenzayo lithwala umzila wesizindalwazi kanye nalo

Amabanga amabili kufanele adlule lolu hambo. Elokuqala isiqalo somthengi: inethiweki yakho yasendlini kufanele yaziwe i-Cloud Router ngeziqalo eziqondile, ngoba umzila ozenzakalelayo awukwazi ukunikeza ukungenisa okudingwa inethiweki yomkhiqizi endleleni yokubuya. Elesibili ibanga lesevisi elabiwe, okufanele lifundwe uhlangothi lwangaphandle ukuze amaphakethe alo aya esizindalwazini abe nendawo yokuya. Le mi izimila ehlukene egcinwa emingceleni ehlukene, futhi ukulungisa owodwa kushiya omunye uphukile.

Ohlangothini lwe-Google lokho kusho ukunika amandla i-Export custom routes kuzixhumo ze-peering ezifanele nokwengeza ibanga lesevisi elabiwe emizileni emenyezelwe yi-Cloud Router yethuneli.

Gcina izimemezelo esezivele zikhona. Ukwengeza ibanga lesevisi akufanele kususe imizila ye-VPC edluliswa yileso seshini ye-BGP yomunye umsebenzi, futhi isethi yezimemezelo eshintshwe yonke iwukuphazamiseka kwesibili okucashile ngemva kokuqala. Hlola futhi imizila esebenzayo kudivayisi yangaphandle, ngoba ukufinyelela isango le-VPN noma esinye isubneti kufakazela ukuthutha kuphela.

Inganekwane: i-Cloud SQL Auth Proxy ixazulula inethiweki

The Auth Proxy inikeza ukuqinisekiswa okusekelwayo nokuthutha okubethelwe phakathi kohlelo lwakho nesigaba. Akudali umzila. I-proxy eqalwa kusibungu esingenayo indlela eya kunethiweki yangasese izohluleka njengokuxhumana okuqondile, futhi amarekhodi ayo azoba usizo oluncane mayelana nesizathu. Ukuhambisa i-proxy kusibungu esinokuxhumana kushintsha ukuthi iyiphi ingxenye yomzila okufanele isebenze, futhi leso yisinqumo sangempela somklamo hhayi indlela yokugwema.

Lokho engakwenzi ukuvumela ikhompyutha ephathwayo engenakuxhumana ukufinyelela isigaba esiyimfihlo kuphela.

Inganekwane: i-Private Service Connect ilandela imithetho efanayo

I-Private Service Connect isebenzisa i-endpoint esubnetini yakho kanye nokuhlelwa kwe-DNS okulawulwa nguwe, ngakho umzila oya lapho uwumzila ojwayelekile oya ekhelini oliphethe. Izilungiselelo zokuthumela ngaphandle ze-peering azisebenzi kulo mklamo, futhi ukukopisha izinguquko ze-peering ekusetshenzisweni kwe-PSC kwengeza ingozi ngaphandle kokwengeza ukufinyeleleka.

Kokubili kunikeza ikheli eliyimfihlo; ukufana kuphela lapho.

Hlola umzila ngokulandelana okufanele

Kusukela kumthengi wangaphandle, hlola i-TCP endpoint yesizindalwazi kuqala. Ukuxhawula kwe-TCP okuqediwe kusho ukuthi ukuhlela umzila, isihlukanisi somlilo kanye nesilaleli kukhona, futhi ukuhlolwa okulandelayo umsebenzi ogunyaziwe oqinisekisiwe. Ukwenqatshwa kokuqinisekiswa ngaleso sikhathi empeleni kuyizindaba ezinhle, ngoba kufakazela ukuthi isilaleli sesizindalwazi siphendulile. Ukuphelelwa isikhathi kwe-ICMP akusho cishe lutho mayelana nokufinyelela kwesizindalwazi, ngoba imizila eminingi iyayilahla ngenkathi idlulisa i-TCP ngaphandle kwenkinga.

Uma amabanga akho omthengi engaphandle kwe-RFC 1918, buyekeza izidingo ezengeziwe zokuthumela imizila ngaphandle nokugunyaza inethiweki ngaphambi kokuphetha ngokuthi umklamo awusekelwe.

Rekhoda izinto ezine nokuxhumana: isiqalo sangaphandle, ibanga lesevisi elabiwe, izixhumo ze-peering ezihilelekile kanye nomhleli womzila omenyezelayo. Lezo zine zichaza wonke umzila oyimfihlo, futhi zithatha indawo yenganekwane yokuthi i-Cloud SQL ihlala idinga i-proxy noma ayifinyeleleki nhlobo nge-VPN.