Amakheli e-BGP e-Cloud VPN angaphakathi kwethumbu, hhayi kukhadi lenethiwekhi
Ipheya le-BGP le-Cloud Router le-HA VPN liseduze ngaphakathi komzila we-IPsec. Yilande yehle kusitaki esikhundleni sokwengeza ikheli le-link-local kusixhumi se-VM.
Vula ikhasi le-Cloud Router le-VPN bese kuba nesikhathi se-BGP esinekheli ku-169.254.0.0/16 esikubuka. Ukusabela okwemvelo ukubeka lelo kheli kwenye indawo ku-VM bese ulinda ukuthi isikhathi sikhuphuke. Lokho kusabela akulungile ngendlela ethile: le pheya ingeyokuxhumana okunengqondo okwakhiwa yithubhu le-IPsec, hhayi ingeyokuxhumana okuvamile kwenethiwekhi yomshini. Akukho okwengezayo ku-NIC okwenza ithumbu lithwale i-BGP.
Yilande ipheya yehle kusitaki esikhundleni sokuyengeza kusibungu.
Qala lapho ikhonsoli ikhombisa khona ipheya
Ikhasi lesikhathi libala ikheli le-BGP le-Cloud Router nekheli lozakwabo, womabili ayi-link-local ku-HA VPN ye-IPv4. Eceleni kwawo kunamakheli esango angaphandle aqeda amathumbu. Lezi yizinto ezihlukene: ipheya ye-link-local ihlala ngaphakathi, kanti amakheli esango ahlala ngaphandle futhi kufanele akwazi ukuhamba ngaphambi kokuba enye into isebenze.
Bhala womathathu ngaphambi kokuvula ifayela lokumisa, ngoba ukuwaxuba kuyindlela yonke yokwehluleka.
Yehluka uye ethumbwini eliyithwalayo
Ipheya ye-link-local inencazelo kuphela uma kukhona ukuhlangana kokuphepha kwe-IPsec phakathi kwamasango amabili. Ohlwangothi lwe-Google amathumbu e-HA VPN ayidala kuzixhumi ezimbili; ohlangothini lwakho yilokho okuvunyelwene nguzakwabo. Qala uhlole ukuhlangana kwedatha nge-swanctl --list-sas bese ubhala ukuthi iyiphi ithumbu ephakeme kusiphi isixhumi, ngoba isikhathi se-BGP esinempilo phezu kwethumbu elifile asinakwenzeka futhi ithumbu elifile elinomiselo onethemba livamile.
Iphakethe le-BGP iwukuhamba kwe-IP kwangaphakathi. Inethiwekhi yangaphandle ayilokothi iyibone, ngakho akukho switch edinga womabili amakheli ku-VLAN eyodwa.
Manje misa uzakwabo we-Linux ukuze afane
Khetha umklamo wethumbu osekelwe bese uyeka unqume amakheli angaphakathi. Ngesixhumi esisekelwe emzileni, umugqa womzila kanye nezikhethi zokuhamba ekuvunyelwene ngazo kufanele zivumelane, ngoba igama lesixhumi lilodwa alivumeli lutho. Qondisa i-BIRD ekhelini lendawo langaphakathi nekhelini langaphakathi le-Cloud Router, setha izinombolo ze-AS kusukela ekhasini lesikhathi, futhi uvumele i-TCP 179 ngaphakathi komzila ovikelwe. Gcina umzila oya ekhelini langaphandle elikude ku-uplink yomzimba ukuze ithumbu lingabambi ezalo ukuhamba.
Ithumbu elizihambisa lona lingumjikelezo onokuxhawana, futhi lizobonakala njengenkinga yodonga lomlilo ihora lonke.
Hlola isigaba ngasinye ngokulandelana, hhayi konke ngesikhathi esisodwa
Dlula ezigabeni: ukuhlangana kokuphepha kuphezulu, uzakwabo wangaphakathi uyafinyeleleka ekhelini lethumbu, isikhathi se-BGP sisekiwe, iziqalo zamukelwe, bese kusetshenziswe isiqalo somthwalo womsebenzi ngempela. I-birdc show protocols iphendula umbuzo wesithathu kuphela, yingakho abantu bememeza ukunqoba kusenesikhathi.
Uzakwabo osekiwe akaqinisekisi ukuthi izinhlangothi zombili zamemezela iziqalo ozidingayo, noma ukuthi leyomizila yafakwa njengekhethwayo.
Uma isikhathi sisekiwe futhi ukuhamba kusadlula emzileni ongafanele, qhathanisa iziqalo ezimemezelwe nalokho okwenziwa ithebula lomzila ngazo. Umzila oqondile kakhulu kwenye indawo, noma ukukhetha omunye umzila, kukunika isikhathi se-BGP esisebenzayo futhi akukho ukudluliswa okuwusizo.
Yima ngaphambi kokusebenzisa lokhu ku-Router Appliance
I-Network Connectivity Center Router Appliance iwumklamo wokuxhuma ohlukile. Ozakwabo be-Cloud Router bayo basebenzisa amakheli angaphakathi avela ekuhlelweni kwe-VPC nesizinda esincane esikhundleni sepheya ye-link-local ye-HA VPN. Uma umgomo wangempela kuyi-BGP ne-VM yomzila, landela izidingo zesixhumi zalowo mkhiqizo esikhundleni sokukopisha isikhathi se-link-local.
Ububanzi be-link-local busachaza lokho elikushoyo. Ithumbu elinengqondo linikeza lobu bukomkhawulo, futhi aliniki ilayisense yokuhambisa izindawo ze-link-local ezingafanele kulo lonke i-VPC.