I-VPN yasefini idinga i-BGP: kungani ezinye izinqubo zokuhambisa zihluleka

Inhlangano yezokuphepha ye-IPsec ivuliwe, izibali zomhubhe ziyahamba, kodwa ithrafikhi eya esiqalweni sasefini iyanyamalala. Umsebenzi-ngqondo ube esezama ukunika amandla i-OSPF kumhambisi wekhasimende, elindele ukuthi umakhelwane akheke, futhi akukho okwenzekayo. Umhubhe awuzange ube yingxenye engekho: i-VPN yasefini ephethwe iveza isivumelwano sokuhambisa esichaziwe, futhi ezinkundleni ezinkulu leso sivumelwano yi-BGP. Kuze kube khona isikhathi futhi kumukelwe isiqalo, umhubhe uwumzila oguquliwe nje ongenazo izindawo okuyiwa kuzo ngemuva kwawo.

Umhubhe uvuliwe futhi umzila awukho

Ukuqedwa kwesigaba 1 nesigaba 2 kufakazela ukuthi izinhlangothi ziyavumelana ngokuvikelwa, hhayi ukuthi naluphi uhlangothi luyazi ukuthi ithrafikhi iyiswa kuphi. Lezi izinsimbi zesimo ezihlukene ezinezinhlobo zokwehluleka ezihlukene.

Buza imibuzo emithathu ngokulandelana: ingabe isiqalo samenyezelwa, ingabe umakhelwane wasamukela, futhi ingabe safakwa ukuze sidluliswe? Isiqalo esamenyezelwa futhi sahlungwa siyinkinga yomgomo. Isiqalo esingakaze simenyezelwe siyinkinga yesikhathi noma yokumiswa. Isiqalo esamukelwa kodwa esingafakwanga siyinkinga yokukhetha umzila, futhi impendulo ngayinye ikhomba ingxenye ehlukene yokumiswa.

Lokho umhlinzeki akunikeza ngempela

Isango le-VPN eliphethwe akulona umhambisi ongenamingcele. Umhlinzeki ukunikeza isango elinamakheli omakhelwane asekelwayo, ukumiswa kwesistimu ezimele, imikhawulo yeziqalo, nokuziphatha kokwehluleka okuchaziwe. Leyo ndawo ingumkhiqizo.

I-Google Cloud ibhala ukuhambisa kwe-BGP okuguqukayo kwe-HA VPN, lapho i-Cloud Router ifunda imizila yomakhelwane futhi inikeza imizila eguqukayo yangokwezifiso efanelekile ku-VPC. I-AWS Site-to-Site VPN ibhala ukukhetha phakathi kokuhambisa okumile nokuguqukayo, futhi ichaza izivivinyo zokuphila ze-BGP njengeziwusizo ekushintsheni komhubhe kuyilapho futhi isekela izivivinyo zempilo zamadivayisi angenayo i-BGP. Ukuziphatha kwanoma iyiphi inkundla akumele kucatshangwe kusukela egameni lomkhiqizo lenye.

Umphumela ongokoqobo ukuthi uqala ngokukhetha imodi ephethwe, bese ufunda amapharamitha asekelwayo. Umklamo ocabanga uhlobo lokuhlangana insizakalo engakunikezi awuyona inkinga yokumiswa okufanele ixazululwe kumhambisi wekhasimende.

Ukuvikelwa komhubhe nokufinyeleleka kuyimisebenzi ehlukene

I-IPsec ivikela ithrafikhi ekhethiwe yomhubhe. I-BGP inikeza ulwazi lokufinyeleleka olwenza isiqalo sifaneleke. Umhubhe osebenzayo awufakazeli ukuthi isiqalo obekulindelekile samenyezelwa, samukelwa noma safakwa.

Cabanga ngegatsha elimemezela i-10.42.0.0/16 ngemizila emibili yomhubhe efanelekile. Susa umzila owodwa osebenzayo futhi ukukhetha umzila kungashintsha ngaphandle kokuthi kube nomuntu ohlela umzila womthwalo ngamunye. Ukuthola, ukukhetha umzila nokubuyisela uhlelo lokusebenza akukho ngokushesha, futhi akufani phakathi kokusetshenziswa, ngakho ukuhlolwa kokushintsha kufanele kubheke ukulandelana okuphelele hhayi iphakethe lokuqala elidlulayo.

Lapho isiqalo sasefini singafinyeleleki, hlola isimo sesikhathi nemizila efundiwe ngaphambi kokuthinta ukubhala ngemfihlo. I-SA evuliwe engenawo umzila ngemuva kwayo iyindlela evame kakhulu yalesi sibonakaliso.

Lapho izinkolelo ze-OSPF ziphuka khona

I-OSPF, i-IS-IS noma enye inqubo ngaphakathi komhubhe we-IPsec kungenzeka ngokuphelele kudivayisi ezilawulayo, lapho wena ungumnikazi wazo zombili iziphetho kanye nomklamo wokudlulisa. Lelo qiniso alisho lutho ngensizakalo ephethwe enikeza kuphela i-BGP njengemodi yayo yokuhambisa eguqukayo.

Uma umklamo ophakanyisiwe udinga ukuhlangana insizakalo engakusekeli, shintsha isakhiwo ngenhloso. Izinketho zihlanganisa idivayisi ezilawulayo ku-VPC, ukuhambisa okumile lapho insizakalo ikusekela khona, noma omunye umkhiqizo wokuxhumana. Ukumisa inqubo kumhambisi wekhasimende kuphela akukwazi ukwengeza umakhelwane ohlangothini lwefini ongekho, futhi ngeke kwenza isiqalo sivele.

Ungadlulisi impendulo yomthengisi oyedwa esangweni lomunye. Amagama afanayo, njengokuhambisa okuguqukayo noma ukushintsha komhubhe, angachaza izindlela nezikhawulo ezihlukene.

Funda imfuneko yensizakalo, bese wenza umklamo

Ngaphambi komugqa wokuqala wokumiswa, bhala amakheli omakhelwane, izinombolo zezistimu ezimele, iziqalo ozomenyezela futhi ozokwamukela, imikhawulo yemizila, nokuziphatha okulindelekile lapho umhubhe wehluleka. Lezo zinto ezinhlanu yisivumelwano osungumklamo ngaso.

Bese uqinisekisa ngokulandelana okufanayo: isikhathi sisekwe, isiqalo sitholiwe, umzila ukhona kuthebula lemizila le-VPC, futhi kukhona ukugeleza kwangempela okuya ekhelini lensizakalo. Phinda ngemva kokushintshwa okuphoqelekile, ngoba isikhathi esisungulwa kabusha singabuya nesethi ehlukene yemizila. Uma umklamo uncike ekuhlangana okungaphansi kwesekhondi, kala kunokucabanga.

Gcina isivumelwano sensizakalo kanye nerekhodi loshintsho. Lapho othile ebuza kamuva ukuthi kungani umhubhe ungeke ukwazi ukusebenzisa i-OSPF, impendulo ingumngcele womkhiqizo, hhayi umkhawulo wenqubo, futhi irekhodi kufanele lisho lokho.