Isimo se-Cloud VPN: funda isimo somsiza ngaphambi kwelogi ye-IKE

Ithunu le-Cloud VPN liqhuba imijikelezo emibili yokuphila ngasikhathi sinye, futhi ayikho kuwashi elilodwa. Umsiza kufanele wabiwe futhi uhlelwe ngaphambi kokuba ukwazi ukuxoxisana, bese kuthi ngemuva kwalokho iphrothokholi ibe nokulandelana kwayo kwemilayezo ye-IKE. Inkambu yesimo ingabika eyokuqala kuyilapho ingasho lutho olusizo mayelana neyesibili. Ukuzifunda njengento eyodwa yikho okwenza ukungafani kokhiye kuthweswe icala lokubambezeleka kokuhlinzeka.

Qala ngento eyodwa yethunu newindi eyodwa yesikhathi.

Imijikelezo emibili yokuphila, into eyodwa yethunu

Umjikelezo wokuphila womsiza wukulungiselela komhlinzeki ithunu: amakheli, ukuhlelwa, umthamo. Umjikelezo wokuphila wephrothokholi uqala lapho izinhlangothi zombili zinokuhlelwa okwanele kokushintshana nge-IKE_SA_INIT, bese kuba i-IKE_AUTH, bese kuba izinhlangano zokuphepha zezingane. Ithunu esesigabeni sokuqala ayihlulekanga ekuqinisekiseni, ngoba ukuqinisekisa akukazanywa.

Lowo mehluko uyinkinga yonke. Konke okunye kumayelana nendlela yokukubona ngaphandle kokuhlanganisa imilayezo engahlobene.

Funda into, hhayi isifinyezo sekhonsoli

Buza i-API izinkambu ezimbili ezibalulekile futhi akukho okunye, ukuze impendulo ihlale incane ngokwanele ukuba ifundwe ngehora lesithathu ekuseni: gcloud compute vpn-tunnels describe NAME --region REGION --format="yaml(status,detailedStatus)". Inkambu ye-status ibiza isigaba somjikelezo wokuphila, futhi i-detailedStatus ithwala isizathu esifundekayo esixhunywe kuyo. I-dump ephelele yokuhlelwa iphendula eminye imibuzo futhi kunzima ukuyinamathisela kuthikithi. Izingcingo zokufunda kuphela ezinjengalezi azikwazi ukushintsha ithunu, okubalulekile ngenkathi izehlakalo zisaqhubeka.

Bhala isigxivizo sesikhathi socingo eceleni kwamanani, ngoba zombini izinkambu ziyahamba.

I-ALLOCATING_RESOURCES akuwona ukungafani kokhiye

Lapho ithunu libika i-ALLOCATING_RESOURCES, umhlinzeki usahlanganisa into. Ukungafani kokhiye okwabiwe ngaphambili akukwazi ukubonwa kuleso sigaba, futhi imbobo ye-peer evinjiwe nayo ayifakazwanga ngokufanayo. Ongakuhlola umlayezo onemininingwane, ukuthi iphrojekthi nesevisi zibukeka ziphilile yini, kanye nokuthi ukuhlelwa kwethunu sekwanele yini ukuba i-peer ixhumane nakanye. Ukushintsha imfihlo manje kushintsha inani elingakaze lihlolwe.

Linde ukuthi isimo sihambe ngaphambi kokuphetha ngokuhlelwa.

I-ESTABLISHED iwukuqala kokuhlolwa kokufinyelela

Ithunu elisunguliwe lisho ukuthi i-IKE iqedile, hhayi ukuthi ukuhamba kwedatha kuyageleza. Qinisekisa imizila ethwalwa ithunu futhi, lapho i-Cloud Router ihola khona, qinisekisa iseshini ye-BGP kanye neziqalo eyazifunda. Bese uhlola ukushintshana kohlelo lokusebenza okuvunyelwe, ngoba umthetho we-firewall noma umzila ongekho kungavimbela ukuhamba kwedatha ngesikhathi sethunu esiphilile ngokuphelele. Ngakunye kwalokhu ukubona okuhlukile nokulungiswa okuhlukile.

Isimo sikutshela ukuthi yimuphi umbuzo omelwe ubuze ngokulandelayo. Asikaze siphendule umbuzo wokufinyelela esikhundleni sakho.

Xhumanisa into eyodwa kanye newindi eyodwa yesikhathi

Ukuhluleka kokuqinisekisa kwakudala kulogi kungokomzamo wangaphambilini, ngaphandle uma isigxivizo saso sesikhathi siwela ngaphakathi kwewindi oluphenyayo. Donsa amalogo omsiza wethunu ezimizuzwini ezifanayo nesimo osibhalile, futhi ugcine izihlonzi ndawonye. Umcimbi we-IKE wakamuva ungakhombisa ukuthi izingxoxo ziqalile ngenkathi umlayezo wekhonsoli ogqolozele wona usuphelelwe yisikhathi.

Uma ithunu silulama ngaphambi kokuba uqoqe noma yini, shono njalo. Isizathu esinganqunyiwe siyirekhodi engcono kunendaba eqinisekile eyakhiwe ngezindima ezingahlobene.

Isinyathelo esilandelayo sihlala sinesimo esifanayo: into eyodwa, iwindi elilodwa, isigaba esisodwa. Noma yini ebanzi kunesifinyezo, hhayi ukuxilonga.