I-VPN yakho yasefini isencike kumhlinzeki wokusingatha

Ufake uhlelo lokusebenza, waqinisa insizakalo futhi uphethe okhiye, futhi kuqala kubonakale sengathi iseva ngeyakho. Ingolwakho njengoba ifulethi eliqashiwe lingelakho: isikhiya somnyango sisezandleni zakho kodwa isakhiwo asikho. I-hypervisor, inethiwekhi engaphambi kwe-instance kanye ne-akhawunti engakha kabusha konke kungokomunye umuntu. Lowo mehluko unquma ukuthi uhlelo lokubuyisela kufanele luhlanganise ini, futhi yingxenye eshintshwa kancane kakhulu i-self-hosting.

I-akhawunti iyindawo yangempela yokulawula

I-akhawunti yokusingatha iphethe umshini ongabonakali, amadiski awo, izithombe, amakheli omphakathi kanye nemithetho yenethiwekhi. Konke lokhu kungashintshwa ngaphandle kokungena kusivakashi, okubeka i-akhawunti ngaphandle kwemodeli yezinsongo echazwa yizincwadi eziningi ze-VPN. Ukuhlelwa okuphelele komhubhe kuyasinda esenzweni se-akhawunti esishintsha idiski.

Vikela leyo akhawunti njengempahla ehlukile: ubufakazi obuzimele, izici zesibili ezisekelwa yi-hardware kanye nomkhondo wokucwaninga ogadwa ngempela umuntu. Ukuyabelana ngayo nokufakwa okufanayo kumphathi wamagama ayimfihlo njengensizakalo ye-VPN iyiphutha elenza konke okunye ukulawula kungabi nalutho.

Funda ukwahlukaniswa kwemisebenzi komhlinzeki ngomkhiqizo othile, hhayi ngefini ngokujwayelekile. Imodeli yomthwalo wemfanelo owabiwe iyisibonelo esiwusizo sendlela izingqimba ezihlukaniswa ngayo, futhi abanye abahlinzeki bachaza imingcele yabo esikhundleni sokuthola leyo njengefa. Lokho okufunayo ukuthi yikuphi ukwehluleka okufanele ukulungise nokuthi yikuphi ongakwazi kuphela ukukubika.

Izigameko zengqalasizinda ongakwazi ukuziphatha

Ukufuduka bukhoma, ukunakekelwa kwe-host, ukwehluleka kwe-hardware kunodi ebonakalayo kanye nesigameko somthamo konke yizinto umhlinzeki azixazulula ngohlelo lwakhe. Ungase ubone ukuqalisa kabusha, ukulahleka kwamaphakethe isikhashana noma ukushintsha kwekheli, futhi ngeke ubone isizathu. Idizayini ethatha i-instance njengephuzu eliqinile izohumusha konke lokho njengokwehluleka kwe-VPN. Isinyathelo esilungile ukwenza insizakalo ibekezelele i-instance enyamalalayo, hhayi ukuphenya isizathu ongasoze usiboniswe.

Izixhumanisi zokulondoloza zingezaleli lengqimba, hhayi zomhubhe. Gcina ukuhlelwa kweseva, ubunikazi, uhlelo lwamakheli kanye nemizila evunyelwe endaweni enganciki ekutheni i-instance iyafinyeleleka, futhi qinisekisa ukuthi ikhophi ingabuyiselwa ngaphandle kwediski lokuqala.

Ukuziphatha kwekheli kufanele ukuhlolwa kwakho. Ukuthi ikheli lomphakathi liyasinda yini ekumisweni, ekushintsheni noma ekususweni kuncike endleleni elabiwe ngayo, futhi lezi zenzo ezintathu azikwazi ukushintshana. Bhala phansi ukuthi uncike kukupi ngaphambi kokuba isigameko senze umbuzo uphuthuma.

Hlola ukuthi ku sala ini ngemva kokwakhiwa kabusha

Akha indlela yokubuyisela ngesikhathi konke kusebenza. Khomba ikhonsoli noma ukufinyelela okungaphandle kwebhande okunikezwa umhlinzeki, qinisekisa ukuthi uyakufinyelela ngaphandle komhubhe, futhi gcina ubufakazi endaweni lapho ikhompyutha ephathekayo eyonakele noma ifoni elahlekile kungayithathi khona. Uma ukushintsha kwe-firewall yasendaweni kuvimba umhubhe, leyo khonsoli iyona ndlela yokubuyela emuva.

curl -s http://169.254.169.254/latest/meta-data/instance-id
curl -s http://169.254.169.254/latest/meta-data/public-ipv4
cloud-init status --long

Insizakalo ye-metadata iphendula imibuzo nge-instance isivakashi esingakwazi ukuyibona ngenye indlela, futhi izindlela zayo eziqondile ziyahluka phakathi kwabahlinzeki namapulatifomu, ngakho-ke ziqinisekise nencwadi yomkhiqizo oyisebenzisayo. Bese wenza ukwakhiwa kabusha okulawulwayo kwesibonelo sokuhlola futhi ulinganise isikhathi. Inqubo yokubuyisela okungekho muntu oyenzile iwumbono nje.

Qaphela ukuthi ukwakhiwa kabusha kwenze ini ekhelini, kokhiye be-host, kubunikazi bediski kanye nakho konke okugxilisiwe amaklayenti. Amaklayenti agcine ukhiye we-host kusikhashana azokhalaza ngemva kokwakhiwa kabusha, futhi lokho kukhalaza kuwukuziphatha okulungile hhayi iphutha okufanele licinywe.

Nquma ukuthi i-self-hosting ishintsha ini ngempela

Ukuqhuba i-VPN yakho kudlulisa ukwethemba kusuka kumsebenzisi we-VPN kuya kumhlinzeki wokusingatha kanye nawe. Lokho wushintsho lwangempela, futhi akufani nokususa umuntu wesithathu. Uma inhloso kwakuwukuvimbela i-VPN yezentengiselwano ukuthi ingabheki ithrafikhi, umhlinzeki usengakwazi ukubheka inethiwekhi ye-instance, idiski layo kanye namarekhodi okukhokha.

Amalogi akho achaza isoftware yakho, futhi awachazi wonke amarekhodi engqalasizinda agcinwa umhlinzeki. Okuphambene nakho kuliqiniso: ukubonakala kwengqalasizinda akufakazeli ukuthi umhlinzeki ugcina ini. Yomibuzo yomibili idinga inqubomgomo yomhlinzeki nokuhlelwa kwakho, futhi akukho okuphendula okunye.

Bhala impendulo njengokwahlukaniswa komsebenzi: yikuphi ukugqimba okwehlulekile, ubani angakulungisa futhi kuthatha isikhathi esingakanani lokho kulungisa. I-self-hosting ishintsha lowo omthembayo, futhi ingxenye ewusizo yomsebenzi wokuzilolonga ukwazi ngqo ukuthi uthemba bani ngayiphi ingqimba.