Chaza umsebenzi we-VPN ngaphambi kokuqhathanisa ama-API
Ukulawulwa kokuxhumana, ukuhlinzeka ngephrofayela, ukuphathwa kwabasebenzisi nokubheka kungama-API ahlukene. Qala uqambe into, isenzo nesimo sempumelelo.
Ikhasi lomkhiqizo lithi line-API, futhi umhlangano wokuhlanganisa uyaphela embuzweni wesibili. Umuphi umsebenzi, kuyiphi into, ubizwa ngubani, futhi yini ethathwa njengempumelelo? Ukuphendula lezo zine ngaphambi kokuqhathanisa imikhiqizo kuvame ukususa uhhafu wabazongenela ukhetho. Futhi kwenza ukuqhathanisa okusele kube into umhlolo ongayixazulula.
Shintsha «ine-API» ngomsebenzi owodwa
I-API iwukuthutha, hhayi ikhono. Indawo yokugcina ye-REST, isokhethi yasekhaya nesembozo somugqa womyalo konke kungabizwa nge-API, futhi azinikezi imisebenzi elinganayo.
Bhala umsebenzi njengomusho ngaphambi kokubheka imibhalo.
Ukuqala uxhumano lwasekhaya kuyisenzo sohlangothi lwekhasimende elinabasebenzisi phambi kwalo. Ukukhipha iphrofayela yedivayisi kuyisenzo sokuhlinzeka elinoluhlu lwezinto ngemuva kwalo. Ukukhubaza ukufinyelela komsebenzisi kuyisenzo sokuphatha esinomkhondo wokucwaninga. Lezi zintathu zivame ukuhlala ezingxenyeni ezihlukene, ziphethwe amaqembu ahlukene, futhi zinegunya elihlukene.
Izinkambu ezine ezenza isivumelwano sihloleke
Gcwalisa izinkambu ezine kumsebenzi ngamunye: into, isenzo, umbizi nesimo sempumelelo. Isivumelwano esingenayo inkambu siyisifiso nje.
Ithebula liwukuphela kwephepha lokusebenza:
| Field | Question | Example |
|---|---|---|
| Object | What is being acted on? | One enrolled device |
| Action | Observe, create, change, start, stop, or revoke? | Revoke |
| Caller | Which identity calls it? | Deployment service |
| Success | What observable state proves it? | Future sign-in denied |
Isimo sempumelelo yinkambu abantu abayeqayo, futhi yiyo enquma ukuthi ukuhlanganisa kuyasebenza yini. Isilungiselelo esigciniwe akulona umhubhe osebenzayo, futhi i-akhawunti ekhutshaziwe akusona isikhathi esiphelile.
Uma imisebenzi emibili idinga ababizi abahlukene, iyizinto ezimbili zokuhlanganisa. Ukuzihlanganisa ku-akhawunti eyodwa yensizakalo ngokuvamile kusho ukunikeza igunya elingaphezu kwalokho okudingwa yinoma yikuphi.
Vumelanisa isixhumi-mbumbulu nezinga elisihlanganisa ngempela
OpenVPN yomphakathi isixhumi-mbumbulu sokuphatha sikhuluma ne-daemon nge-TCP noma ngesokhethi ye-Unix. Imiyalo yaso ifaka ukubheka isimo nezimpawu eziya ku-daemon.
Lokho kusenza kube umzila wokulawula i-daemon, hhayi i-API yokubhalisa egciniwe noma insizakalo yokubhalisa abasebenzisi. Ukufunda imibhalo yaso ngokucophelela kukusindisa ekwakheni phezu kwezinga elingayona into.
Lemibhalo futhi ithi iphrothokholi ayinakho ukushifra kwayo. Noma ubani ongafinyelela isokhethi angalawula i-daemon, ngakho-ke yithatha njengokulawula okubucayi, hhayi njengokugeleza kwezilinganiso. Yibophe ku-loopback noma kusokhethi ye-Unix, futhi uyibeke ngemuva kwelungiselelo elikhawulelwe uma umbizi okude eyidinga. Ukuyiveza ku-inthanethi ngenxa yokulula kuguqula umzila wokulawula ube isigameko.
Chaza ukuziphatha ngemuva kocingo
Ukwamukela akufani nokuqedwa. I-daemon ingabuya ngaphambi kokuba umhubhe unyuke, ngakho-ke linda umcimbi wokuqedwa noma wokwehluleka obhalwe phansi futhi uwuxhumanise nesicelo osithumile.
Nquma ukuthi umbizi wenza ini uma impendulo ilahleka. Ukuphinda ngobumpumputhe ukudala noma ukuxhuma kabusha akufani nokuhlola ukuthi isicelo sokuqala sesike sasebenza.
Ukususa ukufinyelela kuyizinto ezintathu ezihlukene: ukuvimba ukungena kwesikhathi esizayo, ukuqeda isikhathi esisebenzayo nokuhoxisa ubufakazi. Cela lezo ezidingwa umgomo ngempela, futhi usho esivumelwaneni ukuthi yikuphi. Ungabizi ukubuyekezwa kwe-akhawunti okunye okuphumelelayo njengokuhoxiswa okuphelele ngaphandle kobufakazi. Umehluko ubalulekile phakathi nesigameko, lapho iwashi lihamba.
Hlola isivumelwano ngokuhlola okuncane
Ukuhlola okuncane okuvunyelwe kufanele kuhlanganise impumelelo, ukunqatshwa, ukuphazamiseka nokuphinda, bese kuba umsebenzi wohlelo lokusebenza okufanele uvunyelwe noma unqatshwe.
Esixhumi-mbumbulwini sezinga le-daemon, imiyalo emibili ijwayeza ukubheka nophawu:
echo state | nc -w 2 127.0.0.1 7505
echo signal SIGTERM | nc -w 2 127.0.0.1 7505Nikeza kuphela igunya elidingwa umsebenzi. Gcina izimfihlo kude namalogi avamile, futhi bhala imininingwane eyanele yobumfihlo ukuze usho ukuthi iyiphi inhloso ethintekile nokuthi yaphela kanjani.
Bhala indlela yokubuyisela esimweni lapho i-API yokulawula ngokwayo iphansi. Khetha isixhumi-mbumbulu esiphethe into nomjikelezo wayo wokuphila; izimangalo zokusebenza okuzenzakalelayo ekhasini lomkhiqizo azisiyo indawo yayo.