Iphutha lokuhlangana kwe-pool ku-Docker akulona inkinga yomzila we-VPN

I-Docker iyala ukwakha inethiwekhi ngomlayezo wokuthi i-pool ihlangana nenye kulesi sikhala samakheli, futhi othile unquma ukuthi umzila we-VPN kufanele ube yimbangela. Ngeke kube njalo. Lelo phutha likhiqizwa ngesikhathi kwabiwa i-pool, ngaphambi kokuba kube khona ngisho iphakethe elilodwa, futhi umzila we-kernel owenziwe ngesandla awunawo umthelela kuwo. I-VPN ibalulekile esigabeni esisodwa kamuva, lapho i-container esivele inekheli ingasafinyeleleki ngemva kokuvela komzila. Izinkinga ezimbili, amasethi amabili obufakazi, futhi ukuzihlanganisa kukhiqiza ushintsho olungalungisi neyodwa yazo.

Amaphutha amabili abukeka afana

Iphutha lokwaba liwukubala. I-Docker iqhathanisa i-subnet oyicele namasubnet esivele iwaphatha, ithola ukuhlangana bese iyala. Akukho okusebenzayo okwamanje, ngakho awukho umzila, ayikho i-container futhi akukho thrafikhi okufanele ihlolwe.

Uphawu lwesikhathi sokusebenza luwumbuzo wokufinyeleleka. I-container eyayiphendula izolo ayiphenduli manje, futhi kukhona okushintshile kuthebula lomzila lomsingathi. I-container isabambe ikheli layo; umbuzo uwukuthi yiluphi uhambo oluthathwa yilelo kheli.

Kokubili izinkinga zohlelo lwamakheli. Eyodwa kuphela yazo iyinkinga ye-Docker.

Qala ngokufunda ama-pool abiwe

Bala amanethiwekhi bese uhlola lawo angahlangana. I-subnet isekucushweni kwe-IPAM, futhi ama-container axhunyiwe abalwa ngokwehlukana:

docker network ls
docker network inspect EXISTING_NETWORK

Qhathanisa leyo subnet ne-pool ecelwa inethiwekhi entsha, futhi khumbula ukuthi i-Compose yakha inethiwekhi yayo emisiwe yephrojekthi ngayinye. Ukungqubuzana nephrojekthi oyikhohliwe kubukeka njengokungqubuzana ne-daemon.

I-ipv4_address emile kusevisi iyikheli le-container elilodwa, hhayi incazelo ye-pool. Ukulishintsha akususi ukuhlangana, ngoba ukuhlangana kungaphakathi kwamasubnet enethiwekhi hhayi phakathi kwama-container. Incwadi eyisethenjwa ye-network-create ye-Docker idinga amasubnet angahlangani okwabiwa okujwayelekile kwebhuloho futhi ibhala ukuthi ungayikhetha kanjani eyodwa ngokusobala.

Khetha isiqalo esizohlala sikhona ngale kwe-VPN

Ukungqubuzana okusheshayo nomzila wesikhathi esizayo kunqunywa ukukhetha okufanayo, ngakho kwenze kanye. Qhathanisa ibanga elingumgadli ne-LAN, nayo yonke indawo ye-VPN umsingathi angayifinyelela, nanoma iyiphi enye i-overlay esetshenziswayo.

Isiqalo esenelisa i-Docker futhi esishayisana nenethiwekhi ekude sikunika i-container eqala ngokuhlanzekile futhi engasafinyeleleki ngomzuzu okhuphuka umhubhe. Lelo yiphutha lesibili kulesi sihloko, futhi kunzima kakhulu ukulihlola kamuva kunokuligwema manje.

Bhala amabanga akhethiwe endaweni lapho iphrojekthi elandelayo ingawafunda khona. Irejista yomugqa owodwa yamaqalo abiwe ishibhile kunamasonto amabili okuhamba kwesikhathi okungachazwanga.

Susa noma shintsha inethiwekhi ngamabomu

Enethiwekhi entsha ye-Compose, setha isiqalo esingasetshenziswa kucusho lwe-IPAM yenethiwekhi. Eprhojekthi ekhona, hlela ukubalwa kabusha: amakheli aqinile, amasevisi ancikile kanye nesinyathelo sokwakha kabusha inethiwekhi konke kufanele kubhekwe, ngoba ukuhlela i-YAML akubali kabusha inethiwekhi esebenzayo.

Uma inethiwekhi endala iphethe ukwabiwa okungqubuzanayo, hlola ukuthi ubani oxhunyiwe ngaphambi kokuyisusa. I-docker network rm iyala ngesikhathi kukhona ama-endpoint asebenzayo, futhi i-docker stop ithatha amagama noma ama-ID ama-container hhayi igama lenethiwekhi. Ukumisa i-container nakho akususi incazelo yenethiwekhi ephethe i-pool.

I-prune ebanzi ayilona ithuluzi lokuhlola. Ifinyelela kumaphrojekthi angahlobene futhi ichithe ubufakazi obuzoqoqwa.

Ama-pool amisiwe asiza kuphela ukwabiwa okulandelayo

Ukusethwa kwe-pool yamakheli emisiwe ye-daemon kuthuthukisa ukwabiwa okuzenzakalelayo kwesikhathi esizayo ngokukugcina ngaphandle kwamabanga owagcina. Akuwabi kabusha amakheli ezinethiwekhi ezivele zikhona ngokubuyela emuva, futhi akuxazululi i-subnet ecacile ehlangana nenye i-subnet ecacile.

Thatha leso setho njengoshintsho oluhlukile oluhleliwe olunokuqalisa kwaso, hhayi njengengxenye yokulungisa iphrojekthi eyodwa. Ukuhlanganisa kokubili kusho ukuthi ukuqalisa kabusha kwe-daemon kuwela phakathi kocwaningo olungahlobene. Kuhlelele esikhathini saso. Bese uqinisekisa ukuthi ukwabiwa okusha okuzenzakalelayo kuwela ngaphandle kwamabanga owagcina.

Uma ukwakhiwa kuphumelela, qinisekisa i-subnet esebenzayo ngempela bese wenza isicelo sosizo lwe-app sangempela ngesikhathi i-VPN isesimweni esihlosiwe. Uma i-pool ivumelekile futhi ukufinyelela kusahluleka, umsebenzi osele ukukhetha umzila, ukuhlunga nomzila wokubuya. Lokho kucwaningo lwesikhathi sokusebenza, futhi akwenzi iphutha lokwaba lingabi nancazelo ngokubuyela emuva.

Ukulandelana komsebenzi: funda ama-pool abiwe, khetha isiqalo esigwema i-Docker kanye nezindawo ze-VPN, yakha kabusha inethiwekhi ngamabomu, bese uhlola isicelo esisodwa umhubhe ukhuphile.