I-Elastic IP ye-EC2 akuwona ikheli le-VPN langasese lesenzakalo

Isenzakalo sinokheli lwangasese, i-Elastic IP ixhunyaniswe nalo, futhi indlela ye-/32 yomphakathi iyengezwa ku-VPN ngethemba lokuthi zombili zizoba into eyodwa. Aziwukhi. I-Elastic IP ingukuhumusha okwenziwa ngaphandle kwesivakashi, yisango le-inthanethi, kuthrafikhi ehamba ngendlela ye-inthanethi. Uhlelo lokusebenza lwesivakashi aluliboni neze lelo kheli lifakwe ku-interface. Ukulengeza ku-interface yethuneli akukubuyiseli ukuhumusha okuphezulu futhi kwakha ubunikazi besibili obuphikisanayo kumshini ofanayo.

Amakheli amabili, isenzakalo esisodwa

I-interface yenethiwekhi yesenzakalo inokheli lwangasese ngaphakathi kwe-VPC, futhi yilolo kheli isivakashi esilaziyo. I-Elastic IP ixhunyaniswe ne-interface efanayo kodwa ihlala ohlangothini lomphakathi lwemephu.

Konke okufinyelela isenzakalo nge-inthanethi kufika kuhunyushwe kwaba yikheli langasese. Konke isenzakalo esikuthumelayo ku-inthanethi siphuma ne-Elastic IP njengomthombo, futhi ngenxa yalokho kuhumusha.

Ngaphakathi kwesivakashi kunekheli elilodwa. Ngaphandle kunamabili. Lokho kungalingani kuchaza iningi lokudideka kule ndawo. Isivakashi asikwazi ukulungisa okuhunyushwa yisango. Singaphendula kuphela ekhelini esinalo ngempela.

Isango le-inthanethi lenza ini ngempela

Imibhalo ye-AWS mayelana nesango le-inthanethi ichaza ukuhleleka: isenzakalo siyazi ikheli laso langasese le-IPv4, futhi isango linikeza ukuhumusha okuhambisanayo kwe-IPv4 yomphakathi noma i-Elastic IP kuthrafikhi esendleleni ye-inthanethi.

Lokho ukuhumusha kwamakheli enethiwekhi, hhayi igama elihlukile. Imephu igcinwa yisango, ixhumene nomhlangano, futhi isebenza kuphela kumaphakethe awudlulayo. Susa umhlangano futhi ubunikazi bomphakathi bunyamalala isivakashi singaboni lutho.

Yingakho iphakethe le-VPN langasese elibhekiswe ku-/32 yomphakathi lingahunyushwa kabusha njengephakethe langasese eliya ekhelini lendawo yesivakashi. Iphakethe lilandela indlela elihambisana nayo, eyilithumela esangweni le-inthanethi, futhi indlela isango eliziphatha ngayo incike ekutheni indlela ivunyelwe yini kuzo zombili izinhlangothi.

Kungani iqhinga le-interface yethuneli lihluleka

Ukwaba i-Elastic IP ku-interface yethuneli kucela isivakashi ukuthi sithathe ikheli lomphakathi njengelendawo. Manje izinto ezimbili zifuna ikheli elifanayo: ukuhumusha kwesango endleleni ye-inthanethi kanye ne-interface yendawo ngaphakathi kwethuneli. Ithrafikhi ebuyayo ayinayo impendulo engaguquki yokuthi iyiphi esebenzayo.

Ngisho noma kubonakala sengathi kuyasebenza, umklamo ufihle umbuzo wangempela. Amaklayenti afinyelela ikheli langasese ngethuneli noma afinyelela iphoyinti lokugcina lomphakathi nge-inthanethi, futhi lezi zindlela ezimbili zinamaqembu ahlukene okuphepha, ukuloga okuhlukene kanye nezindlela zokwehluleka ezihlukene.

Ikheli lalingeyona inkinga neze. Ukukhethwa kwendlela kwakuyinkinga.

Izinhloso ezintathu, imiklamo emithathu

Uma inhloso kuyiphoyinti lokugcina le-VPN lomphakathi, i-Elastic IP iyithuluzi elilungile: ontanga abakude baxhuma kulo nge-inthanethi futhi ukuthutha okubethelwe kuphela esenzakalweni. Ithrafikhi yangaphakathi yohlelo lwasebenzisa ikheli langasese.

Uma inhloso kuwukufinyelela kwangasese kuhlelo lokusebenza, indawo ekuyiwa kuyo ikheli langasese noma igama le-DNS langasese elixazulula kulo, futhi indlela ye-VPN, iqembu lokuphepha kanye nendlela yokubuya konke kufanele kuvumelane. I-Elastic IP ayiveli neze kulowo mklamo.

Uma inhloso kubunikazi bokuphuma komphakathi obuzinzile kubasebenzisi be-VPN, lowo umklamo we-NAT ohlangothini lokuphuma, hhayi ikheli ethunelini leklayenti. Izinhloso ezintathu ezizwakala zifana zikhiqiza imidwebo emithathu ehlukene, futhi eyodwa kuphela yazo efaka ukubeka i-Elastic IP endaweni entsha.

Qinisekisa indlela oyikhethile

Ukuze uthole ukufinyelela kwangasese, qinisekisa ukuthi indlela ye-VPN ihlanganisa isiqalo sangasese, ukuthi ithebula lezindlela le-VPC libuyisela ithrafikhi ethunelini, ukuthi iqembu lokuphepha livumela umthombo weklayenti nokuthi i-firewall yeklayenti ngokwayo ivumela impendulo. Bese uhlola isicelo esisodwa sangempela esikhundleni se-ping.

Ukuze uthole ukufinyelela komphakathi, qinisekisa ukuphuma kweklayenti ku-inthanethi, ukuhamba komzila wokungena komphakathi kanye nenqubomgomo yalo yokuphepha. Ukuthi iklayenti le-VPN lingafinyelela iphoyinti lokugcina lomphakathi ngethuneli kuncike emithethweni yokuphuma ne-firewall yethuneli, hhayi ekuxhumekeni kwe-Elastic IP.

Uma igama lomsingathi lomphakathi kufanele lisebenze kuzo zombili izinhlangothi, sebenzisa umklamo we-DNS ophendula ngekheli langasese kumaklayenti e-VPN nangekheli lomphakathi kubo bonke abanye, futhi gcina isitifiketi sisemthethweni egameni hhayi ekhelini. Ukulandelana komsebenzi: qamba inhloso, khetha ikheli eliyingxenye yayo, bese uqinisekisa izindlela, inqubomgomo kanye nesicelo esisodwa.