Umthetho we-EC2 we-VPN kuphela: iqembu ngalinye lokuphepha elixhunyiwe kufanele livumelane
Amaqembu okuphepha avumela kuphela, futhi iqembu ngalinye elixhunyiwe lengeza imvume yalo. Thola umthombo i-instance ewubona ngempela ngaphambi kokwengeza umthetho we-VPN omncane.
Wengeza umthetho owodwa wokungena weqembu lamaklayenti e-VPN, awususi lutho, futhi insizakalo isafinyeleleka kusuka ku-inthanethi. Akukho okonakele. Iqembu lokuphepha alinakho ukweqa, ukubaluleka noma ukwenqatshwa kokugcina umthetho omncane ongakunqoba. Iqembu ngalinye elixhunywe ku-instance lifaka izimvume zalo kuqoqo elilodwa elihlanganisiwe, futhi umthetho obanzi owukhohliwe usaqoqweni. Ukwenza i-instance ibe yi-VPN kuphela kusho ukuhlola wonke, hhayi ukwengeza umthetho ozwakala kangcono kwelinye lawo.
Bhala phansi insizakalo ngaphambi kokubhala umthetho
Qala ngendawo eqondile, iphrothokholi kanye nechweba, kanye nesixhumi senethiwekhi insizakalo elalela kuso ngempela. I-instance enezixhumi eziningi noma izinsizakalo eziningi echwebeni elilodwa idinga ukuhlolwa kwesixhumi ngasinye, ngoba amaqembu axhunyiwe angahluka. Bese uthola ukuthi yiliphi ikheli lomthombo isixhumi leso esilithola ngempela kumsebenzisi we-VPN, hhayi ikheli iklayenti elikubonisa efasiteleni lalo lokuxhumana.
Lawama atheli amabili ahluka kaningi kunalokho abantu abakulindele uma ukuhumusha nokuhlela imizila kungene.
Izinhlobo ezintathu zomthombo, imithetho emithathu ehlukene
Ngokufinyelela okuhleliwe kwangasese, i-instance ithola iqoqo lamaklayenti noma ububanzi bebhizinisi, kuye ngokuthi umzila uhlelwa futhi uhumushwa kanjani. Ngephoyinti lokugcina lomphakathi elifinyelelwa ngokuphuma kwebhizinisi, i-instance ibona ikheli le-NAT lebhizinisi esikhundleni salokho, futhi kuphela uma leyo ndawo isebenzisa ngempela umzila we-VPN, ngoba ukushubisa okuhlukanisiwe kungayishiya kuxhumano lwasekhaya. Ngephoyinti lokugcina le-Client VPN elilawulwayo, imodeli ebhaliwe yokuxhumana nenethiwekhi okuqondiwe iyasebenza, futhi ikheli leklayenti livela ku-CIDR yeklayenti elilungisiwe.
Okungasebenzi ukubhekisela isango le-VPN njengomthombo weqembu lokuphepha. Izikhombo zeqembu zihambisana nezixhumi zenethiwekhi ezinwebekayo ngaphakathi kwe-VPC noma inethiwekhi ehambisanayo, futhi isango elidlulisela amaphakethe alisilo elilodwa lawo.
Funda inhlanganisela kuwo wonke amaqembu axhunyiwe
Vula i-instance, thola isixhumi sayo senethiwekhi, bese ubhala wonke amaqembu okuphepha axhunywe kuso. Kwelinye ngalinye, hlola wonke umthetho ohlanganisa iphrothokholi nechweba lakho, kufaka phakathi ububanzi obukhulu bamachweba kanye nemindeni yamakheli yomibili. Umthetho we-IPv4 osuka ku-0.0.0.0/0 awukukhululi ekuhloleni i-::/0, futhi umthetho ovumela wonke umthamo ufihla ngokuphelele umbuzo wechweba. Kuphela ngemuva kwalolu hlu ungasho ukuthi imvume esebenzayo yensizakalo iyini.
Isikhombo semithetho se-AWS sichaza amaqembu okuphepha njengavumela-kuphela futhi sithi imithetho yawawo wonke amaqembu axhunyiwe iyahlanganiswa, futhi yiyo yonke indlela engemuva kwalokhu kwehluleka.
Ama-ACL enethiwekhi ayinqubomgomo ehlukene engenasimo enemibhalo ehleliwe yokuvumela nokwenqaba, futhi ahlolwa kusubneti hhayi ku-instance.
Ungaphenduli ngodonga lokwenqaba
Ukwengeza ukwenqatshwa kwe-NACL kuyo yonke isubneti ukulingisa ifayela lomlilo ojwayele ukukusebenzisa iyithuluzi elingalungile futhi eliyingozi. Imibhalo ye-NACL ihleliwe futhi ayinasimo, ngakho ukwenqatshwa okubekwe ngaphezu kwemvume ekhona kwephula buthule umthamo ongahlobene, kufaka phakathi indlela yokubuya yamaseshini obuzama ukuwagcina. Lungisa imvume ebanzi yeqembu lokuphepha eqenjini eliyo, bese ushiya i-ACL yodwa ngaphandle uma iyingxenye yangempela yomklamo.
Ukususa ikheli lomphakathi ku-instance yisiqinisekiso esinamandla kakhulu, futhi futhi kuwushintsho lwezakhiwo olunemiphumela yokuphatha neyohlelo, hhayi ibhokisi lokumaka ohlwini lwezimvume.
Hlola ngeseshini entsha futhi gcina indlela yokungena
Ngaphambi kokuhoxisa noma iyiphi imvume ekhona, qinisekisa indlela yokuphatha ezimele evunyiwe, ngoba umthetho osuzowususa kungenzeka ukuthi yiwona ukubuyiswa kweseshini yakho kuncike kuwo. Bese uhlola ukuxhumana okuvunyiwe okusha kusuka ku-VPN nokuxhumana okwenqatshiwe okusha kusuka endleleni yokuhlola evunyiwe engeyona ye-VPN. Amaseshini alandelwayo akhona asinda ekushintsheni kwemithetho ngezindlela ezenza amagobongo amadala avuliwe angabi nensizakalo njengobufakazi bokwamukela.
Ekugcineni, gcina ukugunyazwa kohlelo ngokwalo endaweni yako. Ukuphuma kwebhizinisi okuhunyushiwe kungamela amakhulu abantu, futhi ukungena kunethiwekhi akukaze kukhombise umsebenzisi ngamunye noma idivayisi yakhe.