I-IP eqinile ku-GCP uma iqhathaniswa nesivinini se-VPN: izinto ezintathu eziguqukayo, ukuhlolwa okukodwa

Ukudluliswa kwashesha ngemuva kokuba ikheli ligciniwe, futhi isiphetho sazibhala ngokwaso. Ngaphandle kokuthi lelo shintsho lifanayo lashintsha nomhubhe ukusuka ku-UDP kuya ku-TCP, lathuthela ukuhlolwa kobunye ubusuku futhi mhlawumbe lahlala ku-VM kwesinye isifunda. Ukugcina ikheli langaphandle kulungisa inkinga yomjikelezo wokuphila: ligcina iphuzu lokugcina lifana phakathi kokuqalisa kabusha. Alinawo umshini ongasheshisa amaphakethe, ngakho umehluko wesivinini kulolo cwaningo ungowezinye izinto eziguqukayo, futhi isinqumo esiphambi kwakho ukuthi iyiphi okufanele uyihlole ngokulandelayo.

Ikheli eligciniwe lithenga ini ngempela

I-Compute Engine ihlukanisa amakheli esikhashana, anikezwa futhi akhululwa ne-instance, kumakheli aqinile owagcina futhi uwagcina. Lowo mehluko umayelana nokugcinwa nokukhokhiswa, hhayi indlela amaphakethe ahamba ngayo. Iphuzu lokugcina elizinzile liwusizo ngempela kumarekhodi e-DNS, amaphrofayili wokufinyelela kude, izinhlu zokuvunyelwa zozakwethu kanye nemithetho ye-firewall okufanele ingashintshi lapho i-VM iqala kabusha.

Lezo zizathu ezinhle zokugcina elilodwa. Akukho nolunye oluyisizathu sokudlula.

Gcina izinga, ikheli kanye nokuthuthwa njengezinto ezintathu eziguqukayo

I-Google Cloud futhi ithengisa amazinga eNkonzo Yenethiwekhi i-Premium ne-Standard, futhi womabili athatha izindlela ezihlukene eya ku-inthanethi ngokutholakala kwezici okuhlukile. Ukwabiwa kwamakheli aqinile ku-orthogonal kukho kokubili, ngakho thatha iqinile ne-Premium njengamaqiniso angahlobene nge-VM hhayi njengezincazelo ezifanayo. Rekhoda izinga langempela, isifunda kanye nanoma yikuphi ukuxhumana noma okunamathiselwe okusebenzayo, ngoba kuchaza indlela ngendlela ilebula lekheli elingasoze liyenze.

Izinto ezintathu eziguqukayo, izivivinyo ezintathu ezihlukene, kungenjalo umphumela uyindaba hhayi isilinganiso.

Dizayina ukuhlolwa okuphendula umbuzo owodwa

Gcina i-VM, ikheli, indawo yeklayenti, indawo okuyiwa kuyo kanye nomthwalo womsebenzi kungaguquki ngenkathi uqhathanisa amaphrofayili e-UDP ne-TCP avunyelwe. Kudingeka kokubili isilaleli seseva ngakunye ukuthuthwa kanye nemithetho ye-firewall ehambisanayo; ukushintsha igama elingukhiye kuklayenti bese ushiya isilaleli singashintshile kuhlola kuphela ukubekezela kwakho. Sebenzisa ukudluliswa okuphindaphindekayo futhi urekhode indlela, ubude besikhathi, imifudlana eyodwa uma iqhathaniswa nehambisanayo kanye namayunithi, ngoba i-MB/s ne-Mb/s ihluka ngokuphindwe kasishiyagalombili.

Bheka ne-CPU ye-VM, ngoba i-instance encane igcwala emsebenzini wokubethela noma we-softirq kude ngaphambi kwenethiwekhi, futhi lowo mkhawulo uzobukeka ufana ncamashi nomkhawulo womhlinzeki.

Izibali zokuthumela kabusha nokulahlekelwa ezivela ku-VM nakuklayenti zihlukanisa inkinga yendlela enkingeni yokuthuthwa, futhi ibha yenqubekelaphambili ayikwazi. Ukulandelana okusebenzayo nge-iperf3 kuthatha cishe imizuzu eyishumi ngakunye ukuthuthwa. Qala iseva ohlangothini olukude, gijimisa iklayenti imizuzwana engamashumi amathathu endleleni ngayinye futhi uphindaphinde indlela ngayinye izikhathi ezintathu. Lahla ukugijima kokuqala kwakho konke ukulandelana, bese uqhathanisa amazinga omthumeli nomamukeli kanye nenani lokuthumela kabusha eliphrintwa ukugijima kwe-TCP.

Kungani i-UDP ne-TCP zihluka ngomshini

OpenVPN phezu kwe-UDP ithwala ama-datagram futhi ishiya ukuthuthwa kohlelo lokusebenza ngokwalo ukubhekana nokulahlekelwa. Phezu kwe-TCP, umfudlana othembekile womhubhe uhlala ngaphansi komfudlana wohlelo osevele uthembekile, ngakho ingxenye eyodwa elahlekile ivimba konke okusemuva kwayo ngenkathi ukuxhumana kwangaphandle kuthumela kabusha ngokuhlelo lwakho. Lokho kuziphatha kwasekhanda komugqa kuyisici sokwenza umhubhe we-TCP ngaphakathi kwe-TCP, hhayi inqubomgomo yomhlinzeki. Ukuphathwa kwe-MTU ne-MSS nakho kuyahluka phakathi kwezindlela ezimbili, futhi lokho kushintsha ukuziphatha kokuhlukaniswa endleleni efanayo.

Ngakho ukuhlolwa kwe-TCP okusheshayo kufakazela kuphela ukuthi i-TCP yayishesha ngalolo suku kuleyo ndlela, futhi akukho okujwayelekile kakhulu.

Bhala umphumela ukuze uhlale ekubuyekezweni

Isiphetho esivikelekile sinesimo: le phrofayili, kulesi silinganiso somshini, kuleli zinga lenethiwekhi, igcine lo mthwalo womsebenzi olinganisiwe kule ndlela ngaphansi kwalezi zimo. Noma yini ebanzi kakhulu idinga ukugijima okuningi kunalokho ubusuku obubodwa obungakunikeza. Uma icala elihamba kancane lihlala lingachazwanga, gcina njengokuqaphela kanye nobufakazi bakho bamaphakethe nezinsiza esikhundleni sokwakha umkhawulo okungekho incwadi yomhlinzeki eyichazayo.

Ukuzinza kwekheli nesivinini sokudluliswa kungabaluleka kokubili ekusetshenzisweni okufanayo, futhi isinqumo esiwusizo ukuthi yikuphi kwalokhu okubili okuthengayo ngakho konke ukushintsha.