Umzila we-GCP VPN usebenza esifundeni esisodwa kuphela: hlola ukuhamba kwemizila okuguquguqukayo

Umthwalo womsebenzi waseMelika ufinyelela isiqalo sehhovisi nge-HA VPN ngaphandle nkinga, kuyilapho umthwalo waseYurophu kuleyo VPC awutholi lutho. Ithebula layo lokuhamba kwemizila alinawo umugqa walesi siqalo, akukho umhubhe owileyo futhi akukho umthetho we-firewall oguquliwe. Umhubhe nesesheni yawo ye-BGP kuhamba kahle kuzinhlangothi zombili. I-VPC ehlanganisa izifunda ayifani nokuthi imizila yayo efundiwe ihlanganisa izifunda, futhi lelo gebe lichaza yonke inkomba.

Lapha kuxutshwa izici ezimbili: ukuthi amasubneti akhona kuphi, nokuthi isinyathelo esilandelayo esifundiwe singasetshenziswa kuphi.

Ubukhulu besifunda buvela kuphi

I-Cloud Router ifaka imizila efundiwe ngobukhulu obulandela imodi yokuhamba kwemizila eguquguqukayo ye-VPC. Kumodi yesifunda, umzila ofundwe esifundeni esisodwa ungasetshenziswa kuphela yizinsiza zalelo sifunda, yingakho ithebula laseYurophu lingenalutho esikhundleni sokukhombisa isinyathelo esilandelayo esiphukile. Kumodi yomhlaba wonke, imizila efundiwe efanelekile iyatholakala ezinsizeni kuso sonke isifunda se-VPC. Funda inani lamanje ngaphambi kokushintsha noma yini, ngoba imodi yesifunda iwukujwayelekile. Isethingi sikunethiwekhi, hhayi kumhubhe noma kurutha.

Umyalo wokubala ugcwele ukufundwa kuphela futhi uphendula lokho ngomugqa owodwa:

gcloud compute networks describe VPC_NAME --format='value(routingConfig.routingMode)'

Yisebenzise kuphrojekthi yomsingathi uma i-VPC yabiwe. Inethiwekhi ingeyalowo msebenzi, futhi indima yombukeli kuphrojekthi yomthwalo womsebenzi ingase ingabonisi ngisho ukuhlelwa kokuhamba kwemizila. Impendulo esheshayo evela kuphrojekthi engalungile imbi kunokungabi nampendulo.

Ushintsho luwumyalo owodwa nendlela eyodwa

Ukushintsha ukuhlela kwendiza yokulawula kuyo yonke i-VPC, hhayi indlela yokudlula ye-VM ngayinye: gcloud compute networks update VPC_NAME --routing-mode=GLOBAL. Futhi kuhamba ngendlela eyodwa, ngoba inethiwekhi esethwe kumhlaba wonke ayikwazi ukubuyela esifundeni. Hlola igama lephrojekthi nenethiwekhi futhi ngaphambi kokuyisebenzisa, ngoba umyalo awuceli isiqinisekiso. Lolu shintsho lufanele umbhalo wokunakekela kanye nemvume yomnikazi wenethiwekhi, hhayi ukuhlola okusheshayo ku-VPC eyabiwe.

Yonke into yokuxhumana ye-Cloud Router, VPN ne-Interconnect kuleyo nethiwekhi izuza ubukhulu obusha ngasikhathi sinye. Lokhu kubandakanya ukuxhumana okungashiwo muntu esicelweni soshintsho. Izifunda ezingakaze zibe nawo lo mzila ziqala ukuwuthola lapho ushintsho luqala ukusebenza, yingakho kungekho ukusatshalaliswa okuhamba ngezigaba kwalolu shintsho.

Umhlaba wonke ubukhulu, akusona isiqinisekiso

Ukufaneleka nokukhethwa kwehlukile ebukulweni. Umzila ophikisana nesiqalo esicacile kakhulu, ohlulwa ukukhethwa komzila ongcono kakhulu noma ohlungiwe yinqubomgomo uziphatha ngendlela efanayo nangaphambili. Imodi yomhlaba wonke yandisa lapho umzila ungasetshenziswa, kodwa ayinqumi ukuthi yimuphi umzila ozonqoba. Umzila ofundiwe ungaba ngaphakathi kobukhulu futhi ulahlekelwe umzila oqinile noma ocacile kakhulu kuleyo VPC.

Lomehluko ubalulekile ngoba ukushintsha kwemodi kulula ukusola kamuva. Uma isubneti yaseYurophu ingenawo umzila ngemva kokushintsha, umbuzo uwukuthi umzila ukhona futhi ufanelekile, hhayi ukuthi ubukhulu buqalile ukusebenza. Ukungqubuzana kwesiqalo nempilo yesinyathelo esilandelayo yizinto ezimbili ezilandelayo okufanele zifundwe.

Uhlangothi olukude nalo lumemezela ngendlela ehlukile

Ukuziphatha kokumemezela kulandela isethingi efanayo. Ngokuziphatha okuvamile, irutha esemodini yesifunda imemezela amasubneti esifunda sayo, kuyilapho imodi yomhlaba wonke imemezela amasubneti e-VPC ngokubanzi. Ngakho ukushintsha imodi akushintshi kuphela lokho izifunda zakho ezingakusebenzisa, kushintsha nalokho okufakwa uhlangothi olukude.

Uhlu lokumemezela olukhethekile alukhuli lapho imodi ishintsha. Uma irutha yasendaweni inohlu lwamabanga abhalwe ngesandla, isiqalo saseYurophu sihlala singekho kulo. Indlela yokubuya ihlala iphukile kuleso simo nakuba umzila wokuphuma usukhona. Hlola lokho okufakwe uhlangothi olukude, hhayi lokho okukuthumele ngaphandle.

Lokho imodi engasoze ikulungise

Ukuhamba kwemizila komhlaba wonke akunikezi ukufinyelela kwi-inthanethi yomphakathi, ukudlula phakathi kwama-VPC angahlobene noma imizila eqinile engekho. Akushintshi imithetho ye-firewall noma i-IAM, ngakho ukuxhumana okunqatshwe inqubomgomo kuhlala kunqatshiwe.

Lezi zingozi zibonakala zifana ngaphakathi komthwalo womsebenzi futhi azihlobene nobukhulu bemizila.

Hlola kusuka esifundeni esikude uya enkonzweni yangempela, bese uqinisekisa ukuthi impendulo ibuya ngomhubhe ohlosiwe. Bhala imodi, ukuhlelwa kokumemezela kanye nendawo oyihlolile. Uma ukuhlola kusahluleka, qhathanisa ithebula le-BGP lerutha elikude nohlu lwemizila ye-VPC ngaphambi kokuphinda uthinte imodi. Khona-ke umbiko olandelayo waphakathi kwezifunda uqala ngamaqiniso, hhayi ngokushintshwa kwemodi.