Amaphrojekthi amaningi e-Google Cloud, i-VPN eyodwa ehlanganisiwe? Qala ngokunquma
I-VPC eyabiwe, i-peering kanye nesikhungo sokuxhumana ziphendula imibuzo yobunikazi ehlukene. Khetha umngcele wenethiwekhi ngaphambi kokuthumela i-VPN eyodwa iphrojekthi ngayinye.
Lapho amaphrojekthi amaningi e-Google Cloud edinga ukufinyelela okuhlanganisiwe, umuzwa wokuqala i-VPN eyodwa iphrojekthi ngayinye, futhi lokho cishe ngaso sonke isikhathi kuyisimo esingalungile. Ubunikazi bephrojekthi nokuhamba kwamaphakethe kuyizindaba ezihlobene kodwa ezihlukene, futhi isakhiwo esiwusizo sigcina imingcele yokuphatha oyidingayo kuyilapho sinikeza iziqalo ezihlosiwe indlela eyodwa ecatshangelwe eya ehhovisi noma esikhungweni sedatha. Lezi zivivinyo zinquma ukuthi iyiphi imodeli yenethiwekhi oyifunayo ngempela, ngokulandelana okugwema ukusebenza kabusha. Ngayinye yazo ingaqeda ingxoxo kusenesikhathi, futhi lokho kuyiphuzu.
Umngcele wephrojekthi awudingi ngokuzenzakalela umhubhe wawo.
Hlola ukuthi into eyabiwe ingabe iyinethiwekhi
Qala ngombuzo wobunikazi, hhayi wokuxhumana: ingabe ubunikazi benethiwekhi obumaphakathi bungasekela le misebenzi? Uma impendulo ingu-yebo futhi inhlangano inokucushwa okufanele, iphrojekthi ephethe ingumnikazi we-VPC, amanethiwekhi amancane kanye nokuxhumana, kuyilapho amaphrojekthi enkonzo engabanikazi bemithombo yawo yezinhlelo zokusebenza. Ukuxhumana okukodwa kwe-Cloud VPN kuleyo nethiwekhi eyabiwe kungase kusebenze iziqalo zomsebenzi ezihlosiwe, ngokuhambisana nezinqubomgomo zokuhamba nokuphepha .
Yiba nembe kukho okwenziwa ukuhlanganiswa. Ukunamathisela iphrojekthi yenkonzo akuhlanganisi i-VPC yayo ezimele ekhona kunethiwekhi ephethe, futhi akuhambisi yonke imithombo ngokuzenzakalela. Ukunamathisela umsebenzi, izimvume, indawo yekheli kanye ne-DNS konke kuyingxenye yesakhiwo, hhayi imiphumela yesilungiselelo. Funda ukuhlanganiswa njengoshintsho lwezimvume kuqala bese kuba ushintsho lokuhamba, ngoba amaqembu ngokuvamile athola umehluko phakathi nokushintsha.
Uma ubunikazi obumaphakathi bungamukeleki emaqenjini athintekayo, ma kulesi sigaba futhi ubheke okusele njengomklamo we-peering noma wesikhungo. Ukuphoqelela i-Shared VPC eqenjini elidinga imijikelezo yokuphila yenethiwekhi ezimele kudala inkinga yezombusazwe enegama lobuchwepheshe.
Hlola ukuthi ama-VPC azimele angahlala ezimele yini
I-peering igcina ama-VPC ahlukene, futhi yingakho iheha amaqembu afuna izinhlelo zawo zekheli nokulawula kwawo ushintsho. Ingqinamba ukuthi i-peering ayidluli: i-peering ye-A-kuya-B ne-B-kuya-C ayidali ngokwayo ukuhamba kwe-A-kuya-C nge-B. Uma amaphrojekthi amathathu edinga ukufinyelela indawo eyodwa ehlanganisiwe, udinga uhlelo lokushintshana olucatshangelwe hhayi uchungechunge lwe-peering.
Ukwabelana ngokufinyeleleka okuhlanganisiwe kuncike futhi ekushintshaneni okubhaliwe kwemizila yangokwezifiso kanye nezimemezelo ze-Cloud Router ezihlosiwe. Isimo se-peering esisebenzayo sifakazela ukuthi i-peering ikhona, hhayi ukuthi iziqalo okubalulekile ohlangothini ngalunye zake zathunyelwa ngaphandle. Hlola ububanzi obuthunyelwe ngaphandle ezinhlangothini zombili ze-peer, ekucushweni okwenza ukuthunyelwa ngaphandle, futhi uqhathanise namakheli asetshenziswa ngempela imisebenzi yakho. Ukungafani lapho yisizathu esivame kakhulu sokuthi i-peering ibonakale iphilile kuyilapho isiqalo sihlala singafinyeleleki.
Bhala uhlelo lwamakheli ngaphambi kwanoma yini enye. Ububanzi obungahlangani, imizila eya endaweni ngayinye ehlosiwe kanye nezimemezelo zokubuyela ziyizinto ezintathu le modeli ephila noma efa kuzo.
Hlola ukuthi imodeli yesikhungo iyafaneleka yini ku-topology
Ngokomklamo omkhulu noma ohlukaniswe ngendlela ehlukile, umbono jikelele we-Google Network Connectivity Center uchaza amamodeli esikhungo nomsebe. Yifunde ngokokwesekwa inguqulo yamanje, hhayi ngokokushiwo umdwebo: yikuphi ukuhlanganiswa kwe-VPC nokuhlanganisiwe, imiphi imindeni yemizila futhi yiziphi izinqubomgomo ezivunyelwa uhlobo ngalunye lomsebe.
Hlola umndeni wamakheli ngokucacile. Izibonelo zokuhlela emihlahlandleleni eminingi, kuhlanganise nale, ziphathelene ne-IPv4, futhi isici esikhona kuhlobo olulodwa lomsebe asisebenzi ngokuzenzakalela ngaphandle koshintsho kolunye. Uma indawo yakho inezitezi ezimbili, lowo mbuzo ungowokukhetha imodeli, hhayi ukufuduka kwakamuva.
Ithebula elingezansi isifinyezo samamodeli amathathu kanye nombuzo onquma ngalinye.
| Model | Network relationship | Planning question |
|---|---|---|
| Shared VPC | Service projects use subnets of a host project's VPC | Can central network ownership support these workloads? |
| VPC Network Peering | Independent VPCs exchange supported routes through explicit peers | Are direct peer and hybrid route exchanges sufficient? |
| Network Connectivity Center | Supported VPC and hybrid spokes join a managed hub | Does the required topology fit current routing and policy? |
Hlola ukuthi ukuhamba akunikezeli ini
Ukushintshana kwemizila akusona isipho sokuthembela esiphelele. Ukuxazululwa kwe-DNS, imvume yodonga lomlilo kanye nokugunyazwa kohlelo lokusebenza kuhlala kuyimithwalo yazo, futhi ngayinye icushwa ngumnikazi ohlukile ezinhlanganweni eziningi. Umklamo ocabanga ukuthi ukufinyeleleka kusho ukugunyazwa uzophumelela ukuhlolwa kokuxhumana bese wehluleka ekubuyekezweni kwezokuphepha.
Qinisekisa futhi indaba ye-DNS yemodeli ngayinye, ngoba izilungiselelo zesifunda nokudlulisela ziyahluka phakathi kwenethiwekhi eyabiwe namanethiwekhi ane-peer. Amagama ayimfihlo axazululwa kuphrojekthi eyodwa awalandeli umzila angene kwelinye.
Rekhoda isinqumo kanye nomnikazi waso
Gxilisa lapho inhlangano ifuna umnikazi wenethiwekhi eyabiwe; gcina ama-VPC ahlukene lapho umjikelezo wokuphila noma inqubomgomo kudinga khona. Bese ukhetha ubudlelwano bokuxhumana obusekelwayo futhi ubhale ukuthi ukhethe okukuphi, ubani umnikazi wenethiwekhi eyabiwe, nokuthi iphrojekthi ngayinye ingamemezela ini.
Ukubala amaphrojekthi nokuthenga i-VPN eyodwa kwelinye akusona isikhundla sesinqumo sobunikazi. Yisinqumo esifanayo, esithathwe kamuva, yilowo othola ifayela lokukhokha kanye nethebula lokuhamba njengefa.