I-Azure Web App Ifinyelela Kanjani Emagcekeni Nge-VPN
I-firewall yehhovisi ibona i-subnet yakho yokuhlanganiswa, hhayi ikheli lomphakathi lohlelo lokusebenza. Lungisa ububanzi bomthombo, izikhethi nendlela yokubuyisela ngaphambi kokusola umhubhe.
Isicelo esiphumayo sohlelo lokusebenza lwewebhu sishiya isisebenzi ongakaze usibone, emthonjeni ongazange uwukhethe, futhi i-firewall yehhovisi kufanele isamukele. Yileyo nkinga yonke emshweni owodwa. Ukuhlanganiswa kwe-VNet yesifunda kunikeza isicelo indlela eya kunethiwekhi ebonakalayo, futhi i-VPN yesayithi iye kusayithi iyithwala isuka lapho. Konke okungahambi kahle ngemuva kwalokho kumayelana nebanga lomthombo nokuthi iphakethe lisetshenziswe ngamuphi umzila.
Okuthunyelwe yisisebenzi
Isevisi Yohlelo Lokusebenza isebenzisa ikhodi yakho kubasebenzi abahlala ngaphandle kokubuka kwenethiwekhi yokubhalisele kwakho. ukuhlanganiswa kwesifunda kunikwe amandla, ithrafikhi ephumayo inikezwa i-subnet ethunyelwe ku-VNet endaweni efanayo, futhi iphakethe livela lapho ngaphambi kokuthi liqhubeke. Ukuhlanganiswa akususi uhlelo lokusebenza ku-VNet futhi akulishintshi ikheli lakhona elingenayo. Inikeza kuphela ukugeleza okuphumayo i-hop yokuqala ehlukile.
Ngokuzenzakalelayo kuphela isikhala sekheli eliyimfihlo sithatha leyo ndlela, ngakho izindawo ezijwayelekile ze-inthanethi zisasuka ngqo kusisebenzi. Ukuhambisa yonke into nge-VNet kuyilungiselelo elihlukile futhi kuyisinqumo esihlukile, ngoba futhi kuthumela okuncikile kwakho esidlangalaleni kuwo wonke umhubhe.
Ithrafikhi yokulungiselela, efana nokudonsa kwesithombe sesiqukathi ekuqaleni, ilandela imithetho yayo yomzila futhi ingahluleka ngenkathi amakholi akho e-API ephumelela.
I-subnet yokuhlanganisa ingumthombo okufanele uwuvumele
Ihhovisi libona ububanzi bekheli le-subnet yokuhlanganiswa, nanoma yini isisetshenziswa sakho esilihumushela kukho, hhayi amakheli aphumayo omphakathi wohlelo lokusebenza. Faka lobo bubanzi kuzikhethi zethrafikhi zesayithi le-VPN nakumthetho wokuvikela umlilo osendaweni. Uma umhubhe usekelwe kunqubomgomo, izikhethi eziwushiyayo ziwisa iphakethe nanoma umzila ukhona.
Ungavumeli ikheli elilodwa lesisebenzi oke walibona. Izimo ziyashintsha ekulinganiseni nasekulungiseni inkundla, futhi umthetho ophiniwe ekhelini elilodwa uyaphulwa ngesikhathi esibi kakhulu.
Gcina uhlangothi lwendawo oluyiwa kulo luwumngcingo: isevisi eyodwa, imbobo eyodwa, inkombandlela eyodwa, nendlela yokubuya evunyelwe ngokusobala.
Ukulunguza nesango lokuhamba kusobala
Uma isango le-VPN lihlala kuhabhu ye-VNet kanye ne-subnet yokuhlanganisa kusikhulumi, indlela idinga ukuhamba kwesango elivunyelwe kuhabhu lokubuka kanye nokusetshenziswa kwesango elikude elinikwe amandla ekubukeni okukhulumayo. Ukulunguza ngokwakho kuthwala ithrafikhi phakathi kwama-VNet amabili futhi akukho okunye. Imizila esebenzayo ku-subnet subnet ilapho uqinisekisa khona ukuthi isango elilandelayo likhona ngempela.
Idizayini yehabhu ne-spoke othebula lomzila walo othumela u-0.0.0.0/0 ku-firewall iwuhlobo olujwayelekile, futhi leyo firewall idinga owayo umthetho wesiqalo esisendaweni.
Dweba indlela ephepheni ngaphambi kokuvula ithikithi nethimba lenethiwekhi, ngoba yonga usuku lokuqagela. Faka inkomba yokubuyisela emdwebeni, njengoba lokho kuwuhhafu wabantu abakhohlwayo.
Indawo yokugcina eyimfihlo engena ngaphakathi ingenye indlela
Indawo yokugcina eyimfihlo yenza uhlelo lokusebenza lufinyeleleke ngaphakathi kwe-VNet. Ayenzi lutho ocingweni oluphumayo lohlelo lokusebenza oluya ehhovisi, futhi amaqembu ngokuvamile alungisa eyodwa kuyilapho imfuneko yangempela ihlehla.
Amadokhumenti amadala achaza ukuhlanganiswa okudingekayo kwesango okwakhelwe endaweni ye-VPN, isici esihlukile esinezidingo zaso. I-Microsoft ihlela ukuthi ifake umhlalaphansi ngomhlaka-31 Mashi 2027, futhi incoma ukuhlanganiswa kwesifunda esikhundleni salokho.
Ungakopishi ukucushwa kwe-legacy point-to-site ngoba nje isibonelo esidala sikusebenzisile.
Qinisekisa ngomongo wohlelo lokusebenza uqobo
Hlola ngohlelo lokusebenza olusetshenzisiwe, hhayi kwikhompyutha yakho ephathekayo futhi hhayi ku-VM ku-VNet efanayo. Faka ikheli elixazululiwe, umphumela wokuxhuma kanye nempendulo yezinga lohlelo lokusebenza ngokuhlukene, ngenxa yokuthi ukwehluleka kwe-DNS, ukuphela kwesikhathi kwe-TCP kanye nephoyinti lokwenqaba lokufakazela ubuqiniso kubanikazi abathathu abahlukene. Uma ukulungiswa kwegama kwehluleka, lungisa i-DNS eyimfihlo ye-VNet ngaphambi kokuthinta umhubhe.
Isimo somhubhe oluhlaza sifakazela kuphela ukuthi isango liphezulu. Ayisho lutho ngabakhethi, imithetho yohlelo lokuvikela noma i-DNS.
Lapho isicelo sisebenza ekugcineni, bhala ububanzi bomthombo, imbobo yendawo kanye nendawo ye-DNS ku-runbook yohlelo lokusebenza. Umuntu olandelayo ozosusa iphutha kulokhu uzoqala kunothi lakho esikhundleni sokusuka ekhasini lesimo sesango.