Indlela yokulinganisa ibhili ye-AWS Client VPN kusuka ku-console

Uhambo lokulinganisa i-AWS Client VPN: bala ukuxhumana, khipha amahora okuxhumana kumalogi esikhathi, bese wengeza izindleko ezingaphandle kwemali ye-endpoint.

Ngenyanga edlule ngakha isilinganiso se-Client VPN kuspredishithi, ngasithumela kuklayenti, sase ngisilungisa izikhathi ezimbili: kanye ngoba ngaphindaphinda ukuxhumana ngamasubneti, futhi kanye ngoba ngasebenzisa inani labantu esikhundleni sedatha yesikhathi. Inguqulo eyasinda ekubuyekezweni incike kumamitha amabili wamahora kanye nohlu olufushane lwezindleko zohlangothi. Ungakha kabusha kusuka ku-console kanye nokukhipha kwelogi okukodwa, ngaphandle kwesibali sentengo.

Amamitha amabili, futhi akukho okunye ku-endpoint

I-AWS ikhokhisa i-endpoint ye-Client VPN ngamahora okuxhumana nangamahora esikhathi. Amahora okuxhumana ahamba kuyo yonke inethiwekhi eqondiwe exhunywe ku-endpoint, ubusuku nemini, noma ngabe ukhona oxhumayo noma cha. Amahora esikhathi ahamba ngeklayenti ngayinye exhunyiwe, inqobo nje uma leso sikhathi sihlezi sivuliwe.

MeterWhat increments itWhat does not change it
Association-hoursEach associated subnet or Transit Gateway attachment, per hour, 24/7 while attachedNumber of users, traffic volume
Connection-hoursEach active client session, per hourHow many subnets that client can reach

Kulelo thebula kuphuma imiphumela emibili ngqo. I-endpoint okungekho muntu kuyo isabiza imali, futhi umuntu oyedwa osebenzisa i-laptop nefoni ngesikhathi esisodwa udala ukuxhumana okubili.

Bala ukuxhumana ku-console, hhayi amasubneti ku-VPC

Vula i-VPC, bese kuba yi-Client VPN endpoints, bese kuba yi-endpoint yakho, bese kuba yithebhu ye-Associations. Umshiya ngamunye lapho uwukuxhumana kwesubneti, futhi lelo nani lemigqa liwumphindaphindi wakho wokuxhumana. Inani lamasubneti ohlelo ngemuva kwe-VPC alihlangene nakho.

Ukuxhumana okukodwa kwanele ukufinyelela inethiwekhi ye-VPC egunyaziwe uma imizila ye-endpoint nemithetho yokugunyaza isibekela indawo oya kuyo. Ukuxhumana okwengeziwe kuthenga ukuqina ekuhlulekeni kwesifunda sokutholakala, hhayi ukufinyelela okwengeziwe. Ngakho idizayini yama-AZ amabili iphindaphinda amahora okuxhumana, kanti i-VPC yohlelo enamasubneti ayisishiyagalombili ayiphindi lutho ngesishiyagalombili.

Qaphela uhlobo lokuxhumana ngenkathi usekulelo khasi. Ukuxhumana kwesubneti ye-VPC nokuxhumana okuqondile kwe-Transit Gateway kuyizinhlelo ezihlukene ezinemigqa yebhili ehlukene, ngakho ungadlulisi imodeli eyodwa esilinganisweni somunye. Futhi ungahloli inani ngokuxhoma izinto: ukususa inethiwekhi yokugcina eqondiwe kuqeda izikhathi ezisebenzayo futhi kuvimba ukuxhumana okusha kuze kube khona okuxhunyiwe futhi.

Khipha amahora esikhathi kudatha yesikhathi

Inani labantu liwukufaka okungalungile, futhi akulungile kuzo zombili izinhlangothi. Abantu abayishumi abagcina amadivayisi amathathu exhunyiwe bangukuxhumana okungamashumi amathathu. Abantu abayikhulu abaxhuma imizuzu engamashumi amabili ngosuku abavezi ngisho nokuthi basondele ekuxhumakeni kwekhulu ngesikhathi esisodwa.

Amalogi okuxhumana e-Client VPN aqopha izehlakalo zokuxhuma nokunqamula kuklayenti ngayinye, okuyikho kanye lokho okudingayo. Khipha iviki elimele, hlanganisa izehlakalo, bese uhlanganisa ubude besikhathi:

connection-hours = sum of (disconnect_time - connect_time) per session
sessions         = one per client connection, not per person

Bese ulungisa imikhuba emibili. Izikhathi ezishiywa zixhunyiwe phakathi nesidlo sasemini, ubusuku noma ukulala kwe-laptop okungazange kunqamule umhubhe zisakhokhiswa, futhi azibonakali ekubalweni kwabantu. Ukukala kungokwamahora futhi, ngakho bika isikhathi semizuzu engamashumi amabili njengehora eliphelele esikhundleni sokucabanga ukukhokha okulinganayo; uma ibhili lifika liphansi, kubheke njengenzuzo hhayi njengokufaka kokuhlela.

Yenza izibalo ngamanani esifunda sakho

Amanani ahluka ngesifunda, ngakho wathatha kukhasi lekhasi lentengo ye-AWS VPN lesifunda osebenza kuso bese uwangeza kuspredishithi njengokufaka. Njengomzekelo kuphela, thatha inani lokuxhumana lika-0.10 dollar ngehora kanye nenani lehora lokuxhumana lika-0.05 dollar, bese ubala inyanga yezinsuku ezingama-30 enokuxhumana okubili okugcinwe inyanga yonke kanye nabantu abayi-100 abaxhuma amahora ayisithupha ezinsukwini zokusebenza ezingama-20:

association-hours = 2 * 24 * 30     = 1,440
association fee   = 1,440 * 0.10    = 144.00

connection-hours  = 100 * 6 * 20    = 12,000
connection fee    = 12,000 * 0.05   = 600.00

Client VPN subtotal                 = 744.00

Manje hamba ukufaka okukodwa ngesikhathi bese ubheka ukuthi imuphi umugqa ophendulayo. Ukuphindaphinda ukuxhumana kwengeza ama-dollar angama-144 lapha; ukuphindaphinda isikhathi esijwayelekile sokuphindeka kwengeza ama-600. Leso silinganiso sivame ukuxazulula ingxabano yedizayini endaweni yakho: susa okungadingekile ongakwazi ukukufakazela, noma landela izikhathi ezingasebenzi, kuye ngokuthi iyiphi inombolo enkulu. Bhala isifunda kanye nosuku lwamanani eduze komphumela, ngoba isilinganiso esingenakho akukho kungenziwa kabusha emasontweni ayisithupha.

Engeza izindleko esilinganiso esincane esizishiyayo

Imali ye-endpoint ikhokhela i-endpoint. Konke okuthintwa ukuhanjiswa ngemuva kwalokho kunomitha yako, futhi kuleyo migqa lapho izilinganiso ze-VPN ezinethuba ziwela khona.

  • Ukuphuma kwe-inthanethi kokuhanjiswa okuphuma nge-endpoint, kukhokhiswa nge-GB.
  • Amakheli e-IPv4 omphakathi, aphethe imali yawo yehora ngayinye ngaphandle kwe-VPN.
  • Ukutholwa nokugcinwa ku-CloudWatch Logs kwamalogi okuxhumana owasanda kuwakhipha.
  • Izingcingo ze-Lambda uma usebenzisa isiphathi se-client-connect.
  • I-Directory Service noma umhlinzeki wakho wobunikazi we-SAML, uma abasebenzisi beqinisekisa ngale ndlela, kanye nezindleko ze-ACM Private CA uma ukhipha izitifiketi lapho.
  • Amahora e-NAT Gateway nokucutshungulwa kwedatha, kanye namahora okuxhumeka kwe-Transit Gateway kanye nokucutshungulwa kwedatha, noma nini lapho umzila uwasebenzisa.

Akukho kulokhu okukhula nenani lokuxhumana, yingakho inombolo yomsebenzisi ngamunye eyakhiwe kuphela ngezindleko ze-endpoint ibukeka kahle ephepheni bese ikhula lapho kuvela ukuhanjiswa kwangempela. Zibeke emigqeni ehlukene ngisho lapho kufanele uzilinganisele, ukuze umfundi abone ukuthi yiziphi izingxenye ezikalwe neziyizilinganiso.

Hlola ispredishithi ngaphambi kokuyithumela

Izivivinyo ezine zibamba amaphutha engiwenzile ngempela: inani lokuxhumana lihambisana ngqo nethebhu ye-Associations, amahora esikhathi avela ezehlakalweni zelogi ezihlanganisiwe hhayi ekubalweni kwabantu, isifunda nosuku lwamanani kubhaliwe, futhi yonke indleko yohlangothi inomugqa wayo. Uma kukhona okungekho kokune, unesilinganiso esihlelwe.

Donsa kuqala ukukhipha kwelogi. Yikho kuphela okufakiwe ongakwazi ukukwakha kabusha engqondweni kamuva, futhi kukutshela nokuthi inkinga yezikhathi ezingasebenzi ifanele ilungiswe ngaphambi kokufika kwebhili lokuqala.

Izihloko ezihlobene