Ihabhu namagatsha noma inethiwekhi egcwele: isiphi isakhiwo se-VPN esifanele iziza zakho
Amahubhe amabili asebenzayo awasona isakhiwo. Qhathanisa indlela yokudlula, indlela yokwehluleka nezindleko zoshintsho ngaphambi kokukhetha ihabhu, imeshi, noma ihabhu elinezixhumanisi eziqondile ezimbalwa.
Amahhovisi amagatsha amabili akhuluma wona wonke usuku, futhi umhubhe ophakathi kwawo udlula edathasentha esifundeni esinye. Yonke isicelo sikhokha leyo ndlela kabili, futhi akekho oqaphelayo kuze kube yilapho ukuxhumana kwefayela kuqala ukuzwakala kungalungile. Lapha impendulo yombuzo wesakhiwo iqala khona ngempela: hhayi ukuthi yimuphi umdwebo obonakala uqinile, kodwa ukuthi iyiphi indlela yokuhamba okhokhelayo. Womabili amadizayini ayasebenza, futhi ehluleka ngezindlela ezahlukene ngezindleko ezahlukene.
Bala ubudlelwano bogxa kuqala kunanoma yini enye
Uma kuneziza ezingu-N, imeshi egcwele idinga amahubhe angu-N aphindwe ngo-N kususwe okukodwa, ahlukaniswe ngambili; ihabhu lidinga u-N. Ezizeni ezinhlanu lokho kuyishumi uma kuqhathaniswa nesihlanu, futhi lokho kusazwakala kulawuleka. Kwezingu-105 uma kuqhathaniswa neshumi nanhlanu, futhi umehluko awusewona umbalo kodwa abasebenzi.
Ngalunye lwalolo budlelwano luthwala isimo okufanele usilawule. Ku-IPsec lokho kusho isivumelwano sokuphepha, ubunikazi, ukhiye noma isitifiketi, ukutholwa kogxa ofile, kanye nomzila owodwa okungenani wephrefikhi yokude. Ku-WireGuard lokho kusho ukhiye womphakathi kanye nebhlokhi ye-AllowedIPs kugxa ngamunye, okuyinto eshibhile kugxa ngamunye kodwa engenakho ukutholakala nhlobo: isiza esisha sisho ushintsho lwekheli kuyo yonke into ekhona.
Vumela ingxube yokuhamba inqume, hhayi umdwebo
Uma ukuhamba kwamagatsha ikakhulukazi izicelo eziya ku-ERP emaphakathi noma kukhlasta lefayela, ihabhu akulona ukuyekelela, yilona ifomu elifanele: ukuhamba bekukade kufuna ukuya lapho, futhi iphuzu elilodwa lenqubomgomo kulula ukulihlola kunemeshi yemithetho yezimbili. Imeshi ithola inzuzo yobunkimbinkimbi bayo lapho amagatsha ashintshana ngedatha: ukuphindaphinda phakathi kwamahhovisi amabili, izwi phakathi kweziza, ukwabelana nge-CAD okuvulwa ngonjiniyela abayishumi nambili usuku lonke.
Izehlakalo ezinzima ziphakathi kwalokhu, futhi ziningi kakhulu. Kala ngaphambi kokuphikisana kunokuqagela kusukela kushadi lenhlangano.
| Signal | Points to a hub | Points to a mesh |
|---|---|---|
| Branch-to-branch traffic | Occasional, small | Dominant, all day |
| Site count | Growing, past ten | Small and stable |
| Change rate | Frequent adds and moves | Rare |
| Failure tolerance | A second hub is affordable | Every site must survive alone |
Funda ithebula njengento ehlukanisa ukulingana, hhayi umthetho. Uma imigqa emithathu kwemine ikhombisa uhlangothi olulodwa, ngokuvamile idizayini iyaxazululeka; ukwehlukana kusho ingxube, okuyinto amanethiwekhi amadala agcina ewasebenzisa.
Ihabhu kufanele litshelwe ukuthi lidlulise
Amahubhe amabili asebenzayo esuka egatsheni aya ehabhini awakhi ukufinyelela kwigatsha ngegatsha. Ihabhu lidinga ukuvunyelwa kwe-IP forwarding, umzila oya kunethiwekhi yegatsha ngalinye, umthetho we-firewall ovumela ukudlula, nomzila wokubuya obaliwe; igatsha ngalinye lidinga umzila wamaphrefikhi esiza esinye. Kuhabhu le-Linux lokho yi-net.ipv4.ip_forward=1 kanye nochungechunge lwe-FORWARD olungayiphonsi phansi ngasese leyo mbhangqwana, futhi ku-IPsec esekwe kunqubomgomo lokho izikhethi zokuhamba ezibala isubnethi yegatsha elikude kuzinhlangothi zombili. Amanothi okudlulisa e-strongSwan akhuluma ngohlangothi lwe-kernel ne-firewall uma lona kuyisigaba osishodayo. Ukuhlola okushibhile ukuthumela ukuhamba kusuka egatsheni elilodwa kuya kusevisi kwelinye ngenkathi ubheka izinto zokubala zehabhu; umthetho ongakaze unyuke usho ukuthi ukulandelana akulungile, hhayi umzila.
Inqubomgomo emaphakathi nayo iyingxenye ewusizo. Amagatsha angavunyelwa ukufinyelela izinsiza ezabiwe ngaphandle kokufinyelelana wona, futhi lowo mbhalo wokufinyelela kufanelekile ukuwubhala ngokucacile. Imizila engekho iyisikhundla esibi somthetho umuntu angawufunda.
Qaphela inguqulo eyenziwe ingxenye: igatsha A libeka umzila eliya egatsheni B ngokusebenzisa ihabhu, ihabhu libeka umzila kuzinhlangothi zombili, kodwa i-firewall yehabhu ivumela ukuxhumana okusha okuvela ku-A, hhayi okuvela ku-B. Uhlangothi lokuqala luhamba kahle ekuhlolweni, lwesibili luyalenga, okubonakala njengephutha lomzila kodwa akulona.
Dizayina ukwehluleka kuqala, bese udizayina umzila ojwayelekile
Ihabhu elilodwa liwukuncika okwabiwe kanye nomkhawulo wokudlula, futhi ukusekelwa okwengeziwe yikhona lapho amadizayini ehabhu ngokuvamile ehluleka khona. Amahubhu amabili asho ukuthi igatsha ngalinye liphethe amahubhe amabili, futhi umzila wokubuya kufanele uvumelane nowokuphuma; uma kungenjalo, i-firewall egcina isimo iwalahla izimpendulo, futhi uphawu ukuxhumana okuvulwa bese kufa. Ukusetshenziswa okukhulu kuxazulula lokhu ngeprotokholi yomzila phezu kwamahubhe esikhundleni samaphrefikhi angaguquki, okuwumshini omkhulu kodwa osusa ukuqagela. Noma yini oyikhethayo, bhala umzila wokubuya eduze nowokuphuma, ngoba uhhafu wokubuya yiwona ongalokothi uhlolwe muntu.
Imeshi isabalalisa leyo ngcuphe: ukwehla kwesixhumanisi sesiza esisodwa akuzehlukanisi ezinye. Iphinda iphindaphinde izindawo lapho ukukhethwa komzila kungakumangaza khona, futhi izikhathi zohlelo lokusebenza azisindisi ekushintsheni komzila ngaphandle kosizo.
Akukho dizayini egcina isikhathi se-TCP siphila ngaphakathi kokwehluleka ngokwalo. Uma uhlelo lokusebenza lungakwazi ukuxhuma kabusha, isakhiwo akusona inkinga yakho.
Khetha ngezindleko zoshintsho, bese uqinisekisa imizila
Qala ngehabhu, ngoba yilona elishibhile ukuba nephutha ngilo, bese wengeza amahubhe aqondile kumabhangqwana okuhamba kwawo okufanelekayo. Leyo ngxube akusona ukwehluleka ukunquma; iyidizayini izinhlangano eziningi ezigcina ziyifinyelela phakathi konyaka. Okubalulekile ukuthi isixhumanisi ngasinye esiqondile sinesizathu esishiwo kanye nomphathi.
Bese uqinisekisa imidwebo emibili hhayi eyodwa. Komzila ojwayelekile, sebenzisa traceroute isuka esizeni ngasinye iya kuphrefikhi yesevisi ngayinye bese uqinisekisa ukuthi amagxathu ahambisana nomdwebo. Komzila wokwehluleka, vala ihabhu elilodwa bese uphinda, ngoba umzila osebenza kuphela ngenkathi yonke into iphila awukadizayinwa, kumane kwasethelwa.
Gcina imidwebo yomibili kanye nombhalo wokufinyelela, futhi uyibuyekeze lapho kwengezwa isiza; izindleko ozilawulayo yizindleko zoshintsho olulandelayo, hhayi ubuhle besithombe samanje.