I-ALB yangaphakathi enegama le-DNS lomphakathi: ngempela iveziwe?
Isixazululi somphakathi singabuyisela amakheli angasese kusilawuli somthwalo se-AWS sangaphakathi. Hlola isikimu, izindlela kanye nesilaleli ngaphambi kokusibiza ngokuthi siveziwe.
Gijimisa uphenyo lwe-DNS lomphakathi ku-silawuli somthwalo wangaphakathi futhi ungase ubuyisele ikheli langasese, okubonakala njengokumiswa okungalungile kuze kube yilapho uhlola ukuthi irekhodi lenzelwe ini. I-AWS ibhala ukuthi amagama ezilawuli zomthwalo zangaphakathi angase axazululwe esidlangalaleni kuyilapho ama-node azo ephethe amakheli angasese kuphela. Isixazululi saphendula ukuthi isevisi ikuphi; asizange sidale indlela, asizange sivule iqembu lokuphepha futhi asizange siqinisekise muntu. Ukuthi leyo mpendulo iyinkinga yini kuncike emaqinisweni ongawahola ngokulandelana.
Isinyathelo sokuqala: funda isikimu, hhayi i-IP
Inkambu yesikimu isitatimende sosilawuli somthwalo ngokwaso mayelana nomngcele waso. I-aws elbv2 describe-load-balancers --names app-internal ibuyisela i-Scheme enenani le-internal noma i-internet-facing, kanye nohlobo lwekheli lwe-IPv4 noma isitaki esikabili. Isilawuli somthwalo esibheke ku-inthanethi sisengadlulisela ezintweni eziyimfihlo, ngakho ukubona amakheli angemuva angasese akufakazi lutho mayelana nengxenye engaphambili.
Bhala phansi isikimu ngaphambi kokubheka noma yini enye, ngoba zonke izinqumo ezilandelayo zincike kuso. Sisitshela nangokuthi yikuphi ukuphatha okukhona, kusukela emaqenjini okuphepha nemithetho yesilaleli kuze kufinyelela kusethi yezici zalolo hlobo lwesilawuli somthwalo. Isikimu esikhutshelwe kusithombe sesikrini sekhonsoli esidala sibi kakhulu kunokungabi nawo umbhalo. Sifunde futhi kusuka ku-API bese unamathisela inani kuthikithi.
Isinyathelo sesibili: bheka ukuthi igama lixazululeka kuphi
Buza ngaphandle kwe-VPC nge-dig +short app-internal-1234567890.eu-west-1.elb.amazonaws.com futhi uphawule ukuthi izimpendulo ziku-10.0.0.0/8, 172.16.0.0/12 noma 192.168.0.0/16. Impendulo yangasese evela kusixazululi somphakathi iwukuziphatha okulindelekile kwegama lesilawuli somthwalo sangaphakathi; akubona ubufakazi bokuthi ikheli liyagayeka kusuka ku-inthanethi.
Xazulula igama elifanayo ngaphakathi kwe-VPC bese uqhathanisa. Uma izimpendulo ezimbili zihlukile, ubona ukuqanjwa kwamagama kwe-split-horizon, futhi lowo mehluko uwummininingwane wokwakheka, hhayi ukuvuza.
Isinyathelo sesithathu: bala izindlela ezingafinyelela kuso
Ikheli langasese liyafinyeleleka kunoma yikuphi lapho kunendlela nomthetho wokuphepha. Wabale ngamabomu: i-VPN yendawo-kuya-endawo, i-VPN yeklayenti, ukuxhumana kwe-VPC, okunamathiselwe kwe-transit gateway, i-Direct Connect kanye nanoma iyiphi i-proxy noma i-bastion ngaphakathi kwe-VPC. Eyodwa yazo iyindlela ehlosiwe, kanti ezinye yilezo umhlaseli angazifuna.
Bese uhlola ukuphatha endleleni ngayinye: amaqembu okuphepha kusilawuli somthwalo, ama-ACL enethiwekhi kuma-subnet kanye nokuhlela indlela okwenza indlela ibekhona. Iningi lamacala abikiwe esevisi yangaphakathi eveziwe axazululwa lapha, kungaba kwakukhona ukuxhumana okungahlosiwe noma indlela yayihlosiwe futhi uhlelo lungenakho ukuqinisekisa.
Isinyathelo sesine: hlola isilaleli nohlelo ngokwehlukana
Zama ukuxhuma kusuka kunethiwekhi okungafanele ifinyelele isevisi bese uqinisekisa ukuthi awukwazi. Bese uzama kusuka kuleyo okufanele, futhi uqinisekise ukuthi ufinyelela isilaleli. Le miphumela emibili ihlukanisa ukufinyeleleka kwenethiwekhi nokuziphatha kohlelo, futhi iwubufakazi kuphela obalulekile embuzweni wokuchayeka.
Isilaleli esifinyelelekayo asifani nohlelo olufinyelelekayo. Hlola isitifiketi se-TLS nenqubomgomo yephrothokholi, bese ukufakazela nokugunyaza kohlelo ngokwalo. Ithuluzi langaphakathi elamukela noma ubani oshayayo ku-VPN yenkampani lichayeka kuyo yonke i-laptop ehlanziwe kuleyo VPN, okuyingozi ehlukile kuleyo ebheke ku-inthanethi kodwa kuseyingozi.
Khumbula ukuthi ukuphatha kuyehluka ngenhlobo. Izicima-mlilo zesigaba sohlelo zixhunywa emndenini owodwa wezilawuli zomthwalo hhayi kwelinye, ngakho qinisekisa ukuthi yini ngempela etholakalayo kusikimu nohlobo oluphambi kwakho esikhundleni sokucabanga ukulingana.
Isinyathelo sesihlanu: ncika ukuthi igama uqobo liwukuthi libalulekile
Ukuxazululeka komphakathi kungase kudalule igama lesevisi, isifunda kanye nebanga lamakheli. Kuphathe njengombuzo wokudalulwa kolwazi onempendulo yenqubomgomo, hhayi isigameko esizenzakalelayo: gcina amagama ebhizinisi abucayi ngaphandle kwamagama ezinsiza, futhi ubhale ukudalulwa kurekhodi lakho lengozi uma inqubo yokuqamba igama idalula okungaphezu kwalokho okukufunayo.
Uma inhlangano ifuna isipiliyoni sokuqamba amagama sangasese, indawo ephethwe yangasese ingase inikeze isiteketiso esixazululwa ngaphakathi kwama-VPC ahlobene kuphela. Lokho kushintsha igama abasebenzisi abalibonayo; akulenci igama elikhiqizwe umhlinzeki libe yimfihlo futhi akususi noma iyiphi indlela yenethiwekhi.
Ungazami ukubophelela amakheli ukuze ufihle impendulo. Amakheli esilawuli somthwalo ayashintsha, ukubophelela kuphula imikhuba yokuqinisekisa i-TLS, futhi ukuphatha okudingayo ngempela ukuthi ubani ongakha ukuxhumana nokuthi uhlelo ludinga ini kubo. Hlola amaqiniso amane, uwabhale, futhi umbuzo awusabi nokungacaci.