Iphuma kuphi ngempela indlela yokuphuma ye-inthanethi ye-VPN yakho ephethwe
«I-inthanethi ifakiwe» akusho lutho ngokuthi ukuhamba komphakathi kuphuma kuphi, ubani oyihluzayo noma yini esala ngemva kokwehluleka. Landela umzila, bese ubhala zombili izimo zokwehluleka.
Awukwazi ukusho ukuthi ubani ohlunga ukuhamba komphakathi kwegatsha kuze kube yilapho isiphakamiso sikhombisa khona lapho lokho kuhamba kushiya khona inethiwekhi yomhlinzeki. Ukufinyelela kwe-inthanethi okufakwe ku-VPN ephethwe kuyisevisi yesibili, ehamba emzileni onamasango ayo, ukuhunyushwa kwamakheli kwayo kanye nomugqa wayo wokukhushulwa. Izivumelwano eziningi zichaza uhlangothi oluyimfihlo ngemininingwane futhi zishiye uhlangothi lomphakathi emshweni owodwa. Izicelo ezingezansi ziguqula lowo msho ube umdwebo ongawuvikela.
Landela indawo eyodwa yomphakathi isayithi ngayinye
Khetha umsingathi wegatsha bese ulandela indawo eyodwa yomphakathi, ubhala ikheli lokugcina elingelomhlinzeki nelokuqala elingele-inthanethi. Ukugxuma phakathi kwalawo makheli amabili ukho ukuphuma, futhi ngokuvamile akukho eduze kwesayithi elithumele iphakethe. Maka idivayisi eyenza lolu shintsho, ngoba yiyo leyo divayisi ephethe isihlungi esinquma ukuthi yini ephumayo. Phinda ukulandela kusuka kwesinye isayithi futhi uqhathanise amakheli okuphuma, ngoba amagatsha amabili abonakala efana ku-invoyisi angaphuma ngamasango ahlukene emadolobheni ahlukene.
Bhala futhi ikheli lomthombo indawo elibonayo ngempela, ngoba ukuhunyushwa kungase kwenzeke ekugxumeni ongakaze ukudwebe. Bhala izimpendulo ezibonwe eceleni kwalezo ezidwetshiwe, futhi igebe phakathi kwazo yilapho umcimbi wokuqala uzovela khona. Unjiniyela womhlinzeki ongakwazi ukunikeza ikheli lokuphuma lesayithi elithile usekutshele okuthile okuwusizo mayelana nomklamo.
Izinhlelo ezintathu zokuphuma nokuthi ngayinye igxilisa ini
Indlela yokuphuma emaphakathi oyisebenzisayo ngokwakho idonsela ukuhamba komphakathi esangweni lakho, okukunikeza inqubomgomo yokuhlunga namalogi kodwa kugxilisa umthwalo wazo zonke izayithi kusekethe eyodwa. Indlela yokuphuma eqhutshwa umhlinzeki ihambisa inqubomgomo namalogi ngale komngcele wesivumelwano, okwenza ukusebenza kube lula futhi kususe ukubonakala kwakho ngaso leso sinyathelo. Indlela yokuphuma esayithini ngayinye igcina ukuhamba komphakathi kusendaweni futhi iphindaphinda inani lezingaphezulu zenqubomgomo okufanele zihlale zifana.
| Arrangement | Blast radius of one failure | Address a partner allowlists |
|---|---|---|
| Central exit you operate | Every site, through one circuit and one team | Your own exit pool |
| Provider-run exit | Their shared gateway and its change window | Their NAT pool, often shared |
| Exit at each site | One branch, one local device | Each site's local address |
Buza ukuthi imuphi kwabathathu umhlinzeki awunikezayo ngempela ngaphambi kokuba uthathe uhlu njengemenyu, futhi buza ukuthi isayithi lingashintsha phakathi kwabo ngaphandle kwesekethe entsha. Impendulo yokufuduka ihlukanisa okungokwesivumelwano kulokho okungokobuchwepheshe kuphela. Bhala futhi ukuthi ubani ophethe ukuhunyushwa komthombo, ngoba lokho kunquma ukuthi uzakwethu kufanele afake ini ohlwini lwezimvume. Amasango abiwe agcina esho umthamo owabiwe futhi ngezinye izikhathi idumela elabiwe, okushintsha indlela ozakwethu abaphatha ngayo amakheli akho. Umthamo nawo ufanele umbuzo wawo, ngoba isango elabiwe lisebenzela amanye amakhasimende ngasikhathi sinye.
Ukuhlunga, ukuhunyushwa nokubethelwa kunabanikazi abahlukene
Umzila usungula ukufinyeleleka futhi awusho lutho ngokuhlolwa, ngakho thatha kokubili njengemibuzo ehlukene enabanikazi abahlukene. Kumzila ngamunye osemthethweni omenywe, shono idivayisi ehlungayo, idivayisi eqinisekisayo, idivayisi ehunyushayo kanye nedivayisi ehlolayo, bese usho ukuthi ubani uphatha ngayinye. Ukuhlukaniswa kwemizila komhlinzeki akusho ukuthi ukubethelwa kuphela kuphi, futhi isevisi eyimfihlo ingaqeda ithumbu layo emngceleni owodwa kuyilapho ukuphuma komphakathi kuphela komunye. Buza ukuthi ukuhunyushwa kwenzeka emaphethelweni omhlinzeki, esangweni elabiwe noma endleleni yakho yokuphuma, futhi ukuthi akhona yini amalogi eseshini nokuthi agcinwa isikhathi esingakanani. Bala abanikazi ezimpendulweni, ngoba isivumelwano esisho uhlangothi olulodwa emisebenzini emine ngokuvamile sishiya emithathu kuyo ingenazo izincwadi.
Umzila obanzi osemthethweni ofakwe kumongo wokuhlela imizila eyimfihlo ufanele ukuhlolwa okufanayo, ngoba ukufaka akusona isikhuthazo esingenabungozi kodwa isivumelwano esenziwe ngamabomu. Isigaba 11 se-RFC 4364 sihamba izinhlelo ezimbalwa zokufinyelela i-inthanethi zama-VPN e-BGP/MPLS futhi sithatha ukushintshana kwemizila phakathi komongo we-VPN nomongo wokudlulisa osemthethweni womhlinzeki njengalolo hlobo lwesivumelwano. Buza ukuthi yini evimbela ukuhamba komphakathi ukuthi kungathathi umzila oyimfihlo ngeshwa, futhi thola impendulo eceleni kwenqubomgomo yemizila hhayi kusilayidi.
Izimo ezimbili zokwehluleka okufanele kuvunyelwane ngazo ngaphambi kokusayina
Bhala izivivinyo ezimbili esivumelwaneni: ukulahlekelwa indlela yokuphuma ye-inthanethi, nokulahlekelwa ukuxhumana okukodwa okuyimfihlo. Kwesinye ngasinye, bhala izinsiza zangaphakathi, amasevisi e-inthanethi endawo kanye nemizila yokuphatha okufanele iqhubeke isebenza. Bese ubhala umzila wesipele okufanele uhlale uvinjiwe, ngoba umzila ojikeleza izilawuli ezimaphakathi mubi kunokuma okuhlanzekile. Nikeza umhlinzeki izivivinyo zombili futhi ucele umphumela wazo olindelekile ngokubhaliwe, kuhlanganise nokutholwa nesaziso.
Gijima lezo zivivinyo kusuka esayithini yokuhlola futhi uziqhathanise naleyo mpendulo ebhaliwe. Lapho kokubili kungavumelani, isivumelwano sichaza enye inethiwekhi hhayi leyo oyithengile. Imiyalo emibili ihlanganisa izimo ezijwayelekile: eyodwa ikhombisa umzila othathwa yindawo yomphakathi, enye ikhombisa ikheli elibonayo.
traceroute -n 203.0.113.10
curl -s https://example.net/ipXhumanisa izethembiso zokutholakala nengxenye oyikale, hhayi negama lesevisi. Isekhethi yasendaweni, umgogodla womhlinzeki kanye nesango elabiwe kuthwala izibopho ezihlukene kanye namaqembu okukhushulwa ahlukene. Izinhlamvu ezingu-L2VPN, L3VPN ne-MPLS zichaza indlela yokudlulisa, hhayi isiqinisekiso sokusuka ekugcineni kuya ekugcineni.
Ubufakazi bunqoba izichasiso esiphakamisweni
Amagama afana nokwengeziwe, okuphephile nokuqinile achaza inhloso hhayi umklamo. Esikhundleni salokho cela uhlu lwamadivayisi, izindawo zokuphuma, uhlelo lokuhunyusha kanye nomzila wesaziso. Umhlinzeki ongakhipha lezo zinto zine unomklamo; ongakwazi akanasilayidi. Gcina izimpendulo emibhalweni yesevisi hhayi ochungechungeni lwe-imeyili, futhi uzibuyekeze njalo uma isivumelwano sishintsha.
Izinhlelo zokuphuma zinyakaza buthule njengoba abahlinzeki behlanganisa amasango, ngakho umdwebo weminyaka emithathu edlule uwumthwalo. Uma uzakwethu ebika ikheli lomthombo angalaziyo, kufanele ukwazi ukusho emizuzwini embalwa ukuthi lavela kumklamo wakho noma kushintsho olungazange lumenywe muntu. Hhayi izichasiso, yilokho kukwazi okusala ngemva kokuphazamiseka kokuqala.