I-MPLS VPN noma i-IPsec overlay: izivumelwano ezintathu okumele zixazululwe

Izithembiso ezintathu zihlala ngaphakathi kwesilinganiso esisodwa sendawo ebanzi, futhi ukuthenga esisodwa akuthengi ezinye. Othile udlulisela amaphakethe akho, othile ugcina umzila wakho uhlukile kuyo yonke enye ikhasimende, futhi othile unquma ukuthi ingabe umthwalo uyafundeka yini ngesikhathi sokudluliswa. Lezo zithembiso zingaba zezinhlangano ezihlukene futhi zisachaza umklamo owodwa osebenzayo. Ukuzihlukanisa yisinqumo; ukukhetha igama lobuchwepheshe akuyona.

Izithembiso ezintathu kwisilinganiso esisodwa sendawo ebanzi

Isithembiso sokuqala ukuthutha: yiziphi izindawo ezixhumayo, ngayiphi imijikelezo yokufinyelela, futhi ngubani odlulisela amaphakethe phakathi kwazo. Eyesibili umzila: yimiphi imikhawulo engafinyelela kwenye, ngubani ogunyaza ushintsho, futhi ukuthi ithrafikhi yakho ihlala kanjani yehlukile kumqashi othile. Eyesithathu ukuvikelwa: yini ebethelwayo, phakathi kwawoziphi amaphoyinti okugcina, futhi ngubani ophethe izinkinobho. Cela ngayinye ngokubhaliwe, ngoba impendulo ngayinye ihlala kudokhumenti ehlukile.

Isilinganiso somhlinzeki sijwayele ukunikeza intengo kweyokuqala, sicabange eyesibili futhi sishiye eyesithathu kuwe. Lokho akukona ukungathembeki; lezi zintathu zithengiswa ngamaqembu ahlukene. Kuba inkinga lapho ukubuyekezwa komklamo kuthola ukuthi iqembu lokuphepha licabange ukubethela kanti iqembu lenethiwekhi lacabanga ukuthi umhlinzeki uyayibhekela. Ukuhlukanisa umusho kube kuthathu kuthatha ihora futhi kuvimbela lowo mhlangano.

Ilebuli ichaza ukudluliswa, hhayi isevisi endaweni yokudlulisela

Ukushintshwa kwamalebuli ezinqubo eziningi kusho ukuthi iphakethe lihamba kanjani ngaphakathi kwenethiwekhi yomhlinzeki. Akusho ukuthi ikhasimende lixhuma ini, noma ukuthi ikhasimende lishintshana ini ngomphetho womhlinzeki. Umhlinzeki angakha i-IP VPN enomzila phezu kwe-MPLS, noma isevisi yengaba 2 enomodeli wokuxhumana ohluke ngokuphelele, futhi kokubili kungafika kuwe njenge-„uxhumano lwe-MPLS”.

Amagama e-IETF e-VPN ahlinzekwa umhlinzeki achaza isilulumagama ngqo salokhu: umphetho wekhasimende, umphetho womhlinzeki, namamodeli esevisi akhiwe phakathi kwawo. Wasebenzise lapho isilinganiso sifiphalaza izingaba, futhi ubuze ukuthi ukudlulisela kuyini ngokomzimba.

Isevisi enomzila ikunikeza ubudlelwano bomzila nomphetho womhlinzeki, ngakho ukwengeza isiqalo kuba isicelo soshintsho ezinhlanganweni ezimbili. Ukudlulisela kwengaba 2 kuthwala umzila wakho futhi kudlulisela umthwalo wokusebenza ohlangothini lwakho. Akukho okungcono ngokwengqondo; impendulo ilandela ukuthi itopoloji yakho ishintsha kangaki nokuthi ufuna ngubani aphendule ngehora lesithathu ekuseni.

Ukubethela yisithembiso ongakwazi ukusithumela ngengozi

Ukuthutha okuyimfihlo akwenzi umthwalo ungafundeki. Ukwehlukaniswa komhlinzeki kugcina abaqashi behlukile ngokokusebenza; lokho akusona isitatimende sokuthi ngubani ongahlola amabhayithi endleleni. Uma imfuneko iwukuthi umhlinzeki akakwazi ukufunda ithrafikhi, leyo mfuneko idinga indlela oyilawulayo, futhi i-IPsec iyona ejwayelekile.

I-IPsec isebenza phezu kokuthutha okuyimfihlo kalula njengoba isebenza phezu kokufinyelela kwe-inthanethi, ngakho i-„MPLS noma i-IPsec” iwukukhetha okungamanga noma nini lapho udinga ukufinyeleleka okulawulwayo kanye nomngcele wakho wokuthembela ngasikhathi sinye. Nquma lapho ithumbu liphela khona, ngoba ithumbu eliphela kumzila lishiya ingxenye engemuva kwalowo mzila embhalweni ocacile. Bese unquma ukuthi ngubani olawula i-peer ngayinye, ngoba ukhiye ogcinwa yingxenye yesithathu awuwona umngcele ongumnikazi wakho.

Nikeza isithembiso ngasinye igama nomngcele okulinganisekayo

Bhala umugqa owodwa ngesithembiso ngasinye nomnikazi kanye nomngcele ongalinganiswa. Ukutholakala komjikelezo wokufinyelela kungokomhlinzeki wawo, ukubambezeleka komgogodla kungokomhlinzeki, futhi ukuphila kwethumbu kungokwanoma ubani ophethe amaphoyinti okugcina. Inombolo eyodwa ukusuka ekugcineni kuya ekugcineni okungekho muntu oyilinganisayo iyinombolo okungekho muntu okukweleta yona.

Isivumelwano sezinga lesevisi sivela kunkontileka kanye nobubanzi bayo, hhayi ezinhlamvini zegama lobuchwepheshe. I-IPsec ayidingi ukuthutha kwe-inthanethi komzamo ongcono kakhulu, futhi i-MPLS ayithwali isiqinisekiso sokubambezeleka ngokwayo; kokubili kuncike ku-underlay kanye namaphoyinti okugcina owakhethayo.

Hlola indlela oyidwebe, kuhlanganise nokwehluleka kwayo

Ukuthutha okuyimfihlo okunesixhumanisi esibanzi kusengahluleka lapho i-overlay yengeza izihloko, futhi uphawu isikhathi esisungulayo bese sima ezimpendulweni ezinkulu. Hlola usayizi osebenzisekayo esikhundleni sokuphikisana ngawo, futhi bhala iphakethe elikhulu kunawo wonke elidlula ukusuka ekugcineni kuya ekugcineni. Yenza lokho ngaphambi kokuba uphikisane nge-bandwidth, ngoba indlela elahla amaphakethe amakhulu ibukeka njengenkinga yohlelo lokusebenza. Inombolo ingeyedokhumenti yomklamo eduze kwe-MTU yomjikelezo wokufinyelela ngamunye.

ping -M do -s 1400 -c 3 <vpn-gateway>
traceroute -n <vpn-gateway>

Leyo miyalo ivela kusibungu se-Linux endaweni eyodwa; ezinye izinkundla zibhala ukuhlolwa okufanayo ngendlela ehlukile. Uma indawo idinga inani elincane, lokho kuyisithiyo somklamo okumele sibhalwe phansi, hhayi iphutha okumele libikwe. Isiyalo esifanayo sisebenza ku-throughput, ngoba ukubethela kudla ukucubungula futhi iphoyinti lokugcina liba yingxenye yokubalwa komthamo.

Dweba imidwebo emibili ngaphambi kokusayina: indlela evamile enelebuli kumnikazi ngamunye, nendlela yokwehluleka enalezi zinto zilebuli. Eyesibili iveza imiklamo ebukeka iyisengezo ephepheni futhi empeleni incike kudivayisi eyodwa. Lapho kuza ukuphazamiseka, lowo mdwebo yiwo oguqula ukusa okudidayo kube i-triage emfushane.