I-VM ye-GCP enama-NIC amaningi: kungani izimpendulo ziphuma nge-interface engalungile
Imizila yamafu nemizila yezivakashi izinqumo ezimbili. Dlulisa isicelo segatsha esisodwa nesicelo se-inthanethi esisodwa kuwo womabili ama-NIC ngaphambi kokwengeza imithetho yenqubomgomo.
Ukuxhuma i-interface yesibili ku-VM ye-Compute Engine kuyinika okunye ukuxhumana kwenethiwekhi, hhayi indlela yokubuya elinganayo. Isivakashi sisakhetha i-interface nekheli lomthombo emizileni nasemthethweni yaso. Ngemva kwalokho i-Google Cloud isebenzisa ukuhamba kwe-VPC kanye nenqubomgomo ye-firewall ezungeze i-interface iphakethe eliphume ngayo. Lapho lezi zinqumo ezimbili zingavumelani, izicelo zifika kuyi-NIC eyodwa futhi izimpendulo ziphuma kwenye, futhi igatsha libona ingxoxo evulekile ngengxenye.
Hamba indlela ngezinyathelo ezinhlanu futhi ukungavumelani kuzobonakala ngaphambi kokuthi ubhale umthetho wenqubomgomo.
Isinyathelo 1: hlanganisa ama-NIC amafu namadivayisi ezivakashi
Amafu aqamba ama-interface ngokuthi nic0, nic1 nokunye, futhi isivakashi sibona amagama amadivayisi okungadingeki avumelane. Xazulula ukuhlelwa kusukela kumethadatha we-instance noma kukheli le-interface ngokwalo ngaphambi kwanoma yini enye. Indlela ejwayelekile yokuzenzakalela enikezwa yi-DHCP ixhunyaniswe ne-nic0, yingakho indlela ebheke ku-inthanethi ivamise ukunqoba ngengozi. Ukubhala inqubomgomo ngokulandela igama ledivayisi eliqagelwe yiyo indlela umthetho olungile ogcina ngokuwela kuyi-interface engalungile.
Bhala amakheli, amagama amadivayisi kanye ne-VPC okungaphansi kwayo ngakunye. Leyo mephu enezinhlu ezintathu iwukufaka kwesinyathelo ngasinye esilandelayo.
Isinyathelo 2: qamba izinqumo ezimbili zokuhamba
Isinqumo sokuqala ngesezivakashi: iyiphi i-interface nekheli lomthombo eliphi sale phakethe. Esesibili ngesamafu: imizila ye-VPC nenqubomgomo ye-firewall ivumela ini ezungeze leyo interface.
Umzila obonakala ku-VPC ebheke ku-VPN awubi umzila wezivakashi okhetha leyo NIC. Umzila wamafu uchaza lokho inethiwekhi engakuletha, kuyilapho umzila wezivakashi unquma ukuthi iphakethe lenzeni.
Isinyathelo 3: khetha inqubomgomo yendlela yokubuya
Ngesethi encane nezinzile yama-prefix egatsha, imizila eqondile yendawo ekuyi-ezivakashi iyisisho esilula kakhulu: izimpendulo kulawo ma-prefix ziphuma nge-interface ebheke ku-VPN. Lapho amasevisi amaningi esebenzisa ngamabomu amakheli omsuka wendawo ahlukene, imithetho esekelwe kumthombo ekhetha ithebula nge-interface ngayinye igcina impendulo ngayinye kumongo ofanele. Idokhumenti yama-interface amaningi ichaza ukuqanjwa kwama-NIC nokuziphatha kwendlela yokuzenzakalela okuncike kukho lezi zinhlelo.
Ithebula ngalinye lidinga imizila exhunyiwe evumelekile namagxuma alandelayo, kanye nezindawo okuzobuzwa ngazo. Umthetho okhomba ethebuleni elingaphelele awusona isakhiwo sendlela yokubuya. Sebenzisa isango elibhalwe phansi kuleyo NIC esikhundleni sokwakha isango le-Ethernet ngokubuka kwe-subnet.
Isinyathelo 4: hlola izihlungi zezivakashi ngokwazo
Hlola lapho iseva ilalela khona nokuthi iyiphi imithombo yendawo ethwalwa yimpendulo. Isilaleli kuwo wonke amakheli asiyishitshi inqubomgomo yokuhamba, ngakho ukubopha kuwo wonke amakheli akushintshi lutho mayelana ne-interface impendulo ephuma ngayo.
Ku-Linux, buyekeza ukuqinisekiswa komzila ohlanekezelwe ngokumelene nomklamo ohlosiwe. Ukuwukhulula ngokuphelele njengesinyathelo sokuqala kushintshanisa iphutha lokuhamba nokuchayeka ekukhohlisweni, futhi kufihla ukungalingani obukade ukufuna.
Isinyathelo 5: hlola ukugeleza okukodwa ngomzila ngamunye
Qinisekisa ngokwehlukana isicelo segatsha esivunyelwe nesicelo se-inthanethi esingahlobene, ngasinye nomthombo nasendawo yaso yangempela. Bamba kuzo zombili izixhumi uma ukwazi, ngoba ubufakazi obuwusizo ukuthi iyiphi i-interface ethwale impendulo. Bese uqinisekisa ukuthi inqubomgomo ohlangothini lwamafu ihloniphe indlela oyiklame. Isicelo esisodwa esiphumelelayo sifakazela ukugeleza okukodwa, hhayi umklamo olinganayo.
Gcina izivivinyo ezimbili zihlukene emanothini akho, ngoba zisebenzisa imizila ehlukene nemithetho ye-firewall ehlukene.
Lokho i-NIC yesibili engakuniki
I-interface yesibili yengeza ukuxhumana kwenethiwekhi nekheli elilodwa. Ayengezi ukuhamba okulinganayo okuzenzakalelayo futhi ayidluli inqubomgomo ye-firewall. Ukuyithatha njengokulungisa ukuhamba yikho okwenza imiklamo yama-NIC amaningi iqongelela imithetho okungekho muntu ongayichaza kamuva.
Uma i-VM kufanele idlulise ithrafikhi yeminye imishini, hlela leyondawo yomhambisi ngokusobala, kufaka phakathi isethingi yamafu evumela ukudluliswa kanye nezihlungi zezivakashi ezihambisana nakho.