Nebula static_host_map: ikheli umbhoshongo ongakwazi ukulinikeza

Umbhoshongo ngamunye ungatshela isibungu mayelana nayo yonke enye intanga ngaphandle kwalapho umbhoshongo ugcina khona. Kukhona okumele kwaziwe ngaphambi kokuba i-overlay ibe khona, futhi i-Nebula ibeka lokho okuthile emephini elilodwa elincane. Imephu ihlanganisa ubunikazi be-overlay nekheli elisebenza kunethiwekhi evamile. Konke okufundwa kamuva kuncike ekutheni lokho kuhlanganisa kulungile.

Amakheli amabili anemisebenzi emibili

Isibungu ngasinye se-Nebula sinokheli lwe-overlay oluhlala lungaguquki ngenkathi idivayisi ihamba phakathi kwezixhumi. Lelo kheli yibo ubunikazi obusetshenziswa izitifiketi, imithetho ye-firewall kanye nobudlelwano bontanga, futhi lodwa aluhambisi ndawo. Iphoyinti lokugcina elifinyelelekayo liyinto enye: igama lesibungu noma ikheli kunethiwekhi engaphansi kanye nechweba le-UDP, futhi liyashintsha njalo lapho umshini ushintsha indawo. Imephu engaguquki iyinhlanganisela phakathi kwalezi zimbili.

Kuphela izingxenye ezidinga ukushayelwa zibandayo zingena emephini, okumvamisa ukusho ukuthi imibhoshongo kanye nomhleli oyedwa mhlawumbe. Ukugcina lolo hlu lufushane kuwumgomo wokuklama, ngoba konke okubhalwe ngesandla kuba yiqiniso okumele umuntu akunakekele. Ukuhlanganisa izinhlobo ezimbili zamakheli iyiphutha elivamile lokulungiselela: ikheli lomphakathi elifakwe ohlwini lwemibhoshongo aliqali ukutholakala.

Ubunikazi buya lapho kubhekwe khona ubunikazi. Ukufinyeleleka kuya emephini.

static_host_map:
  "10.42.0.1": ["lighthouse-01.example.net:4242"]

lighthouse:
  am_lighthouse: false
  hosts:
    - "10.42.0.1"

Isakhiwo sokufakwa kwemephu

Ukhiye yikheli le-overlay elibhalwe njengomucu ngaphakathi kwezimpawu zokucaphuna, futhi inani uhlu lwamaphoyinti okugcina, ngakho ubunikazi obubodwa bungaba nezindawo zokungena eziningi. Iphoyinti lokugcina ngalinye liphethe isibungu nechweba, futhi ichweba kumele lihambisane nalokho uhlangothi olunye olukulalelayo ngempela. Okuzenzakalelayo kwe-Nebula yi-UDP 4242, okuyindawo yokuqala hhayi isethembiso mayelana nokusetshenziswa kwakho.

Amaphoyinti amaningi okugcina awusizo lapho umbhoshongo unendlela engaphezu kweyodwa yokungena, njengekheli lomphakathi nekheli langasese lezingxenye ezikuleso sigaba. Iklayenti izama ngokulandelana, ngakho beka elinokwethenjelwa kakhulu kuqala. Nge-IPv6, beka ikheli phakathi kwezibiyelo eziyizikwele ngaphambi kokwengeza ichweba; ukwenza iphutha lapho kukhiqiza iphutha lokuhlaziya elikhomba umugqa ongafanele.

Ichweba elingalungile likhiqiza ukuthula esikhundleni sephutha, ngoba i-UDP ayinakho ukuxhawula okungala. Ngakho kufanele ukuhlola isakhiwo sokufakwa ngokuqhathanisa ne- incwadi yokubhekisa ye-Nebula ye-static_host_map hhayi ngenkumbulo. Incwadi yokubhekisa ihlanganisa nohlu lwamaphoyinti okugcina kanye nokuziphatha kokuvuselela kwe-DNS.

I-bootstrap kumele isebenze ngaphambi kwe-overlay

Igama le-DNS emephini kumele lixazululwe ngesixazululi isibungu esinaso ngaphambi kokuba kube khona ithunjana, okungukuthi isixazululi esivamile sohlelo. Kuhlole lokho kusuka kumsihini ofanayo, ngesikhathi sokuqalisa, i-overlay imisiwe. Igama elixazululwa kuphela nge-DNS ye-overlay uqobo angeke likwazi ukwenza i-bootstrap ye-overlay. Ukuhlola okufanayo kusebenza emzileni: umthetho we-firewall ovumela i-overlay kodwa hhayi ukushintshana kokuqala kwe-UDP uvimba iphakethe lokuqala.

Hlola ichweba ngethuluzi le-UDP esikhundleni sokucabanga ukuthi livulekile. Qinisekisa ukuthi noma yikuphi ukudluliswa kwechweba emzileni kukhombisa isibungu sangaphakathi esifanele nokuthi indlela yokubuyela ikhona. Uma igama lesibungu lixazululeka kumakheli amaningi, hlola ngalinye, ngoba iklayenti ingase ikhethe ikheli ongakaze ulihlole.

Ukufakwa okungaguquki kushayelwa ngokuqondile futhi akukaze kubuze umbhoshongo. Yingakho ukwehluleka lapha kubonakala njengokuphela kwesikhathi okuvamile ngaphandle kwanoma yiliphi itanga.

Kwenzekani ngemva kokuxhawula kokuqala

Lapho isibungu sifinyelela umbhoshongo, sifunda ngamathanga namakheli awo afinyelelekayo ngaphandle kokunye ukufakwa ngesandla. Izingxenye ezihambile kusukela ekuxhumaneni kokugcina ziyatholakala ngalowo mzila. Lowo umvuzo wokugcina imephu yesandla incane.

Izingxenye zingamemezela namakheli azo engeziwe afinyelelekayo, futhi ngakho itanga elingemva kwekheli lomphakathi elaziwayo lisiza abanye ukulithola. Lokho kumemezela kuyafundwa, akubhalwa emephini engaguquki.

Ukuziphatha kokuvuselela kubalulekile kumaphoyinti okugcina abhalwe njengamagama e-DNS, ngoba ikheli elixazululiwe lingashintsha ngenkathi inqubo iqhubeka nokusebenza. Izilungiselelo ze-Nebula zilawula ukuthi lokho kusesha kwenzeka kanjani, kuhlanganise nokuthi isiphi isixazululi esisetshenziswayo, ngakho zifunde esikhundleni sokucabanga okuzenzakalelayo kohlelo. Kusibungu esishintsha isixazululi saso lapho ithunjana likhuphuka, isilungiselelo esingalungile singaguqula i-bootstrap esebenzayo ibe igama eliyeka ukuxazululeka phakathi nesikhathi somhlangano. Ukubophela ukusesha esixazululini esizinzile kuvamise ukuba umehluko phakathi kwe-overlay ethembekile naleyo ephazamukayo.

Lapho ukutholakala kusebenza kodwa itanga elilodwa lingasebenzi

Uma imibhoshongo ifinyeleleka futhi iningi lamathanga lixhuma, i-bootstrap ayiyona inkinga. Ipheya elisele kungenzeka lingatholi indlela esebenzisekayo komunye nomunye noma lehluleke ngaphezu kokufinyeleleka. Ukwengeza olunye upelo lwekheli lombhoshongo akukwazi ukulungisa noma yisiphi salezi zimo ezimbili.

Hlola ipheya ngaphambi kokuhlela imephu osekuyiyo yonke enye into eye yancika kuyo. Ukushintsha kwemephu kuphazamisa wonke isibungu, ngakho yinto yokugcina okufanele uyithinte, hhayi eyokuqala.

Qala ngezitifiketi ezivela kusiphathimandla esifanayo, ngoba ukuxhawula okwaliwe kungabonakala kukude njengentanga engafinyeleleki. Bese uhlola ukuthi ipheya ingakwazi yini ukusungula indlela eqondile nokuthi ingabe umhleli uhleliwe yini ezixhumi ezenqaba ukuxhumana okuqondile. Umhleli wengeza ingxenye eyodwa nokuncika okukodwa, kodwa kuyimpendulo esekelwayo, futhi ukulungisa indlela yepheya kuwumsebenzi ohlukile ekulungiseni ukutholakala.