network_mode: service:vpn kanye negama lomsingathi db elahlekile

Ukwabelana ngesikhala samagama se-VPN kuwukukhetha kwethopoloji. Noma i-db igcina ikheli layo bese i-vpn ijoyina leyo nethiwekhi, noma konke kuphendula ku-loopback.

Ufaka i-network_mode: service:vpn kuhlelo lokusebenza, uqalise kabusha isitaki, futhi uhlelo luyafa ngoba i-db ayisaxazululwa. Akukho okwaqanjwa kabusha efayeleni le-compose, ngakho izinsolo ezisobala yi-DNS kanye nedathabhezi. Ushintsho lwangempela luncane futhi luxakile: uhlelo lwayeka ukuba yilungu lenethiwekhi ye-Compose lapho lelo gama likhona. Kuze kube yilapho uthatha isinqumo sokuthi idathabhezi izophendula isuka kusiphi isikhala samagama, konke ukulungiswa kwegama lomsingathi kuwukuqagela.

Kungani igama lomsingathi db layeka ukuxazululwa

Isevisi esebenzisa i-network_mode ayinalo ikheli layo kunethiwekhi ye-Compose; iboleka isikhala samagama sesevisi ebizwe ngegama. Leso sikhala siletha ama-interfece ayo, imizila yayo, isikhala samachweba kanye nesixazululi sayo, futhi sithatha indawo yokuxhumeka kohlelo kunethiwekhi ye-backend. Igama i-db alizange libe yinto engabonakali: lalihlala kuleyo nethiwekhi futhi lalixazululwa nge-DNS efakwe ngaphakathi kwayo. Susa ukuxhumeka futhi igama alinayo indawo yokuxazululwa.

Qinisekisa lokho kusuka ngaphakathi kwama-container hhayi kusuka kumsingathi. Ukusesha okuhluleka kuhlelo kodwa kuphumelele ku-container yedathabhezi kusho ukuthi igama lilungile futhi ubulungu abulungile. Lowo mphumela ubeka ukulungiswa kuthopoloji ye-compose hhayi kuzilungiselelo zesixazululi sohlelo.

Imibuzo emithathu ngaphambi kokuhlela ifayela

Ziphendule ngokulandelana, ngoba ngayinye inciphisa ithopoloji. Idathabhezi kufanele iphendule ini: igama lomsingathi elisetshenziswa amanye ama-container, noma uhlelo kuphela ku-loopback? Ingabe uhlelo kufanele lushicilele isichweba kumsingathi, futhi iyiphi isevisi ezoba ngumnikazi waso? Ingabe idathabhezi kufanele ifinyeleleke kusuka kumsingathi noma kwenye imishini, noma kusuka ngaphakathi kwethuneli kuphela?

Uma idathabhezi idinga igama layo futhi uhlelo alushicileli lutho, zigcine ekuxhumekeni okuhlukene. Uma uhlelo kufanele lusicelele isichweba futhi konke kudlula ethunelini, beka idathabhezi esikhaleni samagama se-VPN futhi usebenzise i-loopback. Ukuhlanganisa kokubili kwenza isitaki esiqala ngokuhlanzekile kodwa sihluleke ngesikhathi sokuxhuma.

Shiya idathabhezi lapho ikhona

Ushintsho oluncane luxhumanisa umnikazi wesikhala samagama nenethiwekhi esivele inedathabhezi. Uhlelo luthola lolo kuxhumeka njengefa ngoba lwabelana ngesitaki se-vpn, futhi i-db ixazululwa ngendlela efanayo nangaphambilini.

services:
  vpn:
    networks:
      - backend
  app:
    network_mode: service:vpn
  db:
    networks:
      - backend
networks:
  backend:

Ungafaki i-networks kuhlelo futhi. I-Compose iyenqaba leso simo kanye ne-network_mode kusevisi efanayo, futhi iphutha likhomba efayeleni hhayi kubhangqa. Uma iklayenti le-VPN lihlunga indawo ekuyiwa kuyo ye-backend ngaphakathi kwesikhala salo samagama, lungisa nenqubomgomo yalo yendawo esekelwayo yenethiwekhi; ukuxhumeka okwabiwe kunikeza indlela kodwa akususi leso sihlungi.

Hambisa idathabhezi esikhaleni samagama

Ushintsho olukhulu lubeka idathabhezi esikhaleni samagama esifanayo futhi lukhomba uhlelo ku-127.0.0.1 ngesichweba sangempela. Izinqubo ezimbili azikwazi ukubopha ikheli nesichweba esifanayo nje ngoba ziqale kuma-container ahlukene, ngakho idathabhezi elalela futhi ekhelini le-wildcard lizoshayisana nanoma yini enye eyenza lokho. Hlola isilaleli ngaphambi kokusihambisa.

Amachweba ashicilelwe angawesevisi enesikhala samagama. Ukufaka i-ports kuhlelo kuyenqatshwa kanye ne-network_mode, futhi ukuqambela ikheli elihlukile lohlelo kuchaza i-interfece engekho.

Ukulungela, ukuvimba kanye nesixazululi

I-depends_on ihlela ukuqala kwama-container; akubona ubufakazi bokuthi ithuneli liyasebenza futhi ayimisi ithrafikhi lapho ithuneli liwa. Thatha ukufinyeleleka, ukulungela kwethuneli kanye nokuvimba kokwehluleka njengezimfuneko ezintathu ezihlukene. Isitaki esihlangabezana nesokuqala kuphela siyaphumelela ekuhlolweni kwesandla ngosuku oluhle futhi siyavuza ngosuku olubi. Bhala izimpendulo ezintathu eceleni kwefayela le-compose, lapho umuntu olandelayo ezobheka khona.

Ukwabelana ngesikhala samagama kusho futhi ukuthi i-uhlelo luthola isixazululi se-container ye-VPN njengefa, lokhu okusiza lapho ithuneli liphoqa amaseva e-DNS futhi kudide lapho kungenjalo. Hlola ukuthi isikhala samagama siqukethe ini ngempela esikhundleni sokucabanga ukuthi isixazululi somsimgathi siyasebenza. I-incwadi yokusebenzisa yamasevisi e-Compose ibhala i-network_mode, i-ports kanye nokuziphatha kokuncikile endaweni eyodwa, kuhlanganise nokuthi kungani isevisi ye-network_mode ingenayo ikheli layo.

Izihloko ezihlobene