I-URL eyodwa ye-CiviCRM yabasebenzisi basehhovisi ne-VPN: izinyathelo zokusetha

Ikhompyutha ephathekayo yasehhovisi kufanele ivule ibhukhmakhi elifanayo le-CiviCRM etafuleni layo futhi futhi isuka ekhaya nge-VPN. Idizayini ehlala isikhathi eside ekuxhumaneni nabasebenzisi iyikheli elilodwa elivamile, ake sithi https://crm.example.org/, nekhosi yenethiwekhi egunyaziwe evela endaweni ngayinye, nesitifiketi esivumelekile salelo gama. I-VPN ishintsha indlela iklayenti elikude elifinyelela ngayo iseva. Akumele neze lishintshe ubunikazi bohlelo, ngoba ngomzuzu okwenzeka ngawo, zonke izixhumanisi ezikhiqiziwe, ukuqondisa kabusha kanye nokushaywa kwezingcingo kokuhlanganiswa kuba inkinga yesibili okufanele ixazululwe.

Khetha i-URL ngaphambi kokukhetha umzila

Qala ngokubhala ikheli elihlosiwe, kufaka noma iyiphi ingxenye yomzila edingwa yi-CMS, futhi uliphathe njengephuzu elingaguquki. Konke okunye kuleli bhukwana kuyimininingwane yokuqalisa engashintshwa ngaphandle kokulithinta: yimuphi umpendulo we-DNS etholwa yiqembu ngalinye, yimuphi umthetho we-firewall ovumela isilaleli, futhi noma ithrafikhi ifika ngomhubhe noma ngechweba leswishi lendawo.

Bhala amanani amane ndawonye ohlelweni lokufinyelela, ngoba asebenza kuphela njengeqoqo. I-URL evamile. Impendulo okufanele iyithole iqembu ngalinye lamaklayenti ngalelo gama. Umzila nomthetho wokufinyelela waleyo mpendulo. Igama lomsingathi elisethwe iseva yewebhu nesitifiketi ukuze lisebenze. Uma okuthile kwehluleka kamuva, into ephukile ingenye yalabo abane, futhi uzokwazi ukuthi yikuphi okushintshile.

Isinyathelo 1: qinisekisa ukuthi igama lixazululwa ngendlela efanele kuwo womabili amaqembu

Womabili amaqembu kufanele athole impendulo eyimfihlo angayifinyelela ngempela, futhi kuvumelekile ukuthi izimpendulo zehluke inqobo nje uma igama lingehlukile. Amaklayenti e-LAN axazulula ngesixazululi sangaphakathi; amaklayenti e-VPN adinga inqubomgomo yesixazululi ebanika isifunda esifanayo esikhundleni sokuvuza umbuzo kusixazululi somphakathi futhi bathole impendulo yomphakathi abangakwazi ukuyisebenzisa.

Hlola igama esimweni ngasinye esikhundleni sokuqagela, futhi uhlole umzila ngokuzimela kwi-DNS ngokukhetha i-resolve ye-curl, ebophela ikheli kusicelo esisodwa:

dig +short crm.example.org
curl -sSI --resolve crm.example.org:443:10.10.5.20 https://crm.example.org/ | head -5

Uma ukuhlolwa kokuqala kubuyisela ikheli iklayenti elingakwazi ukulifinyelela, inkinga iwumzila womhubhe noma uhlu lwe-split-tunnel. Uma ukuhlolwa kwesibili kubuyisela ukuqondisa kabusha egameni lomsingathi obungalilindele, yima futhi ufunde isihloko se-Location, ngoba leyo yinkinga yohlelo futhi akukho shintsho lomzila oluyolungisa.

Isinyathelo 2: hlanganisa iseva yewebhu, isitifiketi ne-URL eyisisekelo ye-CMS

Isilaleli kufanele sisethwe ukuze sisebenze igama elivamile, futhi isitifiketi kufanele silihanganise. Ukuphequlula ngekheli elingacwebile akusona isisombululo: kudala ukungafani kwegama, kungase kuphule ububanzi bamakhukhi, futhi kufundisa abasebenzisi ukuchofoza izixwayiso ozodinga ukuzichaza kumcwaningi kamuva.

Ngemuva kweproxsi ehambisanayo, qinisekisa ukuthi uhlelo luyazi ukuthi isicelo sifike nge-HTTPS. Izinkundla eziningi ze-CMS zikhiqiza izixhumanisi eziphelele kusuka kusikimu esitholiwe, futhi iproxsi eqeda i-TLS ngaphandle kokudlulisa isikimu sokuqala yenza ikhasi eligcwele http:// izinsiza ezingavinjwa yisiphequluli. Setha ngokusobala iproxsi ethembekile nezihloko ezidlulisiwe esikhundleni sokuvumela uhlelo luqagele.

Bese uhlanganisa i-URL eyisisekelo ye-CMS neye-CiviCRM. I-CiviCRM igcina i-URL yayo eyisisekelo enqunyiwe futhi inikeza indlela esekelwayo yokuyibala kabusha: isenzo sokuphatha Hlanza amakhashi bese ubuyekeza izindlela, esibhalwe ku- umhlahlandlela wokuxazulula izinkinga zokufaka i-CiviCRM. Yisebenzise ngemuva kokuba igama elivamile nokulungiselelwa kwe-CMS kuvumelana, hhayi ngaphambi, uma kungenjalo uzogcina kukhashi inani osuzolishintsha.

cv flush
# then Administer > System Settings > Cleanup Caches and Update Paths

Isinyathelo 3: hlola amakheli akhiqizwa yi-CiviCRM

Ukufinyelela ikhasi lokuqala akufakazi okuningi. I-CiviCRM isebenza ngaphakathi kwe-CMS, futhi amakhasi abalulekile yilawo azakhela ama-URL awo: ukuqondisa kabusha kokungena, imenyu yokuphatha, izinsiza zezandiso, izixhumanisi zamafayela alayishiwe nanoma yikuphi ukushaywa kwezingcingo kwangaphandle okubhaliswe ukuhlanganiswa.

Layisha idashbhodi, vula irekhodi lokuxhumana, futhi ubheke umthombo wekhasi ukuthola izixhumanisi eziphelele. Uma zikhomba egameni lomsingathi elingafinyelelwa yiqembu elilodwa lamaklayenti, i-URL eyisisekelo isengalungile ngisho noma ikhasi likhishiwe. Uma zikhomba egameni elifanele kodwa kusikimu esingalungile, ukulungiselelwa kweproxsi yikho okufanele kulungiswe.

Lapho ikheli kufanele lishintshe ngempela, liphathe njengokufuduka kohlelo hhayi njengokuhlela i-DNS. Buyekeza ama-URL ezinsiza, amakhashi, izixhumanisi ezishicilelwe nanoma yikuphi ukuhlanganiswa kwangaphandle okugcina ikheli elidala, bese uzibuyekeza efasiteleni elilodwa ukuze kungabikho muntu ophethe ibhukhmakhi elifuduke nengxenye.

Igama lomsingathi esicelweni akusona isinqumo sokuthembela

Ungakhethi i-URL eyisisekelo enelungelo ngoba isihloko sesicelo siqukethe uchungechunge oluthile. I-PHP ibhala ukulungiselelwa kwe-Apache lapho inani legama leseva lingabonisa umsingathi ohlinzekwe yiklayenti, futhi ukuguquguquka kwekheli leseva kuchaza iseva, hhayi indawo yesivakashi. Akukho kokubili okuyindlela yokulawula ukufinyelela, futhi ukwakha enye kuzo yindlela isevisi eyimfihlo egcina ngokukhonza okuqukethwe okungalungile kumsingathi ongalungile.

Uma amazina amaningi omsingathi edingeka ngempela, lungiselela uhlu oluvunyelwe olusobala kuseva yewebhu, ku-CMS nakwizinga lohlelo, futhi uvumele igama lomsingathi wesicelo likhethe kuphela phakathi kwamaqembu avunyelwe. Ukufakwa okungahleliwe akumele neze kube umthombo wezixhumanisi eziphelele noma indawo yokuqondisa kabusha ethembekile.

Qeda ngebhukhmakhi elifanayo esimweni ngasinye esivunyelwe: ukungena, ukuzulazula kwangaphakathi okuvamile kanye nesicelo esisodwa sensiza. Qhathanisa amagama omsingathi ezimpendulweni, hhayi nje ukuthi ikhasi lilayishiwe. Lokho kuhlolwa kwezicelo ezintathu kuhlukanisa inkinga yomzila kuhlelo olusakhiqiza ikheli elingalungile, futhi kuthatha cishe umzuzu ngeqembu ngalinye lamaklayenti.