I-VPN eyodwa yendawo-kuya-endaweni yama-VPC amaningi ku-AWS Transit Gateway

Xhuma i-VPN kanye futhi i-VPC ngayinye esangweni lokudlulisa elilodwa, bese uhlukanisa ukuxhumana nokusabalalisa ukuze amagatsha afinyelele ihhovisi kodwa hhayi komunye nomunye.

Ama-VPC amabili adinga inethiwekhi yehhovisi kule kotara, futhi kumhubhe wesibili lapho isilinganiso siphuka khona. I-AWS Transit Gateway ingasebenza njengesizinda sokuhambisa imizila esabiwe: i-VPN ixhunywa kanye, futhi i-VPC ngayinye ixhunywa esizindeni esifanayo. Ngemuva kwalokho inethiwekhi yasendaweni ifinyelela i-VPC ngayinye exhunyiwe ngoxhumano olulodwa. Lokho kushintsha ukuthi ubani ophethe isinqumo sokuhambisa imizila, futhi yilowo oyingxenye amadizayini amaningi ayenza ngokungalungile.

Isixhumi se-VPN nezixhumi zama-VPC ziyizinto ezihlukene esangweni elilodwa, yingakho ubudlelwano bokuhambisa imizila kufanele kwakhiwe ngemuva kwalokho.

On-premises network <-> Site-to-Site VPN <-> Transit Gateway
                                            |- VPC A
                                            |- VPC B

Kungani i-peering kungeyona indlela emfushane abantu abayilindele

Enye indlela ekhangayo ukuphetha i-VPN ku-VPC A bese uxhuma i-VPC B nge-peering kuyo. I-peering ejwayelekile ye-VPC ayinikezi ukudlula kusuka emaphethelweni kuya emaphethelweni ngoxhumano lwe-VPN luka-A. I-peer ifinyelela kuphela amakheli anikezwa yi-peering ngokwayo, futhi umphetho we-VPN awusona esinye sawo. Ukudlula kunikezwa isizinda; i-peering ikunikeza ipheya.

Lowo mkhawulo uyisici se-peering, hhayi isabelo esingakhuphukayo.

Ukuxhumana nokusabalalisa kwenza umsebenzi ohlukene

Ngaphakathi kwesango lokudlulisa, ukuxhumana kukhetha ithebula lemizila elisetshenziswa ukubheka ithrafikhi efika kusixhumi. Ukusabalalisa kunquma ukuthi yimaphi amathebula athola ama-prefix afundiwe noma axhunyiwe esixhumi. Isixhumi esisodwa singaxhumana nethebula elilodwa kuyilapho sisabalala kumaningi. Ukuhlanganisa lezi zimbili yiyona ndlela idizayini ephetha ngayo ngokufinyeleleka okungakahlosiwe muntu.

Isizinda esincane esixhunywe ngokuphelele yicala elilula.

Faka isixhumi ngasinye kuthebula elilodwa futhi i-VPN kanye nama-prefix amabili e-VPC kuxazululwa ngokuhlanzekile. Lokho futhi kuvumela ukufinyeleleka phakathi kwama-VPC inhlangano okungenzeka ukuthi yayingakuhlosile, ngoba ithebula elabiwe alinawo umqondo wegatsha.

Imizila yemithwalo yomsebenzi ihlala kwenye indawo

Isubneti ngayinye yemithwalo yomsebenzi isadinga umzila wayo oya esangweni lokudlulisa kuma-prefix asendaweni ahlosiwe. Lawo mathebula emizila e-VPC ayizinto ezihlukene kumathebula esango ngokwalo. Faka ama-prefix adingekayo futhi gcina imizila ekhona esikhundleni sokushintsha indawo ngayinye nge-default entsha. Umzila wesubneti futhi awumemezeli lutho kudivayisi yekhasimende.

Khetha ukuhambisa imizila okuguqukayo noma okungaguquki ngamabomu; i-peering ayinikezi noma iyiphi.

Hlukanisa amagatsha ngaphandle kokulahlekelwa ukufinyelela kwasekhaya

Lapho u-A no-B bobabili bengafinyelela ihhovisi kodwa akufanele bahambise imizila komunye nomunye, hlukanisa amathebula. Ithebula elixhunyiwe lesixhumi se-VPN liphethe ama-prefix e-VPC. Ithebula elixhunyiwe lezixhumi zama-VPC liphethe ama-prefix asendaweni, ngaphandle komzila ohlanganisa u-A no-B. Ukusabalalisa kungukho okudala lobo budlelwano, ngakho awudingi ukwamukela ukuxhumana ngakunye okuzenzakalelayo.

Lokhu ukwehlukaniswa kokuhambisa imizila, futhi akusona isigunyazo sohlelo lokusebenza.

Amaqembu okuphepha, ama-ACL enethiwekhi, izindonga zomlilo zamahostoli kanye nezimvume zesevisi ngayinye zisanquma ukuthi iyiphi ithrafikhi eyamukelwayo. Uma ukuhlolwa kudingeka, klama ngokucacile indlela yako esekelwayo esikhundleni sokucabanga ukuthi isizinda siyikwenzile.

Lokho isizinda esingakulungisi

Amapulani amakheli kufanele asahlala engahlangani, ngoba isizinda asivumeli ukuthi i-prefix eyodwa ikhombe imithwalo emibili yomsebenzi. Isixhumi ngasinye se-VPC sidinga ukumbozwa kwe-Availability Zone okulindelwe yimithwalo yaso. Nge-BGP, imizila yedivayisi yekhasimende ebuyela ku-prefix ngayinye edingekayo kufanele ihambisane nedizayini kanye nenqubomgomo yayo yokungenisa. Isimemezelo esingekho sibukeka njengomhubhe ophukile.

Uxhumano lwe-VPN nesango lokudlulisa manje sekuyingqalasizinda eyabiwe.

Hlela ukweqile kwemihubhe, umthamo wedivayisi, ukuqapha nokunakekela kuzungeza wonke ama-VPC ancike kulo esikhundleni sokuthatha ngalinye njengelixhunywe ngokuzimela.

Ukufuduka kusuka kuhlelo olukhona lwe-virtual private gateway kufanelekela icebo elicacile elifanayo. Yakha izixhumi nezinqubomgomo, hambisa umzila owodwa womthwalo womsebenzi olawulwayo, futhi qinisekisa ubudlelwano obuvunyelwe nobenqatshiwe ngaphambi kokuhoxisa umzila omdala. Ukuhlanganisela kuyasiza lapho kunikeza ithimba lenethiwekhi indawo eyodwa yokuphatha ukuxhumana okwabiwe, futhi kuyalimaza lapho kufihla ukuthi ubani angafinyelela kubani ngemuva kwethebula elilodwa elikhulu.

Izihloko ezihlobene