Ngabe i-Azure VNet exhumene nge-peering idinga isango layo le-VPN?

Kuvela i-spoke VNet entsha, i-hub isinayo isango le-site-to-site elisebenzayo, futhi umbuzo osobala ukuthi kufanele yini ukhokhele isango lesibili. Ngokuvamile cha: i-transit yesango ivumela i-spoke ukuthi isebenzise isango le-hub nge-peering. Izimo ezintathu zinquma ukuthi lokho kuzosebenza yini, futhi akukho nesisodwa sazo esibonakala ebhejini lesimo se-peering. Ukuxhumana kwe-peering kanye nemvume yokusebenzisa isango lomunye othile kuyizilungiselelo ezihlukene, ngakho ama-VM amabili asevele ekwazi ukuthi apingane awafakazi lutho ngomzila we-VPN.

Isimo sokuqala: isango, nokungabi naso ku-spoke

I-Azure isekela i-transit yesango kuma-SKU e-VPN Gateway ngaphandle kwe-Basic, futhi kokubili i-peering yesifunda neyomhlaba wonke kungayithwala. I-spoke isebenzisa isango elingelona layo, ngakho ayikwazi ukuba nesayo: uma isango selivele likhona ku-spoke, noma inketho yesango elikude isivele ikhethiwe, isilungiselelo se-transit osifunayo ngeke sitholakale noma ngeke sisebenze. Hlola lokho ngaphambi kokuthi ulungise noma yini, ngoba ibhokisi lokumaka elikhutshaziwe liwuphawu, hhayi iphutha. Qala ngokufunda i-SKU nesango elikhona, bese ubheka izilungiselelo ze-peering.

Ungasusi isango le-spoke elikhona ukuze inketho ivele kuze kube yilapho wazi ukuthi yini encike kulo. Ukulandelana kokufuduka kubaluleke kakhulu kunebhokisi lokumaka.

Isimo sesibili: isilungiselelo esisodwa ohlangothini ngalunye lwe-peering

I-peering iyizinto ezimbili, eyodwa ku-VNet ngayinye, futhi izilungiselelo ze-transit zihlala ezinhlangothini ezihlukene zalolo mbhangqwana. I-peering ye-hub ebheke ku-spoke kufanele ivumele isango le-hub ukuthi lisebenzele i-spoke; i-peering ye-spoke ebheke ku-hub kufanele yamukele isango le-hub. umhlahlandlela we-transit yesango we-Microsoft uwabiza ngokwengxenye ngayinye, futhi yiyo kuphela indlela yokuwagcina elungile:

Isilawuli esilebulwe ngokuthi remote sishintsha incazelo kuye ngokuthi i-peering yaluphi i-VNet oyihlelayo, ngakho funda ingxenye, hhayi igama. Setha izinhlangothi zombili, gcina futhi uqinisekise ukuthi i-peering ibika ukuxhumana kuzo zombili izindawo.

Isimo sesithathu: indawo yamakheli kanye nemingcele yemvume

I-transit ayikwazi ukwenza ukuthi isiqalo sendawo efanayo sisho amanethiwekhi amabili, ngakho izikhawu ze-hub, i-spoke nenethiwekhi yasendaweni kufanele zihlukane ngaphambi kokuthi noma yikuphi kwalokhu kusebenze. Ama-VNet angase futhi abe kuzibhaliso noma kubaqashi abahlukene; lokho akusona isivimbelo, kodwa ubunikazi obudala noma obubuyekeza i-peering ngayinye budinga izimvume ezidingekayo kuleyo nethiwekhi. Izinguquko phakathi kwezibhaliso zivame ukwehluleka ngenxa yemvume, futhi kulula ukufunda iphutha ngokungalungile njengenkinga ye-topology.

Bhala phansi izikhawu nabanikazi ngaphambi koshintsho. Ukuqagela kukho kokubili kukhiqiza i-peering exhumayo kodwa engahambisi lutho.

Qinisekisa ngemizila esebenzayo, hhayi ngesimo se-peering

Bheka imizila esebenzayo kusixhumi senethiwekhi somthwalo womsebenzi we-spoke futhi uthole isiqalo sangempela sasendaweni. Hlola ithebula lemizila ye-subnet nokuthi ukusabalala kwemizila yesango kukhutshaziwe yini, ngoba umzila ochazwe umsebenzisi noma idivayisi yokuhlola ingeqa indlela ekhonjiswa amafulegi e-peering. Bese uqinisekisa enye ingxenye: inethiwekhi yasendaweni kufanele yazi ukuthi ifinyelela kanjani esiqalweni se-spoke ngoxhumano lwe-site-to-site, kungaba ngezimemezelo ezifundiwe noma ngomzila ocacile kanye nokufaka okuhambisanayo kwenethiwekhi evikelwe kudivayisi yekhasimende. Uma isiqalo singekho ohlangothini olulodwa, amafulegi e-peering akusona isinto okufanele sishintshwe.

Hlola insizakalo eyodwa kusuka kumthwalo womsebenzi we-spoke bese ulandela impendulo. Ukuhlolwa okuvela esangweni le-VPN noma ku-VM ye-hub kusebenzisa isiqalo somthombo nomzila ohlukile.

Uma i-topology iphinde isebenzele amakhasimende e-point-to-site, qinisekisa imizila yawo efakiwe ngokwehlukana. Amaphakethe ekhasimende e-Windows angase adinge ukwenziwa kabusha ngemuva koshintsho lwe-topology, futhi lowo umsebenzi wokuhamba kwemizila kwekhasimende, hhayi ubufakazi bokuthi ukwabelana ngesango kwehlulekile.

Okungakunikezwa ukwabelana ngesango

I-transit yesango iwukusiza kokuhamba kwemizila, hhayi ugunyazo. Amaqembu okuphepha enethiwekhi, izihlungi zasendaweni kanye nemithetho yezinga lensizakalo zisanquma ukuthi umthwalo womsebenzi we-spoke ungafinyelela ini, ngakho nika amandla insizakalo ethile esuka kumthombo iye endaweni eshiwoyo esikhundleni sokucabanga ukuthi umhubhe owabiwe uvumela konke okungemva kwawo.

I-peering nayo ayidluli ngendlela abantu abayethemba. Ukwengeza enye i-spoke, noma iphuzu lokugcina eliyimfihlo, kuletha izidingo zalo zokuhamba kwemizila nokufinyelela okungagqitshwa isilungiselelo se-transit esikhona.