Iphendulo lokugcina eliyimfihlo, igama leseva elifanayo: izintambo zokuxhumana ze-Azure SQL

I-Private Link ishintsha lapho ukuxhumana kufinyelela khona, hhayi ukuthi ukuxhumana kubizwa ngani. Ku-Azure SQL Database lowo mehluko uyilo lonke: iseva enengqondo igcina igama layo, futhi iphendulo lokugcina eliyimfihlo linikeza ukufakwa kwenethiwekhi igama elixazululwa kuyo. Ukushintsha igama ngekheli le-IP ukuphela koshintsho olwephula i-TLS, imininingwane yokungena namathuluzi ngasikhathi sinye. Izintambo ezimbili zokuxhumana zingabonakala zilingana futhi ziziphathe ngendlela ehluke ngokuphelele.

Gcina orders-db.database.windows.net futhi unikeze iklayenti impendulo eyimfihlo yayo.

Igama nekheli kunemisebenzi ehlukene

Igama likhomba insizakalo ye-SQL, futhi yilokho isitifiketi nokungena okulindele. Ikheli eliyimfihlo linikeza ukufakwa kwenethiwekhi ngaphakathi kwenethiwekhi ebonakalayo exhunyiwe. Ukuhlanekezela okukodwa nokunye kudala ukuxhumana okufinyelela kokuthile futhi okungaqinisekisi lutho.

Umhlahlandlela we-Microsoft we-Azure SQL udinga igama leseva elivamile kumaklayenti. I-IP eqondile, kanye negama elinesiqalo esithi privatelink, akulona iphuzu lokungena elishintshekayo. Amathuluzi amukela i-IP azoyamukela bese ehluleka ku-TLS noma ekuqinisekiseni, okufihla iphutha langempela. Lokho kwehluleka kufundwa njengezinkinga zemininingwane yokungena kuze kube yilapho ubheka igama lomsingathi kuphutha.

Yini indawo eyimfihlo eyishintshayo ngempela

Indawo ye-DNS eyimfihlo irekhoda ikheli elilodwa leseva ngaphakathi kwendawo yamagama ethi privatelink, futhi indawo ixhumene nenethiwekhi ebonakalayo okufanele iyisebenzise. Ukuxazululwa kuyahamba; intambo yokuxhumana ayihambi. Isimo esingezansi siyisibonelo, hhayi irekhodi elizonamatheliswa endaweni yomphakathi.

Application name:        orders-db.database.windows.net
Private DNS zone:        privatelink.database.windows.net
Resolved private entry:  the approved private endpoint address

Gcina lelo rekhodi kanye nokuxhumana kwayo kwendawo njengengqalasizinda, nomnikazi nosuku lokubuyekeza.

Izindawo ezimbili ezinomsuka ofanayo nezimpendulo ezihlukene yisimo sokugcina esijwayelekile, hhayi ukungqubuzana. Amaklayenti omphakathi agcina impendulo yomphakathi, futhi amaklayenti ayimfihlo athola ikheli lephendulo lokugcina. Indlela yokwehluleka okufanele uqaphele ukusabalala okwengxenye kombono oyimfihlo, lapho inethiwekhi engaphansi eyodwa ixazululwa ngasese kanti enye ayikwenzi ngokuthula.

Amaklayenti angaphandle kwe-Azure adinga indlela yokungena kuleyo ndawo

Iklayenti le-VPN lihlala ngaphandle kwesixazululi se-Azure, ngakho-ke indawo eyimfihlo kufanele ifinyeleleke endleleni exubile. Isidlulisi se-DNS se-Azure noma i-Azure DNS Private Resolver kungakhonza imibuzo efika kuleyo nethiwekhi. Umhlahlandlela we-Microsoft ukudlulisela indawo yensizakalo yomphakathi efanele ngaleyo hlelo esikhundleni sokucabanga ukuthi amaklayenti abuza igama elithi privatelink ngqo. Amaklayenti angakwazi ukuxazulula impendulo eyimfihlo abuyela kweyomphakathi ngokuthula.

Gcina ubukhulu bokudlulisela bunenhloso, ngoba ukushintsha indawo yomphakathi esetshenziswayo kwephula amagama okungekho kuleso esikhundla.

Hlinzeka ngokulandelana okugcina ubunikazi buzinzile

Izinyathelo zinabanikazi abehlukene: dala futhi ugunyaze iphendulo lokugcina, hlinzeka ngendlela ye-VPN, hlanganisa i-DNS eyimfihlo, bese ulungiselela iklayenti ngegama leseva elivamile. Ukwenza i-DNS ngaphambi kwendlela kudala izikhathi zokuphela ezibonakala njengokwehluleka kwe-DNS. Ukwenza iklayenti ekugcineni kugcina okuguquguqukayo okukodwa kunyakaza ngesikhathi. Isinyathelo ngasinye sinomphumela obonakalayo, ngakho-ke akukho okudinga ukuhlolwa ngokuqagela.

Isithonjana se-VPN esixhunyiwe asikhethi indawo eyimfihlo ngokwaso.

Yini iphendulo lokugcina eliyimfihlo elingayicishi

Ukwakha iphendulo lokugcina eliyimfihlo akucishi ukufinyelela komphakathi kuseva enengqondo ngokuzenzakalela. Leso isinqumo sokusabalalisa esihlukile, futhi siza ngemva kokuqinisekiswa ukuthi amaklayenti ayimfihlo ahlosiwe ayasebenza. Gcina indlela yokubuyisela futhi ubhekele izinhlelo ezisasebenzisa umnyango womphakathi. Ukucisha ukufinyelela komphakathi kuqala iyona ndlela insizakalo esebenzayo eba ukuphazamiseka okunomkhondo wokuhlola ohlanzekile.

Hlola futhi ukuthi iseva isebenzisa muphi umgomo wokuxhumana.

I-Redirect ithumela iklayenti embobeni esiteshini ngemva kokuxhumana kokuqala kwesango, okushintsha lokho inethiwekhi yeklayenti okufanele ikuvume. I-Proxy igcina ithrafikhi esangweni. Ukuxhawula nge-TCP okuphumelelayo embobeni owodwa akusiyo yonke inqubo yokungena.

Lena i-Azure SQL Database, hhayi i-SQL Managed Instance, enemodeli yayo yokuxhumana futhi engenayo indaba yephendulo lokugcina eliyimfihlo efanayo. Kuzo zombili izimo, gcina izinto ezintathu zilebulwe ngokwehlukana: igama, ukufakwa kwenethiwekhi nokufakazela. Ukushintsha lapho ukuxhumana kuhamba khona akufanele kushintshe ukuthi iklayenti licabanga ukuthi likhuluma nensekelo yiphi.