Indlela yokuqondisa ithrafikhi ye-SaaS kwi-VPN yekhasimende efanele
Amasubneti amakhasimende agqagqanayo aphula ukuhamba kwendlela okwabiwe. Khetha imodeli yokuhlukanisa, hlanganisa umsebenzi ngamunye nomqashi oqinisekisiwe, futhi uhlole izindlela phakathi kwabaqashi ngaphambi kokwethula.
Ipulatifomu ye-SaaS ixhuma kunethiwekhi zamakhasimende ayishumi nambili, futhi amabili alawa makhasimende asebenzisa kokubili i-10.20.0.10 yesizindalwazi sawo esiyinhloko. Isisebenzi esithola lelo kheli emsebenzini asinayo indlela yokwazi ukuthi umsebenzi uqonde yisiphi isizindalwazi, futhi ithebula lokuhamba kwendlela elabiwe lizoluthumela ngokukhululeka emhubheni okhonjwe yisandulela. Isixazululo akuzona imihubhe eminingi; isixazululo ukunquma ukuthi ubunikazi bomqashi bungena kuphi endleleni nokuthi iyiphi imodeli yokuhlukanisa edingwa uhlelo lwamakheli. Izimo ezintathu zinquma ukukhetha: ingabe izandulela zamakhasimende ziyagqagqana, ukuthi iphutha lingasakazeka kude kangakanani, nokuthi ubani ophethe isixhumi.
Izizindalwazi zamakhasimende ezimbili, ikheli elilodwa lendawo
Ikheli le-IP iyindawo, akubona ubunikazi. Isicelo kufanele sithwale umqashi oqinisekiswe yiseva, futhi lowo mqashi kufanele akhethe umongo wenethiwekhi ngaphambi kokuxazululwa kwendawo.
Uma lokho kungenzeki, ukwehluleka kuthule. Ukuxhumana kuyaphumelela, umbuzo uyasebenza, futhi impendulo ivela esizindalwazini sekhasimende elingalungile ngoba ithebula lokuhamba kwendlela lalinokufakwa okukodwa kwe-10.20.0.10. I-DNS yenza kube kubi kakhulu: igama eligcinwe kusheke elaxazululwa emongweni womqashi A lingasetshenziswa futhi umsebenzi ogijima womqashi B. Akukho lutho kuphakethe oluhlukanisa laba ababili, ngakho akukho logic yokuzama futhi engalungisa lokho.
Nquma imodeli yokuhlukanisa kuqala
Bhala izimo ezintathu phansi ngaphambi kokuqhathanisa imikhiqizo. Ukugqagqana kunquma ukuthi ingabe isikhala sekheli esisodwa singabiwe nakancane; umgogodla womthelela unquma ukuthi iphutha lokuhamba kwendlela liyithikithi lokusekela noma ukwephulwa; ubunikazi bokusebenza bunquma ukuthi ungakwazi yini ukuphatha ithimba lezixhumi ngomqashi ngamunye.
| Condition | Hub with per-tenant route tables | Per-tenant connector context |
|---|---|---|
| Customer CIDRs overlap | No, unless you add 1:1 NAT | Yes, each context keeps its own view |
| A mistake must stay inside one VPC | Weak, routing is shared infrastructure | Strong, each connector has its own egress |
| You can run one fleet per tenant | Not required | Required |
Uma izandulela zihlukile futhi inqubomgomo ivumela isikhungo esilawulwayo, i-Transit Gateway eyodwa enamathebula okuhamba kwendlela ngomqashi ngamunye iyenzeka. Ukuhlanganiswa kokunamathisela kukhetha ithebula lokuhamba kwendlela elisetshenziselwa ithrafikhi engena kulelo qeqebana, futhi ukusakazeka kukhetha ukuthi yimiphi imigwaqo evela kuthebula. Iqeqebana lomqashi elixhunywe kuphela nethebula lalo futhi elisakaza kuphela izandulela zalo lifinyelela isikhungo hhayi kwenye indawo. Leso yisinqumo sokuhamba kwendlela, futhi sihlala silungile kuphela uma kungekho muntu ongeza umgwaqo wokuzenzakalela ethebuleni elabiwe.
Uma izandulela zigqagqana, ukuhamba kwendlela kuphela akukwazi ukuzihlukanisa. Udinga umongo wenethiwekhi ohlukile ngomqashi ngamunye noma uhlelo lokuhumusha olunikeza isikhala sekhasimende ngamunye incazelo ecacile.
Ukuhlukanisa kwe-Transit Gateway kusho ukuthini ngempela
Ukuhlanganisa nokusakaza yizinto ezimbili ezibalulekile, futhi kulula ukuzidida. Ukuhlanganisa kuphendula ukuthi iphakethe elivela kuleli qeqebana lifunwa kuthebula liphi; ukusakaza kuphendula ukuthi yimaphi amathebula afunda imigwaqo yaleli qeqebana. Ukuhlukanisa kuvela ekwenzeni kokubili kube okukhethekile kumqashi, hhayi ekudaleni amaqeqebana engeziwe.
Ukulungiselela okuzenzakalelayo kwawo wonke umuntu kuya kuwo wonke umuntu kulula futhi akukona ukuhlukanisa. Amathebula ahlukile okuhamba kwendlela anciphisa ukuxhumana, kodwa awanikezi ikheli lendawo elilodwa elingashintshi izincazelo ezimbili ngaphakathi komongo ofanayo wokuhamba kwendlela. Uma uhlelo luxazulula i-10.20.0.10 ngaphambi kokwazi umqashi, ungqimba lokuhamba kwendlela seluvele lulahlekelwe ulwazi olwaluzoludinga.
I-AWS yengeza i-NAT 1:1 yezinga leqeqebana ye-Transit Gateway ne-Cloud WAN ngomhla ka-23 Okthoba 2026, okushintsha impendulo yokugqagqana kumaqeqebana asekelwayo. Amadokhumenti e-NAT e-Transit Gateway achaza ukumephwa kwe-IPv4 okumile, okungenasimo nokulingana kwesandulela namabhithi okusingathi agcinwe. Hlola izinhlobo zamaqeqebana asekelwayo nemikhawulo yesifunda ngaphambi kokuklama mayelana nalokhu.
Hlanganisa umsebenzi nomqashi oqinisekisiwe
Umsebenzi ngamunye kufanele uthwale ubunikazi bomqashi obuqinisekiswe yiseva, futhi lobo bunicazi kufanele bukhethe irekhodi lokuxhumana eliphethwe ngumlawuli. Irekhodi lisho umongo wenethiwekhi ogunyaziwe, ikheli lensebenzo, inkomba yobufakazi nokusebenza okuvunyelwe lapho. Isicelo esingathenjwa akumele neze sinikeze isihlonzi saso se-VPN, isango noma umgomo wangasese, ngoba ukungena okuvumelekile akusona imvume yokuhlola isikhala sekheli sekhasimende ngamunye elixhunyiwe.
Emklamweni onezixhumi ezihlukanisiwe, umsebenzi womqashi A uya kwisixhumi esikhethekile sika-A esigijima ku-VPC ka-A futhi singafinyelela kuphela izinsiza ezivunyelwe zika-A. Iziqukathi ezihlukile kusifaki esisodwa azikudali lokho kwehlukana ngokwazo; izikhala zamagama zenethiwekhi, imigwaqo nenqubomgomo yokuphuma kufanele zikwenze. Isixhumi sidinga futhi ubufakazi nemigqa ebekelwe umqashi, ngoba umgwaqo wangasese awukhawuleli imfihlo eyabiwe noma into yomsebenzi eyabiwe. Izisebenzi zohlelo ezihlanganisiwe zilungile inqobo nje uma umongo wenethiwekhi nobufakazi kukhethwa ngomqashi, hhayi ngesifaki.
Izivivinyo zempilo kufanele zisho umqashi nesigaba: umhubhe osunguliwe, umgwaqo okhona nesicelo sensbenzo sangempela esiphumelelayo kuyizimpawu ezintathu ezihlukile. Inani elihlanganisiwe lemihubhe esebenzayo lizofihla ikhasimende elilodwa elinesixhumi esiphukile.
Hlola izindlela okufanele zehluleke
Gijimisa izivivinyo ezintathu ngaphambi kokwethula. Ukusebenza kwe-A okuvunyelwe kufanele kuphumelele, ukusebenza kwe-B okuvunyelwe kufanele kuphumelele, futhi umsebenzi we-A oqondiswe ngamabomu esixhumini sika-B noma igama elihunyushiwe kufanele wehluleke ngokuvaliwe. Bese uphula umhubhe owodwa futhi uqinisekise ukuthi umsebenzi wehluleka kuphela kulowo mqashi, ngaphandle kokuwa kusubneti yenombolo efanayo yekhasimende elinye. Ukubuyisela kufanele futhi kuhlolwe, ngoba umgwaqo omdala noma ubufakazi obugcinwe kusheke kungase kuphile isikhathi eside kunokuphazamiseka.
Isakhiwo kungaba izisebenzi ezihlanganisiwe ezinabaxhumi abahlukanisiwe, noma izinsiza zomqashi ezihluke ngokuphelele. Okungaguquki kuyafana: umongo womqashi oqinisekisiwe ukhetha umgwaqo nobufakazi, futhi akukho shintsho lomgwaqo elinikeza uhlelo imvume phakathi kwabaqashi.