S3: iphoyinti lokugcina lesango noma lesixhumanisi sokufinyelela kusuka kunethiwekhi yasendaweni

Izinhlobo ezimbili zamaphoyinti okugcina e-S3 zibonakala zishintshana kusibuyekezo somklamo futhi ziziphatha ngokuhluke ngokuphelele uma iklayenti isingaphandle kwesayithi. Iphoyinti lokugcina lesango liwukuhlanganiswa nethebula yemizila ngaphakathi kwe-VPC, ngakho isicelo esivela ku-VPN yesayithi asifiki lapho njengendawo yokuyisa eyimfihlo. Iphoyinti lokugcina lesixhumanisi libeka amakheli ayimfihlo kuzixhumanisi zenethiwekhi, okuyinto umzila ohlangene ongafinyelela kuyo ngempela. Konke okulandela kuncike ekutheni ukhiphe yiphi kulezi ezimbili.

Nquma ngokungena kwenethiwekhi, hhayi ngegama lesevisi

Qala lapho umgwaqo usuka khona, ngoba umbuzo okuphendulwa yiwo uhlobo lwephoyinti lokugcina. Umsebenzi kusimo se-VPC esisekelwayo ungasebenzisa iphoyinti lokugcina lesango futhi awudingi ikheli layo eliyimfihlo nanini. Umsebenzi osesayithi udinga ikheli eliyimfihlo elingayiswa kulo, futhi lokho kunikezwa iphoyinti lokugcina lesixhumanisi. Uma umklamo uhlanganisa kokubili, izinhlobo zombili zamaphoyinti okugcina zingaba khona ndawonye ku-VPC eyodwa, futhi lokho kuwuhlelo olujwayelekile hhayi ukuphindwa.

Ukuzihlanganisa akuyona inkinga. Ukucabanga ukuthi uhlobo olulodwa luhlanganisa olunye iyona nkinga.

Hlukanisa iklayenti ngamakilasi ngaphambi kokukhetha noma yini. Indawo yokusebenza ngaphakathi kwe-VPC, isiqukathi esingemuva kwesango le-NAT kanye nohlelo lokusebenza ehhovisi legatsha kuyimithombo emithathu ehlukene, futhi ingeyokugcina kuphela ephoqa ukungena okuhlangene. Bhala lokho kuhlukaniswa eduze kohlu lwamaphoyinti okugcina ukuze umhloli olandelayo abone ukuthi kungani iphoyinti ngalinye likhona.

Okudingwa umzila wesixhumanisi kusukela ekuqaleni kuze kube sekugcineni

Iphoyinti lokugcina lesixhumanisi linikeza ukufinyeleleka kumakheli ayimfihlo, futhi ukufinyeleleka kungenye yezidingo ezine kuphela. Inethiwekhi yasendaweni idinga umzila oya kulawo makheli, uhlangothi lwe-VPC ludinga indlela yokubuya, iqembu lokuphepha lephoyinti lokugcina kumele livume ibanga lomthombo, futhi noma yisiphi isisetshenziswa sokuhlola phakathi kwazo kumele sivume ukugeleza. Umzila oya kunoma yisiphi isimo esise-VPC awufakazi lutho kulezi ezine.

Sebenza usuka ekugcineni okude ubuyela emuva. Qinisekisa ukuthi izixhumanisi zenethiwekhi zephoyinti lokugcina zikhona kumasubnethi ozilindele, bese uqinisekisa ukuthi iqembu lakho lokuphepha livumela ibanga langempela lasendaweni hhayi isibambeli. Bese uhlola ukuthi umhubhe noma isekethe ithwala indlela yokubuya ngendlela efanayo. Ukuhlola yisinyathelo abantu abasidlulayo, ngoba idivayisi ephakathi evuma ukuxhumana isengakho ukulahla umzimba wempendulo omkhulu, futhi lokho kubonakala njengenkinga yokusebenza hhayi yomgomo.

Hlola ngomsebenzi omncane kunayo yonke ovunyelwe okhona esikhundleni sokulanda okukhulu. Ukwehluleka kubonakala kusenesikhathi futhi nomgwaqo omncane okumele uchazwe.

I-DNS ilandela umthombo wombuzo, hhayi i-VPC

Iphoyinti lokugcina elikhona aliqondisi lutho ngokwalo. Uhlelo lokusebenza luthola noma yiliphi igama elibuyiswe isixazululi salo, futhi isixazululi siphendula ngokuvumelana nombono esivunyelwe ukuwubona. Isimo esingaphakathi kwe-VPC nekhompyutha ephathekayo ehhovisi zibuza imibuzo emibili ehlukene futhi zombili zingathola izimpendulo ezilungile kodwa ezihlukene. Ukuqinisekisa enye bese uphetha ngenye yindlela umhlolo ophumelele ophenduka ukuthunyelwa okuhlulekile.

Funda isilungiselelo se-DNS esiyimfihlo sephoyinti lokugcina njengengxenye yomklamo, hhayi njengebhokisi lokumaka elivulwa ngemuva kokuqalisa.

Uma isixazululi sasehhovisi kumele sibone umbono we-VPC, lowo mzila kumele wakhiwe ngamabomu, ngokuvamile ngesixhumanisi sesixazululi esingena. Buza kusimo sohlelo lokusebenza ngokwalo futhi ubhale ukuthi isiphi isixazululi esiphendulile. Umphumela oqoqwe kusibungazwa se-bastion ngaphakathi kwe-VPC uchaza umbono we-bastion futhi akukho okunye.

Imvume ihlukile ekufinyelelekeni

Iphoyinti lokugcina elifinyeleleka libuyisela amaphutha eziyicelo umphathi omkhulu angavunyelwe ukuzenza, futhi lelo phutha lisho ukuthi uhlelo lusebenza njengoba lwakhiwe. Inqubomgomo yobuqhaso, inqubomgomo yebhakede nanoma iyiphi inqubomgomo yephoyinti lokugcina ihlolwa ezingqimbeni zayo. Ukufinyelela kwenethiwekhi akukaze kunikeze imvume.

Yamukela umklamo ngemiphumela emibili: ucingo oluvunyelwe olungenabungozi oluphumelelayo, nokwenqatshwa okulindelekile kobuqhaso noma ibhakede elingafakiwe.

aws ec2 describe-vpc-endpoints --filters Name=vpc-id,Values=vpc-0123456789abcdef0
dig +short s3.us-west-2.amazonaws.com @10.0.0.2

Bhala igama lephoyinti lokugcina, indawo yokuyisa exazululiwe kanye nomongo wenqubomgomo eduze komphumela ngamunye, ngoba ushintsho olulodwa lwe-DNS kamuva lungase lenze isiphetho sonke singasebenzi. Qhathanisa izindleko zamanje nesisindo sokusebenza salezi zinhlobo zombili zamaphoyinti okugcina ngaphambi kokuhlinzeka noma yini. Iphoyinti lokugcina lesixhumanisi lithenga ukungena okuyimfihlo okuhlangene, akusona isidingo somhlaba wonke, futhi umzila wesango uvame ukuhlala uyimpendulo engcono emisebenzini engaphakathi kwe-VPC. Ukukhetha kungokweklayenti ngayinye futhi kuhlala kubuyekezwa.