Ukusabelana nge-Transit Gateway nge-Resource Access Manager kwenza into eyodwa eqondile: kuvumela enye i-akhawunti ukuthi ibize isethi echaziwe yama-API okuxhuma emthonjeni engeyona eyakhe. Akudlulisi igesi, amathebula ayo emizila noma ilungelo lokunquma ukuthi ithrafikhi idluliswa kanjani. Abantu bacabanga okuhlukile ngoba ukuxhuma kuvela kukhonsoli yomamukeli futhi kusebenza ngokushesha, okuzwakala njengobunikazi. Indlela engaphansi iwukunikeza imvume emthonjeni owabiwe, futhi yonke into eyingane ihlala ngaphakathi komngcele we-akhawunti yomnikazi. Lokho kwehlukanisa kuchaza iningi lamathikithi okunqatshelwa kokufinyelela mayelana nokudluliswa okwabiwe.

Ukusabelana kudlulisela ini ngempela

Ukusabelana ngomthombo kubiza umthombo, isihloko esiyinhloko kanye nemvume elawulwayo. Imvume ibala izenzo isihloko esiyinhloko esingazenza, futhi nge-Transit Gateway lolo hlu luhlanganisa imisebenzi yokuxhuma emthonjeni owabiwe.

Noma yini engaphandle kohlu yehluleka ku-API hhayi kukhonsoli, yingakho iphutha livame ukuvela lapho iskripthi siqala ukusebenza.

Amathebula emizila, izixhumanisi nokusakazeka kuhlala kumnikazi

Ukudlulisela kunqunywa izinto ezintathu ezingane: ukuxhuma kuxhunyaniswe naluphi uhlu lwemizila, kusakazeka kuluphi amathebula, futhi lawo mathebula anayiphi imizila. Amadokhumenti okusabelana e-AWS athi umamukeli akakwazi ukudala, ukushintsha noma ukususa amathebula emizila wegesi lokudlulisela noma izixhumanisi zawo nokusakazeka kwazo ngokusabelana. Leyo mibizo ingeyekhothi yomnikazi. Umamukeli odinga isixhumanisi esisha ucela ushintsho lokuphatha, akasebenzisi imvume akhohlwa ukuyivula.

Ithebula elingezansi ukwahlukanisa engikubeka emadokhumentini wokuklama, ngoba kuyaphila ezinguqukweni zabasebenzi.

RoleWhat it controls
Transit Gateway ownerThe gateway, its route tables, associations and propagations; the Site-to-Site VPN attachment is created here.
VPC owner using the shareIts own attachment, subnet route tables and security policy for the workloads.
Shared-subnet participantWorkload traffic only, following routes the VPC owner already set.

Funda umugqa ophakathi ngokucophelela: umnikazi we-VPC ulawula imizila yesubnethi yakhe, umnikazi wegesi ulawula isinqumo esimaphakathi sokudlulisela, futhi indlela esebenzayo idinga kokubili. Awekho ama-akhawunti angakuqeda yedwa.

Indlela eyodwa, ama-akhawunti amabili

Landela iphakethe kusuka ku-VPC spoke kuya ku-on-premises prefix. Ithebula lemizila lesubnethi ye-spoke kufanele lithumele leyo prefix ekuxhumaneni kwegesi lokudlulisela, lokhu umnikazi we-VPC angakushintsha. Ngemva kwalokho igesi kufanele ibe nomzila ethebuleni elixhunyiwe lokuxhuma okhombisa ekuxhumaneni kwe-VPN, futhi umnikazi kuphela angakushintsha. Ithrafikhi ebuyayo idinga isibuko sakho kokubili. Uma uphuthelwa noma yiluphi uhlangothi uthola indlela efakwe uhhafu ebonakala njengenkinga ye-firewall.

Bhala zombili izinguquko kuthikithi elilodwa enababheki ababili, kungenjalo zizoqedwa ngamasonto ahlukene.

Sebenzisa ama-ID wendawo yokutholakala lapho indawo ibalulekile

Amagama ezindawo ayiziteketiso zasekhaya zekhothi. us-east-1a kwenye i-akhawunti akuginisekisiwe ukuthi iyindawo yomzimba efanayo ne-us-east-1a kwenye. Lapho ukuklama kudinga ukuxhuma nomthwalo womsebenzi endaweni eyodwa, qhathanisa ama-ID e-AZ futhi uwabhale phansi.

Ukuqhathanisa amagama kuveza umdwebo obonakala ulungile nephrofayili yokulibaziseka engelona. Hlola lokho ngesikhathi umdwebo usadwetshwa, hhayi ngemva kokuba othile elinganise umehluko.

Ukususa ukusabelana akukunqamuli indlela yedatha

Ukususa ukusabelana kuzwakala njengokuhoxiswa, futhi akusona isitobhi sethrafikhi esisheshayo. I-AWS ibhala ukuthi ukuxhuma kuhlala kusebenza lapho igesi isuswa ekusabelaneni. Imvume yokuphatha umthombo iyanyamalala, kuyilapho ukuxhuma okukhona kuqhubeka kudlulisa kuze kube othile uyayisusa noma uyayivala. Hlela ukuhoxisa ngezinyathelo ezimbili: susa ukusabelana, bese ususa ukuxhuma, futhi umnikazi wenza okwesibili.

Uma ukusabelana kuwukuphela kokulawula kwakho, awunakho ukulawula.

Gcina irekhodi lokusabelana nerekhodi lokuhambisa ndawonye

Izinto ezimbili ziphendula imibuzo emibili ehlukene. Irekhodi lokusabelana lisho ukuthi ubani angasebenza nomthombo. Amathebula emizila asho ukuthi yimaphi amanethiwekhi angakwazi ukukhuluma ngempela. Wagcine ndawonye nohlu olufanayo lwabanikazi, kungenjalo isigameko esilandelayo sizoqala ngomuntu ofakazela imvume eyayingeyona inkinga.

Bese uhlola ukuhamba okukodwa ohlangothini ngalunye kanye ne-prefix eyodwa okufanele ihlale ingafinyeleleki.

Izihloko ezihlobene