Ukuhlolwa komthombo/nendawo ekuyiwa kuyo yisango elilodwa, akusiyo yonke indlela ye-VPN
I-instance edlulisa idinga imvume ye-AWS kanye nemizila ye-Linux nemithetho ye-firewall. Hlola ukuqinisekiswa komthombo/nendawo ekuyiwa kuyo kule instance edlulisayo.
I-VPN iphelela ku-instance ye-EC2, ungafinyelela ikheli lomhubhe wale instance, futhi ithrafikhi obekufanele idlule kuyo iye kwelinye ihhashi eliyimfihlo iyanyamalala. Lezi yizivivinyo ezimbili ezihlukene, futhi ukuzixuba kuchitha amahora. Eyokuqala iyabuza ukuthi ungafinyelela yini ku-instance; eyesibili icela ukuthi idlulise ithrafikhi iye endaweni ekuyiwa kuyo engeyona eyayo, lokhu okudinga ukudluliswa kwe-Linux, inqubomgomo ye-firewall, umzila ohlangothini olukude kanye nemvume esezingeni le-AWS engenalo nhlangano nohlelo lokusebenza lwesivakashi. Akukho lutho kukhonsoli okudonsela ukunaka kulo mehluko. Isibonakaliso sibonakala njengesiphambeko sokuhlinzeka, futhi ngokuvamile akusiyo.
Hlukanisa izivivinyo ezimbili ngaphambi kokushintsha noma yini
Ukufinyelela isango kufakazela umhubhe, umzila oya ekhelini lawo kanye neqembu lokuphepha elivumela ukushintshana. Ukudlulisela kwelinye ihhashi akufakazeli lutho kwalokho: kusebenzisa ikheli lomthombo elihlukile, indawo ekuyiwa kuyo ehlukile kanye ne-instance endimeni engazange yakhelwe yona ngempela. Bhala izivivinyo ezimbili ngokwehlukana futhi uphawule ukuthi iyiphi ehlulekayo, ngoba ukulungiswa kwakho kokubili kusekhonsoli ehlukile. I-instance yesango eyakhelwe kuphela ukuqeda imihubhe ayinaso isizathu sokudlulisela enye into, futhi izilungiselelo zayo ezizenzakalelayo zikubonisa lokho. Ngakho isivivinyo sesibili sidinga ukusethwa kwaso, hhayi ukulungiswa okuncane kwesokuqala.
I-ping esebenza iya esangweni kanye ne-ping ehlulekayo iya ehhashini elingaphesheya kwayo akusiyo inkinga yezikhathi ezithile. Kuwukuziphatha okulindelekile kwe-instance engazange itshelwe ukuthi ingadlulisa.
Bhala indlela phansi ngaphambi kokuthinta isilungiselelo
Qopha isiqalo somsekeli, i-instance noma isixhumanisi senethiwekhi esidlulisayo, inethiwekhi encane ekuyiwa kuyo kanye nomzila wempendulo. Umugqa kuthebula lemizila ye-VPC okhomba ku-instance awuhleli uhlelo lokusebenza lwe-instance ukuze lwendlulise, futhi i-kernel yesivakashi enokudluliswa okuvuliwe ayidali umzila we-VPC. Zombili iziphetho zalolo budlelwano kufanele zibe khona, futhi zihlelwa ezindaweni ezihlukene ngabantu abanokufinyelela okuhlukene.
Bese uhlola isilungiselelo sokuhlolwa komthombo/nendawo ekuyiwa kuyo engxenyeni yangempela yokudlulisa, hhayi ku-instance ngayinye ku-VPC. I-AWS ibhala ukuthi kungani i-instance edlulisela ithrafikhi yabanye kufanele ibe nalokho kuhlolwa kucishiwe, futhi nokuthi kungani isilungiselelo siyisinqumo se-instance ngayinye hhayi okwezenzakalelayo kuyo yonke i-VPC.
Imingcele emine, futhi ukuhlolwa kungokunye kuphela kwayo
Thatha indlela njengemibuzo emine futhi uyiphendule ngokulandelana. Impendulo yokuqala ehlulekayo iyindawo okukhona kuyo umsebenzi, futhi akekho kwabanye ozoyikhokhela.
| Boundary | Question it answers |
|---|---|
| VPC route tables | Do the destinations and replies select the intended gateway? |
| Forwarding instance | Do the AWS check and the guest OS both permit forwarding? |
| Access policy | Do security groups, ACLs and host rules allow the exchange? |
| Destination | Can the service accept that source and return a reply? |
Ukulandelana kubalulekile ngoba ukuhlola kushibhile: imizila ibonakala ekhasini elilodwa, ukuhlolwa kuyisici esisodwa, futhi umbono wendawo ekuyiwa kuyo ngokuvamile uyinto yokugcina abantu abayibuzayo.
Ukuhumusha kushintsha ukuthi indawo ekuyiwa kuyo ibona muphi umthombo
Idizayini enamizila igcina ikheli lomthombo lomsekeli, ngakho indawo ekuyiwa kuyo idinga umzila wokubuya oya esiqalweni somsekeli. Idizayini ehumushiwe yethula ikheli lesango esikhundleni salokho, lokhu okususa leso sidingo futhi kufake ithebula lesimo esangweni. Nquma ngokuhambisana nokwakheka okuhloswe, esikhundleni sokwengeza ukuhumusha ngoba isibonelo esingahlobene sikusebenzisile futhi sabonakala sisebenza.
Uma uhumusha, khawulela umthetho esiqalweni somsekeli nendawo ekuyiwa kuyo ehlosiwe. Uma ugcina, qinisekisa ukuthi uhlangothi olukude luyawazi ngempela umzila esikhundleni sokucabanga ukuthi uzowufunda.
Vivinya kusukela kumsekeli wangempela, bese ugcina ushintsho
Isicelo esikhiqizwe esangweni singaphumelela kuyilapho isicelo esidlulisiwe sehluleka, ngoba kuwumthombo ohlukile nesimo sokudlulisa esihlukile. Ngemva kokulungiswa okuhlosiwe, phinda isivivinyo esiqondile somsekeli-kuya-kwinsiza esahluleka, kusukela kumsekeli ofanayo, futhi uqinisekise ukuthi impendulo iyabuya hhayi nje ukuthi isicelo safika.
Ekugcineni, faka isilungiselelo ekuhlelweni okuphethwe kwesango ukuze i-instance yokunye ithole sona. Isivivinyo esiphumelelayo esincike ekukhishweni okwenziwe ngesandla yisivivinyo esiphelelwa yisikhathi ekwakhiweni kabusha okulandelayo, futhi umuntu owasitholayo ngeke abe khona ukuze akhumbule ukuthi kungani.