Tailscale Serve noma Funnel: ubani ongavula isixhumanisi ngempela?

Yomibili imiyalo ishicilela insiza yasendaweni ngegama le-HTTPS le-Tailscale, futhi kusukela emshinini eziwusebenzisayo zibukeka zicishe zifane. Umehluko ukuthi ubani ongafinyelela i-URL ngemuva kwalokho, futhi lowo mehluko unquma ukuthi yikuphi ukulawula ohlelo lwakho olusadinga. I-Serve igcina izibukeli ngaphakathi kwe-tailnet, kuyilapho i-Funnel izihambisela ku-inthanethi evulekile. Khetha izibukeli kuqala, bese ukhetha umyalo ohambisana nazo.

I-Serve iphendula umbuzo ngaphakathi kwe-tailnet yakho

I-Serve yenza i-proxy yechweba lasendaweni noma ihlinzeka ngokuqukethwe kwasendaweni kumadivayisi akwi-tailnet yakho, futhi imithetho yokufinyelela ye-tailnet isasebenza kusizo ngasinye. Idashibhodi echwebeni 3000 iyafinyeleleka ngegama le-HTTPS okungamadivayisi akho kuphela angalixazulula futhi axhumeke kulo. Lokhu kuyisimo esiyisisekelo esifanele samathuluzi angaphakathi, ngoba izibukeli seziqinisekisiwe yi-tailnet futhi awunezi indawo evulekile. I-URL ibukeka njengewebhusayithi evamile, yingakho abantu bayithatha njengaleyo.

I-Serve ingaphinda inamathisele izihloko zobunikazi ezichaza umsebenzisi we-tailnet ezicelweni eziyidlulisayo. Uma uhlelo lwakho luthemba lezo zihloko njengokuqinisekisa, hlanganisa i-backend ne-localhost ukuze kungabikho okunye okungafinyelela kuyo ngqo; i-backend elalela ekhelini elingahanjiswa ingathola izicelo ezingakaze zidlule ku-proxy.

I-Funnel ishintsha izibukeli zibe yi-inthanethi evulekile

I-Funnel ishicilela insiza ekhethiwe kunoma ubani one-URL, futhi izivakashi azidingi iklayenti, i-akhawunti noma ubulungu ku-tailnet yakho. Ngakho-ke insiza idinga ukuqinisekisa, umkhawulo wesivinini namaphakethe ongawasebenzisa kunoma yinsiza evulekile. Izicelo ezivulekile azizithwali izihloko zobunikazi be-tailnet ze-Serve, ngakho-ke uhlelo olwaluthembele kuzo alunabo ubunikazi bomsebenzisi nhlobo ngaphansi kwe-Funnel. Ukukhetha omunye umyalo wokushicilela akuphenduli umbuzo wokuqinisekisa esikhundleni sakho.

I-Funnel inemikhawulo futhi okungenzeka ukuthi isifundo senguqulo endala singayisho. Iqeda i-TLS ngesitifiketi i-Tailscale eyithola ngegama, futhi isekela amachweba athile okulalela kuphela, njengoba idokhumenti ye-Funnel ichaza. Uma insiza yakho ilindele iphrothokholi engeyona i-HTTPS kwelinye lalawa machweba, i-Funnel iyithuluzi elingalungile hhayi indida yokulungiselela.

Funda imodi kuklayenti, hhayi echwebeni

Hlola isimo samanje ngaphambi kokwabelana nganoma yini, ngoba zombili izimodi zingalungiselelwa ichweba lasendaweni elilodwa ngezikhathi ezihlukene. Imiyalo yesimo ibika ukuthi yini eshicilelwe ngempela futhi kubani. Ungaqageli izibukeli ngokuthi i-URL iyaphendula.

tailscale serve status
tailscale funnel status
tailscale status --json | head -40

Isintaksi yemiyalo ishintshile phakathi kwezinguqulo zeklayenti, ngakho-ke ukubiza okukopishiwe kungakhetha imodi ehlukile kunalokho obukuhlosile. Khetha indlela ebhaliwe yenguqulo oyisebenzisayo, futhi funda isiqinisekiso esinyatheliswa yiklayenti esikhundleni sokusicabangela. Uma kukhona kokubili ukulungiselelwa kwe-Serve ne-Funnel, okwavulekile yikho okubalulekile ekuchayekeni. Setha kabusha ukulungiselelwa obungakuhlosile esikhundleni sokufaka okunye phezu kwako.

Yima futhi ufunde isimo kabusha uma okukhiphayo kungayidaluli izibukeli. I-URL eshicilelwe ngaphandle kwezibukeli ezishiwo iwukuqagela, futhi ukuqagela yikho okwenza amadashibhodi angaphakathi aphelele ku-inthanethi evulekile.

Hlola ngezibukeli obuzihlosile ngempela

Hlola ngaphandle kwe-tailnet, hhayi kusuka emshinini oshicilele insiza. Isicelo esivela kudivayisi ye-tailnet sibonisa ukuthi i-proxy iyasebenza; asibonisi ukuthi umfokazi ukhishiwe. Sebenzisa inethiwekhi engenayo iklayenti le-Tailscale futhi engenayo indlela eya ku-tailnet.

curl -sI https://host.tailnet-name.ts.net
curl -sI https://host.tailnet-name.ts.net --resolve host.tailnet-name.ts.net:443:203.0.113.10

Kudashibhodi yangaphakathi, isicelo sangaphandle kufanele sehluleke ukuxhumana noma sehluleke ukugunyazwa, futhi isicelo sangaphakathi kufanele siphumelele ngobunikazi obukulindele. Kwinsiza evulekile, isicelo sangaphandle kufanele siphumelele futhi uhlelo kufanele lucele izifakazelo zalo. Bhala ukuthi yikuphi kwalemiphumela emibili oyibonile, ngoba i-URL iyodwa ayikutsheli. Uma umphumela uphambene nenhloso, susa ukulungiselelwa okuvulekile kuqala bese uphenya.

Ukushicilela insiza akuyona isinqumo esifanayo nokukhetha i-exit node, elawula ukuthi ithrafikhi yakho ephumayo iphuma kuphi. I-Serve ne-Funnel ziphendula ukuthi ubani angafinyelela into oyisebenzisayo; i-exit node iphendula ukuthi ukuxhumana kwakho uqobo kubonakala kuqhamuka kuphi. Gcina lemibuzo emibili ihlukene futhi ukuqhathanisa kuhlala kulula.