Ama-akhawunti amabili e-AWS, inethiwekhi yasendaweni eyodwa: iyiphi indlela?
I-Transit Gateway eyabiwe, ama-VPN amabili azimele noma iphroksi elincane elilodwa: khetha ngobunikazi nangobukhulu bomthelela, hhayi ngokuthi iyiphi indlela okulula ukuyengeza namuhla.
Uhlaka olusobala i-peering ngokumelene ne-VPN, futhi lolo wuhlaka olungalungile. I-VPC ehlanganiswe nge-peering ayikwazi ukuboleka ukuxhumana kwe-VPN kamasihlobo wayo ukuze kuhambiswe imikhondo isuka emaphethelweni iye emaphethelweni, ngakho lelo khetho alizange libe sethebulini, noma yini ithebula lemikhondo eliyiphakamisayo. Lokho okukhethayo empeleni ukuphakathi kwesikhungo senethiwekhi esabiwe, imikhondo emibili ye-VPN ezimele kanye nomnyango wokungena wohlelo oluncane. Ngakunye kuphendula umbuzo ohlukile mayelana nokuthi ngubani ophethe ukuhambisa imikhondo.
Izinketho ezintathu kanye nokungebona ukukhetha
Qala ngokususa umqondo we-peering, bese uqhathanisa okusele ngobunikazi hhayi ngobulula bomdwebo. Ithebula elingezansi isinqumo ngendlela emfishane.
| Option | Who owns the path | Main cost |
|---|---|---|
| Shared transit gateway | Hub owner, used by both VPC owners | Shared blast radius, attachment and data-processing charges |
| Separate VPNs per account | Each account independently | Peer capacity, duplicated tunnels, overlapping prefixes to coordinate |
| Application proxy | The account that hosts the intermediary | New auth, logging and availability surface, and only one service |
Uma i-akhawunti A idinga ukufinyelela kuyo yonke inethiwekhi yasendaweni, umugqa wephroksi unesimo esingalungile. Uma i-akhawunti A idinga i-API eyodwa kuphela, imigqa emibili yokuqala yinethiwekhi engaphezulu kwalokho okufunwa yisidingo.
Lapho i-Transit Gateway eyabiwe inqoba khona
I-Transit Gateway ixhuma i-VPC ngayinye kanye ne-VPN njengamanethiwekhi ahlukene, futhi ukwabiwa phakathi kwama-akhawunti kuvumela abanikazi be-VPC ukusebenzisa isikhungo ngaphandle kokuhlanganisa ama-akhawunti. Yilokho okukhanga: indawo eyodwa lapho iziqalo zendawo zihlangana khona namanethiwekhi e-AWS, nendawo eyodwa yokucabanga ukuthi isixhumi esiphi sifunda imuphi umkhondo.
Ukuxhuma konke akusho ukuvumela konke. Ukuxhumanisa nokusakazwa kunquma ukuthi isixhumi esiphi sisebenzisa iliphi ithebula lemikhondo, ngakho iziqalo ezimbili ze-VPC zingafinyelela isevisi yasendaweni ngayinye kuyilapho ukufinyelela kwazo komunye nomunye kuhlala kungafakiwe ngomklamo wesikhungo. Uhlangothi lwasendaweni lusadinga imikhondo yokubuyela yezigaba ze-AWS, futhi lelo yithikithi lokushintsha lelinye iqembu.
Izindleko zingezesikhungo njengoba zingezemali. Umnikazi wesikhungo ulawula ubudlelwano bokuhambisa imikhondo obunye amaqembu ancike kubo, ngakho ukushintsha kwesixhumi esisodwa kungahambisa ithrafikhi yesevisi umnikazi wesikhungo angakaze ezwe ngayo. Amahora okuxhuma nokucubungula idatha ayengezwa kuyo yonke inethiwekhi oyixhumayo, yingakho izikhungo zivame ukukhula ngokushesha kuneqembu elizilawulayo.
Lapho ama-VPN ahlukene noma iphroksi elincane linqoba khona
Ama-VPN amabili azimele alingana nokusatshalaliswa okuncane okunezinga lomsebenzi lwangempela: i-akhawunti ngayinye ishintsha imigqa yayo yangaphakathi, futhi ayikho eyake yephula enye ngokuhlela ithebula lemikhondo. Imikhawulo ishlangothi lwasendaweni. Isango elilinganayo lidinga umthamo wemigwaqo eyengeziwe, amaplanini amakheli akufanele agagane, futhi ukuhlelwa okubili okumemezela iziqalo ezifanayo kudinga ukukhethwa okwenziwe ngamabomu esikhundleni sethemba.
Iphroksi iyisixhumanisi esincane kunazo zonke. Uma i-akhawunti A idinga idathabheseyi eyodwa noma i-API eyodwa ku-akhawunti B, umlamuli obekiwe ukunikeza umnyango ochaziwe onendaba yayo yokuqinisekisa, yokuloga nokutholakala. Futhi iyisinqumo esisetshenziswa kabi kakhulu: umlamuli odlulisela kuyo yonke indawo eziyimfihlo usephenduke isidluliseli esingenamingcele ngamanyathelo engeziwe, futhi ngeke senze njengokudlula okusobala kusuka ku-VPC kuya kunethiwekhi yasendaweni nganoma yini enye.
Kufanele kufundwe imikhawulo ye-peering ye-VPC ngaphambi kwakho konke lokhu, ngoba ichaza ukuthi kungani umqondo wesine ubuyela njalo nokuthi kungani ungeke usebenze.
Khetha isixhumanisi esincane esihlangabezana nesidingo
Hlela imibuzo: ingabe u-A udinga inethiwekhi eyodwa, iqoqo lamanethiwekhi noma isevisi eyodwa? Ingabe iqembu lasendaweni lifuna indlela eyodwa noma eziningi? Ubani ovunyelwe ukushintsha ukuhambisa imikhondo yethrafikhi yelinye iqembu? Impendulo yokuqala ekhiqiza isixhumanisi esincane kunazo zonke iyisakhiwo, futhi konke okulandela lokho ukusetshenziswa.
Rekhoda impendulo kanye nohlelo lwezigaba, ubunikazi bemikhondo, uhlu lwemigwaqo noma lezixhumi, kanye nesimo sokwehluleka iqembu ngalinye elisilindele. Uma kamuva othile ebuza ukuthi kungani i-akhawunti A ingeke isebenzise nje i-VPN ye-akhawunti B, lowo mbhalo uyimpendulo, futhi uyikusindisa ekuphikisaneni kabusha ngezinketho ezintathu ezifanayo kuphrojekthi elandelayo.