Amakheli amabili e-VPN endawo: abalingani ababili be-Azure, hhayi oyedwa

Umdwebo unokuxhumana okubili kwe-inthanethi egatsheni kanye nengangozi eyodwa ye-VPN ku-Azure, ngakho ingangozi yenethiwekhi yendawo ithola womabili amakheli omphakathi. Kubukeka kuhle, futhi akusebenzi ngendlela umdwebo oyisikisela ngayo. Idivayisi ngayinye ye-VPN yendawo iwubudlelwano obuhlukile bomlingani, futhi umklamo we-Microsoft wamadivayisi amaningi unikeza ngayinye insiza yayo yengangozi yenethiwekhi yendawo kanye noxhumo lwayo. Ukwengeza ikheli lesibili kusiza eyodwa akudali umlingani wesibili. Kudala insiza engayichazi kahle neyodwa yalezi zinto ezimbili.

Inganekwane: ingangozi eyodwa, amakheli amabili

Ingangozi yenethiwekhi yendawo incazelo yomlingani okude: iphoyinti lokugcina lomphakathi elilodwa kanye neziqalo zangasese ezingemuva kwalo. Ayikho indlela esekelwayo yokwenza leyo nsiza isho «noma yiyiphi yalezi zinto ezimbili».

Ukudideka okufanayo kukhona nakolunye uhlangothi, lapho ama-IP amabili omphakathi e-Azure efundwa njengobufakazi bokuthi kunezingangozi ezimbili ze-Azure.

Bala izinto, bese ubala amashubhu

Thatha amadivayisi amabili endawo asetshenziswa ngokuzimela, ngalinye linekheli lalo lomphakathi nokufinyelela kumanethiwekhi angasese afanayo, kanye nengangozi eyodwa ye-Azure esekelwe kumzila kumodi esebenzayo-esebenzayo. Ingangozi ye-Azure inamazinga amabili asebenzayo anama-IP omphakathi ahlukene. Idivayisi ngayinye yendawo ixhuma kuwo womabili amazinga. Leyo yinethiwekhi egcwele, futhi inani lezinto livela kuyo, hhayi kumdwebo.

Izibalo zifushane ngokwanele ukuthi zilinyekwe kudokhumenti yokuklama:

2 on-premises VPN devices
2 local network gateway resources
2 connection resources
4 IPsec tunnels in the complete 2 x 2 mesh

Insiza eyodwa yoxhumo ingathwala ishubhu elingaphezu kwelilodwa eliyisisekelo, ngakho amashubhu amane awasho izingangozi ezine zenethiwekhi ebonakalayo. Ama-IP amabili omphakathi e-Azure nawo awasiona izinto ezifanayo nezingangozi ezimbili zenethiwekhi yendawo ezichaza isayithi elikude.

Yini eyezwa yimodi esebenzayo-esebenzayo ohlangothini lwe-Azure

Umsebenzi osebenzayo-esebenzayo ushintsha ingangozi ye-Azure isuke kusigaba esisodwa esisebenzayo iye kwezimbili, ngasinye sine-IP yaso yomphakathi, futhi yikho okwenza inethiwekhi egcwele yenzeke nhlobo. Akukhuphuli kabili umfakelo wokugeleza okukodwa. Futhi akususi isidingo sokuthi uhlangothi lwendawo lusekele imizila eminingi enezindleko ezilinganayo uma womabili amadivayisi edlulisa ngesikhathi esisodwa. Qinisekisa imodi yengangozi, i-SKU namakhono edivayisi elikude ngaphambi kokuhlinzeka noma yini.

Ingangozi ekumodi yokulinda engasebenzi iwumklamo ovumelekile ngokuphelele; ivele inikeza inani elihlukile lamashubhu.

I-BGP yenza zombili izindlela zisebenziseke

Kumklamo wamadivayisi amaningi, womabili amadivayisi endawo asebenzisa i-BGP. Nika ngalinye ikheli lomlingani we-BGP eliyingqayizivele futhi umemezela iziqalo zangasese ezihlosiwe ezifanayo emizileni efanele. Iziqalo zangasese zikhomba amanethiwekhi avikelwe, kuyilapho amakheli omphakathi ekhomba lapho ukuxhumana kokuthwala okubethelwe kuphela khona. Ukuhlanganisa lezi zimbili kudala umklamo lapho wonke amashubhu ephakeme kodwa imizila ingalungile.

Hlela umzila wokubuya nanoma yikuphi ukuhlola kwesimo okufanele kubekezelele enye yezindlela ezimbili. Iseshini ye-IKE enempilo endaweni ngayinye yokugcina ayifakazeli ukuthi umthwalo womsebenzi ungasebenzisa wonke umzila omenyezelwe.

Ukukhetha okusekelwe ekugelezeni akukona ukuhlanganisa umkhawulokudonsa

I-Azure ikhetha umzila ngokugeleza ngakunye isebenzisa i-hash ekukheleni nasezimbonini zokugeleza. Esimweni esizinzile, amaphakethe okugeleza okuthile kwe-TCP noma kwe-UDP ngokuvamile athatha ishubhu elifanayo, futhi uhlangothi lwendawo lungakhetha elinye ishubhu ngendlela yokubuya. Ngakho amadivayisi amabili namashubhu amane akhulisa ukutholakala, hhayi isivinini sokudlulisa okukodwa. Uma isilayidi somthengisi sithembisa ukuhlanganisa, sichaza esinye isici noma ukungaqondi kahle.

Hlola ngokugeleza okuhambisanayo uma ufuna ukubona izindlela zisakazeka, nangokugeleza okukodwa uma ufuna ukubona umkhawulo.

Yikuphi ukuphindaphindeka okuyikho owakususa

Amakheli amabili e-WAN kudivayisi eyodwa athuthukisa izinketho zoxhumo lokufinyelela ngenkathi abelana amandla, isofthiwe nesimo sokwehluleka saleyo divayisi. Awafani namadivayisi amabili, futhi akukho ukumisa ohlangothini lwe-Azure okushintsha lokho. Landela umklamo we-WAN ekabili noma weqembu osekelwa umthengisi esikhundleni sokuthola ukuphindaphindeka enanini lamakheli. Bese uyihlola: susa umzila owodwa ngesikhathi futhi uqinisekise imizila esele kanye nokushintshana kwensiza yangempela kuzo zombili izinhlangothi.

Linde ukubambezeleka kokutholwa nokuhlangana, futhi linde ukuthi ezinye izikhathi ezikhona ziphele.