Amagama e-SSH amabili, iseva eyodwa: i-VPN eqondile noma i-bastion

Gcina indlela ye-VPN egunyaziwe kanye nendlela ye-bastion egunyaziwe njengamagama nezimpawu zencwadi ezihlukene, ukuze isifinyezo singadingi ukuqagela ukuthi iyiphi indlela egunyaziwe.

Le seve efanayo yangasese iphendula nge-VPN egunyaziwe nange-bastion egunyaziwe, futhi ufuna umaka wencwadi we-Emacs owodwa kokunye esikhundleni sesifinyezo esiqagelayo. Isinqumo akusona ukuthi iyiphi indlela engcono; isinqumo ukuthi iyiphi indlela egunyaziwe emsebenzini ophambi kwakho. Gcina zombili zicacile, ziqambe ngamagama ahlukene, futhi igama lefayela lisho ukuthi ukhethe ephi.

Umbundela wokuqala: yiziphi izindlela ezigunyaziwe?

I-jump host ayisiyo indlela yokushintsha ezenzakalelayo yesidingo se-VPN, futhi i-VPN ayilona ilayisense lokweqa i-bastion egunyaziwe. Buza ukuthi yiziphi izindlela ezigunyaziwe kwi-akhawunti yakho nakule datha. Uma zombili zivunyelwe, unokukhetha; uma kuyinye kuphela, isethi yezimpawu zencwadi inokufakwa okukodwa. Leyo mpendulo ivela kumnikazi wedatha, hhayi endleleni esebenza ngokuzumayo namuhla.

Bhala impendulo phansi, ngoba umehluko uyanyamalala ngokushesha phakathi kwesigameko.

Zombili izindlela zidinga futhi ukumiswa kwayo kwe-akhawunti nobuwena. Igama elabiwe elisebenza endleleni eyodwa lingehluleka kwelinye ngezizathu ezingenakho ukuhlangana ne-netweki.

Umbundela wesibili: ungakwazi yini ukuqamba indlela ngayinye ngokuhlukile?

Ukwakheka kwe-SSH kungaba namagama amabili omgcini endaweni eyodwa, ngalinye linokuziphatha kwe-proxy okuhlukile. Beka izingxenye eziqondile ngaphambi kwanoma yiluphi uphawu olubanzi lwasendle, ngoba inani lokuqala elitholakele liyaphumelela kweziningi izinketho.

Host proj-direct proj-bastion
    HostName 10.60.0.21
    User analyst
    ControlPath none

Host proj-direct
    ProxyJump none

Host proj-bastion
    ProxyJump gw.example.com

Ikheli elingenhla liyisibonelo; lishintshe ngeleyo echazwa yiqembu lakho. Igama lokugxuma lidinga futhi i-akhawunti egunyaziwe ye-bastion, okusho ngokuvamile ingxenye yesibili ye-Host ye-bastion uqobo. Ukuvala ukwabiwa kwezixhumi lapha kugcina ukuqhathaniswa kwezindlela kuthembekile, ngoba isixhumi esisetshenziswe kabusha singaphila isikhathi eside kunoshintsho lwendlela ozama ukulubona.

Khona-ke amagama amafayela akude ahlala ehlukene futhi efundeka.

/ssh:proj-direct:/srv/project/README.md
/ssh:proj-bastion:/srv/project/README.md

Umbundela wesithathu: ingabe umhleli uyawazi umehluko?

I-TRAMP ithatha lawo magama amafayela amabili njengezindawo ezihlukene, futhi yilokho kanye okufunayo. Maka ngayinye ngophawu lwencwadi ngaphansi kwegama elisho ukuthi isebenzisa iphi indlela, futhi uvule kabusha uphawu lwencwadi esikhundleni sokushintsha incazelo yendawo eyodwa. Izimpawu zencwadi ezimbili zenza nokuqhathanisa kubonakale: ungavula zombili futhi ubone ukuthi iyiphi ehlulekayo ngaphandle kokushintsha noma yikuphi ukumiswa.

Isilungiselelo esisodwa sifanele ukunakwa lapho i-ProxyJump ihilelekile: ukwabiwa kwezixhumi kwe-TRAMP kufanele kucishiwe ezixhumini ezifanele, ngakho setha i-tramp-use-connection-share ku-nil ngaphambi kokuzivula. Lokhu kuyisilungiselelo sokuhambisana, hhayi ukulungiswa kwendlela engekho, futhi akwenzi indlela engagunyaziwe ibe egunyaziwe. Imibuzo evamile ye-TRAMP ibhala izimpawu zencwadi njengendlela esekelwayo yokufinyeza la magama.

Uphawu lwencwadi olushintsha indlela buthule lumbi kunokungabi naluphawu lwencwadi nhlobo.

Kungani isithonjana senethiweki singafakazi lutho

Inani lesimo esiphelele lika-70 le-NetworkManager lisho ukuthi umshini unokuxhumana komhlaba wonke. Alisho noma yiphi iphrofayela ye-VPN, futhi i-Wi-Fi evamile iyaligcwalisa. Umhubhe wengosi yodwa womfelandawonye wangasese ophethe ngqo indlela oyidingayo ungashiya lelo nani elihlangene lingathintekile. Yingakho isifinyezo esiboshelwe esithonjaneni singabika ukulungela kwendlela engakaze iyihlole.

Funda isimo sesixhumi esithile esikhundleni sesimo somhlaba wonke.

Uma uzisebenzisa ngokuzenzakalela, buza isixhumi esiqanjiwe, bese uhlola indlela okuyiwa kuyo, impendulo yesixazululi nokufinyeleleka kwe-SSH ngalelo thuba. Ngakunye kwalokhu kungahluleka kuyilapho okwedlule kuphumelela, futhi ukuzihlanganisa kube inani elilodwa le-boolean yindlela okugcina ngayo ukuzenzakalela ukubika impumelelo endleleni engakaze iyisebenzise.

Ungenzani lapho indlela iyeka ukusebenza

Gcina amabhafa akho ngaphambi kokuphenya, ngoba isikhathi se-TRAMP esikhona singaphila isikhathi eside kunoshintsho lwendlela bese sihluleka ekubhaleni okulandelayo. Vala ngokuhlanza okusekelwayo, uvule kabusha uphawu lwencwadi, futhi uqhathanise izindlela ezimbili esikhundleni sokucabanga ukuthi iseva iphansi.

Gcina ukuqinisekiswa kokhiye womgcini kuvuliwe kukho kokubili i-bastion nendawo okuyiwa kuyo.

Indlela ehlukile ayikuniki ilungelo lokwamukela ukhiye we seva ongawulindelanga, futhi ayenzi indlela engagunyaziwe yamukeleke. Kokubili yizinqumo ezihlukile kuleso obusithatha.

Izihloko ezihlobene