I-VPN yakho ayiyenzi i-Cosmos DB ibe yimfihlo yodwa
I-VPN iletha ikhompyutha yakho kwinethiwekhi, hhayi ngaphakathi kwesizindalwazi. Bheka ukuthi iphoyinti lokugcina eliyimfihlo, isifunda se-DNS, imodi yokuxhuma kanye nokufinyelela kwe-akhawunti kumele kwenze ini.
Uxhuma ikhompyutha ne-VNet nge-VPN, uvula i-URL ye-akhawunti ye-Cosmos DB, futhi isicelo sisaphuma nge-inthanethi yomphakathi. Umhubhe wenze umsebenzi wawo. Engakwenzanga ukwakha iphoyinti lokugcina eliyimfihlo, ukushicilela irekhodi le-DNS eliyimfihlo noma ukucisha ukufinyelela komphakathi, ngoba lezo yizinguquko ezintathu ezihlukene ku-akhawunti, hhayi izici zokuxhuma kwakho kwenethiwekhi. Lesi sibonelo sisebenzisa i-Azure Cosmos DB ye-NoSQL, iphoyinti lokugcina eliyimfihlo ku-VNet kanye nekhompyutha exhunywe kuleyo VNet nge-VPN, futhi igcina ikheli lohlelo lungashintshile.
Inganekwane: ukuba ku-VPN kwenza isizindalwazi sibe yimfihlo
Ukuba ku-VNet kusho kuphela ukuthi amaphakethe akho angafinyelela amakheli ayimfihlo kuleyo VNet. Akusho lutho mayelana nokuthi igama le-akhawunti lixazululwa kuphi, futhi akusho lutho mayelana nokuthi i-akhawunti isawamukela yini umthamo womphakathi.
Iphoyinti lokugcina eliyimfihlo iyingcebo ehlukile enekheli layo, isinyathelo sayo sokugunyaza kanye nezintambo zayo ze-DNS. Kuze kube yilapho likhona futhi ligunyaziwe, igama lixazululwa laya kuphoyinti lokugcina lomphakathi futhi umthamo wakho uya lapho kungakhathaliseki umhubhe.
Yini ngempela eyenza igama lixazululwe ngendlela eyimfihlo
Gcina iphoyinti lokugcina le-akhawunti elivamile le-SDK, into efana ne-https://ACCOUNT.documents.azure.com. I-DNS eyimfihlo kufanele ixazulule lelo gama ngohlu lwe-Private Link iye emakhelini ayimfihlo ephoyinti lokugcina. Ungalifaki esikhundleni se-URL yezinombolo futhi ungacishi ukuhlolwa kwesitifiketi, ngoba lokho kushintshanisa inkinga ye-DNS nenkinga yokuphepha.
| Example choice | Value |
|---|---|
| Cosmos API | NoSQL |
| Private endpoint subresource | Sql |
| Private DNS zone | privatelink.documents.azure.com |
| SDK connection mode | Gateway |
Leyo mikhombandlela yeyakhe i-API ye-NoSQL. Amanye ama-API e-Cosmos awazona izinto ezishintshanisekayo esibonelweni esifanayo, futhi ukukopisha igama lensiza encane kusuka kwenye i-API kukhiqiza iphoyinti lokugcina elingalokothi lixazululwe.
Dala futhi ugunyaze iphoyinti lokugcina ngohlelo lomsebenzi olugunyaziwe lwe-Azure, bese usebenzisa ukuhlanganiswa kweqembu lesifunda se-DNS esiyimfihlo. Ikhompyutha idinga isixazululi esingaphendula kuleso sifunda , ngokuqondile noma ngokudlulisela okugunyaziwe, kanye nomzila weklayenti le-VPN uya kukho konke ikheli lephoyinti lokugcina elifanele.
Iphoyinti lokugcina eliyimfihlo lingaba namakheli angaphezu kwelilodwa, kuhlanganise nokufakwa komhlaba kanye nesifunda. Gcina ukuhlanganiswa kwe-DNS lapho izifunda ze-akhawunti zishintsha esikhundleni sokubophela ikheli elilodwa kufayela le-hosts, futhi khumbula ukuthi impendulo evela kusixazululi somphakathi esingahlobene ayifakazeli lutho ngomzila oyimfihlo. Uma udlulisela i-DNS nge-hub, qinisekisa ukuthi umdlulisi uyaphendula ngaphambi kokulungisa iklayenti. Umdlulisi ogugile ubuyisela impendulo yomphakathi, ebukeka ngokulingana ncamashi nophoyinti lokugcina olungekho.
Imodi ye-Gateway nemodi ye-Direct ayishintshaniseki
Imodi ye-Gateway ithumela izicelo zensiza nge-HTTPS ku-TCP 443. Yingakho inqubomgomo ye-firewall ye-443 kuphela isebenza nayo futhi yingakho lesi sibonelo siyikhetha ngamabomu.
Imodi ye-Direct nge-Private Link inezidingo zokuxhuma ezihlukile, kuhlanganise nebanga elibanzi lezimbobo ze-TCP elibhalwa yimibhalo ye-akhawunti. Inqubomgomo ebhalelwe imodi ye-Gateway akufanele isetshenziswe kabusha buthule kuklayenti lemodi ye-Direct, ngaphandle kwalokho i-SDK izoxhuma bese ilenga emsebenzini wokuqala wedatha.
Khetha imodi eyodwa, uyibhale phansi ne-akhawunti, futhi wenze inqubomgomo yenethiwekhi ihambisane nayo. Amaqembu ashintsha imodi ngesikhathi sokuxazulula izinkinga avame ukugcina isethi yemithetho ye-firewall engagculisi noma iyiphi yazo.
Ukucisha ukufinyelela komphakathi kuyiswishi ehlukile
Uma i-akhawunti kufanele ibe yimfihlo kuphela, cisha ukufinyelela kwenethiwekhi yomphakathi ngesilungiselelo esisekelwayo se-akhawunti futhi uqinisekise umphumela. Ungakuthathi ukuba khona kwephoyinti lokugcina eliyimfihlo njengesinqumo esiphelele sokufinyelela, ngoba i-akhawunti enephoyinti lokugcina eliyimfihlo nokufinyelela komphakathi okunikwe amandla isaphendula ku-inthanethi.
Qinisekisa ngaphandle kwe-VPN kanye nangaphakathi. Isicelo esivela kunethiwekhi okufanele ikhishwe yisivivinyo esibonisa ukuthi isilungiselelo saqala ukusebenza, futhi yisivivinyo esigqitshwa iningi lamawindi woshintsho.
Ukufinyeleleka akusona imvume
Umsebenzi we-SDK ovunyelwe ovela kukhompyutha ye-VPN yisivivinyo sokwamukela, kusetshenziswa i-URL evamile ye-akhawunti kanye nobuwena obuhlosiwe. Ukufinyeleleka kwe-VPN akunikezi izimvume zedatha ye-Cosmos; indiza yedatha ihlola izindima zayo noma okhiye bayo.
Bese usebenzisa ukwenqatshwa: ubuwena obuhlukile, nomzila wenethiwekhi ongakufanele ukufinyelela ku-akhawunti. Uma noma yikuphi kulezi kuphumelela, umngcele owubhalile awuwona umngcele owakhile.
Bhala amaqiniso amane uma uqeda: amakheli ayimfihlo ephoyinti lokugcina, isifunda se-DNS esiphendula igama le-akhawunti, imodi yokuxhuma nezidingo zayo zezimbobo, kanye nokuthi ukufinyelela komphakathi kucishiwe yini. Lawa mane achaza ukusethwa kumuntu olandelayo, futhi ngalinye lawo lehluleka ngokuzimela.