I-sidecar ye-VPN idinga umthetho wokuqala nomthetho wokwehluleka

I-pod iqala isiqukathi sethumbu ngaphambi kohlelo futhi izicelo zokuqala ziyaphumelela, futhi yiso eso simo esifihla inkinga. Ukulandelana kulungisa umncintiswano owodwa futhi akusho lutho mayelana nethrafikhi uhlelo oluyiqalayo emahoreni amane kamuva, ngemva kokuba ithumbu lehlulekile. Lezi yizinqumo ezimbili ezihlukene. Ngokuvamile eyodwa kuphela eklanywayo.

Ukulandelana kuvimbela isicelo sokuqala kuphela

I-Kubernetes isekela umjikelezo wokuphila we-sidecar owakhiwe ngeziqukathi ze-init ezingaqalwa kabusha. Kulelo modeli, uphenyo lokuqala lungabamba isinyathelo esilandelayo sokuqalisa kuze kube yilapho ithumbu libika ukulungela. Lokho kuwukuthuthukiswa kwangempela, futhi kufanele kusetshenziswe ngamabomu esikhundleni sokwengeza i-sleep kusikripthi sendawo yokungena. Isango lilingana kuphela nesimo esilivivinyayo.

Ngaphandle kwalelo modeli, incazelo yokulandelana ingeyendawo yokusebenza noma uhlelo lokuncika olusebenzayo, futhi akudingeki zivumelane. Ukusetshenziswa okukopishwe kwelinye inkundla kungabonakala kulindele ithumbu ngoba uhlelo luqala kancane ngesikhathi esifanayo. Lokho akusona isiqinisekiso esifanayo, futhi kuyehuleka ngaphansi komthwalo.

Shono ukuthi isango libona ini: ikhona inqubo, ikhona i-interface, i-handshake iqediwe. Ngayinye yalezi iyisimangalo esibuthakathaka kunokuthi «indlela yedatha eya ezindaweni ezidingwa yile pod iyasebenza».

Phogelela indlela yedatha esikhundleni sokuyicabanga

Uphenyo luwukuhlola ngesikhathi esisodwa futhi i-firewall iyisici esisebenza phakathi kwezikhathi. Uma imfuneko iwukuthi ithrafikhi yohlelo ingaphumi ngaphandle kwethumbu, kufanele ivezwe endaweni yamagama yenethiwekhi eyabiwe njengomthetho wokwamukela-noma-wokulahla. Ukulandelana kokuqala kweziqukathi akukwazi ukuthwala leyo mfuneko. Umthetho kuphela ongakwazi.

Iziqukathi eziku-pod elilodwa zabelana ngaleyo ndawo yamagama, ngakho indawo yokuphoqelela iyindawo yamagama uqobo. Noma yini oyibhalayo, kufanele ishiye ukuxhumana kwangaphandle kwethumbu uqobo kutholakala, ngoba ukuvimba kwayo ukuze kuvikelwe uhlelo kunqamula indlela edingwa wuhlelo.

Nquma inqubomgomo yokwehluleka ngokusobala: ingabe ithrafikhi yohlelo kufanele ime ngokuphelele lapho ithumbu lingenampilo, noma iqhubeke futhi imakwe njengengavikelwe? Kokubili kuyavumeleka, futhi akukho okukodwa okuyilokho okutholayo ngokuqala iziqukathi ngokulandelana okuthile.

Hlola ithrafikhi ongayishongo

Thatha isicelo esisha ngesikhathi sokwehluleka kwethumbu okulawulwayo bese ubona ukuthi siyaphuma yini. Bese uphinda ukuhlola emizileni okungeke kuyithinte ukuhlolwa kwekheli lokuphuma: ukuxazululwa kwe-DNS ngaphakathi kweqembu, izindawo ze-IPv6, namasevisi afinyelelwa ngamakheli angaphakathi eqembu esikhundleni se-inthanethi yomphakathi. Le yimizila eqhubeka isebenza buthule ngemva kokufa kwethumbu.

Ikhasi lekheli lokuphuma lifakazela ukuthi isicelo esisodwa saya lapho obukulindele khona ngaleso sikhathi. Alikwazi ukubala eminye imizila, futhi igebe phakathi kwalokho okuhlolile nalokho i-pod engakufinyelela yilapho kuhlala khona ukwehluleka okuthakazelisayo.

Phinda ukuhlolwa ngemva kokuqalwa kabusha kwe-sidecar hhayi kuphela ngemva kokuqalwa okuhlanzekile. Isiqukathi sethumbu esiqalwe kabusha singashiya indawo yamagama nemizila nenqubomgomo esimweni esiphakathi.

Bhala irekhodi lokusetshenziswa

Amaqiniso amathathu angena kumanothi okusetshenziswa: ukuhlolwa kokulungela nokuthi kubonani, isenzo sokubuyisela lapho lokho kuhlolwa kwehluleka, kanye nomthetho wokuphoqelela olawula ukuphuma. Imibhalo yeziqukathi ze-sidecar ihlanganisa indlela umjikelezo wokuphila osebenza ngayo futhi ishiya leso sinqumo senqubomgomo kuwe. Lokho kwehlukanisa kulungile, futhi yingakho inqubomgomo ivamise ukungabikho.

Ukuhlolwa kwempilo okuthathwa njengokuvikelwa uhlobo olubiza kakhulu lwesikhombisi esiluhlaza, ngoba kuvimbela abantu ukuthi babuze imibuzo. Ukusibiza ngokunembile emibhalweni kubiza umusho owodwa futhi kuvimbela lokho.

Ekugcineni, hlola indlela yokubuyisela kanye lapho uhlelo lusebenza. Idizayini edinga ukuthi i-pod yenziwe kabusha ukuze kubuyiselwe ukuphuma iyisinqumo, futhi kufanele kube esinye osithathile, hhayi esinye ositholile.