I-VPN ingena ku-VPC iyasebenza, kodwa isevisi ephethwe iyaphela isikhathi
Umhubhe uphela emkhawulweni wakho, hhayi emnyango wangaphambili womhlinzeki. Ngaphambi kokushintsha umzila, hlukanisa umgomo njengowasingathwa ku-VM, oxhumene ne-VPC noma owomphakathi kuphela.
Ukufinyelela isizindalwazi esiphethwe nge-VPN ngokuvamile kuyahluleka ngesizathu okungekho muntu owabhala sona encwadini yokuqondisa: umhubhe uphela emkhawulweni wenethiwekhi yakho, kuyilapho isevisi ingakaze ibe ngasohlangothini lwakho lwawo. Ithebula lemizila libukeka lilungile, umhubhe ubika ukuthi uyasebenza, futhi ukuxhumana kuphela isikhathi noma kunjalo. Yenza izivivinyo ezine ezingezansi ngokulandelana futhi ume kokokuqala okungagcwaliseki isimo sokuphumelela kwaso, ngoba ukuhlolwa ngakunye okulandela kucabanga ukuthi okwangaphambili kwadlula.
Isivivinyo sokuqala: iphelelo ngempela kuphi?
Isango le-VPN lixhuma amanethiwekhi amabili okulawula i-adresi yawo. Isevisi ephethwe isetshenziswa ngemuva komnyango wangaphambili womhlinzeki uqobo, futhi lowo mnyango uthatha esinye sezimo ezintathu kuye ngomkhiqizo. Uma ungazi ukuthi ubhekene nesiphi isimo, akukho msebenzi womzila ozosiza, ngoba iphutha kungenzeka lingabi iphutha lomzila nhlobo.
| Shape | What it means | Pass condition |
|---|---|---|
| Software on your VM | Ordinary subnet addressing | Route and security group permit the client |
| Attached to your VPC | Private, but only inside that VPC | Endpoint associated, source allowed, route present |
| Provider-hosted, public endpoint | Optional private link, not private by default | A private endpoint exists and DNS points at it |
Iningi lantambama achithiwe livela ekweqeni lokhu kuhlukanisa bese uqonda etafuleni lemizila. Isevisi esingathwe umhlinzeki enomkhawulo womphakathi ayikho ngemuva komhubhe wakho noma idayagramu ithini, futhi leyo exhunywe ne-VPC ayisoze ivele empendulweni ye-DNS yomphakathi.
Isivivinyo sesibili: isevisi exhunywe ne-VPC njenge-ElastiCache
Amakhashi alolo hlobo anikezwa i-adresi ngaphakathi kwe-VPC yakho futhi awanaye nhlobo isilaleli esibheke ku-inthanethi. I-VPN yeklayenti ephela kuyo leyo VPC ingawafinyelela, kodwa kuphela uma izimo ezintathu zihlangana. Iphelelo lekheshi kufanele lixhunywe namasubneti umhubhe wakho ewabonayo, iqembu laso lokuphepha kufanele livumele ikheli amaklayenti akho avela kulo, futhi uhlangothi lweklayenti ludinga umzila ohlanganisa amasubneti ekhashi.
Iphutha elivamile ukucabanga ukuthi ukuxhumana endaweni ethile eduze kubalwa. Ukuxhuma i-VPN kwenye i-VPC, noma ukuncika kuphela ku-peering, akukukhulisi iqembu lokuphepha lekheshi noma ithebula lemizila lesubneti laso kumaklayenti akho. Lapho umhubhe okhona uphela kwenye indawo, isibungu sokugxuma noma isiphakeli se-VPN esibekwe ngaphakathi kwaleyo VPC iyona ndlela evamile yokubuyisela. Leyo ndlela iwukuzungeza hhayi umklamo, futhi kufanele imakwe kanjalo encwadini yokuqondisa.
Isivivinyo sesithathu: iphelelo le-PaaS elinegama lomphakathi
I-Azure Database for PostgreSQL yethula igama lesiphakeli somphakathi. Ayikunikezi ikheli langasese ongaliphina efayeleni le-hosts bese ulihambisa ngesango. Amaphelelo omsbenzi wenethiwekhi obonakalayo akhawulela ukuthi yimaphi amasubneti angafinyelela insiza; awagunyazi iklayenti lendawo elifika nge-VPN.
Ukuthola ukufinyelela kwangasese kusho ukwethula iphelelo langasese noma umklamo wokuxhumana kwangasese, bese wengeza indawo ye-DNS yangasese ukuze igama lomphakathi liphendule ngaleyo phelelo esikhundleni se-inthanethi. I-VPN ehlangene nomthetho wephelelo lomsebenzi iwukwakheka okunye okubonakala kufana kuphela emdayagramini. I-App Service ilandela umqondo ofanayo isuka kolunye uhlangothi: ukuhlanganiswa kwe-VNet kuvumela uhlelo lokusebenza ukuthi lwenze izingcingo zokuphuma zingene ku-VNet, futhi akudali indlela yangasese engenayo evela kumhubhe wakho. Ngakho ukufinyelela kwangasese okungenayo kudinga iphelelo langasese, indawo ye-App Service noma isango elingaphambi kohlelo, futhi ukuthi iyiphi yazo ongayisebenzisa kuncike ohlelweni.
Isivivinyo sesine: imikhiqizo enomnyango wayo wangaphambili
I-Firebase Hosting ayikwazi ukuxhunywa ne-Cloud VPN, ngoba isigaba sokusingatha siyingaphambili yomhlaba wonke hhayi into engaphakathi kwe-VPC yephrojekthi. Enye indlela ebhaliwe iwukwakha wena ngokwakho indawo yokungena elawulwayo, ngenguqulo ye-proxy noma isilinganisi somthwalo esisekelwe ngibhakede. Noma kungayiphi indlela isiza siyeka ukuba umkhiqizo wokusingatha omsulwa futhi siba ingqalasizinda oyisebenzisayo manje. Lokho kushintshana kufanele kubizwe ngaphambi kokuthi othile athembise ukuthi umhubhe uzokusibandakanya.
I-Private API Gateway isondelene nohlangothi lwezimiso ze-VPC: iphelelo le-VPC lohlobo lwe-interface lishicilela igama lomsingathi okuphendula kwalo amakheli angasese, futhi ithrafikhi evela endaweni yakho ingena ngomhubhe noma ngokuxhumana okuqondile. Iphelelo kufanele lixhunyaniswe ne-API, futhi isitifiketi kanye negama lomsingathi kufanele kuhambisane nesizinda esenziwe ngokwezifiso esisetshenziswa abashayayo.
Imihubhe ye-Google Cloud VPN ibophezela kumakheli e-IP ozakwethu, hhayi emagameni. Ukudluliswa kwe-DNS kuhlelwa ngokwahlukile, yingakho umhubhe ungaba nempilo ephelele kuyilapho ukusesha endaweni yangasese ekude kusahluleka.
Bese uthola umngcele
Gijima ukuxhumana okufanayo kusuka ku-VM engaphakathi kwe-VPC. Lapho kuphumelela khona kodwa kuhluleke kusuka kuklayenti ye-VPN, igebe liphakathi komzila weklayenti nephelelo lomsebenzi: umzila, iqembu lokuphepha, inqubomgomo yephelelo noma igama. Uma zombili izamo zihluleka, akukho lutho kuleyo nethiwekhi olungafinyelela isevisi, futhi i-VPN yayingakaze ibe yisithiyo.
getent hosts db.internal.example
nc -vz db.internal.example 5432Yenza ukusesha kwegama nokuhlolwa kwembobo ngokwahlukene, ngoba kuhluleka ngezizathu ezihlukene futhi lezi zimbili zikutshela ukuthi yiluphi uhhafu womzila ophukile. Igama elixazululeka ekhelini lomphakathi likutshela ukuthi indawo ye-DNS yangasese ayisebenzi.