Iyiphi ikheli i-firewall yamafu elibonayo uma i-VPN yakho ivuliwe
I-tunnel ephelele ishintsha ikheli lomthombo elibonwa yidathabheyisi yakho. Hambisa uhlu lwemvume, indlela eyimfihlo noma i-tunnel ehlukanisiwe, hhayi ubufakazi.
Idathabheyisi esebenza ngaphambi kokuba i-VPN ixhumane yehluleke ngemva kwalokho ayivamisile ukuba inkinga yobufakazi. Ama-firewall amafu aqhathanisa amakheli omthombo, futhi i-tunnel ephelele ishintsha lokho ababekuqhathanisa. Igebe phakathi kwalokho ocabanga ukuthi i-laptop yakho ikuthumela nalokho okutholwa iseva yikho konke ukungalungi, futhi kungalinganiswa ngesinyathelo esisodwa.
Ikheli lomthombo liba yini
Ku-tunnel ephelele, yonke iphakethe iphuma ngegesi ye-VPN, ngakho iseva ibona ikheli lokuphuma legesi hhayi uxhumano lwakho lwasekhaya. Uma kukhona i-proxy yokuya phambili endleleni, ikheli layo iyona efikayo. Kokubili kuyimithombo esemthethweni, futhi akukho noma yikuphi okuyikheli elisemthethweni lakho lokuqala.
Imithetho ye-firewall ye-Azure SQL emazingeni eseva nakumazinga edathabheyisi iqhathanisa ikheli leklayenti elifinyelela iseva enengqondo, okuthi ngemva kwe-tunnel ephelele kube ikheli lokuphuma. Iqembu lokuphepha le-AWS elivumela ikheli elilodwa lenza okufanayo. Iphakethe liyalahlwa ngaphambi kokuqinisekisa, ngakho iphutha olitholayo libukeka njengokuhluleka kwenethiwekhi hhayi inkinga yemvume. Yingakho kanye abantu baqala ukusetha kabusha amaphasiwedi.
Uhlu lwemvume lunqunywa kuphi
Funda umthetho ohambisana nendlela ehlulayo, hhayi umthetho okhumbulayo ukuthi wawudala. Qaphela ububanzi bawo, imbobo yawo, iphrothokholi yawo kanye nokuthi ingabe uhlolwa ngaphambi kwanoma yikuphi ukuhlola ubunikazi.
Bese unquma ukuthi yiluphi ungqimba olunelungelo lalokhu kunquma. Umthetho wekheli uphendula ukuthi ithrafikhi ivela kuphi. Indawo yokugcina eyimfihlo iphendula ukuthi ingabe isevisi ifinyeleleka ngendlela eyimfihlo noma cha. Ukukhululwa kwe-tunnel ehlukanisiwe kuphendula ukuthi iziphi izindawo zedlula i-tunnel. Lezi azikwazi ukushintshana, futhi ngayinye ihluleka ngendlela ehlukile uma i-tunnel ishintsha.
Izilungiso ezintathu, izingqimba ezintathu
Yonke inketho engezansi ilungisa ukugeleza ngesizathu esihlukile, futhi ukukhetha okungalungile kuveza uxhumano olusebenza kuze kube ushintsho olulandelayo lwegesi.
| Repair | Layer it changes | What it does not fix |
|---|---|---|
| Add the egress address to the rule | Source address matching | Nothing about routing, and it breaks when the egress moves |
| Use a private endpoint | Whether the service is reached privately | A client that still resolves the public name |
| Add a split-tunnel exception | Which flows bypass the tunnel | An expired credential or a wrong password |
Ukungeza ikheli lokuphuma ukushintsha okuncane kakhulu futhi okubuthakathaka kakhulu, ngoba igesi entsha noma isifunda esihlukile kukwenza kungasebenzi buthule. Bhala ikheli eduze kwencazelo ye-tunnel ukuze kokubili kuhamba ndawonye. Ibanga elibanzi lesikhashana wukuxilonga, hhayi isilungiso; ukulishiya endaweni yalo yiyo indlela amasevisi angaphakathi agcina ngokuba sesidlangalaleni.
Kungani ipulatifomu ephethwe ayikwazi ukujoyina i-tunnel
Amapulatifomu ezinhlelo zokusebenza afana ne-Heroku, i-AppHarbor noma i-CloudBees asebenzisa ikhodi yakho endaweni engenaso isisetshenziswa se-tun noma se-tap futhi engenalo ilungelo lokudala esisodwa. Imodeli yabo yokungena i-HTTP hhayi isokhethi elalelayo engahleliwe. I-buildpack eletha ifayela le-VPN eliyisikhali ayinayo indawo yokubeka isixhumi. Amaphethini asebenzayo ikheli lokuphuma elimile idathabheyisi engalivumela, umkhiqizo woxhumano oluyimfihlo ohlinzekwa ipulatifomu, noma i-proxy ku-DMZ efinyelelwa nge-HTTPS.
Leyo proxy iyindlela yokufinyelela enokuqinisekisa nokuloga kwayo. Ayiyenzi ipulatifomu ibe yilungu le-VPN yakho, futhi ukuyichaza kanjalo kuveza imithetho okungekho muntu ongayihlola.
Qinisekisa kusukela kuklayenti ehlulekile
Xhuma futhi uphinda indlela eqondile yeklayenti. Hlola ikheli lomthombo elilowa isevisi, umzila okhethwa yiklayenti egameni ledathabheyisi, kanye nomphumela wombuzo wangempela, ngalolo hlelo. Ukuhlolwa okuvela egesini kufakazela ukuthi igesi iyasebenza, into engakaze ibe nokungabaza. Uma uxhumano manje luqinisekisiwe futhi umbuzo usahluleka, inkinga esele imvume yedathabheyisi.
Buyekeza le mithetho njalo uma i-tunnel ishintsha. Igesi esishintshiwe noma ibanga elisha lokuphuma liphula indlela ngaphandle kwanoma yiluphi ushintsho ekulungiselelweni kohlelo.