AWS Networking: VPC Configuration yePublic Instance Accessibility
ziviso
Sezvo mabhizinesi anofambisa akawanda emabasa avo kune gore, aine kunzwisisa kwakadzama kweAmazon Web Services (AWS) uye kugona kwayo network kunowedzera kukosha. Imwe yezvivakwa zvekuvaka zveAWS networking ndeyeVirtual Private Cloud (VPC) - network yaunogadzira muAWS account yako kuparadzanisa zviwanikwa zvaunomhanyisa ipapo kubva kune vamwe vashandisi zviwanikwa. Mune ino blog post, isu tichave takatarisana nekugadzirisa VPCs kuti veruzhinji vawanikwe. Uye ipapo isu tichashandisa iyo VPC wizard kugadzira otomatiki matafura ekufambisa, subnets uye net magedhi ekubvumidza iwe kusvika pane yako chiitiko kubva paruzhinji internet.
VPC Configuration
- Kuti utange, rodha iyo koni yeAWS yako muenzaniso. Enda kune VPC sevhisi muAWS uye gadzirisa iyo VPC, subnet, nzira tafura uye internet gedhi. Izvi zvinogona kuitwa mumasekonzi neAWS's nyowani yakavanzika yegore yekugadzira chishandiso.
- Tora VPC muAWS console yekutsvaga bar uye famba uchienda kuVPC yako. Sarudza Gadzira VPC uye sarudza VPC uye nezvimwe. Gonesa nametag auto-generation uye isa zita raunofarira.
- For ari IPv4 CIDR block, ita kuti 172.20.0.0/20. Siya IPv6 CIDR block kugoverwa kwakadzimwa. Siya Tenancy on default. Change kuwanikwa nzvimbo kusvika 1. Siya Nhamba yeruzhinji subnets pa1 kuti tikwanise kuwana application yedu painternet. Siyai Nhamba yema subnets akavanzika se 1. Seta NAT gedhi rekuenda Muna 1 AZ po kuti tinokwanisa kuwana internet. Isu hatisi kushandisa S3 saka tinogona kudzima VPC endpoints.
- Iva nechokwadi chokuti DNS mazita evatambi zvinogoneswa uye izvo DNS resolution inogoneswa. Izvi zvakakosha kuti uwane zviitiko zvako nezita remugamuchiri uye kuchengetedza traffic kwavari neSSL encryption.
- sarudza Gadzira VPC, mirira nzira yekugadzira VPC kuti ipedze matanho ese wobva wadzvanya Ona VPC.
- Enda ku Subnets uye sarudza subnet yawakagadzira.
- sarudza Actions uye Rongedza subnet marongero. Gonesa otomatiki kugovera kero yeruzhinji IPv4 kuti uve nechokwadi chekuti kero yeruzhinji yeIPv4 yapihwa kumuenzaniso panguva yebhutsu kana nemaoko kupa IPv4 kero kuzviitiko zvako gare gare.
- Wobva wadzvanya save uye wapedza nekuseta network.
- Sarudza iyo VPC uye yeruzhinji subnet yawakagadzira paunotanga chiitiko chako. Uye iwe unozokwanisa kugadzira zvitupa zviri nyore uye kuwana zviitiko zvako paruzhinji internet.
mhedziso
Mukupedzisa, kuve nechokwadi chekuwanikwa kweruzhinji kwakakosha kumasangano anomhanyisa zviwanikwa zvakatarisana neruzhinji munzvimbo dzawo dzeAWS. Nekusimudzira masimba ane simba eVPC networking, vashandisi veAWS vanogona kumisikidza network yavo kuti vape yakachengeteka uye yakavimbika kuwana kune yavo veruzhinji zviitiko vachiri kushandisa. zvakanakisisa zviito kune network uye semuenzaniso chengetedzo.
