AWS Lambda ma gaaro proxy gaar ah: hubi dariiqa VPC
Isticmaal ciwaanka iyo dekedda dhageystaha proxy ee isku xirka VPC ee ugu horreeya, iyadoo jihada saxda ah ee kooxda amniga iyo aragtida DNS.
Marka Requests loo habeeyo proxy hore, Lambda waxay marka hore ku xirtaa dhageystahaas. Bogga HTTPS ee 443 ma beddelo proxy dhageysanaya 3128 oo noqda dekedda 443 ee tallaabada koowaad.
Lambda code → configured VPC path → proxy listener → destinationProxy gaar ah oo EC2 ku martigelisa, ku xir shaqada subnet-yada VPC iyo kooxaha amniga ee loogu talagalay. Lambda waxay maamushaa is dhexgalka shabakada ee isku xirkaas. Subnet-yo kala duwan way shaqeyn karaan marka dariiqayntooda iyo xakamaynta gelitaanka ay oggolaadaan isku xirka.
| Xakameyn | Shuruudda tallaabada koowaad ee habaynta si toos ah loo dariiqay VPC isku mid ah |
|---|---|
| Kooxda amniga shaqada | TCP baxa oo u socda dhageystaha proxy |
| Kooxda amniga proxy | TCP soo gala dekeddaas oo ka yimid isha ama kooxda amniga shaqada ee loogu talagalay |
| Habka proxy | Dhageyste ku yaal is dhexgalka la gaari karo oo gelitaanka macaamiisha la oggolaaday |
Sharci soo gal oo kaliya ku yaal kooxda shaqada ma oggolaan karo isku xirka macmiilka ee baxa. Ku dar jadwalka dariiqyada iyo ACL-yada shabakada ee subnet-ka hubinta dariiqa.
Magaca proxy gaar ah ee Route 53, hubi xiriirka aagga martigelinta ee VPC iyo habaynta DNS, oo ay ku jiraan enableDnsHostnames iyo enableDnsSupport. Raadinta guulaysatay ee laptop-ka ma caddeyso aragtida DNS ee Lambda. Qor haddii magaca guul-darraystay uu yahay proxy ama websayt; beddelidda websaytka IP tiro ma aha hagaajinta magaca proxy.
Marka tallaabadan shaqeyso, proxy waxay u baahan tahay dariiqaheeda hore. Ku xirka Lambda subnet dadweyne ma bixiyo IP dadweyne mana bixiso si otomaatig ah gelitaan toos ah internetka; go'aanso bixitaanka si gooni ah labada isku xir.