Ukusingathwa kwesayithi okulula nge-Amazon S3 ne-HTTPS

by Georgia Nola # Ukusingathwa kwesiza okulula nge-Amazon S3 ne-HTTPS Sawubona bakwethu! Kulesi sifundo ngizokukhombisa ukuthi ungayisingatha kanjani iwebhusayithi emile ene-HTTPS ku-AWS ngesizinda ngokwezifiso. Konke lokhu kungenzeka kusetshenziswa isigaba samahhala se-AWS Nokho, izinsiza esizozisebenzisa zinezindleko ezincane. Ngokuvamile lokhu akumele kudlule u-$1/ngenyanga Sizosebenzisa inhlanganisela yamasevisi alandelayo e-AWS: ÃÂ¢ÃÂÃÂS3 Umzila53 ÃÂ¢ÃÂÃ Umphathi wesitifiketi I-CloudFront *Asingene kukho!* Setha amabhakede akho e-S3 Okokuqala, uzodinga **amabhakede amabili e-S3 womabili kufanele afane negama lakho lesizinda ngokwezifiso nelesibili elihlanganisa isizinda esingaphansi kuka-www Ibhakede 1: Ibhakede 2: Ibhakede lokuqala (mywebsite.com) liyibhakede eliyinhloko lesayithi lakho. Lokhu kuqukethe wonke amafayela akho kanye nempahla yewebhusayithi yakho emile Okulandelayo sisetha leli bhakede lokusingathwa kwesayithi okumile. Ungathola lokhu ngaphansi kwethebhu Yezici zebhakede, futhi sizogcina okumisiwe okunikezwe lapha nenkomba yesayithi emiswe ku-index.html Kudingeka futhi senze leli bhakede lifinyeleleke njengoba isiphequluli sewebhu sizodinga ukufinyelela amafayela ebhakede ukuze sinikeze iwebhusayithi. Singakwenza lokhu ngokusetha Inqubomgomo Yebhakede ngaphansi kwethebhu Yezimvume { "Version": "2012-10-17", "Statement": [ { "Sid": "PublicReadGetObject", "Effect": "Allow", "Principal":"Action": "s3:GetObject", "Insiza": "MY_BUCKET_ARN"} ]} Lena inqubomgomo elula ezovumela kuphela ukufinyelela kokufunda komphakathi kwezinto ezisebhakedeni. Manje, uma uya endaweni yokugcina echazwe ku-static hosting config yebhakede, kufanele ubone iwebhusayithi yakho. Inqubekelaphambili! Kodwa singenza kangcono kunalokho Ibhakede lesibili (www.mywebsite.com) sizolishiya lingenalutho kodwa silungiselele ukuqondisa kabusha ebhakedeni lethu lokuqala sisebenzisa i-HTTP njengephrothokholi (sizolenza libe yi-HTTPS kamuva) Amabhakede akho manje alungele ukuhamba! Lungiselela Izizinda nge-Route53 Ngakho-ke iwebhusayithi yakho iyasebenza kodwa ifinyeleleka kuphela ngesiphetho sebhakede hhayi isizinda sakho sangokwezifiso. Asikuguqule lokho Hamba uye ku **I-Route53 Uma ubhalise isizinda sakho ne-Amazon Registrar kufanele ubone ukuthi indawo esingathwayo imiselwe wena ngamasethi amabili okurekhoda. Eyodwa eye-Name Server (NS) neyodwa eye-SOA Okufanele sikwenze ukudala amanye amarekhodi amabili ukuze akhombe izindawo zokugcina zebhakede le-S3 Ngerekhodi ngalinye lesethi: Uhlobo: A ÃÂ¢ÃÂÃÂ Ikheli le-IPv4 ÃÂ¢ÃÂÃÂ Isibizo: Yebo Ithagethi ye-Alias: indawo yokugcina yewebhusayithi ye-S3 efana nalokho okubekele igama Manje sesingabhekisa amabombo ku-urlÃÂ¢ÃÂÃÂ¦and voilÃÂÃÂ ! Cishe sesifikile, kodwa kukhona okokugcina esikushoyo. ÃÂÃÂ¦ **Qaphela Uma isizinda sakho sibhaliswe nesinye isibhalisi sesizinda (hhayi i-Amazon) kuzodingeka ulandele izinyathelo ezihlukile ukuze usethe lokhu. Ngokuvamile uzodinga ukungeza irekhodi le-CNAME elinenani lephoyinti lokugcina lamabhakede e-S3. **Ukuxazulula inkinga Uma ususa indawo esingethwe yi-Amazon eyakhiwe ngenkathi ubhalisa okokuqala isizinda (IÃÂ¢ÃÂÃÂukwenzile lokhu ngoba izindawo ezisingathiwe zinezindleko ezithile), u uzodinga ukudala indawo entsha esingathiwe ukusuka ekuqaleni - Khetha okuthi ÃÂ¢ÃÂÃÂYakha Indawo Ephethwe ÃÂ¢ÃÂÃÂ bese usetha igama lesizinda, isibonelo ÃÂ¢ÃÂÃÂmywebsite. comÃÂ¢ÃÂÃÂ - Lokhu kuzokhiqiza amasethi amarekhodi amasha ezinhlobo ze-NS ne-SOA - Ngena esizindeni sakho esibhalisiwe futhi ubuyekeze amanani Amaseva Egama kulawo akhiqizwa kusethi entsha yerekhodi ye-NS Ukucela Isitifiketi Kuyamangaza, isayithi manje isingathwe kusetshenziswa i-url yangokwezifiso! Kodwa-ke singayifinyelela kuphela ngephrothokholi ye-HTTP Kufanele sihlale siqinisekisa ukuthi amasayithi ethu avikelekile kusetshenziswa iphrothokholi ye-HTTPS. Lokhu kuvikela isayithi lethu nabasebenzisi ekuhlaselweni ngomjovo okunonya futhi kuqinisekisa ubuqiniso Hamba uye ku **Umphathi Wesitifiketi** ku-AWS Console futhi ucele isitifiketi esisha somphakathi (lokhu kumahhala). Uzoyalelwa ukuthi ufake amagama wesizinda ofisa ukuwavikela. Ngaphambi kokuthi isitifiketi sikhishwe, i-Amazon idinga ukuthi ikwazi ukuqinisekisa ukuthi ungumnikazi wezizinda ezishiwo Ungakhetha ezindleleni ezimbili zokuqinisekisa: I-imeyili noma i-DNS I-imeyili ivamise ukuba lula, kodwa uzodinga ukuqinisekisa ukuthi uyakwazi ukufinyelela i-imeyili esetshenziselwa ukubhalisa isizinda. Kungenjalo, uma usebenzise i-Amazon Registrar kanye ne-Route53, ungakhetha indlela ye-DNS. Lokhu kudinga ukuthi ungeze amasethi athile amarekhodi endaweni esingethwe, kodwa lokhu kuzenzela wena kakhulu ngakho-ke kulula kakhulu. Kungathatha imizuzu embalwa ukuthi isitifiketi sikhishwe ngemva kokuqinisekiswa Lapho konke sekwenziwe singaqhubeka siye esinyathelweni sokugcina! Ilungiselela i-CloudFront Ngesinyathelo sokugcina sizosisebenzisa **I-CloudFront **esivumela ukuthi sisebenzise isitifiketi esisha se-SSL ukuze sinikeze iwebhusayithi nge-HTTPS. I-CloudFront iphinde isheshise ukusatshalaliswa kokuqukethwe kwewebhu ngokukugcina ezindaweni eziningi ezinqenqemeni futhi ikulethe kusuka endaweni eseduze yonqenqema kuya kumsebenzisi. Sidinga **ukusabalalisa okusha kwewebhu okukodwa kwebhakede ngalinye le-S3. Hamba ku-CloudFront kukhonsoli ye-AWS bese udala ukusatshalaliswa kwewebhu kokuqala Kunezilungiselelo eziningi ezitholakalayo zokudala ukusatshalaliswa kwewebhu, kodwa ezintweni eziyisisekelo sidinga kuphela ukushintsha okuhlanu: Igama Lesizinda Sesizinda: Setha lokhu endaweni yokugcina yewebhusayithi ye-S3 kwelinye lamabhakede. Okubalulekile: Le nkambu izokunikeza izinketho zokuqedela ngokuzenzakalela ngamagama akho ebhakede le-S3. Nokho, ukusebenzisa lezi kungabangela izinkinga ngokuqondisa kabusha endaweni yokugcina yebhakede. Ngakho esikhundleni salokho sebenzisa isiphetho sebhakede ngokuqondile. I-Id Yomsuka: Lokhu kuzalelwe wena uma ufaka Igama Lesizinda Sesizinda. Inqubomgomo Yephrothokholi Yezibukeli: Isethwe kokuthi ÃÂ¢ÃÂÃÂIqondise kabusha i-HTTP ku-HTTPSÃÂ¢ÃÂÃÂ. Amanye Amagama Esizinda: Lokhu kufanele kufane negama lebhakede le-S3 okhomba kulo. Isibonelo ÃÂ¢ÃÂÃÂmywebsite.comÃÂ¢ÃÂÃÂ. Isitifiketi se-SSL: Khetha isitifiketi sakho se-SSL sangokwezifiso bese ukhetha isitifiketi sakho esisha kokwehliswayo. Yenza lokhu futhi ngebhakede lesibili le-S3 Ukusabalalisa kungathatha isikhathi ukuphotha, ngakho-ke ngenkathi sisalindile, masenze izinyathelo zokuqeda. Emuva phakathi **I-S3 iya ebhakedeni lakho lesibili (www.mywebsite.com), kuthebhu ethi Properties nangaphansi kokuthi Ukusingathwa Kwewebhusayithi Emile misa isimiso sokuqondisa kabusha ku-HTTPS Ekugcineni, buyela emuva **I-Route53 Sidinga ukubuyekeza amarekhodi angokwezifiso A esiwadalile ukuze manje siqondise ukusatshalaliswa kwe-CloudFront kunamabhakede e-S3. Kurekhodi ngalinye, shintsha i-Alias Target bese ukhetha ukusatshalaliswa kwe-CloudFront okutholakala kokwehliswayo Qaphela: Futhi, uma usebenzisa enye isevisi ye-DNS uzodinga ukuthi uyobuyekeza irekhodi le-CNAME ukusuka lapho ukuze ukhombe igama lesizinda se-CloudFront. Futhi lapho usunakho! Iwebhusayithi yakho enhle isiyatholakala esizindeni ngokwezifiso futhi isetshenziswa nge-HTTPS! Siyabonga ngokufunda! Ngethemba ukuthi lo mhlahlandlela ubuwusizo futhi ujabulise, ngingathanda ukwazi uma uwuthole uwusizo.