Emulator na Android da VPN na mai masaukin: hoton DNS da bayanin NAT

Lokacin da emulator ya kasa isa uwar garken gini da burauzar mai masauki ke buɗewa ba tare da matsala ba, tambayar da ta dace ba ita ce ko VPN yana aiki ba. Ita ce wace hanya daga cikin biyu baƙon ya rasa. Na’urar kama-kama tana gudanar da nata tarin hanyoyin sadarwa a bayan NAT na emulator, kuma jerin mai warwarewarta kwafi ne da aka ɗauka lokacin tashi, don haka ramin da ya taso daga baya yana canza hanyar mai masauki ba tare da canza abin da baƙon ke tambaya ba. Fahimtar waɗannan matakai biyu yana bayanin kusan kowace irin wannan matsala.

Baƙon wani tarin daban ne a bayan NAT mai tsayawa

Sadarwar QEMU a yanayin mai amfani tana ajiye baƙon a 10.0.2.15, ƙofar a 10.0.2.2 da sabis ɗin DNS a 10.0.2.3 zuwa 10.0.2.6. Kwakwalwar mai masauki ba ta tura zirga-zirgar baƙon waje; ana mai da ita zuwa soket na gefen mai masauki, ɗaya ga kowace haɗin baƙon, kuma waɗannan soket suna fita daga wurin adireshi na mai masauki. Shi ya sa haɗin baƙon ke gado shawarar hanyar mai masauki a lokacin da aka ƙirƙire shi, kuma shi ya sa baƙon ba shi da wani rubutu a teburin hanya da ke ambaton raminka.

Wannan hanyar ce ke ba baƙon hanyar fita mai amfani. 10.0.2.2 suna ne na daban ga fuskar loopback ta mai masauki, don haka sabis da ke saurare a 127.0.0.1 a kwamfutar tafi-da-gidanka ana iya isa gare shi daga baƙon a wannan adireshin. Duk abin da abokin ciniki ke bayyanawa a loopback kawai ana iya isa gare shi haka, kuma wannan shi ne tushen tsarin wakili da aka bayyana a ƙasa.

Abin da baƙon ba zai iya yi shi ne kallon sadarwar mai masauki kamar wurin suna a kanta. Babu gada, babu teburin hanya da aka raba kuma babu mai warwarewa da aka gado, sai sabis ɗin NAT da ke karɓar faket ɗinsa da hoton da mai ƙaddamarwa ya ɗauka lokacin da na’urar kama-kama ta fara.

DNS hoto ne, ba ra’ayi mai rai ba

A lokacin tashi emulator yana karanta jerin masu warwarewa na mai masauki kuma yana ba baƙon har zuwa sabar huɗu, waɗanda aka bayyana a adireshin 10.0.2.3 zuwa 10.0.2.6. Idan ramin yana ƙasa a wannan lokacin, hoton yana ɗauke da duk wani mai warwarewa na jama’a da kwamfutar ta yi amfani da shi, kuma baƙon yana ci gaba da tambayarsa duk rayuwarsa. Sunaye na jama’a suna warwarewa, na ciki suna kasawa, kuma kowace alama tana nuni ga VPN yayin da ainihin tsohuwar ƙima ita ce jerin masu warwarewa da aka ɗauka mintuna kaɗan kafin ramin ya tashi.

Don haka gyaran ta hanyar tsari ba tatsuniya ba ce. Haɗa ramin da farko, sannan ka sake kunna emulator, kuma ka fi son tashin sanyi fiye da maido da hoto, domin hoton tashin sauri na iya dawowa da yanayin mai warwarewa da hanya da ya ajiye a baya. Idan kana son ganin abin da baƙon ke amfani da shi yanzu, tambayi na’urar ba mai masauki ba:

adb shell dumpsys connectivity | grep -i -A2 dns
adb shell ping -c 1 build.internal.example

Emulator kuma yana karɓar mai warwarewa bayyananne a lokacin ƙaddamarwa, wanda ke da amfani idan ka san daidai wace uwar garke baƙon zai yi amfani da ita kuma yana da haɗari idan wannan uwar garken ta jama’a ce:

emulator -avd Pixel_API_34 -dns-server 203.0.113.53

Mai warwarewa na jama’a ba shi da kwafin yanki na ciki, don haka danne ɗaya yana mai da matsalar tsari zuwa gazawa ta dindindin. Idan bayanin yana tura DNS na sirri, bari ramin ya samar da shi kuma ka yi tashin sanyi ga baƙon maimakon rubuta adireshi da hannu.

Hanya tana bin mai masauki a lokacin haɗi

Domin haɗin baƙon suna zama soket na mai masauki, ana yanke shawarar hanya lokacin da aka ƙirƙiri soket. Ramin da ya tashi kafin buƙata yana nufin buƙatar tana fita ta ramin bisa ga hanyoyin bayanin. Bayanin da ke ɗaukar prefix ɗin da aka zaɓa kawai zai bar subnet ɗinka na sirri a waje, don haka isar mai masauki zato ne game da baƙon, ba sakamako ba. Haɗin da suka wanzu na baƙon suna riƙe hanyar da aka ƙirƙire su da ita, shi ya sa abokin ciniki da ya sake haɗawa ba ya koyaushe gyara saukar da ta makale cikin emulator.

Tabbatarwa tana kan fuskar mai masauki, ba a kididdigar baƙon ba:

sudo tcpdump -ni tun0 'host 203.0.113.10'

Idan buƙatar baƙon ta bayyana a fuskar ramin, hanya tana aiki kuma matsalar tana sama da ita. Idan ta bayyana a fuskar jiki, bayanin bai rufe wannan prefix ɗin ba, kuma babu wani sake saiti a gefen baƙon da zai canza hakan.

Lokacin da abokin ciniki ke bayar da wakilin loopback kawai

Wasu abokan ciniki na kasuwanci ba sa ƙirƙirar ramin tsarin kwata-kwata. Suna bayyana mai saurare na HTTP ko SOCKS a 127.0.0.1 kuma suna tsammanin manhajoji su yi amfani da shi. Baƙon ba zai iya ganin wannan soket ɗin kai tsaye ba, amma ana iya gaya wa emulator ya yi amfani da shi, ko dai ta hanyar sarrafawa da aka faɗaɗa (Saiti, sannan Wakili, yanayin hannu, mai masauki 127.0.0.1 da tashar da abokin ciniki ya buga) ko a lokacin ƙaddamarwa:

emulator -avd Pixel_API_34 -http-proxy http://127.0.0.1:8080

Kwafi tashar daga tagar abokin ciniki; tashar da aka yi hasashe tana kasawa a shiru kuma tana kama da karyayyen rami. Ka tuna abin da wannan ke rufewa: saitin wakilin HTTP ana mutunta shi ta manhajoji masu sanin wakili, kuma soket ɗin danye suna watsi da shi gaba ɗaya. Idan aikin binary ne na asali da ke buɗe nasa haɗin, hanyar wakili ba ta daidaita da rami kuma dole ne a yi kwatancen a fili.

Ka tabbatar da sakamakon daga cikin baƙon

Ka raba warwarewa da hanya da gwaje-gwaje biyu a zama ɗaya. Sunan da ke kasawa yayin da adireshin lamba ke amsawa matsalar hoton DNS ce, kuma gyaran shi ne tsari ko mai warwarewa bayyananne. Idan duka biyu sun kasa, yana nuni ga hanya ko manufa, kuma bincike na gaba shi ne ko manhajar tana gudana cikin bayanin aiki mai nasa hani na sadarwa.

A ƙarshe, ka san wane baƙo kake gwadawa a kai. Tsofaffin hotunan emulator an aika su ba tare da tallafin tun da abokin cinikin VPN na gefen baƙon ke buƙata ba, don haka babu bayanin da zai taɓa yin aiki a can; hotunan yanzu suna da shi. Abokin ciniki da ke kasawa a hoton yanzu matsalar abokin ciniki ce ko bayani, kuma sake gina ramin mai masauki ba zai canza sakamakon ba.