VPN na Android yana aiki da IPv6, amma mai bincike har yanzu yana zaɓar IPv4

VPN yana aiki, shafin yanar gizo na sirri yana amsawa ta IPv6 daga kwamfutar hannu, kuma wayar Android har yanzu tana buɗe wannan shafin ta IPv4 ko ta ƙi loda shi gaba ɗaya. Rikodin AAAA yana nan. Ramin yana ba da adireshin IPv6. Babu abin da ya yi kama da kuskure a cikin abokin ciniki. Hukunce-hukunce huɗu daban-daban ne ke ƙayyade sakamakon: wane mai warwarewa ya amsa, me VpnService ya sanar wa Android, wace iyali ta adireshi mai bincike ya yarda ya gwada, da ko fakiti zai iya yin tafiyar zuwa da dawowa. Yi aiki da su cikin wannan tsari maimakon ƙara tsohuwar hanya da fatan alamar ta motsa.

Mataki 1: tabbatar da wane mai warwarewa ya amsa tambayar AAAA

Android ba shi da hanya ɗaya ta DNS. VPN na iya tura uwar garken DNS don cibiyar sadarwarsa, tsarin na iya amfani da Private DNS don sunayen masarrafa da ya ga sun cancanta, kuma Chrome na iya tafiyar da nasa mai warwarewa mai ɓoye daga chrome://settings/security. A wayar da ramin ke tura 10.61.0.1 amma Private DNS ya nuna ga mai bayarwa na jama'a, sunan da ke cikin yankin sirrinka ba injin da ya mallaki yankin ne ke warware shi ba. Mai bincike yana samun amsa daga mai warwarewa da ba shi da iko a kan wannan sunan kuma yana ɗauke shi a matsayin babu shi, kuma rubutun kuskuren bai taɓa ambaton DNS ba.

Tambayi mai warwarewar ramin kai tsaye kafin ka canza wani abu. Umarni biyu na farko suna nuna waɗanne uwar garken DNS Android ya haɗa da cibiyar sadarwar da ke aiki da kuma ko Private DNS yana cikin yanayin atomatik ko tsayayye; na uku ana gudanar da shi daga kowane abokin ciniki a cikin ramin, ba daga wayar ba.

adb shell dumpsys connectivity | grep -A3 "DnsAddresses"
adb shell settings get global private_dns_mode
nslookup -type=AAAA nas.lan 10.61.0.1

Mataki 2: karanta abin da VpnService ya sanar da gaske

A gefen Android sananne ne ba hasashe ba. VpnService.Builder yana ƙara adireshi da addAddress, hanyoyi da addRoute, uwar garken DNS da addDnsServer, kuma yana iya taƙaita dukan ramin zuwa iyali ɗaya ta adireshi da allowFamily. Mai gini da ya kira allowFamily(AF_INET) sannan ya ƙara hanyar IPv6 ya gaya wa tsarin abubuwa biyu masu saɓani, kuma ƙuntatawar iyali ita ce tsarin ke riƙewa. Hanya da ta ƙunshi fd00:61::/64 tare da adireshin haɗin sadarwa a wani prefix daban tana gazawa saboda irin wannan dalili: adireshin yana nan, amma ba ya kan hanyar (on-link) don wannan hanya.

Karanta sanarwar maimakon amincewa da maɓallin da ke cikin manhajar. dumpsys netd yana buga adireshi da hanyoyin da ke haɗe da haɗin tun, kuma LinkProperties na kowace cibiyar sadarwa a cikin dumpsys connectivity yana nuna jerin DNS kusa da iyalan da cibiyar sadarwar ke da'awa.

adb shell ip -6 addr show tun0
adb shell ip -6 route show table all | grep tun0
adb shell dumpsys connectivity | grep -E "LinkAddresses|Routes"

Idan haɗin tun yana da adireshin IPv6 amma babu wata hanya da ta dace da prefix na sabis, isar da IPv6 ya riga ya lalace kafin mai bincike ya shigo. Wannan kuskure ne daban da na mai bincike da ya ƙi gwadawa, kuma yana buƙatar gyara daban.

Mataki 3: mai bincike ne ke yanke shawarar ko zai gwada IPv6 kwata-kwata

Chromium ba ya amfani da kowane rikodin AAAA da ya karɓa. Mai warwarewar masarrafansa yana ɗauke da duba isarwa na IPv6 da tacewar 'yan takara waɗanda za su iya watsi da IPv6 ko rage matsayinsa idan aka ga cibiyar sadarwar ba za ta iya ɗaukarsa ba, kuma tushen mai warwarewa yana nuna wannan binciken tare da sharuɗɗan da ke kewaye da shi. Dabarar ta dogara da siga da tutoci, kuma shi ne ainihin dalilin da ya sa wayoyi biyu a kan rami ɗaya za su iya yin daban. Da zarar 'yan takara sun kasance, Happy Eyeballs yana tseratar da iyalan a kowace haɗi, don haka hanyar IPv6 da ke amsawa a hankali tana iya yin rashin nasara a hannun IPv4 da ke amsawa da sauri.

Kalli shawarar maimakon hasashe ta. Zaman da aka yi rikodin ta chrome://net-export kuma aka sake kunna a mai duba netlog yana nuna kowace warwarewa da iyalin da aka zaɓa; chrome://net-internals/#dns yana nuna sakamakon da aka ajiye. Warwarewa da ke mayar da rikodin A kawai don sunan da ke da AAAA a mai warwarewarka yana nuni kai tsaye ga wannan mataki.

Mataki 4: tabbatar da cewa fakiti zai iya yin tafiyar zuwa da dawowa

Zaɓin adireshi ba isarwa ba ne. Android yana riƙe da allunan hanya da ka'idojin manufa na kowace cibiyar sadarwa waɗanda ke zaɓar allon ta fwmark, don haka hanyar da ake gani a babban allon ba ita ce hanyar da soket ke amfani da ita kai tsaye ba. Karanta ka'idoji da roƙon kernel ya warware manufa don adireshin tushe sun raba waɗannan biyun.

adb shell ip -6 rule show
adb shell ip -6 route get fd00:61::20 from fd00:61::10

Fitowar route get ita ce ke amsa tambayar. Idan ta ambaci tun0 kuma fakiti har yanzu suna mutuwa, matsa zuwa MTU na ramin da isar da IPv6 na ƙofa maimakon komawa ga wayar.

Me ya sa ƙara ::/0 yawanci ke ƙara muni

Ƙara ::/0 yana canza da'awar ramin daga prefix ɗaya zuwa kowace manufa ta IPv6. A wayar hakan na iya gamsar da binciken isarwa, domin adireshin gwaji da ke wajen prefix ɗinka yanzu yana kama da abin da za a iya bi. Ba ya ƙirƙirar ƙarfin IPv6 na sama a ƙofa, kuma yawancin ƙofofin gida ba su da hanyar haɗi ta IPv6 da ke aiki kwata-kwata. Sakamakon rami ne mai duhu ga IPv6 na jama'a: sunayen da a da suka koma IPv4 yanzu suna rataye, kuma shafin sirri na iya kama da kyau kawai saboda binciken yana auna wani abu daban.

Akwai farashin manufa kuma. Da ::/0 a cikin ramin, duk zirga-zirgar IPv6 tana fita ta VPN, har da zirga-zirgar da mai cibiyar sadarwar bai taɓa yarda ya ɗauka ba. Ɗauki hakan a matsayin shawarar turawa da ke da mai suna, ba matakin gyara kuskure da kuke yi da ƙarfe 1 na dare ba.

Tsarin aiki da ke kawo ƙarshen wannan

Tabbatar amsar AAAA ta fito daga mai warwarewar da ke riƙe yankin, karanta yanayin VpnService da netd don haɗin tun, ɗauki alamar net-export don ganin ko Chromium ya watsar da ɗan takarar, sannan gwada tafiyar zuwa da dawowa da ip -6 route get. Gyara layin da ya gaza da gaske ka bar manufar rabuwa. Idan sunayen sirri suna buƙatar amsoshi daban fiye da na jama'a, split tunneling shi ne don hakan.

Rubuta gininsa na wayar, sigar mai bincike, da mai warwarewar da ka tambaya. Waɗannan gaskiyoyi uku suna mai da "IPv6 is broken" wani abu da mutum na gaba zai iya sake haifar da shi.