Yadda ake duba matsayin VPN ba tare da ping a Android, iOS da Windows

Yin ping zuwa 192.0.2.10 yana gaya maka cewa wata adireshi ta amsa echo na ICMP, kuma shi kadai. A cibiyar da ba ta da tunel zai iya yin nasara, domin adireshin na iya kasancewa a cikin karamin hanyar gida; tare da lafiyayyen tunel zai iya kasawa, domin uwar garken tana watsi da ICMP yayin da take ba da HTTPS. Binciken da script dinka ke bukata shi ne tambayar matsayi na dandali tare da gwajin hanya zuwa inda manhajar take amfani da shi. Ka dauke su a matsayin filaye biyu daban, ba a matsayin boolean daya ba.

Abin da amsar echo ke tabbatarwa da gaske

ICMP yarjejeniya ce ta isa wadda ba ta san komai game da mukamai ko tunel. Sa'ad da amsa ta zo, kernel din yana bayar da rahoton cewa wata masauki ta amsa; ba ya bayar da rahoton hanyar da ta kai bukatar ko wadda ta kawo amsar. Tacewa tana kara ruda alamar, domin wutar bango da ke hana bukatun echo ba ta fadin komai game da tashoshin da ke bayanta. Kuma bayanin tunel mai rarrabuwa na iya ware adireshin da aka gwada da gangan yayin da sauran wurare duka suna aiki.

Abin da kake so ka sani shi ne ko wata sabis din ta musamman tana amfani a kan hanyar da manhajar ke bi. Ka zabi masaukin da tashar da manhajar ke kira, sannan ka nemi amsa a matakin manhaja.

Isowa da matsayin tunel abubuwa ne daban, kuma daya na iya zama gaskiya yayin da dayan karya. Raba su yana gaya maka wane ne ke da laifin gazawar. Hada su cikin bincike daya yana haifar da tikitin da babu wanda zai iya turawa.

Tambayi Android hanyar jigila, ba ping ba

Android na amsa tambayar matsayi kai tsaye ta ConnectivityManager. Karfin cibiyar da ke aiki yana dauke da alamar jigilar VPN, wanda ake saita sa'ad da ake tura zirga-zirga ta mukamin VPN. Kiran gida ne, mara tsada, kuma bai dogara da ko wata masauki mai nisa ta amsa ba.

Wannan sigar Java tana mayar da false maimakon jefa kebewa sa'ad da babu cibiyar da ke aiki. Domin tana karanta cibiyar da ke aiki, tana nuna bayanin da mai amfani ya zaba a Saituna.

ConnectivityManager cm = (ConnectivityManager) getSystemService(CONNECTIVITY_SERVICE);
NetworkCapabilities caps = cm.getNetworkCapabilities(cm.getActiveNetwork());
boolean tunnel = caps != null && caps.hasTransport(NetworkCapabilities.TRANSPORT_VPN);

Don sanarwar canji, yi rijistar NetworkCallback maimakon yin tambayoyi a kan lokaci. Kada ka rikita wannan da VpnService.prepare, wadda kawai ke bayar da rahoton ko mai amfani ya ba da izini ga VPN, ba ko fakiti suna gudana ba. Sokewa tana zuwa ta VpnService.onRevoke, amma mantawa da bayani a Saituna ba ya haifar da watsa labari kwata-kwata.

iOS: sunayen mukamai hasashe ne, ba alkawari ba

Yawancin guntun code na iOS suna duba saitunan wakili, suna samun kamus din __SCOPED__, kuma suna neman makullan mukamai kamar tap, tun, utun2, ppp, ko ipsec. Wannan hanyar al'ada ce ta suna, ba tabbaci da aka rubuta ba, don haka sabuntawar tsarin da ke canza sunan mukami na iya karya ta. Hakanan tana yawan bayar da rahoton true ga tsofaffin shigarwar da suka wuce tunel din.

Sa'ad da manhajarka ce ke da saitin, NEVPNManager yana ba ka ainihin matsayi maimakon haka. Yana bayanin tunel din da manhajarka ta fara; da VPN na kowace manhaja, wasu manhajoji na iya kasancewa gaba daya a wajen wannan tunel.

Sake loda abubuwan da aka fi so kafin karanta matsayi, domin kimar tana canzawa yayin da tunel din ke tashi da faduwa:

let manager = NEVPNManager.shared()
manager.loadFromPreferences { error in
    let up = manager.connection.status == .connected
    print(up)
}

Alamar matsayi ta dandali har yanzu ba ta tabbatar da cewa zirga-zirga ta isa abokin bugun ba. Wannan gibin shi ne gwajin hanya ke rufewa, kuma shi ne dalilin da ya sa boolean daya bai isa ba ga tallafi.

Bayanan Windows suna nuna ainihin filin matsayi

Windows tana bin bayanan VPN daban da adaftoci, kuma Get-VpnConnection yana nuna ConnectionStatus ga kowane bayani da ya sani. Bayanan da aka kirkira ta abokin ciniki na Windows ko fakitin tanadi suna bayyana a nan. Cmdlet din ba shine gano tunel na gaba daya ba.

Karanta filin don bayani mai suna, kara -AllUserConnection sa'ad da bayanin na dukan masu amfani ne:

Get-VpnConnection -Name "Fabrikam" | Select-Object Name, ConnectionStatus, ServerAddress

Abokan ciniki na wasu kamfanoni sukan kasance ba a ganuwa ga wannan cmdlet koda tunel dinsu yana aiki, don haka sakamako mara komai yana nufin ba a sani ba, ba an cire hadi ba. Jerin adaftoci ma suna yaudara: na'urar mai siyarwa na iya wanzuwa yayin da ba ta aiki, kuma wasu adaftocin suna wanzuwa ne kawai yayin zama. Ga bayanin da Windows ke da shi, rasdial yana bayar da lambar fita da za ka iya reshe a kanta. Duk wadannan suna bayanin imani na gida, ba isowar abokin bugun ba.

Matsayi da hanya: binciken sassa biyu

Bayanan da aka hada ba ya fadin komai game da inda fakiti suke zuwa. Rarraba tunel na iya rike tunel din yana aiki yayin da yake ware inda kake so. Bayanan always-on suna kasancewa a hade da uwar garke da ta mutu, kuma kill switch yana hana zirga-zirga da gangan sa'ad da tunel din ya fadi.

Gwada duka matakan biyu: tabbatar da cewa jigilar VPN ko bayani yana aiki, sannan tabbatar da cewa inda ake so yana warwarewa kuma yana amsawa a wannan hanyar. A Linux, tambayi kernel wane mukami zai yi amfani da shi:

ip route get 192.0.2.10
resolvectl query intranet.example.test

Sa'ad da abokin ciniki ya fita daga ikonka, yi rikodin duka sakamakon biyu kuma bar tsarin ya nuna matakin. Hade da gwajin hanya da ya kasa yana nuna rarraba tunel, DNS, ko manufa. An cire hadi da gwajin hanya mai aiki yana nufin wata hanya ce ke daukar zirga-zirga.

Gwajin da za ka iya gudanarwa cikin tsari

Yi rikodin matsayin dandali da farko, kafin ka canza wani yanayin cibiyar. Warware sunan masauki kuma lura da iyali adireshi, domin rikodin AAAA na iya bin wata hanya dabam da rikodin A. Bude tashar sabis din kuma nemi amsar manhaja maimakon musafaha kawai. Ka rike kowace lura a cikin nata filin rikodi.

A kan na'urar Linux mai dig da curl, umarni uku suna rufe warwarewa, hanya, da sabis din kansa. Gudanar da su yayin da tunel din ke aiki sannan kuma yayin da ya fadi:

dig +short intranet.example.test
ip route get 198.51.100.20
curl -sS -o /dev/null -w "%{http_code}" --max-time 8 https://intranet.example.test/health

Fili hudu daban sun fi boolean daya, domin matsayi, DNS, hanya, da manufa suna kasawa daban kuma suna zuwa ga kungiyoyi daban. Ping na tasha ya kasance kyakkyawan bincike na hannu. Mummunan ma'anar hadi ne ga sarrafa kai, inda API na dandali da gwajin hanya ke amsa ainihin tambayar.