Tashar tushen abokin ciniki da tashar sauraron uwar garke a cikin hanyar VPN
Kwatanta lambobin tashoshi biyu a cikin rami ɗaya: tashar sauraron uwar garke mai tsayawa da tushen ɗan lokaci na abokin ciniki, da yadda fassarar na'urar hanya ke tsakiyarsu.
Lambobi biyu suna bayyana a cikin tattaunawa ɗaya, kuma babu ɗaya da ya yi kuskure. Log ɗin uwar garke yana nuna mai sauraron da ke ba da sabis, kwamfutar tafi-da-gidanka tana nuna soket ɗin da ya aika datagram, kuma na'urar hanya a tsakiya na iya sake rubuta na biyu yayin fita. Kwatanta ƙarshen tattaunawar ya fi amfani fiye da kwatanta lambobin. Kwatancin da ke ƙasa ya ware mai sauraro, soket ɗin abokin ciniki da tushen da aka fassara, domin suna amsa tambayoyi daban-daban.
Lambobi biyu da ke bayyana ƙarshen biyu masu gaba da juna
Tashar da aka saita ta uwar garke ita ce makomar da abokin ciniki ke kira. Manufa ce ta tsari, tana bayyana a cikin bayanin martaba, kuma dole ne ta kasance buɗe a gefen uwar garke. Tashar tushen abokin ciniki ana zaɓe ta a gida, yawanci daga kewayon ɗan lokaci, kuma tana wanzu domin amsar ta sami wurin sauka. Tana iya canzawa a kowane sake haɗawa, kuma babu abin da ke cikin ƙirar da ya dogara da kasancewarta mai tsayawa.
Na'urar hanya a tsakiya na iya sake rubuta wannan tushe cikin taswirar 'NAT' nata. Shi ya sa lambar da ake gani a uwar garke sau da yawa ba ta da alaƙa da wadda kwamfutar tafi-da-gidanka ta zaɓa.
Inda lambar tushe ke canzawa yayin fita
Ɗauki misalin IPv4 na ƙirƙira: abokin ciniki a bayan na'urar hanya mai fassara, uwar garke mai mai sauraro 'UDP' ɗaya, da datagram ɗaya da ke ratsa duka biyu. Teburin yana ambaton kowane ƙarshen da abin da ke faruwa da shi, maimakon sake kunna fakit ɗin a wuraren lura uku.
| Endpoint | What stays fixed | What changes on reconnect | Who owns it |
|---|---|---|---|
| Server listener | The service port and the address the profile names | Nothing; the listener does not follow the client | The server operator |
| Client socket | The destination it dials | The local source port, chosen per socket | The client, or its operating system |
| Translated source | Usually the public address of the router | The port, and sometimes the address after a network switch | The NAT device or the upstream carrier |
Makomar ba ta canzawa a kowane layi, kuma kawai asalin tushen ne ke canzawa. Bukatun UDP NAT suna bambanta adireshi da tashar ciki daga taswirar waje, wanda shi ne ainihin bambanci tsakanin layi na biyu da na uku. Na'urar hanya na iya kiyaye tashar tushen abokin ciniki ko ta zaɓi wata; kiyayewa ba wani abu ba ne da manhaja ya kamata ta ɗauka.
Karanta ƙarshen uku daga rundunonin kansu
Jerin da ke ƙasa sun fito daga injuna uku daban-daban kuma tare suna nuna dukan tattaunawar. Gudanar da na farko a uwar garke, na biyu a abokin ciniki, na uku kuma a duk inda taswirar take. Layin log ɗaya ba ya taɓa nuna duka uku.
ss -lunp 'sport = :1194'
ss -unp | grep 1194
conntrack -L -p udp | grep 1194Jerin farko yana tabbatar da cewa uwar garke tana daure da tashar sabis kuma yana nuna wace tsari ce ke mallake ta. Na biyu yana nuna soket ɗin gida na abokin ciniki da makomar da ya kira. Na uku yana nuna taswirar da na'urar hanya ta ƙirƙira, kuma shi ne kawai wurin da tushen da aka fassara ke bayyana. Karanta su a wannan tsari kuma lambobin biyu sun daina kamanceceniya da juna.
Abin da sake haɗawa ke canzawa, da abin da ba ya canzawa
Wasu na'urorin hanya suna kiyaye tashar tushen abokin ciniki idan tana da sarari, wasu kuma suna ba da wata dabam kowane lokaci. Dukan halayen biyu na al'ada ne, kuma manhajar da ke buƙatar na farko za ta lalace a na biyu. Canjin taswira bayan sake haɗawa ko canjin cibiyar sadarwa ba laifin uwar garke ba ne: abokin ciniki yana buɗe sabuwar soket, na'urar hanya tana ba da abin da take da shi, uwar garke kuma tana ganin sabon tushe a kan mai sauraro ɗaya. Laifin zai kasance idan mutum ya yi tsammanin uwar garke za ta karɓi zirga-zirgar da aka aika zuwa tashar abokin ciniki da ba a zaɓa ba.
Abokan cinikin OpenVPN na al'umma suna samun wannan hali ta hanyar nobind, wanda ke barin tsarin aiki ya zaɓi tashar gida; tashar nesa har yanzu tana fitowa daga bayanin martaba. Daure a fili zaɓi ne na sane, ba buƙatar ka'ida ba. Uwar garke na ci gaba da bayar da ƙarshe ɗaya yayin da abokan ciniki ke zaɓar nasu asalin gida.
Yi wa yadudduka lakabi dabam a cikin rikodin
A cikin ramin akwai tattaunawa ta biyu da tashoshi nata. Buƙatar HTTPS da ramin ke ɗauka tana da makoma TCP 443, yayin da haɗin waje da aka ɓoye ke amfani da UDP 1194, don haka canza tashar tushen waje ba ya canza kome a cikin sabis na ciki.
Ko a matakin waje, ka'ida tana da muhimmanci. UDP 1194 da TCP 1194 ƙarshen biyu ne daban, kuma mai sauraron 'TCP' ba zai taɓa karɓar datagram na UDP ba saboda lambar ta yi daidai. Lokacin da kake rubuta turawa, yi wa mai sauraron uwar garke, soket ɗin abokin ciniki da tushen da aka fassara lakabi a matsayin abubuwa uku daban, kuma ƙara hanyar isar da kowanne.
Sannan bari tsari ya bi matsayin. Uwar garke tana buɗe hanyar da aka nufa a kan mai sauraron ta kuma har yanzu tana tabbatar da takwararta; katangar wuta ta abokin ciniki tana karɓar amsoshi ga musayar fita nata ba tare da bayyana sabis mai shigowa ba. Tacewar da ba ta da yanayi tana buƙatar a rubuta hanyar dawowa a fili, kuma wannan shi ne dalilin aiki da ya sa bambancin ya fi muhimmanci fiye da zane-zane masu tsari.