Shin kashe ARP yana lalata VPN ɗinka? Zai iya, a hop na waje
Tunnel ɗin yana ɗaukar fakitin IP; haɗin da aka rufa wa asiri har yanzu yana buƙatar binciken gida na hop na gaba. Zaɓi tsakanin warwarewa mai motsi da shigarwar da ake kula da ita.
{Fakiti biyu suna tafiya a cikin haɗi ɗaya kuma suna bin ka'idoji daban-daban. Ɗaya shine fakitin sirri da tunnel ɗin ke ɗauka, wanda mahaɗin kama-da-wane ke sarrafa shi ba tare da kowane kan rubutun Ethernet ba. Ɗayan kuma shine fakitin da aka rufa wa asiri wanda ke barin na'urar ta hanyar hanyar shiga, kuma wannan har yanzu yana buƙatar hop na gaba na gida da aka warware zuwa adireshin kayan aiki. Haɗa waɗannan biyun shine yadda mutane ke kashe warware adireshi a mahaɗin da bai dace ba sannan su yi mamakin dalilin da yasa tunnel ɗin baya farawa.}
{Fakiti ɗaya cikin wani, samfuran isarwa biyu}
{Mahaɗin kama-da-wane a yanayin da aka tsara hanya yana karɓar fakitin IP. Ba shi da kan rubutun Ethernet, ba shi da yankin watsawa kuma ba shi da adireshin da za'a warware a cikinsa, don haka tunnel ɗin da kansa ke isar da fakitin ciki. Duk abin da ke faruwa a cibiyar sadarwar shiga wani rukuni ne na isarwa daban.}
inner packet: private address -> tunnel device -> the VPN process
outer packet: endpoint address -> access route -> next-hop hardware address{Wannan fakitin na waje firam ɗin unicast na yau da kullum ne idan ya bar mahaɗin Ethernet, kuma yana buƙatar adireshin kayan aiki na manufa na hop ɗinsa na gaba. Warware adireshi yana bayar da shi, kuma hop na gaba yawanci ƙofar gida ce ba uwar garken nesa ba. Fahimtar cewa binciken na ƙofar ne, ba na ƙarshen wuri ba, shine mafi yawan ganewar asali. Rubuta adireshin biyu kafin ka canza wani abu.}
{Nemo maƙwabcin da ya fi muhimmanci}
{Tambayi teburin hanya wace hop ta gaba ƙarshen wuri ke amfani da ita, sannan duba teburin maƙwabta na wannan hop. Ƙarshen wuri da kansa ba kasafai yake bayyana a wurin ba, domin baya kan hanyar gida.}
ip route get 198.51.100.20
ip neigh show 192.168.0.1{Idan shigarwar tana nan kuma ana iya isa gareta, hanyar waje tana lafiya kuma kuskuren yana wani wuri. Idan babu ta ko tana cikin yanayin gazawa, hanyar, adireshin ƙofar ko manufar da ke toshe warwarewa shine wurin da za'a duba. Canza saitunan sirri a tunnel ɗin ba zai iya taimakawa a kowane ɗayan biyun ba. Lura da igiyar yanayin da teburin maƙwabta ke bayarwa, domin tana bambanta ƙoƙari da ke gudana da gazawa ta dindindin.}
{Shigarwar da aka koya na iya ɓoye dogaro}
{Shigarwar da aka adana tana ci gaba da aiki na ɗan lokaci bayan abin da ya kirkiro ta ya tafi, don haka gwajin da aka yi minti kaɗan bayan canji zai iya wucewa saboda dalilin da bai dace ba. Jira har shigarwar ta tsufa, ko ka share ta da gangan, kafin ka yanke shawarar cewa warwarewa ba ta da muhimmanci.}
{Kuskuren akasin haka yana da yawa: ana ɗaukar shigarwar da ba'a warware ba a matsayin hujja cewa tunnel ɗin ya lalace. A aikace tana nuna ɓangaren gida, adireshin kwafi, ko ka'idar tsaron tashar da ke jefar da firam ɗin da ke ɗauke da amsa. Duba tashar switch kafin ka taɓa tsarin VPN.}
{Karanta lokaci a matsayin hujja. Shigarwar da ke warwarewa sannan ta ƙare akai-akai tana nuna hanyar da ke girgiza ko na'urori biyu da ke amsa adireshi ɗaya, yayin da shigarwar da ba ta warwarewa ko kaɗan tana nuna adireshin ƙofar ko tacewa a tashar shiga.}
{Yanke shawara tsakanin warwarewa mai motsi da shigarwa tabbatacciya}
{Warwarewa mai motsi ita ce tsohuwar hanyar saboda wani dalili: tana bin kayan aiki idan an maye gurbin ƙofa kuma bata buƙatar haɗin kai da kowa. Shigarwa tabbatacciya tana da hujja idan ana sarrafa cibiyar sadarwa da gangan kuma haɗa adireshi da adireshin kayan aiki wani ɓangare ne na ƙirar da aka rubuta.}
| Approach | Good fit | Cost you accept |
|---|---|---|
| Dynamic resolution | Laptops, changing networks, anything with a spare minute to recover | A short outage while the entry is relearned |
| Permanent entry | Fixed appliances where the pairing is controlled and recorded | A silent failure the day the hardware changes |
{Ko ta yaya, yi amfani da zaɓin akan mahaɗin shiga wanda ke ɗauke da fakitin waje. Kashe warwarewa a wannan mahaɗin baya ƙarfafa tunnel ɗin; yana cire ikon abokin ciniki na isa ƙofar da ke ɗauke da shi, kuma gazawar tana kama da mataccen VPN maimakon matsalar adireshi ta gida.}
{Ka tuna da ɗayan tari}
{IPv6 baya amfani da warware adireshi a wannan siffa; yana amfani da gano maƙwabta. Tambayar matakai tana nan ba ta canza: ta yaya ainihin fakitin waje ke isa hop na gaba na gida, kuma me ke tabbatar da cewa amsar ta yau ce.}
{Duba waɗannan gaskiyoyi biyu a ɗayan tarin kafin ka ayyana ƙirar ta cika, domin tunnel da ke ɗaukar iyalai biyu yana da hanyoyin waje biyu da za'a yi la'akari da su. Rubuta wanda ka tabbatar da wanda ka ɗauka.}