Cire kunshin umarnin tura hanya ne, ba toshewa ba, don haka shafukan da suke lodawa bayan VPN ya haɗu ana tsammanin su ne, ba hujjar gazawa ba. Cirewar tana fitar da aikace-aikacen daga rami maimakon toshe shi, kuma cibiyar sadarwa ta yau da kullum tana ɗaukar zirga-zirgarsa. Manufofi biyu daban-daban sun haɗu a nan: ɗaya yana zaɓar matakai, ɗayan yana zaɓar wurare. Karanta su a wannan tsari yana bayyana dalilin da ya sa alamar da ta haɗu da aikace-aikacen da ke aiki ba saɓani ba ne.

Me ya sa cirewa ke barin cibiyar sadarwa a buɗe

VpnService.Builder yana karɓar ko jerin izini ko jerin hani, ba duka biyu ba. Kunshin da ke cikin jerin izini ne kaɗai ake tura ta rami. Jerin hani yana juya hakan: kowane kunshi banda waɗanda aka jera yana amfani da rami, kuma waɗanda aka jera suna riƙe hanyar zahiri. Kunshin da ba a jera shi ba a ƙarƙashin jerin izini shi ma yana wajen rami, don haka cirewa shine yanayin al'ada ga yawancin aikace-aikace a wannan yanayin.

Wannan yana mai da shigar hani na gida shawarar tura hanya, ba ka'idar wutar bango ba. Idan buƙatar ita ce a hana aikace-aikace isa ga mai masauki, dole rami ya rufe shi kuma uwar garke ko manufar gida ta ƙi zirga-zirgar. Fitar da aikace-aikace daga rami yana canza ne kawai wace fuska ke ɗaukar faket ɗinsa.

Batun Play Store shine misalin da aka sani da gangan. Cire kunshin shagon yana barin saukewa su yi amfani da haɗin da ke ƙasa lokacin da fitarwar VPN ke tsoma baki a canja wuri, kuma yana nuna cewa cirewa na nufin zagayawa ba toshewa ba.

Furofayil ɗaya, jeri ɗaya

Magini yana jefa kuskure idan an yi amfani da kira biyu, don haka furofayil ɗin da ke gabanka ko jerin izini ne ko jerin hani. Wannan gaskiya ɗaya ce ke ƙayyade yadda za a karanta kowane kallo na gaba. Duba lambar ko tsarin da aka sarrafa kafin teburin tura hanya, domin jerin ne ke ƙayyade abin da sauran fitarwar ke nufi. Furofayil gauraye ba yanayi ba ne da za ka iya kallo.

Bambancin kuma yana hasashen abin da aikace-aikacen da aka shigar sabo zai yi. A ƙarƙashin jerin izini yana waje har sai wani ya ƙara shi, yayin da a ƙarƙashin jerin hani yana shiga rami bisa tsoho.

Tsare-tsaren da aka sarrafa suna nuna wannan zaɓi a ƙarƙashin sunayen maɓalli daban-daban, kuma wasu kwasfai suna kwatanta shi a matsayin yanayin VPN na kowane aikace-aikace maimakon jeri. Halin har yanzu yana komawa ga waɗannan kira biyu, don haka bi diddigin saitin zuwa jerin kunshi maimakon amincewa da lakabi. Idan lakabi da jerin sun saba, jerin ne ke cin nasara.

Bi ka'idar UID zuwa teburin rami

Android yana ba kowane aikace-aikace nasa ID na mai amfani na Linux, kuma sabis ɗin VPN yana girka ka'idojin manufa waɗanda suka dace da jeri na UID. Zirga-zirgar da ta dace ana tura ta zuwa teburin tura hanya wanda hanyar tsohuwa ke nuni ga na'urar tun. Ana keɓe lambar tebur ga kowane misali na VPN, don haka tana canzawa bayan sake haɗuwa ko bayan ƙirƙirar furofayil na biyu na VPN.

Fitarwar ka'idoji ita ce taswira. Kowane layi yana ambaton teburin bincike, kuma wannan teburin yana riƙe hanyar tsohuwa da ke ƙayyade ko faket ɗin da suka dace suna shiga rami.

adb shell ip rule show
adb shell ip route show table all
adb shell cmd package list packages -U | grep <package>

Gudanar da umarni na uku da farko don samun UID, sannan ka nemo ka'idar da jerinta ya ƙunsa. Wannan ka'idar tana nuni ga lambar tebur, kuma ip route show table <n> da wannan lambar yana nuna ko akwai hanyar tsohuwa ta na'urar tun. Idan teburin ba shi da tsoho, an zaɓi aikace-aikacen amma ba shi da hanya, wanda wata gazawa ce daban.

Waɗannan umarnai suna buƙatar gini da za a iya gyara kuskure ko na'urar da adb shell zai iya karanta yanayin cibiyar sadarwa. A wayar samarwa manajan kunshi har yanzu yana amsawa, amma ana iya ƙin binciken tura hanya, don haka rubuta abin da za ka iya ka ɗauki sauran a matsayin ba a tabbatar ba.

Hanya tana da'awar prefix, ba aikace-aikace ba

Builder.addRoute yana da'awar prefix ɗin makoma ga rami. Furofayil da ke ƙara kawai 10.0.0.0/8 yana tura wannan prefix ta rami kuma yana barin kowace makoma a kan hanyar zahiri. Wannan shine raba rami na yau da kullum, kuma bai dogara ga waɗanne aikace-aikace ka'idojin suka zaɓa ba.

Tsarin da uwar garke ta tura yana nuna wannan tsari. Turo na kowane hanya yana ƙara prefix, yayin da umarnin redirect-gateway yana maye gurbin hanyar tsohuwa kuma yana kama komai ga aikace-aikacen da rami ya rufe. Cire wannan umarnin zai iya rage rami mai aiki zuwa ƙaramin cibiya ɗaya ba tare da wani canji a na'urar ba.

Hanyar da aka tura da ƙofa ko ma'aunin ma'auni mara kyau shi ma zai iya kasa girka. Gwammace siffar prefix ta fili ka bar uwar garke ta kula da turawa da NAT.

Karanta haɗuwar kafin ka canza saiti

Ramin yana ɗaukar haɗuwar matakan da aka rufe da wuraren da aka ce. Aikace-aikacen da aka rufe da ke neman adireshin wajen prefix ɗin da aka buga yana fita ta hanyar zahiri. Kunshin da aka hana yana waje koda yana neman adireshi cikin waɗannan prefix. Babu ɗayan da laifi ne; duka biyu manufofin biyu ne suna yin aikinsu.

VPN na kowane aikace-aikace kuma na iya barin aikace-aikacen da ke da alaƙa ba shi da haɗi. Lokacin da on-demand a kashe kuma rami a ƙasa, aikace-aikacen yana kasancewa a ɗaure ga VPN na kowane aikace-aikace kuma ba shi da madadi, wanda yake kama da karyayyen aikace-aikace maimakon yanayin manufa. Kunna on-demand, ko cire alaƙar ta hanyar gudanarwa, yana canza hakan.

LayerWhat it selectsWhere to lookTypical mismatch
Package listProcessesBuilder calls or managed configurationApp excluded but expected to be blocked
UID policy ruleWhich table a UID usesip rule showTunnel icon on, app still on Wi-Fi
Routing tableDestinations for matched trafficip route show table <n>Covered app reaches only one subnet
Server pushPrefixes offered to the clientServer route configurationTunnel shrinks after a server edit

Yi binciken kusurwa ɗaya a lokaci. Tabbatar da izini ko hani da farko, karanta ka'idojin UID da tebura da aka girka na biyu, sannan gwada aikace-aikace na biyu a kan wannan makoma a ƙarshe. Aikace-aikace na biyu yana raba zaɓin mataki daga zaɓin makoma a cikin buƙata ɗaya.

Rubuta sakamakon a matsayin aikace-aikace, makoma da lambar tebur. Wannan jeri uku ne abin da sauyi na gaba dole ya kiyaye.

Labarai masu alaƙa