Me ya sa hanyar cikakken rami ke yanke sabar da ke ɗauke ta

Kunna cikakken rami kuma kowace manufa ta zama ta VPN, har da injin da ke ƙarshe shi. Ana aika faifan waje da ke ɗauke da ramin zuwa wannan injin, don haka hanyar tana cinye jigilar da ta dogara da ita. Ƙarin takamaiman hanya ɗaya yana warware wannan, kuma dalilin ya cancanci fahimta. Ba tare da wannan dalilin ba, sake ginawa na gaba zai dawo da kuskuren.

Hanyar da ke cin nata jigilar

Ƙunsawa tana naɗe kowane faifi a cikin wani kai na biyu. Na waje ana aika shi daga adireshin zahiri na gida zuwa adireshin jama'a na sabar, kuma dole ne ya tsallake hanyar zahiri kafin kowane rami ya wanzu.

Yanzu bari binciken wannan adireshin jama'a ya zaɓi ramin. Don aika faifin, injin dole ya ƙunsa shi, wanda ke buƙatar hanya zuwa wannan adireshin, wanda ke mayar da ramin. Abokan ciniki suna magance wannan ta hanya ɗaya cikin biyu. Mai hankali ya ƙi shigar da tsohuwar hanyar kuma ya ba da rahoton kuskure, yayin da mara hankali ya ba da rahoton nasara sannan bai motsa kome ba. Rashin da ba a ji ba shi ne wanda ke cin rana ɗaya.

Daidaiton mafi tsayin prefix yana yanke shawarar binciken kafin a duba kowane ma'auni, don haka hanyar adireshi ɗaya ta zarce kowace tsohuwar hanya a kan injin. Wannan shi ne dukan tsarin da ke bayan gyaran.

Shigar da keɓancewar kafin tsohuwar

Ƙirƙiri hanyar adireshi ɗaya ga sabar, da ƙofar zahiri a matsayin mataki na gaba, kafin tsohuwar hanya ta motsa. Tsari yana da muhimmanci: shigar da ita daga baya yana nufin rayuwa da karyayyen rami yayin da kake rubutu.

Yawancin abokan ciniki suna yin wannan ba tare da nema ba. OpenVPN yana bincika adireshin nesa kuma ya ƙulla shi kafin ya sake rubuta ƙofar da aka saba, kuma zaɓin route-delay ɗinsa yana wanzu don dandamali inda wannan tsari ke yin tsere. wg-quick yana ɗaukar wata hanya daban, yana yi wa faifai alama da neman ƙa'idar manufa maimakon ƙara keɓancewa. Daban-daban hanyoyi, buƙata ɗaya: faifin waje dole ya tsere daga ramin da yake ƙirƙira.

ip route add 203.0.113.10/32 via 192.168.1.1 dev eth0
ip route get 203.0.113.10

Fitarwar binciken ita ce gwajin karɓa. Dole ta ambaci na'urar zahiri da mataki na gaba na zahiri. Na'urar rami a cikin wannan amsar tana nufin keɓancewar ta ɓace, ko an sanya ta bayan wani abu da ke wulakanta ta.

Hoton madubi a kan sabar

Irin wannan tarko yana jira a wancan gefen, a juye. Ba sabar hanyar da aka saba ta wani rami, ko ka tura mata hanyar da ta rufe adireshin jama'a na abokan ciniki, kuma amsoshinta za su sami ɗabi'ar tafiya hanya mara kyau.

Ka yi tunanin abokin ciniki da ya haɗa kuma ya aika buƙata. Ana aika amsar zuwa adireshin jama'a na wannan abokin ciniki, wanda yanzu ya dace da hanyar rami, don haka tana fita daga wata fuska tana ɗauke da tushen da abokin ciniki bai taɓa bugawa ba. Abokin ciniki na iya karɓar wannan faifin kuma har yanzu ya watsar da shi, domin babu abin da ke ɗaure shi da buƙatar da ya aika. Fara daga shawarar tafiyar sabar maimakon daga lokacin jiran abokin ciniki, domin ɗaya ne kawai daga cikinsu ke nuna ainihin zaɓi.

ip route get 198.51.100.44 from 10.90.0.1
ip rule show
sudo tcpdump -ni any host 198.51.100.44

Akwai gyare-gyare uku kuma ba daidai suke ba. Ƙulla sabis ɗin ga adireshin zahiri, ko fassara tushen, dukansu suna ɓoye shawarar tafiya maimakon gyara ta. Aika zirga-zirgar amsa ga tafkin rami ta wani tebur na musamman yana gyara dalilin, kuma sauran biyun an yarda da su ne kawai muddin ƙirar tafiya ta daskare.

Keɓancewar da ramin ke ci gaba da sata

Wasu ayyuka kaɗan suna buƙatar buɗaɗɗen intanet ko da ramin ya mallaki tsohuwar hanya, kuma kowanne yana buƙatar nasa keɓancewar. Mai sabunta DNS mai motsi yawanci shine farkon da ke karyewa.

Yana warware mai bayarwa, yana buɗe haɗi, kuma ya tarar da faifansa suna tafiya ta ramin da adireshinsa ya canza da sakan da suka wuce, don haka sabuntawa ta kasa ko ta wallafa adireshin da ba daidai ba. Hanyoyi uku: ƙulla mai bayarwa da hanyar mai-gida ta ƙofar zahiri, gudanar da sabuntawa kafin ramin ya tashi, ko ba mai sabuntawa tebur na manufa wanda ramin bai taɓa shi ba. Daidaita lokaci yana da irin wannan fallasa a kan na'urar da ke tashi ba tare da mai warwarewa ba, kuma wuraren tabbatar da takaddun shaida suna cikin jerin saboda wannan dalili.

Keɓancewar da babu wanda ya rubuta ita ce keɓancewar da sake ginawa na gaba zai watsar a hankali.

Tabbatar da shi bayan sake haɗawa, ba kafin ba

Gwada wurare uku, ba ɗaya ba: ƙarshen, adireshin sirri a bayan ramin, da adireshin jama'a da ya wuce shi. Bincike ɗaya da ya yi nasara ba ya faɗi kusan komai game da sauran biyun.

ip route get 203.0.113.10
traceroute -n 203.0.113.10
ip route get 10.90.0.5
ip route get 1.1.1.1

Sannan sake kunna haɗin, domin abokin ciniki da ke sake gina teburinsa lokacin sake haɗawa zai watsar da hanyar da ka buga da hannu. Idan kill switch yana aiki, duba cewa an ba da izinin ƙarshen, in ba haka ba ramin ba zai iya dawowa ba bayan canjin cibiyar sadarwa kuma alamar za ta yi kama da katsewa. Ajiye keɓancewar a cikin bayanan martaba ko fayil ɗin unit maimakon a tarihin shell, domin sake haɗawa ya sake ƙirƙirar ta maimakon shafe ta.