Ba ka bukatar asusu na gaske don sanin ko maɓallin kashe yana riƙewa; abin da gwaji ke jefa cikin haɗari shi ne daidai wannan. Binciken yana ƙirƙirar ɗan gajeren taga inda zirga-zirga na iya ko ba zai iya fita waje da ramin ba, don haka kayan aikin ya kamata ya zama abin da za ka iya rasa. Yanzu ina yin wannan da shafin yaudara da ƙarin bayanin martabar burauza, kuma yana ba da amsa mafi bayyananne fiye da tsarin burauza-da-webmail da na yi amfani da shi a baya. Abin da ke biyo baya yana bin tsari ɗaya da abokin ciniki ke gabatarwa: saitin, wurin, sauyi, sannan hujjoji.

Gwajin yana amsa tambaya ɗaya ƙunci: a wannan sauyin, shin wannan manhajar za ta iya isa hanyar sadarwa a wajen ramin? Ba ta ce komai game da ko sauran manufar tana da hankali ba. Ka riƙe iyakar ƙarami haka kuma sakamakon ya cancanci rubutawa.

Nemo maɓalli da iyakarsa a cikin abokin ciniki

Buɗe abokin ciniki ka nemo saitin toshewa kafin ka canza kowane yanayin hanyar sadarwa. Masu sayarwa suna kiransa daban-daban: maɓallin kashe, yanayin kullewa, makullin hanyar sadarwa, toshe zirga-zirga a wajen ramin. Alamar tana faɗi ƙasa da zaɓuɓɓukan da ke ciki. Abin da ke da muhimmanci shi ne ko toshewar tana aiki koyaushe, ko kawai lokacin da manhajar ta yanke shawarar cewa ramin ya gaza yanzu, da kuma ko tana rufe kowace manhaja ko jerin da aka zaɓa.

Sannan ka lissafa sauye-sauyen da abokin cinikinka zai iya yi da gaske. Cire haɗin da mai amfani ya fara, fita daga manhajar da rasa hulɗa da uwar garke hanyoyi ne guda uku daban-daban a yawancin abokan ciniki, kuma ba sa raba manufa ɗaya ta toshewa. Wasu suna sakin toshewar lokacin da manhajar ta fita. Wasu suna barin ƙa'idodin tacewa a shigar har sai wani abu ya cire su. Karanta bayanin saitin mai sayarwa don sigar da kake gudanarwa maimakon yin zato, sannan ka rubuta wanne cikin ukun kake gwadawa.

Rubuta bayanin martabar ma: yarjejeniya, iyalan adireshi da ko an kunna ramin raba. Da'awar na'urar gaba ɗaya ba ta da ma'ana idan bayanin martabar ya ware wasu manhajoji da gangan, kuma keɓancewar da ka saita ba ɗigawa ba ce. Bayanin saitin OpenVPN Connect shine irin shafin da ke ambaton wace maɓalli ke canza wace ɗabi'a, ko da alamomin sun bambanta a kowane abokin ciniki.

Zaɓi wurin yaudara wanda ke aiki ba tare da ramin ba

Yaudarar tana buƙatar halaye biyu, kuma tsallake ɗaya daga cikinsu yana haifar da sakamakon da ba za a iya karantawa ba. Dole ne a isa gare ta kai tsaye lokacin da ramin ya tsaya kuma toshewar a kashe, in ba haka ba “ta daina amsawa” na iya nufin kawai uwar gidan ya tafi. Kuma ba za ta buƙaci shiga, kuki ko biyan kuɗi ba, domin ɗigawa ta ci ka layin log maimakon zama.

Shafi mai tsaye a kan uwar gidan da kake sarrafawa shine zaɓi mai tsabta. Injin kama-da-wane na ajiya mai ɗauke da sabar HTTP mai sauƙi kusan daidai yake da kyau, kuma shafin duba haɗin kai na jama'a yana aiki idan ka yarda cewa samuwarsa yana wajen ikonka. Rubuta adireshin, tashar, iyalin adireshi da ko buƙatar tana buƙatar neman suna, domin kowanne daga cikinsu ya zama mai canzawa wanda watakila za ka ware shi daga baya.

Kafa tushen layi kafin ka taɓa maɓallin. Da ramin a buɗe, yaudarar dole ta amsa ta cikin ramin, wanda ke tabbatar da hanyar manufar tana aiki. Da ramin a rufe kuma toshewar a kashe, dole ta amsa kai tsaye, wanda ke tabbatar da wurin yana raye. Sannan ne kawai gazawa a cikin yanayin toshewar ke gaya maka wani abu.

Gudanar da sauye-sauyen a tsari mai tsayawa

Ɗauki sauye-sauyen ɗaya bayan ɗaya ka ba kowanne 'yan daƙiƙa don daidaitawa, domin abokan ciniki sukan rushe kuma su sake gina ƙa'idoji a wannan tazara. Gudanar da wannan ɗan gajeren bincike kowace lokaci yana riƙe abubuwan lura a kwatance:

curl -sS -o /dev/null -w 'http=%{http_code}\n' --max-time 5 http://decoy.example/
echo "curl_exit=$?"
dig +short decoy.example
curl -6 -sS -o /dev/null -w 'v6_http=%{http_code}\n' --max-time 5 http://decoy.example/
echo "curl_v6_exit=$?"
TransitionExpected with the block onFailure signature
Manual disconnectDecoy stops answering within secondsDecoy still returns 200
Server or path failureBlocked, with no exemption for the old endpointDirect access during the gap
Quit the appClient-dependent; record what happensBlock disappears with the process
Wi-Fi to EthernetBlock holds until the tunnel returnsTraffic flows mid-change

Layin fita daga manhajar ya cancanci nasa gudu ko da ba ka taɓa rufe abokin ciniki a amfani na yau da kullum ba. Idan an saki toshewar lokacin fita, faɗuwa ko sabuntawa ta tilas tana ba ka irin wannan fallasa, kuma wannan gaskiya ce game da turawa, ba game da haƙurinka ba. A Windows, gwaje-gwajen da suka dace su ne Resolve-DnsName decoy.example da curl.exe -s -o NUL -w "%{http_code}" http://decoy.example/.

Raba toshewa daga mai warwarewa da ya lalace

Shafin da ya kasa loda yana da dalilai da yawa, kuma ɗaya ne kawai cikinsu shine maɓallin yana aiki. Idan sunan bai warware ba, ka koyi cewa DNS an toshe shi ko ya lalace, ba wai hanyar bayanai an toshe ta ba. Gwada adireshin zahiri ma, don amsar ba ta dogara da warwarewa ko kaɗan ba.

Lambobin fita na curl suna raba waɗannan al'amura: 6 gazawar warware suna ne, 7 yana nufin an ƙi haɗin, 28 lokacin ƙarewa ne. Hanyar da aka toshe takan bayyana a matsayin lokacin ƙarewa ko ƙi a kan adireshin zahiri. Toshewar DNS kawai tana barin 6 kuma tana ɓoye duk sauran. Shafin da aka adana a cache ko ƙofar kama tana yaudarar ido, shi ya sa lambar fita, ba allon ba, ita ce hujja.

Maimaita gwajin a kan IPv6 da adireshin zahiri. Toshewar da ke rufe IPv4 kuma ta yi watsi da IPv6 ta zama ruwan dare don ta cancanci layinta a cikin bayananka, kuma abokin cinikin da ke kashe IPv6 a wajen ramin ya kamata ya gaza sosai a iyalai biyu.

Rubuta iyakar da sakamakon ya rufe

Lokacin da ramin ya dawo, tabbatar da farfadowa: yaudarar tana amsa ta cikin ramin, mai warwarewa yana mayar da amsoshi, kuma manufar tana nan inda ka bar ta. Sannan ka janye gwaje-gwajen. Ƙa'idar wuta ta wucin gadi, hanyar gyara ko bayanin martabar gwaji da aka bari a wurin za su rikitar da gudu na gaba kuma suna iya rayuwa fiye da manhajar.

Wucewa ɗaya tana rufe sigar abokin ciniki ɗaya, bayanin martaba ɗaya, sauyi ɗaya da iyalin adireshi ɗaya. Rubuta waɗannan huɗu tare da sakamakon:

  • Sigar abokin ciniki da dandamali, da ko saitin na kowane bayanin martaba ne ko na duniya.
  • Bayanin martaba, yarjejeniya da duk wani keɓancewar ramin raba.
  • Sauyin da aka gwada, da yadda ka fara shi.
  • Iyalan adireshi da DNS, tare da lambobin fita na curl don yanayin toshewa da mara toshewa.

Idan wani layi ya zama fanko, gwajin bai ƙare ba. Yawo yana nufin maimaita layin canjin hanyar sadarwa. Sake kunnawa ba tare da kulawa ba yana nufin duba cewa ƙa'idodin suna dawowa, wanda tambaya ce game da tsarin dawo da su ba game da maɓallin ba. Sake gudanar da jerin bayan sabuntawar abokin ciniki, domin maɓallan ba safai suke canzawa ba yayin da ɗabi'ar da ke bayansu tana canzawa. Riƙe yaudarar a kusa: babu abin da za a juya, kuma bincike na gaba yana ɗaukar minti biyar.

Labarai masu alaƙa