Sarrafa IIS Manager daga nesa: fara duba adireshin WMSVC kansa

Rukunin yanar gizon ku yana amsa a 443 ta hanyar ramin, kuma IIS Manager har yanzu ba zai iya haɗawa da sabar ba. Waɗannan sakamakon biyu ba saɓani ba ne, domin gidan yanar gizon da ƙarshen wurin sarrafa nesa masu saurare biyu ne da tsaruka biyu da jerin dokokin shiga guda biyu. Na sarrafawa nasa ne na Sabis ɗin Sarrafa Yanar Gizo, WMSVC, kuma yana da adireshinsa, tasharsa, takardar shaidarsa da iyakokin IPv4 nasa. Duba wannan ƙarshen wurin kafin ku taɓa hanya ɗaya.

Masu saurare biyu, matsaloli biyu daban-daban

Buƙata zuwa gidan yanar gizon tana isa haɗin HTTP.sys na wannan gidan, wanda ake bayyana ta kowane gida da kowane yarjejeniya a cikin tsarin applicationHost. Buƙata daga IIS Manager tana isa WMSVC, wanda bisa ga al'ada yana amsa HTTPS a TCP 8172 kuma ana tsara shi a matakin sabar. Babu wani abu a haɗin gidan da ke canza inda WMSVC yake saurare, kuma babu wani abu a WMSVC da ke canza adireshin da gidan yake amsawa. Suna raba na'ura ɗaya da ajiyar takardar shaida ɗaya, kuma a nan ne kamancin ya ƙare.

Don haka Test-NetConnection mai nasara a tasha 443 yana gaya muku mai sauraren gidan ana iya isa gare shi, kuma babu komai game da sarrafawa.

Nemo adireshin da WMSVC ke daure da shi a zahiri

Tambayi sabar abin da yake saurare yanzu, ba abin da aka tsara shi ya saurare shekaru da suka wuce ba. Get-NetTCPConnection -LocalPort 8172 -State Listen yana buga adireshin gida, kuma ƙimar 0.0.0.0 ko :: tana nufin duk adireshi, yayin da takamaiman adireshi ke nufin shi kaɗai. Idan an canza adireshin sabar, mai sauraren da har yanzu ke manne da adireshin da aka janye shi ne ainihin gazawar da wannan binciken ke kamawa.

Ƙimar da aka tsara tana kan shafin Management Service na IIS Manager a kumburin sabar, kuma a bayansa a cikin administration.config ƙarƙashin babban fayil ɗin tsarin inetsrv. Kwatanta biyun: abin da fayil ɗin ya ce, da abin da soket ɗin ke daure da shi a zahiri.

Sannan gudanar da Test-NetConnection -ComputerName iis-admin.example.com -Port 8172 -InformationLevel Detailed daga abokin ciniki na VPN da abin ya shafa kuma karanta adireshin da aka warware da adireshin tushen da aka zaɓa. Amsar DNS daban a kan VPN ta zama ruwan dare don ya cancanci a ware shi da wuri. Riƙe ainihin sunan mai masaukin da tashar a cikin tikitin, domin kwatance daga baya da wani suna ba ya tabbatar da komai game da canjin da kuka yi.

Karanta adireshin tushen da sabar ke gani

Ana kimanta iyakokin IPv4 na WMSVC ne da adireshin da ya isa sabar, kuma ba koyaushe ne adireshin da kwamfutar tafi-da-gidanku ke tsammanin tana da shi ba. Idan an fassara tafkin VPN a wani wuri a kan hanya, sabar tana ganin adireshin da aka fassara kuma jerin izini da aka gina daga adireshin ciki na abokin ciniki zai ƙi shi. Wannan ƙin yana kama da gazawar haɗi daga gefen abokin ciniki, wanda shi ne dalilin da ake kuskuren gano shi a matsayin matsalar turawa.

Yi amfani da cikakken fitarwar gwajin TCP da teburin haɗin sabar kanta don ganin wane adireshin tushe ya iso a zahiri kafin ku gyara jerin iyakoki.

Canza haɗin a matsayin canjin sabis

Dole ne a dakatar da WMSVC kafin a gyara tsarinsa, don haka tsara shi a matsayin canji da wata hanyar sarrafawa ta samu, kamar shiga ta console ko zaman nesa wanda bai dogara da IIS Manager ba. Dakatar da sabis ɗin, yi canjin adireshi, tasha ko takardar shaida, sannan sake kunna shi kuma tabbatar mai sauraren ya motsa. Duk wanda ke amfani da sarrafa IIS daga nesa zai rasa zaman sa a wannan taga. Faɗa wa sauran masu gudanarwa kafin taga ta buɗe; gano shi a tsakiyar canjin shine yadda mutane biyu suke gama gyara mai saurare ɗaya.

Zaɓin duk adireshi zaɓi ne mai halal, amma ɗauke shi a matsayin shawarar shiga ba gajeriyar hanya ba. Faɗaɗa mai sauraren yayin da jerin iyakoki ya kasance a buɗe shine yadda ƙarshen wurin sarrafawa ke ƙarewa a fallasa a cibiyar da babu wanda ya yi niyya. Idan sabar tana da katunan cibiya da yawa, iyakance mai sauraren zuwa mu'amalar sarrafawa, bar hanyar bayanai ita kaɗai, kuma tabbatar gidan yana amsa a adireshinsa.

Takardar shaidar da WMSVC ke gabatar ana zaɓe ta dabam da takardun shaidar gidan. Idan kun canza adireshin, tabbatar takardar shaidar har yanzu ta dace da sunan mai masaukin da abokan ciniki ke amfani da shi, in ba haka ba haɗin zai gaza daga baya a matakin TLS da ƙarar da ba ta da alaƙa da turawa.

Raba isa ga ita da amana da izini

Da zarar TCP ya yi nasara, sauran gazawar suna cikin tsari: amanar TLS ga takardar shaidar sarrafawa, sannan tantancewar Windows, sannan izinin IIS Manager da aka ba wannan asusu. Kowannensu yana haifar da kuskure daban, kuma babu wanda ake gyara ta hanya ko dokar wuta. Karanta rubutun kuskuren a zahiri maimakon sake kunna sabis ɗin.

Yi binciken huɗu a wannan tsari, ƙarshen wuri, mai saurare, adireshin tushe, amana, kuma yawanci za ku sami tsohon haɗin kafin ku sami matsalar cibiyar.