Haɗin IPv6 kawai, sabis ɗin IPv4: bari wakilin SOCKS ya gada

Ba kwa buƙatar adireshi a cikin iyalin manufa don isa gare ta, muddin wani abu a kan hanya ya yarda ya wuce. Aikace-aikacen yana haɗawa da wakilin, kuma wakilin yana buɗe haɗi na biyu zuwa manufa. Waɗannan soket biyu ne masu iyalan adireshi masu zaman kansu, kuma babu wani abu a cikin ko wanne daga cikin ka'idojin biyu da ke buƙatar su daidaita. Wannan wucewa ce a matakin aikace-aikace, ba hanyar IPv4 ta asali ba, kuma bambancin ne ke ƙayyade abin da zai yi aiki da abin da ba zai yi ba. Haɗa su biyu ita ce hanyar da kwamfutar tafi-da-gida ke ƙarewa ana siffanta ta da samun haɗin IPv4 yayin da duk abin da take da shi wakili ne.

Soket biyu, iyalan adireshi biyu

Buƙatar SOCKS5 tana ambaton manufa a ɗaya daga cikin siffofi uku: adireshin v4 na zahiri, adireshin v6 na zahiri, ko suna don wakilin ya warware. Buƙatar tana bayyana inda wakilin ya kamata ya haɗa, ba yadda haɗin abokin ciniki-zuwa-wakili yake ba.

Karanta waɗannan nau'ikan adireshi a matsayin zaɓuɓɓuka uku masu zaman kansu a cikin saƙo ɗaya. Wakilin da ake iya isa ta IPv6 zai iya buɗe soket ɗin manufa ta IPv4 duk lokacin da yake da fitarwar IPv4 mai aiki kuma manufofinsa sun yarda da buƙatar. Ƙayyadaddun SOCKS5 yana bayyana su ba tare da wata magana kan jigilar abokin ciniki ba kwata-kwata.

Misalin SSH da aka sarrafa

Ɗauki mai masaukin SSH da aka ba ka izini ka yi amfani da shi, wanda ke amsawa kan IPv6 kuma da kansa zai iya isa sabis ɗin HTTPS da ke wanzuwa a v4 kawai. Tura-ta-kaikaice mai motsi na OpenSSH yana sanya mai sauraron SOCKS na gida a kan injinka yayin da zaman shiga ke gudana ta v6.

ssh -6 -N -D 127.0.0.1:1081 -o ExitOnForwardFailure=yes [email protected]

Mai masaukin da asusun da ke sama misalai ne, kuma ɗaurin loopback yana riƙe mai sauraro a wannan kwamfutar. Kada ka maye gurbinsa da ɗaurin duk adireshi don ofis ya raba wakili marar tabbaci. ExitOnForwardFailure=yes yana wanzuwa don tura-ta-kaikaice da ya gaza ya ƙare zaman, maimakon barin umarni shiru yana gudana a baya.

Yayin da zaman ke gudana, buƙatar tana kama da haka:

curl --proxy socks5h://127.0.0.1:1081 https://v4-only.example/

Haɗin loopback ba hanyar intanet ta IPv4 ba ce. Abin da ke barin injinka shine zaman shiga ta v6, kuma gefen nesa ne ke buɗe soket ɗin manufa. Siffar socks5h kuma tana ba da warware suna ga wancan gefen, wanda ke da mahimmanci lokacin da abokin ciniki ba shi da hanyar warware IPv4 ta kansa.

Abin da manufar ke gani a zahiri

Manufar tana ganin adireshin fitarwa na mai wucewa. Babu wani adireshi na kwamfutarka da ke bayyana a can. Lissafin izinin tushe a waccan sabis ɗin dole ne ya ambaci mai wucewa. Littattafan ayyukanta kuma za su danganta zirga-zirgar ga mai wucewa. Rubuta wannan a cikin rikodin canji kafin binciken, domin lissafin izini da aka gina a kusa da adireshin abokan ciniki yana gazawa a buƙata ta farko.

Mai wucewa kuma shine wurin da ake ganin rabi biyu na tattaunawar, wanda yake sifa mai amfani yayin bincike kuma nauyi ne idan an raba mai wucewa ba tare da manufa ba.

Wannan ba DNS64 ko NAT64 ba ne

DNS64 yana amsawa da rikodin da aka ƙirƙira waɗanda ke wakiltar manufofin v4, kuma NAT64 yana sake rubuta fakiti a kan hanyar da aka saita. Babu ɗayansu da ke bayyana abin da ke faruwa a nan, inda tattaunawar jigilar ɗaya ta ƙare kuma wata ta fara kuma babu adireshin da aka ƙirƙira da ke bayyana sakamakon. Don haka buƙata mai nasara ba ta ce komai game da waɗanne sabis ɗin fassara mai ba da sabis ɗinka ke gudanarwa, kuma wakilin na iya gudanar da NAT na yau da kullum a fitarwarsa.

Dukanin hanyoyin biyu na iya kasancewa a cikin hanyar sadarwa ɗaya, don haka bayyana wanda ka tabbatar da shi da gaske maimakon wanda ya fi kusanci da sauti.

San iyakokin kafin ka yi alkawari

Tura-ta-kaikaice mai motsi na OpenSSH yana ɗaukar haɗin TCP, ba zirga-zirgar IP na son rai ba, don haka UDP, ICMP da duk wata yarjejeniya da ta yi watsi da wakilin suna buƙatar wani ƙira mai tallafi daban. Ka kiyaye tabbatar da maɓallin mai masaukin SSH, ƙuntatawar turawa ta uwar garke da tabbatar da takardar shaidar HTTPS, domin wakilin ɗan wasa ne amintacce na ƙari ba dalilin raunana binciken ainihi ba. Idan manufar ita ce ɗaukar jigilar waje na VPN ta wakilin, tabbatar da cewa duka ƙarshen biyu suna goyon bayan wannan jigilar maimakon ɗauka cewa kowane mai sauraron SOCKS zai iya wuce ta.

Babu ɗaya daga cikin waɗannan da ke sa abokin ciniki ya zama mai tushe biyu, kuma babu ɗaya da ake buƙata. Yana sa aikace-aikace ɗaya ya isa sabis ɗaya ta mai wucewa ɗaya, wanda shine ƙaramin da'awa kuma mafi sauƙin tabbatarwa.