Utun na VPN a Mac yana aiki amma zirga-zirga ta kasa? Duba ifconfig

Ka haɗa VPN ɗin, ka gudanar da ifconfig, sannan ka sami shigarwar utun4 da adireshi a kanta. Shafin da kake buƙata har yanzu yana ƙarewa. Wannan tazara ta al'ada ce: lissafin yana tabbatar da akwai muƙamai na ƙira, ba cewa abokin cinikinka ne ya mallake shi ba, cewa hanyar da kake damu da ita ce ta zaɓe shi ba, ko kuma cewa fakiti suna ratsa shi ba. Na daina amincewa da sunan muƙamai bayan da na shafe wata rana da yamma ina zargin rami marar kyau a kan kwamfutar tafi-da-gidanka da ke da shigarwar utun guda uku tun kafin in shigar da wani abu.

Abin da layin utun ya ƙunsa a gaske

Gudanar da ifconfig -a lokacin da kake son cikakken hoto. Idan aka kira shi ba tare da gardama ba, ifconfig yana buga muƙaman da suke aiki a halin yanzu kawai, shi ya sa ramin da bai fara ba zai iya ɓacewa daga fitar da mutane suke liƙawa a tikiti. ifconfig -l yana mayar da sunaye kawai, kuma wannan ita ce hanya mafi sauri ta sanin ko sabon utun ya bayyana bayan ka haɗa.

Karanta muƙamai ɗaya shi ne inda cikakkun bayanai masu amfani suke. Ramin da aka haɗa yawanci yana kama da haka:

utun4: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
    inet 10.8.0.6 --> 10.8.0.5 netmask 0xffffffff
    inet6 fe80::ce81:b1c:bd2c:69e%utun4 prefixlen 64 scopeid 0x15

Filaye uku ne ke ɗauke da amsar. UP da RUNNING suna cewa kernel yana shirye ya yi amfani da muƙamai. POINTOPOINT tare da adireshin abokin --> su ne sa hannun rami maimakon haɗin jiki. Ƙimar mtu tana bayyana aji ɗaya na rahotannin «yana haɗawa, sannan ya tsaya», domin muƙaman utun yawanci suna tashi da raguwar MTU, 1380 a wasu gine-ginen macOS, kuma abokin ciniki na iya wuce ta. Jerin filaye ya yi gajarta da za a duba shi sau ɗaya a littafin ifconfig da Apple ke bayarwa.

Nemo tsarin da ke bayan muƙamai

ifconfig ba shi da ra'ayin manhajar da ta mallake shi. Abokan ciniki biyu na VPN, sabis ɗin tsarin da wani ramin da ya wuce daga makon jiya duk suna samar da shigarwar da suke kama da juna a wannan matakin. A kan Mac na kaina, utun0 har zuwa utun3 sun kasance kafin in daidaita wani abu; Continuity da iCloud Private Relay ma suna amfani da ramuka, kuma babu ɗayansu da zai zama haɗin da kake bincika.

Ga ramukan da suka yi rijistar tsari a cikin na'ura, scutil --nc list ita ce hanya mafi sauri ta daidaitawa. Yana buga kowane tsari tare da matsayinsa da ID na sabis, kuma wanda aka haɗa ana yi masa alama haka:

scutil --nc list
* (Connected)   5F2A9C10-...   VPN  Work IKEv2

Abokan cinikin da suke gudanar da tsarin rami nasu maimakon yin rijistar tsari ba sa bayyana a can. Tunnelblick da kwafin openvpn daga layin umarni suna cikin wannan rukuni, don haka duba teburin tsari ma: ps -Ao pid,comm | grep -i openvpn. Da zarar wani tsari ya mallaki ramin, lambar utun ta wannan tsarin ce ba wani ba.

Gwada adireshin kafin gwada hanyar

Muƙamai na iya aiki ba tare da adireshin da za a yi amfani da shi ba. Bayanin martaba na IPv6 kawai yana nuna shigarwar fe80:: ta gida-lamba kuma babu komai a layin inet, kuma abokin cinikin da ya kasa amfani da adireshin da aka tura ya bar irin wannan siffa. Idan inda za ka IPv4 ne kuma ramin ba shi da adireshin IPv4, tambayar hanya an riga an warware ta.

MTU ya cancanci bincike daban, domin gazawar ba ta kama da matsalar girma. Tana kama da haɗin da ke tabbatarwa sannan ya yi shiru da zarar an fara babban turawa. Aika bincike wanda bai kamata a raba shi ba, a ma'aunin da fakitin zai dace da MTU na muƙamai; ga MTU na 1400 nauyin amfani shi ne baiti 1372:

ping -D -s 1372 10.8.0.5

Amsa tana nufin fakitin wannan girman suna ratsa ramin. Shiru yayin da ƙananan ping suka yi nasara yana nuni ga MTU ko ga wani abu da ke jefar da ICMP a hanya, ba ga tabbatarwa ba, wadda ta riga ta kammala kafin ka sami muƙamai kwata-kwata.

Tabbatar da cewa inda za a je shi ne ya zaɓi ramin

Muhimmiyar tambaya ba ita ce ko utun4 ya wanzu ba, amma ko zirga-zirga zuwa wani adireshi na musamman yana fita ta gare shi. route -n get yana amsa haka ga manufa ɗaya kuma yana buga ƙofar da muƙaman da zai yi amfani da su:

route -n get 203.0.113.20
  gateway: 10.8.0.5
  interface: utun4

Idan wannan umarni ɗaya ya ba da rahoton en0, to tsarin raba-ramin ka yana yin abin da aka gaya masa kuma babu wani binciken muƙamai da zai canza shi. Yi amfani da netstat -rn -f inet lokacin da kake buƙatar tsohuwar hanya da dukan teburin a kallo ɗaya.

Ma'aunai ne ke warware ko fakiti suna motsi da gaske. netstat -ib yana ba da jimillar fakiti da baiti ga kowane muƙamai, haɗe da shigarwar utun; lambobin suna taruwa, don haka karanta su sau biyu da tazara sannan ka kwatanta:

netstat -ib | grep utun4

Ma'aunan da suka daskare yayin da manhajar ke ci gaba da sake gwadawa suna nufin kernel bai taɓa ba da fakiti ga muƙamai ba. Ma'aunan da ke hawa a duka biyun yayin da manhajar har yanzu ta kasa suna kai binciken zuwa ƙarshen ramin.

Lokacin da babu utun da ya bayyana kwata-kwata

Jerin muƙamai mara komai bayan shiga da ya yi kama da nasara yawanci yana nufin ramin bai fara ba, ba cewa ifconfig yana ɓoye shi ba. Duba matsayin abokin ciniki da kansa, sannan na tsarin: ƙarin hanyar sadarwa da ba a taɓa amincewa da shi ba, ko da macOS ya kashe bayan ɗaukaka, ba ya barin wani muƙamai a baya. Amincewar tana cikin Saitunan Tsarin ƙarƙashin Login Items & Extensions, kuma tsohon shigarwa a can ya cancanci sake jujjuya shi kafin ka sake shigar da wani abu.

Lambar utun ba ta tsayawa tsaka-tsakin sake haɗawa. Kana iya samun utun5 inda minti goma da suka wuce utun4 yake, domin ana rushe tsohon muƙamai kuma kernel yana ba da index mai kyau na gaba. Rubutun da suka ƙulla suna da hannu suna karyewa a shiru a wannan lokacin; ka daidaita da adireshi ko da hanya maimakon.

Ka riƙe gefen karatu a matsayin karatu kawai. sudo ifconfig utun4 down yana katse ramin, kuma a cikakken bayanin rami yana ɗaukar zamanka na nesa tare da shi, wanda wannan mugun ciniki ne lokacin da kake ƙoƙarin tattara shaida kawai. Babu abin da kake buƙata a nan da ke buƙatar root: karanta tutoci, adireshi da ma'aunai duk yana aiki a matsayin talakawa.

Yi binciken a jere a gaba idan ramin Mac ya yi rashin hali: tabbatar da utun ya bayyana da ifconfig -l, karanta tutocinsa, adireshinsa da MTU, danganta shi ga tsari, tambayi route -n get wace muƙamai inda za a je yake amfani da ita, sannan ka kalli yadda netstat -ib ke motsi. Kowane mataki yana kawar da wani Layer daban, kuma na farko da ya dawo da kuskure shi ne wurin gyara.