Yadda ake aika wata manufa ta IPv4 zuwa wajen ramin OpenVPN

Yawancin saitin cikakken rami suna aika kowane fakiti ta VPN, kuma redirect-gateway ita ce umarnin da ke sa hakan ya yiwu. Ana iya keɓe manufa ɗaya har yanzu. Ƙara hanyar mai masauki don wannan adireshin tare da maɓallin net_gateway yana gaya wa abokin ciniki ya isa gare ta ta ƙofar farko ta injin, yayin da duk sauran suna ci gaba da amfani da ramin.

Layin yana kama da mara lahani kuma sau da yawa haka yake, amma yana warware tambaya ɗaya kawai: inda fakiti na wannan adireshin IPv4 suke tafiya. Ba ya canza DNS, IPv6, manufar katangar wuta ko wane tsari ya buɗe haɗin, kuma kowanne daga cikinsu na iya rushe keɓewar a hankali.

Abin da net_gateway yake ambata da gaske

Shigarwar bayanin martaba don wannan keɓewar layi ɗaya ce: route 198.51.100.77 255.255.255.255 net_gateway. Adireshin farko maɓallin takardu ne don manufa, abin rufewa yana mai da shi hanyar mai masauki ɗaya, kuma alamar ƙarshe tana ambata maɓallin ƙofa. OpenVPN tana warware maɓallan ƙofa lokacin da take girka hanyoyi. vpn_gateway na nufin ƙofar ramin da kansa, gefen nesa na haɗin VPN. net_gateway na nufin ƙofar da aka saba da ita da mai masaukin yake da ita kafin VPN ya canza kome, wadda yawanci ita ce rauwan gida a cibiyar sadarwar jiki.

Maɓalli na uku, remote_host, yana nufin adireshin uwar garken VPN, kuma yana nan domin ramin ya isa uwar garken ta hanyar jiki. Riɓaɓɓanya waɗannan uku ita ce dalilin da ya fi yawa na keɓewa ta je wurin da ba daidai ba, ko ta kasa girka kwata-kwata.

Ana karanta darajar a lokacin haɗi, ba a rubuta ta cikin fayil ɗin ba. Idan injin ya koma wata cibiyar sadarwa, ƙofar da ta gabaci VPN tana canzawa kuma hanyar tana bin sabuwar. Wannan yawanci abin da kuke so ne, amma kuma yana nufin halin keɓewar ya dogara da cibiyar sadarwar da abokin ciniki ya fara daga gare ta.

Me ya sa hanyar mai masauki ke cin nasara kan tsohuwar hanyar rami

Ana yanke shawarar tuƙi ta mafi takamaiman prefix ɗin da ya dace. redirect-gateway def1 yawanci ba ya maye gurbin hanyar da aka saba; yana ƙara rabi biyu, hanya don rabin ƙasa na sararin adireshi da ɗaya don rabin sama, don haka ana kiyaye ainihin hanyar da aka saba don wasu amfani. Waɗannan rabin sun fi adireshi ɗaya faɗi.

Hanya don adireshi ɗaya tare da abin rufe 255.255.255.255 /32 ce, wadda ita ce mafi takamaimai da IPv4 zai iya zama. Lokacin da ake auna fakiti don wannan adireshin, /32 ta dace kuma tana cin nasara ba tare da la'akari da wace hanya aka fara girka ba. Wannan ita ce hanyar da ke bayan keɓewar, kuma tana aiki iri ɗaya a Linux, macOS da Windows muddin hanyar tana nan da gaske.

Windows yana ƙara wani girma na biyu. Lokacin da hanyoyi biyu suka yi daidai da takamaimai, wanda ke da ƙaramin ma'auni yana cin nasara, kuma adaftar VPN na iya ɗaukar ma'aunin fuska wanda ke canza sakamakon. /32 har yanzu ya fi rabin takamaimai, don haka keɓewar tana riƙewa yawanci, amma tsohuwar hanya daga zaman da ya gabata na iya haifar da sakamako mai ruɗani idan ta yi daidai da takamaimai.

Abin da keɓewar ba ta rufe ba

DNS ita ce rata ta farko. Abokin ciniki na iya tura saitunan mai warwarewa na ciki, kuma tsarin aiki zai ci gaba da amfani da su don bincike. Aikace-aikacen da ke warware suna kafin haɗawa na iya samun adireshin ciki don sabis da ya kamata ya tafi kai tsaye, ko adireshin waje wanda ke warwarewa daidai amma sai ya yi tuntuɓe a rata ta gaba.

IPv6 ita ce ta biyu. Umarnin hanya yana magance IPv4 kawai. Manufa mai tarin biyu na iya fifita IPv6, wadda ke bin rami ko tsohuwar hanyar IPv6 ta mai masauki dangane da manufa, don haka keɓewar IPv4 ba ta taɓa aiki ba. Kuna buƙatar hanyar IPv6 da ta dace, ko shawarar da aka yi da gangan na kashe IPv6 ga wannan abokin ciniki.

Iyakar aikace-aikace ita ce ta uku. Dokar ta dogara ne kan manufa, don haka kowane tsari da ke haɗawa da wannan adireshin yana amfani da hanyar kai tsaye, ko da shine wanda kuke tunani ko a'a. Akasin haka, gidan yanar gizo na iya amsawa daga adireshi da yawa, don haka keɓe /32 ɗaya ba ya keɓe shafin. Idan ainihin buƙatar ita ce tuƙi ta kowace aikace-aikace, to teburin hanyoyi na abokin ciniki Community shine kayan aikin da bai dace ba.

Duba keɓewar ba tare da yaudarar kanka ba

Fara da hanyar da aka girka, ba da burauza ba. A Linux, tambayi kernel wace hanya da mataki na gaba zai yi amfani da su don takamaiman adireshin; a Windows, karanta teburin hanyoyi don wannan /32. Tabbatar ƙofar ita ce ta jiki ba ta rami ba. Idan shigarwar ba ta nan, ba a yi amfani da bayanin martaba ba ko abokin ciniki ba shi da damar canza hanyoyi.

Sannan gwada manufofi biyu. Buƙatar zuwa adireshin da aka keɓe ya kamata ta fita ta fuskar jiki, kuma buƙatar zuwa adireshin ciki na sarrafawa ya kamata har yanzu ta yi amfani da rami. Gwada adireshin da aka keɓe kawai ba ya tabbatar da kome game da sauran ramin, kuma gwada gidan yanar gizo na jama'a yana gwada adireshin da wannan shafin ya warware zuwa gare shi, wanda watakila ba shine wanda ke cikin dokar ba.

A ƙarshe, duba sarrafawar da za su iya wuce hanyar. Kill switch na gefen abokin ciniki ko saitin block-outside-dns na Windows na iya hana zirga-zirga kai tsaye, wanda ke bayyana a matsayin haɗin da ya kasa duk da cewa hanyar daidai ce. Kada ku kashe waɗannan sarrafawar don keɓewar ta nuna tana aiki; idan manufar ta hana hanyar kai tsaye, to keɓewar matsalar ƙira ce ga wanda ya mallaki sabis ɗin VPN.

Sake dubawa bayan sake haɗawa ko canza cibiyar sadarwa, domin ƙofar da ta gabaci VPN da hanyar da ake da ita halayen lokaci ne, ba na bayanin martaba ba.