OpenVPN ba ya tashi: karanta layin farko, ba saitin ba

VPN da ke mutuwa a daƙiƙa ta farko dabba ce ta daban da wadda ke haɗawa sannan ta kasa, kuma kuskuren da aka saba shi ne a ɗauke su iri ɗaya. Babu handshake a nan, babu musayar takardar shaida kuma babu hanya da za a duba. Layi ɗaya a cikin journal ne ke yanke shawara wace gyaran da bai da alaƙa daga cikin da yawa ya dace, kuma tsallake shi yana ɗaukar yini ana gyara saitin da ba a taɓa karantawa ba. Karanta wannan layin da farko.

Umarni uku na karatu kawai suna kai ka zuwa wurin: journalctl -u openvpn@server -b --no-pager da farko, sannan systemctl status openvpn@server, da ss -lunp don masu sauraron UDP da masu su.

Layin farko ne ke zaɓar reshe

Rikicin tasha da rashin binary duka suna kashe tashi cikin daƙiƙa ɗaya, kuma suna barin layukan farko daban-daban. Saƙon cewa adireshin yana a amfani tuni yana ambaton tashar; babu fayil mai aiwatarwa yana ambaton hanyar da ba ta wanzu kuma; yanayin da ya kasa ko babu fayil ɗin saiti yana ambaton fayil ɗin. Waɗannan uku suna kai ga gyare-gyare daban-daban, kuma babu ɗayansu da ke inganta ta sake shigar da abokin ciniki. Kwafi gazawar farko cikin bayananka kafin ka gudanar da wani abu.

Kula da madaukin sake gwadawa da ke ɓoye ainihin layin. Naúrar da ke da manufar sake farawa na iya binne gazawar farko ƙarƙashin dozin iri ɗaya, don haka journalctl -b da aka tace bisa naúrar kuma an karanta daga sama ya fi wutsiya.

Wanene kuma ke riƙe tashar 1194

Laifin ba yawanci sabar ta biyu ce da wani ya da gangan saita ba. Yi tsammanin abokin ciniki da aka fara da hannu wanda har yanzu yana raye a wata tashar tattaunawa, ko bayanin martaba na biyu da ya zaɓi tashar ɗaya, ko kunshin mai sayarwa wanda nasa ramin ke riƙe 1194. Mai mallakar soket ɗin yana bayyana a ss -lunp; ba da wannan PID ga systemctl status don sanin ko naúrar ce ke da alhaki. Sauke shi ta hanyar sarrafawarsa ta kansa maimakon da sigina.

Sigina ga tsarin da naúrar ke sarrafawa yakan haifar da sake farawa, kuma gazawar ɗaya ta sake bayyana bayan ɗan lokaci kamar sabuwar matsala. Yi amfani da systemctl stop ga naúrar, umarnin sabis na kunshin kansa ga shigarwar mai sayarwa, da sigina kawai ga wani abu da ka fara da hannu a wannan harsashi.

Naúrori da suka rage bayan sharewa

Sharewa yana goge binaries; fayilolin naúrar da aka rubuta da hannu, yawanci a ƙarƙashin /etc/systemd/system, suna tsira. Sai Systemd ya sake gwada naúrar da ke nuni ga hanyar da ba ta wanzu kuma, kuma saƙon ya shafi wannan fayil ɗin da ya ɓace maimakon cirewar jiya. systemctl status yana nuna hanyar guntun naúrar kusa da saman, don haka duba ta da dpkg -S kafin ka share wani abu. Da zarar maraya ya tafi, systemctl daemon-reload da systemctl reset-failed suna share yanayin; in ba haka ba kowane duba matsayi na gaba zai gaje shi.

Lokacin da which openvpn ya amsa da wani abu ƙarƙashin /usr/local, binary ɗin da ake amfani da shi ya fito daga mai shigar da mai sayarwa ba daga apt ba. Irin wannan mai shigar yawanci yana kawo nasa mai sauraro, nasa shigarwar tashi da nasa babban fayil ɗin saiti, don haka cire umarnin da ake gani yana barin soket ɗin a riƙe.

Cire shi yadda mai sayarwa ya rubuta, tabbatar tashar tana da ’yanci da ss -lunp, kuma ƙara abokin ciniki na rarraba idan kana buƙatarsa kawai.

Gyara yanayin kafin sake gwadawa

Share yanayin gazawa kafin ka yanke hukunci daga gare shi: systemctl reset-failed yana cire masu ƙirga, sannan systemctl status yana ba da rahoton halin yanzu na naúrar ba tarihinta ba. Fara shi sau ɗaya kuma karanta journal na wannan gudun kansa maimakon yanayin gama gari na injin. Naúrar da ke ba da rahoton tana aiki yayin da ramin ba ya ɗaukar kome matsala ce ta dabam, kuma wadda ta fi yawa. Su biyun suna haɗuwa a rahotannin kuskure domin dukansu suna ƙarewa da mai amfani yana cewa VPN ba ya aiki.

Rubuta reshen da ka ɗauka: rikicin tasha, rashin binary, rashin saiti. A gaba za a fi saurin gane shi.