proto udp ko tcp-client: wanne uwar garkenka ke ji?

Wani tsari da ya yi aiki a watan da ya gabata yanzu yana ƙarewa saboda lokaci, kuma wani yana ba da shawarar musanya proto udp da proto tcp-client. Wani lokaci wannan shine matakin da ya dace, wani lokaci kuma yana haifar da abokin ciniki da ke haɗawa da tasha da babu wanda ke saurara, domin ba a taɓa saita uwar garke don ɗayan jigilar ba. Umarnin yana bayyana yadda gefenka ke magana; ba zai iya ƙirƙirar mai saurara a wancan gefen ba. Karanta tsarin da uwar garke tare kafin ka canza ɗayansu.

Karanta jigilar da zaɓaɓɓen haɗin ke amfani da ita

Tsari na iya ɗaukar shigarwar remote da yawa, kuma kowace na iya ambaton nata jigilar. Abokin ciniki yana bi da su bisa tsari, don haka layin da ka fara gani ba lallai ne shine wanda ke aiki ba.

Nemo shigarwar da ake ƙoƙarin yi da gaske, sannan karanta jigilarta. Tsari yana da muhimmanci, domin abokin ciniki ba ya wuce zuwa na gaba cikin shiru. Wasu gine-gine suna ƙoƙarin shigarwa ta gaba ne kawai bayan lokaci ya ƙare, don haka ana isa wani zaɓi mai aiki a ƙasan fayil ɗin daƙiƙa kaɗan bayan yadda kake tsammani. Kalli log ɗin don ganin wurin da ake ƙoƙarin, maimakon ɗauka cewa layin farko ya ci nasara.

Idan fayil ɗin yana da layin proto ɗaya kusa da saman kuma shigarwar remote da yawa a ƙasa, wannan layin shine tsoho ga duk remote ɗin da ba ya wuce shi. Gyaran gida a kan tsoho ba ya yin komai ga shigarwar remote da ke ambaton nata jigilar.

grep -nE '^(remote|proto)\b' client.ovpn

UDP da TCP ba saitin gudu ba ne

UDP yana aika datagram ba tare da gina tsayayyen rafi ba, don haka jigilar tunnel ɗin kanta ba a naɗe ta cikin wani jigila mai aminci na biyu ba. TCP yana ba ka hanya ta cikin hanyoyin sadarwa waɗanda ke zubar da UDP ko toshe shi, amma farashin shine sake aikawa a ciki wanda zai iya sa hanyar da ke da asara ta fi muni.

Wannan musanya ce ta isarwa, ba wani matsayi na duniya ba. Zaɓin da ya dace shine abin da hanyar sadarwar da ke gaban abokin ciniki ta yarda. Hanyar da ke zubar da UDP a tashar VPN ba za ta taɓa yin shawarwari ba, komai kyawun rubutun tsarin. Gwada hanyar, sannan ka zaɓi jigilar.

Zaɓi tsakanin su ta hanyar awo kawai kuskure ne, domin amsar ta dogara da abin da hanyar sadarwar da ke gabanka ta yarda. Otal ko proxy na kamfani na iya yarda da TCP mai fita a 443 kuma ba wani abu ba, shi ya sa masu bayarwa ke bayar da wannan nau'in. Ya kasance haɗin OpenVPN a wannan tashar, ba zaman HTTPS ba, ko da lambar tashar ita ce sananniyar.

Abin da tcp-client ke nufi da gaske

Umarnin gefen abokin ciniki yana ambaton gefen da ke fara haɗin TCP. Gefen uwar garke yana amfani da nasa salon saurara, kuma kwafin kalmar abokin ciniki cikin saitin uwar garke yana haifar da mai saurara da ke tsammanin a buga masa waya, ba wanda ke karɓa ba.

Daidaitawa na nufin ɓangarorin biyu sun amince da jigilar, ba cewa suna raba igiya ɗaya ba.

grep -nE '^proto\b' /etc/openvpn/server/server.conf
ss -lntp | grep openvpn

Tambayi uwar garke abin da take saurara kafin ka ɗauka tsarin ba daidai ba ne. Mai sauraran UDP ba ya bayyana a jerin soket na TCP, kuma akasin haka ma gaskiya ne, don haka duba hangen da ya keɓance da ka'ida maimakon na gaba ɗaya.

Lokacin da aka shigo da tsarin amma ba ya taɓa haɗawa

Tsarin da aka shigo da shi wanda ke ƙarewa nan take yakan kasa kafin kowane tabbaci. Kunshin yana zuwa tashar da babu mai saurara, ko kuma hanyar sadarwa ta zubar da shi cikin shiru.

Gwada hanyar a hanya mafi sauƙi: haɗa zuwa wannan host da tashar da jigilar da tsarin ke da'awa, daga wannan hanyar sadarwar da abokin cinikin da ke kasawa.

Idan gwajin UDP bai sami komai ba kuma gwajin TCP ya haɗa, uwar garke tana bayar da ɗayan jigilar kuma tsarin ya tsufa kawai. Idan babu wanda ya amsa, matsalar tana sama da zaɓin jigilar kuma babu gyaran tsarin da zai gyara ta. Bambance waɗannan yanayi biyu yana ɗaukar minti ɗaya kuma yana ceton awa ɗaya na gyaran takaddun shaida wanda bai taɓa dacewa ba.

Rubuta jigilar da ke aiki

Da zarar haɗuwa ta yi aiki, rubuta ta tare da uwar garke, tasha da ka'ida, kuma lura da hanyar sadarwar da aka gwada ta daga gare ta.

In ba haka ba, mutumin da zai gaba ya gamu da ƙarewar lokaci zai sake gwada wannan gwajin a wata hanya, kuma wataƙila ya canza uwar garke da ta kasance lafiya.

Idan mai bayarwa ya wallafa nau'ikan biyu, riƙe fayilolin biyu kuma yi musu lakabi bisa hanyar sadarwar da suka dace da ita. Tsare-tsare biyu masu suna bayyananne suna hana haɗuwar jigilar abokin ciniki da mai saurarar uwar garke da ba a taɓa saita masa ba.