WSL2 ba ta isa sashin VPN ba: karanta hanyar mai masaukin

Daga cikin rarraba, ping zuwa uwar garken ciki yana ƙarewa da lokaci yayin da wannan adireshin ke amsawa daga Windows. VPN yana haɗe kuma hanyar Windows daidai ce, don haka ratar ita ce iyakar WSL. Bi hanyar daga umarnin da ya kasa zuwa ga fuskar mai masaukin. Maganin ba tsayayyen CIDR ba ne a cikin fayil ɗin saiti; shi ne karanta adireshin yanzu da ƙara shi inda rarraba za ta iya amfani da shi.

Tabbatar inda hanyar ta tsaya

Gudanar da wannan gwajin a ɓangarorin biyu: warware kuma haɗa zuwa uwar garke ɗaya ta ciki daga Windows, sannan maimaita a cikin rarraba. Nasara a Windows tare da ƙarewar lokaci a rarraba tana nuna gazawar tsakanin su biyu, ba a cikin abokin ciniki na VPN ko uwar garken ciki ba. Yi wannan kafin canza kowace hanya, domin sakamakon biyu su bayyana manufa ɗaya.

A cikin rarraba, ip -4 addr yana nuna adaftan kama-da-wane mai adireshi daga kewayon NAT na WSL, kuma ip route yana nuna hanyar asali zuwa ƙofar WSL. Babu hanya ga prefix na kamfani, domin adaftan ramin mai masaukin ba ta da takwararta a cikin rarraba. Ƙofar asali tana kaiwa zuwa NAT na WSL, ba zuwa cibiyar sadarwar kamfani ba.

Ƙara hanyar kamfani ba tare da fara ƙara adireshin gida a kan hanyar da za a iya isa ba yana haifar da ƙarewar lokaci ko kuskuren cibiyar sadarwa marar isa. Adireshin shi ne ɓangaren da ke sa hanyar ta zama mai amfani, don haka fara karanta shi kuma ɗauki hanyar a matsayin mataki na biyu.

Zaɓi cibiyar sadarwa ta madubi ko hanya da script

Cibiyar sadarwa ta madubi tana ba rarraba fuskokin mai masaukin da kansu, don haka ramin da hanyoyinsa suna bayyana ba tare da kwafi ba. Wannan fasalin ya dogara da sabon ginin Windows da networkingMode=mirrored a cikin .wslconfig, kuma kunna shi yana canza halayen da ba su da alaƙa kamar tura localhost. Ɗauke shi a matsayin canjin dandali, ba gyaran hanya ba. Idan ginin yana goyon bayansa kuma illolin suna da karɓuwa, ita ce hanya mafi guntu.

Ƙunƙwarar hanya tana riƙe NAT na asali kuma tana kwafin adireshin da hanyar ramin cikin rarraba duk lokacin da ramin ya tashi. Yana aiki a kan ƙarin gine-gine, baya canza halin localhost, kuma yana kasa a bayyane lokacin da VPN ya kashe. Farashin shi ne ƙaramin script wanda dole ne a gudanar a kowace haɗi.

Zaɓi ɗaya kuma rubuta shi. Haɗa saitin madubi da hanyoyin hannu yana haifar da rarraba mai hanyoyi biyu zuwa wannan prefix kuma babu mai shi bayyananne ga kowannensu. Hanya ɗaya da aka rubuta tana da sauƙin gyara fiye da biyu da aka saita rabi.

Ciro bayanan ramin na yanzu daga mai masaukin

Daidaita adaftan ta adireshin MAC maimakon suna, domin sunaye suna canzawa tare da abokin ciniki na VPN da tsarin haɗi. Lissafta adaftan sau ɗaya, lura da MAC na adaftan rami, sannan tambayi adireshinta da prefix. MAC yana tare da adaftan kama-da-wane a tsakanin sake haɗawa, amma suna da lambar fuska ba sa:

powershell.exe 'Get-NetAdapter | Where-Object { $_.MacAddress -eq "3C-52-82-0A-1B-7C" } | Get-NetIPAddress -AddressFamily IPv4 | Select-Object IPAddress, PrefixLength'

Ƙofar tana fitowa daga saitin fuska. Fara ɗaukar lambar fuska, sannan karanta tsalle na gaba. Lambar na iya canzawa bayan sake kunnawa ko sake saita adaftan, wanda shine dalilin da ya sa script ya kamata ya karanta shi maimakon adana shi:

powershell.exe '(Get-NetAdapter | Where-Object { $_.MacAddress -eq "3C-52-82-0A-1B-7C" }).InterfaceIndex'
powershell.exe '(Get-NetIPConfiguration -InterfaceIndex 27).IPv4DefaultGateway.NextHop'

Ka wuce fitarwar ta tr -d '\r' kafin ka sanya ta cikin mai canji. PowerShell yana ƙare layuka da komowar karusai, kuma idan ba a cire ba filin ƙarshe yana ɗauke da ɓoyayyen harafi wanda ke sa umarnin hanya ya kasa da kuskuren bincike mai ruɗani.

Aiwatar da adireshi da hanya cikin rarraba

Sanya adireshin ramin a matsayin adireshi mai prefix a kan fuskar rarraba, sannan ka bi hanyar toshewar kamfani ta ƙofar mai masaukin:

sudo ip addr add 172.20.14.37/22 dev vpn
sudo ip route add 172.20.0.0/16 via 172.20.12.1 dev vpn

NetworkManager yana watsar da adireshin da aka saita da hannu lokacin da haɗin ya juya, kuma babu abokin ciniki na DHCP da ke neman maye gurbi. Sanya hanyar ta zama atomatik domin kowace sake haɗawa ta sabunta adireshin, sannan ka sake tayar da haɗin. Hanyar hannu tana kama da tsayayya har zuwa sake haɗawa ta farko:

nmcli con show vpn
sudo nmcli con mod vpn ipv4.method auto
sudo nmcli con up vpn

Gudanar da matakai biyu daga hook ɗin da ke fara VPN, ba daga harsashi mai hulɗa ba. Script da ke karanta adireshin, ƙara shi, ƙara hanyar kuma rubuta ƙimar a log yana mai da gyaran hannu mai maimaitawa ya zama mai maimaitawa, kuma log shine farkon abin da za a karanta idan prefix ya canza.

Ɗaure sunan kuma tabbatar da hanyar

Kernel na iya sake suna fuskar rarraba tsakanin eth1 da eth2 bayan canjin cibiyar sadarwa, kuma script da aka rubuta da suna yana gyara na'urar da ba daidai ba. Dokar udev da aka ɗaure da MAC tana ba fuskar alama mai tsayawa:

SUBSYSTEM=="net", ACTION=="add", ATTRS{address}=="3c:52:82:0a:1b:7c", NAME="vpn"

Sannan tabbatar da adireshi, hanya da ainihin haɗin TCP: ip -4 addr show dev vpn, ip route get 172.20.4.10 da haɗi zuwa tashar ciki da aka sani. Binciken hanya ya kamata ya ambaci na'urar vpn da adireshin tushen da ka ƙara.

Idan duk ukun sun wuce cikin rarraba kuma haɗin har yanzu ya kasa, fakitin yana barin WSL kuma ana watsar da shi a ɓangaren Windows. Duba wutar bango ta mai masaukin da tacewar abokin ciniki na VPN kafin ka canza script, domin wani gyaran hanya ba zai gyara fakitin da ya riga ya isa mai masaukin ba.