Yadda za a gane madaukin hanya da jujjuyar hanya a shafukan VPN
Madaukin hanya da jujjuyar hanya suna haifar da asara iri ɗaya mai tsayawa. Bincike uku a ƙofofin sadarwa sun bambanta su kafin ka canza wani abu.
Shafuka biyu, rami ɗaya da wani tsohon layi na nesa wanda ke amsawa na ɗan lokaci sannan ya yi tsit. Hali na farko shi ne a kira shi madaukin hanya, kuma wani lokaci haka ne daidai. Amma madauki da jujjuyar hanya suna haifar da gunaguni ɗaya, kuma suna buƙatar gyara daban-daban: ɗayan shi ne shawarar turawa da ba ta ƙarewa, ɗayan kuma tsohon layi ne da ke ci gaba da barin tebur. Abubuwan lura uku sun raba su, kuma za ka iya tattara dukkan ukun daga layin umarni na ƙofar kafin ka taɓa matattara ko sake kunna rami.
Ana yanke shawarar madauki tsayi da tsayi. Shafi A na zaɓar B a matsayin tsayi na gaba don makoma, B na zaɓar A don wannan makoma, kuma fakitin yana ƙarewa akan TTL bayan tafiye-tafiye biyu. Jujjuyar kuwa ana yanke ta ne da ka'idar hanya: ana janye tsohon layin, a sake saka shi ko a maye gurbinsa da wani tsayi na gaba, don haka wasu fakitin ba su da hanya kwata-kwata yayin da wasu ke bin wata mai kyau sarai.
Binciken uku da ke warware tambayar
Ba kwa buƙatar ɗaukar fakitin don yanke shawara ta farko. Kuna buƙatar yanayin tsohon layin a ɓangarorin biyu, tsayin gaba da kowane ɓangare ke zaɓa, da adadin tsayuna wanda ko dai yana maimaitawa ko a'a. Idan tsohon layin ya kasance an saka shi tare da wannan tsayin gaba yayin da zirga-zirga ke gazawa, madaukin yana rayuwa a hanyar turawa. Idan tsohon layin ya ɓace sannan ya dawo, kuskuren yana sama da turawa kuma gyaran ya shafi ka'idar hanya, ba hanya mai tsayawa ba.
| Observation | Routing loop | Route flapping |
|---|---|---|
| Prefix in the table | Installed, same next hop throughout | Withdrawn and reinstalled, or next hop alternates |
| Hop count | Reaches zero at the same two gateways | Expires only while the prefix is missing |
| Failure shape | Consistent loss for that prefix from every source | Bursts, often after a link or peer event |
| Where the fix belongs | The site that owns the prefix, plus filters on the transit path | Advertisement, hold timers, or the flapping link |
Gargaɗi ɗaya kafin ka fara. Idan kana karanta wannan ta cikin ramin da ke yin madauki, zamanka yana mutuwa a lokacin da ka canza hanya. Buɗe na'urar umarni ko hanyar gudanarwa da ba ta dogara da tsohon layin da kake shirin gyara ba.
Bincike na ɗaya: shin tsohon layin yana tsaye ko yana jujjuyawa
Tambayi ƙwaƙwalwar cibiyar abin da ta saka, ba abin da fayil ɗin saiti ya yi alkawari ba. A ƙofar Linux, ip route get 10.20.30.40 yana gudanar da bincike ɗaya da hanyar turawa ke gudanarwa, ciki har da teburin manufofi, yayin da ip route show 10.20.30.0/24 ke nuna shigarwar kanta. ip monitor route yana watsa kowane canji a lokacin da ya faru, wanda ita ce hanya mafi sauri ta kallon tsohon layi yana zuwa da tafiya.
A na'urar da ke gudanar da FRR ko BIRD, teburin turawa ba shi ne abin sha'awa ba. show ip bgp 10.20.30.0/24 yana mayar da hanyar da aka zaɓa da lokacin aikinta; lokacin aiki da ke sake saitawa kowane 'yan mintuna jujjuyawa ce da za ka iya ambata, ba madauki ba. show ip bgp summary yana nuna yanayin maƙwabta da adadin tsoffin layuka, don haka maƙwabcin da ke ci gaba da faɗuwa yana ɗauke da laifi daga hanyar turawa.
Rubuta amsar kafin ka canza wani abu. Tsayawa minti goma yayin da ping ya gaza, da ɓacewa sau huɗu cikin minti goma, suna kaiwa ga matakai daban-daban na gaba. Na biyu yana mai da duk ka'idar hanya mai tsayawa marar muhimmanci.
Bincike na biyu: shin tsayin gaba yana komawa cikin ramin shigowa
Madauki yana buƙatar ƙofofi biyu su yarda. A shafin da ke karɓar fakitin, duba hanyar da fakitin zai bi don fita: ip route get 10.20.30.40 from 10.10.5.20 tare da ainihin adireshin tushe, domin ka'idar manufa na iya amsawa daban da babban tebur. Sannan sake maimaita binciken a shafin da ya aika shi. Idan kowane ɓangare ya zaɓi ɗayan a matsayin tsayi na gaba don wannan tsohon layi, an tabbatar da madaukin kuma babu ɗaukar da zai ƙara wani abu.
Dalilin kusan koyaushe shi ne sanarwar da bai kamata ta ratsa ramin ba. Hanyar da aka saba da ita da aka sake rarrabawa cikin ramin, haɗaɗɗiyar da ke rufe nasa ƙaramin cibiyar sadarwar shafin nesa, ko hanya mai tsayawa da ke nuna maƙwabcin don kariya — duk suna haifar da wannan tsayin gaba na juna. Ramin na iya kasancewa an kafa shi gaba ɗaya kuma har yanzu yana ɗaukar zirga-zirga cikin da'ira; bayanin turawa na strongSwan sun bayyana ɓangaren hanya na wannan buƙata.
WireGuard ya cancanci bayaninsa, domin babu sanarwa da za a zargi. wg show yana lissafta AllowedIPs na kowane maƙwabci, kuma ƙwaƙwalwar cibiyar tana karɓar makoma ga maƙwabci ne kawai idan ta faɗi cikin wannan kewayon. Madauki a can shi ne kewayon AllowedIPs da ke haɗuwa ko hanya mai tsayawa da ke komawa ta hanyar haɗin sadarwa, don haka gyaran yana rayuwa a waɗannan wurare biyu kawai.
Bincike na uku: karanta adadin tsayuna, ba taurari ba
traceroute -n -I 10.20.30.40 da mtr -n -r -c 20 10.20.30.40 duk suna nuna hanyar, kuma yanayin ICMP yakan tsira daga tacewa da ke cinye binciken UDP. Madauki yana kama da ɗan gajeren jerin maimaitawa na adiresoshin ƙofa guda biyu tare da TTL yana hawa kowane lokaci. Faɗuwa kuma tana kama da taurari bayan ƙofar ƙarshe da ta amsa, kuma tsayi ɗaya marar magana ba hujja ba ce ga komai.
Lokacin da hanyar ba ta bayyana ba, karanta TTL a waya. tcpdump -ni any -vv icmp a ƙofofin biyu yana nuna TTL na kowane fakitin da adireshin tushe na kowace amsar wucewar lokaci. Idan fakitin ya isa shafin nesa da TTL ƙasa da adadin tsayunan da hanya za ta iya ɗauka, wani abu yana ƙara tsayuna da traceroute ba ya nuna maka, kuma hakan yana faruwa lokacin da katangar wuta ta wani shafi ke amsa bincike a madadin wani.
Gyara mai tsohon layin, sannan tabbatar da ɓangarorin biyu
Yanke shawara wane shafi ne ke haifar da makoma da waɗanne hanyoyin wucewa aka yarda, sannan canza sanarwa ko hanya mai tsayawa a wurin wannan mai shi. Gyara shafin da ke karɓa abu ne mai ruɗani kuma yawanci kuskure ne: yana ɓoye madaukin ga tsohon layi ɗaya kuma yana barin mummunar sanarwa a wurinta ga na gaba. Alamomin hanya, jerin rarrabawa da ka'idodin split-horizon suna nan don dakatar da wannan a tushe, kuma sun fi matattara da ke dacewa da tsohon layi ɗaya arha.
Bayan canjin, tabbatar da tafiya da dawowa daban, domin ana iya maye gurbin madauki da baƙin rami ba tare da wani bayyanannen cigaba a alamar ba. Gudanar da ip route get daga ɓangarorin biyu, aika zirga-zirga daga na'urar da ba ita ce ƙofar ba, kuma bar ip monitor route yana aiki aƙalla lokacin riƙe ɗaya domin kada a ɗauki jujjuyawa a matsayin gyara.
Kafin ka canza wani abu, tabbatar da waɗannan abubuwa biyar: tsohon layin yana tsaye ko yana jujjuyawa, tsayin gaba a ɓangarorin biyu yana nuni ga rami, adadin tsayuna yana maimaitawa ko a'a, shafi ɗaya ne ya mallaki tsohon layin, kuma kana da hanyar gudanarwa da za ta jimre da canjin. Idan ɗaya daga cikin biyar ba a sani ba, sauran huɗun zato ne.