Tebur na hanya da ainihin bincike: inda zirga-zirgar VPN ke zuwa

Zubar da teburin hanya shine mafi ƙarancin amfani bincike wajen warware matsalolin VPN kuma shine wanda aka fi manna. Layuka arba'in na prefixes suna gaya muku abin da na'urar za ta iya yi, ba abin da ta yi don buƙatar da ta kasa ba. Hanyar da kuke so a zahiri ita ce bincike: idan an ba da wannan tushe da wannan manufa, wace ƙa'ida ta dace, wane tebur aka tuntuɓa, kuma wace interface da mataki na gaba suka fito. Fara daga manufa ɗaya da tushe ɗaya, sannan karanta tebur ɗin da wannan tambayar a hannu, kuma irin wannan fitar ta zama shaida maimakon hayaniya.

Tebur jeri ne na 'yan takara, ba shawara ba

Kowane shigarwa yana bayyana prefix da abin da za a yi da zirga-zirgar da ya dace da shi: aika shi zuwa interface, ba da shi ga mataki na gaba, ko jefa shi. Babu wani abu a cikin wannan jeri da aka jera bisa manufa, kuma shigarwar da ta fi kamanceceniya da mutum ba koyaushe ita ce da kernel ke zaɓa ba, domin zaɓin yana bin mafi tsayin dacewar prefix kuma, tsakanin prefixes daidai, ma'aunin.

Don haka mataki na farko shine tambayar kernel maimakon karanta jeri. Umarnin bincike yana amsa don manufa, kuma da hujjar tushe yana amsa don ainihin ma'aurata da haɗin da aka tura ko aka ɗaure zai yi amfani da su:

ip route get 198.51.100.10
ip route get 198.51.100.10 from 10.80.0.25
ip -6 route get 2001:db8:10::40

Kowane adireshi da ke sama misali ne na takardu. Maganar ita ce siffar amsa: interface, adireshin tushen da aka zaɓa, ƙofar, da tebur da shigarwar ta fito daga gare shi. Idan wannan fitar ba ta dace da interface da kuka yi tsammani ba, kun gano matsalar da umarni ɗaya, kuma babu adadin karanta cikakken tebur da zai gaya muku wane ɗan takara ya yi nasara.

Binciken yana bin ƙa'idoji, sannan teburori

A Linux shawarar tana matakai biyu. Ana auna ƙa'idojin manufofi bisa tsarin fifiko, kuma ƙa'idar farko da ta dace tana ambaton tebur da za a tuntuɓa; sannan wannan tebur yana yin mafi tsayin dacewar prefix. Ƙa'ida na iya dacewa bisa tushe, manufa, alamar wuta, interface ko haɗi, wanda shine dalilin da ya sa zubar da babban tebur zai iya zama cikakke daidai kuma gaba ɗaya mara mahimmanci ga fakitin da kuke bincike.

ip rule show
ip route show table all | head -40
ip route show table 100

Idan ƙa'ida ta tura zirga-zirga daga tafkin VPN ɗinku zuwa tebur 100, to tebur 100 shine wanda ke da mahimmanci, kuma babban tebur tarko ne. Wannan kuma shine hanyar da ke bayan tafiyar da hanya bisa tushe a kan na'urar tafiyar da hanya: manufa ɗaya na iya samun amsoshi biyu daban-daban dangane da inda fakitin ya fito, kuma kawai bincike da hujjar tushe ne ke bayyana wanda ya dace.

IPv6 yana da nasa ƙa'idoji da teburori. Tsarin da ke gudanar da iyalai biyu yana buƙatar bincike biyu, kuma amsar IPv4 mai aiki ba ta ce komai game da hanyar v6 da abokin ciniki mai matakai biyu zai iya so.

Abin da abokin ciniki VPN ke girka

Abokan ciniki yawanci ba sa maye gurbin hanyar da aka saba, domin yin hakan zai karya hanyar waje ta tunnel ɗin kanta. Suna girka wani abu mafi takamaiman wanda ke cin nasara ta tsawon prefix: biyu rabin tsoho da ke rufe 0.0.0.0/1 da 128.0.0.0/1 shine dabarar gargajiya, domin dukansu sun fi 0.0.0.0/0 tsayin prefix kuma tare suna rufe dukan sarari. Wasu suna girka takamaiman prefixes na sirri tare da ƙa'idar manufa, kuma wasu suna ƙara alama domin a kama zaɓaɓɓen zirga-zirga kawai.

Shi ya sa "VPN bai canza hanyar da na saba ba" ba shaida ba ce na gazawa. Duba abin da ya ƙara, kuma duba ko manufar da ake magana a kai tana cikin waɗannan prefixes:

ip route show | grep -E 'tun|wg|ppp|ipsec'
ip route get 10.20.30.40 from 10.80.0.25

Rabin hanyoyi biyu suna da sauƙin ɓacewa a cikin zubar domin ba su kama da tsoho. Tsarin split-tunnel da ya manta da haɗa prefix yana haifar da ainihin alamar da kuke farauta: aikace-aikacen da ya kamata ya yi amfani da tunnel ɗin yana warware kuma yana haɗi a cikin gida maimakon. Kwatanta prefixes da aka girka da manufofin da mai amfani yake buƙata a zahiri, ba da adireshin da kuka gwada kwatsam ba. Jerin split-tunnel da ke rufe uwar garken fayil amma ba mai warware ta ba yana haifar da haɗin da ke warware zuwa adireshin jama'a sannan ya kasa tabbatarwa, wanda ke kama da matsalar kalmar sirri kuma matsalar hanya ce.

Hanyar waje ita ma dole ta tsira

Tunnel ɗin kanta zirga-zirga ce. Fakitin da ke ɗauke da kayan da aka lulluɓe suna zuwa adireshin abokin gaba ta hanyar interface na zahiri, kuma wannan hanyar ba dole ba a sake tura ta cikin tunnel ɗin. Lokacin da hakan ta faru, kuna samun nasarar gazawa ta musamman inda tunnel ɗin ya tsaya sannan ya daina wuce zirga-zirga, domin jigilar tunnel ɗin yanzu tana cikin tunnel ɗin.

Duba adireshin abokin gaba kamar yadda kuka duba manufar ciki, kuma tabbatar cewa yana warware zuwa interface na zahiri maimakon tunnel ɗin:

ip route get 203.0.113.10
traceroute -n -m 5 203.0.113.10

Hanya mai maimaita, ƙa'idar manufa da ke kama abokin gaba, ko tsoho da abokin ciniki na cikakken tunnel ya maye gurbinsa sune dalilai uku da aka saba. Duk ukun ana iya gani a binciken waje, kuma babu ɗaya daga cikinsu da ake gani a zubar da babban tebur da aka ɗauka bayan faruwar lamarin.

Abin da fitarwar tafiyar da hanya ba za ta iya gaya muku ba

Daidaitaccen bincike yana nufin kernel zai tura fakitin zuwa wani wuri mai ma'ana. Ba yana nufin wutar ta ba da izini ba, manufar IPsec ta rufe shi, ƙa'idar NAT ta fassara shi, ko ɓangaren nesa yana da hanyar dawowa. Kowanne daga cikinsu mataki ne na gaba, kuma bayanan strongSwan game da turawa suna bayyana sarkar da fakitin dole ya bi ta a ɓangarorin biyu.

Har ila yau ba ya lissafin ɗaure a matakin aikace-aikace. Tsari na iya ɗaure da interface, saita alama, ko amfani da nasa mai warware kuma ya haɗu da sunan da ke warwarewa daban da abin da kuka gwada. Lokacin da bincike ya yi daidai kuma haɗin har yanzu yana kasa, tambaya ta gaba ita ce wane tsari ke yin sa da kuma ko wannan tsarin yana ganin tebur ɗaya da kuke gani.

Don haka ku riƙe binciken cikin tsari: ambaci manufa da tushe, gudanar da bincike, karanta kawai tebur da ƙa'idar da binciken ya ambata, sannan gwada mataki na gaba. Wannan jeri yana riƙe binciken tafiyar da hanya cikin mintuna kuma yana barin rikodin da wani zai iya bi, abin da tebur da aka manna ba zai taɓa yi ba.