SSH ba ya saurare bayan sake kunnawa: adireshin VPN ya makara

Kuna ɗaure SSH da adireshin rami yayin saitin, yana aiki, kuma bayan sake kunnawa na gaba babu wanda zai iya shiga har sai wani ya sake kunna sabis ɗin da hannu. Takardun shiga ba su ne matsalar ba. Daemon ɗin ya nemi kernel adireshin da bai wanzu ba tukuna, ɗaurewar ta kasa, kuma saƙon ya wuce a cikin log ɗin tashi. Abin da ake gani kamar matsalar tabbatarwa ita ce matsalar tsarin farawa.

Abin da kuskuren ɗaurewa yake faɗa da gaske

Dole ne a ƙirƙiri socket ɗin sauraro a kan adireshin da yake wanzu a wannan lokacin. Lokacin da ƙofar VPN ta bayyana daga baya, daemon ɗin da aka saita don ɗaurewa da adireshin rami kawai ba shi da abin da zai manne da shi. Tsarin yana ci gaba da inganci a tsarin rubutu; yanayin bai shirya ba kawai. Sabis ɗin da ke gudana tun daga farawa da hannu ba ya taɓa bin hanyar tashi, wanda shine dalilin da ya sa aikin ya bayyana kawai a sake kunnawa na gaba. Kwatanta tambarin lokacin gazawar ɗaurewa da tambarin lokacin rabon adireshin, kuma tsarin zai bayyana.

Ingancin tsari da shirye-shiryen lokacin aiki abubuwa ne daban-daban. Gwada duka biyu, domin ɗayansu yana kasa ba tare da faɗin komai ba.

Wace tsari ce ta mallaki tashar

Daemon ɗin ba koyaushe ne ɓangaren da ke ƙirƙirar mai sauraro ba. Kunna socket yana motsa wannan alhakin zuwa wani unit, sannan sake kunna daemon ɗin ba ya canza komai.

ss -ltnp 'sport = :22'
systemctl cat ssh.socket

Jerin socket yana nuna wace tsari ce ta riƙe tashar kuma a wace adireshi, yayin da fitar da unit ɗin ke nuna ko akwai unit ɗin socket kwata-kwata. Lokacin da kunna ke aiki, adireshin na unit ɗin socket ne kuma fayil ɗin daemon ba shi da iko. Karanta log ɗin tashi don ainihin kuskuren ɗaurewa maimakon yin hasashe daga alamar. Rashin unit ɗin socket yana nufin tsarin gargajiya kawai, inda daemon ke ɗaurewa kai tsaye.

Sanya shirye-shirye a bayyane, ba barci ba

Jinkiri mai tsayi hasashe ne da ke ɗaukar kayan aiki mai sauri da cibiyoyin sadarwa a hankali iri ɗaya. Bayyana dogaro maimakon: jira adireshin, sannan fara.

ip -4 addr show dev tun0
systemctl edit ssh.service

Ƙara umarnin ExecStartPre wanda ke maimaitawa har adireshin ya bayyana, ko tsara unit ɗin bayan takamaiman manufar cibiyar sadarwa da ke mallakar ƙofar. Duk hanyoyin biyu suna rubuta dogaro a wani wuri da mai gudanarwa na gaba zai iya karantawa. Madauki yana buƙatar lokacin ƙarewa, in ba haka ba VPN ɗin da ya kasa yana barin unit ɗin da ke rataye maimakon bayar da rahoton aiki. Sannan tabbatar da cewa daemon ɗin yana ɗaure adireshin rami yayin da ƙofar talakawa ke ƙarƙashin dokokin tacewar ku.

Gwada tashi mai tsabta da sake haɗawa

Sake kunnawa da hannu bayan komai yana kan layi ba ya tabbatar da komai game da tsarin tashi. Sake kunna na'urar tare da ramin da aka saita don tashi kai tsaye kuma kalli ko mai sauraron zai bayyana ba tare da tsangwama ba.

systemctl status ssh.service
ss -ltnp 'sport = :22'

Sannan sauke kuma sake kafa ramin, domin sake haɗawa na iya canza adireshin kuma ɗaurewar da aka yi da hannu ba za ta bi shi ba. Riƙe hanyar dawo da ta dabam yayin gwaji, don kada mummunan canjin tsari ya kulle ku daga mai masaukin.

Ma'aunin nasara shi ne mai sauraro da ke bayyana ƙarƙashin dogaronsa da aka rubuta, ba wanda wani ya tuna ya sake kunna ba.