Masaukin Tailscale ɗaya ba ya isa: mai sarrafa hanyar cibiyar sadarwa ko kumburin fita?

Ɗaya daga cikin masaukin Tailscale yana amsawa yayin da wani ya kasance cikin duhu, ko kuma komai yana aiki har sai shafukan yanar gizo na jama'a sun fara ba da rahoton ƙasar da ba daidai ba. Dukan korafe-korafen biyu suna zuwa a matsayin “Tailscale ya lalace”, kuma yawanci dukansu biyu shine ginin da bai dace ba wanda aka kunna don manufar da ba daidai ba. Mai sarrafa hanyar cibiyar sadarwa yana fallasa cibiyar sadarwa ta sirri ga tailnet, yayin da kumburin fita yana canza inda zirga-zirgar intanet ke fita. Da farko ka tsara manufar da ta kasa, sannan ka zaɓi rawar da ta rufe ta.

Fara daga manufar da ta kasa

Rubuta adireshin ko sunan da bai yi aiki ba, da kuma irin abin da yake. Na'ura a kan LAN ta sirri a bayan wani wuri, sabis a kan sashenka, da shafin yanar gizo na jama'a matsalolin hanya ne guda uku waɗanda ke raba abokin ciniki ɗaya kwatsam. Bambancin ba na kwalliya ba ne, domin gine-ginen biyu suna rufe nau'ikan manufofi daban-daban. Kunna ɗaya ba ya yin komai ga ɗayan, kuma wannan shine dukkan tushen ruɗani.

Ka lura da dangin adireshi kuma. Cibiyar sadarwar da aka sanar da ita a matsayin IPv4 kawai tana barin manufofin IPv6 a kan hanya ta gida, wanda ake karantawa a matsayin gazawa ta wani ɓangare har sai wani ya kwatanta allunan hanya biyu. Rubuta abin da kake tsammanin hanyar za ta kasance, domin gwajin daga baya ya sami abin da zai saɓa.

Isar da na'urar da ba ta taɓa gudanar da Tailscale ba

Mai sarrafa hanya yana sanar da takamaiman jeri ga tailnet, sannan yana isar da fakiti tsakanin tailnet da sashen sirri, don haka na'urori a wannan sashen ba sa buƙatar abokin ciniki nasu. Isar da NAS a ofis daga kwamfutar tafi-da-gidanka a gida shine ainihin wannan yanayin. Mai sarrafa hanya shine kaɗai memba na tailnet a wannan gefen.

tailscale up --advertise-routes=10.40.0.0/24 --advertise-exit-node=false
ip route get 10.40.0.55
tailscale status

Sanarwa ita ce kawai ta farko cikin sharuɗɗa uku. Dole ne a amince da hanyar don tailnet, dole abokin ciniki ya karɓi hanyoyin da aka sanar, kuma dole wata dokar shiga ta ba da izinin haɗin. Wannan sarkar ita ce dalilin da yasa alamar sau da yawa ita ce mai sarrafa hanya yana aiki kuma NAS ba ya. Mai sarrafa hanya da ake iya isa yana tabbatar da cewa ramin yana aiki; ba ya tabbatar da komai game da amincewa, karɓar abokin ciniki ko manufa.

Kowace daga cikin waɗannan gazawa uku tana kama da daban a cikin konsol ɗin gudanarwa. Bincika su a jere maimakon canza duka uku lokaci ɗaya, domin canji na biyu yana ɓoye wanda ya fi muhimmanci.

Aika zirga-zirgar jama'a ta wata na'ura

Kumburin fita yana tafiyar da zirga-zirgar intanet ɗinka ta gaba ɗaya ta kansa, wanda shine mafi kusancin daidaito da tsarin cikakken rami a wasu kayayyakin VPN. Shi ma yana buƙatar izini uku daban-daban: na'urar tana sanar da rawar, mai gudanarwa yana ba da izini, kuma abokin ciniki yana zaɓe ta. Shiga tailnet ba ya aika komai ta wani memba bisa ga tsoho.

tailscale up --advertise-exit-node
tailscale up --exit-node=100.101.102.103 --exit-node-allow-lan-access=false
tailscale status --json | grep -i exitnode

Zaɓin kumburin fita ba ya ba da damar shiga LAN ɗin kansa kai tsaye. Zaɓin shiga LAN yana wanzuwa daidai saboda waɗannan izini ne daban-daban, kuma barin shi a kashe shine mafi aminci na tsoho. Hanyoyi zuwa wasu albarkatun Tailscale suna riƙe nasu kulawa ko da kumburin fita yana aiki. Shi yasa sabis ɗin da aka shirya a cikin wannan sashe zai iya ci gaba da aiki yayin da hanyar intanet ta jama'a ta canza.

Kumburin fita yana kuma canza yadda intanet ke ganinka, ba kawai yadda saurin yake ji ba. Yi tsammanin wurin yanki, katalojin yawo da iyakokin gudu za su bi adireshin fitar ba naka ba.

Karanta rabo uku lokacin da masauki ɗaya kawai ya kasa

Na'urar buga takardu a sashenka, NAS a bayan mai sarrafa hanyar cibiyar sadarwa mai nisa, da shafin jama'a manufofi uku ne da hanyoyi daban-daban uku. Idan daidai ɗaya daga cikinsu ya kasa, aibi na hanyar wannan manufar ne ba na abokin ciniki gaba ɗaya ba. Don na'urar buga takardu ta gida yayin amfani da kumburin fita, saitin shiga LAN shine amsar da aka saba. Don NAS mai nisa, bincika jerin da aka sanar, yanayin amincewarsa da dokokin shiga a wannan jeren. Don shafin jama'a, bincika wane kumburin fita aka zaɓa da ko abokin ciniki ya karɓe shi da gaske.

Idan adireshin yana aiki amma sunan ba ya, daina kallon hanyoyi. DNS na sirri ana saita shi daban, kuma sunan da ya warware zuwa adireshin da ba daidai ba yana kasawa a yanayin da yayi kama da hanyar da aka toshe. Gwada adireshin farko, sannan sunan, kuma sakamakon biyu zai gaya maka wane Layer za a buɗe.

Tabbatar da hanyar da kake tsammanin ka gina

Tabbatarwa shine binciken hanya da duba adireshi, ba ping ba. Binciken yana gaya maka wace ma'auni manufar za ta yi amfani da ita, kuma duba adireshi yana gaya maka a wane jeri manufar ke zaune a gaske. Ping da ya yi nasara yana gaya maka masaukin yana raye a wani wuri, wanda ba shine tambaya ba. Gudanar da duka biyu kafin ka canza kowane tsari.

ip route get 10.40.0.55
ip -6 route show default
tailscale ping 10.40.0.55

Haɗa wannan da ganin tailnet ɗin kansa, wanda ke nuna ko takwaransa yana da alaƙa kai tsaye ko ta hanyar wakilai. Hanyar wakilai tana aiki har yanzu, kuma wannan yana bayyana korafe-korafen jinkiri waɗanda ba su da wata alaƙa da hanyar da kake gyara. takardun mai sarrafa hanyar cibiyar sadarwa yana rufe matakin amincewa idan ba a saba ba. Sannan rubuta wane gini ke rufe wace manufa a cikin cibiyar sadarwarka, domin mutumin da zai ƙara wuri zai yi tambaya ɗaya.