Mayar da kewayon IP daga farko zuwa ƙarshe zuwa hanyoyin VPN daidai

Wani yana ba ka adireshin farko da na ƙarshe kuma yana neman hanyar VPN. Matakin da ke jaraba shi ne zaɓar mafi guntuwar prefix da ta ƙunshi ƙarshen biyu, kuma wannan matakin yana ƙara wuraren da babu wanda ya tambaya a hankali. Tubalan CIDR koyaushe yana da girma na ikon biyu da adireshin farawa da ya daidaita da shi, don haka tazara ta sabani tana buƙatar fiye da ɗaya. Bi tazara, raba ta daidai, sannan duba adireshin da ke wajenta kai tsaye.

Fara da tazara, ba prefix ba

Rubuta adireshin farko da adireshin ƙarshe kafin ka rubuta wani abu. Ma’auratan su ne buƙatar; prefix wata hanya ce kawai ta bayyana ta, wani lokacin kuma ba daidai ba. Lambobi biyu kuma sun fi sauƙin dubawa fiye da maski.

Tazara da ta daidaita tana naɗewa zuwa tubali ɗaya. Wadda ba ta daidaita tana wargajewa zuwa da yawa, kuma wargajewar daidai ce ba kiyasi ba. Abin da bai kamata ka yi ba shi ne ka zagaye waje ka ce ya isa, domin ƙarin adireshin suna samun duk manufar da hanyar ke ɗauka.

Duk kwatancin kuskure biyu suna da muhimmanci. Ga hanyar shiga cikin tunnel, ana jawo ƙarin adireshi cikin VPN. Ga keɓewar wucewa, ƙarin adireshi suna tsallake ta. Babu ɗaya daga cikin sakamakon da ke bayyana a teburin hanya wanda ke nuna prefix ɗin da ka girka kawai.

Hali na farko: tazara ta zo daidai

Ɗauki 198.51.100.64 zuwa 198.51.100.127. Adireshin farko ya daidaita a kan iyakar adireshi 64 kuma tazara tana daidai adireshi 64, don haka /26 guda ɗaya yana kwatanta ta ba tare da saura ba.

Wannan shi ne hali mai sauƙi kuma ya cancanci gane shi, domin yana nufin wataƙila wanda yake tunani da prefix ya rubuta buƙatar. Har ila yau yana nufin dubawa gajera ce: tabbatar girman ikon biyu ne kuma farawa ninki na wannan girman.

Kewayon takardu suna ba da misalai masu kyau domin babu wanda ya mallake su. Kada ka girka waɗannan adireshin a kan tunnel na gaske kuma kada ka ɗauka cewa kewayon da aka ba ka wurin takardu ne kawai domin yana da kamanni baƙon abu.

Hali na biyu: ba haka ba ne, don haka raba shi

Yanzu ɗauki 198.51.100.100 zuwa 198.51.100.107. Waɗannan adireshi takwas ne, wanda ikon biyu ne, amma 100 ba ninki na takwas ba ne. Tubali ɗaya na wannan girman ba zai iya farawa a can ba, don haka dole a rufe tazara da fiye da ɗaya.

Daidaitaccen rufi tubalan /30 biyu ne: 198.51.100.100/30 yana rufe 100 zuwa 103, kuma 198.51.100.104/30 yana rufe 104 zuwa 107. Adireshi takwas gaba ɗaya, babu abin da ke wajen tazara, kuma wargajewar ta musamman ce ga wata tazara.

python3 -c "from ipaddress import ip_address, summarize_address_range as s; print(*s(ip_address('198.51.100.100'), ip_address('198.51.100.107')), sep='\n')"

Aikin ɗakin karatu na yau da kullum yana yin lissafin a madadinka, kuma takardun ipaddress sun bayyana abin da yake mayarwa. Abin da ba ya yi shi ne zaɓar ƙofa, yanke shawara wanda ya mallaki adireshin, ko ba da dama ga kowace sabis da ke bayansu.

Auna abin da faffadan prefix zai kama

Kafin ka karɓi gajeriyar hanya, lissafta abin da take ci. /28 da ke farawa a 198.51.100.96 yana rufe 96 zuwa 111, wato adireshi goma sha shida maimakon takwas. Ƙarin takwas ɗin su ne 96 zuwa 99 da 108 zuwa 111, kuma kowanne daga cikinsu zai gaji hanyar.

python3 -c "from ipaddress import ip_network as n; w=set(n('198.51.100.96/28')); t=set(n('198.51.100.100/30'))|set(n('198.51.100.104/30')); print(len(w), len(t), sorted(w-t))"

Ƙarin wurare takwas lamba ce ta zahiri da za ka saka a buƙatar canji. Ita ce kuma lambar da ke yanke shawara ko gajeriyar hanyar abin karɓa ce, kuma wannan tambaya ce ta manufa ba ta lissafi ba.

Ka raba lissafi da ganowa. Tazara da mai gudanar da cibiyar sadarwa ya bayar ana mai da ita daidai. Amsar DNS ɗaya daga sabis mai canzawa ba ta tabbatar da cikakken ko dindindin kewayon sabis ɗin, kuma sunaye marasa alaƙa na iya raba adireshi ɗaya.

Girka daidaitaccen saitin kuma tabbatar da gefuna

Ba da kowane prefix da ya samu ga wanda ya mallaki tsarin VPN kuma bari ya girka shi ta hanyar da aka goyi baya. Idan buƙatar tana son shigarwa biyu, ka riƙe shigarwa biyu maimakon faɗaɗa ɗaya don gajeratar da fom.

sudo ip route add 198.51.100.100/30 via 10.90.0.1 dev tun0
sudo ip route add 198.51.100.104/30 via 10.90.0.1 dev tun0
ip route get 198.51.100.101
ip route get 198.51.100.97

Umarni biyu na ƙarshe su ne waɗanda mutane ke tsallakawa. Adireshin ciki na farko ya kamata ya bi sabuwar hanyar, kuma adireshin da ke wajen tazara kai tsaye bai kamata ba. Idan duka biyu suna tafiya hanya ɗaya, an faɗaɗa tazara a wani wuri tsakanin buƙata da tsari.

Yi rikodin adireshin farko, adireshin ƙarshe da prefix ɗin da ke bayyana su. Mutum na gaba da zai duba ƙa’idar zai iya gwada buƙatar da tsarin ba tare da sake lissafi ba, kuma bambancin tsakanin hanya daidai da hanya mai sauƙi yana nan a bayyane.