Manhajoji biyu na VPN lokaci ɗaya: wane kill switch ne yake aiki da gaske?
Na biyu na VPN ba ya gādo kill switch na farko. Sharuɗɗa uku ne ke ƙayyade wane tsari ne yake aiki, da yadda za ka tabbatar da naka.
Manhajoji biyu na VPN na iya aiki tare, amma kill switch ɗinsu ba ya haɗuwa zuwa tsari ɗaya. Kowanne yana saka dokoki don raminsa, kuma babu wanda ya san akwai ɗayan. Na ci karo da wannan da manhajar aiki da aka haɗa da farko: manhajar ta biyu ba ta iya kammala musafaha, ta zauna a „Connecting“ minti goma, kuma ramin farko ya ɗauki komai a shiru. Ko manhajar ta biyu za ta sami kariya ya dogara da sharuɗɗa uku, ba a kan ko gumakan biyu suna cewa An haɗa ba.
Abin da kill switch yake iyakancewa da shi a zahiri
Babu tuta ɗaya ta kill switch a cikin tsarin aiki. Manhajar da ke tallata ɗaya tana saka jerin dokoki: jefar da duk abin da ba ya fita ta ramina, kuma sau da yawa fail closed idan ramin ya ɓace. A Linux yawanci sarkar nftables ko iptables ce, a Windows jerin masu tacewa na Windows Filtering Platform, a Android da iOS kuma hanyar hidimar ramin da kanta tare da saitin tsarin da ke hana haɗi ba tare da VPN ba. Jagorar VPN ta Android ta bayyana wannan tsarin hidima idan kana son ra'ayin dandamali.
Iyaka ita ce sashin da ke da muhimmanci. Doka kamar „ba da izini kawai ga fakiti a kan hanyar fita wg0“ ba ta damu ko akwai rami na biyu ba. Idan wani manhaja ya ɗaga wg1, dokokin manhajar farko suna ɗaukar waɗannan fakiti a matsayin zirga-zirga ta yau da kullum: yawanci ana jefar da su, wani lokaci ana barin su. Ko ta yaya, manhajar farko ce ke yanke shawara, kuma ba ta san akwai manhaja ta biyu da ke jira ba.
Sharuɗɗa uku da ke ƙayyade wanda za a rufe
Ba ka bukatar ka lissafa kowace haɗuwa. Tambayoyi uku suna warware shi cikin mintuna kaɗan.
- Shin dandamali yana ba da izinin rami na biyu kwata-kwata? Yawancin wayoyin Android da iPhone suna karɓar hidimar VPN guda ɗaya kawai a kowane bayanin mai amfani, don haka manhajar ta biyu ba ta taɓa samun rami kuma ba ta taɓa tilasta komai. Kana samun tsari ɗaya kawai, daga manhajar da ta ci gurbin.
- Wanne tsari ne ya mallaki hanyar farko? Windows, macOS da Linux suna ɗaukar ramuka biyu cikin sauƙi. Hanyar farko ta manhajar da ta saita ta ƙarshe ko mafi kyawun ma'auni ce, ɗayan kuma yana haɗe amma ba ya aiki. A Linux, yanayin hanyar farko na wg-quick yana amfani da tuƙi bisa manufa tare da tebur mai zaman kansa da dokar fwmark, don haka rami na biyu na wg-quick yana ƙara dokar gasa maimakon maye gurbin ta farko.
- Shin manhajar ta biyu na iya isa ga sabar nata? Idan kill switch na farko hana ne bisa tsohuwar doka, wurin ƙarshe na waje na manhajar ta biyu wani makoma ne kawai da aka jefar. Yana sake gwadawa a shiru kuma ba ya taɓa ba da rahoton kuskure.
Taƙaitaccen sigar, don zaren tallafi:
| Setup | What you actually get |
|---|---|
| Second client cannot hold a tunnel | One active policy; the other app only reports that it is waiting |
| Both tunnels up, second took the default route | The first kill switch blocks traffic it never meant to touch; the connection dies, or leaks if its rules are broad |
| First kill switch allows only its own endpoint and interface | Second client never connects; first tunnel unaffected |
| Both up, DNS written by whichever client ran last | Name resolution breaks for one side when either tunnel drops |
Biyu daga cikin waɗannan layukan suna kama da juna daga gunkin da ke cikin tiren tsarin, shi ya sa gunkin shi ne mafi munin hujja da ake da ita a nan.
Me ke lalacewa da farko, kuma yadda yake kama
Manhajar da ta makale a „Connecting“ yayin da ɗayan ke cikin lafiya kusan kullum yunwar wurin ƙarshe ce: kill switch ɗin da ke aiki yana jefar da musafahar manhajar ta biyu zuwa sabarta. Tabbatar da hakan cikin arha ta hanyar dakatar da dokokin toshewa na manhajar farko na gwada ɗaya. Idan ta biyu ta haɗa nan take, an amsa tambayar.
DNS ita ce gazawa ta biyu. Manhajoji suna saita tsarin mai warwarewa don hanyarsu, wasu kuma suna rubuta kan jerin duniya gaba ɗaya. Da duka ramukan a buɗe, tambayoyi na iya fita daga gefe ɗaya yayin da mai warwarewar na gefe ɗaya ne. Cire kowace manhaja kuma wadda ta tsira tana riƙe da sabar suna da ba za a iya isa ba: shafuka suna tsayawa minti ɗaya sannan suna warwarewa kuma, yayin da VPN ke nuna an haɗa.
Na uku shine rawan hanyoyi. Sake haɗawa yana sake tsara hanyar farko, kuma kill switch ɗin da ke ɗaure da hanya ba ya bin ta. Zirga-zirgar da ke cikin ramin da ya wuce yanzu ta dace da dokar jefarwa, abin da a wajen mai amfani ake karanta shi a matsayin VPN da ke daina aiki ba zato.
Tabbatar da wane tsari ne yake aiki a zahiri
Yi wannan da zirga-zirga marar lahani, ba da abin da za ka ji rashinsa ba.
A Linux tambayi kernel wanene ya ci nasara da abin da katangar wuta ta ɗaure da shi. ip -4 route show default yana ambaton ramin da ke da hanyar fita. ip rule show yana nuna ko tuƙi bisa manufa yana cikin wasa. sudo nft list ruleset | grep -n oifname yana nuna ko jefarwa tana ɗaure da sunan hanya, da alama, ko dukan sarkar fita.
A Windows wannan labarin yana cikin ma'aunin hanya da jerin masu tacewa: Get-NetRoute -DestinationPrefix "0.0.0.0/0" | Sort-Object RouteMetric da Get-NetFirewallRule -Enabled True | Where-Object DisplayName -match "VPN". A macOS, netstat -rn -f inet | head -5 da scutil --dns | head -20.
Sannan yi matakin da mutane ke watsi: dakatar da ramin da gangan ka tabbatar zirga-zirgar da kake tsammani zai gaza ya gaza da gaske. Gunkin da ke haɗe yanayin fuska ne, ba tilastawa ba.
Yaushe manhajoji biyu suka zama ƙirar da ba ta dace ba
Idan buƙata ɗaya da ke bayan manhajar ta biyu ita ce ƙarin kariya, cire ta. Manufofin toshewa biyu masu mu'amala ba su da sauƙin tsinkaya fiye da ɗaya, kuma kowace sake haɗawa wata dama ce ta faɗawa cikin yanayin da babu mai sayarwa da ke gwada shi.
Idan kana buƙatar haɗa sarƙa da gaske, misali ƙofar kamfani da ake samu ta hanyar tsalle na kasuwanci, zaɓi ƙira da ke da wurin tilastawa ɗaya. Yawanci wannan yana nufin na'urar tuƙi ɗaya ko manhaja ɗaya da ke goyon bayan sarƙar, ba manhajoji biyu na kwamfutar tebur waɗanda ke fafatawa don hanyar farko ɗaya. A na'urar da ake sarrafawa, riƙe manhajar da aka amince da ita kuma ɗauki duk wani abu a matsayin waje da iyaka, duk abin da yake nunawa a tire.
Jerin dubawa kafin ka riƙe duka biyu
Bi jerin a jere; abu na farko da ya gaza shi ne abin da za a gyara.
- Tabbatar da manhaja ɗaya ce kawai ta mallaki hanyar farko da mai warwarewa.
- Idan kana son manhajar ta biyu ta kasance a buɗe, ba da izini a fili ga wurin ƙarshe na sabarta kuma sake dubawa bayan kowane sabuntawar manhaja.
- Rubuta sakamakon da ake tsammani idan ɗaya daga cikin ramukan ya faɗi, sannan gwada wannan yanayi.
- Duba hanyar gazawa bayan sake kunnawa, lokacin da jerin farawa ya bambanta.
- A bayanin da ake sarrafawa, tsaya ka tambayi mai shi kafin ƙara wani abu.
Idan mataki na uku ya gaza, amsar gaskiya ita ce manhaja ɗaya ce kawai ke ba ka tsari. Yanke shawarar wadda ka amince da ita ka saki ɗayan.