VPN na katsewa a tazara ɗaya? Daidaita lokacin
Katsewa a ƙayyadadden tazara tambari ne. Kwatanta sabunta makullin tunnel, lokacin rashin aiki na NAT, hayar DHCP da iyakar asusu kafin ka canza wani abu.
Tunnel da ke mutuwa kowane minti goma sha biyar, ko kowace awa a minti ɗaya, yana gaya maka cewa wani lokaci ya ƙare, ba cewa hanyar sadarwa ba ta da kwanciyar hankali ba. Matakin da ya dace shi ne ka rubuta tazara ka kwatanta ta da lokutan huɗu da ke haifar da wannan yanayin. Canza lokutan jira kafin wannan kwatancen yawanci yana motsa kuskuren ba tare da bayyana shi ba, wanda ke sa na gaba ya fi na farko wuyar karantawa. Auna yana ɗaukar minti goma kuma yana maye gurbin sati ɗaya na hasashe.
Maida tazara zuwa lamba
Tattara abubuwan da suka faru biyar ko shida ka lissafa rata tsakaninsu, ba rata daga farkon ranar ba. Katsewa a 09:12, 10:12 da 11:12 iyakar awa ce; katsewa a 09:12, 09:27 da 09:42 minti goma sha biyar ne daga haɗin da ya yi nasara na ƙarshe. Ka zagaye sakamakon zuwa mafi dacewa lokaci, ba zuwa mafi kusa minti ba.
Rubuta lokuta biyu ga kowane abin da ya faru: lokacin da zirga-zirga ta ƙarshe ta motsa da lokacin da abokin ciniki ya ba da rahoton katsewar. Su kan bambanta lokacin da tunnel ya mutu a shiru kuma abokin ciniki ya lura da shi ne kawai a aika na gaba, kuma wannan bambancin shi ne ke raba lokacin rashin aiki da tsayayyen kuskure. Abokin ciniki da ya lura da jinkiri yana ƙara girman taga rashin aikin da kake aunawa.
Lura ko sake haɗawa ta atomatik ne. Abokin ciniki da ke sake haɗawa cikin daƙiƙa yana barin tazara a bayyane a cikin log kuma a wajen rahoton mai amfani, shi ya sa ake kwatanta waɗannan kuskuren a matsayin lokaci-lokaci maimakon na tsari. Hakanan yana ɓoye abin da ya faru daga mutumin da ke amfani da kwamfutar tafi-da-gidanka.
Lokuta huɗu da suka yi kama
Kusan kowace faɗuwar tunnel mai maimaitawa ta fito daga ɗaya daga cikin waɗannan: sabunta makullin yarjejeniya, ƙarewar taswirar rashin aiki, abin da ya faru na DHCP ko mu'amala, ko manufar asusu. Sun bambanta a kan ko zirga-zirga tana gudana da abin da log ke faɗa a iyaka.
Sa hannun da ke ƙasa sun cancanci koyo, domin suna ba ka damar ƙin bayani uku daga layin log ɗaya:
| Timer | Typical trigger | What the log shows at the boundary |
|---|---|---|
| Protocol rekey | Traffic present, fixed interval | Negotiation lines, sometimes a failure |
| NAT or firewall idle | No traffic for minutes | Silence, then a timeout on send |
| DHCP lease or link change | Half the lease, or a radio event | Address or interface churn |
| Account session limit | Wall-clock hours since login | Clean disconnect, server-side reason |
Layi na farko wata hanya ce ta tsaro da ke yin aikinta, na biyun kuma na'urar tsakiya ce da ke manta yanayi. Rikice su yana kai ko dai ga raunana sabuntawa ko ga bin ka'idar wutar bango da ba a taɓa shiga ba.
Aiki da rashin aiki yana gaya maka wane rabi
Yi kwatancen sarrafawa da zirga-zirga mai ci gaba, kamar dogon rafi zuwa mai masauki a cikin tunnel, ka duba ko tazara ta canza. Idan katsewar ta ɓace yayin da bayanai ke gudana, lokacin ya dogara ne akan rashin aiki.
Idan ya jimre zirga-zirga mai ci gaba, dalilin na sabuntawa ne, haya, ko manufa. Wannan gwajin ɗaya yana cire rabin yan takara cikin kusan awa ɗaya na lura, kuma ba ya kashe komai sai hankali.
Ka bar hanyar sadarwar shiga ba ta canza yayin gwajin. Canzawa tsakanin Wi-Fi da Ethernet a tsakiyar kwatancen yana kawo daidai abin da ya faru na mu'amala da kake ƙoƙarin bambanta da lokaci.
Daidaita layin log da iyakar
Karanta log ɗin abokin ciniki da uwar garke a kewayen lokacin da aka rubuta, ba dukan fayil ɗin ba. Sabuntawa tana nuna tattaunawa; ƙarewar rashin aiki ba ta nuna komai har sai fakiti na gaba; canjin haya yana nuna aikin adireshi; iyakar manufa yawanci tana nuna tsayayyen cirewar gudanarwa.
Waɗannan umarnin suna jawo taga da ta dace daga kowace tushe:
grep -iE "reneg|TLS Error|Inactivity" /var/log/openvpn.log | tail -20
journalctl -u NetworkManager --since "-90 min" | grep -iE "dhcp|link"
wg showIdan tushe uku sun yarda a kan hatimin lokaci, ka san mai lokacin. Idan log ɗin abokin ciniki kaɗai ke da wani abu, watakila uwar garke ba ita ce ke ƙare zaman ba.
Gyara matakin, ba gunkin ba
Kowane mai shi yana da gyara guda ɗaya da aka tallafa. Kuskuren sabuntawa yana buƙatar shawarwari masu dacewa a ɓangarorin biyu. Ƙarewar rashin aiki yana buƙatar siginar rayuwa ko ƙaramin tsammanin rashin aiki, cikin abin da hanya ta yarda. Abin da ya faru na haya yana buƙatar gyara saitunan mu'amala ko wuta. Iyakar asusu shawarar manufa ce, ba laifi ba.
Kashe sabuntawa ko tabbatarwa don gunkin ya kasance kore yana musanya faɗuwa da ake gani da rauni da ba a gani, kuma yana barin ka kasa faɗin lokacin da tunnel ya ƙarshe yi shawarwari kan sabbin makullai. Sake gwada ainihin tsawon lokaci bayan haka ka adana hatimin lokaci, domin a iya kwatanta abin da zai faru na gaba da wannan maimakon sake farawa.