Fail-open ko fail-closed: me maɓallin kashe VPN ke yankewa
Duk kalmomin biyu suna bayanin abin da ke faruwa sa’ad da ramin ya tafi, ba yadda ƙarfin ɓoyewa yake ba. Faɗin da ka zaɓa shi ne ke yanke ko zirga-zirgar tana malalawa da gaske.
Tatsuniya ita ce fail-closed shine saitin aminci kuma fail-open shine sakaci. Dukansu suna bayanin abin da ke faruwa da zirga-zirgar bayan ramin ya tafi, kuma babu ɗayansu da ke canza yadda wannan ramin yake ɓoyewa. Manufar fail-closed da dogon jerin keɓancewa na iya malalawa fiye da manufar fail-open a na’urar da ba ta taɓa barin cibiyar sadarwar ofis ba. Zaɓi sakamakon da za ka iya bayyana wa wanda ya mallaki zirga-zirgar.
Alamar tana bayanin sakamako, ba ƙarfi ba
Kalmomin sun fito ne daga tsarin sarrafawa: fail-open yana barin aiki sa’ad da wani ɓangare ya kasa, fail-closed yana hana shi. Idan aka yi amfani da shi a VPN, ɓangaren da ya kasa shine ramin, kuma tambayar ita ce shin an bar zirga-zirgar ta ci gaba ta wata hanya. Zaɓin sirri, tsawon maɓalli da yanayin sadarwa yanke shawara daban-daban ne.
Rikice-rikicen na ci gaba saboda maɓallin kashe yana kama da fasalin tsaro, kuma masu sayarwa suna tallata shi haka. A zahiri shi ne ka’idar hanya da bangon wuta da ke toshe zirga-zirgar da ramin ya kamata ya ɗauka, wanda aka aiwatar a cikin abokin ciniki, a cikin tsarin aiki ko a ƙofar sadarwa. Kowace matakin da ke aiwatar da shi shi ma yana bayyana ɗaukar nauyinsa, kuma ka’ida a wani mataki ba ta rufe wani. Ka’ida a ƙofar sadarwa ba za ta iya kare kwamfutar tafi-da-gidanka da ta riga ta koma wata cibiyar sadarwa ba.
Yadda kowane sakamako yake kama
Manufa ɗaya na iya yin daban-daban sosai dangane da wace gazawa ka ci karo da ita, don haka kwatanta abubuwan da suka faru maimakon alamomi.
| Event | Fail-open result | Fail-closed result |
|---|---|---|
| Tunnel drops while a transfer runs | Transfer continues on the direct path | Transfer stalls until the tunnel returns |
| Client exits or crashes | Rules disappear with the process | Rules persist only if the OS owns them |
| Device boots before sign-in | Normal network access | Blocked until the VPN connects |
| Captive portal needed | Portal loads normally | Portal unreachable without an exception |
| IPv6 not carried by the tunnel | IPv6 traffic leaks directly | Leaks too, unless the block covers IPv6 |
Layin ƙarshe shine wanda ke kama waɗanda suke tsammanin maɓallin kashe maɓalli ɗaya ne. Ka’idar da aka rubuta don teburin hanya na IPv4 ta bar hanyar da aka saba ta IPv6 ba a taɓa ta ba, kuma aikace-aikacen na iya amfani da ita cikin jin daɗi.
Faɗin shi ne ke yanke ko yana malalawa
Tambayi abin da manufar ke rufewa kafin ka tambayi wane yanayi ne. Ka’ida ta kowace aikace-aikace tana kare aikace-aikace ɗaya ba wani abu ba, ka’ida ta na’urar gaba ɗaya tana kare komai sai keɓancewar, kuma ka’ida a ƙofar sadarwa tana kare zirga-zirgar da ta isa wannan ƙofar kawai. DNS yana bukatar nasa shawarar, domin tambayar da aka aika zuwa mai warwarewa na gida na iya bayyana sunaye ko da an toshe kayan.
Keɓancewar cibiyar sadarwar gida suna akwai don firintoci, watsawa da tashoshin shiga, kuma kowanne rami ne a cikin toshewar. Rubuta su kusa da manufar, domin wanda ya gaji saitin zai karanta fail-closed a matsayin cikakke in ba haka ba.
Sake haɗawa da toshewa suma sarrafawa daban ne. Abokin ciniki na iya sake haɗawa kai tsaye ba tare da ya taɓa toshewa ba, ko toshewa ba tare da sake haɗawa ba, kuma haɗin shine ke yanke abin da mai amfani ke fuskanta a lokacin tsayawa.
Tabbatar da shi yayin sauyi
Gwajin yanayin tsayayye ba ya tabbatar da komai. Ka jefar da ramin da gangan ka gwada aikace-aikacen da ya kamata a kare, sannan ka duba ko ya isa cibiyar sadarwar. Kwatanta alamar abokin ciniki da sakamakon, domin alama da ke cewa an haɗa har yanzu ita ce ainihin yanayin da manufar ta kasance dominsa. Idan aikace-aikacen da aka kare ya yi nasara, sunan yanayin ba shi da muhimmanci; kana da malalawa.
Maimaita daga rawar sanyi kafin shiga, lokacin sauya daga Wi-Fi zuwa cibiyar sadarwar wayar hannu da aikace-aikacen da aka kare a baya. Idan tsarin abokin ciniki ne ke aiwatar da toshewar, gwada kuma abin da ke faruwa sa’ad da aka kashe wannan tsarin maimakon rufe shi da kyau.
A ƙarshe, duba hanyar tsaftacewa. Idan an cire abokin ciniki yayin da ka’idodinsa ke aiki, yi amfani da hanyar cirewa da aka rubuta ta mai sayarwa maimakon kashe bangon wutar tsarin aiki, wanda ke cire kariya marar alaƙa ba tare da amsa wanene ya mallaki ka’idar da ta rage ba.