Me ya sa hanyar VPN ba ta nuna ƙofa a fitowar ip route
Layin da ke da na'ura amma ba shi da ƙofa, hanya ce kai tsaye, ba karyayyiya ba. Karanta manufa, dev da scope, sannan tabbatar da ip route get.
Ana karanta allunan tuƙi a matsayin karyayyu duk lokacin da ginshiƙin ƙofa ya zama fanko, alhali kuwa layin yawanci cikakke ne da kansa. Filin via yana bayyana ne kawai lokacin da kernel ya ba da fakitin ga adireshin tsalle na gaba; hanyar da ke manne da wata mu'amala tana isa ga manufofinta ta hanyar warwarewar layin haɗi ko kuma ta abokin tafiya na aya-zuwa-aya. Karanta ginshiƙai daga hagu zuwa dama yana gaya maka a wace yanayi kake, kuma wannan karatun ya kamata ya faru kafin wani ya gyara hanyar da aka saba. Yawancin tikiti game da ƙofar da ta ɓace suna ƙarewa a wannan bambanci.
Karanta layin hanya ginshiƙi bayan ginshiƙi
Kowane shigarwa yana buɗewa da manufa da tsawon prefix ɗinta, sannan yana ƙara masu gyara a cikin ƙayyadadden ƙamus: via, dev, proto, scope, src da metric. Layi kamar 198.51.100.0/24 dev tun0 proto kernel scope link src 198.51.100.2 yana da yawa amma an bayyana shi gaba ɗaya. Babu abin da ya ɓace a cikinsa, kuma ba a nuna wani adireshin na'urar tuƙi ba.
Rashin via shine ɓangaren da ke da ban sha'awa. Ba tare da tsalle na gaba ba, kernel yana warware manufar kai tsaye a kan mu'amalar da aka ambata, wanda ga tunnel yana nufin mika firam ɗin ga na'urar tunnel da barin encapsulation ta karɓi daga nan. proto kernel yana rubuta cewa an shigar da bayanin ta atomatik lokacin da aka ba da adireshi, ba wani mai gudanarwa ya buga shi ba. scope link yana cewa ana iya isa manufar a wannan hanyar haɗin ba tare da wucewa ta na'urar tuƙi ba, kuma src yana ambaton adireshin da kernel zai fi so a matsayin tushe ga zirga-zirgar da ta dace.
Yanzu karanta hanyar da aka saba haka: default via 192.0.2.254 dev eth0 proto static metric 100. Anan via yana nan saboda fakitin yana buƙatar tsalle na gaba da gaske, kuma wannan tsallen dole ne shi kansa a iya isa gare shi a eth0. Layukan biyu ba bambance-bambancen juna ba ne; suna amsa tambayoyi daban-daban game da inda zirga-zirga ke zuwa.
Siffofin hanya biyu da ake rikita da juna
Hanyar subnet na tunnel da hanyar da aka saba suna kama da juna a hoton allo kuma suna aiki daban. Yi amfani da allon da ke ƙasa a matsayin taimakon karatu ga filayen, sannan tabbatar da ainihin lambobi a kan injin da kake gyara maimakon dogara ga samfurin daga jagora.
| Piece of the line | What it settles | What it says nothing about |
|---|---|---|
| The destination and mask | Which packets are eligible to match | Where those packets leave the host |
via plus its address | Which next hop receives them, and therefore that a router is involved | Whether that router is reachable or sane |
dev | Which interface carries the encapsulated or raw packet | Whether the interface is up or has a carrier |
proto and scope | Who installed the entry and how far the destination is considered to be | Whether a firewall later drops the traffic |
Abin da allon ba zai iya gaya maka ba shine manufa. Hanya kai tsaye zuwa wani yanki na sirri ta tunnel tsari ne da gangan na raba tunnel; irin wannan siffa a kan mai masaukin da ya kamata ya aika komai ta VPN alama ce. Manufa tana rayuwa a cikin saitin da ya haifar da bayanin, don haka duba kayan aikin da ya shigar da shi kafin ka yanke shawarar cewa kernel ya yi wani abu ba daidai ba.
Hakazalika, ƙofar da ta ɓace ba izini ba ce don ƙirƙirar ɗaya. Idan hanya tana buƙatar tsalle na gaba da gaske, dole ne a iya isa wannan tsallen a kan mu'amalar da ke ɗauke da shi, kuma ga tunnel na aya-zuwa-aya adireshin abokin tafiya ba shine abu ɗaya da adireshin gida ba. Ɗaukar adireshin gida na tunnel a matsayin na'urar tuƙi ta Ethernet hanya ce ta gama gari don samar da hanyar da take kama da daidai kuma ba ta tura komai.
Tambayi kernel wace layi zai yi amfani da ita da gaske
Karanta allon ba ɗaya ne da yin binciken ba, domin kernel yana tuntuɓar ƙa'idodin manufofi, alluna da yawa da bayanan da aka adana kafin ya amsa. Kalmar aikatau da ke yin ainihin binciken ita ce ip route get, kuma tana buga hanyar da fakitin da ke da waɗannan halaye zai bi.
ip route get 203.0.113.37 from 198.51.100.2 iif tun0Sake maye gurbin manufar da kake da mahimmanci da gaske, sannan ƙara from ko iif lokacin da aka zaɓi zirga-zirga bisa tushe ko kuma aka tura shi gaba, domin bincike na gida na yau da kullum na iya zaɓar wata hanya dabam fiye da abokin ciniki da aka tura gaba. Amsar tana ambaton mu'amalar, adireshin tushen da aka zaɓa, da kowane tsalle na gaba, wanda shine bayanin da za a yi amfani da shi wajen tuƙa fakitin a wannan lokacin.
Idan amsar ta ba ka mamaki, buga ƙa'idodin kafin ka canza komai: ip -4 rule show yana lissafa su bisa tsarin fifiko, kuma abokin ciniki na VPN da ke shigar da nasa allon ko ƙa'ida ga fakiti masu alama ba zai bayyana a babban allon kwata-kwata ba. Lissafin kowane allon yana rufe wannan gibin.
ip -4 route show table all | grep -E 'tun|default'Duba ƙasan ƙasa kafin ka maye gurbin na al'ada
Fakitin tunnel ɗin da kansa dole ne su isa ƙarshen nesa, kuma suna yin haka ta hanyar mu'amalar zahiri suna amfani da hanyar da ta kasance kafin VPN ya tashi. Maye gurbin dukan hanyar da aka saba ba tare da an lika wannan ƙarshen ba yana tura fakitin da aka lulluɓe cikin tunnel ɗin da ya kamata su gina, kuma haɗin yana rushewa. Da farko tabbatar da hanyar zuwa ƙarshen da bincike na adireshin ƙarshen kawai.
Ka raba abubuwa uku daban lokacin da kake yin canjin: hanyar zuwa ƙarshen da dole ta kasance a kan mu'amalar zahiri, yankunan sirri da ya kamata su shiga tunnel, da kuma na al'ada wanda ke yanke shawara kan komai. Raba su a wannan tsari, yi amfani da ɗaya a lokaci ɗaya, kuma sake gudanar da binciken bayan kowane mataki. Ping da ya kasa daga baya yana tabbatar da kaɗan kawai da kansa, tunda izini, tuƙin amsa, DNS da sabis ɗin kansa duk suna ƙasan ingantaccen hanya.
Rubuta ƙimomi huɗu da layin ya ba ka kafin gyara: manufa, tsalle na gaba ko rashinsa, na'ura, da tushen da aka zaɓa. Idan wani canji daga baya ya motsa ɗaya daga cikinsu, ka san wace shawara aka canza da gaske, kuma za ka iya dawo da bayani ɗaya maimakon yin hasashe kan dukan allon.