Me ya sa adireshin tunnel ɗin VPN ɗinka ba ya buɗe tashar shiga
Adireshin tunnel yana gane abokin ciniki ga abokan da za su iya yi masa hanya, kuma ba ya taɓa ƙirƙirar mai sauraro. Duba ɗaurewar, hanyar dawowa, sannan manufar.
Haɗa da VPN ɗin ofis, fara ƙaramin sabis a tashar 8443, aika adireshin tunnel ɗin ga abokin aiki, kuma ka ga haɗin ya kasa yayin da abokin ciniki har yanzu yana bayar da rahoton cewa yana haɗe. Babu abin da ya lalace a cikin tunnel ɗin: an ba da adireshin, zaman yana nan, kuma fakitin da za su ɗauki amsar ba a taɓa yarda da su ba. Yi gwaje-gwajen uku da ke ƙasa bisa tsari kuma ka tsaya a wanda ya kasa, domin kowanne yana da gyara daban kuma ɗaya ne kawai daga cikinsu ya shafi VPN ɗin.
Fara da inda aka ɗaure socket ɗin a haƙiƙa
Kafin a yi wa wani abu hanya, dole ne wani abu ya kasance yana saurara a kan adireshin da mai kira zai iya isa. Sabar ci gaba su ne masu laifi na yau da kullum, domin da yawa daga cikinsu suna ɗaure wa loopback ta tsohuwar ƙa'ida kuma suna karɓar haɗin da suka samo daga na'urar guda ɗaya kawai. Adireshin tunnel ba ya canza wannan ɗaurewar, kuma tsarin aiki zai ƙi haɗin tun da daɗewa kafin VPN ɗin ya shiga ciki.
ss -ltnp | grep 8443
netstat -ano | findstr 8443Karanta ginshiƙin adireshin gida maimakon yanayin. 127.0.0.1:8443 yana nufin loopback kawai, kuma gyaran shi ne ɗaurewa kan 0.0.0.0 ko kan adireshin tunnel ɗin kansa. 0.0.0.0:8443 yana karɓa a kowane fuska, wanda ya fi faɗin da yawancin mutane suke nufi sa'ad da na'urar kuma tana da adireshin jama'a; 10.64.7.15:8443 shi ne ɗan ƙaramin sigar da ke saurara kawai inda abokin aikin zai iya isa. Lura kuma da sunan tsari a cikin fitarwa ɗaya, domin wani kwafin da ya ɓace daga gwajin baya shi ne sanadin da ya zama ruwan dare cewa tashar ta yi kama da a buɗe take kuma tana amsa da abin da bai dace ba.
Sannan ka tambaya ko wani abu zai iya yin hanya zuwa wannan adireshin
Adireshin tunnel yana da ma'ana ne kawai ga abokan da aka saita su aika wannan prefix ɗin cikin tunnel ɗin. Na'urar abokin aikin tana da nata teburin, kuma idan ba ta da hanya zuwa ƙaramin cibiyar sadarwar tunnel ɗin, fakitin yana zuwa ga ƙofar da aka saba kuma ya mutu a wurin da bai san akwai adireshin ba. Tambaya ce ta hanyoyi a gefen mai kira, ba izini a gefenka ba.
| Symptom from the caller | What it usually means | Where to look next |
|---|---|---|
| Connection refused immediately | Nothing is listening on the address the packet reached | The bind address and the process owning the port |
| Connection times out with no reply | A policy dropped the packet, or no route returns | Server forwarding, host firewall, cloud security group |
| Works from the same machine only | Listener is on loopback, or no route reaches the tunnel address | Bind address, then the caller's route to that prefix |
Sabar da ke tsakanin abokan ciniki biyu tana da muhimmanci ma. A tsarin shiga nesa na yau da kullum kowane abokin ciniki yana buɗe haɗi mai fita zuwa ga ƙofa kuma ƙofar tana riƙe da yanayin waɗannan kwararowin, don haka amsoshi suna dawowa ta hanyar da ta riga ta sani. Haɗi daga abokin ciniki ɗaya zuwa wani sabon kwarara ne wanda ƙofar dole ta karɓa kuma ta tura shi gaba, kuma yawancin turawa suna kashe shi da gangan don su riƙe abokan ciniki ware da juna. Sabis ɗin VPN na masu amfani yawanci suna warewa ta tsohuwar ƙa'ida; ƙofofin kamfanoni wani lokaci suna barin haka bisa ga rukuni.
Duba alkibla kafin ka canza wani abu a kan mai masaukin. Idan adireshin tunnel ɗin yana amsa daga ƙofar kanta amma ba daga abokin ba, saitunan abokin-ciniki-zuwa-abokin-ciniki na ƙofar ne bambancin, kuma babu gyaran wutar bango na gida da zai maye gurbinsa.
A ƙarshe, nemo manufar da ke ba da izini ga kwararar
Matakan manufa uku suna tsakanin fakitin da aka yi wa hanya da sabis ɗin da ke amsa: shawarar turawa ta sabar VPN, wutar bango ta mai masaukin, da duk wata ƙungiyar tsaro ta girgije da ke gaban kwafin. Dukan ukun dole su yarda, kuma suna kasawa ta hanyoyi daban-daban, shi ya sa alamar da ke cikin teburin da ke sama ta fi saƙon kuskure a burauza amfani.
Wutar bango ta mai masaukin ita ce matakin da mutane suke mantawa bayan ɗaurewa mai nasara, domin ƙa'idar da ke barin tashar a fuskar LAN ba ta bar ta kai tsaye a fuskar tunnel ɗin ba. Ƙa'idojin da aka iyakance ga fuska daidai ne a tsari kuma su ne sanadin da ya zama ruwan dare na sabis ɗin da ke aiki daga ofis amma ba daga gida ba. Karanta iyakar ƙa'idar maimakon lambar tasharta.
Tacewa mai ɗauke da yanayi tana bayanin akasin haka. Haɗi mai fita daga kwamfutar tafi-da-gidanka yana ƙirƙirar yanayi, kuma ana karɓar amsoshinsa ba tare da ƙa'idar shiga ba. Haɗin abokin aikin sabon kwarara ne da babu yanayi a bayansa, don haka yana buƙatar izini bayyananne. Wannan rashin daidaituwa shi ne dukan dalilin da ya sa zaman burauza da ke aiki a na'urarka ba ya faɗin kome game da ko ana iya isa ga sabis ɗin daga waje.
Idan gwaji ɗaya ya kasa, canza tsari ba tunnel ɗin ba
Idan abin da ake buƙata shi ne abokin aiki ya buɗe sabis ɗinka na gida, amsar gaskiya yawanci wata hanya ce da aka gina don shiga daga waje. Tunnel ɗin SSH na baya shi ne mafi ƙanƙanta: na'urarka tana haɗi mai fita zuwa mai masaukin da abokin aikin zai iya isa tuni, kuma mai sauraro yana nan a kan wannan mai masaukin.
ssh -N -R 8443:127.0.0.1:8443 [email protected]Mai miƙa saƙo yana buƙatar GatewayPorts clientspecified a cikin tsarin sabar SSH ɗinsa, in ba haka ba mai sauraron da aka tura zai ɗaure wa loopback a kan mai miƙa saƙon kuma abokin aikin zai fuskanci irin wannan ƙin da ya fuskanta a baya. Don duk abin da ya fi wata rana tsayi, mai daidaita nauyi ko ingress mai duba lafiya da takardar shaida ga sunan da aka buga shi ne mafi kyawun kayan aiki, kuma tunnel ɗin wuri-zuwa-wuri mai hanyoyi ga ƙananan cibiyoyin biyu shi ne amsar da ta dace idan cibiyoyin sadarwa biyu suna buƙatar yin magana da gaske.
Kowanne daga cikin waɗannan tsare-tsare yana bayyana fallasa a fili, kuma wannan shi ne batun. VPN yana motsa fakiti tsakanin cibiyoyin sadarwar da ka riga ka sami izinin amfani da su; ba ya buga sabis kuma ba ya mai da kwamfutar tafi-da-gidanka mai masaukin da ke fuskantar intanet. Aikin shi ne yanke shawara wanne daga cikin matakai uku za a canza, kuma tunnel ɗin ba safai yake ɗaya daga cikinsu ba.