Me ya sa taswirar tashar VPN ta Docker ba ta taɓa isa OpenVPN ba

Kwantena ɗinka na iya saurare a kan UDP 1195 yayin da mai masauki ke wallafa 1194, kuma hakan daidai ne muddin taswirar ta faɗi haka. Lambobin suna yin teburin fassara: abokin ciniki yana buga tashar mai masauki, Docker yana sake rubuta manufa zuwa tashar kwantena, kuma OpenVPN yana amsawa a tashar da nasa saitin ya ambata. Rashin daidaituwa a ɗaya daga cikin waɗannan hanyoyin yana haifar da gazawa marar sauti wadda take kama da bangon wuta. Takardun shaida da sifofi suna ƙasa da wannan kuma ba za su iya gyara shi ba.

Bi fakiti ɗaya daga abokin ciniki zuwa tsari kafin ka canza kome game da tabbatarwa.

Lambobi uku, haɗi ɗaya

Lambobin ukun su ne manufar nesa da abokin ciniki ke amfani da ita, taswirar da aka wallafa a kan mai masauki, da mai saurare a cikin kwantena. Ba dole ba su zama daidai, amma dole su yi sarƙa. Lambobi daidai wani yanayi ne na musamman wanda ya zama na kowa, shi ya sa rashin daidaituwa ke da sauƙin rubuta sau ɗaya da wahalar gani daga baya.

Rubuta sarƙar a layi ɗaya kafin gyara kuskure: adireshin abokin ciniki da tasha, taswirar mai masauki, mai saurare na kwantena, jigila. Lalacewa a cikin sarƙar tana bayyana a matsayin lamba da ke fitowa sau biyu da ƙima daban-daban.

Abin da gajeren tsari yake faɗa a zahiri

A cikin gajeren tsari gefen hagu shi ne tashar mai masauki kuma gefen dama shi ne tashar kwantena, kuma ƙarin bayani na slash yana zaɓar jigila. Idan ka bar ƙarin bayanin, Docker yana ɗaukar taswirar a matsayin TCP, don haka mai saurare na UDP a bayan taswira marar ka’ida shi ne mai saurare wanda babu wanda zai isa gare shi. An rubuta wannan tsoho a cikin takardu kuma har yanzu yana ba wa waɗanda suka daidaita lambobin mamaki.

Dogon tsari yana ƙayyade adireshin ɗaurewa da ka’ida a fili, wanda ya cancanci ƙarin layukan a kan duk abin da ke fuskantar cibiyar sadarwa. Karanta taswirar da aka wallafa a baya maimakon amincewa da fayil ɗin da ya samar da ita.

ports:
  - 1194:1195/udp

Inda fakiti zai iya tsayawa

Ana iya watsi da buƙata kafin Docker, a cikin Docker, ko a wurin mai saurare. A gaban Docker ana iya samun bangon wuta na girgije ko na’urar da ke yin turawa da kanta, kuma wannan na’urar tana buƙatar tashar da ke fuskantar mai masauki da madaidaicin jigila. A cikin Docker, taswira zuwa tashar kwantena mara kyau tana turawa zuwa rufaffiyar socket.

Sannan mai saurare: saitin OpenVPN yana ambaton tasha da ka’ida, kuma abokin ciniki da ya isa wata a cikin kwantena ba ya isa kome. Gwajin sabis na UDP da TCP ba ya tabbatar da kome a kowane ɗayan waɗannan matakai, don haka yi amfani da jigilar da abokin ciniki zai yi amfani da ita.

Adireshin ɗaurewa suna ƙayyade isa

Taswirar da aka wallafa da aka ɗaure da loopback ana iya isa gare ta daga mai masauki kawai, yayin da wadda aka ɗaure da dukkan mu’amaloli ana iya isa gare ta duk inda bangon wuta ya yarda. Waɗannan biyun suna kama da juna a cikin fayil ɗin Compose da ya bar adireshin, kuma tsohon Docker shi ne faffaɗar.

Yanke shawara wace fallasa turawa take nufi, sannan rubuta ta a fili. Gwajin ciki da ke haɗawa ta loopback da abokin ciniki na nesa wanda ba zai iya haɗawa duka biyu na iya zama cikakken bayanin kwantena ɗaya.

Karanta yanayin da ke gudana

Duba taswirar mai tasiri ta kwantenar da ke gudana da mai saurare a cikin sararin sunan cibiyar sadarwarsa. Wataƙila an gyara fayil ɗin Compose bayan kwantenar ta fara, bayanan hoto na iya bayyana tasha ba tare da wallafa ta ba, kuma wata kwantena ta biyu na iya riga ta riƙe tashar mai masauki. Bayyana tasha a cikin hoto ba shine wallafa ta ba, kuma babu ɗaya daga cikinsu da ya yi daidai da saurare.

Yanayi uku daban-daban, umarni uku daban-daban, kuma na ƙarshe ne kawai ya shafi OpenVPN.

Bayan taswirar ta yi daidai

Da zarar fakitin ya isa OpenVPN, log ɗinsa shine wurin karanta game da TLS da tabbatarwa. Sake ƙirƙirar takardun shaida don gyara fakitin da bai taɓa zuwa ba aikin banza ne da ke ƙara ma’auni na biyu. Riƙe bayanin taswirar kusa da bayanin martabar abokin ciniki domin na gaba ya karanta layi ɗaya maimakon sake gano dukkan lambobin uku. Ɗaukar fakiti ɗaya a gefen mai masauki yana tabbatar da wace ɗaya daga cikin hanyoyin uku ta yi kuskure, kuma tana da ƙasa da sake ƙirƙirar takardar shaida.

Wallafawa ta gada shine yanayin da aka bayyana a nan. Cibiyar sadarwar mai masauki da adireshin kwantena da aka tsara sun tsallake fassarar, don haka waɗannan lambobin suna nufin wani abu daban a waɗannan tsare-tsare.