Sababta ay waddooyinka isku qadarka u leh uga dhigaan VPN ciladaha adag in la arko
Marka tunnelooyin badan ay wadaagaan isku qadar, qulqul kastaa wuxuu qaadan karaa mid kale. Ping guulaystay wax kama sheegto waddada uu codsigaagu dhab ahaan isticmaalo.
Isticmaale ayaa sheegaya in codsiga gudaha uu ka shaqeeyo hal mishiin oo uu ku guuldareysto mid kale, halka ping-ga aad ka socodsiiso iridda uu guuleysto labada xaaladoodba. Marka tunnelooyin badan oo isku qadar ah ay jiraan, tani khilaaf maaha. Qulqul kasta waxaa lagu dhejiyaa tallaabadiisa xigta, sidaas darteed baaritaankaaga iyo fadhiga isticmaalaha waxaa laga yaabaa inay si fudud u isticmaalaan waddooyin kala duwan. Sharaxaadda hoose waxay dib u soo saartaa doorashadaas ka hor inta aan wax la beddelin.
Hal ping, dhowr waddo oo suurtagal ah
Marka waddo ay leedahay wax ka badan hal tallaabo xigta oo isku qadar ah, router-ku waa inuu mid u doortaa packet kasta. Inta badan hirgelinta waxay hash gareeyaan goobaha packet-ga, sida caadiga ah cinwaannada laga soo bilaabo iyo halka loo socdo oo ay la socdaan borotokoolka iyo dekedaha, si jawaabahu ugu sii jiraan isla waddadaas. Codsiyo kala duwan, ama xitaa isku xirka kala duwan ee hal codsi, waxay soo saaraan hash kala duwan.
Taasi waa sababta ogaanshaha ka yimaadda iridda uu wax yar caddeeyo. Baaritaanka iridda lafteeda wuxuu leeyahay cinwaanno iyo dekedo u gaar ah, sidaas darteed hash u gaar ah. Waxaa laga yaabaa inuu ku soo degto tunnelka caafimaadka qaba halka isticmaalahu uu ku sii dego midka jaban.
Sida platform-du u doorato tallaabada xigta
Dib u soo saar doorashada halkii aad qiyaasi lahayd. Weydii kernel-ka waddo ay isticmaali lahayd isla asalka iyo halka loo socdo sida fadhiga guuldareystay. Baaritaankaas waxaa ku jira goobo ay baaritaanka caadiga ah ee halka loo socdo iska indhatiro. Ku socodsii sidoo kale macmiil shaqeynaya oo isbarbar dhig labada jawaab:
ip route get 10.20.5.7 from 10.20.0.14Noocyada cusub ee iproute2 waxay sidoo kale aqbalaan borotokoolka iyo dekedda halka loo socdo, taas oo muhiim ah marka hash-ku ay ku jiraan. Isbarbar dhig soo-saaristaas iyo isla baaritaanka macmiil shaqeynaya, farqiina waa caddaynta aad ka maqnayd.
| Observation | Likely cause | First check |
|---|---|---|
| Ping works, application fails | A different flow hash selects another tunnel | Per-flow lookup from the client's address |
| Some users fail, others do not | One tunnel lacks a prefix or selector | Compare both tunnels' installed routes |
| Fails only at larger sizes | Tunnels have different effective MTU | Probe the same size over each path |
| Fails after a reconnect | Stateful asymmetry between paths | Session state on both gateways |
Raac qulqulka guuldareystay, ma aha shaxda waddooyinka
Shaxda waddooyinka waxay taxdaa labada tunnelo oo qeexid ahaan sax ayay u muuqataa. Su'aashu waa waxa tunnel kastaa ku sameeyo packet-ka marka la doorto. Xaqiiji in labaduba ay qaadaan isla horgalayaasha la ilaaliyay, isla fasaxa gudbinta iyo waddo ku noqota isla macmiilka.
Fiiro gaar ah u yeelo aaladaha xaaladda leh ee dhexda. Haddii codsi ka baxo hal tunnel oo jawaabtu ka soo noqoto midka kale, markaas firewall ama NAT aan waligii arag qulqulka asalka ah ayaa tuuraya. Labada tunnelo si sax ah ayay u gudbiyaan taraafikada, haddana isku xirka wuu guuldareystaa.
Sidoo kale hubi MTU waddo kasta. Waddo leh duubid dheeraad ah waxay yareyneysaa cabbirka la isticmaali karo, iyo wareejin ku guuleysta hal tunnel waxay ku hakataa midka kale isla cabbirka uu yarihiisa jabayo.
Isbarbar dhig hal waddo markiiba
Halka naqshaddu u ogolaato dayactir, ka saar hal tunnel adeegga oo ku celi hawsha isticmaalaha. Haddii ciladdu baaba'do, dhibaatadu waxay ka tirsan tahay waddada aad ka saartay, tallaabada xigtana waa inaad isbarbar dhigto qaabeynteeda tan deriska halkii aad dib u eegi lahayd shaxda waddooyinka.
Isbarbar dhig codsiga dhabta ah, ma aha ping soo noqnoqda. Qor haddii ciladdu raacdo tallaabo xigta gaar ah, cabbir packet ama kala-guur ka dib dib u xiriir, sababtoo ah saddexdaas qaab waxay tilmaamaan hagaajinno kala duwan.
Ugu dambayntii, qor sababta waddooyinka loo arko inay siman yihiin iyo sida ciladdu tahay inay mid ka mid ah uga saarto adeegga. Waddooyin badan waxay ammaan tahay oo kaliya marka waddooyinku dhab ahaan is-beddelan karaan, taasna waa odhaah naqshadeed oo mudan in la hubiyo halkii la qiyaasi lahaa.