Laba xiriir oo kore iyo hal tunnel: beddelid, dheellitir ama isku-xidh
Beddelidda marka ay guuldarraysto, dheellitirka qulqul kasta iyo isku-xidhka hal qulqul waa saddex ballan oo kala duwan. Laba waddo oo caadi ah ayaa ku siinaya kan koowaad, ma aha labada kale.
Laba khad internet ah ayaa VPN ka dhigi kara mid si fudud loo heli karo, oo qaar ka mid ah culayska shaqada ka dhigi kara mid degdeg ah, laakiin farsamada ayaa go'aamisa midka labadaas dhacaya. Router leh laba waddo oo caadi ah isku-xidh ma aha, tunnel-ka qaada kumanaan xiriir oo gudaha ah wali waa hal qulqul oo dibadda ah. Ballanta marka hore magacaabista waa farqiqa u dhexeeya naqshad iyo niyad-jab qaali ah. Jadwalka hoose wuxuu kala saaraa xulashooyinka iyadoo eegaysa waxa mid kastaa u baahan yahay dhamaadka fog iyo waxa luminta xiriirku ku sameyso wareejin.
Saddex ballan, oo mid keliya ayaa u baahan lammaane
Beddelidda marka ay guuldarraysto waxay waddada sii haysaa mid la heli karo marka xiriirka la doorbiday uu lumo. Dheellitirka hash qulqulka ayaa qulqullada madaxbannaan ku fidiyaa labada xiriir ee kore. Isku-xidhka hal qulqul wuxuu u oggolaanayaa hal wareejin inuu isticmaalo labada xiriir isku mar. Kuwani waa badeecooyin kala duwan oo leh shuruudo kala duwan, oo kaliya kan ugu dambeeya ayaa u baahan iskaashi shay ka baxsan router-kaaga.
| Mechanism | Far-end requirement | Effect on one transfer | What breaks under a link loss |
|---|---|---|---|
| Packet-spraying overlay | A cooperating endpoint that reassembles the stream | Packets can spread across both links | Reordering and buffering on the surviving path; its own recovery logic decides what continues |
| MPTCP subflows | A peer or proxy that accepts subflows | Subflows can share one connection | Surviving subflows continue if the peer keeps them alive |
| Flow-hash balancing | Nothing new; the existing tunnel endpoint is enough | One outer flow still follows one link | Flows hashed onto the dead link move; established sessions break |
| Link failover | Nothing new | One path at a time; the second link sits idle | The session stalls or restarts on the other link |
Wax ku jira jadwalkaas ma aha sabab lagu iibsado khad labaad. Waxa uu sameeyo waa inuu ka hortago in naqshad beddelid lagu qiimeeyo sidii isku-xidh.
Sababta tunnel-ku ugu muuqdo router-ka sidii hal qulqul
Router dheellitira culayska ayaa hash sameeya ciwaannada isha iyo meesha loo socdo oo ay la jiraan dekedaha, ka dibna qulqulka oo dhan wuxuu u diraa meesha hash-ku tilmaamayo. Tunnel VPN ah waa hal qulqul oo sidan ah marka laga eego router-ka, wax kasta oo gudaha ku socda. Xiriirrada gudaha weligood ma gaaraan go'aanka hash-ka, sababtoo ah cinwaanka dibadda ayaa horey u go'aamiyay waddada. Taasi waa sababta xiriir labaad oo kore uu labanlaabmi karo wadarta awoodda isticmaalayaal badan oo aan waxba ka beddelin wareejinta weyn ee hal isticmaale.
Laba tunnel oo gooni ah ayaa ku siin kara laba musharrax, laakiin waxay wali u baahan yihiin siyaasad ula kac ah oo u qoondaysa taraafikada oo jawaabaha ku haysa waddada qaaday codsiga. Marinka asymmetrical ah waa natiijada caadiga ah ee tallaabadaas la boodo. Ugu yaraan waa siyaasad magacaabaysa qulqulka, xiriirka la doorbiday iyo xiriirka kaydka.
Isku-xidhka Ethernet ma gudbo bixiyeyaasha aan xiriirka la lahayn, sababtoo ah dhamaadka fog waa inuu ka qayb qaato borotokoolka isku-darka. Isku-xidh laba ISP ah waa mashruuc cilmi-baaris ilaa uu jiro dhibic dhamaad oo iskaashi leh.
Waxa TCP dhowr waddo u baahan yahay labada dhamaad
Dukumeentiga Linux ee Multipath TCP wuxuu sharraxayaa dhowr qulqul-hoosaad oo ka tirsan hal xiriir. Taageerada kernel-ka dhamaadka mid keliya waxba ma beddesho, sababtoo ah lammaanaha sidoo kale waa inuu aqbalo qulqulladaas hoose. Proxy dhanka fog waa habka kale ee caadiga ah, oo wuxuu noqdaa qayb leh awooddiisa iyo helitaankiisa oo qorsheyn u baahan. Isla macquulkaas ayaa ka reebaya jawaab sahlan WireGuard, kaas oo gaadiidkiisu yahay UDP: MPTCP wuxuu kordhiyaa qulqul-hoosaad TCP oo kama isku-xidhi karo tunnel-kaas iyada oo aan wax kale ku jirin naqshadda.
Hubi in qalabka kernel-ku shaqeynayo ka hor inta aadan naqshadeyn agagaarkiisa, sababtoo ah qaybiyeyaasha badan waxay soo bandhigaan isagoo dansan. Saddexdan amar ayaa ka jawaabaya hal daqiiqo.
sysctl net.mptcp.enabled
ss -M | head
ip mptcp limits showKa dooro culayska shaqada, ma aha buug-yaraha
Haddii culayska shaqadu yahay fadhiyo madaxbannaan oo badan, dheellitirka hash qulqulka ayaa kordhin kara awood iskaashi la'aan dhamaadka fog. Haddii ay tahay hal wareejin weyn, kaliya naqshad isku-darka ayaa caawin doonta, oo naqshaddaas waxay u baahan tahay lammaane iskaashi leh. Haddii shuruuddu tahay in shaqadu sii socoto marka xiriirku dhinto, jawaabtu waa beddelid oo wax-soo-saarka hal wareejin lama xiriirta.
Shuruudda ku qor hal jumlad oo leh fal: hal kayd ayaa labanlaab degdeg ku dhammaada, ama xiriir dhacay ma dhammeeyo fadhi. Yoolalka aan caddayn waxay soo saaraan naqshado aan qofna aqbalin karin ama diidin karin. Ka dib go'aanso waxa dhamaadka fog noqon karo, sababtoo ah xulashada ugu jaban badanaa waa tan aan wax cusub ka dooneyn halkaas. Xaddidaaddaas waxay tirtirtaa inta badan sheegashooyinka buug-yaraha ka hor shirka koowaad.
Saddexda ballan ku hay gooni ahaan dukumeentiga shuruudaha. Naqshad sheegta saddexda oo dhan badanaa waxay bixisaa hal oo si aamusnaan ah u qaadata kuwa kale. Qaybta xigta waxay tijaabinaysaa midka dhab ahaan la bixiyo.
Tijaabi hal wareejin iyo kuwo badan, ka dib jiid xiriir
Barbardhig hal wareejin joogto ah iyo dhowr wareejin oo barbar socda oo isla meesha loo socdo, oo qor lumis, daahid iyo isticmaalka xiriir kasta. Faa'iido kaliya fadhiyada barbar socda waxay tilmaamaysaa qaybinta qulqullada, ma aha isku-xidhka hal qulqul. Tijaabi luminta hal xiriir oo kore si gooni ah, sababtoo ah awoodda inta labada xiriir shaqeynayaan waxba kama sheegto beddelidda fadhi hore u dhisan. Qor waddada, socket-ka iyo tiriyayaasha dib-u-dirista ka hor iyo ka dib tijaabo kasta.
ip route show default
ip route get 10.80.0.5
mtr -n -c 20 -r 10.80.0.5Marka wareejinta keliya ay wali isticmaalayso hal xiriir oo kore, naqshaddu waxay samaynaysaa si sax ah waxa hash qulqulku tilmaamayo. Marka wareejinno barbar socda ay ku fidaan labada, dheellitirku wuu shaqeeyaa oo isku-xidhku ma shaqeeyo. Qor midka saddexda ballan ee naqshaddu dhab ahaan ilaaliso, oo wadaagga awoodda ee xiga wuxuu ka bilaabmi doonaa caddayn, ma aha sheegasho iibiye.