VPN wuu xirmaa laakiin ma gaadho qalabka LAN: waxa la hubiyo

Taraafikadu waxay gashaa tunnel-ka, gateway-gu wuxuu ka jawaabaa cinwaankiisa, waxna kama jawaabo gadaashiisa. Qaabkani waa caadi mana aha is-diid: jawaabta gateway-gu waxay caddaynaysaa in tunnel-ku dhammaaday, waxna kama caddaynayso waxa ku dhaca baakad loo cinwaanayay meel ka shisheeya. Labada tijaabo waxay isticmaalaan waddooyin kood oo kala duwan isla mishiin.

Hadda ka dib tijaabi wax dhanka kale ee gateway-ga. Cinwaanka gateway-gu laftiisu wuu sii jawaabayaa, si kasta oo gudbintu u xumaato.

Gateway-gu wuxuu ka jawaabaa stack-kiisa

Baakad loo cinwaanay gateway-ga waxaa la geeyaa waddada gelitaanka maxalliga ah, halkaas oo kernel-ku go'aamiyo in socket dhageysanaya uu aqbalo. Baakad loo cinwaanay martigeliyaha ka dambeeya gateway-ga waxaa beddelkeeda la geeyaa waddada gudbinta, halkaas oo koox kale oo hubin ah ay khusayso. Gudbinta si buuxda ayaa loo damin karaa, ama kernel-ku wuu shidi karaa kadibna qaanuun shaandhayn oo aan marnaba xusin tunnel-ka ayaa diidi kara. Wax ka mid ah taasi ma saameeyo jawaabta gateway-ga laftiisa, taasina waa sababta calaamaddu si lagu kalsoonaan karo u khiyaanayso.

Bogagga maamulka ee lagu gaadho tunnel-ka waxay iyaguna ka tirsan yihiin qeybta koowaad. Waa caddayn ku saabsan tunnel-ka, ma aha shabakadda ka dambeysa.

Raac qulqulka ilaa xadka koowaad ee tuura

Ka bilow macmiilka oo xaqiiji waddada iyo cinwaanka isha ee qulqulku isticmaalayo. Kadib fiiri gateway-ga imaatinka qulqulkaas saxda ah, iyo mar kale isla qulqulka oo u baxaya dhanka LAN. Haddii uusan marnaba iman, dhibaatadu waxay ku jirtaa dhanka macmiilka ama prefix-yada la ogol yahay ee tunnel-ka. Haddii uu yimaado oo uusan marnaba bixin, dhibaatadu waxay ku jirtaa gudbinta ama shaandhada waddada hore, duubistuna horey ayay u sheegtay midkee.

Sameynta isla tijaabada gateway-ga waxay qarinaysaa qeybta xiisaha leh, sababtoo ah baakad ka soo baxday gateway-ga waxay leedahay ish kale iyo shuruud soo noqosho kale. Isticmaal qulqulka macmiilka, oo wata cinwaankiisa isha, tallaabo kasta. Duubis lagu sameeyay interface khaldan waxay soo saartaa wax aan micne lahayn oo kalsooni leh.

Waddooyinka soo noqoshada iyo darbiyada dabka ee martigeliyaha si gooni ah ayay u fashilmaan

Marka baakadku gaaro martigeliyaha, saddex wax oo kale waa inay sax noqdaan. Adeeggu waa inuu dhageystaa cinwaanka baakadka loo diray, darbiga dabka ee martigeliyaha waa inuu aqbalaa, iyo jawaabtu waa inay leedahay waddo ku noqota barkada macmiillada. Midka ugu dambeeya ayaa inta badan fashilma, sababtoo ah waddada caadiga ah ee martigeliyaha waxay tilmaamaysaa router aan waligiis maqal baaxadda tunnel-ka. Natiijadu waa xiriir ka soo baxa aragtida martigeliyaha oo si aamusan ugu dhinta dhanka kale.

Si ula kac ah u tijaabi waddada soo noqoshada adigoo ka diraya macmiilka oo daawanaya soo noqoshada. Duubis hal jiho ah ayaa ilbiriqsiyo gudahood go'aamisa waxa saacad mala-awaal ah aysan go'aamin.

Xaqiiji bood kasta cinwaanka isha macmiilka

U socodsii hubinta si kala horreysan oo kaydi wax soo bax kasta, sababtoo ah qiimuhu wuxuu ku jiraa isbarbardhigga, ma aha hal saf. Amarrada hoose waxay dajiyaan cinwaanka isha, waxay muujinayaan waddada la doortay waxayna duubaan labada dhinac ee gudbinta. Beddel martigeliyahaaga LAN iyo interface-ka tunnel-ka.

ip route get 192.168.50.20 from 10.8.0.2
ping -I 10.8.0.2 -c 3 192.168.50.20
sudo tcpdump -ni tun0 host 192.168.50.20
sudo tcpdump -ni br0 host 192.168.50.20

Weedhaha waddada wuxuu muujinayaa in macmiilku uu baakadkaas u diro tunnel-ka, ping-na wuxuu muujinayaa in wax ka soo noqdeen martigeliyaha. Isbarbardhigga labada duubis wuxuu kala soocaa imaatinka bixista, sababtoo ah frame ku yaal interface-ka tunnel-ka oo aan lahayn lamid ku yaal interface-ka LAN waa go'aan gudbin, ma aha cilad adeeg. Marka labada duubis ay muujiyaan codsiga oo kaliya mid muujiyo jawaabta, waddada soo noqoshada ayaa ah tuhmanaha hadhay.

Diiwaangeli cinwaanka jawaabay iyo meesha loo gudbiyay ee fashilantay. Jumladaas waxay warbixinta ka dhigtaa mid la fulin karo halkii ay odhan lahayd server-ka lama gaari karo.