Ma xaddidan yahay gateway-gaaga VPN ee CPU? Marka hore akhri culeyska core kasta
Celcelisku waxay qarinayaan dunta muhiimka ah. Akhri culeyska core kasta marka la eego wareejin la xakameeyay, ka saar waddada, ka dibna beddel hal dejis oo diiwaan gashan kasta oo orod.
Go'aanso xadka saddexda ah ee aad gaartay ka hor inta aadan iibsan aan weyn. Hal core oo buuxa halka kuwa kale shaqo la'aan yihiin waxay muujinaysaa shaqo crypto oo qulqul kasta. Dhammaan core-yada oo buuxa inta lagu jiro wareejin waxay muujinaysaa awood guud. CPU hoose iyo tiro dib-u-gudbin oo kororta waxay muujinaysaa waddada. Mid kastaa wuxuu leeyahay tillaabo koowaad oo duwan, mana jiro mid ka mid ah oo lagu xalliyo aan weyn.
Saddex xad, hal miis, saddex hagaajin
| Limit | Reading during a transfer | First move |
|---|---|---|
| Single thread | one core near 100%, siblings idle | spread flows across workers |
| Aggregate CPU | every core busy, load average climbs | capacity, or less work per byte |
| Path or provider | low CPU, retransmits or steal time high | MTU, loss, host contention |
U akhri safafka sida ogaal, ma aha sida marxalado. Hal dun oo 100% ah halka kuwa kale shaqo la'aan yihiin waa natiijada ugu badan ee gateway-ga qaada hal tunnel weyn, sababtoo ah sireedka qulqulkaas wuxuu ku shaqeeyaa hal core. Dhammaan core-yada oo mashquul ah inta lagu jiro wareejinta waxay ka dhigan tahay mishiinku horey ayuu u qabanayaa inta ugu badan ee uu qaban karo. CPU hoose iyo dib-u-gudbin kororta waxay ka dhigan tahay processor-ku wuxuu sugayaa shabakad si joogto ah u tuurta xogta.
Ku hagaaji sida ay u kala horreeyaan caddaynta. Qulqulka u qaybinta shaqaalaha waxay caawisaa kiiska koowaad waxna kama qabato kan labaad. Aan weyn wuxuu caawiyaa kan labaad wuxuuna lacag ku lumiyaa kan koowaad. Hagaajinta MTU ama luminta ayaa kaliya taabata kan saddexaad. Iibsashada awood ka hor inta aadan ogaan safka aad ku jirto waa nooca qaaliga ah ee qiyaasta.
Kala sooc dun xaddidan iyo martigeliyaha mashquulka ah
Ku bilow isticmaalka core kasta, si hal core oo xaddidan uusan ugu dhex qarsoomi karin celcelis. Hal orod inta lagu jiro wareejinta waxay muujinaysaa haddii culeysku siman yahay ama sarreeyo. Labada qaabba waa macluumaad, iyo profile sarreeya badanaa waxay ka dhigan tahay in daaqadda muunadda ay qabatay firfircoonida jadwalka ma aha sireedka.
mpstat -P ALL 1 5U nisbe core-ka mashquulka ah hawl, ka dibna dun. Orodka raaca ee hoose wuxuu wada hayaa dunta waalidka iyo ilmaha, taas oo muhiim ah marka daemon-ku uu laamo xiriir kasta:
pidstat -u -t -p $(pgrep -f 'openvpn|wireguard|ipsec') 1 10Crypto kernel-ka waligiis kama muuqdo tirakoobka hawl ee booska isticmaalaha. Muuni dunta si gooni ah oo isbarbardhig aragtidaas iyo xisaabta hawsha:
top -H -b -n 1 | head -20Akhri tirakoobyada socket-ka ugu dambeeya, sababtoo ah waxay go'aamiyaan haddii CPU badan uu gabi ahaan caawinayo. Dib-u-gudbin kororta inta CPU siman tahay ma aha dhibaato processor. Hayso wareejinta oo socota inta aad muunaysanayso, haddii kale tirooyinku waxay qeexayaan mishiin shaqo la'aan ah:
ss -ti | grep -E 'retrans|cwnd|rtt'Wareejin la xakameeyay, laba jeer
Tirakoobyada shaqo la'aanta waxba ma caddeeyaan, iyo benchmark ka soo horjeeda barta dhammaadka random aad buu u yar yahay wax caddeeya. Dooro hal macmiil, hal meel iyo hal wareejin matalaad ah oo loo ogolaaday inaad oroddo, ka dibna isla daaqaddaas ku duub xawaaraha iyo gaabis isdhexgalka. Gateway-ga wuu buuxsamayaa inta nuqul weyn uu weli dhammaanayo, iyo qalooca gaabiska ayaa ah waxa isticmaalayaashu dhab ahaan dareemaan. Qor wareejinta, tirada macmiilka iyo nooca daemon-ka tirooyinka agtooda.
Ku celi orodka iyo dhowr qulqul oo is barbar socda. Kor u kaca qulqulka waxay muujinaysaa daaqado qulqul kasta; siman ahaanshaha hal core oo xaddidan waxay muujinaysaa habaynta.
Ka dib ku celi mar kale iyadoo culaysyada shaqo ee ikhtiyaariga ah la joojiyay. Kayd, diriyaha log ama database isla martigeliyaha waxay soo saari karaan celcelis mashquul ah oo aan wax xiriir ah la lahayn tunnel-yada. Haddii CPU weli xaddidan yahay iyo martigeliyaha haddii kale aamusan yahay, caddayntu waxay tilmaamaysaa hawl VPN. Haddii uu hoos u dhaco, waxaad cabbirayay deriska, gateway-ga waligiis dhibaato ma ahayn.
Ka saar waddada ka hor inta aadan iibsan qalab
Dib-u-gudbin kororta, daaqadda ciriiriga oo yaraata iyo waqtiga safarka oo kordha dhammaantood waxay ka fogaanayaan processor-ka. Isbarbardhig MTU tunnel-ka iyo MTU waddada, hubi xiriirka hoose lumid, oo xaqiiji in xiriirka kor ee macmiilka uusan xad ahayn. Gateway weyn ma hagaajiyo xiriir tuura baakadaha, isticmaalayaashuna waxay ku sifeeyaan labada cilad isla erayada. Tirakoobka dib-u-gudbinta ayaa kala sooca daqiiqado gudahood.
Server virtual ah, ku dar cabbirrada bixiyaha kuwa martida. Waqtiga la xaday waa sida iibka xad-dhaafka ah uu uga muuqdo martida gudaheed, mana jiro dejis gudaha martida ah oo meesha ka saaraya. Tirakoobyada martidu ma arkaan martigeliyaha, sidaas darteed garaafka nadiifka ah ee martidu ma aha caddayn martigeliye caafimaad qaba.
Hal isbeddel, hal cabbir
Dooro mala-awaalka caddayntu taageerto, ka dibna beddel hal dejis oo la taageeray: tirada shaqaalaha, ikhtiyaarka offload ee diiwaan gashan, ama cabbirka instans-ka. OpenVPN waxay daabacdaa hagaha xallinta dhibaatooyinka waxqabadka ee ku saabsan isla kala qaybinta habaynta iyo gaadiidka: Xallinta dhibaatooyinka waxqabadka OpenVPN.
Xaqiiji in ikhtiyaarka offload uu dhab ahaan firfircoon yahay halkii aad ku kalsoonaan lahayd calanka, ka dibna mar kale orod isla wareejinta oo isbarbardhig wax la mid ah. Taasi waa dariiqa kaliya ee lagu kala saaro horumar dhab ah iyo galab aamusan. Hayso bar hubin oo aad soo celin karto, sababtoo ah isbeddelka labaad ayaa dadku lumiyaan raadka waxa caawiyay. Hal doorsoome orod kasta waa gaabis maalin iyo degdeg bisha.
Ha wiiqin xaqiijinta ama qaybta sireedka si garaafku uga muuqdo mid wanaagsan. Haddii CPU weli uusan raacin calaamadda, ku noqo hubinta waddada iyo barnaamijka halkii aad ku cusboonaysiin lahayd qiyaas.