Sababta ay VPN route u aysan ku tusin gateway soo-saarka ip route
Sadar qalab leh oo aan gateway lahayn waa waddo toos ah, ma aha mid jabban. Akhri goobta, dev iyo scope, ka dibna ku xaqiiji ip route get.
Jadwalka marinnada waxaa loo akhriyaa sidii jabban mar kasta oo tiirka gateway uu maran yahay, iyadoo sadarka uu badanaa iskiis buuxa yahay. Goobta via waxay soo baxdaa kaliya marka kernel-ku u gudbiyo baakadda cinwaanka tallaabada xigta; waddada ku xiran interface-ka waxay gaartaa meelaha ay u socoto iyada oo adeegsanaysa xallinta lakabka isku xirka ama lammaane dhibic-ilaa-dhibic. Akhrinta tiirarka bidix ilaa midig waxay kuu sheegaysaa kiiska aad ku jirto, akhrintaasna waa in ay dhacdo ka hor inta aan qofna wax ka beddelin waddo caadi ah. Inta badan tikitada ku saabsan gateway maqan waxay ku dhammaadaan kala duwanaanshahan.
Akhri sadarka waddada tiir-tiir
Gelitaan kastaa wuxuu ku bilaabmaa goobta iyo dhererka horgalaha, ka dibna wuxuu ku darayaa beddelayaal erey-bixin go'an: via, dev, proto, scope, src iyo metric. Sadar sida 198.51.100.0/24 dev tun0 proto kernel scope link src 198.51.100.2 waa cufan laakiin si buuxda loo qeexay. Waxba kama maqna, mana jiro cinwaan router oo la malaynayo.
Maqnaanshaha via waa qaybta xiisaha leh. Iyada oo aan lahayn tallaabo xigta, kernel-ku wuxuu goobta ku xalliyaa si toos ah interface-ka la magacaabay, taas oo tunnel-ka macnaheedu yahay in frame-ka la siiyo qalabka tunnel-ka oo encapsulation-ka laga sii wado halkaas. proto kernel waxay diiwaangelisaa in gelitaanka si otomaatig ah loo rakibay markii cinwaan la qoondeeyay, ee ma aha mid maamule qoray. scope link waxay sheegaysaa in goobta laga gaari karo isku xirkaas iyada oo aan dhex marin router, iyo src waxay magacaysaa cinwaanka uu kernel-ku doorbidi doono inuu noqdo isha taraafikada u dhigma.
Hadda akhri waddo caadi ah si isku mid ah: default via 192.0.2.254 dev eth0 proto static metric 100. Halkan via waa ku jiraa sababtoo ah baakaddu runtii waxay u baahan tahay tallaabo xigta, tallaabadaasna waa in ay iyadu gaari karto eth0. Labada sadar ma aha noocyo midba midka kale; waxay ka jawaabaan su'aalo kala duwan oo ku saabsan halka taraafikadu u socoto.
Laba qaab oo waddo oo la isku qaldo
Waddada subnet-ka tunnel-ka iyo waddada caadiga ah waxay u eg yihiin shaashad sawir gudaha ah laakiin si gebi ahaan ka duwan ayay u dhaqmaan. Isticmaal shaxda hoose sidii caawinaad akhris oo loogu talagalay goobaha, ka dibna ku xaqiiji tirooyinka dhabta ah mishiinka aad baaraysid halkii aad ku kalsoonaan lahayd tusaale ka yimid hagaha.
| Piece of the line | What it settles | What it says nothing about |
|---|---|---|
| The destination and mask | Which packets are eligible to match | Where those packets leave the host |
via plus its address | Which next hop receives them, and therefore that a router is involved | Whether that router is reachable or sane |
dev | Which interface carries the encapsulated or raw packet | Whether the interface is up or has a carrier |
proto and scope | Who installed the entry and how far the destination is considered to be | Whether a firewall later drops the traffic |
Waxa shaxdu aanay kuu sheegi karin waa ujeedka. Waddo toos ah oo u socota xad gaar ah iyada oo tunnel-ka maraysa waa nashqad ula kac ah oo tunnel kala qaybsan; isla qaabkaas oo ka muuqda martigeliye ay tahay in wax walba VPN-ka mariyaa waa calaamad. Ujeedku wuxuu ku nool yahay habaynta abuurtay gelitaanka, marka eeg qalabka rakibay ka hor inta aadan soo gabagabeyn in kernel-ku wax khalday.
Sidoo kale, gateway maqan ma aha fasax aad mid ku abuurto. Haddii waddadu runtii u baahan tahay tallaabo xigta, tallaabadaas waa in ay gaari kartaa interface-ka qaada, tunnel-ka dhibic-ilaa-dhibic-na cinwaanka lammaanuhu ma aha isla shayga cinwaanka maxalliga ah. U qaadashada cinwaanka tunnel-ka maxalliga ah sida router Ethernet waa hab caadi ah oo lagu abuurayo waddo u eg mid sax ah oo aan waxba gudbin.
Weydii kernel-ka sadar kee uu runtii isticmaali doono
Akhriska shaxda ma aha isla mid la mid ah fulinta raadinta, sababtoo ah kernel-ku wuxuu la tashadaa xeerarka siyaasadda, dhowr shax iyo gelitaanno kayd ah ka hor inta uusan jawaabin. Falalka fuliya raadinta dhabta ah waa ip route get, wuxuuna daabacaa waddada ay baakad leh sifooyinkaas qaadan doonto.
ip route get 203.0.113.37 from 198.51.100.2 iif tun0Beddel goobta aad runtii danaynayso, ka dibna ku dar from ama iif marka taraafikadu lagu doorto isha ama la gudbiyo, sababtoo ah raadin maxalli ah oo caadi ah ayaa laga yaabaa inuu doorto waddo ka duwan midda macmiilka la gudbiyay. Jawaabtu waxay magacaysaa interface-ka, cinwaanka isha la doortay iyo tallaabo kasta oo xigta, taas oo ah isla macluumaadka baakadda lagu marin lahaa wakhtigaas.
Haddii jawaabtu kugu yaabto, daabac xeerarka ka hor inta aadan wax beddelin: ip -4 rule show waxay ku taxdaa iyaga sida kala hormarinta, macmiilka VPN-ka ee rakiba shaxdiisa ama xeer loogu talagalay baakadaha calaamaysan ma muuqan doono gabi ahaanba shaxda ugu weyn. Liis garaynta shax kastaa waxay xirtaa daloolkaas.
ip -4 route show table all | grep -E 'tun|default'Hubi lakabka hoose ka hor inta aadan beddelin waddada caadiga ah
Baakadaha tunnel-ka laftiisa waa in ay gaaraan barta fog ee ugu dambeysa, waxayna sidaas ku sameeyaan iyada oo loo marayo interface-ka jirka oo isticmaalaya waddada jirtay ka hor inta VPN-ku soo bixin. Beddelka waddada caadiga ah oo dhan iyada oo aan la xajin bartaas waxay u diraa baakadaha la duubay tunnel-ka ay ahayd in ay dhisaan, xiriirkuna wuu burburaa. Marka hore xaqiiji waddada barta iyada oo raadin lagu sameeyo cinwaanka barta oo keliya.
Saddex shay ka sooc marka aad beddelka samaynayso: waddada barta ugu dambeysa ee ay tahay in ay ku sii harto interface-ka jirka, xadadka gaarka ah ee ay tahay in ay galaan tunnel-ka, iyo waddada caadiga ah ee go'aamisa wax kasta oo kale. U kala qaad sidaas oo kale, mid mid ku dhaqan geli, oo raadinta dib u socodsii tallaabo kasta ka dib. Ping guuldareystay dabadeed keligiis wax badan ma caddeeyo, sababtoo ah ogolaanshaha, marin-u-helidda jawaabaha, DNS iyo adeegga laftiisu dhammaantood waxay ku yaalliin dhanka hoose ee waddo sax ah.
Qor afarta qiimayaal ee sadarku ku siiyay ka hor tafatirka: goobta, tallaabada xigta ama maqnaanshaheeda, qalabka, iyo isha la doortay. Haddii isbeddel dambe mid ka mid ah dhaqaajiyo, waad ogtahay go'aanka run ahaantii la beddelay, waxaadna soo celin kartaa hal gelitaan halkii aad ka fikiri lahayd shaxda oo dhan.