Sababta ciwaanka tunnel-ka VPN-gaagu uusan u furin port soo-gel
Ciwaanka tunnel-ku wuxuu aqoonsadaa macmiilkaaga dhinacyada kara inay u maraan, walna ma abuuro dhegaysi. Hubi xidhnaanta, wadada dib u noqoshada, ka dibna siyaasadda.
Ku xidh VPN-ga xafiiska, bilow adeeg yar oo ku yaal port 8443, u dir ciwaanka tunnel-ka saaxiib, oo daawo sida xiriirku u guul-darraysto inta macmiilku wali soo sheegayo inuu xiran yahay. Waxba kama qaldan tunnel-ka: ciwaanka waa la bixiyay, kulanku wuu shaqaynayaa, iyo baakadaha qaadi lahaa jawaabta marnaba lama ogola. Samee saddexda hubin ee hoose si kala horreya ah oo joog mid ka mid ah ku guul-darraysta, sababtoo ah mid kastaa wuxuu leeyahay hagaajin ka duwan oo kaliya mid ka mid ah ayaa khuseeya VPN-ga.
Ka bilow halka socket-ku dhab ahaan ku xidhan yahay
Ka hor inta wax la marin, wax waa inuu dhageysto ciwaan uu wicitaanku gaari karo. Adeegayaasha horumarintu waa dembiilaha caadiga ah, sababtoo ah qaar badan oo ka mid ah waxay si caadi ah ugu xidhmaan loopback oo kaliya waxay aqbalaan xiriirada ka yimaada isla mishiinka. Ciwaanka tunnel-ku ma beddelo xidhnaantaas, oo nidaamka hawlgalku wuu diidi doonaa xiriirka wax badan ka hor inta VPN-ga aan la gelin.
ss -ltnp | grep 8443
netstat -ano | findstr 8443Akhri tiirka ciwaanka gudaha halkii xaaladda. 127.0.0.1:8443 waxay ka dhigan tahay loopback oo kaliya, hagaajintuna waa xidhnaan ku 0.0.0.0 ama ciwaanka tunnel-ka laftiisa. 0.0.0.0:8443 wuxuu aqbalaa dhammaan isku-xirka, taas oo ka ballaaran inta badan dadku u jeedaan marka mishiinku sidoo kale leeyahay ciwaan dadweyne; 10.64.7.15:8443 waa nooca cidhiidhi ah ee kaliya dhageysta halka saaxiibku gaari karo. Ogeysiiso sidoo kale magaca howsha isla soo-saarkaas, sababtoo ah tusaale lumay oo ka yimid imtixaan hore waa sabab caadi ah in port-ku u muuqdo mid furan oo ku jawaabo macluumaad khaldan.
Kadib weydii haddii wax u mari karaan ciwaankaas
Ciwaanka tunnel-ku wuxuu macne leeyahay oo kaliya dhinacyada loo habeeyay inay horgalahaas u diraan tunnel-ka. Mishiinka saaxiibku wuxuu leeyahay shaxdiisa, haddii uusan lahayn waddo loo maro subnet-ka tunnel-ka, baakadku wuxuu u gudbaa gateway-ga caadiga ah oo ku dhinta meel aan waxba ka ogayn jiritaanka ciwaanka. Tani waa su'aal maritaan ah dhinaca wicitaanka, ma aha fasax dhinacaaga.
| Symptom from the caller | What it usually means | Where to look next |
|---|---|---|
| Connection refused immediately | Nothing is listening on the address the packet reached | The bind address and the process owning the port |
| Connection times out with no reply | A policy dropped the packet, or no route returns | Server forwarding, host firewall, cloud security group |
| Works from the same machine only | Listener is on loopback, or no route reaches the tunnel address | Bind address, then the caller's route to that prefix |
Adeegaha u dhexeeya labada macmiil ayaa sidoo kale muhiim ah. Naqshadda caadiga ah ee gelitaanka fog, macmiil kastaa wuxuu furaa xiriir baxa oo u socda gateway-ga, gateway-na wuxuu hayaa xaaladda socodkaas, sidaas darteed jawaabuhu waxay ku soo noqdaan waddo uu hore u yaqaan. Xiriirka macmiil ka mid ah u socda mid kale waa socod cusub oo gateway-gu waa inuu aqbalaa oo u gudbiyaa, iyo meelo badan ayaa si ula kac ah u damiya taas si macmiillada midba midka kale uga sooco. Adeegyada VPN-ga macaamiishu caadi ahaan si caadi ah ayay u soocaan; gateway-yada shirkadaha mararka qaar waxay u oggolaadaan koox ahaan.
Hubi jihada ka hor inta aad wax ka beddelin martigeliyaha. Haddii ciwaanka tunnel-ku ka jawaabo gateway-ga laftiisa laakiin aan ka jawaabin saaxiib, farqiga waa dejinta macmiil-ka-macmiil ee gateway-ga, oo wax tafatir ah oo firewall-ka gudaha ah ma beddeli karo.
Ugu dambayntii, hel siyaasadda oggolaanaysa socodka
Saddex lakab oo siyaasad ah ayaa u dhexeeya baakad la mariyay iyo adeeg jawaabaya: go'aanka gudbinta adeegaha VPN-ga, firewall-ka martigeliyaha, iyo koox ammaan daruuro ah oo ka horraysa tusaalaha. Saddexda waa inay isku raacaan, oo waxay ku guul-darraystaan siyaabo kala duwan, sidaas darteed calaamadda ku jirta shaxda sare ayaa ka faa'iido badan fariinta khaladka ee browser-ka.
Firewall-ka martigeliyaha waa lakabka dadku ilaabaan ka dib xidhnaan guul leh, sababtoo ah qaanuunka oggolaanaya port-ka isku-xirka LAN ma oggolaado si otomaatig ah isku-xirka tunnel-ka. Qaanuunnada ku xaddidan isku-xirka waa naqshad sax ah iyo sidoo kale sababta caadiga ah ee adeeg ka shaqeeya xafiiska oo aan ka shaqayn guriga. Akhri baaxadda qaanuunka, ma aha lambarka port-ka.
Shaandhaynta xaaladdu waxay sharraxaysaa kiiska lidka ku ah. Xiriir baxa oo ka imanaya laptop-kaaga wuxuu abuuraa xaalad, jawaabihiisana waa la oggolaadaa iyada oo aan qaanuun soo-gel ah lahayn. Xiriirka saaxiibku waa socod gebi ahaan cusub oo aan xaalad ka dambayn, sidaas darteed wuxuu u baahan yahay fasax cad. Ismaandhaafkaas waa sababta oo dhan ee ay fadhi browser-ka oo ka shaqeeya mishiinkaaga uusan waxba ka sheegin haddii adeeggu dibadda laga gaari karo.
Marka mid ka mid ah hubinta guul-darraysto, beddel naqshadda ee ma aha tunnel-ka
Haddii shuruuddu tahay in saaxiibku furo adeeggaaga gudaha, jawaabta daacadda ah badanaa waa hab loo dhisay gelitaanka soo-gelka. Tunnel SSH rogan waa kan ugu yar: mishiinkaagu wuxuu baxsan ugu xidhmaa martigeliyaha uu saaxiibku hore u gaari karo, dhegaysiguna wuxuu ku yaal martigeliyahaas.
ssh -N -R 8443:127.0.0.1:8443 [email protected]Gudbiyuhu wuxuu u baahan yahay GatewayPorts clientspecified habaynta adeegaha SSH, haddii kale dhegaysiga la gudbiyay wuxuu ku xidhmaa loopback gudbiyaha oo saaxiibku wuxuu la kulmaa isla diidmada hore. Wax kasta oo ka sii socda galab, isku-dheellitirka culayska ama ingress oo leh hubin caafimaad iyo shahaado magaca la daabacay ayaa ah qalabka ka wanaagsan, tunnel-ka goob-ilaa-goob oo leh waddooyin labada subnet ayaa jawaabta saxda ah marka laba shabakadood dhab ahaan u baahan yihiin inay hadlaan.
Mid kasta oo ka mid ah naqshadahaas wuxuu caddaynayaa soo-gaadhista, taasina waa qodobka. VPN waxay baakadaha u rartaa shabakado aad hore uga fasaxnayd; ma daabacdo adeeg oo ma beddelo laptop martigeliye u jeedda internetka. Hawshu waa in la go'aamiyo lakabka saddexda ah ee la beddelayo, tunnel-kuna marar dhif ah ayuu ka mid yahay.