Waa kee ciwaanka isha ee STUN arko marka VPN uu ku jiro router-ka?
Jidka, doorashada isha iyo tarjumaadda ayaa go'aamiya ciwaanka ay sheegto milicsadaha. Saddex xaqiiqooyin in la qoro, ka dibna hal su'aal si loo xaqiijiyo jidka kee guulaysta.
Su'aashu waxay u egtahay hal raadin, dhab ahaanna waa saddex go'aan. Jidkee binding request qaadato, ishee kernel-ku u doorto jidkaas, iyo in wax jidka ku jira dib u qoraan ishaas. Beddel mid ka mid ah saddexda, ciwaanka server-ka STUN sheegto ayaa isna la beddela. Taasi waa sababta odhaahda ah VPN-ku router-ka ku yaal keligeed wax badan sheegayn.
Go'aanku wuxuu ku tiirsan yahay saddex xaqiiqooyin
Marka hore jidka: xeerarka siyaasadda iyo shaxda jidku waxay go'aamiyaan in codsigu ka baxo tunnel-ka ama WAN-ka caadiga ah, iyo meesha laga reebay waxay qaadataa jidka labaad xitaa tunnel-ku shaqeynayo. Marka labaad isha: kernel-ku wuxuu u doortaa isha jidka la doortay, doorashadaasna waxay ku xiran tahay isha jidku doorbidayo iyo xeer kasta oo is waafajiyay. Marka saddexaad tarjumaadda: NAT jidka ku jira wuxuu beddelaa isha la doortay. Ciwaanka milicsan waa natiijada saddexda oo dhan, ma aha sifo tunnel-ka.
Beddel mid ka mid ah saddexda, jawaabtu way is beddelaysaa iyadoo qayb kastaa ay wali u muuqato mid caafimaad qabta diiwaankeeda. Taasi waa sababta caadiga ah ee uu baaritaankani isku joojiyo.
Qor saddexda xaqiiqooyin ee socodka aad tijaabinayso ka hor inta aadan bilaabin. Interface, jid iyo xeerka tarjumaaddu waa ku filan yihiin saadaalinta natiijada, saadaalintaasna waa tan ka dhigta layaab macquul ah. Haddii aadan buuxin karin mid ka mid ah saddexda, farqigaas waa helitaanka dhabta ah.
Raac hal binding request jidka oo dhan
binding request STUN waxay ka codsataa server-ka inuu sheego ciwaanka gaadiidka isha uu arkay. Jawaabtu waxay sharraxaysaa jidka uu codsigu qaatay, ma aha liis interface-yada mishiinka macmiilka. Laba codsi oo laba jid ah waxay si daacad ah u sheegi doonaan laba ciwaan oo kala duwan.
| Path taken | Source the reflector sees | What it means |
|---|---|---|
| Tunnel to a public exit that translates | The exit's public address | The reflector learns nothing about the LAN |
| Tunnel to a private reflector, translated to the tunnel address, no later translation | That tunnel address | An internal identifier is disclosed to that reflector |
| Excluded flow over the ordinary WAN | The WAN address | The tunnel was not used at all |
Akhri shaxdaas sida urur shuruudood, ma aha liis bixiyeyaal. Safka dhexe wuxuu dalbanayaa in milicsadaha gaarka ah laga gaari karo hoos yimaadda jidka iyo siyaasadda faca tunnel-ka laftiisa; taasi waa xaqiiqo habayn oo aad xaqiijin karto, ma aha wax heerka akoonku tilmaamayo. Safka hoose ayaa badanaa muhiim u ah siyaasadda, sababtoo ah socodkaas waa inuu tunnel-ka ku sii jiraa. Dhexdooda waxaa ku yaal xaaladda caadiga ah, halkaas oo bixitaanku tarjumaado oo milicsaduhu arko bixitaanka oo keliya.
Musharraxiinta host-ka iyo musharraxiinta milicsiga server-ka waxay ka yimaadaan habab kala duwan, sidaas darteed liiska musharraxiintu ma sheego jidka ay warbaahintu dhab ahaan isticmaashay. Akhri lammaanaha la doortay, ma aha diiwaanka ururinta, marka aad rabto inaad ogaato halka kulanku tegey.
Waxa aan ahayn ciwaanka tunnel-ka router-ka
Ciwaanka tunnel-ka ee router-ka la siiyay waxaa iska leh interface ku yaal router-ka. Browser ku yaal host LAN wuxuu leeyahay ciwaannadiisa interface oo u gaar ah oo aan si toos ah u arkin interface tunnel-ka router-ka. In labadaba loo qaato sida wax la is-weydaarsan karo waxay soo saartaa jawaabo khaldan oo kalsooni leh oo ku saabsan waxa bogga web-ka uu baran karo.
Gudbintu waa tan isku xirta labadaba. Codsigu wuxuu ka gudbaa router-ka sida socod jid leh, ishiisuna waa waxa jidka iyo tarjumaaddu soo saareen.
Haddii jidka tunnel-ku ilaaliyo isha LAN, milicsadaha gaarku wuu baran karaa ciwaankaas LAN, taas oo ah daahfur dhab ah oo ka duwan ciwaanka tunnel-ka. Haddii jidku u tarjumaado ciwaanka tunnel-ka, milicsaduhu wuxuu baranayaa ciwaanka tunnel-ka beddelkiis. Labada natiijo waxay la jaanqaadaan isla browser-kaas oo ku yaal isla host-kaas, sidaas darteed fiirsashada waa in lagu xiro socod gaar ah. Weydii kernel-ka ishee uu isticmaali lahaa ka hor inta aadan eedayn barnaamijka.
Daahfurka iyo dhaqaaqa: laba helitaan, laba hagaajin
Ciwaanka tunnel-ka ee milicsan wuxuu daaha ka qaadayaa aqoonsi gudaha ah jid aad ogolaatay. Codsi toos ah oo WAN-ka ah wuxuu dhaafaa jid aad rabtay inaad ku qasabto. Tan hore waa su'aal macluumaad, tan dambe waa su'aal fulin, waxaana lagu hagaajiyaa meelo kala duwan. Haddii labadaba lagu daro hal eray, waxaa soo baxa hagaajin aan midkoodna wax ka qaban.
WebRTC waxay tan ka dhigtaa mid si ka sii muuqata u muuqata iyada oo aan khalad ka dhigin, sababtoo ah ururinta musharraxa ma aha sida doorashadiisa.
ip route get 203.0.113.7 from 192.0.2.25
ip rule showKici su'aasha jidka ee ciwaan kasta oo milicsade ah oo aad ogolaatay, adigoo wata isha aad filayso inuu socodkaas qaado, ka dibna mar kale u kici xaddiga la reebay si aad u aragto waxa doorashada kale doorato. Isbarbardhig labada jawaabood siyaasadda aad qortay. Marka ay si aanad uga fiirsanayn u kala duwanaadaan, waxaad heshay barta hagaajinta adigoon u baahnayn inaad tarjumto liiska musharraxiinta browser-ka haba yaraatee.