WireGuard wuu istaagaa: xad MTU mise qaacidad gudbin oo maqan?
Wax kasta oo ka shisheeya server-ka waa dhibaato gudbin ama dariiqo soo noqosho. Codsiyada yaryar ee shaqeeya iyo kuwa waaweyn ee istaaga waa calaamadda cabbirka baakadka.
Caadada ayaa ah in MTU hoos loo dhigo isla marka WireGuard si xun u dhaqmo, caadadaasna waxay qarinaysaa cilad kale. Albaab aan gudbin iyo dariiq aan qaadin baakado waaweyn waxay soo saaraan qaabab la kala garan karo: mid wuu ku guuldareystaa labada jiho iyo cabbir kasta, kan kalena wuxuu ka badbaadaa codsiyada yaryar oo ku dhinta kuwa waaweyn. Go’aanso qaabka aad haysato ka hor inta aanad beddelin lambar kasta. Tijaabada waa jaban oo waxay meesha ka saaraysaa kala badh sababaha suurtagalka ah.
Laba guuldareysi, laba qaab oo kala duwan
Dhibaatada gudbinta waxay soo muuqataa isla markiiba server-ka ka dib. Gacan-qabsiga wuu guuleystaa, cinwaanka tunnel-ka ayaa ka jawaabaa, waxbana albaabka ka dambeeya lama gaari karo xitaa codsi yar. Baakadku wuxuu gaaray server-ka lamana gudbin, ama jawaabtu ma lahayn dariiqo soo noqosho.
Dhibaatada cabbirka waxay soo muuqataa oo kaliya marka ka sarreeya xad. DNS, gacan-qabsi TCP iyo wicitaan API yar way shaqeeyaan, halka soo dejinta fayl ama jawaab weyn ay istaagto. Baakadihii soo galay waxay mareen min dhinac ilaa dhinac, kuwii aan soo gelinna meel ayaa lagu tuuray iyada oo aan lahayn warbixin faa’iido leh.
Sharaxyadaas waxay tilmaamayaan dad kala duwan iyo faylal habayn kala duwan, sidaas darteed cabbirka qaabka ayaa ka qiimo badan qiyaas. Hal ping oo albaabka loo diro ma kala saari karo.
Ka saar gudbinta ka hor inta aanad wax yarayn
Tijaabi meel ka shisheysa albaabka, ma aha albaabka laftiisa. Ping cinwaanka tunnel-ka server-ka wuxuu kaliya caddeeyaa in interface-ku shaqeynayo iyo inaad gaarto mashiinka tunnel-ka dhammeeya. Taraafikga shabakadda ballaaran wuxuu ku xiran yahay in gudbinta IP laga shaqeysiiyay mashiinkaas iyo firewall oggolaanaya qulqulka la gudbiyay. Labaduba waa inay run noqdaan, haddii midna been yahay isla aamusnaantaas ayaa dhacda.
Dariiq-soo-noqoshada ayaa isla sidaas muhiim u ah. Haddii shabakadda loo socdo aysan garaneyn sida loo gaaro cinwaanka tunnel-ka macmiilka, codsigu wuu yimaadaa jawaabtuna wuu lumaadaa, macmiilku wuxuu soo sheegaa waqti-dhaaf la mid ah gudbin la tuuray.
Meesha nashqaddu isticmaalayso turjumaad cinwaan, qaacidada turjumaaddu waa qayb ka mid ah dariiqa soo noqoshadaas. Ka saarista inta lagu jiro dabagalka dhibaatada MTU waxay nashqad shaqeynaysa u beddelaysaa mid jaban, sidaas darteed akhri qaacidadka jira ka hor inta aanad tafatirin.
Cabbir meesha jabku ka bilaabmo
Marka hore akhri xaaladda gudbinta iyo qaacidadka shaandhaynta. Kuwani waa hubinno akhris kaliya waxayna ka jawaabaan su’aasha jaban:
sysctl net.ipv4.ip_forward
sudo iptables -S FORWARD
ip route get 10.30.0.9Kadib tijaabi cabbirrada iyadoo la isticmaalayo bitka don’t-fragment, laga bilaabo macmiilka, xagga martigeliyaha ka shisheeya albaabka:
ping -M do -s 1200 10.30.0.9
ping -M do -s 1400 10.30.0.9Haddii tijaabada koowaad shaqeyso tan labaadna ku guuldareysto khalad kala-baqdin, dariiqu wuxuu kuu sheegayaa cabbirkiisa la isticmaali karo. Haddii midkoodna shaqeyn, waxaad eegaysaa gudbin ama dariiqayn, MTU-na ma aha doorsoome la beddelo.
| Observation | Points toward | Where to look |
|---|---|---|
| Nothing beyond the gateway works | Forwarding or return route | Forwarding flag, filter rules, routing table |
| Small works, large stalls | Packet size on the path | Tunnel MTU and the link underneath |
| Only names fail | DNS resolution | The resolver configured for the tunnel |
| Works sometimes | Multiple paths or state expiry | Flow selection and NAT state |
Hagaaji lakabka aad caddeysay
Marka gudbintu tahay ciladda, sixiddu waa qaacidad gudbin ama dariiq, oo lagu sheegay sida ugu cidhiidhi ah ee nashqaddu ogolaato. Marka cabbirku yahay ciladda, sixiddu waa MTU tixgalinaya duubista dariiqa gaarakan, lagana dabaqay interface-ka u baahan, ma aha adapter kasta oo ku jira guutada.
Sideedaba, kadib ku celi isla hawsha isla bartilmaameedka. Haddii wareejinta weyn ee asalka ah hadda dhammaato, isbeddelku wuxuu wax ka qabtay lakabkii guuldareystayay. Haddii kaliya tijaabada yar ay fiicnaatay, waxaad daweysay calaamad oo xadka dhabta ahi weli wuu yaallaa.
Qor qaabka aad aragtay ka hor isbeddelka. Xariiqdaas keliya, oo lagu qoray sixidda agteeda, ayaa ka hortagta qofka xiga inuu hoos u dhigo MTU aan waligiis dhibaato ahayn.