Amaphakethe amakhulu ayanyamalala ku-IPsec kuyilapho ama-ping amancane esasebenza

Amagobongo akude ahlala ephendula, izivivinyo ezincane ziyaphendula, bese kuthi ukukopishela ifayela kukhasa futhi kume ngaphandle kwephutha umuntu angalikhomba. I-ping enomthwalo omkhulu iyiphindaphinda ngokushesha, futhi ukudluliswa okufanayo kuyasebenza kusuka kunethiwekhi yasendaweni. Akukho okunensayo ekubetheleni; amaphakethe athile awafiki neze. Ukuhlukaniswa okubili okuhlukene kungaveza lolo phawu, futhi kushiya ubufakazi obuhlukene.

Izindawo ezimbili lapho iphakethe lingahlukaniswa khona

Ngaphambi kokubethela, umhambisi angahlukanisa iphakethe langaphakathi elikhulu kakhulu futhi avikele ingxenye ngayinye ngayinye. Ngemva kokubethela, okuhlukaniswayo yiphakethe langaphandle eseliphelile, futhi uhlangothi olukude kufanele liphinde likuhlanganise ngaphambi kokuthi likwazi ukususa ukubethela kwanoma yini. Uphawu olufanayo, umsebenzi ohlukile kumamukeli nezinkinobho ezihlukile kuwe.

Umehluko ubalulekile ngoba isilungiso esibhekiswe ohlangothini olungalungile sishintsha inombolo ngaphandle kokuhambisa isiphambeko. Iphakethe elenqatshwa kusixhumi asilokothi libe iphakethe langaphandle, ngakho akukho kulungiselelwa kwangaphandle okungalihlenga.

Isinqumo sosayizi sithathwa kuphi ngempela

Isixhumi somhubhe sithwala i-IP MTU, futhi lelo nani lingenqaba iphakethe langaphakathi elikhulu kakhulu kude ngaphambi kokuba isigaba se-IPsec silibone. Ukubeka ibhithi kusihloko sangaphandle akusibuyekezi leso sinqumo sangaphambilini, ngoba iphakethe selenqatshiwe. Yingakho ukukhweza i-MTU yangaphakathi ngezinye izikhathi kwenza izinto zibe zimbi kunokuba zibe ngcono. Funda inani lesixhumi nokuziphatha kwangaphandle ngaphambi kokushintsha noma yikuphi kwalokho, ngoba ushintsho olushibhile ngokuvamile yilona oluchaza uphawu.

Hlola inani lesixhumi kuqala, bese ukuziphatha kwangaphandle. Izinombolo ezimbili, izigaba ezimbili, futhi ngokuvamile kunye kuphela okubhekene nalo.

Isabelomali sangaphandle akusona isabelomali sangaphakathi

Konke ukumboza kusebenzisa amabhayithi kusihloko, futhi inani lincike ekuthuthweni, emndenini wamakheli nokuthi ingabe ukunqamula kwe-NAT kukhona. Iphakethe langaphakathi elingena kuxhumano lwasendaweni lingaveza iphakethe langaphandle elingangeni endleleni engale kwayo. Linganisa izindleko ezengeziwe esikhundleni sokuzicabanga, ngoba zonke izihloko ezingakhethiwe zengezwa kubhili. Umhubhe one-NAT unukhokha ngaphezu komhubhe ongenalutho, futhi umehluko wanele ukwephula ukudluliswa obekusebenza izolo.

Lapho iphakethe langaphandle lithwala ibhithi yokwenqaba ukuhlukaniswa, i-hop engakwazi ukulidlulisela iyalilahla futhi kufanele ibuyise umlayezo we-ICMP. Uma lowo mlayezo uhlungiwe ndawana thize, umthumeli uyaqhubeka nokuzama futhi umsebenzisi ubona ukuma ngaphandle kwencazelo. Lokho kulahla buthule yisizathu esivamile sokuthi inkinga yosayizi ibikwe njengenkinga yesivinini.

I-IPv6 isusa enye yezinketho

Ama-router e-IPv6 awahlukanisi phakathi nohambo, ngakho iphakethe langaphandle liyafaneleka noma linyamalale nemlayezo we-Packet Too Big. Lowo mlayezo uba ukuphela kwendlela yempendulo, futhi ukuwuvimbela kwephula ukutholakala komzila kukho konke ukudluliswa okukhulu okulandela. Ama-router e-IPv4 angahlukanisa iphakethe elikhulu uma ibhithi icacile, lokho kufihla isiphambeko kuze kube yilapho enye into ibeka leyo bhithi.

Esiteki esixubile, umhubhe ofanayo ungaziphatha ngendlela ehlukile emindenini emibili, yingakho isivivinyo esisodwa ku-IPv4 asisixazululi isikhalazo se-IPv6. Ukuhlola okuqeqesha umndeni owodwa kushiya ingxenye yempendulo ingalinganisiwe.

Inqubomgomo yezingxenye ze-TCP ayisona isisombululo esijwayelekile

Ukunciphisa usayizi omkhulu wengxenye kusiza imifudlana ye-TCP, futhi kuwukulawula okufanele lapho inkinga igxile kuyo. Akunamthelela ku-UDP, othwala i-DNS, ezinye izivumelwano zomsindo kanye nengxenye ekhulayo yethrafikhi yewebhu.

Yisebenzise, bese uhlola umthwalo womsebenzi ohlulekile. Uma icala le-UDP lisahluleka, inqubomgomo yezingxenye ayizange ibe yisisombululo futhi isabelomali sesixhumi sisadinga ukunakwa. Qala ngokuthola ivumelwano lomthwalo ohlulekile, bese ukhetha ukulawula okuhambisana nawo.

Ukulandelana kokusebenza

Bhala umthwalo omkhulu ophilayo, bese i-MTU yesixhumi, bese ukuthi iphakethe langaphandle lithwala ibhithi yokwenqaba ukuhlukaniswa noma cha, futhi ekugcineni ukuthi impendulo ye-ICMP iyafika kumthumeli. Lokho kulandelana kunciphisa isiphambeko ngaphandle kokuqagela. Gcina konke ukubona nesitembu sesikhathi nendawo yokugcina, ngoba zonke izinombolo ezine ziyanyakaza lapho umzila ushintsha.

Shintsha inani elilodwa, hlola futhi ukudluliswa kwasekuqaleni futhi gcina umphumela. Umhubhe odlula isivivinyo esikhulu kodwa osama kuhlelo lokusebenza usuwelwe enye inkinga, futhi lokho kuyinqubekela phambili efanele ukubhalwa. Umuntu olandelayo uthanda izinombolo kunokuphetha.