Ukuvimba i-IPv6 ukuze kuvikelwe i-WireGuard kuphula umhambi

Umthetho wokungenayo olahla yonke i-IPv6 ukhipha nokutholwa komakhelwane ne-Packet Too Big. Hlukanisa izibopho ezintathu, bese uhlola ukuthi umhambi usasebenza.

Inhloso inengqondo: abasebenzisi bomhubhe kuphela okufanele bafinyelele izinsizakalo kulo mshini. Isixazululo abantu abasisebenzisayo siwuchungechunge lokungenayo lwe-IPv6 olulahla konke ngaphandle kwe-WireGuard, futhi lokho kulahla nokuhamba okugcina umhambi unamathele kusixhumanisi sawo. Ukutholwa komakhelwane nemiyalezo yokunakekelwa kwendlela akukona ukufinyelela kwinsizakalo, futhi ukukususa kwenza umshini ongafinyeleleki ngenxa yezizathu ezingahlobene nenqubomgomo yakho. Umhubhe uyaphakama, izinsizakalo zilinganiselwe ngendlela efanele, futhi akukho okunye kusixhumanisi okusebenzayo.

Izibopho ezintathu, iqoqo lomthetho elilodwa

Isibopho sokuqala ukusebenza kwenethiwekhi yangaphandle: umhambi kufanele ahlale kusixhumanisi sawo, axazulule omakhelwane futhi azi imikhawulo yendlela yaleso sixhumanisi. Esesibili isilaleli esibethelwe, esamukela i-UDP ekhelini nasembobeni oyikhethile. Esesithathu iqoqo lezinsizakalo ezivulwe ngemfihlo oyfuna abasebenzisi bomhubhe bazifinyelele.

Lena imithetho emithathu ehlukene, futhi eyesibili neyesithathu kuphela ehlobene ne-VPN. Iqoqo lomthetho elizithatha njengelilodwa lizuzwa indlela yokwehluleka lapho ukuqinisa umngcele wohlelo lokusebenza kuphula buthule ukunamathela komhambi.

Zigcine emaketangeni ahlukene noma okungenani kumazwana ahlukene, ukuze umuntu olandelayo abone ukuthi imuphi umugqa ukhona ngani.

I-ICMPv6 yenzani kumhambi

I-IPv6 incike ku-ICMPv6 ezintweni eziningi kakhulu kune-echo. Isicelo nesimemezelo somakhelwane kuthatha indawo ye-ARP futhi kuyadingeka ekulethweni kwasekhaya. I-Packet Too Big ithwala ulwazi lwe-MTU yendlela, futhi ukungayinaki kudala ukudluliselwa okumisayo ngamaphakethe amakhulu. Izimemezelo zomhambi zithwala indlela ezenzakalelayo kanye nolwazi lwesiqalo lapho isixhumanisi sisebenzisa ukulungiselelwa okuzenzakalelayo.

I-RFC 4890 ihlukanisa imiyalezo okufanele isihlungi somhambi siyivume kuleyo eyisinqumo sokuphatha, futhi yenza lokho esigabeni somhambi esihlukile emithethweni yomhambi wedatha odlulisa phakathi kwamanethiwekhi. Ukufunda isigaba sokudlulisa kuphela kuletha inqubomgomo yokungenayo eqinile kakhulu kumhambi evikelayo.

Umthetho ongokoqobo ukuvumela imiyalezo ebalulekile yamaphutha nokulungiselelwa kusixhumanisi esiyidingayo, ilinganiselwe ngohlobo nomthombo lapho inkundla ivuma khona, futhi kuthathwe isinqumo esicacile mayelana nokusele.

Ukufaka konke lokho esikhundleni ngemvume ebanzi ye-ICMPv6 kuxazulula inkinga yokutholakala futhi kuyeke ukuhlunga. Ukufaka esikhundleni ngokulahla okubanzi kuxazulula inkinga yokuhlunga futhi kuyeke umhambi.

Vumela umhubhe kuqala, bese kuba insizakalo

Yamukela ukuthuthwa kwe-WireGuard ekhelini langaphandle elihlosiwe nasembobeni we-UDP, futhi wamukele ukuhamba okubuyayo ngokulandelela ukuxhumana. Bese uvumela izinsizakalo zohlelo lokusebenza ukuba zidlule esixhumanisini somhubhe, zisuka emithonjeni oyigunyazayo ngempela.

Imvume yembobo we-UDP wangaphandle ayigunyazi izicelo ezivulwe ngemfihlo ngaphakathi kwayo. Lowo mehluko uyisizathu sonke sokuthi isixhumanisi somhubhe sivele emithethweni yensizakalo.

Funda iqoqo lomthetho njengoba linjalo, hhayi njengoba ifayela likuchaza:

sudo nft list ruleset
ip -6 addr show
ip -6 route show default

Isilaleli ekhelini lomzimba siwukuchayeka okuhlukile kwinsizakalo efanayo ekhelini lomhubhe. Uma umshini udlulisela nokuhamba komunye umshini, leso yisinqumo sochungechunge lokudlulisa hhayi le nqubomgomo yokungenayo, futhi sidinga izizathu zaso.

Hlola isixhumanisi, hhayi umhubhe kuphela

Umhubhe osebenzayo ngemuva koshintsho ufakazela okuncane kunalokho okubonakala, ngoba ukungena komakhelwane okukhona nokuxhumana okusunguliwe kungafihla umyalezo wokulawula inqubomgomo manje eyowulahla.

Hlola ukunamathela ngqo, bese uhlola ukuthi indlela ekhishiwe isahluleka:

ip -6 neigh show
ping -6 -c 3 2001:db8:1::1
sudo nft -c -f /etc/nftables.conf

Ithebula lomakhelwane elihlala liphelele ngemuva kokuqalisa kabusha liyisibonakaliso sokuthi ukutholwa kusasebenza. Ithebula elingena khona lingagcwali futhi liyisibonakaliso sokuthi ulihlungile. Umyalo wesithathu uqinisekisa isakhiwo sohlelo lomthetho ngaphandle kokulusebenzisa, futhi lokho kufanele kwenziwe ngesikhathi usunesikhathi somhlangano.

Buyisela umhambi owazikhiyela ngaphandle kuwo

Ngaphambi kokushintsha imithetho yodonga lomlilo ethwala isikhathi sakho sokuphatha, gcina esinye isiteshi: ikhonsoli, ukuxhumana kwe-serial, noma ukubuyiselwa okuhleliwe okususa imithetho emisha uma ungakukhanseki.

Uma ushintsho lukukhiyela ngaphandle ngempela, ukubuyisela kudlula kuleso siteshi hhayi kunethiwekhi oyisuse manje. Buyisela iqoqo lomthetho lwangaphambilini kusuka ekopisheni egciniwe, qinisekisa ukuthi umhambi uyafinyeleleka futhi, bese kuthi ngemva kwalokho kuphela usebenzise inqubomgomo ehlosiwe ngezingcezu ezincane.

Inqubomgomo yokugcina ayiyona eyomhlaba wonke. Ukukhethwa kwamakheli, ukuhamba kwendlela nokusetshenziswa kodonga lomlilo kuyizingeniso zokusatshalaliswa, kodwa umngcele uyafana yonke indawo: nqaba ukufinyelela kohlelo lokusebenza okungahlosiwe ngesikhathi ugcina ukuhamba kokulawula okuthwala umhubhe ogunyaziwe.

Izihloko ezihlobene