Umthetho womzila ufunda uphawu lwephakethe, hhayi i-conntrack
Umzila osuselwa kunqubomgomo ufunda uphawu lwephakethe; i-conntrack igcina elinye inani elinokuphila isikhathi eside. Ukukopisha phakathi kwakho kuyisinyathelo okufanele umuntu asibhale.
Izinhlolo ezine zihlukanisa umthetho wophawu osebenzayo nomzila osebenzayo: umthetho ufunda luphi uphawu, ukuthi iphakethe lusaluthwala yini ngesikhathi sokusesha, ukuthi uphawu lokuxhumana lwabuyiselwa yini kumaphakethe alandela, nokuthi ukuthi imaskhi nokubaluleka komthetho ohambisanayo kuyawuvumela yini ukuthi usebenze. Isibali esikhulayo sifakazela kuphela ukuthi umthetho othile wahambisana nokuthile. Asisho lutho mayelana nalokho iphakethe elalikuthwele ngesikhathi i-kernel ikhetha indlela yalo.
Amaphawu amabili ahlala ezindaweni ezehlukene futhi aphela ngezikhathi ezehlukene.
Amaphawu amabili, ukuphila okubili
Uphawu lwephakethe lungolwe-skb eyodwa, luhamba nayo phakathi kwamahuku futhi lusetshenziswa isikhethi se-fwmark somzila osuselwa kunqubomgomo. Uphawu lokuxhumana lungolwencwadi ye-conntrack, luhlala kuwo wonke amaphakethe alowo mfudlana futhi alubonakali kumthetho womzila kuze kube yilapho okuthile kulukopisha kubuyela emuva. Ukugcina uphawu lwephakethe kukuxhumana kuwukugcina; ukulubuyisela kuyisenzo esihlukile. Akukho kokubili okwenzeka ngokuzenzakalela.
Yingakho iqoqo lemithetho lingabonakala livumelana ngenkathi isinqumo somzila sibona uziro: inani lagcinwa, futhi akukho lutho olwalubuyisela.
Ukukopisha phakathi kwakho kuyisinyathelo osibhalayo
Imithetho emibili ebalulekile ihamba ngezindlela eziphambene: eyodwa igcina uphawu lwephakethe kukuxhumana, enye ilayisha uphawu lokuxhumana epheketheni. Ukuthi iyiphi oyidingayo kuncike ekutheni ukuhlukaniswa kwenzeka nini mayelana nomfudlana. Idizayini ingase idinge kuphela uphawu lwephakethe, futhi ukwengeza ukumaka kwe-conntrack ngenxa yokuthi isisombululo esithile sasisebenzisa kokubili kuyindlela iqoqo elilula elithola ngayo indlela yesibili yokwehluleka.
ct mark set meta mark meta mark set ct mark
Bhala isiqondiso eceleni komthetho, ngoba akucaci kusintaksi ngokubona kokuqala. Umugqa wokuqala uyagcina, owesibili uyabuyisela, futhi akukho okusikisela okunye.
Hlukanisa ngaphambi kokusesha okukusebenzisayo
Ithrafikhi ekhiqizwa endaweni kanye nethrafikhi edluliselwa isuka ku-LAN zidlula kumahuku ahlukene futhi zifinyelela ezinqumweni zomzila ngezikhathi ezihlukene. Umthetho wokuphuma osebenza ekuxhumaneni kweroutha ngokwayo awufakazeli ukuthi iphakethe leklayenti elidluliselwe laminywa ngaphambi kokusesha kwalo. Beka ukuhlukaniswa lapho ukusesha okukusebenzisayo kungakafiki khona, futhi uhlole ukuthi imithetho elandela kulelo chungechunge iyabhalela phezulu yini inani. Ukuhleleka ngaphakathi kochungechunge kuyingxenye yokuhlelwa, akuyona imininingwane yokuqalisa.
Ukuqhubeka kwesimo sokuxhumana nakho kudinga uhlelo olucacile. Uma kuhlukaniswa kuphela iphakethe lokuqala lomfudlana, amaphakethe alandela adinga ukubuyiselwa kophawu olugciniwe, kungenjalo azothatha indlela engenalo uphawu. Lowo umehluko phakathi kophawu oluchaza ukuxhumana noluchaza iphakethe.
Buza umzila umbuzo onophawu
ip route get 10.77.0.10 mark 0x2
Hlola imithetho netafula, bese ubuza umzila ngokufaka uphawu, kanye nomthombo noma isikhombisi sokungena uma kukhona okuthinta inqubomgomo. Ukusesha okuvamile okungenalo uphawu kuphendula omunye umbuzo futhi kuzobika ngokujabulayo indlela obungayifuni. Hlola imaskhi nokubaluleka komthetho kanye nenani lako, futhi uqinisekise ukuthi itafula elikhethiwe linomzila osebenzisekayo.
Isibali esikhulayo siwubufakazi bokuthi umthetho othile wahambisana nephakethe elithile. Akusona ubufakazi bokuthi iphakethe lokugcina laluthwele uphawu obekuhlosiwe endaweni efanele yesinqumo.
Funda uphawu, isiqondiso, isikhathi nemaskhi. Izinhlolo ezine, futhi umzila uyeka ukuba yimfihlakalo.