Ukuhamba kwe-VPN okusekelwe kusizinda ngokuqhathaniswa nemizila ye-IP: yikuphi okufanele?
Igama lomsingathi ebhokisini le-tunnel ehlukanisiwe akulona umzila. Qhathanisa imithetho yesizinda namaprefikhi acacile mayelana nokuvuselelwa, ububanzi bezizinda ezingaphansi nokwenzekayo lapho i-DNS ishintsha.
Umzila we-IP uhambisana neprefikhi yekheli, futhi i-kernel iwusebenzisa ngaphandle kokubuza eminye imibuzo. Umthetho we-VPN osekelwe kusizinda uhambisana negama, okusho ukuthi okuthile ku-stack kufanele kunqume ukuthi yimaphi amakheli lelo gama eliwashoyo njengamanje futhi kugcine leso sinqumo sesikhathi samanje. Lezi zindlela ezihlukene ezinendlela ezihlukene zokwehluleka, futhi abadayisi basebenzisa igama elifanayo kuzo zombili. Ukuqhathanisa ezinhlelweni zezici kweqiwe iphuzu; qhathanisa ngokwenzekayo lapho impendulo ishintsha.
Ukwehlukanisa okusizayo kuphakathi komthetho oxazululayo nomthetho ongaxazululi.
Yini umthetho ngamunye ohambisana nayo ngempela
Umthetho weprefikhi uhambisana namakheli okuya kuwo kuthebula lokuhamba. Akukho okuxazululwayo, akukho okuphelelwayo isikhathi, futhi ukuhambisana kunembile kuwo wonke amaphakethe. Umthetho wesizinda uhambisana nesicelo sohlelo segama, okuthi RFC 1034 kuchaze njengesihlahla samalebula hhayi njengekheli. Eminye imikhiqizo ixazulula igama kanye bese ifaka amakheli akhishiwe njengemizila, okwenza umthetho ube umthetho we-IP onesikhathi sokuvuselela esinanyathiselwe.
Yazi ukuthi yikuphi kwalokhu okubili onakho ngaphambi kokulungisa amaphutha, ngoba ukwehluleka kubonakala kuhluke ngokuphelele esimweni ngasinye.
Umthetho wesizinda uhlala kuphi ku-stack
Uma umkhiqizo usebenzisa imithetho yesizinda ngommeleli wangaphakathi, ithrafikhi kufanele ifinyelele kulo mmeleli, futhi izinhlelo ezinganaki ummeleli wesistimu zidlula umthetho ngokuphelele. Uma uyisebenzisa ngokuxazulula amagama nokwengeza imizila, amakheli asesikhathini ngeqa nje lokuvuselela lokugcina. Uma ixhuma kusixazululi, ukuziphatha kwe-DNS kuba yingxenye yenqubomgomo yokuhamba, futhi isixazululi esiyisipele singakukhansela buthule.
Funda imodeli yomdayisi hhayi ilebula lesilungiselelo. Amakhasimende amabili anebhokisi elibizwa ngokuthi i-Split Tunnel angase enze izinto ezintathu ezihlukene.
Qhathanisa okwephukayo
Izinto ezintathu zephuka ngezindlela ezihlukene. Ukushintsha kwamakheli: igama lomsingathi le-CDN lingaxazululeka libe iqoqo lamakheli elihlukile phakathi nemizuzu, ngakho uhlu olukotshiwe luguga ngokushesha. Ububanzi bezizinda ezingaphansi: umthetho we-example.com angase ahlanganise i-api.example.com noma ungayihlanganisi, futhi imibhalo ivamise ukucacisa ukuthi yikuphi. Ukwehluleka kokuxazulula: lapho isixazululi sehluleka, ikhasimende elixazululayo lingase libuyele ekushayeleni ithrafikhi emhubheni noma ekuyithumeleni ngqo.
Eyesibili kuphela ingumbuzo wokucushwa. Ezinye ezimbili yimibuzo yokuklama mayelana nokuthi umkhiqizo ukulungele kangakanani ukuqagela.
| Behaviour | Prefix rule | Domain rule |
|---|---|---|
| Match basis | destination address | requested name or resolved addresses |
| Staleness | none | depends on refresh policy |
| Subdomain scope | not applicable | product-defined |
| Resolver outage | unaffected | product-defined fallback |
| Where to debug | routing table | client log plus resolver state |
Nini iprefikhi iyimpendulo engcono
Esizindeni esincane esizimele esizinzile, iprefikhi ecacile icaca kakhulu, iyashesha futhi kulula ukuyihlola. Iphinde imelane nokuphazamiseka kwesixazululi, ngoba akukho okudinga ukuxazululwa. Sebenzisa umthetho wesizinda lapho insizakalo isingathwa khona, lapho amakheli ejikeleza khona, noma lapho ungeke ukwazi ukubala iqoqo lendawo okuyiwa kuyo. Ungawusebenzisi ngenxa nje yokuthi igama lomsingathi yilona owaziyo ngengozi.
Uhlu olumi lokuqagela lulubi kakhulu kukho kokubili: lubukeka lunakekelwa, futhi lweqe ithrafikhi buthule ngosuku umhlinzeki afaka ngalo umsingathi.
Qinisekisa ngesicelo esisha
Hlola ngesicelo esibandayo ngemuva kokuxhuma kabusha okuvamile, ngoba ikhasi eligcinwe kunqolobane lingase lingalithinti umthetho. Xazulula igama, bese uhlola ukuthi uxhumano lwaya kuphi ngempela. dig +short app.example.com linikeza iqoqo lamakheli amanje, futhi uhlu lokuxhumana lwekhasimende likutshela ukuthi yiluphi uxhumano olwathwala ukugeleza.
Phinda ngemuva kwesikhawu sokuvuselela esichazwe umkhiqizo. Uma iqoqo lamakheli lishintsha futhi umthetho ungalulandeli, uthole ukuziphatha kwangempela.
Gcina nenqubomgomo yesixazululi yahlukene. Umthetho wesizinda udinga idatha yegama enembile, kodwa awunqumi wodwa ukuthi yisiphi isixazululi esiphendula umbuzo.