I-DS-Lite ivimbela ukusingathwa kwe-IPv4 okungenayo, hhayi i-VPN ephumayo

Isimo sokuhumusha silandela uhlangothi oluqala ukuxhumana. Landela isicelo esiphumayo nge-B4 ne-AFTR, bese ubona ukuthi kungani ukusingatha kwehluleka.

I-DS-Lite iyindlela yokunikeza iklayenti ukuxhumana kwe-IPv4 ngaphezu konethiwekhi yokufinyelela ethwala i-IPv6 kuphela. Irukhula yasekhaya ayinalo ikheli layo elikhethekile lomphakathi le-IPv4, futhi lelo qiniso elilodwa lenza abantu bakholwe ukuthi i-VPN ye-IPv4 ayikwazi ukusebenza kusukela kulolo xhumano. Ngasemva, ngokuvamile isebenza kahle. Umhlinzeki uhumusha uxhumano, futhi umkhawulo okude ubona iklayenti elijwayelekile le-IPv4. Okwephukayo uhlangothi oluphambene: ukusingatha into elindele i-IPv4 engenayo engacelwanga. Umehluko ukuthi yiluphi uhlangothi oluqala ingxoxo.

Yiluphi uhlangothi oluqala uxhumano

Iklayenti eliqala uxhumano lidala isimo sokuhumusha njengoba lihamba. Umhumushi womhlinzeki ubona iphakethe lokuqala, wabela imephu futhi uyidlulisela. Ithrafikhi ebuyayo ihambisana naleyo mephu ngoba imephu isivele ikhona.

Iseva elindele ukuxhumana ayinaso isimo esinjalo engasidala. Othile ovela ngaphandle kufanele afinyelele ikheli nechweba umhlinzeki angavumanga ukulimephela, futhi leso isicelo esihluke ngokuphelele.

Landela isicelo esiphumayo

Isakhiwo RFC 6333 sisho zombili iziphetho. Isakhi sehlangothi leklayenti ngu-B4, esihlanganisa i-IPv4 ku-IPv6. Isakhi sohlangothi lomhlinzeki ngu-AFTR, esenza ukuhumusha kwekheli futhi sidlulise iphakethe njenge-IPv4.

Client's IPv4 VPN packet
  → Customer B4
  → IPv4 carried over the provider's IPv6 network
  → AFTR address translation
  → IPv4 VPN server

Iseva ye-VPN ithola ukuxhumana okuvamile kwe-IPv4 kusukela ekhelini elihunyushiwe lomhlinzeki. Ayidingi imodi ye-DS-Lite, ichweba elikhethekile noma ulwazi lokuthi unethiwekhi yokufinyelela yeklayenti yi-IPv6 kuphela. Leyo yingxenye abantu abayigeji: umkhawulo okude awukwazi ukukubona.

Ukulungiselelwa kweklayenti ngokwako nakho kuvamile. Kudinga indlela ye-IPv4 esebenzayo eya kuseva, enikezwa i-B4 ne-AFTR, futhi kudinga ukuthi igama lomsingathi leseva lixazululwe libe yikheli le-IPv4.

Kungani ukusingatha okungenayo kuyisimo esihlulekayo

Ukugcina iseva ye-VPN ye-IPv4 ekhaya kuwumklamo oshayisana nokwabiwa kwamakheli okwabiwe umhlinzeki. Umhumushi womhlinzeki ungumnikazi wekheli lomphakathi nethebula yamamephu, futhi akanasizathu sokudala imephu engenayo unomphela yomthengi oyedwa.

Umthetho wokudlulisela ichweba kurukhula yasekhaya awukwazi ukulungiselela i-AFTR. Umthetho ungokoqobo futhi ulungile kudivayisi yasendaweni, futhi awushintshi lutho phezulu, yingakho uphawu lubonakala njengenkinga yodonga lomlilo engapheli.

Yilapho futhi ukuhumusha kwezinga lomhlinzeki kwehluka kukheli olulodwa lomphakathi: ngisho nokudlulisela kwasendaweni okulungile kungase kwehlela ekhelini elabiwe ngabathengi abaningi.

Hlola ngaphambi kokushintsha uhlelo lokufinyelela

Qala uqinisekise imodi enikeziwe. Isiteki esikabili somdabu, i-DS-Lite nonethiwekhi ye-IPv6 kuphela esebenzisa enye indlela yokuhumusha kuyizinhlelo ezintathu ezihlukene, futhi amagama okumaketha omhlinzeki awavamisile ukuhambisana nelethikili.

Bese usungula ukubona okune kokwehluleka kokuphuma. Ingabe iklayenti lixazulula igama lomsingathi le-VPN libe yindawo ye-IPv4? Ingabe ukuxhumana okuvamile kwe-IPv4 kuyasebenza, esikhundleni sesicelo sesiphequluli okungenzeka sasebenzisa i-IPv6 buthule? Yikuphi ukuthutha nechweba iklayenti elizamayo, futhi ingabe amalogi womkhawulo wokugcina awubona nhlobo lowo mzamo? Ingabe ukwehluleka kwenzeka ngesikhathi sokushintshana kokuqala, ngemuva kwesikhathi sokungenzi lutho, noma kuphela ekudluliselweni okukhulu?

Lezo zimpendulo zine zikhomba ekuhlungweni, ekupheleni kwesikhathi sesimo sokuhumusha, kumkhawulo ongafanele noma ekuphathweni kosayizi wephakethe. Akukho kukho okutholakalayo ngokubona i-DS-Lite ekhasini le-akhawunti.

Funda izinguquko zomhlinzeki ngokucophelela

Ushintsho lwe-akhawunti lungase luhambisane nokuxhumana okusebenzayo kuyilapho lushintsha izici ezimbalwa ngesikhathi esisodwa. Bhala ukuthi yisiphi isici esishintshile, ngoba igama elisha lephakethe akusiyo incazelo yethekhnoloji.

Umyalelo wokunika amandla isiteki esikabili awucaci kuze kube othile uqinisekisa lokho umhlinzeki akunikezayo ngempela. Ukukuthatha njengesidingo esijwayelekile sabaklayenti be-VPN ye-IPv4 kwenza ukuqagela kube yinqubomgomo.

Uma isidingo sangempela kuwukusingatha kwe-IPv4 okungenayo, xoxa nomhlinzeki ngohlelo olungenayo olusekelwayo, ukwabiwa kwekheli komdabu noma omunye umklamo wokufinyelela. Uma isidingo kuyilaptop efinyelela iseva ekude, buza kunalokho ngaleyo mpompo yokuphuma ngqo. Ukulandelana komsebenzi: shono uhlangothi, qinisekisa imodi enikeziwe, hlola i-IPv4 evamile nokuthutha okukodwa, bese ushintsha uhlelo lokufinyelela kuphela uma uhlangothi ludinga ngempela.

Izihloko ezihlobene