I-VPN yezigaba ezimbili: iklayenti likhetha umndeni wekheli, hhayi wena

Igama elilodwa, imindeni emibili, izindlela ezimbili ezihlukene. Umhubhe ungaba nempilo futhi isicelo sehluleke, ngoba iklayenti likhethe umgqokami ongakaze uwuhambise emzileni.

Umhubhe uyasebenza, amasayithi e-IPv4 ayafaka, futhi igama elilodwa lomsingathi liphelelwa yisikhathi. Isiphetho esisheshayo ukuthi i-VPN yephukile noma izifungo zokungena zingalungile, futhi ngokuvamile akukho okukodwa okulungile. Igama libuyisele ikheli le-IPv4 kanye ne-IPv6, uhlelo lwakhetha elilodwa, futhi umgqokami oyedwa kuphela kubo ababe nomzila osebenzayo. Iklayenti lenze isinqumo sokukhetha; umhubhe awuzange uhlanganise lokho elikukhethile.

Ukukhetha akusona isithembiso sokuhlanganisa

Ukukhethwa kwekheli okuzenzakalelayo, okuchazwe ku-RFC 6724, kunquma ukuthi umsingathi ukhetha liphi ipheya lomthombo nendawo ekuyiwa kuyo lapho kuningi okutholakalayo. I-Happy Eyeballs yengeza isu lokuxhuma phezu kwalokho: iqala imizamo kuyo yomibili imindeni futhi igcina leyo ephendula kuqala, ukuze umsebenzisi angalindi umndeni ophukile uphelelwe isikhathi.

Awekho amadivayisi angenza umzila. Uma umhubhe wakho uthwala i-IPv4 kuphela, umgqokami we-AAAA usengindawo esemthethweni iklayenti elingayizama, futhi ukwehluleka kuvela njengokulayisha kancane hhayi njengephutha, ngoba isiphequluli sehle emuva. Umsebenzisi ubika isayithi elinensindayo, hhayi eliphukile, futhi ithikithi lokusekela lizuzwa lokho kungacaci. Phinda ukwenze ngomndeni ongaguquki futhi umbiko uba ocacile.

Yikho kuhlehla emuva okwenza uphawu lungafani phakathi kwezinhlelo. Isiphequluli sifihla ukubambezeleka; iklayenti lomugqa womyalo elinomndeni ongaguquki likubonisa ukwehluleka kwangempela ngokushesha.

Thola umndeni isicelo esiwusebenzise ngempela

Qala ngegama, hhayi ngomhubhe. Buza zombili izinhlobo zerekhodi bese ubhala ukuthi kwabuya ini:

dig +short A example.com
dig +short AAAA example.com
curl -4 -sS -o /dev/null -w '%{http_code}\n' https://example.com
curl -6 -sS -o /dev/null -w '%{http_code}\n' https://example.com

Uma isicelo se-v4 siphumelela futhi isicelo se-v6 sehluleka, usubuyisele inkinga ngendlela ongayilungisa. Uma zombili ziphumelela ku-shell futhi isiphequluli sisahluleka, bheka isixazululi sohlelo ngokwalo noma impendulo egciniwe ngaphambi kokuthinta umhubhe.

Gcina umndeni kanye nendawo ekuyiwa kuyo emanothini akho. Ithikithi elithi isayithi alilayishi nge-VPN akekho ongalihlola, kuyilapho ithikithi elithi i-AAAA iyahluleka futhi i-A iyasebenza likhombisa umzila othile.

Hlola umzila walowo mndeni

Komndeni ohlulekayo, buza i-kernel ukuthi izosebenzisa muphi umzila bese uwuqhathanisa namakheli alungiselelwe omhubhe. Ku-Linux, ip -6 route get kubonisa i-interface nomthombo ongakhethwa endaweni ekuyiwa kuyo.

Bese uhlola umhubhe ngokwawo. Ontanga be-WireGuard bathwala uhlu lwama-IP avunyelwe, futhi okufakiwe kwe-0.0.0.0/0 akusho lutho nge-IPv6. Uma uhlu lontanga lungenawo umanduleli we-IPv6, iklayenti alinasizathu sokuthumela ithrafikhi ye-AAAA emhubheni, futhi iphakethe liphuma ngendlela umsingathi ebezozenza ngenye indlela.

Imithetho ye-firewall kanye nenqubomgomo ye-NAT kufanele ihlolwe ngendlela efanayo kumndeni ngamunye. Umthetho obhalelwe i-IPv4 awuhlanganisi i-IPv6 kunoma iyiphi inkundla, futhi lesi yisizathu esivame kakhulu sokuthi umndeni owodwa usebenze kanti omunye awusebenzi.

Ungayicishi i-IPv6 ukuze wenze isithombe sesikrini sibe lula

Ukucisha i-IPv6 kulo lonke uhlelo kuzokwenza uphawu lunyamalale futhi kukushiye ngaphandle kokuxilongwa. Kuyaphinde kuphule noma iyiphi indawo ekuyiwa kuyo eye-IPv6 kuphela, futhi kufihle lelo phutha elifanayo kuhlelo olulandelayo. Uma umshini ngempela akufanele usebenzise i-IPv6, leyo inqubomgomo yamabomu enomnikazi nokuhlolwa. Ukuyicisha ngesikhathi sesigameko akusikho kokubili.

Nquma ukuthi iklayenti kufanele lenze ini ngomndeni bese ukulungiselela ngokusobala: wudlulise emhubheni, noma uwuvimbe ngendlela esekelwayo ukuze ukukhetha kungaze kunikeze umgqokami ongafinyeleleki. Kokubili kuyimiklamo esemthethweni. Ukucishwa kwembulunga yonke akusikho kokubili, ngoba akusiwona umklamo nhlobo.

Okufanele kubhalwe ethikithini

Bhala izinto ezine: igama lomsingathi, umndeni ohlulekile, umzila okhethwe i-kernel, kanye nomphumela wesicelo esiqondene nomndeni. Lelo qoqo lanele ukuthi omunye umuntu abuyisele ukwehluleka ngaphandle kokuqagela ukuthi ubukhuluma muphi kulemizila emibili.

Imithetho yokukhetha ikheli ye-RFC 6724 ichaza ukuthi kungani iklayenti likhethe umgqokami elikukhethile, futhi i-RFC 8305 ichaza indlela yokugijima eyafihla ukubambezeleka. Akekho kubo ozohambisa iphakethe kuwe, futhi leyo ingxenye okufanele yenziwe umhubhe.

Izihloko ezihlobene