Abanikazi Ababili, Ikheli Elilodwa: Ama-IP Aphindwe ku-TAP Bridge

Iklayenti elilodwa le-Windows libamba i-10.8.0.2 futhi lisebenza kuze kushintshe ukulandelana kokuqalisa; bese kuthiwa ikheli elifanayo liyingxabano kuyilapho kungashintshanga lutho kuklayenti. Umsingathi wesibili esigabeni esifanayo esinebhuloho ufuna inani elifanayo, futhi umshini oqeda ukucushwa kokugcina ngokuvamile uyahlulwa. Bobabili bakholelwa ukuthi ngeyabo, futhi ohluliwe uyeka buthule ukusebenzisa ikheli ayeqondiswe ukuba alisebenzise. Ukukubheka lokhu njengenkinga yesikhathi yikho okwenza iphinde ivele njalo lapho kuqaliswa kabusha.

Funda ubufakazi bengxabano ngaphambi kokuthinta ibhuloho

I-Windows ibika ingxabano yekheli kanye nekheli lehadiwe lomnye ofuna. Lelo kheli lehadiwe yiqiniso eliwusizo, ngoba lihambisana nesixhumi esisodwa kumsingathi oyedwa, kuyilapho igama lombukiso womcimbi lingasho lutho mayelana nokuthi iphindwe kuphi. Bhala phansi ikheli lehadiwe ngaphambi kokushintsha noma yini.

Ukutholwa kokuphindwa okusekelwe ku-ARP kuhlola abanikazi abancintisana ngaphambi kokusetshenziswa kwekheli futhi kuqhubeka nokuqapha ngemuva kwalokho. Yingakho umsingathi owayengekho ngesikhathi uhlela inethiwekhi usengabangela ingxabano ngisho ngemuva kwehora. Ukuhlola akusona isikhathi esisodwa ekuholeni. Umshini ovela ngemuva kungalithatha ikheli ebelisetshenziswa ngokuthula usuku lonke, futhi yingakho ukwehluleka kufundwa njengomjaho hhayi njengephutha lokucushwa.

Umcimbi wengxabano uwodwa awusho ukuthi yikuphi ukucushwa okudale esinye isicelo, futhi ukususa amakheli ngokuhlola kubhubhisa ukumatanisa obekungakutshela. Inhloso yobufakazi ukuguqula ikheli lehadiwe libe isixhumi ongakwazi ukusihlola. Ukusesha ku-inventri ngokwegama lomshini ngokuvamile kukuholela kumsingathi ongafanele.

Bhala wonke isicelo esigabeni

Ukucushwa kwe-TAP okunebhuloho kuhlanganisa izigaba ze-Ethernet ezazihlukene ngaphambili, ngakho amakheli ayeyingqayizivele ezinethiwekhi zawo angashayisana lapho amafreyimu abelana isixhumanisi esisodwa. Yingakho leli qembu lokwehluleka likhona ku-VPN futhi lingekho kunethiwekhi ezinomzila ezaqala ukusebenza esikhundleni salo. Bhala wonke umnikazi ongaba khona hhayi owokuqala omsolayo.

Dabula uhlu ngalokhu kulandelana: amakheli kudivayisi ngayinye yebhuloho nasemachwebeni ayo angamalungu, OpenVPN kanye nanoma yikuphi ukwabiwa okungaguquki kuklayenti ngayinye, kanye nanoma iyiphi iseva ye-DHCP ehlanganisa isigaba esinebhuloho. Bese uqondanisa ikheli lehadiwe elisuka kumbiko wengxabano nezixhumi othole zazo.

ip -4 addr show | grep -E 'inet |^[0-9]+: '
bridge link show
ip neigh show dev br0

Ichibi kanye nebanga le-DHCP yibo abanikazi ababili abantu ababakhohlwa. Phrinta womabili amabanga ndawonye futhi ufune ukugqagqana ngaphambi kokwenza enye into. Ikheli lebhuloho elabelwe ngesandla kanye nechibi elikhipha inani elifanayo kuzoshayisana ekugcineni, futhi ukushayisana kubonakala kungahleliwe kuze kube yilapho womabili amabanga ephrintiwe ndawonye.

Nikeza izinombolo amabhuloho kuphela lapho edinga ubunikazi

Kubhuloho elijwayelekile lomsingathi, idivayisi yebhuloho ithwala ukucushwa kwesendlalelo sesithathu somsethi, futhi amalungu e-Ethernet ne-TAP asebenza njengamachweba. Ukunikeza ilungu ngalinye ikheli lalo, noma ukukopisha iskripthi esisodwa sokuhlela emishinini eminingi ngaphandle kokushintsha ikheli, yiyo indlela isigaba esisodwa esigcina sinabanikazi abathathu benani elifanayo. Amalungu awadingi ubunikazi bawo ukuze adlulise amafreyimu. Adinga ubunikazi obulodwa ngqo kumsingathi ngamunye okufanele afinyeleleke kuso kuleso sigaba.

Ibhuloho elishintsha amafreyimu kuphela alidingi nhlobo ikheli kuleso sigaba. Ukulishiya lingenazinombolo kususa lonke iqembu lokushayisana, inqobo nje uma umsingathi usenendlela yokuphatha oyihlolile. Qinisekisa ukufinyelela kuqala, susa ikheli okwesibili, futhi uhlole ukufinyeleleka okwesithathu.

Uma ikheli osuzolise susa liwukuphela kwendlela yokungena emshinini, ukulisusa njengokuhlola ukuphazamiseka ozibangele wena hhayi ukuxilongwa. Qinisekisa indlela engaphandle kwebhendi ngaphambi kokuhlola noma yini.

Yenza isilungiso simelane nokuqaliswa kabusha

Ukushintsha isixhumi esisebenzayo kulungisa ukuqaliswa kwamanje futhi akukho okunye. Noma yini edala ikheli kabusha ekuqaleni izobuyisela ingxabano ekuqalisweni kabusha okulandelayo, futhi uzophetha ngokuthi isilungiso asisebenzanga kuyilapho empeleni sasingakaze siqine. Bhala ukuthi yiliphi ifayela olushintshile, ukuze ukuqaliswa kabusha okulandelayo kuqinisekise isinqumo esikhundleni sokuveza isimangaliso.

Thola umnikazi walokho kucushwa: iphrofayela yomphathi wenethiwekhi, ifayela lesixhumi ngasinye, incazelo ye-container noma ye-VM, noma ucezu lwe-cloud-init. Kushintshe lapho, bese uqalisa kabusha ngamabomu umsingathi oyedwa othintekile ukuze uqinisekise ukuthi inani elisha yilo elibuyayo. Ukuqaliswa kabusha ukuphela kokuhlola okuqinisekisa ukuqina.

Gcina amakheli ebhuloho ngaphakathi kwebanga le-DHCP njengokungafakwa, noma uwahambise ngaphandle. Ukubhuka okukhona kuphela kuspredishithi akusikho ukungafakwa, futhi umabi ngeke akufunde.

Kufakazela lokho lapho wonke amaklayenti eku-inthanethi

Ukuxhumana okukodwa okuphumelelayo akufakazeli lutho, ngoba uphawu lokuqala lwaluvela kuphela lapho ukulandelana kushintsha. Qalisa wonke amaklayenti ahlosiwe, shintsha ukulandelana kokuqalisa, futhi uphinde ngemva kokuxhuma kabusha. Bese uqalisa kabusha umsingathi owawujwayele ukuhlulwa umjaho futhi uqinisekise ukuthi ikheli liyasinda.

Ukuze kuqinisekiswe ngqo, hlola ukuthi ukhona yini umnikazi ophindiwe ngaphambi kokwaba ikheli futhi ngemva kwalokho uqaphe ithebula labomakhelwane. Uma kungenalutho oluphendula ukuhlola futhi ikheli lihlala lingumnikazi oyingqayizivele kumjikelezo ogcwele wokuqaliswa kabusha, ingxabano ixazululiwe hhayi nje ifihliwe. Imiyalo engezansi yenza kokubili ukuhlola kudivayisi yebhuloho. RFC 5227 ichaza ukuziphatha kokuhlola nokumemezela okwenziwa yilawa mathuluzi, futhi yiwona mthombo okufanele ucashunwe lapho othile ehlongoza ukuthi ukutholwa kucishwe.

arping -D -I br0 10.8.0.2
ip neigh show dev br0 | grep 10.8.0.2

Ukuhlola okungatholi mpendulo kuwumphumela olindelekile esigabeni esihlanzekile. Ukuhlola okudonsa impendulo kukunikeza ikheli lehadiwe lomnikazi osele, ubufakazi obufanayo obanikezwa umcimbi we-Windows ekuqaleni. Gcina lokho okukhiphiwe kanye nerekhodi loshintsho, ngoba yikho kuphela ubufakazi bokuthi ikheli ligcinwa ngendlela eyingqayizivele.