Kungani imizila enezindleko ezilinganayo yenza amaphutha e-VPN abe nzima ukubona
Lapho amathumbu amaningi abelana ngezindleko ezifanayo, ukugeleza ngakunye kungathatha okunye. I-ping ephumelelayo ayisho lutho mayelana nomzila osethenjiswa yakho ewusebenzisayo ngempela.
Umsebenzisi ubika ukuthi uhlelo lwangaphakathi luyasebenza kusuka kumshini owodwa futhi luhluleke kusuka komunye, kuyilapho i-ping oyisebenzisa kusuka kusango iphumelela kuzo zombili izimo. Lapho kunamathumbu amaningi anezindleko ezilinganayo, lokhu akukhona ukuphikisana. Ukugeleza ngakunye kubekwa endaweni yaso elandelayo, ngakho ukuhlola kwakho nesikhathi somsebenzisi kungenzeka kusebenzisa imizila ehlukile. Incazelo engezansi iphinda ikhiqize lokho kukhetha ngaphambi kokuba kushintshwe noma yini.
I-ping eyodwa, imizila eminingi engaba khona
Lapho umzila unamagxathu angaphezu kwelilodwa alandelayo ngezindleko ezifanayo, umhambisi kufanele akhethe eyodwa ngephakethe ngalinye. Izinhlelo eziningi zenza i-hash yezinkambu zephakethe, ngokuvamile amakheli omsuka nendawo ekuyiwa kuyo kanye neprotokholi namachweba, ukuze izimpendulo zihlale emzileni ofanayo. Izinhlelo ezihlukile, noma ukuxhumana okuhlukile kohlelo olulodwa, kukhiqiza ama-hash ahlukile.
Yingakho ukuxilonga okuvela kusango kufakazela okuncane kangaka. Ukuhlola kwaso isango kunamakheli namachweba akho, ngakho kune-hash yako. Kungase kwehlele ethunjini elinempilo kuyilapho umsebenzisi eqhubeka ewehlela kweliphukile.
Indlela ipulatifomu ekhetha ngayo igxathu elilandelayo
Phinda ukhethe esikhundleni sokukuqagela. Buza ingqikithi ukuthi iyiphi imizila ezingayisebenzisa kumsuka nendawo ekuyiwa kuyo efanayo nesikhathi esihlulekayo. Lokho kusesha kufaka izinkambu ukusesha okuvamile kwendawo ekuyiwa kuyo okungazinaki. Kuyisebenzise futhi kusuka kukilayenti esebenzayo bese uqhathanisa izimpendulo ezimbili:
ip route get 10.20.5.7 from 10.20.0.14Izinguqulo ezintsha ze-iproute2 zamukela neprotokholi nechweba lendawo ekuyiwa kuyo, okubalulekile lapho i-hash ikufaka. Qhathanisa lokho kuphuma nokusesha okufanayo okuvela kukilayenti esebenzayo, futhi umehluko uwubufakazi obukushiyile.
| Observation | Likely cause | First check |
|---|---|---|
| Ping works, application fails | A different flow hash selects another tunnel | Per-flow lookup from the client's address |
| Some users fail, others do not | One tunnel lacks a prefix or selector | Compare both tunnels' installed routes |
| Fails only at larger sizes | Tunnels have different effective MTU | Probe the same size over each path |
| Fails after a reconnect | Stateful asymmetry between paths | Session state on both gateways |
Landela ukugeleza okuhlulekayo, hhayi ithebula lemizila
Ithebula lemizila ibala yomibili imithumbu futhi ngokwencazelo ibonakala ilungile. Umbuzo uwukuthi ithumbu ngalinye lenza ini ngephakethe uma selikhethiwe. Qinisekisa ukuthi womabili athwala izingxenye zokuqala ezivikelwe ezifanayo, imvume yokudlulisa efanayo nomzila wokubuya ofinyelela kukilayenti elifanayo.
Naka amadivayisi anesimo phakathi. Uma isicelo siphuma ngethumbu elilodwa futhi impendulo ibuya ngelinye, i-firewall noma i-NAT engakaze ibone ukugeleza kwasekuqaleni izokulahla. Womabili amathumbu adlulisa ithrafikhi ngendlela efanele, futhi ukuxhumana kusahluleka.
Hlola ne-MTU kumzila ngamunye. Umzila onokufakwa okungeziwe unciphisa usayizi osebenzisekayo, futhi ukudluliswa okuphumelela ethunjini elilodwa kuyama kwelinye ngqo kusayizi lapho encane iphuka khona.
Qhathanisa umzila owodwa ngesikhathi
Lapho umklamo uvumela ukunakekelwa, khipha ithumbu elilodwa enkonzweni bese uphinda umsebenzi womsebenzisi. Uma iphutha linyamalala, inkinga ingeyomzila owukhiphile, futhi isinyathelo esilandelayo ukuqhathanisa ukucushwa kwawo nowomakhelwane wawo esikhundleni sokuphinda uhlole ithebula lokuhambisa.
Qhathanisa uhlelo lwangempela, hhayi ama-ping aphindaphindiwe. Bhala ukuthi iphutha lilandela igxathu elithile elilandelayo, usayizi wephakethe noma ushintsho ngemuva kokuxhuma kabusha, ngoba lezo zimpawu ezintathu zikhomba ekulungiseni okuhlukile.
Ekugcineni, bhala ukuthi kungani imizila ithathwa njengelinganayo nokuthi iphutha kufanele likhiphe kanjani eyodwa yayo enkonzweni. Imizila eminingi iphephile kuphela lapho imizila ishintsheka ngempela, futhi lokho kuyisitatimende somklamo okufanele kuhlolwe esikhundleni sokucatshangwa.