GDOI: kungani iseva yokhiye ingekho endleleni yakho yedatha
Isilawuli se-GDOI sisabalalisa inqubomgomo yeqembu nokhiye; amalungu avikela idatha. Ukubhalisa, ukulethwa kokuvuselelwa kokhiye nokudlulisa kudinga ukuhlolwa okuhlukile.
Iseva yokhiye yeqembu isabalalisa inqubomgomo nokhiye emalungwini, futhi amalungu avikela ithrafikhi ngokwawo. Lowo umusho uzwakala njengenkambiso kuze kube yilapho umklamo uthatha isilawuli njengesidlulisimfuzo sayo yonke iphakethe evikelwe; khona-ke itopology ithola ukugxuma ebbingayidingi neze futhi indlela yethrafikhi incike kudivayisi eyayihloselwe kuphela ukusabalalisa isimo. Ukusho ukuthi iseva yokhiye ikuphi nokuthi idatha ihamba kuphi kuyimidwebo emibili ehlukene, futhi i-GDOI yakhiwe eduze kwalowo mehluko. Ukuyihlanekezela akulona iphutha elincane lokumodela, ngoba kushintsha ukuthi uqapha ini futhi wandisa ini. Izigaba ezingezansi zilandela ukwehlukaniswa kwe-protocol uqobo.
Izinhlobo ezimbili zesimo sokuphepha
RFC 6407 ichaza ukushintshana kokudonsa kwelungu lokucela inqubomgomo nezinto zokhiye, nokushintshana kokusunduza okusabalalisa inqubomgomo nokuvuselelwa kokhiye kumalungu agunyaziwe. Kokubili kuphatha izinhlangano zokuphepha. Akukho kokubili okuwukugeleza kwedatha kohlelo lokusebenza, ngakho-ke ukushintshana okuphumelelayo kufakazela kuphela ukuthi isiteshi sokulawula sisebenzile. Ilungu lingabhalisa ngokuhlanzekile, liphathe okhiye abasebenzayo futhi lihluleke ukuvikela noma ukudlulisa ithrafikhi uma inqubomgomo yalo yedatha ingalungile. Lokhu kwehluleka kokubili akufani neze uma wazi ukuthi yikuphi ukushintshana okuthwala okuthile.
Izinga liphinde libize inhlangano yokuphepha yokuvuselela ukhiye evikela imilayezo yokuvuselelwa kokhiye, ehlukile kuzinhlangano zokuphepha zedatha ezichaza indlela amalungu avikela ngayo ithrafikhi.
Landela ukushintshana, hhayi umdwebo
Bheka ukuthi umlayezo ngamunye wenzelwe ini. Ukubhalisa kutshela isilawuli ukuthi yiliphi ilungu elicelayo futhi kusungula isimo; ukuvuselela ukhiye kutshela amalungu ukuthi inqubomgomo noma okhiye kushintshile; bese ithrafikhi yohlelo lokusebenza evikelwe igeleza phakathi kwamalungu isebenzisa inhlangano yokuphepha yedatha efakiwe. Ikheli lesilawuli livela kwezimbili zokuqala futhi akudingeki livele nakancane kwesithathu.
Yingakho umdwebo wezixhumanisi odwetshwe ngokusondelana komzimba uyadukisa lapha. Isixhumanisi sesilawuli singumthombo wokulawula, hhayi ngokuzenzakalela ukugxuma okulandelayo kwephakethe ngalinye elibethelwe.
Amarekhodi amathathu afanele ukugcinwa
Bhala phansi ukubhalisa okugunyaziwe kwelungu kanye nomthombo wokulawula elingafinyelela kuwo, indlela eletha ukuvuselelwa kokhiye okulandelayo, kanye nemizila nokuxhumana okuthwala ithrafikhi yohlelo lokusebenza evikelwe. Amarekhodi amathathu, abanikazi abathathu, futhi ukwehluleka kwelinye lawo kuveza uphawu oluhlukile. Ilungu elibhalisayo bese lingatholi nhlobo ukuvuselelwa libukeka lifana ncamashi nelungu elibhalise ngenqubomgomo endala, ngaphandle uma unamarekhodi womabili.
Gcina lezi eceleni kwesethulo hhayi emqondweni womuntu. Izinguquko zobulungu zivamile kancane kangangokuthi izizathu zihlala sezinyamalele ngaphambi kwesikhathi ezidingeka ngaso.
Isixhumanisi, ukuxhumana kwensizakalo, indlela yokucubungula
Kusango olusekelwe ezinsizakalweni kunomehluko owengetiwe: ikheli lesisekelo somzimba alifani nokuxhumana kwensizakalo yasendaweni, futhi ukusetshenziswa kwengxenyekazi yeqembu kunquma ukuthi ithrafikhi ifinyelela kanjani endleleni yayo yokucubungula i-IPsec. Ukuhambisa insizakalo iye esixhumanisini somzimba noma ukwengeza ukuhumusha okungahlobene ngoba umlayezo wephutha ubalula umthetho wesixhumanisi sensizakalo kuwukucabanga okugqoke njengokulungisa.
Funda imibhalo yeqembu ngokwalo mayelana nendlela ukuxhumana kwensizakalo okwamukela ngayo ithrafikhi. Indlela isebenza ngayo incike kumthengisi ngisho uma i-protocol ijwayelekile.
Imilayezo ye-protocol ejwayelekile nayo ayisunguli ukuhambisana phakathi kwabathengisi. Qhathanisa izici ezidingekayo, izimfanelo zenqubomgomo nezenhlangano, indlela yokuqinisekisa, kanye nengxenyekazi nohlelo olunembile ngaphambi kokucabanga ukuthi izinto ezimbili zizosebenza ndawonye.
Ukutholakala kokulawula nokudluliswa kwedatha kuyizinto ezihlukile zokuhlola
Hlela ukufinyeleleka kwesilawuli kokusebenza okujwayelekile, kwezinguquko zobulungu nasekuvuselelweni kokhiye. Ukushintshana kohlelo lokusebenza okuphumelelayo esimweni esivele sifakiwe akufakazeli ukuthi ukubhalisa noma ukuvuselela okulandelayo kungafinyelela ilungu, futhi igebe livame ukuvela emahoreni kamuva njengomhubhe oyeka ukwamukela amalungu amasha. Hlola ukubhalisa okusha, hhayi kuphela isikhathi sokusebenza esisebenzayo.
Bese uhlola ukudlulisa ngokwehlukile, ngaphandle kwesilawuli. Ukuhlola okubili, imiphumela emibili, nengxoxo emfushane kakhulu yokuthi yiluphi uhhafu ophukile.