Indlela yokuhlola i-IPv6 nge-VPN ngensiza yakho
Awudingi isihloli se-IPv6 somphakathi ukuze ubonise ukuthi indlela eyodwa iyasebenza. Sebenzisa insiza oyilawulayo, thatha zombili izingqikithi, futhi ubhale okungakufakwanga ukuhlola.
Ikhasi lomphakathi lokuhlola i-IP liphendula umbuzo owodwa, futhi ngokuvamile hhayi lowo owuwubuzile. Likutshela ikheli lokuphuma elibonwe yikhasi; alikutsheli ukuthi ingabe umzila we-IPv6 odlula emhubheni uyasebenza, ukuthi ingabe umsingathi ukhethe i-IPv6 noma uhlehlele emuva, noma ukuthi ingabe uhlelo olukhishiwe lwathatha omunye umzila. Insiza egunyaziwe oyilawulayo iphendula umbuzo omncane ngendlela efanele, ngoba ubona zombili izingqikithi. Umhlahlandlela ongezansi umayelana nokuthola isiphetho ongakwazi ukusivikela, hhayi ukuthola umphumela oluhlaza.
Isinyathelo 1: shono ukuthi yimuphi umzila we-IPv6 owuhlolayo
Kusho lokho ngomusho owodwa. Isicelo esiya ekhelini le-IPv6 lomsebenzi womhubhe ngokwakhe sihlola umhubhe; isicelo esiya kumsingathi ongale kwesokuphuma sihlola ukuphuma kwe-IPv6 kokokuphuma; isicelo esiya ekhelini le-IPv6 eliyimfihlo sihlola umzila wangaphakathi.
Lawa amasho amathathu ahlukene futhi isicelo esisodwa esiphumelelayo asikwazi ukusekela wonke. Khetha lowo obalulekile esinqumweni esiphambi kwakho futhi uwubhale phansi ngaphambi kokuthi ugijime noma yini. Uma ukukhathazeka kungukuthi ingabe i-IPv6 iyavuzela izungeze umhubhe, umbuzo umayelana nokukhethwa komzila kumsingathi, hhayi ukufinyeleleka kokokuphuma. Uma ukukhathazeka kungukuthi ingabe uhlangothi olukude lungafinyelela insiza yangaphakathi, okokuphuma akubalulekile.
Isinyathelo 2: qinisekisa ukuthi umsingathi ukhetha lowo mzila
ip -6 route get 2001:db8:1::10 liphrinta umzila, ikheli lomthombo kanye ne-interface i-kernel ebingayisebenzisa, futhi ingxenye esele yokuhlola incike kuleli qiniso.
Ukuba khona kwe-interface akufani nokukhethwa kwayo. Amansingathi anamastakhi amabili anethebula lokubaluleka, futhi /etc/gai.conf ku-Linux ingashintsha ukuthi imuphi umndeni owinayo egameni elixazululeka kuwomabili.
Isinyathelo 3: sebenzisa indawo negama elisemthethweni
Uma uhlola i-HTTPS, sebenzisa igama lomsingathi isitifiketi esikhishwe labo futhi ugcine ukuqinisekisa kuvuliwe; ukushintshela ekhelini elingokoqobo ukuze ukuhlola kuphumelele kuvala khona lokho kuqinisekisa okufakazela ukuthi ufinyelele umsingathi owawuhlosile. Insiza yokuxilonga oyilawulayo, ephendula egameni elaziwayo ngesitifiketi esivumelekile, iyindawo ehlanzekile kakhulu. Ikupha futhi umugqa welogi ohlangothini lomsebenzi wokuxhumana ukuze uqhathanise nawo, into isihloli sangaphandle esingasoze siyinikeze.
Gijima isicelo ngendlela ekhombisa ikheli elisetshenzisiwe: curl -6 -sS -o /dev/null -w '%{remote_ip} %{http_code}\n' https://test6.example.net/. -6 iphoqa umndeni, futhi ngale ndlela uhlukanisa i-IPv6 ayisebenzi kwi-IPv6 ayikhethwanga.
Ukuze kube nokuhlolwa okumsulwa kokufinyeleleka lapho i-ICMPv6 ivunyelwe, ping -6 -c 3 2001:db8:1::10 yanele. Ifakazela umzila futhi akukho lutho olungaphezulu kwawo.
Isinyathelo 4: hlanganisa zombili izingqikithi
Uma unokufinyelela kuzo zombili izingqikithi, gijima tcpdump -ni any ip6 and host 2001:db8:1::10 kuklayenti nalokho okulingana nakho ensizeni, nezimpawu zesikhathi, futhi uqinisekise ukuthi ukugeleza okufanayo kuvela kukho kokubili. Yikho lokho okuguqula umphumela onengqondo ube ubufakazi: ukubona kweklayenti kuphela akukwazi ukuhlukanisa impendulo evela ensizeni nempendulo evela kokuthile okuphakathi. Gcina ukuthwebula kuncane endaweni eyodwa ukuze okukhiphayo kuhlale kufundeka futhi isikhathi somuntu esingahlobene singagcini kufayela.
Phinda ukuhlola ngemva kokuxhuma kabusha uma ukukhathazeka kungukuthi ingabe inqubomgomo iyasinda ekuqaliseni kabusha. Isimo somzila nesomlilo womlilo esasetshenziswa kanye ngesikhathi sokuxhuma singahluka kwisimo esisetshenziswa futhi, futhi umehluko uvela kuphela ekuxhumaneni kwesibili.
Hlola icala lokwehluleka ngokwehlukana uma ulidinga. Umhubhe ovimbela i-IPv6 lapho uwela kanye nalowo oyivumela ukuba ivuze kuyizakhiwo ezihlukene, futhi kunowodwa kuphela kuzo ongaqinisekiswa ngesicelo esiphumelelayo.
Isinyathelo 5: bhala lokho ukuhlola okungakufakazelanga
Isinyathelo sesihlanu ukubhala lokho ukuhlola okungakufakazelanga, futhi yiyo leyo ngxenye evame ukushiywa. Ukuhlola okuphumelelayo endaweni yokugcina eyimfihlo akufakazeli ukuphuma kwe-IPv6 komphakathi, akufakazeli ukuziphatha kwe-DNS, futhi akufaki izinhlelo ozikhiphe emhubheni. Ngakunye kwalokho kudinga indawo yako kanye nokubona kwako. Inothi elithi i-IPv6 iyasebenza ngemva kwesicelo esisodwa esiya kumsingathi oyedwa aliyona into etholakele; iwukucabanga okunesikhathi.
Irekhodi elifanele ukugcinwa lifushane: indawo, igama, ikheli lomthombo umsingathi akhethe, ikheli elikude elibonwe kanye nesikhathi. RFC 7359 ixoxa ngendlela yokuhlola ukuthi umzila we-IPv6 ohlobene uyasebenziseka ngempela, futhi lowo umgomo umhlahlandlela lo osondela kuwo ngamathuluzi alula. Uma isiphetho sidinga isihloli somphakathi ukuze sibe neqiniso, ukuhlola kwakungacaci ngokwanele.