Isiqalo segatsha le-IPv6: i-iroute-ipv6 noma i-route-ipv6 kuseva?

Imiyalo emibili enamagama acishe afane ivela kuzo zonke izibonelo ezisebenzayo, futhi ukukopisha eyodwa ngaphandle kwenye kwenza ithunjana elibonakala lilungile kodwa elilahla isiqalo segatsha ngokuthula. Benza imisebenzi ehlukene ezinhlangothini ezimbili zomngcele ofanayo: eyodwa ifundisa i-kernel yeseva ukuthi isiqalo sikhona kuphi, kanti enye ifundisa i-OpenVPN ukuthi iyiphi iklayenti eqinisekisiwe eyisithwalayo. Uma zombili zilungile isiqalo sihamba; uma eyodwa ilungile kuphela, amaphakethe anomzila kodwa akanaye umnikazi.

Imiyalo emibili, imisebenzi emibili ehlukene

route-ipv6 wukufaka umzila ojwayelekile: iseva yengeza umzila we-kernel okhomba isiqalo kusixhumi saso sethunjana. I-iroute-ipv6 ingeyenkundla eqondene neklayenti futhi imemezela ubunikazi bangaphakathi, ngakho i-daemon iyazi ukuthi ukuhamba kwedatha kwaleso siqalo kufanele kuthunyelwe kuklayenti ethile hhayi kunoma yimuphi umlingani oshiwo umzila we-kernel.

Enye iphathelene nethebula yokudlulisa ye-kernel, enye iphathelene imodeli yomzila yangaphakathi ye-daemon. Ukuzihlukanisa kuchaza ukuthi kungani ukucushwa okubonakala kuphelele kusengalahla isiqalo. Kuchaza futhi ukuthi kungani uxhoxho olufanayo lubonakala kabili kuzo zonke izibonelo ezisebenzayo. Akukho mugqa ongadingekile.

Endleleni yendabuko yendawo yomsebenzisi zombili ziyadingeka futhi ziyagcwaliseka. Umzila we-kernel wodwa ushiya i-daemon ingakwazi ukukhetha umlingani. I-iroute yodwa ishiya i-kernel ingenandledla eya ethunjini. Lapha futhi iningi lokudideka ngamafayela eklayenti ngalinye livela khona: ifayela alisona isingeniso sethebula yomzila, futhi isingeniso somzila asisona isitatimende sobunikazi.

ip -6 route show | grep fd00:7a
ip -6 route get fd00:7a::1

Kuphi lapho ngayinye ihamba khona

Umzila uya kukucushwa okulawulwa yiseva, lapho usebenza khona kunqubo yeseva leyo. I-iroute iya efayeleni eliqondene neklayenti eliqanjwe ngobunikazi obuqinisekisiwe bedivayisi yegatsha.

Igama lefayela elingahambisani nobunikazi obusebenzayo alifundwa neze, futhi uphawu lunye nolwe-iroute elahlekile. Hlola ubunikazi obuqinisekiswa yiseva, bese uhlola igama lefayela uhlamvu ngohlamvu.

# /etc/openvpn/server/server.conf
route-ipv6 fd00:7a::/64
client-config-dir /etc/openvpn/server/ccd

# /etc/openvpn/server/ccd/branch-b
iroute-ipv6 fd00:7a::/64

Gcina ichibi kanye nesiqalo segatsha kuhlukene, ngoba ukuhlangana kwazo kwakha indida okungekho myalo ongayixazulula.

Okudingwa elinye iklayenti

Iklayenti lesibili okufanele lifinyelele lelo gatsha lidinga isimemezelo, hhayi ubunikazi. Phusha isiqalo kumaklayenti ohlosile, endaweni yeklayenti noma yeqembu evumelana nokucushwa kwakho.

Ungasithumeli egatsheni ngokwalo, ngoba leyo divayisi isivele inesiqalo njengoxhoxho oluxhunyiwe.

Ukusithumela kuwo wonke umuntu ukukhetha okunemiphumela: iklayenti ngalinye libe selikholelwa ukuthi igatsha liyafinyeleleka ngethunjana, kuhlanganise namaklayenti owawungahlosile ukuwanikeza lokho kufinyelela. Ukusimemezela empeleni kuyisinqumo sokufinyelela, nakuba umyalo ubonakala njengomsebenzi wamapayipi. isithenjwa sezinketho zeseva sibhala i-iroute-ipv6 njengobunikazi obuqondene neklayenti, futhi lowo wumehluko ofanele ukugcinwa.

Indlela yokubuya kudivayisi yegatsha

Ubunikazi busiza kuphela uma igatsha lidlulisa amaphakethe futhi i-LAN yalo ikwazi ukuphendula. Nika amandla ukudluliswa kwe-IPv6 kudivayisi yegatsha, futhi qinisekisa ukuthi izihambeli eziku-LAN yalo zithumela ukuhamba kwedatha kwechibi le-VPN zibuyela egatsheni hhayi emzileni ozenzakalelayo ongazi ichibi.

Leyo ndlela yokubuya iyisilinganiso se-IPv6 senkinga yomzila olahlekile abantu abahlangabezana nayo nge-IPv4.

Yihlole kusihambi se-LAN ngokusesha ikheli lechibi le-VPN, hhayi egatsheni ngokwalo. Ukusesha okwenziwa kurutha kuphendula umbuzo ohlukile kunalowo obuzwa abasebenzisi bakho, futhi kokubili akuvumelani kaningi ngokwanele ukuthi umyalo owengeziwe ube nenzuzo.

Uma umbhangqwana usungenele

Ezinye izimiso azilisebenzisi nalutho lolu hlelo. Indlela yedatha ye-kernel namaseva aphethwe umkhiqizo anokuphathwa komzila osekelwayo kwawo, futhi isibonelo sendawo yomsebenzisi singase singahumushwa ngqo.

Qinisekisa ukuthi uhlobo luphi lwendlela yedatha olusetshenziswa ukwakhiwa kwakho ngaphambi kokukopisha imiyalo kusifundo esibhalelwe enye.

Ekugcineni, khumbula ububanzi bekheli: isiqalo sasendaweni esiyingqayizivele esifana ne-fd00:7a::/64 siyimfihlo ngokwakhiwa futhi asisho lutho mayelana nokufinyeleleka kwe-IPv6 komphakathi. Kusebenze njengokufinyelela kwangaphakathi, futhi gcina ukuphuma kwe-inthanethi kungumbuzo ohlukile onomgomo waso.