I-IPv6 ngokusebenzisa isiphakeli se-VPN se-IPv4 isadinga umkhondo wokuphuma we-IPv6

Umhubhe uyaphakama, iklayenti lithola ikheli le-IPv6 ku-pool, futhi yonke indawo ekhonjiswa yi-IPv6 isaphelelwa yisikhathi. Akukho okonakele emhubheni: i-IPv6 ihamba kahle kakhulu ngaphakathi kokuthutha kwe-IPv4, futhi lokho akuzange kube yingxenye enzima. Ikheli olunikezele luyisithembiso isiphakeli esingakwazi ukusigcina, ngoba umkhondo wokuphuma awunayo i-upstream ye-IPv6 engayithumela kuyo. Ukulungiswa kusezandleni zomkhondo wokuphuma, hhayi kuphrofayela yeklayenti.

Uphawu: ikheli likhona, umzila awukho

Ukuhlola ohlangothini lweklayenti kubonisa ikheli le-IPv6 elibonakala lingelomhlaba wonke kudivayisi yomhubhe kanye nomzila okhomba kuwo, yingakho lokhu kufundwa ngokungalungile njengephutha leklayenti. Ithrafikhi ingena emhubheni, isiphakeli siyayikhipha embozweni, bese iphakethe lihlala kusibungu esinetafula lomzila elingenayo imizila yokuzenzakalela ye-IPv6 eya endaweni yangempela. Kuye nge-stack, uthola ukungafinyeleleki ngokushesha noma ukulahla buthule, futhi kuzo zombili izimo iklayenti libona isikhathi sokuphela esibonakala sifana ncimishi ne-firewall.

Funda itafula lomzila lesiphakeli ngokwaso ngaphambi kokuthinta iklayenti, ngoba yilapho kuhlala khona ingxenye yomzila elahlekile. Isiphakeli esinomzila owodwa wokuzenzakalela we-IPv4 sesikunikeze impendulo kakade.

Landela iphakethe ngemuva kokukhipha embotsheni

Ngaphakathi komhubhe iphakethe liyi-IPv6 evamile futhi umthombo walo yikheli leklayenti. Isiphakeli sisusa umbo lokuthutha bese sibamba iphakethe le-IPv6 lomdabu okumele lidluliselwe kwihop elilandelayo le-IPv6. Umzila wokuzenzakalela we-IPv4 awukwazi ukulithwala, futhi ukulihumusha ku-IPv4 kungomunye umsebenzi ongakaze usetshenziswe muntu. Yikho konke ukwehluleka, futhi akuhlangene nakancane nokuthi umlaleli we-VPN uphendule nge-IPv4.

Indlela yokumboza i-IPv6 phezu kwe-IPv4 ichazwe ku-RFC 4213, futhi imininingwane ebalulekile lapho ukuthi iziphetho zisadinga ukuxhumana kwe-IPv6 kwangempela ngakolunye uhlangothi lomhubhe. Ukusonga isihloko akudali i-upstream.

Izendlalelo ezimbili zomhubhe, izivivinyo ezimbili ezizimele

Qinisekisa isendlalelo ngasinye ngokwehlukana, ngoba umhubhe wangaphandle osebenzayo ufihla owangaphakathi ophukile. Hlola umzila wangaphandle nge-ping ye-IPv4 kusuka eklayenti kuya kusiphakeli bese uqinisekisa imbobo oyisebenzisayo. Bese uhlola umzila wangaphakathi kusiphakeli, lapho ip -6 route kumele ukhombise umzila wokuzenzakalela noma umzila othile ofundwe ku-upstream yangempela, futhi ip -6 addr kumele ukhombise isandulela somthombo esamukelwa i-upstream. Noma yini engaphansi kwalokho iwukuhlobisa nje esixhumanisini.

Ikheli eliyingqayizivele-yendawo, noma isandulela esibonakala singesomhlaba wonke okungekho lutho olubuyela kuso, kuzovela ngokujabula esixhumanisini bese singayi ndawo. Ukufinyeleleka komphakathi kunikezwa i-upstream, hhayi isimo sekheli.

Into efanayo iyasebenza eklayentini: ip -6 route get 2001:4860:4860::8888 kufanele ibize idivayisi yomhubhe, futhi uma ibiza eyomzimba, iklayenti aliyisebenzisi neze i-VPN ye-IPv6.

Isandulela somthombo, usayizi ne-ICMPv6

Buza i-upstream ukuthi yiziphi izandulela zomthombo ezizozamukela ukudlulisela, bese usebenzisa esisodwa sazo ku-pool yeklayenti. Umhlinzeki okunikeza i-/64 yesixhumanisi sesiphakeli ugobo akusho ukuthi uhlisa umzila we-/64 yesibili noma ibhlokhi enkulu kuwe, futhi umehluko uyisikhathi santambama sokulungisa amaphutha okuwukuthi ithikithi lokusekela likuxazulula ngombuzo owodwa. Buza ngokubhala bese ugcina impendulo kanye nokucushwa.

Beka isabelomali sombo olwengeziwe osethenziswa i-stack yakho ngempela, futhi gcina i-ICMPv6 isebenza, kuhlanganise ne-Packet Too Big. Isihloko sesibili sinciphisa umthwalo osebenzisekayo, ngakho umzila ophendula ama-ping amancane usengahluleka ekudluliseni ifayela, futhi i-firewall elahla yonke i-ICMPv6 iguqula inkinga yosayizi elungisekayo ibe umgodi omnyama. Hlola ukudlulisela okukodwa okukhulu ngaphambi kokumemezela insizakalo.

Iyiphi inkinga ehluke ngokuphelele

Ukufinyelela uhlelo lokusebenza lwe-IPv4 kuphela kusuka eklayentini le-IPv6 kuphela wukuhumusha, hhayi umhubhe, futhi kudinga into efana nokucushwa kwe-NAT64 okusetshenziswe ngamabomu. Indawo ekuyiwa kuyo ngeke iqonde isihloko somhubhe esengeziwe ngoba nje ungeze esisodwa. Izinsizakalo zokushintsha zomlando zifanele ukunakekelwa okufanayo: i-RFC 7526 yasusa imodeli ye-anycast relay ye-6to4, ngakho umhlahlandlela obhalwe ngayo uchaza into engasenawo umhlinzeki womphakathi ogcinwayo.

Uma isiphakeli singenayo i-upstream ye-IPv6 esebenzisekayo, izinketho yi-upstream esekelwayo, omunye umkhondo wokuphuma, noma isinqumo esibhaliwe sokuthi i-IPv6 ihlale ngaphandle komhubhe. Okungamukeleki ukutshela amaklayenti ukuthi insizakalo ye-IPv6 ikhona ngesikhathi ukuxhumana kwabo okuvamile kwe-IPv6 kudlula i-VPN buthule.