Amafrimu e-jumbo awenzi indlela ye-VPN ithwale amaphakethe angama-9000 byte

Unikise amafrimu angama-9000 byte ku-LAN futhi wawulindele ukuthi i-VPN isheshe. Yase ishaya ngasikhathi, noma yayeka ukudlulisa ukudluliswa okukhulu ngokuphelele. Amafrimu e-jumbo ayisivumelwano sokuxhumana sendawo; awandisi indlela umhubhe oyihambayo.

Isabelomali esingasetshenziswa sinqunywa umngcele omncane kakhulu endleleni, kuhlanganise nokufakwa kwesembozo umhubhe okwenzayo.

Amafrimu e-jumbo ashintshani ngempela

I-MTU iyisici se-interface eyodwa. Ukuyikhuphula kuseva nakuswishi yayo kusho ukuthi labo bobabili bangashintshana amafrimu amakhulu ngaphandle kokuhlukaniswa. Lokho akusho lutho ngomzila ngemuva kweswishi, ngomhlinzeki, noma ngohlangothi olude lomhubhe. Lawo madivayisi anemingcele yawo, futhi iphakethe eledlula omunye wabo liyalahlwa noma lihlukaniswe ngokwemithetho ongayibekanga.

Isivumelwano sendawo, imiphumela yomhlaba. Yikho konke ukudideka.

Intela yokufakwa kwesembozo

Umhubhe usonga iphakethe lakho ngaphakathi kwelinye. I-WireGuard phezu kwe-IPv4 UDP yengeza cishe amabhayithi angama-60 ezindleko ezengeziwe; imodi ye-UDP ye-OpenVPN isebangeni elifanayo, futhi i-IPsec iyahluka ngokwemodi nama-algorithm. Lawo mabhayithi avela kwisabelomali sendlela yangaphandle, hhayi emoyeni.

Ngakho-ke isixhumanisi sangaphandle samabhayithi angama-1500 asikwazi ukuthwala iphakethe langaphakathi lamabhayithi angama-1500 uma kufakwa inhloko yomhubhe.

Kufanelekile ukwenza izibalo kanye. Endleleni engamabhayithi angama-1500, i-interface ye-WireGuard ifuna i-MTU ecishe ibe ngama-1420 ukuze iphakethe elifakwe esembozweni lingene. Bika i-interface yangaphakathi ku-9000, bese iphakethe ngalinye elikhulu lizodinga ukuhlukaniswa umhubhe ongakwazi ukukwenza, noma lilahliwe.

Thola isixhumanisi esincane kakhulu endleleni

Hamba ngendlela futhi uthole i-MTU ephansi kakhulu. I-LAN ngokuvamile ingama-1500 noma ama-9000, i-WAN ngokuvamile ingama-1500, futhi isixhumanisi seselula noma se-PPP singaba ngaphansi nakho. Bese ususa izindleko ezengeziwe zomhubhe. Uma umphumela ungaphansi kwe-MTU ye-interface yangaphakathi, impendulo yakho ikhona. Ukutholwa kwe-MTU yendlela kungakuthola lokhu ngokuzenzakalela, kodwa kuphela uma imilayezo ye-ICMP ekuncika kuyo ivunyelwe ukudlula.

I-ICMP ehlungiwe iyisizathu esivamile sokuthi ukudluliswa okukhulu kulengele ngenkathi izicelo ezincane zisebenza kahle.

Hlola ukuncika kosayizi ngaphandle kokwandisa ushintsho

Sebenzisa ukudluliswa okumelele futhi ugcine amanani okuqala ukuze ukwazi ukuwabuyisela. ping -M do -s 1472 ihlola iphakethe lamabhayithi angama-1500 nebhithi le-DF limiswe; yehlisa usayizi kuze kudlule. Uma kuhluleka amaphakethe amakhulu kuphela, unenkinga yosayizi hhayi yomzila.

Qaphela i-offload ohlangothini lwengidi uma ufunda amakhaphu. I-offload yokuhlukanisa ingakhombisa amafrimu amakhulu kakhulu kunalokho okwadlula ngempela ocingweni, okwenza indlela esebenzayo ibonakale iphukile futhi ephukile ibonakale ilungile.

Nini i-MTU enkulu iwumklamo olungile

Inethiwekhi yangasese elawulwayo ingasebenzisa ngokusemthethweni amafrimu amakhulu kusuka ekugcineni kuya ekugcineni, inqobo nje uma idivayisi ngayinye esendleleni ivuma futhi izindleko ezengeziwe zomhubhe zibalwa. Lowo umklamo odidiyelwe onenani elibhaliwe ngesixhumanisi ngasinye, hhayi inombolo eyodwa enkulu ethayiphiwe kuklayenti.

Ukuphuma komphakathi ojwayelekile, cabanga ama-1500 noma ngaphansi bese uvumela umhubhe ukuthi ukhethe i-MTU yangaphakathi ephephile. RFC 8201 ihlanganisa ukutholwa kwe-MTU yendlela esimweni se-IPv6 futhi iyireferensi ewusizo mayelana nokuthi impendulo kufanele isebenze kanjani.