Isivimbeli sokuphepha sivimba i-IPv4 kuphela: kungani i-IPv6 isaphuma

Umhubhe uyawa, isivimbeli sokuphepha sibika ukuthi sisebenze, futhi ukulanda kuyaqhubeka. Akukho okonakele emithethweni ye-IPv4. Uhlelo lumane lwathuthela endleleni imithetho leyo eyayingakaze ibhalelwe yona.

Amadivayisi ane-stack ekabili anezindlela ezimbili ezizimele zokuphuma. Ukuvimba enye yazo kuyisigamu sokuvimba.

Amasethi amabili emithetho, okuzenzakalelayo okubili

Ku-Linux, i-iptables ne-ip6tables amathebula ahlukene anezinqubomgomo ezihlukene. Ukusetha amaketanga e-INPUT ne-OUTPUT ethebula le-IPv4 ku-DROP akushintshi lutho kuthebula le-IPv6, lapho okuzenzakalelayo ngokuvamile kuyi-ACCEPT. Ukuhlukaniswa okufanayo kukhona ku-nftables, lapho ungahlola umndeni owodwa futhi uthole ukuthi owodwa kuphela wawo ophethe imithetho yakho. Lokho kungalingani kuvamile, futhi yilokho kanye inkinga.

Yingakho isivimbeli sokuphepha singabonakala siphelele kodwa sisebenze ngokwengxenye. Iskripthi esabhala imithetho ye-IPv4 sasebenza, izibali ziyakhula, umugqa welogi uyavela, futhi iphakethe le-IPv6 liphuma ngokusebenzisa isixhumi esibonakalayo somzimba lingakathintwa neze.

Funda ukuthi iklayenti lakho lifaka ini ngempela, hhayi lokho ikhasi lokumaketha elithembisa kona. Amanye amaklayenti aqondisa i-IPv6 emhubheni, amanye ayivimba ngamabomu, futhi amanye ayiyeka njalo ngenkathi ukukhiya kwezinga leplathifomu kusebenzisa omunye umthetho. Lapha idokhumenti yomhlinzeki iwukuphela komthombo ofanele ukwethenjwa.

Ukulungiselelwa kwesixhumi esibonakalayo kukutshelani

Ikhasi lemanuwali le- wg-quick lifaka imithetho ye-IPv6 ekulungiseleleni kwalo okuyisibonelo, futhi isizathu yileli gebe. Isibonelo akusona umhlobiso. Sikhona ngoba imithetho ye-IPv4 kuphela ingashiya umndeni wesibili uvulekile.

Ukukopisha ingxenye yesibonelo kukhiqiza ingxenye yomgomo. Lona umsuka ojwayelekile walokhu kuphuma. Iposi lebhulogi lehlise isibonelo ngenxa yobude. Ingxenye encishisiwe yabe isiba ithempulethi esetshenziswa kabusha yiwo wonke umuntu.

# what is actually installed, per family?
sudo iptables -S OUTPUT | head -20
sudo ip6tables -S OUTPUT | head -20

# nftables: inspect each family separately
sudo nft list ruleset inet | head -40

# does this host even have a usable IPv6 path?
ip -6 route show default

Uma umyalo wesibili uphrinta umgomo ovumelayo ngenkathi owokuqala uphrinta i-DROP, uthole impendulo ngaphandle kokuthinta iklayenti. Lokho kungalingani yibhoji.

Kungani ukusesha okukodwa kungelona indaba yonke

Igama elilodwa lingabuyisela kokubili irekhodi le-A kanye nerekhodi le-AAAA, futhi izinhlelo azikhethi zonke ngendlela efanayo. Isiphequluli singase sithande i-IPv6 lapho inethiwekhi inikela khona futhi sibuyele emuva lapho kwehluleka, ngenkathi ukuvumelanisa kwangemuva noma isibuyekezi sisebenzisa isixazululi saso kanye nokukhetha kwaso. Ngakho-ke ukuhlolwa okukodwa okuphumelelayo ku-IPv4 kufakazela indlela eyodwa, hhayi umgomo.

Ukushintsha kwenethiwekhi nakho kushintsha impendulo. Ukujoyina enye inethiwekhi ye-Wi-Fi, ukuvuka ebuthongweni noma ukushintshela kuselula kungase kunikeze idivayisi isiqalo esisha se-IPv6, futhi umgomo owawubonakala wanele ku-LAN yasehhovisi kungenzeka ungayifaki.

Hlola isimo lapho umhubhe uvaliwe

Ukuhlola ngenkathi uxhumekile kukutshela ukuthi umhubhe uyasebenza. Ukuhlolwa okuthakazelisayo isimo esingatholakali, ngoba yilapho isivimbeli sokuphepha kufanele sibambe khona. Misa umhubhe ngamabomu, bese uzama izindawo ezibalulekile kusukela kuhlelo oluvikelayo.

# with the tunnel stopped, does anything still leave?
ip -6 route get 2606:4700:4700::1111
curl -6 -sS -o /dev/null -w '%{http_code}\n' --max-time 5 https://ipv6.example.net/
curl -4 -sS -o /dev/null -w '%{http_code}\n' --max-time 5 https://ipv4.example.net/

Yomibili imindeni kufanele yehluleke ivaliwe. Uma isicelo se-IPv4 siphelelwa isikhathi futhi isicelo se-IPv6 sibuyisela ikhodi yesimo, umgomo awuphelele, futhi noma ngabe uhlola umhubhe amahlandla angakanani ngeke kushintshe lokho.

Gcina futhi okuhlukile okubhaliwe kulolo hlolo. Ukutholwa kwenethiwekhi yasendaweni, ukuvuselelwa kwe-DHCP noma indlela yokuqalisa eya endaweni yokugcina ye-VPN kungase kudingeke kuhlale kufinyeleleka, futhi lokho kuhlukile kufanele kuqanjwe emgomweni esikhundleni sokutholwa ngesikhathi sokuphazamiseka. Ukuhlolwa kokuvuza okwehluleka ngenxa yokuthi umhubhe awukwazi ukuphinda unyuke akusona isitholakele sokuphepha, isitholakele sokuxhumana.