Isixhumi utun se-VPN ku-Mac siyasebenza kodwa ithrafikhi iyahluleka? Hlola ifconfig

ifconfig ikhombisa igama le-utun, ikheli ne-MTU, kodwa hhayi ukuthi iyiphi app eyinikile noma amaphakethe aya kuphi. Izivivinyo ezinhlanu zokufunda kuphela ezimphendula umbuzo wangempela.

Uxhumanise i-VPN, wagijima ifconfig, futhi wathola utun4 enekheli. Isizindalwazi obusidinga sisaphelelwa isikhathi. Leli gebe livamile: uhlu lubonisa ukuthi ikhona i-interface ebonakalayo, hhayi ukuthi iklayenti lakho iyayiphethe, ukuthi umzila okhathazayo uyayikhetha, noma ukuthi amaphakethe ayayihamba. Ngayeka ukwethemba igama le-interface ngemva kwentambama engayichitha ngisola ithuneli elingalungile kukhompyutha eseyayinezingeno ezintathu ze-utun ngaphambi kokuthi ngifake noma yini.

Ithini ngempela umugqa we-utun

Gijima ifconfig -a uma ufuna isithombe esiphelele. Uma ibizwa ngaphandle kwezimpikiswano, ifconfig iphrinta kuphela izixhumi ezisebenzayo njengamanje, yingakho ithuneli elingakwazanga ukuqala lingase lingabonakali kokuphumayo abantu abakunamathisela emathikithini. ifconfig -l ibuyisela amagama kuphela, futhi leyo indlela eshesha kakhulu yokwazi ukuthi i-utun entsha ivele ngemva kokuxhumana.

Ukufunda isixhumi esisodwa yilapho imininingwane ewusizo ihlala khona, futhi ithuneli elixhunyiwe livame ukubukeka kanje.

utun4: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
    inet 10.8.0.6 --> 10.8.0.5 netmask 0xffffffff
    inet6 fe80::ce81:b1c:bd2c:69e%utun4 prefixlen 64 scopeid 0x15

Amakhasi amathathu athwala impendulo. UP futhi RUNNING zithi i-kernel ikulungele ukusebenzisa isixhumi. POINTOPOINT kanye --> nekheli lozakwabo wusayino yethuneli hhayi yesixhumanisi esibonakalayo. mtu inani lichaza lonke ikilasi lemibiko ethi "iyaxhumana, bese ima", ngoba izixhumi ze-utun zivame ukuphakama nge-MTU encishisiwe, 1380 kwezinye izakhiwo ze-macOS, futhi iklayenti ingayendlula. Uhlu lwamakhasi lufushane ngokwanele ukulubuka kanye kwincwadi ye-ifconfig enikezwa yi-Apple.

Thola inqubo engemva kwesixhumi

ifconfig ayinawo umqondo wohlelo oluliphethe. Amaklayenti amabili e-VPN, insizakalo yesistimu kanye nethuneli esele esivikini eledlule konke kukhiqiza izingeno ezibukeka zifana kuleli zinga. Ku-Mac yami uqobo, utun0 kuya utun3 kwakukhona ngaphambi kokuthi ngilungise noma yini; i-Continuity ne-iCloud Private Relay nazo zisebenzisa amathuneli, futhi alikho kuzo okuwukuxhumana okuxazululayo.

Kumathuneli abhalisa ukucwangciswa kusistimu, scutil --nc list ukuhlobana okusheshayo, iphrinta ukucwangciswa ngakunye nesimo sako kanye ne-ID yensizakalo, futhi okuxhunyiwe kumakwa kanjalo.

scutil --nc list
* (Connected)   5F2A9C10-...   VPN  Work IKEv2

Amaklayenti agijima inqubo yawo yethuneli esikhundleni sokubhalisa ukucwangciswa awaveli lapho neze. I-Tunnelblick kanye openvpn yomugqa womyalo kuwela kulelo qembu, ngakho hlola nethebula lezinqubo: ps -Ao pid,comm | grep -i openvpn. Uma inqubo isiphethe ithuneli, inombolo ye-utun ingeyayo leyo nqubo hhayi enye into.

Hlola ikheli ngaphambi kokuhlola umzila

Isixhumi singasebenza ngaphandle kwekheli elisebenzisekayo. Iphrofayela ye-IPv6 kuphela ikhombisa ingeno fe80:: yokuxhumana kwasendaweni futhi akukho lutho emugqeni we- inet, futhi iklayenti elihlulekile ukusebenzisa ikheli elicindezelwe lishiya isimo esifanayo ncamashi. Uma indawo oya kuyo iyi-IPv4 futhi ithuneli lingenalo ikheli le-IPv4, umbuzo womzila usuxazululiwe.

I-MTU ifanele ukuhlolwa ngokwehlukile, ngoba lokhu kwehluleka akubukeki njengenkinga yosayizi. Kubukeka njengokuxhumana okuqinisekisa bese kuthula ngokushesha lapho ukudluliswa okukhulu kuqala. Thumela uphenyo okungafanele luhlukaniswe, ngosayizi wokuthi iphakethe lihambisane ne-MTU yesixhumi; uma i-MTU ingu-1400 umthwalo ungama-1372 byte:

ping -D -s 1372 10.8.0.5

Impendulo isho ukuthi amaphakethe alolo sayizi anqamula ithuneli. Ukuthula ngesikhathi ama-ping amancane ephumelela kukhombisa i-MTU noma into elahla i-ICMP endleleni, hhayi ukuqinisekisa, osekuvele kwaqedwa ngaphambi kokuthi uthole isixhumi.

Fakazela ukuthi indawo oya kuyo ikhetha ithuneli

Umbuzo obalulekile akuwona ukuthi utun4 ikhona, kodwa ukuthi ithrafikhi eya kukheli olulodwa iyaphuma ngalo. route -n get iphendula lokho endaweni eyodwa futhi iphrinta isango nesixhumi ebingasisebenzisa:

route -n get 203.0.113.20
  gateway: 10.8.0.5
  interface: utun4

Uma umyalo ofanayo ubika en0, ukucwangciswa kwakho kwe-split tunneling kwenza okukutshelwe futhi akukho ukuhlolwa kwesixhumi okuzokushintsha. Sebenzisa netstat -rn -f inet uma udinga umzila ozenzakalelayo kanye nethebula lonke embukisweni owodwa.

Izibali zinquma ukuthi amaphakethe ayahamba ngempela. netstat -ib ibika isamba samaphakethe namabhayithi ngesixhumi ngasinye, kufaka nezingeno ze-utun; izinombolo ziyahlangana, ngakho zifunde kabili ngesikhala bese uqhathanisa:

netstat -ib | grep utun4

Izibali ezimile ngesikhathi uhlelo luqhubeka nokuzama zisho ukuthi i-kernel ayikaze inikeze iphakethe esixhumini. Izibali ezikhuphuka nhlangothi zombili ngesikhathi uhlelo lusahluleka zihambisa uphenyo kolunye uhlangothi lwethuneli.

Uma kungabonakali neze i-utun

Uhlu lwezixhumi olungenalutho ngemva kokungena okwakubonakala kuphumelele ngokuvamile lusho ukuthi ithuneli alizange liqale, hhayi ukuthi ifconfig liyayifihla. Hlola isimo seklayenti uqobo, bese kuba esesistimu: i-Network Extension engakaze igunyazwe, noma eyavalwa yi-macOS ngemva kokubuyekezwa, ayishiye isixhumi. Ukuvunywa kuse-System Settings ngaphansi kwe-Login Items & Extensions, futhi ingeno endala lapho ifanele ishintshwe kabusha ngaphambi kokuthi ufake noma yini kabusha.

Ukubalwa kwe-utun akuzinzile phakathi kokuxhumana kabusha. Ungathola utun5 lapho utun4 kwakukhona khona emizuzwini eyishumi edlule, ngoba isixhumi esidala siyahlakazwa futhi i-kernel inikeza inkomba elandelayo ekhululekile. Izincwadi zokuhlelo ezibhala igama ngokuqinile ziyephuka ngokuthula ngaleso sikhathi; qhathanisa nekheli noma nomzila esikhundleni salokho.

Gcina uhlangothi lokufunda luwukufunda kuphela. sudo ifconfig utun4 down iphazamisa ithuneli, futhi kuphrofayela yethuneli eliphelele ithatha nesikhathi sakho sokuxhumana kude, okuwukushintshana okubi uma ubukade uqoqa ubufakazi. Akukho okudingayo lapha okudinga i-root: ukufunda amafulegi, amakheli nezibali kusebenza ngomsebenzisi wakho ojwayelekile.

Yenza izivivinyo ngokulandelana ngokuzayo lapho ithuneli le-Mac liziphatha kabi: qinisekisa ukuthi i-utun yavela nge- ifconfig -l, funda amafulegi ayo, amakheli ne-MTU, yihlobanise nenqubo, buza i- route -n get ukuthi isiphi isixhumi esisetshenziswa yindawo oya kuyo, bese ubuka i- netstat -ib ihamba. Isinyathelo ngasinye sisusa isendlalelo esihlukile, futhi esokuqala esibuya ngokungalungile yilapho ukulungiswa kufanele kube khona.

Izihloko ezihlobene