Amathuna e-VPN agxenelelayo: kungani eyangaphakathi ima kumaphakethe amakhulu
Ithuna ngalinye lisebenzisa ingxenye yesabelomali samaphakethe omzila ngaphambi kokuba elilandelayo liqale. Hlanganisa izihloko futhi iseshini yangaphakathi iyahluleka kumaphakethe amakhulu.
I-DNS iyaxazululeka, iseshini ye-SSH ihlala ikhona, bese kuthi ukulayisha okukhulu kumile kanti i-ping eya kuleyo host isaphendula. Lokho kwehlukana kukhomba usayizi wephakethe hhayi ithuna eliphukile. Amathuna agxenelelayo afinyelela lokho ngosayizi amanye amathuna ayengeke awafinyelele eyedwa. Iseshini yangaphakathi ikahle; imane inikezwa amaphakethe angasafiti.
I-MTU yomzila iya ngempela kuphi
Ukuvalwa ngakunye kusebenzisa amabhayithi ngaphambi kokuba isendlalelo esilandelayo sithole ithuba laso. Umzila we-Ethernet unikeza iphakethe langaphandle ama-1500 amabhayithi, futhi ithuna langaphandle lithatha ingxenye yalo ngaphambi kokuba noma yini engaphakathi ikwazi ukukhunjulwa. Inani eliqagelwe lokusebenza elengeziwe lizoba nephutha ncamashi ngenani elibalulekile.
Bhala izendlalelo ngokulandelana: umzila wokufinyelela, ukuthutha kwangaphandle, ithuna langaphandle, ukuthutha kwangaphakathi, ithuna langaphakathi, uhlelo lokusebenza. Bala isihloko ngasinye kanye, futhi gcina i-UDP ihlukile kwisihloko nethaga yethuna uqobo.
Izendlalelo ezimbili ze-WireGuard, zibalwe kanye
Thatha umzila wokufinyelela we-IPv4 onethuna le-WireGuard ngaphakathi kwelinye. Isendlalelo sangaphandle sibiza ama-20 amabhayithi e-IPv4, ama-8 e-UDP kanye nama-32 esihlokweni sedatha ye-WireGuard kanye nethaga yayo yokuqinisekisa. Ngaphakathi kwalokho, ithuna langaphakathi lidinga isihloko saso se-IPv4 samabhayithi angama-20 kanye nesihloko se-UDP samabhayithi angama-8 ngaphambi kwama-32 aso esibili okusebenza kwe-WireGuard. Okusele kuhlala isihloko se-IPv4, isihloko se-TCP kanye nedatha. Umzila wangaphandle we-IPv6 ubiza ama-40 esikhundleni sama-20 futhi ushiya ama-1320.
| Layer | Bytes |
|---|---|
| Path MTU | 1500 |
| Outer IPv4 header | 20 |
| Outer UDP header | 8 |
| Outer WireGuard header and tag | 32 |
| Inner transport IPv4 header | 20 |
| Inner UDP header | 8 |
| Inner WireGuard header and tag | 32 |
| Innermost IPv4 header | 20 |
| TCP header | 20 |
| Payload that fits | 1340 |
Izibalo ziphelela kuma-1340 amabhayithi. Isendlalelo esisodwa ngaphansi kwemithetho efanayo sishiya ama-1400 emthwalweni we-TCP, okungu-1500 kususwa ama-20, 8, 32, 20 kanye nama-20, futhi umehluko wamabhayithi angama-60 uyikho kanye ukufakwa kwangaphakathi okungezwa ithuna lesibili.
Sebenzisa ama-1400 kumzila ogxenelelayo futhi ithuna langaphakathi lisilela amabhayithi angama-60, kungabonakali kuze kube iphakethe likhulu ngokwanele ukuba lilibe dinga. Ukugcwalisa kanye nenketho yokuhlukanisa yephrothokholi uqobo kuhambisa izinombolo futhi, ngakho themba ithebula.
I-MTU, i-MSS nokuhlukanisa kusebenza ezindaweni ezihlukene
I-MTU yesixhumi ibeka umkhawulo kulokho isixhumi esizokukhipha, kuyilapho ukucindezelwa kwe-MSS ku-TCP kushintsha lokho ozakwabo we-TCP akulungele ukukuthumela. Ukucindezelwa kulungisa amaseshini e-TCP futhi akwenzi lutho ngedathagramu enkulu ye-UDP, yileyo ndlela ukulungiswa okubonakala kuyimpumelelo kuhlelo olulodwa bese kweqa ngokuthula olulandelayo. Inketho yokuhlukanisa yephrothokholi uqobo iyisigxobo sesithathu esinokwehluleka kwayo. I-MTU yesixhumi iyisinyathelo sokuqala esivamile nesikhulukazi.
Amathuna anamabhuloho nalahaniselwayo athwala ozimele abehlukene, ngakho izinombolo ezivela kokunye ukusetshenziswa azivamisile ukudluliswa. Ukutholwa kwe-MTU yomzila, okuchazwe ku- RFC 8201, kusiza kuphela uma imilayezo ye-ICMP ekuncikile ivunyelwa ukudlula.
Ukuthola isendlalelo esisilelayo
Qinisekisa ithuna ngalinye lisedwa ngaphambi kokuwagxenela, uma izidingo zivumela ukuqhathanisa. Isifundi sosayizi ogxilile siyakunquma lokho: ping -M do -s 1472 -c 3 10.8.0.1 sithumela iphakethe eliphelele le-IPv4 lamabhayithi angama-1500 ngaphakathi kwalelo sendlalelo. Engeza isendlalelo sesibili futhi uphindaphinde isifundi esifanayo, ukuze noma yikuphi ukwehluleka kube ngokoshintsho olwaziwayo.
Uma ukudluliswa kuma, shintsha ipharamitha eyodwa ebhaliwe ngesikhathi futhi ubhale usayizi ohlulekayo. Hlola nomzila wokubuya, ngoba ukuphindaphinda kwemizila egxenelelayo kungalingisa inkinga yosayizi wephakethe eduze ngokwanele ukubiza intambama. Impendulo ye-ICMP ehlungiwe ingafihla umkhawulo wangempela, ngakho isifundi sibaluleke ukwedlula ukucabanga.
Bhala isabelomali lapho umuntu olandelayo ezosithola khona
Ithebula elinomugqa owodwa isendlalelo ngalinye liphila isikhathi eside kunomthetho wesithupha. Ligcine eceleni komdwebo wethuna ukuze kimina kungabuyekezwa izibalo ngaphansi kwengcindezelo.
Amathuna amaningi asho ukuncika okuningi, ngakho uhlelo lokuhlebela luba nesikhala salo eceleni kwesabelomali. Uma izinombolo zingakahlangani, linganisa umzila esikhundleni sokuqagela futhi. Umgomo iyinombolo ongayivikela, hhayi oyikhumbulayo.