Ama-LAN amabili ku-NetBird: yimaphi ama-peer ahambisa indlela futhi ubani angakhuluma
Ukubhalisa akuhambisi i-LAN. Khetha i-peer yokuhambisa indlela eyodwa ngesiza, gcina ukufihla, khawulela inqubomgomo, bese ufundisa yonke ingxenye ye-LAN igxathu elilandelayo.
Isiteshi somsebenzi esiku-LAN yasentshonalanga sivula isiphequluli, sifaka ikheli lohlelo lokusebenza ku-LAN yasempumalanga bese silinda kuze kuphele isikhathi. Isikrini ngasinye se-NetBird sithi ama-peer axhunyiwe, okuyiqiniso kodwa akusona iphuzu: ukuba kunethiwekhi eyodwa yokumboza akufani nokuba nama-subnet amabili endawo kunethiwekhi eyodwa. Uhambo olungezansi luqala kuleso siteshi somsebenzi futhi luphetha ngesicelo umklamo owenqaba ngamabomu, futhi isiteji ngasinye yinto oyifunda kudivayisi, hhayi ukuqagela. Lindela ukuthi ingxenye engekho iwumzila noma inqubomgomo, hhayi ukumboza.
Qala ngokufunda ukuhluleka kusiteshi somsebenzi
Ngaphambi kokuvula ikhonsoli yokuphatha, thola ukuthi isiteshi somsebenzi sithumelani ngempela. Ithebula laso lomzila lona linquma ukuthi iphakethe liya kugethiwe yesiza, kusixhumi esibonakalayo sendawo noma akukho ndawo, futhi leso sinqumo siyabonakala ngaphandle kwethuluzi lokumboza. Umshini ongenamzila wephrefikhi ekude uzohluleka, kungakhathaliseki ukuthi uhlu lwama-peer lubukeka luphelele kangakanani. Ibanga lokumboza nephrefikhi yesiza uqobo ziyizikhala zamakheli ezihlukene, futhi ukubhalisa kuhlele eyodwa kuphela yazo.
Ngemva kwalokho hlukanisa ukuxazululwa kwamagama nokufinyeleleka, ngoba isiphequluli sibika kokubili njengokuphela kwesikhathi okufanayo. Phinda isicelo ngekheli kumsihini ogijima iklayenti le-NetBird, bese kusiteshi somsebenzi esivamile esingayigijimiyo. Uma umshini obhalisiwe uphumelela kanti owuvamile uhluleka, igebe lisekuhambiseni indlela kwasekhaya; uma womabili ehluleka, qhubeka ufunda ngaphambi kokushintsha umzila.
Khetha i-peer eyodwa yokuhambisa indlela ngesiza
I-peer yokuhambisa indlela iyisihambisi esimele i-LAN yaso kukho ukumboza, ngakho khetha umshini we-Linux onokufinyeleleka okuzinzile esubnetini esikhundleni sesiteshi somsebenzi sedeski lomunye umuntu. Yibhalise ngenqubo evamile bese uyifaka eqenjini eliqanjwe ngendima, ngoba isisetshenziswa senethiwekhi nenqubomgomo kuzobhekisa kulelo qembu kokubili. Ummeleli oyedwa ngesiza uhlala efundeka; iqembu lamavolontiya elikhangisa iphrefikhi efanayo lenza yonke imibuzo elandelayo ibe yiseshini yokulungisa amaphutha. Ikheli le-peer kusigaba sendawo libalulekile njengobunikazi bayo kukho ukumboza, ngoba lelo kheli liba igxathu elilandelayo elitshelwa yonke idivayisi evamile.
Bhala uhlelo ngaphambi kokuthinta ikhonsoli, ngoba amagama namaprefikhi yiwo ndawo lapho le miklamo iphambuka khona: iphrefikhi, igethiwe, ikheli le-peer neqembu, ngesiza ngasinye. Entshonalanga yi-10.52.0.0/24 enikezwa i-10.52.0.5 futhi empumalanga yi-10.63.0.0/24 enikezwa i-10.63.0.5; amaqembu amabili yi-west-routers ne-east-routers, futhi alikho iphrefikhi elingahlangana nelinye, nebanga lokumboza noma enye indawo ekuhambiswa kuyo indlela.
Dala isisetshenziswa, gcina ukufihla
Kudashibhodi esetshenzisiwe, dala isisetshenziswa senethiwekhi esisodwa ngesiza bese unamathisela kuso iqembu lama-peer okuhambisa indlela yaleso siza. Isisetshenziswa yiphrefikhi futhi iqembu yisihambisi esiphendula ngayo, futhi kokubili kufanele kube khona ngaphambi kokuthi kukhangiswe noma yini. Qinisekisa ukuthi inguqulo yokuzisingatha esetshenzisiwe inayo nhlobo inqubo yomsebenzi yamaNethiwekhi, ngoba isixhumi esibonakalayo esidala esinento yomzila enegama elifanayo siyisici esihlukile.
Shiya ukufihla kuvuliwe. Umhlahlandlela we-NetBird wesiza-kuya-siza uyakudinga kulolu hlelo, futhi ukuvala kwawo ukuze yonke ikheli lokuqala lihlale libonakala akusona isakhiwo esifanayo esinegxathu elilodwa elincane; kushintsha lokho okubonwa ukuhlolwa komthombo kanye nezinqubomgomo zokumboza. Umphumela kufanele ushiwo ngqo: insiza yokwamukela ibhala i-peer yokuhambisa indlela njengomthombo, hhayi isiteshi somsebenzi esisodwa. Uma uhlu lwezimvume noma ucwaningo lwaleyo nsiza lulindele amakheli eziteshi zomsebenzi, kungenzeka ukuthi okulindelekile kuyashintsha noma ubunikazi kufanele buphoqelelwe emngceleni wesiza ngaphambi kokuhumusha.
Gunyaza abaqalisi, hhayi amaprefikhi
Umzila wenza ikheli lifinyeleleke futhi inqubomgomo inquma ukuthi ubani angayisebenzisa; lezi yizinto ezimbili ezihlukene ezinabanikazi abahlukene. Bhala inqubomgomo usuka emthwalweni womsebenzi ubuyela emuva: yiliphi iqembu eliqalayo, isiphi isisetshenziswa esiqondiwe, futhi iyiphi insiza ye-TCP edingekayo. Inethiwekhi ekhangisa womabili amaprefikhi kuyo yonke i-peer ebhalisiwe idale ukufinyeleleka futhi ayizange inqume lutho.
Ngemva kwalokho funda okunye osekuvele kuvunyelwe, ngoba umthetho omusha omncane awuwususi umthetho omdala obanzi ophezu kwawo. Lapho impumalanga nayo kufanele iqale ukuxhumana iya entshonalanga, bhala leyo ndlela njengenqubomgomo yayo; ithrafikhi yokubuya yeseshini evulwe yintshonalanga iwumbuzo ohlukile kunokuvumela amaseshini amasha aya empumalanga. Uma kuyiziteshi zomsebenzi zasentshonalanga ezithile kuphela okufanele zifinyelele uhlelo lokusebenza lwasempumalanga, zikhethe emngceleni wesiza ngaphambi kokuhumusha futhi ugcine ubuqiniso bohlelo lokusebenza uqobo. I-peer yokuhambisa indlela ithwala ithrafikhi ye-LAN njengesiza sonke hhayi njengobunikazi bokumboza bomsebenzisi ngamunye, ngakho ukubalwa ngomsebenzisi ngamunye kufanele kuvela kwenye indawo.
Fundisa igethiwe ngayinye igxathu elilandelayo, bese uhlola ukwenqaba
Amadivayisi avamile awakaze abone ukumboza, ngakho igethiwe yawo uqobo idinga umzila ongashintshi oqondisa iphrefikhi ekude ekhelini le-LAN le-peer yokuhambisa indlela. Lesi yisinyathelo abantu abasidlulayo, ngoba konke okubonakala ngaphakathi kwe-NetBird sekusebenza kakade kuyilapho iziteshi zomsebenzi ezivamile zisaphela isikhathi. Igethiwe igcina umzila wayo omisiwe njengoba wawunjalo; le phrefikhi iyisengezo, hhayi ukushintshwa.
Izincazelo ezimbili zomzila zingezokuhlelwa kwegethiwe yesiza ngasinye, hhayi ukubhala phezu kwasihambisi. Zombili ziyimizila ejwayelekile engashintshi, futhi akukho neyodwa ethinta umzila omisiwe:
west gateway: 10.63.0.0/24 via 10.52.0.5
east gateway: 10.52.0.0/24 via 10.63.0.5Hlola ngohlelo lokusebenza oludingwa yiphrojekthi ngempela, kusuka kusiteshi somsebenzi esivamile, bese ubhala izinto ezintathu: igxathu elilandelayo elikhethwe ohlangothini oluthumelayo, inqubomgomo efanayo kanye nekheli lomthombo elibhalwe yinsiza. Hlola nokwenqaba, ngoba umklamo ongakaze wenqabe lutho unemiphetho engaziwa, futhi ukwenqaba uwubufakazi kuphela bokuthi umsebenzi wenziwa inqubomgomo hhayi ukuhambisa indlela. Lapho impumalanga nayo kufanele iqale, qala ukuxhumana okusha kusuka kulolo hlangothi esikhundleni sokucabanga ukuthi indlela yesibili iyalandela. Hlela nokuqalisa kabusha, ukuthuthukisa nokushintshwa kwe-peer yokuhambisa indlela, ngoba isihambisi esisodwa sesibe ukuncika kwesiza.
| Test | A pass looks like | A failure points at |
|---|---|---|
| Ordinary workstation opens the east application | Next hop on west is the routing peer | Missing static route on the west gateway |
| A source outside policy is refused | No session in the service log | Policy too broad, or a route bypasses it |
| East starts a connection, if required | A fresh reverse session succeeds | No policy for the reverse direction |
Amagama ayimfihlo adinga umklamo waso wokuxazulula, ngoba ukufinyeleleka akudali amarekhodi e-DNS futhi umzila we-IP osebenzayo onegama eliphukile ufundeka ncamashi njengomzila ophukile. Uma i-peer yokuhambisa indlela igijima ngaphakathi kwenethiwekhi yefu, buyekeza nemithetho yokudlulisela kanye nodonga lomlilo lomhlinzeki, ngoba ukubhalisa akukushayi indiva. Gcina okubonwe ukuhlola eduze kohlelo, ngoba umuntu olandelayo ozokulungisa lokhu uzofuna inqubomgomo efanayo nekheli lomthombo elibhaliwe, hhayi incazelo ye-topology.