NFS clientaddr phezu kwe-VPN: nquma nge-version encane, hhayi ngomkhuba
I-clientaddr imemezela ikheli lokushayela kabusha kuphela kwe-NFSv4.0. Funda inguqulo encane okuxoxwe ngayo, hlola indlela yokubuya, futhi uyihlukanise nokwehluleka kokukhweza.
clientaddr ingenye yalezo zinketho zokukhweza ezikopishwa emugqeni womyalo isikhathi eside ngemva kokuba isizathu sayo sinyamalele. Itshela iseva ye-NFSv4.0 ukuthi ibize iklayenti kuphi futhi. Ayikhethi iseva, ayibophi isicelo ngasinye ekhelini lomthombo, futhi ayifaki ithrafikhi emhubheni. Kwikhompyutha ephathekayo enamakheli amaningi, ukunquma ukuthi iyasebenza yini kudinga imibuzo emithathu.
Izimo ezintathu zinquma ukuthi inketho ibalulekile yini
Okokuqala inguqulo encane okuxoxwe ngayo, ngoba u-4.1 no-4.2 baphatha ukushayela kabusha ngendlela ehlukile. Okwesibili ukuthi iseva ingafinyelela ikheli ozolimemezela yini; umhubhe onomzila uvamise ukuvumela lokho kanti indlela ehumushiwe ayivamisile ukuvumela. Okwesithathu ukuthi ukwehluleka okusukelayo kuwukwehluleka kokushayela kabusha ngempela yini.
| Condition | If yes | If no |
|---|---|---|
| Version is 4.0 | The option can matter | Skip it; inspect the session instead |
| Server can reach the address | Advertise it | Fix reachability first |
| Failure is a callback | Diagnose callback path | Look at mount and export |
Ukuphendula leyo nge-oda elingalungile iyona ndlela abantu abengeza ngayo ikheli lokushayela kabusha ekukhwezeni kwe-4.2 bese bephetha ngokuthi inketho iphukile.
Qala ngokufunda inguqulo encane
nfsstat -mEkukhwezeni okukhona, lokhu kuphrinta ulwazi lokukhweza namafulegi, kuhlanganise nenguqulo esebenzayo njengo-vers=4.0, vers=4.1 noma vers=4.2. Inothi elisho kuphela “NFSv4” lishiya ngaphandle imininingwane eyodwa enquma ukuthi le nketho ifanele yini. Funda inombolo, hhayi igama.
Uma uchungechunge lwenguqulo luqhamuka kokumisiwe kweseva hhayi emugqeni wakho womyalo, buza ukuthi iyiphi inguqulo encane okuxoxwe ngayo. Iseva inganqaba inguqulo encane ephakeme bese ihlehlela emuva, futhi kanye lokho kuhlehla yikho isimo lapho ukushayela kabusha kuba okubalulekile ngokuzuma. Umugqa wokukhweza oyibhalile kungenzeka ukuthi awuchazi ukukhweza onakho.
Kwe-4.0, memezela ikheli iseva engalifinyelela
Iseva ye-NFSv4.0 ingase idinge uxhumano olwahlukile olubuyela ek layentini, isibonelo lapho ihoxisa ukuthunyelwa. Uma kunezixhumanisi eziningi noma ithebula lomzila elingajwayelekile, ukutholwa okuzenzakalelayo kwekheli lokushayela kabusha kungakhetha elingakwazi ukusetshenziswa yiseva.
mount -t nfs -o vers=4.0,clientaddr=10.8.0.6 10.8.0.1:/export /mnt/shareIkheli elingaphambi kukholoni yiseva futhi lihlala liyindawo okuyiwa kuyo. Ikheli lokushayela kabusha ngelek layenti, futhi kumele lifinyeleleke kusukela ohlangothini lweseva lomhubhe. Ikheli le-loopback liphendulela iseva kuyo ngokwayo. Ikheli leklayenti eliyimfihlo elingenandlela yokubuya nalo alusebenziseki, ngisho noma libonakala lilungile kuklayenti.
Sebenzisa lokhu njengesibonelo, hhayi njengesizathu sokwehlisa ukukhweza okusebenzayo. Shintsha amakheli kanye nendlela yokukhipha, futhi gcina ukuqinisekisa kanye nezinye izinketho ezidingwa yiseva. Ukushiya lezo ukuze kuhambisane nesibonelo esisodwa ukushintsha okunye okunomphumela ohlukile, futhi kuseva ephoqa uhlobo lokuphepha kwehluleka ngaphambi kokuzanywa kwanoma yikuphi ukushayela kabusha.
U-4.1 no-4.2 abayisebenzisi le nketho
I-Linux NFSv4.1 no-4.2 bathwala ukushayela kabusha ngezixhumano ezisungulwe yiklayenti, futhi u-4.1 ubiza leso sikhali ngokuthi i-backchannel. Abathembeli ekutheni iseva ivule uxhumano olusha oluya ekhelini elimemezelwe, ngakho-ke i-clientaddr ayilungisi indlela yokushayela kabusha ye-4.1 noma ye-4.2.
Lokho akusho ukuthi u-4.1 no-4.2 abanazo izinkinga zokushayela kabusha. Kusho ukuthi ukuxilongwa kuhlukile: hlola iseshini esunguliwe kanye nesimo se-backchannel yayo esikhundleni sokufuna imbobo yokushayela kabusha engenayo eyayingakaze imelwe ukuba ibe khona. Umthetho wokungena ongekho yisimo esilindelekile, hhayi isici okufanele silungiswe.
Ihlukanise ukwehluleka kokukhweza nokwehluleka kokushayela kabusha
Qala ngokuqinisekisa ukuthi iklayenti iyafinyelela isevisi ye-NFS nokuthi iseva iyakwamukela ukukhipha kanye nesicelo sokuqinisekisa. Isikhathi sokuphela ngaphambi kwalokho kushintshana asisho lutho mayelana nekheli lokushayela kabusha. Ukushintsha okukodwa ngesikhathi ukukhweza kusahluleka akusisondezi uphenyo, futhi kufihla iphutha lokuqala ngemuva kwenketho entsha yokukhweza.
Kuphela lapho ubufakazi bukhombisa ukushayela kabusha kwe-4.0 okwehlulekile khona ikheli elimemezelwe libaluleka, kanye nendlela yokubuya yeseva, isilaleli ohlangothini lweklayenti kanye nanoma yikuphi ukuhlunga phakathi kwazo. Ukushintsha inombolo kunketho yokukhweza akukwazi ukudala leyo ndlela; kungakhomba kuphela kweyodwa esivele ikhona. Bhala ukuthi iyiphi kulezo ezine oyiqinisekisile, ngoba umbiko olandelayo uzofika ngaphandle kwanoma yiyiphi yazo.
Impande ye-NFS ekuqaleni kokusuka iyindawo ehlukile enemibandela yayo yangaphambili: i-initramfs idinga amathuluzi kanye nenethiwekhi ngaphambi kokuba ukukhweza kwenzeke. Ukukhweza okusebenza ngemva kokungena akufakazeli lutho ngalolo chungechunge, futhi ukwehluleka ngesikhathi sokusuka akuvamile ukukhuluma nge-initramfs noma inethiwekhi.