Isixwayiso se-AF_INET se-OpenVPN: ukubuyela emuva okungenabungozi noma i-socket ehlulekile?

Imigqa emibili yelogi ye-OpenVPN iqala ngamagama afanayo, futhi eyodwa kuphela yayo ebika inkinga. Could not determine IPv4/IPv6 protocol. Using AF_INET isaziso sokubuyela emuva: iphrofayili yashiya umndeni wamakheli uvulekile, ngakho i-daemon yakhetha owodwa yaqhubeka. Igatsha lokwehluleka libika ukuthi awekho i-socket eyakhiwe futhi licela ukuqalisa kabusha. Konke okulandela isiqalo esabiwe kuyabahlukanisa, ngakho funda ngale kwaso ngaphambi kokushintsha noma yini.

Isaziso sokubuyela emuva sibika ini

I-OpenVPN yamukela umndeni ocacile nge-proto udp4 noma nge-proto udp6, futhi yamukela i-proto udp lapho umndeni kufanele ukhishwe ngesikhathi sokuqalisa. Esimweni sesibili i-daemon ihlola imininingwane yokubopha yasendaweni bese ikhetha.

Lapho lokho kukhishwa kusebenza, isixwayiso sisho ukuthi yayiphi indlela eyathathwa futhi inqubo iyaqhubeka nokwakha i-socket. Iseva ene-proto udp kumsingathi onamazinga amabili ivamise ukugcina ise-IPv4 ngale ndlela. Akukho lutho kuleyo ndlela okuyiphutha, futhi akukho lutho kuyo okusikisela ukuhlasela, iseva yewebhu engekho noma i-akhawunti enqatshiwe. Umugqa uwusizo kuphela ngoba izivivinyo zakamuva kufanele ziqhathaniswe nomndeni owushoyo.

Kubheke njengempendulo yombuzo owodwa, hhayi ukuxilonga. Ishoyo ukuthi iyiphi imindeni le nqubo eyikhethile, futhi akasho lutho mayelana nokuthi kungani iklayenti lingakwazi ukuxhuma.

Igatsha lokwehluleka libukeka kanjani

Kamuva kuleyo khodi ye-socket kunesigatsha lapho kungekho i-socket nhlobo. Ibhala umyalezo omfishane womndeni wamakheli futhi icela ukuqalisa kabusha, ngoba akukho okusele ongaqhubeka nakho. Amagama okuqala ayafana nokubuyela emuva; umphumela awufani.

Hlukanisa ngokulandelayo. Uma i-daemon iqhubeka nokusebenza futhi ibika isilaleli sayo, umugqa wawuyisaziso. Uma iphuma noma iqalisa kabusha kumjikelezo, ingxoxo manje imayelana nokubopha.

Ukutholakala ku-grep nakho akukona ukukhonjwa kwegatsha. Le nkulumo ivela ezifingqweni ezijikelezayo, emigqeni egoqiwe kanye nezingcaphuno zelogi abantu abazinamathayo bevela kwesinye isandla, ngakho funda imigqa eseduze nokulandelana kwezimpawu zesikhathi esikhundleni sokufana okukodwa.

Hlola isilaleli esikhundleni sesixwayiso

Iseva esebenzayo iphendula umbuzo womndeni ngqo, ngaphandle kokuqagula kumbhalo welogi.

ss -lunp | grep openvpn
ss -ltnp | grep openvpn

Fanisa umndeni, ikheli kanye nechweba nephrofayili. Umugqa we-0.0.0.0:1194 yi-IPv4 kuphela, kuyilapho umugqa we-[::]:1194 kumsingathi onamazinga amabili ungamukela imindeni yomibili kuye ngesethingi se-bindv6only. Uma iphrofayili isho i-udp futhi i-socket iyi-IPv4, amaklayenti asebenzisa isixazululi esibuyisa irekhodi le-AAAA kuphela zizohluleka ngaphambi kokuba i-tunnel ixoxwe.

Bese uhlola kusuka kuklayenti elifana nabasebenzisi bakho: indlela efanayo yesixazululi, uhlobo olufanayo lwenethiwekhi. Ukuxhumana kwasendaweni okuvela kuseva kufakazela okuncane kakhulu mayelana nethrafikhi edlula kudivayisi ye-NAT noma emthethweni wensimbi yomlilo obhalelwe omunye umndeni.

Nini ukuphoqa umndeni kufanele

Ukufaka i-proto udp4 kufanele ukusetshenziswa kwe-IPv4 kuphela: igama le-DNS le-A kuphela, imithetho yensimbi yomlilo yekheli elilodwa le-v4, amaklayenti ngemuva kwabahlinzeki abanikeza amakheli e-v4 kuphela. Kususa ukungaqondakali futhi kwenza isethi elandelayo yemigqa yelogi ibikeke.

Impikiswano efanayo isebenza ngokuphambene endaweni ebeka i-IPv6 kuqala, futhi i-udp6 phambi kwesisekelo samaklayenti e-A kuphela ukuphazamiseka ozibangele wena. Ukuphoqa umndeni kuphela ukuze uthulise isixwayiso esingenabungozi kuyisimo sakudala saleli phutha, ngoba ushintshile ukuthi ngubani ongaxhuma ukuze uthole ilogi ethulile.

Khetha ngokusekelwe ezindaweni zokugcina nasemaklayentini okufanele azifinyelele. I-incwadi ye-OpenVPN 2.6 ibhala izinhlobo zokuthutha, futhi umyalezo uyimpumela yalokho kukhetha, hhayi okokufaka kwayo.

Gcina irekhodi lincane

Bhala umugqa oqondile kanye nophawu lwaso lwesikhathi, isethingi yokuthutha esebenzayo evela kuphrofayili esebenzayo, i-socket njengoba i-kernel iyibika, kanye nesigaba esilandelayo esihlulekile. Lezo zinto ezine zixazulula cishe wonke umbuzo ovezwa umyalezo, futhi akukho nanye edinga ukuqagula ngezinsizakalo ezingahlobene. Zisinda nasekudlulisweni komsebenzi, okuyinto isithombe sesikrini se-grep esingakwenzi.

Iziphakamiso zamaphakethe eziza nesixwayiso zihlobene kuphela uma iphutha lisho ifayela eliphethwayo elingekho.

Uma i-ifconfig ingekho ngempela, i-daemon isho igama layo lapho iskripthi siyibiza, futhi lokho kufanele ukuphenywa okwahlukile. Umugqa we-AF_INET nensiza engekho kungukwehluleka okuhlukile, futhi ukufaka izinto ukuze ubone ukuthi isixwayiso siyashintsha yindlela umsingathi ohlanzekile aphenduka ube ngongcolile.