Ukucindezela kwe-OpenVPN: ukwala, ukwamukela kuphela noma i-LZO ephelele?
I-comp-lzo no akuwona ukwala okuqinile. Qhathanisa ukwala ukucindezela, ukwamukela ohlangothini olulodwa ngesikhathi sokufuduka kanye nokukugcina, bese uhlola ukuthi i-offload yenzani.
Imigqa emithathu efayeleni lokuhlela ibukeka sengathi yonke icisha ukucindezela, futhi munye kuphela kuyo okwenza lokho ngempela. Umehluko ubalulekile ngoba isexwayiso ofuna ukusithulisa uphawu nje, kuyilapho inqubomgomo iyona enquma ukuthi uhlangothi olunye lusengacindezela yini. Ukuqhathanisa izinketho ku-eksisi eyodwa, okungukuthi yini ngayinye evumela ngemva koshintsho, kususa iningi lokungacaci. Ukuthi ufuna eyiphi kuncike ekutheni uyafuduka noma uzozinza.
Izinqubomgomo ezintathu ezibukeka zifana efayeleni lokuhlela
Isinketho ngasinye siphendula umbuzo ohlukile. I-allow-compression no inqaba ngqo imithwalo ecindezelwe, i-allow-compression asym ivula okungena futhi ayikaze icindzele okungena ngaphandle, kanti i-comp-lzo no endala ishiya isikhala sokuthi i-push yohlangothi olunye icishe ukucindezela. Eyokuqala kuphela iyinqubomgomo iseva engakwazi ukuyephula.
Bhala zontathu etafuleni ngaphambi kokukhetha, ngoba amagama aseduze ngokwanele ukuduka umhloli. Ezimbili zazo zisasebenzisa ikhodi yokuvula kumaphakethe atholiwe, futhi yilokho okuyisihloko sempikiswano yezokuphepha. Eyesithathu isusa ikhono esikhundleni sokukhawulela isiqondiso saso. Uma irekhodi loshintsho lithi ukucindezela kucishiwe, umugqa owodwa kuphela ogcwalisa lowo musho.
Isexwayiso esiqale uphenyo akuwona umgomo. Ukusithulisa ngenkathi inqubomgomo evumelayo isahleli kuletha ilogi ehlanzekile kanye nokuchayeka okungashintshile.
| Setting | What it permits | When it is the right answer |
|---|---|---|
allow-compression no | No compressed payloads, and no compression framing under offload | Both ends can be changed now |
allow-compression asym | Decompress inbound only | A dated migration while peers catch up |
comp-lzo no | Off locally, still pushable by a peer | Legacy compatibility you can still justify |
I-no isho ukuthini kunketho endala ye-LZO
Kunketho ye-LZO ephelelwe yisikhathi, i-no icisha ukucindezela ohlangothini lwasekhaya ngaphandle kokwenqabela uhlangothi olunye ukuthi lukucishe lapho inqubomgomo ikuvumela khona. Yilokho kungalingani okwenza ukuhambisa ifayela lokuhlela kuya ekwaleni okuqinile kushintshe indlela yokuziphatha ngezindlela okungenzeka ukuhlolwa kwelabhorethri ngeseva eyodwa kungakwazi ukukwembula.
Ukukhathazeka kwezokuphepha kuncike emibandeleni, akuphelele. Uma umhlaseli ekwazi ukubeka umbhalo osobala okhethiwe eduze kwemfihlo futhi abuke ukuthi ukucindezela kushintsha kanjani usayizi wethrafikhi ebethelwe, kukhona indlela yokwaziswa. Ukusuka ku-LZO kuya ku-LZ4 kushintsha i-algorithm nokuhlanganisa, hhayi leyo ndlela.
Ngakho uhlaka oluthembekile lumayelana nalokho ozimisele ukukuvumela, hhayi ukuthi iyiphi i-algorithm enconywayo njengamanje. Ukwala okuqinile ukuphela kokukhetha okunganciki ekubambisaneni kohlangothi olunye.
Ukwamukela kuphela kuyisimo sokufuduka, akuwona umkhombandlela
Ukwamukela okungalingani kukhona ukuze uhlangothi olulodwa lukwazi ukuyeka ukucindezela ngenkathi olunye lusalindele lokho. Kuyibhuloho, futhi amabhuloho adinga usuku lokuphela nomnikazi. Rekhoda ukuthi yibaphi abasebenza nabo abasathumela ithrafikhi ecindezelwe, ngoba inqubomgomo ivumela kanye leyo thrafikhi. Ngaphandle kwalolo hlu, isimo sokufuduka siba ukuhlelwa okungunaphakade ngenxa yokungenzi lutho.
Iklayenti alikwazi ukuphoqa iseva engahambisani nayo ukuthi ishiye ukuhlanganisa okudala ngokuhlela ifayela layo. Isiqondiso se-push sinqunywa esevani, ngakho ukufuduka kuphela ngempela ekuhleleni kweseva nasemafayeleni ayo eklayenti ngalinye.
Izimo ze-stub zigcina ukuhlanganisa kodwa zidlule umsebenzi wokucindezela ngokwawo, futhi azikho okufana okuqondile nenketho endala. Zihlole nomlingani wakudala kakhulu okusadingeka ukuthi umsekele ngaphambi kokukhetha eyodwa.
Lapho i-offload yesiteshi sedatha ishintsha khona impendulo
I-offload yesiteshi sedatha ihambisa ukuphathwa kwamaphakethe kwi-kernel, futhi ifayela lokuhlela elisencike ekuhlanganiseni kokucindezela lingase lingafanele leyo ndlela. Ukwehluleka akuvamisile ukuba msindo: iklayenti liyaxhumanisa bese lenza okuhlukile kunethumbu ohlolile.
Hlola ukuthi yikuphi ukuqaliswa okusebenzayo ngaphambi nangemva koshintsho, hhayi nje ukuthi ukuxhumana kuyaphumelela. Uma indlela ene-offload inqaba ukuhlanganisa kokucindezela, inqubomgomo yokwala eqinile nokufakwa kwe-offload ziyavumelana, kuyilapho inqubomgomo evumelayo nokufakwa kwe-offload zingavumelani.
Leyo nhlanganisela ifanele ukuhlolwa kwayo, ngoba yilapho khona ifayela elibukeka lilungile lingabi yilo elisetshenziswayo ngokuthula. Qhathanisa isimo okwavunyelwana ngaso nenhioso ebhalwe efayeleni lokuhlela, ngoba eyodwa kuphela yazo ezimbili ibonakala kulogi.
Khetha inqubomgomo, bese uqinisekisa umphumela okwavunyelwana ngawo
Khetha ukwala okuqinile uma ungashintsha izinhlangothi zombili, ukwamukela okungalingani uma ungakakwazi, nokucindezela okuphelele kuphela uma ungachaza ukuthi kungani ukuchayeka kwamukelekile. Bese uqinisekisa okwavunyelwana ngakho esikhundleni salokho okushiwo yifayela. Ilogi ethule kakhulu ingubufakazi kuphela uma ihambisana nenqubomgomo obuhlela ukuyisebenzisa.
Gcina isinqumo eduze kwefayela lokuhlela elisebenza kulo, nosuku kanye nabasebenza nabo abasakhululiwe. Ngemva kwezinyanga eziyisithupha, leyo nothi iyona mehluko phakathi kokukhululwa okwenziwe ngamabomu nengozi okungekho muntu ongasho usuku lwayo. Yibhale kusitoreji esifanayo nefayela lokuhlela ukuze umhleli olandelayo abone isizathu ngaphambi komyalelo.