OpenVPN mssfix: kungani iklayenti elilodwa limile ekudlulisweni okukhulu

I-laptop eyodwa ima lapho ilayisha ngomhubhe kuyilapho zonke ezinye izinto kuseva efanayo ziqhubeka nokusebenza. Lelo phethini likhomba emzileni owodwa, hhayi ekuhlelweni kweseva, futhi liyisango elivamile lombuzo we-mssfix. Inketho ingasiza, kodwa kuphela kuzixhumano ze-TCP ezizibhala kabusha ngempela. Ukwazi ububanzi bayo kukuvimbela ekushintsheni iseva esebenzayo ukuze usindise iklayenti elilodwa.

Inketho ibhala kabusha ini

I-mssfix ihlela usayizi omkhulu we-segment omenywe ekuxhumaneni kwe-TCP okudlula emhubheni, ukuze uhlangothi oluthumelayo lukhethe ama-segment alingana nesabelomali esifakiwe. Isebenza ekuxhumaneni, okusho ukuthi uxhumano olwavulwa ngaphambi koshintsho lugcina inani okwavunyelwana ngalo.

Ayinciphisi ama-datagram e-UDP, futhi ayibeki i-MTU yomhubhe. Izinkinga ezimbili ezihlukene zikhiqiza uphawu olufanayo: umthumeli we-TCP ongayinaki imingcele yomzila, nomzila oshiya ngokuthula amaphakethe amakhulu kunoma yimuphi usayizi. I-mssfix ibhekana nokuqala futhi ayenzi lutho ngokwesibili.

Lowo mehluko uchaza izivivinyo ezidumelela. Ukubeka inani elincane emzileni onomgodi omnyama kushintsha usayizi we-segment kodwa hhayi ukushiywa okulandela, ngakho ukudluliswa kuhluleka kwenye indawo.

Ububanzi yi-TCP ngaphakathi komhubhe

Kubhalwa kabusha kuphela ugcoyi lwe-TCP. Iseshini ye-QUIC, umdlalo noma uhlelo oluthumela ama-datagram e-UDP amakhulu kuzogcina usayizi waphakethe yayo, futhi uma kuyilezo zidluliso ezimayo, isixazululo sise-MTU yomhubhe noma yomzila esikhundleni salokho. Funda ukuthi iyiphi iphrothokholi esetshenziswa ukudluliswa okuhlulekile ngaphambi kokufinyelela inketho ye-TCP, ngoba ungqimba olungalungile lunaso isixazululo salo.

Nendlela nayo ibalulekile. Isethingi yeklayenti ithinta ugcoyi oluthunyelwa yilelo klayenti emhubheni, kuyilapho iseva ihlanganisa imifudlana eyidlulisela kumaklayenti. Uma kuma kuphela ukulanda okungenayo, inani ohlangothini lweklayenti akulona lonke indaba.

Inombolo negama elingukhiye akudluliseki

Inguqulo yomphakathi ye-OpenVPN 2.6 yamukela igama elingukhiye elingakhethekile ngemuva kwenani. Nge-mtu, inombolo ichaza usayizi wephakethe langaphandle kufaka phakathi izihloko ze-IP ne-UDP; ngaphandle kwayo, i-agumenti ilandela omunye umkhuba wokubala. Ngakho umugqa okopishwe phakathi kwezinguqulo awuchazi isabelomali sephakethe elifanayo. Bheka ikhasi lencwadi eliza nebhilidi oyisebenzisayo ngempela, esikhundleni sesifundo somunye umkhakhi.

I-syntax ibukeka kanje:

mssfix 1400 mtu

Thatha i-1400 njengesibambeli sendawo, hhayi isincomo somzila wakho. Thola inani emzileni okulinganisiwe kanye nasekufakweni okusetshenziswa ngempela, futhi khumbula ukuthi amaklayenti ezingugulweni ezindala noma kwezinye izinhlelo ingase zenqabe noma zihumushe ngendlela ehlukile igama elingukhiye.

Qinisekisa kuqala kuklayenti elilodwa

Linganisa umzila kusuka kumshini ohlulekile ngaphambi kokushintsha noma yini. Umthwalo umzila ongawuthwala ngaphandle kokuhlukanisa yinomboro oyifunayo:

ping -M do -s 1472 10.8.0.1
ping -M do -s 1400 10.8.0.1

Ucwaningo lokuqala lungena ephaketheni lamabhayithi angu-1500 uma kufakwa amabhayithi angu-28 ezihloko. Uma lwehluleka ngephutha lokuhlukanisa futhi elincane liphumelela, usayizi osebenzisekayo usendaweni ethile phakathi kwabo, futhi izindleko ezengeziwe zomhubhe zikhishwa phezulu.

Bese uphinda ukudluliswa okwamile kuxhumano olusha, futhi uqhathanise. Uma iklayenti elilodwa liba ngcono kuyilapho ezinye zingathintwanga, uthole ububanzi benkinga. Uma wonke amaklayenti ema, inani ohlangothini lweseva yilona okufanele libuyekezwe. Akukho kuemiphumela emibili evumela ushintsho ku-hardware engakaze ibe semzileni ohlulekile.