Ukubuyela emuva kokudlala kabusha kwe-OpenVPN kuloja: lokho umugqa ongakufakazeli

Umugqa uthi PID_ERR replay-window backtrack occurred, futhi yonke imiphumela yosesho iwuchaza njengamaphakethe awile kanye nomhubhe ophukile. Endleleni ye-UDP ye-Community OpenVPN 2.6, lowo mlayezo ubhalwa ngesikhathi umsebenzi wokwamukela usaqhaza ukuthi wenzeni ngephakethe. Ibhalisa ubukhulu obusha bokubuyela emuva, bese lowo msebenzi uqathanisa ibanga nefasitela kanye nesimo esibhaliwe ngaphambi kokwamukela noma ukwenqaba. Ukufunda ilebula yeloja njengesinqumo iyiphutha uhlu lokuhlola olukhona ukuze luyivimbe.

Isitobhi sokuqala: khomba ukuthi umugqa uyini

Lokhu ukuxilonga mayelana nebanga lokulandelana, hhayi isinqumo mayelana noxhumo. Kuvela ekusetshenzisweni kwe-ID yephakethe endaweni lapho kubhaliswa khona ubukhulu obusha obonakele bokubuyela emuva. Leyo ndawo ingaphambi kwegatsha lokwamukela noma lokwenqaba, yingakho iphakethe eliyibangayo lisengalethwa.

Qinisekisa ukuthi yiliphi isiphathi esilibhalile nokuthi ngayiphi izinga lemininingwane. Iseva neklayenti zombili zingakhipha imilayezo ye-ID yephakethe, futhi umlayezo ovela ohlangothini olulodwa awusho lutho ngesimo sokwamukela solunye uhlangothi.

Isitobhi sesibili: thola umphumela walelo phakethe

Funda imigqa elandela ukuxilonga, hhayi ukuxilonga kuphela. Lowo msebenzi uqhubeka uye ekuhloleni kwefasitela nokuphindwayo, ngakho umphumela walelo phakethe elithile unqunywa imiyalo embalwa kamuva futhi kungenzeka ukuthi wukwamukela. Isiqephu seloja esiphela emugqeni owesabekayo asisho lutho ngomphumela. Funa ifasitela elizungezile, hhayi umugqa uqobo:

journalctl -u openvpn-server@server --since "-10 min" | grep -n -A3 -B3 "backtrack occurred"

Uma iloja lingakhombisi kunqatshwa kwalelo mlingani ngaleso sikhathi, yeka ukuthatha lo mugqa njengembangela yokuphazamiseka. Qhubeka endleleni yohlelo, ngoba yilapho iningi lemibiko yokuxhumekile kodwa kungekho thrafiki iphela khona ngempela.

Isitobhi sesithathu: qhaza ukuthi ukuhlela kabusha kungokoqobo yini

Ukuhlela kabusha kuyisici sendlela, futhi ukuxilonga okukodwa kuyisampula eyodwa yako. Funa imilayezo ephindwayo yalelo mlingani efasiteleni elifushane, bese uqathanisa nokuqoshwa kwezinhlangothi zombili ngaphambi kokuphetha ngokuthi inethiwekhi ihlela kabusha ngamandla.

Imilayezo embalwa ngesikhathi sokuxhumana kabusha ayiyona into emangazayo. Ukugeleza okuqhubekayo kanye nokuphela kwesikhathi kwangempela kohlelo kufanele kuphenywe, futhi leyo nhlanganisela iwubufakazi, hhayi ilebula.

Isitobhi sesine: amapharamitha wefasitela, nokuthi awuyona ini

replay-window ithatha usayizi wokulandelana kanye nenani lesikhathi elingakhethwa, ngakho ukulinweba kushintsha ukubekezelela okubili okuhlukene ngesikhathi esisodwa. Ukukhulisa inombolo kuvumela amaphakethe akude kakhulu ekulandelaneni; inani lesikhathi likhawulela isikhathi iphakethe elingasacatshangelwa ngaso. Ukunweba ukushintsha kwenqubomgomo okunezindleko zokuphepha, futhi akukuqinisi ukubethela noma akukucishi ukutholwa kokuphindwayo. Ukubekezelela okubili kuhamba ndawonye, ngisho noma ubungakuhlosanga.

Iphakethe elidala eliqinisekisiwe lisengaba ukuphindwa okungafuneki, yingakho umamukeli egcina lokhu kuhlola. Ukwamukela ukuhlela kabusha okuningi kusho ukwamukela ingxenye eningi yaleyo ngozi.

Ukwenza isixwayiso buthule nge-mute kushintsha lokho okubonayo, hhayi lokho okwenziwa idaemon. Uma inhloso iwukuthi iloja lithule ngesikhathi somcimbi owaziwayo, lokho kuwukukhetha okusemthethweni kokusebenza; uma inhloso iwukulungisa umhubhe, ukuthulisa kufihla ubufakazi.

mute 20
replay-window 64 15

Ukushintsha ukuthutha kwangaphandle kuya ku-TCP kushintsha ukuziphatha kokulethwa nokubuyiselwa futhi kunezela izindleko zako zokuvinja ikhanda lomugqa. Lesi yisinqumo somklamo, hhayi impendulo yokuqala kulebula yeloja eyodwa. Ukufaka iseva kabusha kubi kakhulu, ngoba kususa umehluko phakathi kwezibalo kanye nomngcele ohlulekile ngempela.

Isitobhi sesihlanu: hlola indlela ebalulekile kumsebenzisi

Njengoba umhubhe uxhumekile, gijimisa ukuhlolwa kohlelo ngokwalo futhi ufunde indlela eliyikhethile, isimo sokudlulisela kanye nendlela yokubuya. Umhubhe othwala amaphakethe ohlangothini olulodwa kuphela awukhiqizi imilayezo yokubuyela emuva nhlobo, futhi lokho kuvamile kakhulu kunokuhlela kabusha okukhulu.

Bhala phansi lokho okulinganisile esitobhini ngasinye. Lowo mbhalo uyiwona ovimbela umbiko olandelayo ukuthi uqale futhi emugqeni owesabekayo futhi usebenze uphume lapho.

Ukwetshenziswa kwe-ID yephakethe kukhombisa ukulandelana kwezibalo nesinqumo, futhi incwadi yesandla ichaza ububanzi bokulandelana nesikhathi sefasitela. Ukufunda kokubili ndawonye yikho okushintsha umugqa weloja owesabekayo ube ubukhulu obaziwayo. Akukho kukho okubili okusho lutho ngendlela yakho ethile, yingakho izilinganiso ezingenhla zisabalulekile.