I-"File exists" ye-OpenVPN emzileni akulona inkinga yefayela

Qala lapho umlayezo uvela khona. Iklayenti iyaxhuma, umhubhe uyaphakama, bese ilogi ibika ukuthi umyalo we-Linux wokwengeza umzila wehlulekile nge-File exists. Akukho lutho kulo musho olubhekisela kusitifiketi, ukhiye noma ifayela lokuhlela, nakuba amagama ekhombisa lokho. I-kernel ichaza ithebula layo lemizila, futhi isiqalo osicele ukuthi sifakwe sesivele sinombhalo.

Landela ukulandelana kweklayenti ngokwako: yini eyayicela, yini ithebula elalivele linayo, ubani owabeka lowo mbhalo lapho, futhi ngemva kwalokho kuphela ukuthi yini okufanele ishintshwe. Isinyathelo ngasinye sisusa umnikazi oyedwa ongaba khona.

Yini iklayenti eyayiyicela ngempela

Ngaphambi kokwehluleka, iklayenti libhala phansi umzila elihlose ukuwengeza, ngokuvamile njengendawo ekuyiwa kuyo, imasiki yenethiwekhi, isango futhi ngezinye izikhathi njenge-metric noma ithebula. Lowo mugqa uyisicelo. Iphutha elilandelayo iyimpendulo ye-kernel, futhi kokubili kufanele kufundwe ndawonye.

journalctl -u openvpn-client@office -b --no-pager | grep -nE 'route|File exists'
openvpn --config /etc/openvpn/client/office.ovpn --verb 4 --log /tmp/ovpn.log

Isimo sokuphuma esingesona uziro esivela kumsizi wemizila asinikezi ulwazi olungaphezu kombhalo ongaphansi kwaso, ngoba izimpendulo ezahlukene ze-kernel zikhiqiza isimo esingesona uziro. Gcina umlayezo oqondile; umehluko phakathi kombhalo okhona nesango elingafinyeleleki unquma ukuthi iziphi izigaba ezilandelayo ezisebenza.

Funda umzila okhona, hhayi ikheli kuphela

Ukusesha kuthebula ingxenye enezinhlamvu ezine ezinamachashazi kufanayo akwanele. Into yomzila ibonakala ngomkhakha wamakheli, ithebula, isiqalo sendawo ekuyiwa kuyo, i-metric, iphrothokholi kanye nedivayisi yokuphuma, futhi imibhalo eyabelana ngesiqalo ingaba khona ngokuthe xaxa uma lezo zici zihlukile. Okushayisanayo yinto yonke, hhayi umbhalo.

ip -4 route show table all | grep -F '10.40.'
ip -4 route show match 10.40.0.0/16
ip -4 route get 10.40.0.5

Umyalo wokugcina uphendula umbuzo ohlukile kunemibili yokuqala: hhayi ukuthi yini ekhona, kodwa ukuthi i-kernel ingakhetha umbhalo upi wendawo ekuyiwa kuyo manje. Zombili izindlela zokubuka ziwusizo, futhi ziyahluka ngokwanele ukuthi kufanele ziqhathaniswe ngaphambi kokuphetha noma yini. Ukungafani phakathi kwazo yisimo esithakazelisayo, hhayi iphutha lokuhosha.

Bhala isiqalo, ithebula, i-metric kanye nedivayisi eceleni kwesicelo esihlulekile. Uma umbhalo okhona unezici ezifanayo kanye nokugxuma okulandelayo okufanayo, unomyalelo ophindwe kabili hhayi inkinga yomzila.

Abanikazi abane isiqalo esingaba nabo

Imizila exhunyiwe ivela ekhelini elinikeziwe futhi uhlelo luyakha kabusha njalo lapho lelo kheli likhona. Iklayenti le-DHCP noma umphathi woxhumano ufaka imizila njengengxenye yomjikelezo wayo wokuphila. Iklayenti elinye le-VPN kungenzeka selivele lithwele isiqalo esifanayo. Futhi ihuku noma iskripthi sendawo kungangeza esinye okungekho okunye okwaziyo ngaso.

Umnikezi ngamunye udinga ukulungiswa okuhlukile. Umzila oxhunyiwe awuwona owakho wokuwususa; ukuwususa kungaphula ukufinyelela kwendawo ngaphambi kokuba umhubhe usebenze, futhi i-kernel izowubuyisela. Umzila ophethwe umphathi kufanele ushintshwe ngulowo mphathi, hhayi nge-ip route del yomsebenzi wesandla ezoqedwa ukuxhumana kabusha okulandelayo.

I-interface egciniwe yenza lowo dumpu ube lula. Lapho idivayisi yomhubhe isinda ekuxhumaneni kabusha, imizila efakwe yikhodi yokuhlela yangokwezifiso ingase ibe khona kokwesibili, ngakho iskripthi esicabanga isimo esihlanzekile siyahluleka okwesibili futhi sisebenza okokuqala. Noma hlambulula umbhalo ophelelwe yisikhathi ngamabomu noma wenze ikhodi yokuhlela ingabi nawo umphumela wokuphinda.

block-local iphendula umbuzo ohlukile

Lapho iphrofayela ithumela yonke itrafikhi ngomhubhe, iklayenti kufanele linqume ukuthi kwenzekani kunethiwekhi yendawo. Ifulegi le-block-local lishintsha leso sinqumo ngokuhambisa i-LAN yendawo ngomhubhe kuyilapho ligcina okuhlukile okubhaliwe kwesango le-LAN; lokhu kuwukukhetha kwenqubomgomo yetrafikhi okunemiphumela ebonakalayo ekufinyelelekeni.

Akuchazi ukuthi kungani ukwengeza umzila kubuyise iphutha lombhalo okhona, futhi ukukuthatha njengokulungisa okujwayelekile kufihla ukungqubuzana kwangempela ngemva koshintsho lwenqubomgomo. Uma izinsiza zakho zendawo zingasafinyeleleki ngemva kokuhlela iphrofayela, leli fulegi lingenye yezinto zokuqala okufanele zihlolwe; uma ukwengeza umzila kuhluleka, akusiyo impendulo.

Kuthathe njengesinqumo sokuthi yiziphi izindawo ekuyiwa kuzo ezihlala zisendaweni, esithathwe ngamabomu futhi sabhalwa phansi. Akusona isiswitshi okufanele sizanywe lapho ilogi ibonakala isabisayo.

Vala umjikelezo: susa okuphindwe kabili emthonjeni wakho

Uma usazi ukuthi imuphi umnikazi ophethe umbhalo, susa umyalelo ophindwe kabili lapho uchazwe khona. Kungaba umugqa we-route kuphrofayela, i-push evela kuseva, noma ihuku elingasadingi ukugijinywa.

ip -4 route show match 10.40.0.0/16
ip -4 route get 10.40.0.5
journalctl -u openvpn-client@office -b --no-pager | tail -n 15

Bese uxhuma futhi uqinisekise izinto ezintathu: umhubhe uyaphakama, indawo ekuyiwa kuyo ehlosiwe iyanqunywa emzileni owawufuna, futhi ukwehluleka kuyanyamalala ngaphandle kokuba okusha kuvele endaweni yakho. Ilogi ehlanzekile enomzila okhethwe kabi akulona ukulungisa.

Uma isiqalo sisho i-LAN yendawo ngakolunye uhlangothi nenethiwekhi ekude ngakolunye, inkinga iwukuhlangana kwamakheli hhayi ukuphindwa kabili, futhi akukho kususa okuzokwenza zombili izincazelo zibe yiqiniso ngesikhathi esisodwa. Lelo cala lidinga icebo elihlukile kwelinye lamathwele amabili. Nquma ukuthi luphi uhlangothi oluzophinda lubhalwe izinombolo ngaphambi kokuthinta olunye.