I-metric yomzila we-OpenVPN: kungani umzila okhethiwe usahlulwa

Wengeze i-metric kumzila kuphrofayela, waxhuma kabusha, kodwa ithrafikhi isaphuma ngesixhumi esingalungile. Inombolo ayiyona nhlobo inkinga. I-metric ihlela kuphela abazongenela abasuvele uwazama uhlelo lokusebenza, kanti isiqalo esithile kakhudlwana noma ithebula lenqubomgomo elandulelayo linquma ngaphambi kokuba noma iyiphi i-metric ifundwe.

Qala ngephrofayela, bese kuba yithebula efakiwe, bese kuba yimithetho yokukhetha. Leyo ukulandelana ihambisana nendlela iklayenti elakha ngayo umzila futhi ikuvimbela ukulungisa inani elingalokothi lingene ekubhekisiseni.

Funda umugqa womzila ngokulandelana kwezinkambu

Iklayenti le-Community OpenVPN 2.6 lamukela izinkambu ezine emugqeni we-route we-IPv4: inethiwekhi, imaski, isango kanye ne-metric yokuzikhethela. Indawo yesango yilapho igama elingukhiye elikhethekile vpn_gateway lifakwa khona. Lisho isinyathelo esilandelayo ohlangothini lwe-VPN kulolu xhumano, hhayi inombolo yethebula lokuhlela futhi hhayi i-router yakho ebonakalayo. Uma ukweqa lokho, ingxenye esele yomugqa ifundwa ngombono ongafanele walokho ekwenzayo. Incwadi yezinketho zenethiwekhi ibhala zonke izinkambu ezine.

Endaweni eyimfihlo, umugqa ungafundeka kanje:

route-metric 50
route 172.20.0.0 255.255.0.0 vpn_gateway 30

I-30 esobala isebenza kulo mzila, kanti i-50 ihlala iyimali ezenzakalelayo kuyo yonke eminye imizila kuphrofayela engayifaki inombolo. Ukufunda umugqa kusukela kwesobunxele kuye kwesokudla kwanele ukuthola ukuthi yiliphi inani elisebenza kuphi.

I-route-metric iyimali ezenzakalelayo, hhayi izinga

route-metric ibeka inani eliyisipele lemizila engenayo inombolo yayo. Ayikhuphuli umzila ngaphezu kwanoma yini futhi ayihleli kabusha imizila efakwe ngama-metric asobala.

Umehluko ubalulekile lapho iphrofayela ihlanganisa zombili izinhlobo. Umugqa owodwa we-route-metric eduze kwaphezulu ubonakala unegunya futhi kulula ukumsola, kuyilapho umzila othwala ithrafikhi ngempela ungaba ne-metric yawo imigqa emithathu ngezansi.

Uma ufuna umzila owodwa uthande indlela ethile, beka inombolo kulo mzila. Uma ufuna okwezenzakalelayo okungaguquki kuphrofayela ekhiqizwe, sebenzisa route-metric bese ushiya imigqa ngayinye njengoba injalo. Ukuhlanganisa kokubili ngaphandle kwesizathu yikho okwenza iphrofayela iphele ngomzila okungekho muntu ongawuchaza.

Hlola okufakwe yiklayenti

Lapho ukuxhuma kabusha kuqedwa, buza i-kernel, hhayi iphrofayela.

ip route show ibala imizila eyengezwe yiklayenti, kanti ip route get 172.20.5.10 iphendula umbuzo owusizo kakhulu: yimuphi umzila le ndawo ezowusebenzisa ngempela, futhi ngayiphi ikheli lomthombo. Uma indawo ingekho ethebulini, iklayenti ayiyifakanga.

Umyalo wasekhaya, ukusunduzwa okuvela kuseva noma omunye umphathi wenethiwekhi bangengeza noma basuse isiqalo esifanayo, futhi onyulayo ogcina ukubhala uyahlula. Gcina umzila oya endaweni yokugcina uphambi kwamehlo akho ngenkathi usebenza, ngoba uxhumano ludinga indlela eya kuseva ekude engadluli kuthuneli eliyakhayo.

Kungani i-metric encane isahlulwa

Ama-metric aqhathanisa imizila eya endaweni efanayo. Awenza isiqalo esibanzi sibe sobala kakhudlwana. Lapho i-redirect-gateway def1 isebenza, iklayenti lifaka i-0.0.0.0/1 ne-128.0.0.0/1, futhi lezo ziqalo ezimbili zihlanganisa wonke umkhathi we-IPv4 ngokusobala kakhulu kune-0.0.0.0/0. I-metric engu-1 kumzila ozenzakalelayo ayizidluli.

Umgqondo ofanayo usebenza kunoma yiluphi upele oluhlangana. I-/24 ihlula i-/16 ekhelini elingaphakathi kwayo kungakhathaliseki izinombolo ezixhunywe kuyo, ngoba ukusesha kuqala kukhetha ukufana okusobala kakhulu bese kuthi ngemva kwalokho kuqhathanise ama-metric phakathi kwezinto ezilinganayo.

Lena yingxenye ebonakala iyiphutha le-metric kodwa ayilona. Hlola ubude besiqalo kubo bobabili abazongenela ngaphambi kokushintsha noma iyiphi inombolo.

Imithetho yenqubomgomo isebenza ngaphambi kwethebula

Ku-Linux, i-ip rule inquma ukuthi iyiphi ithebula yokuhlela edingwayo. Imithetho ihlolwa ngokulandelana kwesikhathi, ngakho ithebula elandulelayo lingabuyisela umzila ngaphambi kokuba ithebula eliyinhloko lifundwe. I-metric engaphakathi kwe-main ayikwazi ukwedlula ukufana ethebulini eladingwa kuqala.

Sebenzisa i-ip rule show bese ubuza ithebula elithile, isibonelo i-ip route show table 100, ukubona ukuthi lowo mthetho ubuyisela ini. Uma iklayenti le-VPN noma indawo yokusebenza yekhontheyna yengeze umthetho, impendulo ingaba lapho hhayi ethebulini obulifunda. Ikheli lomthombo nalo libalulekile, ngoba umthetho ungafanisa umthombo futhi uxazulule indawo efanayo ngendlela ehlukile kuthrafikhi yethuneli nethrafikhi ye-LAN.

Qinisekisa indawo, hhayi ukuhlelwa

Isivivinyo esiphetha ingxoxo ukubuza okukodwa kumsingathi ongaphakathi kwe-subnet ehlosiwe, kanye nokuhlola ikheli lomthombo elikhethwe yi-kernel. Uma lokho kubhangqa kuhambisana nomklamo, i-metric yenza umsebenzi wayo ngisho noma uhlu lungabonakali njengokuhlelwa okumsulwa.

Shiya i-IPv6 ne-DNS ngaphandle kwalesi sivivinyo. Zilungiselelwa ngemiyalo ehlukile futhi zixazululwa ngezindlela ezihlukile, futhi umzila we-IPv4 osebenzayo awusho lutho ngakho kokubili. Shintsha isendlalelo esisodwa ngesikhathi bese uphinda ugijime umbuzo.