Izibali zethrafikhi ze-OpenVPN ngokumelene ne-I/O yediski: izinombolo ezintathu ezihlukene

Dlulisa ifayela elikhulu ngethuneli bese isibali se-interface sikhuphuka ngobukhulu befayela. Akukho lutho kuleyo nombolo okusho ukuthi ubukhulu obufanayo bafika ediskini. Kulezi zingxoxo kuqhathaniswa izilinganiso ezintathu ezihlukene, futhi ziphendula imibuzo emithathu ehlukene: yimalini ithrafikhi eyadlula isendlalelo senethiwekhi, yimaphi amabhayithi inqubo eyawafunda futhi yawabhala ngamakholi wesistimu, futhi imuphi umsebenzi owafika esendlalelo sokugcina.

Ukuqhathanisa okokuqala nokwesithathu iyiphutha elivamile, futhi kukhiqiza noma inkinga yediski engabonakali noma uhlelo lomthamo olushaya indiva ukubhalwa okwenzeka ngempela. Lezi zinto ezintathu ziyahlukaniseka, futhi ngayinye inokusetshenziswa okulungile.

Izinombolo ezintathu ezihlanganiswa ndawonye

Izibali ze-interface zichaza ithrafikhi ephethwe esendlalelo senethiwekhi. Ziyinombolo efanele yobubanzi bebanda, yobukhulu bethuneli kanye namamodeli okukhokha abeka intengo ekudluliseni.

Izibali zezinhlamvu zenqubo zichaza amabhayithi ashukunyiswa ngamakholi okufunda nokubhala kunoma yisiphi isichazi, kuhlanganise amapayipi, amatheminali namadivayisi ezinhlamvu. Ziyinombolo efanele yokubuza ukuthi inqubo imatasa kangakanani emkhawulweni wekholi lesistimu, futhi akusona isikweletu sokugcina.

Izibali zokugcina zichaza amabhayithi i-kernel eyazama ukuwashukumisa aya noma aphuma kudivayisi yebloki. Ziyinombolo efanele yokuhlela umthamo, ngombandela wokuthi i-kernel ibhala imikhawulo yayo yokubala: ukufunda okugcinwe ku-cache akuphenduki ukufunda kokugcina, futhi ukubhalwa okukhanselwa kamuva akuphenduki ukubhalwa kwedivayisi okuqediwe.

Kungani isichazi sefayela kungekona ukubhalwa ediskini

I-VPN endaweni yomsebenzisi ishintshanisa amaphakethe ne-kernel ngedivayisi ye-TUN, okuyidivayisi yezinhlamvu hhayi ifayela elijwayelekile. Ukufunda kuyo kudlulisa iphakethe; ukubhala kuyo kufaka iphakethe. Akukho khasi lokuqukethwe kwefayela elilungiselelwa ukugcina, futhi akukho ndlela yesistimu yamafayela ehilelekile.

Yingakho ithuneli elimatasa lingakhombisa izibali zezinhlamvu ezinkulu ngaphandle kwezibali zokugcina. Inqubo yasishukumisa ngempela leso sikhathi, futhi i-kernel ayidinganga idiski ukwenza lokho.

cat /proc/$(pgrep -n openvpn)/io
ip -s link show tun0

Funda umphumela wokuqala njengokunqwabelene kusukela inqubo yaqala, hhayi njengejubane. Owesibili unikeza umbono we-interface wethrafikhi efanayo. Igebe elikhulu phakathi kwakho kokubili liyalindeleka futhi alibonisi ukuvuza, umugqa noma ukulungiselelwa okungalungile.

Amabhayithi avela kuphi ngempela

Umphumela oqhubekayo unesabelomali sawo, futhi ushayelwa imisebenzi hhayi umthwalo. Izinga lelogi elincazelayo, uhlu lwamaklayenti olushintsha njalo, noma iphutha eliphindaphindayo kuluphu eqinile kungakhiqiza ukubhalwa okukhulu ngenkathi ithuneli lithwala okuncane kakhulu.

Ifayela lesimo isithombe esibhalwa kabusha ngesikhathi esithile, ngakho izindleko zaso zincike esikhatheni nasekubalini kwamarekhodi akulo. Akusona ikhophi eqhubekayo yethrafikhi yeklayenti ngalinye, futhi ukufinyeza isikhathi kushintsha umthamo wokubhala ngaphandle kokushintsha umthamo wethrafikhi.

Ubunikazi bubalulekile lapho ufuna lokho kubhalwa. Uma isevisi inikeza imiyalezo kudayimoni yokuloga, ijenali noma ifayela lelogi libhalwa yileyodazimoni, futhi amabhayithi avela ekubalini kwayo hhayi ezibalini zenqubo ye-VPN uqobo. Ukubheka inqubo ye-VPN kuphela akukuchazi ukusebenza kwediski noma ukungabikho kwako.

Abanye abahlanganyeli kulula ukubakhohlwa: ukufundwa kwezitifiketi nokulungiselelwa ekuqaleni, amahawu abhala amarekhodi awo, ama-plugin okubala, ukuchithwa kwezinhlekelele kanye nemithwalo yomsebenzi engahlobene kusihambisi esifanayo. Akukho nokukodwa kwalokhu okufanele kulinganiswe ngokulinganisa ithrafikhi yethuneli namabhayithi abhaliwe.

Ukufunda isibali ngasinye ngendlela efanele

Imininingwane emithathu inquma ukuthi ukuqhathanisa kunencazelo yini. Ubunikazi benqubo bubalulekile, ngoba isevisi eqalwa kabusha ihlela kabusha izibali zayo. Isikhathi sibalulekile, ngoba inombolo enqwabelene negrafu ngomzuzwana kuyizilinganiso ezihlukene. Futhi iyunithi ibalulekile, ngoba ubukhulu bamanje befayela lelogi nakho akusona ijubane.

grep -E 'rchar|wchar|read_bytes|write_bytes' /proc/$(pgrep -n openvpn)/io
du -sh /var/log/openvpn 2>/dev/null
journalctl --disk-usage

Uma usola ukubhalwa komthwalo kwangempela, funa ingxenye okungumsebenzi wayo ukugcina umthwalo: ithuluzi lokubamba amaphakethe, i-proxy egcina imizimba ku-cache, i-plugin egcina umlando. Lezi zikhiqiza ithrafikhi eya endaweni yokugcina ekhula ngokulingana nalokho okucelwa ukuba bakubhale, futhi zingaphansi kwesinqumo senqubomgomo esihlukile mayelana nokugcinwa nokufinyelela.

Ukuhlela umthamo ngenombolo efanele

Kala indlela yamaphakethe ngezinombolo zenethiwekhi: ukudluliswa, ukucutshungulwa kwe-cryptographic kanye nokunyakaza kwememori. Kala ukugcina ngezinqumo zokubonakala ozenzile ngempela: izinga lelogi, ukugcinwa, isikhathi sesimo kanye noma yikuphi ukubanjwa okuvulwe ngamabomu.

Ukuhlukanisa lezi zabelomali ezimbili kwenza futhi izehlakalo zifundeke kalula. Idiski eligcwele elinethrafikhi yethuneli elingenele lichaza amalogi, ukubanjwa noma into engahlobene, futhi isibali se-interface ngeke sikuqonde lokho nanini. Isixhumanisi esigcwele esinelogi ethule sikhomba kwelinye icaciso.

Ukuqhathanisa okufanele kwenziwe kungukuthi phakathi kwezilinganiso zohlobo olufanayo. Amabhayithi e-interface uma eqhathaniswa namabhayithi e-interface ngokuhamba kwesikhathi akutshela ngendlela. Ukubhalwa endaweni yokugcina uma kuqhathaniswa nomthamo wokugcina kukutshela ngokugcinwa. Ukuqhathanisa okuphambanayo, ithrafikhi nediski, kubonakala kunencazelo kuphela futhi akukaze kube njalo.