Amakhasi ayacisha kodwa ukulayisha kuyama ku-VPN: iyiphi imbangela ehlulayo
Ukuma okuncike kubukhulu kuhambisana nephutha le-MTU yomzila, futhi kuhambisana ne-DNS, umkhawulo wohlelo noma ithumbu elingazinzile. Ukubona okune kunquma ukuthi iyiphi.
Amakhasi ayacisha, i-VPN ibika ukuthi ixhunyiwe, futhi ukulayisha ifayela kuyabanda endaweni efanayo njalo. Izincazelo ezine zihambisana naleso sichasiso: inkinga yobukhulu bepakethe, inkinga yokuxazululwa kwamagama, umkhawulo wohlelo kanye nethumbu elihlala lizisetha kabusha. Ngayinye ingaqinisekiswa noma ikhishwe ngokubona okuhlukile, ngakho isinqumo ukukhetha ukuhlolwa okulungile hhayi ukuqagela imbangela.
Abangeneleli abane nesimo esisodwa
Qala ngesimo sokwehluleka, ngoba sisusa ingxenye enkulu yohlu ngaphambi kokuvulwa kwanoma yiliphi ithuluzi. Ukuma okwenzeka ngobukhulu obungaguquki inkinga yobukhulu kuze kufakazelwe okuphambene. Ukuma ezindaweni ezingahleliwe kuyinkinga yokulahlekelwa noma yokuzinza. Ukwehluleka ngaphambi kokuvulwa koxhumano kuyinkinga yegama.
Umngeneleli wesine uhlelo ngokwalo. Imikhawulo yokulayisha, izikhathi zokuphela kwezicelo kanye nemikhawulo yobukhulu bomzimba ku-proxy kudala ukwehluleka okubonakala njengephutha lenethiwekhi kusiphequluli, futhi ngokuvamile kufika njengokwenqatshwa hhayi njengokuma.
Bhala phansi isimo esibonakele ngaphambi kokuhlola noma yini. "Kuma cishe enanini elifanayo lamabhayithi, njalo, ithumbu livuliwe" iyindawo yokuqala eqinile kakhulu kune-"ukulayisha akusebenzi".
Bese ugcina umzila unjalo ngesikhathi sokuhlola. Ukushintsha indawo yokuphuma, iphrothokholi kanye neseva ngesikhathi esisodwa kunikeza umphumela ongakwazi ukuwabela kuyo yiphi yazo. Ukuhluka okukodwa ngokugijima, futhi kukubhale phansi.
Hlukanisa ubukhulu phakathi ngaphambi kokuthinta inqubomgomo
Isihlukanisi esishibhe kakhulu ukuhlolwa okushintsha inombolo eyodwa. Thumela ama-ping angenakuhlukaniswa anobukhulu obukhulayo endaweni oya kuyo, bese ulayisha ifayela olilawulayo kuleyo sevisi, bese uqhathanisa lapho kuma khona ngayinye.
ping -M do -s 1472 203.0.113.9
curl -T ./probe.bin -o /dev/null -w '%{size_upload} %{time_total}
' https://example.net/uploadUmyalo wokuqala ubika ukuthi ipakethe elinobukhulu obugcwele liyawudlula umzila. Ku-MTU engamabhayithi angu-1500, umthwalo omkhulu we-ICMP ongahlukaniswa ungamabhayithi angu-1472, futhi ithumbu lithatha okwengeziwe kuleso sabiwomali ngaphambi kokuthi ipakethe langaphakathi liqale. Eyesibili ikunikeza ubukhulu nesikhathi sokudlulisela ezingeni lohlelo, futhi yilona nombolo obalulekile ngempela.
| Candidate | Observation that confirms it | Observation that rules it out |
|---|---|---|
| Path MTU or blocked ICMP feedback | Stall at a consistent size; large do-not-fragment probes fail | Small and large transfers both complete |
| Name resolution | The connection never opens for that name | The connection opens and then stalls mid-transfer |
| Application or proxy limit | A clean rejection at a documented size | No log entry on the server at all |
| Tunnel instability | Reconnects or rekeying during the transfer | The tunnel uptime is unchanged across the failure |
Funda kokubili ndawonye. Ukuhlolwa okwehluleka ngaphezu komkhawulo nokulayisha okuma eduze kwalowo mkhawulo kuyindaba ehambisanayo. Ukuhlolwa konke okuphumelelayo ngesikhathi ukulayisha kuma enanini lamabhayithi umzila owuthwalayo ngokusobala kukhomba uhlelo noma iseva, futhi akukho msebenzi we-MTU ozokushintsha lokho. Lowo mphumela omubi ubaluleka njengomuhle. Ususa igatsha elibiza kakhulu lophenyo.
Bese uhlola ukuzinza ngesikhathi sokudlulisela, ngoba ithumbu elivuselela ukhiye phakathi nokulayisha okukhulu lidala ukwehluleka okubonakala kuncike kubukhulu kungesikho. Ukufunda isikhathi sokusebenza iyona ndlela eshibhe yokuqinisekisa lokho.
Khetha phakathi kokulungisa nokugwema
Uma ubufakazi bukhomba ubukhulu, kunezimpendulo ezimbili ezithembekile neyodwa engathembekile. Ezithembekile ukubuyisela ukutholakala kwe-MTU yomzila ngokuvumela impendulo ye-ICMP edingekayo, noma ukunciphisa ubukhulu besigaba esimemezelwe ukuze ozakwabo bathumele izigaba ezincane. Engathembekile ukwehlisa i-MTU yesixhumi kuya kunani elikopishwe kunkundla futhi ungakaze uqinisekise ukuthi yashintshani.
Ukukhetha kuncike kulokho okulawulayo. Kunethiwekhi oyisebenzisayo, ukuvumela imiyalezo ye-ICMP ukulungisa okuhlanzekile ngoba kugcina umshini usebenza kuyo yonke iphrothokholi. Emzileni ongawulawuliyo, ukunciphisa ukukhetha okungokoqobo, futhi kufanele kusetshenziswe ngokuncane hhayi kuseva yonke.
Uma ubufakazi bukhomba uhlelo, lungisa uhlelo noma ukumiswa kwalo kwe-proxy. Impendulo engu-413 nokuxhumana okulengayo kungukwehluleka okuhlukile, futhi okwesibili ngokuvamile isikhathi sokuphela endaweni ethile ochungechungeni oluhlanganisa i-proxy enemikhawulo yayo.
Noma kunjalo, gcina amanani okuqala bese uphinda uhlole ngemva kokuhlehlisa. Ushintsho oluhambisana nokudlulisela okuphumelelayo akubona ubufakazi bokuthi yilo olubangele, futhi ikhono lokukuhlehlisa yilona elihlukanisa ukuxilonga nenhlanhla.
Bhala isinqumo ukuze siphile kuze kufike isigameko esilandelayo
Amaqiniso amane anele: isimo sokwehluleka esibonakele, imiphumela yokuhlolwa, ushintsho olwenzile kanye nomphumela wokuhlola kabusha. Ngawo, umuntu olandelayo angasho ukuthi inkinga iyafana noma intsha enophawu olufanayo.
Phawula nomongo womzila, ngoba okutholakele nge-MTU kuthinta isixhumanisi esithile. Ikhompyutha ephathwayo esebenza ekhaya yehluleke ehhotela inomzila emibili, futhi ukulungisa okusetshenziswe komunye akusho lutho ngomunye.
Ekugcineni, phikisa isifinyezo sokuthi "i-VPN yephula ukulayisha". Ithumbu lalikhona kokubili esimweni esisebenzayo nesingasebenzi; okwashintsha kwaba ubukhulu bepakethe umzila okwakufanele uwuthwale, noma indawo lapho ukudlulisela kwamiswa khona. Ukusho umshini wangempela yikho okwenza inothi libe usizo.