Ingabe igama lomsingathi lesango le-Pi lizibuyekeza ngokwalo izindlela eziqinile?

Igama le-DNS lesango lakho le-Pi alikaze libhale kabusha ukugxuma okulandelayo okufakiwe. Bona ukuthi i-kernel igcina ini nokuthi ubani kufanele abuyekeze indlela.

Ukuqondisa indlela eqinile egameni lesango kuzwakala sengathi kufanele ibekezelele ukushintsha kwekheli, kodwa ayibekezeleli. Igama lihlala ku-DNS, kuyilapho indlela ihlezi kuthebula lokuhambisa lomthengi njengokugxuma okulandelayo okuyinombolo. Lapho i-Pi ithuthela kwelinye ikheli, wonke umsebenzisi osevele efake ukugxuma okudala uqhubeka ethumela uhambo kuleyo nombolo. Asikho isixazululi esixhunywe kuthebula lokudlulisela, ngakho akukho lutho olubhala kabusha leso sibhalo kuwe.

Impendulo ye-DNS nendlela yizinto ezihlukene

Ake sithi i-Pi yakho iphendula ku-vpn-gw.lan futhi idlulisa i-10.44.0.0/16 kungene emhubheni. Amaklayenti aku-192.168.30.0/24 ayifinyelela ngendlela eqinile. Lapho ikheli le-Pi lisuka ku-192.168.30.4 liya ku-192.168.30.11, irekhodi lalandela ngaphakathi kwe-TTL yalo kodwa izindlela azizange zilandele.

Le mibono emibili ayivumelani ngendlela okulula ukuyiphuthelwa, ngoba yomibili ibonakala inengqondo uma uyibuza ngokwehlukana:

$ ip route get 10.44.0.1
10.44.0.1 via 192.168.30.4 dev eth0 src 192.168.30.20
$ dig +short vpn-gw.lan
192.168.30.11

Umgqa wokuqala kuphela onquma ukuthi amaphakethe aya kuphi. Umgqa wesibili uphendula umbuzo i-kernel engakaze iwubuze. Irekhodi elinamarekhodi amaningi e-A nalo alibi yinqubomgomo yokushintsha lapho kwehluleka, ngoba ikheli ngalinye kusamele libe ukugxuma okulandelayo okusebenzayo kuleyo ngxenye.

Yini esala kuthebula ngemva kokuba umyalo uphelile

Indlela ye-Linux iqopha izinto ezimbili ezibalulekile lapha: ukugxuma okulandelayo njengekheli lephrothokholi, kanye nesixhumanisi sokuphuma njengenombolo yesikhombisi. izimfanelo zendlela ze-rtnetlink zibiza leyondawo yokuqala ngokuthi RTA_GATEWAY, futhi iqukethe amabhayithi. Uma irekhodi selisendaweni yalo, akukho TTL elixhunywe kulo futhi akukho kusesha kwangemuva okulivuselelayo.

Yingakho ip route add 10.44.0.0/16 via vpn-gw.lan kungabonakala sengathi kuyasebenza. Ithuluzi lixazulula igama ngesikhathi umyalo ugijima, libhala ikheli eliphumayo, bese likhohlwa ngokuphelele igama. Gijima i-ip route show 10.44.0.0/16 ngemva kwalokho futhi uthole ikheli elingokoqobo.

Lokho kuziphatha kufanele kwaziwe ngaphambi kokuba usole umhubhe.

Amathuluzi axazulula igama esikhundleni sakho, nokuthi nini

Amanye amarawuta nezindonga zomlilo ayawamukela ngempela amagama ezinsingathi endaweni yendlela noma yesango. Okubalulekile ukuthi ukuxazulula kwenzeka nini. Uma idivayisi ixazulula igama kuphela ngesikhathi usebenzisa ukucushwa, irekhodi eligciniwe lilingana nekheli elibhaliwe ngokuba qinile, futhi ukushintsha kwekheli kamuva kudinga okunye ukusetshenziswa. Ukuthi inkambu yamukela igama akukutsheli lutho mayelana nokuvuselelwa.

Ukucushwa okuphathwayo kuvame ukwahlukanisa umsebenzi. Ukubhuka kwe-DHCP noma ukuqashwa okuqinile kugcina i-Pi kukheli elilodwa, futhi irekhodi le-DNS lilandela nje ukuqashwa. Akukho okudinga ukulandelela umgomo onyakazayo ngoba umgomo awunyakazi.

Isibuyekezi esiqashwe ngamehlo isiphatheni esinye esisemthethweni, futhi sidinga umnini.

Bophela ikheli noma gijima isibuyekezi ngokwakho

Kwi-LAN encane, ukubhuka kuseva ye-DHCP yisixazululo esingcono kakhulu. Khetha ikheli elingaphandle kwechibi eliguqukayo, libophela ekhelini le-MAC le-Pi, futhi uliqinisekise nge-ip -4 addr show dev eth0 ngemva kokuvuselelwa kokuqashwa okulandelayo. Bese qondisa ukugxuma okulandelayo kwamaklayenti kulelo kheli kanye. Manje unesango elizinzile nerekhodi elilichazayo, futhi lowo umgqa okusebenza ngawo lobu budlelwano ngempela.

Uma i-Pi kufanele ngempela ithuthe, gcina ukulungiswa kwendlela endaweni eyodwa esikhundleni sokuhlela iklayenti ngalinye ngesandla. Iskripthi esifushane esixazululayo, esiqhathanisayo nesishintshayo sanele ukwenza isinyathelo sibe nokwenzeka kabusha:

new=$(dig +short vpn-gw.lan | head -n1)
cur=$(ip route get 10.44.0.1 | awk '{print $3}')
if [ "$new" != "$cur" ]; then
  ip route replace 10.44.0.0/16 via "$new"
fi
ip route get 10.44.0.1

Umyalo wokugcina uyisivivinyo sokwamukela, ngoba uphrinta isango i-kernel ezolisebenzisa ngempela. Uma ikheli eliphrintiwe liselidala, iskripthi sagijima endaweni yegama lenethiwekhi engalungile noma sasingenalo imvume, futhi uhlangothi lwe-DNS alunandaba.

Hlola nendlela yokubuya. I-Pi kufanele yazi ukuthi ingafinyelela kanjani isubneti yamaklayenti, futhi udonga lwayo lomlilo kufanele luvumele uhambo lomhubhe. Indlela ezenzakalelayo eyengezwa ukuze ifihle ukungafani ivamise ukufihla igebe langempela futhi yephule enye into ngemva kweviki.

Izihloko ezihlobene