Indlela inqatshiwe ngenxa yamabhithi okusingathi? Thola isiqalo obusifuna

Umugqa wakho wendlela ubuya unqatshiwe, futhi iseluleko ositholayo sithi vula ukudluliswa kwe-IP. Lezi zinto ezimbili zisezigabeni ezahlukene zenkinga. Ukudlulisa kunquma ukuthi ingabe umsingathi angahambisa amaphakethe phakathi kwezixhumi; akunambono wokuthi ingabe indawo oyibhalile iyinetiwekhi evumelekile. Lungisa isiqalo kuqala, ngoba ukudlulisa ngeke kusindise ikheli nemaski ezingavumelani.

Ukuthi umhlaziyi ukhalani ngempela

Indawo ebhalwe njengekheli kanye nemaski kufanele ichaze inetiwekhi, futhi inetiwekhi iqala ngamabhithi okusingathi angu-zero. Uma ikheli olunikezayo lisagcina inani engxenyeni yokusingathi, lezi zinto ezimbili azivumelani ngaphakathi: i-172.20.130.0 ibukeka ihle ngoba iphetha ngo-zero, kepha u-zero ku-oktethi yesine akusiyo ukuphela kwento ebalulekile. Lapha amabhithi alahlekile agoqwa yi-oktethi yesithathu.

Amathuluzi abhekana nalokho kungavumelani ngezindlela ezahlukene. Abahlaziyi abaqinile bayawenqaba umugqa futhi basho amabhithi okusingathi. Abahlaziyi abathambileyo bafihla ikheli ngemaski futhi bafaka into ongayicelanga, okuyinto embi kakhulu, ngoba ukucushwa manje sekuhambisa ibanga ongakaze ulifune. Imojuli ye-ipaddress ye-Python iveza ukukhetha ngqo: ukuhlaziya okunamandla kwenetiwekhi kuphakamisa iphutha, kuthi i-strict=False ifihle amabhithi okusingathi. Iklayenti lakho lingaba ngelamandla, elithambile noma elingavumelani phakathi kwezinguqulo, ngakho funda umyalezo esikhundleni sokuthemba umkhuba.

Yenza isibonelo ngesandla

Thatha umhubhe odinga ukufinyelela ku-172.20.130.0 ngemaski engu-/20. I-/20 iboleka amabhithi amane ku-oktethi yesithathu, ngakho leyo oktethi ibalwa kuphela ngezinyathelo zika-16: 0, 16, 32 futhi kuqhubeke kuze kufike ku-240. Inani elingu-130 liwela phakathi kuka-128 no-143, okusho ukuthi inetiwekhi ezungezile iqala ku-172.20.128.0, hhayi ku-172.20.130.0 ngokwenza i-oktethi yokugcina ibe zero.

Uma kubhaliwe, ibhlokhi ihamba kusukela ku-172.20.128.0 kuze kufike ku-172.20.143.255 futhi igcina amakheli angu-4,096. Ukunikeza amanani afanayo kumhlaziyi ongenamandla kubonisa ukushintshwa obekuzokwenziwa esikhundleni sakho:

$ python3 -c "import ipaddress; n=ipaddress.ip_network('172.20.130.0/20', strict=False); print(n, n.num_addresses)"
172.20.128.0/20 4096

Nquma ukuthi iyiphi indawo obuyifuna ngempela

Umugqa onqatshiwe uvame ukufihla enye yezinhloso ezintathu, futhi nguwe kuphela ongakhetha. Uma umhubhe udinga ibhlokhi yonke, bhala i-172.20.128.0/20, ikheli lenetiwekhi elijwayelekile. Uma umhubhe udinga ingxenye engu-130 kuphela, imaski ibingalungile futhi i-172.20.130.0/24 iyimo eqotho. Uma okuhlosiwe kuwumshini oyedwa, umzila wokusingathi we-IPv4 uyi-/32 futhi akukho zibalo zemaski ezihilelekile.

Ngakunye kwazo kuvumela inani elihlukile lethrafikhi, futhi yisona sizathu sangempela sokungayandisi imaski kuze kume isikhalo. I-/16 yamukela umugqa cishe yonke indawo futhi ithumela ithrafikhi eziyeni ongakaze uzifune ukuzihambisa ngomhubhe. Bhala isiqalo esincane kunazo zonke esivumelana nenhloso, bese usiqinisekisa ngokumelene nekhabe elilandelayo olindele lona, hhayi ngokumelene nokuthula komhlaziyi.

Kungani ukudlulisa kwakungasilo isixazululo

Umzila onqatshiwe awufinyeleli ndawo emzileni wokudlulisa, ngakho ukushintsha i-net.ipv4.ip_forward akukwazi ukushintsha umphumela. Leso silungiselelo sibalulekile kamuva, lapho umsingathi kufanele adlulise amaphakethe phakathi kwezixhumi, futhi ukusivula ngaphambi kokuba ithebula lilungele kushintsha kuphela ukuthi isiphi isigaba esizohluleka ngokulandelayo.

Ezinye izinto ezimbili zivame ukusolwa endaweni eyodwa. Umzila ungamukelwa futhi uhlulwe umzila othile kakhulu, futhi umthetho we-firewall ungahlikihla ithrafikhi ngemuva kokusesha okulungile. Hlukanisa izigaba: isintaksi, ukufakwa, ukukhetha, ukuhlunga. Ukusebenza esigabeni esingalungile kubonakala kukhiqiza ngoba zonke izinguquko ziqala kabusha okuthile.

Hlola umzila ofakiwe kanye nendlela ewunqobayo

Uma iklayenti selamukele umugqa, bheka ukuthi yini eyifakile nokuthi iyiphi indlela i-kernel eyikhethayo ekhelini elimele ngaphakathi kwebhlokhi. Uma isiqalo esifakiwe sihlukile kunaleso osibhalile, isilungisi sisebenze esikhundleni sakho.

Buza ikheli lelungu kanye nelilodwa elingaphandle kwebhlokhi, ukuze ukuqhathanisa kube nokwenzeka esikhundleni somugqa owodwa wokududuza:

ip -4 route show 172.20.128.0/20
ip -4 route get 172.20.140.10
ip -4 route get 172.20.200.10

Umbuzo wesithathu kufanele uwele ngaphandle komhubhe uma isiqalo sakho silungile, futhi uma ungaweli, umzila obuwakhile ubanzi kunalokho okucabangayo. Bhala phansi ukuthi isiqalo bekufanele sihlanganise ini ngaphambi kokuthinta isilungiselelo esilandelayo, ngoba umzila ohlaziywayo nendlela esebenzayo kuhlala kuyizinto ezihlukene eziqashelwayo.