I-router njengomsebenzisi we-SMB noma njengedlulisela amaphakethe: yikuphi okufanele

Ukudlulisa ithrafikhi ye-SMB akusiwona umsebenzi ofanayo nokuyiqeda, futhi i-router eyenza okukodwa ingase ingakwazi ukuphatha okunye. Ukudlulisa kusho ukuthi i-router ihambisa amaphakethe engakaze ihlaziye okuqukethwe kwawo. Ukukhweza kusho ukuthi i-router iba umsebenzisi wamafayela, inesofthiwe engase ingabi nayo, imininingwane yokuqinisekisa okufanele iyivikele kanye nezindlela zokwehluleka ezimanje ezingeyakho. Ukukhetha phakathi kwalezi zimbili kuwumbuzo wokuthi amafayela adingeka kuphi, hhayi wokuthi yini engase yenzeke ukuthi ipulatifomu yokuhambisa iyifake.

Ukudlulisa nokuqeda kuyimisebenzi ehlukene

Endimeni yokudlulisa i-router inomthwalo owodwa: ukuletha amaphakethe phakathi komsebenzisi nesiphakeli ngenkathi isebenzisa inqubomgomo edingwa indlela. Ayiqinisekisi ekwabelaneni, ayigcini idatha yamafayela kusikhashana futhi ayinendaba nokuthi isiphakeli sikhuluma i-SMB2 noma i-SMB3, ngoba ayikaze ifunde ijule kangako ekuhambeni. Uma ukwabelana kungafinyeleleki, umsebenzisi ubona iphutha futhi i-router iqhubeka nokuhambisa.

Endimeni yomsebenzisi i-router ijoyina ingxoxo yeprotocol. Ixoxisana ngolimi lwesigodi, iyaqinisekisa, ixazulula amagama, igcina iphoyinti lokukhweza futhi yethula umbono wendawo wohlelo lwamafayela kukho konke okusebenza ngaphezulu kwayo. Lena yisevisi yangempela enomjikelezo wokuphila, futhi yenza isango libe ukuncika komgudu womsebenzi wamafayela. Iphinda izuze njengefa zonke izindlela zokwehluleka zalokho kuncika, kufaka phakathi ukulinda ngesikhathi sokuqalisa nokubhaliwe okuyisikhathi esidlule.

Ukuqhathanisa akumayelana namandla kuphela. Ipulatifomu engakwazi ukukhweza ukwabelana ayiyona ipulatifomu okufanele ikwenze, futhi ipulatifomu engakwazi ukukhweza ngisho eyodwa ingase isibe yindawo efanele yokuhambisa ithrafikhi.

Ukukhweza kwe-CIFS ku-kernel kudinga ini ngempela

Kudivayisi esekelwe ku-Linux, umsebenzisi we-CIFS ku-kernel nomsebenzisi wendawo yomsebenzisi kungamakhono ahlukene, futhi izithombe ezincane ngokuvamile azinakho kokubili. Ukusekelwa kwe-kernel kufanele kube sesithombeni esisebenzayo, umsizi wokukhweza kufanele abe khona, futhi ulimi lwesigodi lwe-SMB oluxoxiswene nesiphakeli kufanele lube yilo olwamukelwa yizinhlangothi zombili. Lokho kuchazwa yincwadi yomsebenzisi we-CIFS ye-Linux, okungukuhlelwa kwe-kernel nezinketho zayo zokukhweza, futhi lesi yisithenjwa esifanele ngaphambi kokucabanga ukuthi ukwakhiwa komkhiqizi kukufaka.

Hlola ikhono ngaphambi kokuklama ngakho, futhi hlola inguqulo hhayi ukuba khona kwegama lomyalo. Igama lemoduli kuhlu lwamaphakheji alifani nomsebenzisi osebenzayo.

lsmod | grep -w cifs
modinfo cifs | head -5
mount.cifs --version
smbclient -L //fs02.corp.internal -U svc-router -m SMB3

Imoduli ye-kernel elayishwayo nethuluzi lendawo yomsebenzisi elibika inguqulo akukaqinisekisi ukuthi ukukhweza kuzodlula ekushintshweni kokhiye be-VPN, ngakho thatha ukuhlola njengesimo sokuqala, hhayi njengobufakazi. Uma isithombe sinikeza ukusekelwa kwe-SMB1 kuphela, leso yisizathu sokuma, hhayi isizathu sokukuvula kusiphakeli.

Imininingwane yokuqinisekisa nobunikazi bomthombo kwehlukile kweyekhompyutha ephathwayo

Isicelo esidlulisiwe sithwala ubunikazi bekhompyutha ephathwayo ngomhubhe, kanti isicelo esenziwe ku-router sithwala ikheli lomthombo walo, indlela yesixazululi nokuhlunga kokuphumayo. Lezi zingawela komunye umthetho wodonga lomlilo, omunye umbono we-DNS nakolunye uhlu lwezimvume ohlangothini lwesiphakeli. Ngakho ikhophi esebenza kusukela esiteshini somsebenzi ayifakazi lutho mayelana nokukhweza kwe-router uqobo. Hlola ukukhweza kusukela kugobolondo le-router uqobo, hhayi esiteshini somsebenzi esingemuva kwayo.

Nika i-router ubunikazi besevisi obunegunya elincane uma indima ivunywa nhlobo. Ungalokothi ubeke iphasiwedi ngqo emugqeni womyalo wokukhweza, ngoba ihlala emlandweni wegobolondo futhi ivela kuthebula lezinqubo ngenkathi ukukhweza kusebenza.

Gcina imininingwane yokuqinisekisa ngendlela evikelwe yepulatifomu futhi uyifunde efayeleni elinezimvume eziqinile. Lelo fayela kufanele lingafundeki kunoma iyiphi i-akhawunti ngaphandle kwaleyo esebenzisa ukukhweza.

install -m 600 /dev/null /etc/cifs-reports.creds
printf 'username=svc-router\npassword=REPLACE_ME\ndomain=CORP\n' > /etc/cifs-reports.creds
mount -t cifs //fs02.corp.internal/reports /mnt/reports -o credentials=/etc/cifs-reports.creds,vers=3.1.1,ro

Ukwehluleka kungokabani uma ukwabelana kunyamalala

Uhlelo lwamafayela olukude olungekho lwenza ngendlela ehlukile kunendlela engekho. Ukukhweza kungavimba izinqubo ezikuthintayo, kungahluleka ngesikhathi sokuqalisa ngaphambi kokuba umhubhe ube khona, futhi ukubhala obekuhloselwe isiphakeli kungawela endaweni engafanele uma kunomkhombandlela wasendaweni ngaphansi kwephoyinti lokukhweza. Lokhu kuyizingozi zesitoreji ezimanje ezingezethimba lenethiwekhi, noma ngabe ibifuna zona noma cha. Akekho ovumile kuleso siqu, kodwa siza nokukhweza.

Klama ukulandelana kokuqalisa nezinketho zokukhweza ngakuleso sikhathi. Ukukhweza kokufunda kuphela okunesikhathi esifushane nesinyathelo sokubuyisela esibhaliwe kulula ukuvikela kunokukhweza kokubhala okuyikho konke okunye okuncike kukho. Qinisekisa ukuthi umhubhe unyuka ngaphambi kokuba noma yini izame ukukhweza, kungenjalo ukuqalisa kokuqala ngemva kokuphela kukagesi kuzomisa.

Ekucubunguleni amafayela amakhulu, noma kunoma yini ethumela idatha phambili, isingathi esihlukile ngokuvamile sinikeza umngcele wobunikazi ocace kakhudlwana. I-router iqhubeka nokuhambisa, futhi umgudu womsebenzi wamafayela uthola umshini ongaqalwa kabusha ngaphandle kokuhamba nenethiwekhi.

Hlola isinqumo ngokumelene nomsebenzi wangempela

Bhala ukuthi yimuphi umsebenzi odinga amafayela nokuthi lowo msebenzi usebenza kuphi. Uma impendulo iyisiteshi somsebenzi, hambisa ukwabelana bese uma lapho. Uma impendulo iyisevisi kudivayisi, qinisekisa ikhono lomsebenzisi, ulimi lwesigodi olusekelwayo nendlela yemininingwane yokuqinisekisa ngaphambi kokukhweza kokuqala, bese unquma ukuthi idivayisi ingumphathi ofanele ngempela.

Qinisekisa umbono okhunjiwe nendawo engenalutho kusukela ku-router uqobo, ngoba yilapho umthwalo womsebenzi uzobona khona. Phinda ukuhlola ngemva kokuxhuma kabusha, hhayi kuphela ngemva kokuqalisa okumsulwa.

findmnt -t cifs -o TARGET,SOURCE,OPTIONS
df -h /mnt/reports
ls -l /mnt/reports | head

Ukukhweza okubala amafayela kodwa okubika uhlelo lwamafayela olugcwele noma lokufunda kuphela sekukutshele ukuthi uzohlangabezana nakuphi ukwehluleka ngo-2 ekuseni. Qinisekisa nendlela yokubuyisela: khulula kahle, yehlisa umhubhe, uwunyuse futhi ukhweze futhi ngaphandle kokuqalisa kabusha idivayisi. Uma lokho kulandelana kudinga icala lokusekelwa njalo, i-router iyindawo engafanele yendima yomsebenzisi.