Ukuhlukanisa i-/64 yakho akuhambisi IPv6 kumakhasimende e-VPN

Ikhasi likhombisa ikheli le-IPv6 lomhlaba jikelele, ukuxhawula kusuqediwe, futhi akukho okubuyayo okuvela ku-inthanethi. Isethingi yephuli ibonakala ilungile ngoba ilungile; ikheli livumelekile futhi umhubhe uyalithwala. Okwehlulwayo ukulethwa, futhi ukulethwa kuncike esinqumweni esithathwe ngenhla kweseva ye-VPN okungekho ukucushwa kohlangothi lwekhasi okungaba nomthelela kuso.

Inganekwane: ingxenye ye-/64 yakho isivele ifinyeleleka

Indaba iyakhanga: iseva ine-/64 yomphakathi, ihlukanise phakathi, unikeze enye ingxenye iphuli le-VPN, futhi lawo makhasimende ase ku-inthanethi manje. Ukuhlukanisa isiqalo kwabela amakheli ngaphandle kokungqubuzana. Kodwa akushintshi indlela inethiwekhi ye-upstream enquma ngayo ukuthi iphakethe eliya kwelinye lalawa makheli kufanele liye kuphi.

I-IPv6 ayinaso isendlalelo sokuhumusha esizimisiwe esingasetshenziswa, ngakho indlela yokubuyela emuva kufanele ibe khona njengokuhambisa noma njengokulethwa ezingeni lokuxhuma. Iphakethe elibhekiswe ekhelini lomhubhe wekhasi lifika kurotha ye-upstream, futhi leyorotha yenza isinqumo sokudlulisela kusukela kuthebula layo. Uma ithebula likhombisa ukuxhuma okubonakalayo, iphakethe liya lapho, kungakhathaliseki ukuthi iseva yakho ye-VPN icabangani.

Yikho konke ukwehluleka: indlela eya phambili iyasebenza ngoba iseva yakho iyithumela, futhi indlela yokubuyela emuva ifa ngokugxuma okukodwa ngoba i-upstream ayizange yazi ukuthi ikhasi likhona.

Ukulethwa kuxhumano kudinga ini ngempela

Lapho i-upstream ibheka yonke i-/64 njengekuxhumano olubonakalayo, ixazulula ikheli ngalinye lendawo ngokutholwa komakhelwane. Ithumela isicelo kulolo xhumano futhi ilindele ukuthi umnikazi wekheli aphendule. Ikhasi le-VPN elingemuva komhubhe alikho kulolo xhumano futhi alikwazi ukuphendula, ngakho isicelo sihlala singaphendulwanga futhi iphakethe liyaphonswa.

Ukusika i-/65 akuyishintshi leyo mibono. I-upstream isabheka ububanzi njengobukuxhumano, ngoba okuwukuphela kwento engashintsha umqondo wayo wukuhamba noma iphrokhisi ephendula egameni lekhasi. Akukho kukho kokubili okuvelayo ngoba ushintshe ukucushwa kwe-VPN. Leso sikhala yisona esichaza ukuthi kungani iphuli lingasebenza ngokuphelele phakathi kwamakhasimende alo kodwa lingafinyeleleki noma kuphi kwenye indawo.

Ukutholwa komakhelwane ngephrokhisi yindlela engaxhumanisa imihlaba emibili. Isango liphendula izicelo zamakheli akhethekile amakhasimende elinawo futhi lidlulisela ithrafikhi emhubheni. Kuyasebenza, futhi kufanele kukhawulwe ngqo kulawo makheli ngomjikelezo wokuphila olandela iphuli, ngoba ukuphendula ikheli ongasalisebenzelisi kuguqula ithrafikhi yomunye umuntu ibe umgodi omnyama. Amanye ama-upstream ngeke amukele izimpendulo zephrokhisi abengazilindelanga, ngakho lo mklamo udinga nokuvuma komhlinzeki.

Ukulethwa okuhambisiwe kudinga ini

Umklamo ohlanze kakhulu ukwabiwa i-upstream ewuhambisa ngempela esangweni lakho. Kungaba isiqalo esidluliselwe noma umzila oqinile webhuloki elincane, futhi imfuneko iyafana kuzo zombili izimo: ithebula le-upstream kufanele likhombe eseva yakho kububanzi bamakhasimende. Khona-ke ithrafikhi yokubuyela emuva ifika esangweni futhi isango liyidlulisela emhubheni.

Ukulethwa okuhambisiwe kususa ngokuphelele umbuzo wokutholwa komakhelwane, yingakho kufanele kucelwe kumhlinzeki ngaphambi kokwakha noma yini ehlakaniphile. Cela umzila ngokubhaliwe, futhi uqinisekise ukuthi ukugxuma okulandelayo yikheli i-upstream engakufinyelela ngempela.

Yomibili imiklamo isidinga ukudluliselwa kwe-IPv6 okuvuliwe esangweni kanye nemithetho yodonga lomlilo evumela ukuhamba okudluliselwe kuzo zombili izinhlangothi. Ukulethwa kuyisibopho, hhayi esinye isikhundla, sendlela esele. Umzila osebenzayo onokudlulisela kuvaliwe ukhiqiza ukuthula okufanayo ncamashi nomzila ongekho, ngakho hlola kokubili ngaphambi kokuklama kabusha noma yini.

Imizila emibili ezimele okufanele ilungiswe

Isiqalo sephuli nomzila ozimisiwe wekhasi ngokwalo kuyizilungiselelo ezihlukene, futhi ukuzihlanganisa kukhiqiza ukuxhumana kwengxenye okubonakala njengomhubhe ophukile. Iphuli litshela iseva ukuthi yimaphi amakheli okufanele awabiwe. Imizila yekhasi inquma ukuthi ikhasi lithumela ithrafikhi kuyiphi indawo emhubheni.

server-ipv6 2001:db8:42:100::/64
push "redirect-gateway ipv6 !ipv4"

Isiqalo esingenhla siyindawo yemibhalo, futhi ukuqondisa kabusha kusebenza ku-IPv6 kuphela, okuyikho ngqo okufunwa ukusetshenziswa kwezingqimba ezimbili ngesikhathi ukulethwa kwe-IPv6 kusalungiswa. Ukuqondisa kabusha kwe-IPv4 akusimisi ukumboza kwe-IPv6, futhi asikho isilungiselelo esisho esinye.

Gcina ithrafikhi yokulawula i-IPv6 encike kuyo isebenza ngaphansi kwanoma iyiphi inqubomgomo oyisebenzisayo. Imiyalezo ye-Packet Too Big iyisisulu esivamile sodonga lomlilo oluvumela i-TCP ne-UDP kuphela, futhi ukuyiphonsa kukhiqiza ukuxhumana okusungulwayo bese kuma ekudlulisweni okukhulu.

Izimemezelo zerotha ziyingxenye yesithathu ehambayo. Uma isango liqala ukumemezela kuxhumano olungenhla, kungashintsha lokho amakhasimende nomakhelwane abakukholelwayo ngeziqalo ezisokuxhumano, okungase kuchithe buthule umklamo osanda kuwubhala.

Rekhoda umklamo ukuze ukwakhiwa kabusha uwuphindisele

Bhala izinto ezintathu ngokwehlukana: ukwabiwa kwekhasi, umzila wendawo yekhasi, kanye nendlela yokulethwa kwe-upstream yokwabiwa. Umfundi onakho kokuthathu angakha kabusha ukusetshenziswa; umfundi onesilungiselelo sephuli kuphela uzophinda iphutha lasekuqaleni.

Bese uhlola ngokusobala indlela yokubuyela emuva, ngephakethe okufanele libuye livela ngaphandle. Incwadi ye-openvpn(8) ihlanganisa izinketho ze-server-ipv6 ne-redirect, futhi isiqinisekiso sokuhambisa esivela kumhlinzeki wakho sihlanganisa ingxenye incwadi engakwazi ukuyihlanganisa.