Umsingathi oyedwa we-Tailscale awufinyeleleki: umshini wokuhamba wesizinda noma inodi yokuphuma?

Umsingathi oyedwa we-Tailscale uyaphendula kuyilapho omunye ehlala ebumnyameni, noma konke kusebenza kuze kube yilapho amawebhusayiti omphakathi eqala ukubika izwe elingalungile. Zombili izikhalazo zifika ngendlela ethi „i-Tailscale yephukile“, futhi zombili ngokuvamile ziwukwakheka okungalungile okuvunyelwe endaweni okungalungile. Hlela kuqala indawo ehlulekile, bese ukhetha indima eyimbozayo.

Qala endaweni ehlulekile

Bhala ikheli noma igama elingasebenzanga, nokuthi iyiphi inhlamvu yento. Idivayisi kwi-LAN yangasese ngemuva kwesinye isiza, isevisi kusigaba sakho, kanye newebhusayiti yomphakathi yizinkinga ezintathu zokuhamba ezenzeka zabelana ngeklayenti elilodwa. Umehluko awukho emhlotsheni, ngoba izakhiwo ezimbili zimboza amasethi ahlukene eendawo. Ukuvula esisodwa akwenzi lutho kwesinye, futhi lowo umthombo wakho konke ukudideka.

Qaphela futhi umndeni wamakheli. Isizinda esikhishwe kuphela ngokuthi IPv4 sishiya izindawo ze-IPv6 endleleni yasendaweni, okuyinto ebonakala njengokwehluleka kwengxenye kuze kube yilapho othile eqhathanisa amathebula womabili okuhamba. Bhala ukuthi ubekulindele ukuthi indlela ibe yini, ukuze ukuhlolwa kamuva kube nokuzophikisa.

Finyelela idivayisi engalokothi igijime i-Tailscale

Umshini wokuhamba umemezela izigaba ezithile ku-tailnet, bese eqhuba amaphakethe phakathi kwe-tailnet nesigaba sangasese, ngakho izinto kuleso sigaba azidingi iklayenti yazo. Ukufinyelela i-NAS ehhovisi usuka kukhompyutha yomuntu ekhaya yikho kanye lokhu. Umshini wokuhamba uyilungu elilodwa kuphela le-tailnet ngalolo hlangothi.

tailscale up --advertise-routes=10.40.0.0/24 --advertise-exit-node=false
ip route get 10.40.0.55
tailscale status

Isimemezelo siyisimo sokuqala kuphela kwezintathu. Indlela kufanele igunyazwe i-tailnet, iklayenti kufanele lamukele izindlela ezimemezelwe, futhi umthetho wokufinyelela kufanele uvumele ukuxhumana. Lolu chungechunge yilona olwenza uphawu luvame ukuba umshini wokuhamba usebenza kuyilapho i-NAS ingasebenzi. Umshini wokuhamba ofinyelelekayo ufakazela ukuthi umhubhe uyasebenza; awufakazeli lutho ngokugunyazwa, ukwamukelwa kweklayenti noma inqubomgomo.

Ukwehluleka ngakunye kwalokho kuthathu kubonakala ngendlela ehlukile kukhonsoli yokuphatha. Hlola ngokulandelana esikhundleni sokushintsha kukho kuthathu ngesikhathi esisodwa, ngoba ushintsho lwesibili lufihla ukuthi yikuphi okwakubalulekile.

Khipha ithrafikhi yomphakathi ngenye imshini

Inodi yokuphuma ihambisa ithrafikhi yakho ejwayelekile ye-inthanethi ngayo uqobo, okuyinto eseduze kakhulu nokuhlelwa komhubhe ogcwele kweminye imikhiqizo ye-VPN. Nayo idinga izimvume ezintathu ezihlukene: idivayisi imemezela indima, umlawuli uyivumela, futhi iklayenti iyikhetha. Ukujoyina i-tailnet akuthumeli lutho ngelinye ilungu ngokuzenzakalela.

tailscale up --advertise-exit-node
tailscale up --exit-node=100.101.102.103 --exit-node-allow-lan-access=false
tailscale status --json | grep -i exitnode

Ukukhetha inodi yokuphuma akuniki ngokuzenzakalela ukufinyelela kwi-LAN yayo uqobo. Inketho yokufinyelela kwi-LAN ikhona ngoba lezi izimvume ezihlukene, futhi ukuyishiya ivaliwe kuyisimo esikhona esiphephile kakhulu. Izindlela eziya kwezinye izinsiza ze-Tailscale zigcina ukusingathwa kwazo ngisho ngesikhathi inodi yokuphuma isebenza. Yingakho isevisi esingathwa kusizinda ingaqhubeka nokusebenza ngesikhathi indlela yomphakathi ye-inthanethi isishintshile.

Inodi yokuphuma iphinde ishintshe indlela i-inthanethi ekubona ngayo, hhayi nje ukuthi kubonakala kushesha kangakanani. Linda ukuthi indawo yezwelamazwe, amakhathalogi okusakaza kanye nemikhawulo yejubane zilande ikheli lokuphuma hhayi elakho.

Funda ukwehlukaniswa kwezinhlangothi ezintathu lapho kuhluleka umsingathi oyedwa kuphela

Iphrinta kusigaba sakho, i-NAS ngemuva komsihini wokuhamba wesizinda esikude, kanye nesiza somphakathi yizindawo ezintathu ezinezindlela ezintathu ezihlukene. Uma kuhluleka eyodwa ngqo yazo, isiphambeko singesendlela yaleyo ndawo hhayi seklayenti lilonke. Kwiphrinta yasendaweni ngesikhathi kusetshenziswa inodi yokuphuma, impendulo ejwayelekile isilungiselelo lokufinyelela kwi-LAN. Kwi-NAS ekude, hlola isigaba esimemezelwe, isimo saso sokugunyazwa nemithetho yokufinyelela ngalolo kulandelana. Kwisiza somphakathi, hlola ukuthi iyiphi inodi yokuphuma ekhethiwe nokuthi iklayenti layamukela ngempela yini.

Uma ikheli lisebenza kodwa igama lingasebenzi, yeka ukubheka izindlela. I-DNS yangasese ilungiselelwa ngokwahlukile, futhi igama elixazulula ekheli elingalungile lihluleka ngendlela ebukeka ifana ncamashi nendlela evinjiwe. Hlola ikheli kuqala, bese igama, futhi imiphumela emibili izokutshela ukuthi iyiphi ingqimba okufanele uyivule.

Qinisekisa indlela ocabanga ukuthi uyakhile

Ukuqinisekisa ukusesha kwendlela kanye nokuhlolwa kwekheli, hhayi i-ping. Ukusesha kutshela ukuthi iyiphi ifeksi indawo engayisebenzisa, futhi ukuhlolwa kwekheli kutshela ukuthi indawo ihlala kusiphi isigaba ngempela. I-ping ephumelelayo ithi umsingathi uyaphila ndawana thize, okungewona umbuzo. Gijimisa kokubili ngaphambi kokushintsha noma yikuphi ukuhlelwa.

ip route get 10.40.0.55
ip -6 route show default
tailscale ping 10.40.0.55

Hlanganisa lokho nombono we-tailnet uqobo, okhombisa ukuthi uzakwabo uxhumene ngqo noma ngomhubhe wokudlulisela. Indlela yokudlulisela isasebenza, futhi lokho kuchaza izikhalazo zokubambezeleka ezingenalo ukuxhumana nendlela obukhokha ngayo iphutha. imibhalo yomsihini wokuhamba wesizinda ihlanganisa isinyathelo sokugunyazwa uma ingajwayelekile. Bese bhala ukuthi yikuphi ukwakheka okumboza yiphi indawo kunethiwekhi yakho, ngoba umuntu olandelayo ozofaka isiza uzobuza umbuzo ofanayo.