I-Ping akuyona ubufakazi: hlola indlela phakathi kwezindawo ezimbili

Umhubhe uyasebenza, amasango ayaphendulisana, kodwa abasebenzisi basendaweni eyodwa abakwazi ukuvula ukwabiwa kwamafayela kwenye indawo. Othile uphinga esuka esangweni, uthola impendulo futhi umemezela ukuthi inethiwekhi iphilile. Leyo mpendulo yahamba phakathi kwamadivayisi amabili ayengakaze abe yinkinga. Ukuhlola okusizayo kuqala kusibungazwa esidinga insizakalo, kusebenzisa iphrothokholi esetshenziswa uhlelo futhi kuphinda kudale isimo lapho lwehluleka khona. Konke okunye ukukhanya okuluhlaza endleleni okungekho muntu kuyo.

Qala kuklayenti edinga insizakalo

Bhala izinto ezine ngaphambi kokuhlola noma yini: ikheli leklayenti, ikheli lendawo okuyiwa kuyo, igama lesibungazwa kanye nechweba lohlelo. Bese uqinisekisa ukuthi insizakalo isebenza endaweni yayo ngokwasendaweni, isuka kwesinye isibungazwa esiseduze. Ngaphandle kwalowo mkhathizwe awukwazi ukwehlukanisa umhubhe ophukile nensizakalo ephukile, futhi uhhafu wamathikithi la uyingxenye yesibili.

Zama igama lesibungazwa elibhalwe phansi futhi, lapho insizakalo ivuma khona, ukuhlola ikheli eliqondile lechweba elifanayo. Ukusesha kwegama okuhlulekile kanye nekheli elixazululiwe elingafinyeleleki kukuholela ezindleni ezihlukene. Uma ushintsha igama lesibungazwa nge-IP, ungacishi ukuhlola kobuqiniso be-HTTPS ukuze kusebenze; isexwayiso sesitifiketi siwulwazi, akuyona isithiyo.

Hamba indlela emaphethelweni onke

Funda umzila okhethwa yiklayenti, bese kuba umzila okhethwa isango laleyo ndawo, bese kuba izibali noma ukuthwebula okulinganiselwe emaphethelweni onke. Ufuna amaqiniso amabili: ingabe isicelo safika ku-LAN ekude, futhi ingabe impendulo yabuya. Izibali ze-interface zifaka yonke eminye imifudlana, ngakho hlanganisa ngesigxivizo sesikhathi esiqondile kanye nombhangqwana wamakheli hhayi ngesimo segrafu. Ukuthwebula emaphethelweni angalungile kubi kakhulu kunokungabi khona, ngoba kubonakala njengobufakazi.

ip route get 10.10.0.5
sudo tcpdump -ni any host 10.10.0.5 and port 445
sudo tcpdump -ni any net 10.10.0.0/24 and net 10.20.0.0/24

Uma isicelo sibonakala emaphethelweni akude ngaphandle kwempendulo ngemuva kwaso, inkinga isekwelinye uhlangothi: i-firewall, umzila wokubuyela ongekho noma isibungazwa esingasamukeli umthombo. Uma isicelo singakaze sibonakale, umzila wasendaweni noma izikhethi zomhubhe azizange zisithwale, futhi elinye uhlangothi alikafanele kuphenywa.

Sebenzisa iphrothokholi esetshenziswa uhlelo

I-ICMP iwukuhlola okubuthakathaka. Kungase kuhlungwe, kukhawulwe ngesivinini noma kuphathwe ngomgomo ohlukile kowensizakalo, okwenza kokubili ukuphumelela nokuhluleka kwayo kungacaci. Hlola ichweba langempela futhi, lapho unakho, ukuxhawulana kwephrothokholi kwangempela.

nc -vz 10.10.0.5 445
curl -sv --max-time 5 https://files.corp.internal/ -o /dev/null
openssl s_client -connect 10.10.0.5:443 -servername files.corp.internal

Ukuxhawulana kwe-TCP okuqediwe kufakazela ukufinyeleleka kanye nomgomo walelo chweba. Akufakazeli ukuthi uhlelo luyasebenza: ukuqinisekisa, ukulayisha noma ukushaya kwe-API ethile kusengahluleka. Hlola umsebenzi owenziva ngabasebenzisi ngempela, usebenzisa okulingana okungenabungozi esikhundleni sokuthumela kaningi umsebenzi wangempela.

Phinda udale isimo lapho lwehluleka khona

Ukuhluleka okuvela kuphela ekudluliseleni okukhulu kuyinkinga yosayizi, hhayi yokuxhumana. Thumela iphakethe elikhulu elinebhithi le-don't-fragment elisethiwe bese ubona lapho lima khona. Uma isicelo esincane siphumelela futhi esikhulu silenga, i-MTU yomhubhe kanye nokuphathwa kwe-MSS emasangweni yizona zinsolo ezilandelayo.

ping -M do -s 1400 10.10.0.5
ping -M do -s 1472 10.10.0.5
curl -sS --max-time 30 -F file=@./sample.bin https://files.corp.internal/upload

Uma kuhluleka kuphela isubneti eyodwa, bheka izikhethi zethrafikhi, izimemezelo zemizila kanye nesango lokubuyela laleyo subneti. Uma kuhluleka kuphela igama lesibungazwa, landela i-DNS, kufaka phakathi ukuthi iyiphi i-resolver esetshenziswe yiklayenti nokuthi umbono okude uyabonakala yini kusukela kuleyo ndawo. Ukuhluleka okuthathu okuhlukene, izixazululo ezithathu ezihlukene, futhi ukuhlola kwe-ping akukwehlukanisi neyodwa yazo.

Ngemva kokulungisa, phinda ukuhlola okufanayo

Gijimisa futhi iklayenti elifanayo, indawo, ichweba kanye nomthwalo ofanayo. Bese uxhuma futhi noma uzame indlela yokushintsha uma umklamo unayo, ngoba ukulungisa okusebenza kuphela ngesikhathi isibonelo songqinamba womhubhe sisaphila akukahlolwa. Gcina ukuhlola kuboshelwe emthonjeni wangempela, endaweni yangempela kanye nomsebenzi wangempela esikhundleni sesikhombisi esisodwa esiluhlaza kudashibhodi.

Qopha amanani amane ayisisekelo kanye nomphumela. Umbiko olandelayo wophawu olufanayo uzobe usuqala ngobufakazi esikhundleni se-ping.