Ithuneli lithenga i-topology, hhayi ukubethela noma ukubambezeleka

Umcabango uwukuthi ithuneli iwucingo oluyimfihlo nolusheshayo: uyalakha, futhi ukuhamba ngaphakathi kubethelwe, indlela imfushane futhi isixhumanisi siziphatha njengekhebula phakathi kwezindawo ezimbili. Ingxenye ngayinye yalowo mcabango iyisici esihlukile, futhi ithuneli linikeza kuphela into yokuqala oyicelile kulo, okungukuthi indlela enengqondo. Konke okunye kufanele kukhethwe futhi kuhlelwe ngamabomu. Ukuhlanganisa izici yindlela umklamo ogcina ngayo ngokuxhumana okubethelwe okungekho muntu ongakwazi ukukuxazulula kanye nesethembiso sokubambezeleka okungekho muntu ongakwazi ukusigcina.

Inganekwane: ithuneli elilodwa, iziqinisekiso ezintathu

Ithuneli lenza into eyodwa ngokuthembekile. Lenzo ukuthi iziphetho ezimbili ezingaxhunyiwe ngqo ziziphathe sengathi ziseduze ngenjongo ethile, ngenkathi inethiwekhi ephakathi ithwala amaphakethe angaphandle. Lokho ukushintsha kwe-topology, futhi kuwusizo ngempela ngokwalo.

Ukubethela, ukuthwala iphrothokholi nokuhlukanisa ukudluliswa yizinqumo ezihlukile ezibekwe phezu kwalo. Ithuneli le-GRE alinakho nokukodwa kwalokhu kuthathu ngomqondo we-cryptographic, futhi ithuneli le-IP-in-IP liwumklamo ovumelekile ongenaso nhlobo isifihlo. Akukho kulokhu okuyiphutha; ngamathuneli enza kahle lokho amathuneli akwenzayo. Ilebula kumdwebo ayisho ukuthi yiziphi izici ezikhona.

Uma usuhlukanisa izici, imibuzo iyaphenduleka: ingabe leli thuneli lithwala ukusondelana kokuhlela, ingabe lithwala amafreyimu, ingabe lifihla amakheli angaphakathi, ingabe lithembisa okuthile ngokubambezeleka? Lezo yizimpendulo ezine ezihlukile kanye nemiphumela emine ehlukile yokuhlela.

Ithuneli lengeza ini ngempela emephini

Iziphetho zithola indlela ebezingenayo ngaphambili. Ukuthi leyo ndlela iziphatha njengega elihleliwe noma njengesigaba se-Ethernet kuncike ngokuphelele ekufakeni, futhi umehluko ushintsha ukuthi izindawo ezimbili zingenza ini ngayo. Ithuneli elihleliwe likunikeza igakhi elilandelayo kanye nesiqalo; ukunwetshwa kwe-Ethernet kukunikeza ukuziphatha kokusakaza kanye nendawo yokwehluleka enkulu kakhulu.

Ithuneli le-IP alenzi indawo ekude ibe yingxenye yesubnet efanayo ngokuzenzakalela, futhi alenzi iphrothokholi yokuhlela isebenze phezu kwalo ngaphandle uma ukusetshenziswa kusekela lokho kusondelana. I-Multicast ingomunye umbuzo ohlukile onempendulo yawo.

ip -d link show type gre
ip route get 10.20.0.5
traceroute -n -T -p 443 10.20.0.5
mtr -n --report -c 20 10.20.0.5

Lemiyalo iphendula izingxenye ezihlukile zombuzo. Eyokuqala isho ukuthi hlobo luni lwesixhumanisi esikhona, eyesibili isho ukuthi iyiphi indlela i-kernel engayikhetha, kanti ezimbili zokugcina zibonisa ukuziphatha kwangempela kwengqimba engezansi esikhundleni sesethembiso selebula.

Ukuthwala kuyisinqumo esihlukile ekufinyeleleni

Ithuneli lingathwala iphrothokholi engayidlulisi ingqimba engezansi. I-IPv6 phezu kwendlela ye-IPv4 iyisimo sakudala, futhi kuyasebenza ngoba iziphetho ziqonda imindeni yomibili ngenkathi amaroutha aphakathi kwazo kudingeka nje ukuletha amaphakethe angaphandle. Ingqimba engezansi idinga indlela esebenzayo eya ekupheleni kwethuneli hhayi okunye.

Iziphetho, nokho, zidinga ukusekelwa okugcwele: ukudlulisa, amakheli kanye nohlelo olusebenzisa ngempela umndeni wangaphakathi. Ukunikeza ithuneli isiqalo se-IPv6 akwenzi insizakalo esebenza ne-IPv4 kuphela ifinyeleleke nge-IPv6, futhi akwenzi ingqimba engezansi ibe yi-dual-stack.

Ukuthwala amafreyimu kuyisibopho esikhulu kunokuthwala iphrothokholi. Ukunweba isizinda sokusakaza ngaphesheya kwethuneli kuhambisa ukuziphatha kwesihlahla esinwebekayo, i-ARP kanye nokusabalala kokwehluleka kanye nalo, okuyisinqumo somklamo hhayi iswishi yesici.

Ukuhlukanisa akusona isifihlo

Ama-VPN abahlinzeki agcina amaroutha nokuhamba kwamakhasimende emikhakheni ehlukile yokudlulisa, futhi lokho kwehlukanisa kungokoqobo futhi kunenzuzo. Akusikho ukubethela. Incazelo ye-BGP/MPLS VPN isho ngokucacile ukuthi ubumfihlo bayo buvela kumodeli yokudlulisa hhayi ku-cryptography, futhi yilo mehluko ohlahleka kuslayidi esho kuphela i-VPN.

Uma udinga isifihlo, udinga indlela ye-cryptographic enokuqinisekisa nokulawula ukhiye, futhi udinga ukwazi ukuthi iphelela kuphi. Ithuneli elinikeza ukuhlukanisa kanye nethuneli elinikeza ukubethela kungaba ithuneli elilodwa, kodwa kuphela uma othile ehlele kokubili.

Umphumela ongokoqobo uwukuthi «kuse-VPN» kuphendula umbuzo mayelana nomongo wokuhlela futhi akusho lutho mayelana nokuthi ubani ongafunda amabhayithi asendleleni. Amaqembu amabili angaba namaqiniso womabili futhi asachaza izinto ezihlukile. Uma umbuzo wokuphepha uphakama, buza ukuthi i-cryptography iphelela kuphi nokuthi yini eqinisekisa ontanga, hhayi ukuthi ithuneli likhona yini.

Ukubambezeleka kanye ne-QoS kulandela ingqimba engezansi

Umphetho wengqondo awuyona indlela emfushane yomzimba. Amaphakethe angaphandle asahamba ngezixhumanisi ezifanayo, imigqa kanye nabahlinzeki abafanayo, futhi ukufaka kunezela izindleko zephakethe ngalinye kanye nokucubungula kuziphetho zombili. Ithuneli lingashesha ngoba ingqimba engezansi inhle, hhayi nanini ngoba liyithuneli.

Ukuphathwa kwekhwalithi yensizakalo kubi kakhulu kunalokho, ngoba kuncike emikhakheni yokuphatha ongase ungayilawuli. Izimpawu zangaphakathi kufanele zifakwe kwezangaphandle ngamabomu, futhi wonke umhlinzeki osendleleni kufanele anikeze ukuphathwa okukulindele. Ukubethela akudali ukubaluleka; kufihla inkambu okungenzeka ukuthi ibhokisi eliphakathi lalisebenzisile ukuhlukanisa ukugeleza.

Linganisa ingqimba engezansi ngaphambi kokuthembisa noma yini. Umbiko obonisa ukubambezeleka okuzinzile nokungalahleki endleleni yangaphandle uwubufakazi; umdwebo onethuneli kuwo awusona ubufakazi.

Khetha ithuneli ngobudlelwano benethiwekhi obudingayo, bese ucacisa ngokwehlukana ukubethela, inqubomgomo yokufinyelela, usayizi wephakethe kanye nokusebenza. Izinqumo ezine, ubufakazi obune, futhi akukho lebula elilodwa elimele noma yikuphi kulokho.