Umhubhe usakhona, indlela isihambile: ukuhlukanisa izingozi ezimbili ze-VPN

Isiphathi esisodwa asifinyeleleki kuyilapho isixhumi somhubhe sisabika ukuthi sisekile, futhi lokhu kubona okubili akushayisani. Okuthile kususa indlela okwakuhamba ngayo ukuxhumana: umakhelwane uhoxise isiqalo sakhe, indlela emile eyayilandelwa yasuswa, noma enye indlela yathandeka. Inhlangano yezokuphepha ingahlala inempilo ngokuphelele kuzo zontathu izimo. Ukuhlukanisa izehlakalo kusho ukubuza ukuthi yiluphi ungqimba olwashintsha kuqala, hhayi ukuthi i-VPN yehlulekile yini.

Izigaba ezintathu ezibonakala njengesehlakalo esisodwa

Isinqumo somzila unezigaba ezintathu. Isiqalo siyamukelwa, sikhethwe njengesingcono kakhulu, bese sifakwa kuithebula lokudlulisa. Isigaba ngasinye singehluleka ngokwaso, futhi ukwehluleka kubonakala kufana ohlangothini lohlelo. Isiqalo esafundwa kodwa sahlulwa ukukhethwa asikwazi ukuhlukaniswa kwesingakaze sifike lapho ubufakazi obukuphela obubukayo kuyithebula lokudlulisa.

Yingakho umbuzo wokuqala ukuthi yisiphi isigaba esaphuka, hhayi ukuthi iyiphi imithetho enecala. Impendulo inquma ukuthi isehlakalo ngasesiphi futhi iyiphi ithuluzi elizosetshenziswa ukuhlola okulandelayo.

Funda kuqala indlela efakiwe

Buza ikherneli ukuthi ukuxhumana okuya endaweni ehlulekayo kuyaphi ngempela. ip route get iphrinta ukugxuma okulandelayo, isixhumi nokheli lomthombo ikherneli elizolusebenzisa, futhi iphendula ngendawo eyodwa hhayi ithebula lonke. Uma impendulo ibala umhubhe, ithebula lokudlulisa lisakholelwa ukuthi indlela ikhona futhi inkinga ingaphezulu kwayo.

ip route get 10.20.5.10
ip route show 10.20.0.0/16

Impendulo ethi «unreachable» isho ukuthi ayikho indlela efakiwe nhlobo, lokhu kukhomba ekuhoxisweni noma ekufakweni okungekho. Impendulo ebalula isixhumi somzimba isho ukuthi ukuxhumana kuphume emhubheni ngaphandle kokuthi kukhona onqumayo, futhi ukuhlola okulandelayo ukubaluleka okunqobile. Kodwa impendulo ebalula umhubhe ngesikhathi amaphakethe esanyamalala ikhomba phansi kakhulu emzileni, ekuhlungwini noma ohlangothini olukude.

Bese ubheka umbono womthetho uqobo

I-daemon yomzila igcina amathebula angaphezu kwelilodwa, futhi isiqhathaniso esithakazelisayo siphakathi kwawo. Ku-BGP, isimo sesikhathi somakhelwane, isimemezelo esitholiwe kanye nomzila ofakiwe kuyizinto ezintathu ezihlukene zobufakazi. Isiqalo singahlala kuthebula elitholakele futhi singeke sifinyelele ekherneli ngoba indlela enebanga elincane lokuphatha iyanqoba. Hlola zontathu ngaphambi kokuphetha ngokuthi uhlangothi olunye luyekile ukumemezela.

vtysh -c "show bgp summary"
vtysh -c "show bgp ipv4 unicast 10.20.0.0/16"

Isifinyezo sitshela ukuthi isikhathi sisekile yini, umbono ngesiqalo ngasinye utshela ukuthi isiqalo samukelwe yini, futhi ukusesha ekherneli kutshela ukuthi safakwa yini. Ukuzifunda ngaleyo ndlela kuvimbela ukudideka kokuzamazama kwesikhathi nokuhoxiswa, nokuhoxiswa nokwenqatshwa ngenqubomgomo.

Lapho amawashi engavumelani

Beka ilogi yomhubhe, ilogi yomzila kanye nokwehluleka kokuqala kohlelo emgqeni owodwa wesikhathi usebenzisa izifunda zesikhathi zangempela. Uma ukulahleka komakhelwane kuza kuqala, umhubhe wehlisa umzila kanye nawo. Uma ukuhoxiswa kuza kuqala, umzila washintsha futhi umhubhe wasabela ngemuva. Lezi izehlakalo ezihlukene ezinabanikazi abahlukene, futhi ukulandelana kuwukutholakala konke.

Iminithi elilodwa lokuchefuka kwewashi lanele ukuhlinzeka leso siphetho, ngakho qinisekisa isifunda sesikhathi kanye nokugudluka ngaphambi kokwethemba ukulandelana. Amadivayisi agcina ilogi ngesikhathi sendawo ngaphandle kokugudluka ayiwona umthombo ojwayelekile womugqa wesikhathi ozethembayo kodwa ongalungile.

Ukubuyisela ngaphandle komjikelezo

Ngemva kokuhoxiswa izindlela ezimbili zingase zifaneleke: leyo ekhethwa umthetho kanye naleyo oyibophelela ngesandla. Eyokuqala kuphela iyisinqumo inethiwekhi eqhubeka ukusithathela wena, yingakho indlela yesandla iyisixazululo sesikhashana hhayi uhlelo lokubuyisela. Isimemezelo esihlukile futhi asigcini isimo se-firewall noma se-NAT sesikhathi esivele sisunguliwe, ngakho ukuhamba okusha kungase kusebenze kuyilapho okokuqala kuhlala kuphukile. Qinisekisa ukuthi iyiphi indawo yokugcina okufanele ibe isebenzayo nokuthi indawo ekude izokwamukela indlela yokubuya ngayo.

Ungafaki ukushintshwa okumile okungapheli ngaphambi kokuqonda ukuthi kungani ukuhoxiswa kwenzeka. Leyo ndlela emfushane ingabophelela ukuxhumana emzileni ohlulekile noma idlule ngasese inqubomgomo yomzila eyenziwe ngamabomu, futhi ingcwaba imbangela yokuqala ngaphansi kokuhlelwa okusha. Phinda uhlole uhlelo lapho umzila ubuyiselwe, futhi uqinisekise ukuthi isiqalo esikhethiwe sinendlela yedatha esebenzayo hhayi nje umbhalo kuthebula.