Imigqa emibili ephezulu kodwa umhubhe owodwa: ukushintsha, ukulinganisa noma ukuhlanganisa
Ukushintsha lapho kwehluleka, ukulinganisa ngegalelo ngalinye kanye nokuhlanganisa igalelo elilodwa kuyizethembiso ezintathu ezihlukene. Imigwaqo emibili ezenzakalelayo ikunikeza eyokuqala, hhayi eminye emibili.
Imigqa emibili ye-inthanethi ingenza i-VPN itholakale kalula, futhi ingayenza isheshe eminye imithwalo yomsebenzi, kodwa umshini uyona onquma ukuthi iyiphi yalezi zinto ezimbili ezizokwenzeka. Irotha enemigwaqo emibili ezenzakalelayo ayihlanganisiwe, futhi umhubhe othwala izinkulungwane zokuxhumana kwangaphakathi usengukugeleza okukodwa kwangaphandle. Ukuqamba isethembiso kuqala ukwehluka phakathi komklamo nokudumazeka okubizayo. Ithebula elingezansi lihlukanisa izinketho ngokuthi ngayinye idinga ini ekugcineni okukude nokuthi ukulahleka kwesixhumanisi kwenza ini ekudluliselweni.
Izethembiso ezintathu, futhi eyodwa kuphela edinga umlingani
Ukushintsha lapho kwehluleka kugcina indlela itholakala lapho isixhumanisi esithandwayo sinyamalala. Ukulinganisa nge-hash yekugeleza kusabalalisa ukugeleza okuzimele kuyo yomibili imigqa ephezulu. Ukuhlanganisa igalelo elilodwa kuvumela ukudlulisela okukodwa ukusebenzisa yomibili imigqa ngasikhathi sinye. Lezi zinto zihlukile ngezidingo ezihlukene, futhi eyokugcina kuphela edinga ukubambisana kwento engaphandle kwerotha yakho.
| Mechanism | Far-end requirement | Effect on one transfer | What breaks under a link loss |
|---|---|---|---|
| Packet-spraying overlay | A cooperating endpoint that reassembles the stream | Packets can spread across both links | Reordering and buffering on the surviving path; its own recovery logic decides what continues |
| MPTCP subflows | A peer or proxy that accepts subflows | Subflows can share one connection | Surviving subflows continue if the peer keeps them alive |
| Flow-hash balancing | Nothing new; the existing tunnel endpoint is enough | One outer flow still follows one link | Flows hashed onto the dead link move; established sessions break |
| Link failover | Nothing new | One path at a time; the second link sits idle | The session stalls or restarts on the other link |
Akukho lutho kulelo thebula okuyisizathu sokuthenga umugqa wesibili. Okukwenzayo ukuvimbela ukuthi umklamo wokushintsha uhlolwe sengathi uwukuhlanganisa.
Kungani umhubhe ubonakala njengokugeleza okukodwa kwerotha
Irotha elilinganisa umthwalo yenza i-hash yamakheli omthombo nendawo ekuyiwa kuyo kanye namachweba, bese ithumela konke ukugeleza lapho i-hash ikhombisa khona. Umhubhe we-VPN uwukugeleza okunjalo okukodwa ngokombono werotha, noma yini egijima ngaphakathi kuwo. Ukuxhumana kwangaphakathi akufiki nhlobo esinqumweni se-hash, ngoba isihloko sangaphandle sesivele sinqume indlela. Yingakho umugqa wesibili ephezulu ungaphinda kabili isamba somthamo wabasebenzisi abaningi futhi ungashintshi lutho ekudluliselweni okukhulu komsebenzisi oyedwa.
Imihubhe emibili ehlukene ingakunikeza abazokhetha ababili, kodwa isadinga inqubomgomo eyenziwe ngamabomu ehlukanisa ithrafikhi futhi igcina izimpendulo endleleni ethwale isicelo. Ukuhamba ngendlela engalingani umphumela ojwayelekile wokweqa leso sinyathelo. Okuncane kakhulu inqubomgomo eqamba ukugeleza, isixhumanisi esithandwayo nesixhumanisi esiyisipele.
Ukuhlanganisa kwe-Ethernet akweqi abahlinzeki abangahlobene, ngoba ingxenye ekude kufanele ibambe iqhaza kuphrothokholi yokuhlanganisa. Ukuhlanganisa phakathi kwama-ISP amabili kuwuphrojekthi wocwaningo ngaphandle uma kukhona iphuzu lokugcina elibambisanayo.
Okudingwa yi-TCP yemigwaqo eminingi kuzo zombili iziphetho
Imibhalo ye-Linux nge-Multipath TCP ichaza imifudlana eminingi eyesixhumanisi esisodwa. Ukusekelwa kwe-kernel kolunye uhlangothi akushintshi lutho kukodwa, ngoba umlingani kufanele futhi amukele leyo mifudlana. I-proxy ohlangothini olukude ingenye indlela ejwayelekile, futhi iba ingxenye enomthamo nokutholakala kwayo okufanele kuhlelwe. Umgqondo ofanayo ususa impendulo elula ye-WireGuard, okuthi ukuthutha kwayo kube yi-UDP: i-MPTCP ikhulisa imifudlana ye-TCP futhi ayikwazi ukuhlanganisa lowo mhubhe ngaphandle kwento enye kumklamo.
Hlola ukuthi isici se-kernel sivuliwe yini ngaphambi kokuklama ngaso, ngoba izabelo eziningi ziletha sicishiwe. Le miyalo emithathu iphendula lokho ngomzuzu.
sysctl net.mptcp.enabled
ss -M | head
ip mptcp limits showKhetha ngokomthwalo womsebenzi, hhayi ngebrosha
Uma umthwalo womsebenzi uyizikhathi eziningi ezizimele, ukulinganisa nge-hash yekugeleza kungangeza umthamo ngaphandle kokubambisana ekugcineni okukude. Uma kuwukudlulisela okukodwa okukhulu, umklamo wokuhlanganisa kuphela ozosiza, futhi lowo mklamo udinga umlingani obambisanayo. Uma isidingo siwukuthi umsebenzi uqhubeke lapho isixhumanisi sifa, impendulo ukushintsha futhi umthamo wokudlulisela okukodwa awubalulekile.
Bhala isidingo emshweni owodwa onesenzo: ikhophi yokugcina iqeda ngokuphindwe kabili ngokushesha, noma isixhumanisi esiwile asiqedi isikhathi. Izinhloso ezingacacile zikhiqiza imiklamo okungekho muntu ongayamukela noma ayichithe. Bese unquma ukuthi ingxenye ekude ingaba yini, ngoba inketho eshibhile ivamise ukuba yileyo engadingi lutho olusha lapho. Lowo mkhawulo ususa iningi lezitatimende zebrosha ngaphambi komhlangano wokuqala.
Gcina izethembiso ezintathu zihlukene embhalweni wezidingo. Umklamo othi unezinto zontathu uvamise ukuletha okukodwa bese ucabangela ezinye ngokuthula. Ingxenye elandelayo ihlola ukuthi yikuphi okulethwa ngempela.
Hlola ukudlulisela okukodwa nokuningi, bese udonsa isixhumanisi
Qhathanisa ukudlulisela okukodwa okuqhubekayo nokudlulisela okuningana okuhambisanayo okuya endaweni efanayo, futhi urekhode ukulahleka, ukubambezeleka nokusetshenziswa kwesixhumanisi ngasinye. Inzuzo ezikhathini ezihambisanayo kuphela ikhomba ekusabalaliseni kwekugeleza, hhayi ekuhlanganiseni igalelo elilodwa. Hlola ukulahleka komugqa owodwa ephezulu ngokwahlukile, ngoba umthamo ngenkathi yomibili imigqa isebenza awusho lutho ngokushintsha kwesikhathi esivele sikhona. Rekhoda indlela, isokhethi kanye nezibali zokuthumela kabusha ngaphambi nangemva kokuhlolwa ngakunye.
ip route show default
ip route get 10.80.0.5
mtr -n -c 20 -r 10.80.0.5Lapho ukudlulisela okukodwa kusasebenzisa umugqa owodwa ephezulu, umklamo wenza kahle lokho okuyisihluthulelo se-hash yekugeleza. Lapho ukudlulisela okuhambisanayo kusabalala kuyo yomibili, ukulinganisa kuyasebenza kodwa ukuhlanganisa akusebenzi. Rekhoda ukuthi yisiphi kwezitethembiso ezintathu umklamo oyigcinayo ngempela, futhi ingxoxo yomthamo elandelayo izoqala ngobufakazi, hhayi ngesitatimende somhlinzeki.