I-VM yakwa-Vagrant iyanyamalala lapho i-VPN ixhuma: ubani umzila owaphukile

Umshini waphendula umzuzu odlule, i-VPN yaxhuma, futhi manje ikheli elifanayo liphelelwa isikhathi. Amaphutha amathathu akhiqiza leso sibonakaliso, futhi ahlala emishinini ehlukene. Umphathi ungalahlekelwa umzila oya kunethiwekhi yangasese, ibanga le-NAT lesivakashi lingashayisana nebanga umhubhe owumemezelayo manje, noma umhubhe ogcwele ungathatha ubunikazi bawo wonke umzila kumphathi. Thola ukuthi yikuphi okwenzekile ngaphambi kokushintsha noma yikuphi ukulungiselelwa, ngoba ukulungiswa ngakunye kuhlala kwenye indawo.

Bheka umzila, hhayi umshini

Bheka isinqumo somphathi sokuhamba kwendlela yekheli lesivakashi ngenkathi umhubhe uphakeme. Umzila osakhomba ku-adaptha yomphathi kuphela awuyona inkinga. Umzila osukhombha ku-adaptha ye-VPN yiwo inkinga, futhi uyishintshile iklayenti, hhayi wena. Ukuthi i-adaptha igcina ikheli layo kusho ukuthi isixhumi saphila, okuyiqiniso elihlukile ekuphepheni komzila.

Isikhathi se-SSH esiwa ngesikhathi sokuxhumana kulindelekile. Iklayenti liphinda lisebenzise ama-adaptha futhi lifake imizila, ngakho uxhumano luyafa imizuzwana embalwa. Iphutha uxhumano olungabuyi neze, hhayi olwacwayiza kanye.

Thwebula ithebula ngaphambi komhubhe futhi futhi ngemuva kwawo, bese uqhathanisa leyo miphumela emibili. Umehluko uwukuxilonga, futhi futhi uwubufakazi umnikazi wenethiwekhi azobucela.

ip -4 route get 192.168.56.10
ip -brief addr show
ip route show table main | head -20

Funda ithebula lomphathi ngaphambi nangemuva

Ku-Linux ukubaluleka phakathi kwemizila egqagqene kuvela kubude be-prefix kanye ne-metric, ngakho umzila we-VPN ocacile uyanqoba ngisho uma ungalungile. Ku-Windows i-metric yesixhumi inquma ukulingana, futhi i-adaptha yomhubhe ivamise ukuza ne-metric ephansi kune-virtual. Kuzo zombili izimo isibonakaliso esibonakalayo siyafana: amaphakethe aphuma nge-adaptha yomhubhe futhi anyamalale.

Printa ama-adaptha kanye ne-metric yawo eceleni komzila we-prefix yesivakashi. Leyo mbhangqwana yemiphumela iphendula umbuzo wobunikazi ngokubheka okukodwa.

Get-NetAdapter | Select-Object Name, InterfaceIndex, InterfaceMetric
Get-NetRoute -DestinationPrefix 192.168.56.0/24
route print -4 | Select-String '192.168.56'

Uma umzila washintsha kodwa i-metric ye-adaptha ayishintshanga, iklayenti lifake umzila oqhudelanayo. Uma i-metric yashintsha, iklayenti lahlela ama-adaptha kabusha. Kokubili kuyalungiseka, futhi kulungiswa ezindaweni ezihlukene.

Lapho ibanga le-NAT lesivakashi liwukushayisana

I-VirtualBox NAT isebenzisa i-10.0.2.0/24 ngokuzenzakalela, futhi umhubhe ophusha ibanga elifanayo wenza isivakashi sithumele leyo traffic egcekeni layo le-NAT esikhundleni sendawo yangempela. Iphakethe aliphumi kumphathi, ngakho akukho log ye-firewall ngakolunye uhlangothi ezoyikhombisa. I-Docker Machine inalolu hlobo lokungqubuzana kuhlelo layo lomphathi kuphela, futhi ukushintsha lolo hlelo kungadinga ukuthi umshini wakhiwe kabusha kanye nezitifiketi zawo.

Khetha okungena esikhundleni ngokubhala lokho umhubhe osuvele ukumemezela, bese kuba yilokho inethiwekhi yehhovisi elikusebenzisayo, bese kuba yilokho i-adaptha ngayinye ebonakalayo kulo mphathi ekuclaimile. Ukugqagqana yikho okwephula ukuhamba kwendlela, futhi ukufana akunandaba. Ibanga elilodwa lingahlala ngokuphelele ngaphakathi kwelinye kuyilapho lingafani neze ngokubheka kokuqala.

Setha ibanga elisha lapho umshini udalwa, noma ulishintshe bese ulayisha kabusha, bese uhlola futhi uxhumano olwehlulekile kusukela esivakashini. Ithebula lesivakashi ngokwalo yiwona mbono obalulekile.

VBoxManage modifyvm devbox --natnet1 10.77.0.0/24
vagrant reload devbox --provision
vagrant ssh devbox -c 'ip route get 10.20.0.15'

Buyisela umzila ngaphandle kokulwa neklayenti

Yonke ipulatifomu inikeza indlela yokubuyisela i-prefix yomphathi kuphela phambili. Ku-macOS umzila oqinile oya kusixhumi somphathi kuphela usebenza kuze kube ukuxhumana okulandelayo. Ku-Windows i-metric ephansi yesixhumi ku-adaptha ebonakalayo iyigcina ikhethwa. Ku-Linux umsebenzi wokushintsha uhlanganisa i-prefix eyodwa. Zontathu ziyizixazululo zesikhashana, ngoba iklayenti eliphinde lifune imizila yalo lizozichitha.

Bhala ukuhlola njenge-script esikhundleni sokuxhuma kabusha ngokungaboni ngesikhathi sokuqalisa. I-script encane eprinta umzila we-prefix yesivakashi ngemuva kokuxhumana ngakunye yenza imfihlakalo ibe umugqa kulo log.

Uma iphrofayela iwumhubhe ogcwele, cela umnikazi wenethiwekhi umhubhe ohlukanisiwe noma okuhlukile okubhaliwe. Ukwengeza ngokuthula imizila edlula inqubomgomo yezokuphepha akulona ikhambi, kuyinkinga yesibili efika kamuva ikanye nomhloli.

Hlola ukulungiswa ezinhlangothini zombili

Qinisekisa imizila emithathu ngemuva koshintsho: umphathi uya esivakashini, isivakashi siya kumphathi webhizinisi, nesivakashi siya ku-inthanethi. Ukulungiswa okubuyisela okukodwa futhi kwephule okunye ukushintshwa kokulungiselelwa okugqoke njengokulungisa. Thwebula imiphumela efanayo neyona oyiqoqile ngaphambi koshintsho ukuze ukuqhathanisa kube ngokulinganayo.

Rekhoda isixhumi, i-metric nomzila okushintshile, kanye nesikhathi, ukuze isigameko esilandelayo kube ukusesha hhayi ukwakha kabusha. Lelo nothi linesisindo esikhulu kunentambo ende yamathikithi.

ip -4 route get 192.168.56.10
traceroute -n -m 4 10.20.0.15
curl -sS -o /dev/null -w '%{http_code}\n' https://example.com

Lapho umphathi efinyelela isivakashi futhi isivakashi sifinyelela i-LAN, ubuyisele umzila oqale ngawo. Lapho kusebenza okukodwa kuphela kwalokho, iphutha elisele lisenkundleni yomunye umnikazi, futhi umehluko ukutshela ukuthi iyiphi inkundla.