I-ping ye-VPN iyasebenza kodwa iwebhusayithi iyagxuma: hlola usayizi

Izimpendulo ze-ping ziyafika, i-desktop ekude iyasebenza, kanti isiphequluli sihlala ekhasini elingenalutho kuze kube yilapho sinikezela. Izincazelo ezimbili zihambisana nalelo phethini, futhi azizona izinhlobo zenkinga eyodwa: inqubomgomo engakaze ivumele insizakalo, noma amaphakethe ayeka ukungena lapho ukudluliswa kukhula. Impendulo ye-echo ayikushayi indiva kokubili.

Suka embuzweni omncane kakhulu uye kwelikhulu kakhulu, futhi ubhale lokho isinyathelo ngasinye esikufakazele ngempela.

Impendulo ye-echo iphendula umbuzo omncane kakhulu

Impendulo ye-echo ithi isitaki se-IP sendawo yokufika siphendule isicelo se-ICMP esivela emthonjeni wakho. Ayisho lutho mayelana nokuthi kukhona yini isilaleli se-TCP embobeni oyidingayo, ukuthi inqubomgomo iyayivumela yini leyo mbobo, noma ukuthi isihambeli sendawo yokufika sihlunga ithrafikhi ngokuzimela kusuka esangweni. Isango elivumela insizakalo eyodwa lingalahla enye ngenkathi zombili izinhloso ziphendula i-ping. Funda impendulo njengeqiniso elilodwa mayelana nephakethe elilodwa nendlela eyodwa.

Qinisekisa indawo yokufika nembobo yensizakalo ngaphambi kokuhumusha noma yini enye. Ikheli ohlole lona kanye nekheli elisetshenziswa uhlelo lokusebenza kwesinye isikhathi kuyirekhodi ehlukene, futhi igama elixazululeka emakhelini amabili likwenza lokho kube nokwenzeka.

Thola ukuthi ukuxhumana kuqalile yini

Ukuxhumana okunqatshwa ngokushesha kuyimpendulo yesilaleli noma yequbomgomo: okuthile kuphendule futhi kwathi cha. Ukuxhumana okuvulekayo bese kuma lapho idatha iqala ukuhamba kukhomba usayizi. Ukuxhumana okungaqedi neze ukuxhawulana ngokuvamile kungumbandela wequbomgomo noma womzila, futhi kubonakala njengesikhathi sokuphela hhayi njengokunqatshwa.

curl -v --max-time 10 https://internal.example/ -o /dev/null
ss -tn state established '( dport = :443 )'

Bhala ukuthi yikuphi kwalokhu kuthathu okubonile ngaphambi kokuthinta izilungiselelo ze-MTU. Ukushintsha usayizi womhubhe ukuze kulungiswe ukuxhumana okunqatshiwe kumosha lolo shintsho futhi kufihla imbangela yangempela isikhathi esithile.

Linganisa usayizi ngenombolo eshiwo

Lapho ukuma kuvela ngaphansi komthwalo, hlola usayizi wephakethe elilodwa ngebiti elivimbela ukuhlukaniswa futhi usho izibalo ukuze umphumela ube nencazelo. Ku-Linux ene-iputils, umthwalo wamabhayithi angu-1392 kanye nekhanda le-ICMP lamabhayithi angu-8 nekhanda le-IPv4 lamabhayithi angu-20 kwenza iphakethe langaphakathi elingamabhayithi angu-1420 ncamashi. Shono lezo zibalo kuthikithi, ngoba i-ping engenalutho efika esangweni ayifakazeli lutho ngohlelo lokusebenza.

ping -4 -M do -s 1392 10.44.0.10
ping -4 -M do -s 1372 10.44.0.10

Zombili izivivinyo ziyizindawo zokulinganisa, hhayi izincomo zosayizi womhubhe. Uma i-ICMP ihlungwa noma kuphi endleleni, isikhathi sokuphela asisho lutho ngosayizi, ngoba ukuhlunga kanye nephakethe elikhulu kakhulu kubonakala kufana kusuka kuhlangothi lwekhasimende. Impumelelo nayo ayisho lutho ngendlela ephambene noma ngendawo yokufika ehlukile.

Bala indlela yangaphandle

Ukufakwa kwekhava kwengeza amakhanda ayo, ngakho iphakethe elisemgqeni likhulu kunephakethe olilinganise ngaphakathi emhubheni. Umehluko phakathi kwalawa mabili yiwona owenza isicelo esincane esisebenzayo nesicelo esikhulu esihlulekayo sikwazi ukuba khona ngesikhathi esisodwa.

Ukutholakala kwe-MTU yendlela ku-IPv4 kuncike empendulweni mayelana namaphakethe angenakudluliswa ngaphandle kokuhlukaniswa, kanti i-IPv6 isebenzisa imilayezo ye-Packet Too Big. Incazelo ye-IPv4 ichaza leyo ndlela. Ukuhlunga impendulo kwephula ikhono lomthumeli lokufunda, futhi kumshiya ethumela kabusha amaphakethe angefike angene. Yikho lokho okwenza isicelo esincane esisebenzayo nesicelo esikhulu esihlulekayo kuhlalisane ngokunethezeka kangaka.

Shintsha inombolo eyodwa bese uhlola uhlelo lokusebenza futhi

Yehlisa i-MTU yomhubhe, noma khawulela usayizi omkhulu wengxenye ye-TCP, bese uphinda uhlelo lokusebenza lwangempela esikhundleni sokuhlola. Ukuhlola okuphumelela ngemva koshintsho kanye nohlelo lokusebenza olusagxumayo kuyinkinga ehlukile enesimo esifanayo, futhi ukuhlola kohlelo lokusebenza kuphela okuhlukanisa lokho.

Gcina izibalo kurekhodi loshintsho: usayizi olinganisiwe, umthwalo owengeziwe owucabangile, kanye nenani olibekile. Noma ubani ozobuyekeza lokho kamuva angakwazi ukuqinisekisa umcabango esikhundleni sokuphinda awukhiphe kusithombe-skrini se-ping.

Uma uhlelo lokusebenza lusebenza kuyo yonke indawo yokulinganisa oyizamile, yeka ukulungisa izinombolo futhi ubheke inqubomgomo ehlukanisa insizakalo esebenzayo kuleyo ehlulekayo.