Ukumaka iphothi le-VPN akukanikezi izingcingo zomsindo ukubaluleka
Ukumaka iphothi le-VPN njengokubalulekile kududula ucingo kanye nekhophi yokugcina kumhubhe omodwa. Umsindo udinga ukuhlukaniswa ngaphambi kokufihlwa nolayini owulawulayo.
Ukumaka iphothi le-UDP le-VPN njengokubalulekile kakhulu wushintsho lwe-QoS lomsindo oluvame kakhulu, futhi akuhlukanisi ucingo nokudluliswa kwefayela okwabelana ngawo lowo mhubhe. Womabili amagebe aphuma ku-socket efihliwe efanayo. Umaka utshela ihop elilandelayo ukuthi konke kubalulekile ngokulinganayo, okulingana nokungasho lutho. Okivikela ucingo ukuhlukaniswa okuthembekile ngaphambi kokufihlwa kanye nolayini owulawula ngempela.
Umhubhe ufihla igebe obufuna ukulihlukanisa
Ukufihla kushintsha izihloko zangaphakathi ngesihloko esisodwa sangaphandle ngomhubhe ngamunye. Ngemva kwalokho, umsindo kanye nethrafikhi yekhophi zibonisa umthombo, indawo yokuphela kanye nephothi lokuthutha elifanayo, ngakho umhlukanisi osekelwe kwiphothi lomhubhe akwazi ukubahlukanisa. Noma yini oyiphakamisayo, uyiphakamisa yonke ngasikhathi sinye.
Inani le-DSCP elibekwe uhlelo lomsuka lihlala kuphela uma okuthile likukopisha ngaphandle. I-OpenVPN 2.6 ino-passtos, ebhalwe ngobubanzi be-IPv4; i-IPsec isebenzisa inqubomgomo yayo yokukopisha noma yokumapa emngceleni womhubhe. Ngaphandle kwalelo nyathelo, iphakethe langaphandle limakwa nganoma yiliphi inani elizenzakalelayo elisetshenziswa yisixhumanisi somhubhe, futhi ulayini ongezansi awukaze wazi ukuthi kukhona ucingo ngaphakathi.
Amamaka akopishiwe afanele ukusolwa okufanayo nanoma yiliphi inani elinikezwa iklayenti. Isiteshi somsebenzi singafuna ukudluliswa okusheshisiwe komsebenzi wekhophi yokugcina, ngakho ukwamukelwa nokumakwa kabusha emngceleni wokuthembela kufanele kube kumklamo ngaphambi kokuba umaka ukholwe.
Ukubaluleka kubalwa kuphela lapho kwakheka khona ulayini
Isixhumanisi esiphezulu esigcwele yisona esishintsha ikhodekhi enhle ibe yizwi lerobhothi, futhi ulayini ogcwalayo uvame ukuba kudivayisi yokufinyelela noma kubhafa lomhlinzeki. Ukubumba indlela yokuphuma ibe izinga elisebenzisekayo, kususwa izindleko zomhubhe nesixhumanisi, yikho okugcina lowo ulayini kuhadiwe oyilawulayo, hhayi kubhafa lomunye umuntu.
Ulayini olungile nokuphathwa kolayini okusebenzayo kuyasiza ngisho ngaphandle kwesigaba somsindo, ngoba kuvimbela igebe elilodwa elikhulu ukugcwalisa ibhafa. I-CAKE ku-Linux ihlanganisa ukubumba, ubulungiswa ngegebe ngesinye kanye nezigaba ze-Diffserv ezikhethwayo ku-qdisc eyodwa, futhi umphathi wenethiwekhi othunjiwe kufanele abe nakho lokho kulungiselelwa esikhundleni sokulungiselelwa kwesibili kolayini okuqhudelanayo. Ngaphandle kokubumba, isigaba esingaphezu kwethrafikhi enkulu silindile ngemuva kwebhafa eseligcwele kakade.
Ukuphathwa kwethrafikhi engenayo akulona ihlazo, kodwa kusebenza ngemuva kokuba iphakethe selidlule isixhumanisi sokwamukela. Kungaba nomthelela kumthumeli ophendulayo futhi akukwazi ukubuyisela ukubambezeleka osekusetshenzisiwe phezulu, ngakho kungukwehlisa hhayi isiqinisekiso.
| Stage | What you can control | What to verify |
|---|---|---|
| Application to client | Which flows are trusted for marking | The marked packets are the ones you intended |
| Tunnel boundary | Whether the inner mark is copied outward | Outer header carries the expected value |
| Your uplink | Shaping rate and class treatment | Queue counters move for the voice class |
| Provider path | Almost nothing | Whether the service enforces the marking at all |
| Receiving side | Local policy after arrival | Delay that is already in the past |
Okuhlala khona ku-inthanethi yomphakathi
Isakhiwo se-Diffserv sichaza ukuphathwa ngaphakathi kwezizinda zokuphatha, yingakho umhlinzeki engase angalinaki noma alibhale kabusha umaka emngceleni. Isimangalo esiphambene, sokuthi yonke inethiwekhi ihlala iwususa, asinasisekelo esifanayo. Umbuzo othembekile ukuthi yini le ndlela ethile efungekile ngokwesivumelwano futhi igadwa ukuba iyenze. Kuvivinya ngesihloli esimakiwe esikhundleni sokuphinda umthetho oyifunda kwenye indawo.
Buza ukuthi umhlinzeki wenzani ngesigaba, bese ulinganisa. Umaka ogciniwe kodwa ongahleliwe uwumhlobiso; indlela ehlela ngaphandle kokubona umaka iyinkinga ehlukile, futhi zombili zidinga izilungiso ezihlukile.
Icebo lokulinganisa elihlukanisa isigaba
Yenza ucingo olulodwa olujwayelekile ngokulayisha okuncintisanayo okulawulwayo, bese uluphinda kusixhumanisi sentambo. Bheka ukuthi ucingo lulahlekelwe ini, ukuthi izibali zesigaba ziqophe ini nokuthi isixhumanisi siseduze kangakanani nomkhawulo waso wangempela hhayi ijubane elikhangisiwe lohlelo.
tc -s qdisc show dev eth0
tc -s class show dev eth0
mtr -rwzbc 50 voice.example.netUma isibali sesigaba somsindo sihlala siku-zero, ukuhlukaniswa noma ukukopishwa komaka kugogekile futhi akukho kubaluleka okuzosiza. Uma isibali sesigaba sihamba endaweni ngesikhathi ukubambezeleka kuqhubeka kukhuphuka, umgoqo usengale kwegesi lakho. Akukho kuphumela kokubili okulungiswa ngokukhulisa inani lokubaluleka.