Ingabe i-cache yemizila ye-VPN ifihla ushintsho lwakho? Hlola izinto ezintathu

Ukukhahlela i-cache yemizila kuwumgqibelo wokuqala lapho ushintsho lungasebenzi, futhi ku-Linux yesimanje lokho kuwumsebenzi oyize: i-cache yemizila ye-IPv4 jikelele yasuswa eminyakeni edlule, ngakho ip route show cache ayiphrinti lutho futhi akukho okukhahlelayo. Isimo esikukhohlisayo sihlala isigaba esisodwa phezulu: ku-socket, kumephu ye-NAT, kusixazululi noma kumphathi wenethiwekhi osebenzise kabusha iphrofayela endala. Imibuzo emithathu iyahlukanisa lezo zimo: ingabe indlela engalungile ivela kumgele wentsha noma kuxhumano oludala, ingabe ipulatifomu yakho igcina imizila ku-cache nhlobo, nokuthi isimo sikusemizileni noma ngaphezulu kwayo. Ziphendule ngaphambi kokusetha kabusha isixhumi.

Ukwahlola kokuqala: ingabe indlela endala ivela kumgele wentsha?

Uxhumano olusunguliwe lugcina umzila eyasungulwa ngawo. Yingakho isikhathi se-SSH phezu komhubhe sisinda ushintsho lwethebula lemizila kuyilapho isikhathi esisha sithatha ngokushesha indlela entsha, futhi yingakho «ushintsho alwenzi lutho» ngokuvamile kusho «i-socket endala isayibamba». Hlola ngenqubo entsha, hhayi ngewindi osuvele ulivulile.

ss -tnp | head
ip route get 1.1.1.1
curl -m 5 -sS -o /dev/null -w '%{remote_ip}
' https://example.com

Umyalo wokugcina uphrinta ikheli umgele omusha awufinyelele ngempela, futhi iyona ndlela eshibhile yokubona indlela yangempela ngaphandle kokwethemba iwindi lesimo. Qhathanisa nekheli lomthombo okwakufanele lisetshenziswe yi-namespace noma isixhumi.

Uma umgele omusha uthatha indlela efanele futhi owakudala ungalulami, yeka ukubheka umzila. Umzila wawulungile; isikhathi sasidala.

Ukwahlola kwesibili: ingabe ipulatifomu yakho igcina i-cache yemizila?

Ku-Linux impendulo ingu-cha, ngomqondo osetshenziswa izincwadi eziningi. Ayikho i-cache yendawo ekhangelwe jikelele ongayilahla, futhi umbhalo we-socket ngayinye ogcina umzila okhethiwe ukhululwa kanye ne-socket. Isigaba se-cache ku-ncwadi ye-ip-route sichaza ukuziphatha kwangaphambili, hhayi into ongayikhahlela ku-kernel yamanje.

Amanye amapulatifomu ahlukile, futhi yilapho ukukopisha izeluleko kuhamba kabi khona. I-Windows igcina i-cache yendawo ongayihlanza nge-netsh interface ip delete destinationcache. I-BSD ne-macOS zikhombisa ukusesha ngayinye indawo nge-route -n get, futhi ama-cache azo aphela ngokuhlela kwawo. Umyalo osebenza kwenye yazo awenzi lutho ku-Linux, yingakho ukulungisa okufanayo kubonakala kwehluleka kwengxenye yabantu abakuzamayo.

Ithebula le-NAT noma le-conntrack aliyona i-cache yemizila, nakuba likhiqiza uphawu olufanayo. Umgele owahunyushwa ngaphambi koshintsho lwakho ugcina ukuhunyushwa kwawo, futhi i-conntrack -L izowukhombisa isikhathi eside ngemva kokuba inqubomgomo yomzila isiqhubekile. Leso yisimo esidala, kodwa ukuhlanza imizila ngeke kusithinte.

Ukwahlola kwesithathu: ingabe isimo sikusemizileni noma ngaphezulu kwawo?

Funda ukusesha kwamanje ngaphambi kwanoma yini enye: ip route get yendawo, bese kuba umyalo ofanayo ne-from nekheli lomthombo, bese kuba ip rule show. Uma lezi zintathu zihambisana nenjongo yakho, umzila awusiwo isigaba okufanele silungiswe, futhi ukubonwa kwakudala kwavela kwenye indawo.

Abasolwa abathathu abajwayelekile bahlala ngaphezu komzila. Umphathi wenethiwekhi angakwazi ukufaka kabusha umzila ovela kuphrofayela egciniwe ngemva kwemizuzwana embalwa uqede ukuwususa, ngakho ushintsho lwakho lubonakala sengathi luyabuya; hlola i-nmcli connection show --active kanye nesimo seyunithi ngaphambi kokuhlela ithebula futhi. I-cache yesixazululi ibuyisela ikheli elidala, elibonakala njengokwehluleka komzila kuze kube yilapho ubuza igama elifanayo ngethuluzi eledlula i-cache. Ichibi lokuxhumana lohlelo lokusebenza ligcina i-socket esebenzayo eya endaweni endala futhi alikaze licele isinqumo esisha ku-kernel.

Yini izimpendulo ezintathu ezikuvumela ukuyiphetha

Hlanganisa izimpendulo futhi ukulungisa ngokuvamile kuzikhulumela kona. Umgele omusha othatha indlela engalungile kupulatifomu engenayo i-cache yemizila kusho ukuthi inqubomgomo ingalungile ngempela, ngakho funda imithetho nethebula elafakwa umhubhe. Umgele omusha othatha indlela efanele kuyilapho isikhathi esidala sikhungathekile kusho ukuthi inkinga kuse-app noma ku-socket. Imizila efanele enokubonwa okuphukile kuzo zombili izimo kusho ukuthi isimo singaphezu komzila.

Melana nokuvuselela okujwayelekile. Ukuqalisa kabusha isitaki senethiwekhi noma ukususa yonke imizila kumshini omzila wawo ozenzakalelayo umhubhe kungase kunqamule uxhumano olusebenzisayo ukuyilungisa, futhi kubhubhisa ubufakazi obekuzokhombisa ukuthi yisiphi isigaba esihlulekile.

Uma kufanele ngempela uhlanze okuthile, hlanza into encane kunazo ezihambisana nokuxilongwa: ama-socket enqubo eyodwa, umbhalo we-conntrack owodwa, i-cache yesixazululi. Bese uphinda lokho kuhlolwa komgele omusha futhi ubhale okushintshile.

Gcina izimo ezintathu zihlukene kumanothi akho

Ukucushwa okugciniwe, ukusesha kwamanje nomgele obonwayo kungamaqiniso amathathu ahlukene, futhi ukuwahlanganisa ku-«cache» yikho okwenza isiphutha sibe nzima ukuphinda senzeke. Bhala iphrofayela noma iyunithi engumnikazi womzila, okukhishwa yi-ip route get, kanye nomthombo nendawo yoxhumano lwangempela.

Bhala eceleni ipulatifomu noshintsho lweklayenti, ngoba ukulungisa okuhlanza i-cache yendawo ye-Windows akulona ukulungisa okusebenza kumsingathi we-Linux, futhi inqubo ekopishwe phakathi kwazo zombili ifundisa isifundo esingalungile. Uma unikeza inkinga komunye umuntu, leyo mithetho emithathu imvumela ukuba aphinde asungule isimo esihlulekile esikhundleni sokuqagela.