Umthwalo weseva ye-VPN uchaziwe: abasebenzisi, i-CPU noma umgwaqo ophezulu?
Isikolo esiphansi somthwalo singasho abasebenzisi abangasebenzi, i-CPU esele noma umgwaqo ophezulu obanzi. Funda i-loadavg, izibali zesixhumanisi kanye nefayela lesimo ngaphambi kokuyibiza ngokuthi iyashesha.
Isango elikumthwalo ongu-0.4 lisengakhasa kumsebenzisi ngamunye ongemuva kwalo. Umthwalo omaphakathi ubala imisebenzi ekwazi ukugijinywa noma ebambekile ebuthongweni obungaphazanyiswa, futhi kuseva enamakhora amane inqubo eyodwa egcwele yanele ukuyisunduza ibheke ku-1.0 ngenkathi amakhora amathathu ehlezi engenzi lutho. Ukufunda leyo nombolo njengensalela iyiphutha elivame kakhulu ekukhetheni iphuzu lokugcina. Okubopha umhubhe ngempela ngokuvamile kungelinye lezinto ezine: ikhora elilodwa elimatasa, umgwaqo ophezulu, umugqa ophambi kwawo noma inqubomgomo yesikhathi ngasinye okungekho oyibhalile.
Umthwalo omaphakathi ubala imisebenzi, hhayi ukugeleza
Ikhora lisebenzisa amasampuli omugqa wokugijima kanye nenani lemisebenzi elinde ukufakwa nokuphuma, bese lilinganisa kokubili phakathi kwemizuzu eyodwa, emihlanu neshumi nanhlanu. Akukho lutho kuleyo ncazelo olukhuluma ngamabhayithi, amaphakethe noma imihubhe. Iseva enesitoreji esibambekile ingabika umthwalo ophezulu ngaphandle kwethrafikhi cishe, kanti iseva esunduza igigabhithi emgwaqweni wedatha wekhora ingabika umthwalo okhululekile.
Ngakho-ke ukuhlobanisa umthwalo nokusebenza komhubhe kudinga umbono ngekhora ngalinye. Uma ikhora elilodwa ligcwele, iphesenti lilonke kudeshibhodi lizobonakala lihle:
cat /proc/loadavg
mpstat -P ALL 1 1
top -H -b -n 1 | head -n 20Umyalo wesithathu yiwona obaluleke kakhulu kumaseva e-VPN. Ukucubungula amaphakethe endaweni yomsebenzisi ku-OpenVPN 2.x ngokuvamile kulandelana ngenqubo ngayinye, ngakho-ke intambo eyodwa ematasa ingaba uphahla ngenkathi ideshibhodi libika umthamo omningi ongenzi lutho. Uma intambo eyodwa ibamba ingxenye enkulu yekhora ngesikhathi sakho esisheshayo, iseva ayinakho ukusweleka kwensiza sekukonke; iboshwe esikalini okwenzeka ukuthi sibalulekile.
Naka nesikhathi futhi. Izilinganiso zemizuzu eyishumi nanhlanu zifihla ukuqhuma okonakalise ucingo, ngakho-ke isithombe sesikrini esithathwe ngemuva kwesikhalo siwubufakazi obuthaka. Thatha amasampuli ngesikhathi senkinga, futhi gcina isigxivizo sesikhathi kanye nokukhishwayo.
Umgwaqo ophezulu nomugqa ophambi kwawo
Izibali zesixhumanisi ziphendula umbuzo womkhawulokudonsa ongakwazi ukuphendulwa yizinombolo ze-CPU. Zihlukanisa nomthamo ekulahlekelweni, futhi lezi ziyizingozi ezihlukene ezinamakhambi ahlukene:
ip -s link show dev eth0
tc -s qdisc show dev eth0
nstat -az TcpRetransSegs TcpExtTCPLostRetransmitIsixhumanisi esiseduze nezinga elisinikeziwe ngesikhathi sokuhlola kwakho siyincazelo, futhi akukho nani le-CPU elikhululekile elingakushintsha lokho. Umugqa we-qdisc wengeza imininingwane ebalulekile kuthrafikhi yokuxhumana: ukunqwabelana nokudonsa kukutshela ukuthi amaphakethe alinde emugqeni ngaphambi kokuhamba. Umugqa ogcwala ngaphansi kokulayisha okukhulu ukhiqiza kanye uphawu abantu abalubeka kuseva ekude, okungukuthi izingcingo ezinensayo kuxhumano olusalinganisa kahle.
Izibali zokudlulisela kabusha zibamba icala lapho amaphakethe ephuma khona kodwa angafiki ahlanzekile. Uma ukudlulisela kabusha kukhuphuka kuwindi elinesivinini futhi isixhumanisi singekude nomthamo, inkinga isemgwaqeni hhayi kuseva, futhi ukuthuthukela kwelinye iphuzu lokugcina edolobheni elifanayo ngeke kusize.
Inani lezikhathi lichaza isidingo, hhayi insalela
Uhlu ngalunye lomphakathi lubonisa inani elithile labasebenzisi abaxhunyiwe, futhi cishe akukho olukutshela ukuthi labo basebenzisi benzani. Izikhathi ezingamashumi amabili ezenza umsebenzi wokuxhumana kanye nezikhathi ezine ezidonsa amafayela amakhulu zikhiqiza imithwalo ehluke kakhulu kuhadiwe elifanayo. Iphethini yesibili ayibonakali enanini labasebenzisi, futhi yiyo elonakalisa ubusuku. Ngakho-ke inani lezikhathi lifundwa kangcono njengenyathelo mayelana nesidingo, hhayi nanini njengesitatimende mayelana nomthamo ongenzi lutho.
| Number on the page | What it is really measuring | What it cannot tell you |
|---|---|---|
| Connected users | How many sessions hold an address | How much each one is transferring |
| Load or score | Whatever the operator chose to publish | Whether that definition matches your task |
| Uptime | How long since the process started | Current capacity, queue depth or packet loss |
| Distance or ping | Round-trip time on a small probe | Throughput under sustained transfer |
Kuseva oyilawulayo, ifayela lesimo linikeza isikali esingekho. I-OpenVPN ibhala isithombe sesikhathi ngasinye esihlanganisa izibali zamabhayithi ngeklayenti ngayinye, futhi lokho kwanele ukubona ukuthi ingabe isikhathi esisodwa sinesibopho somgwaqo ophezulu wonke:
status /run/openvpn/server.status 10
# then, after at least one interval
grep -E "^CLIENT_LIST" /run/openvpn/server.statusAmasampuli amabili ahlukaniswe imizuzwana eyishumi aguqula lezo zibalo eziqoqiwe zibe izinga ngeklayenti ngayinye. Yilokho kukala okumelewa yinani labasebenzisi, futhi yiyo indlela okuthola ngayo ukuthi iklayenti elilodwa elilungiswe kabi ligcwalisa isixhumanisi njalo ebusuku ngesikhathi esifanayo.
Imikhawulo yesikhathi ngasinye icashile kwinqubomgomo
Iseva ingaba ngenzi lutho futhi isale inqaba ukukunikeza umkhawulokudonsa. Imikhawulo yejubane, izilinganiso eziphezulu zomkhawulokudonsa ngeklayenti kanye nokwakheka kwethrafikhi kuvame ukusetshenziswa ngokwegama elivamile noma ngephuli, ngakho-ke abasebenzisi ababili esangweni elifanayo bangathola imiphumela ehluke kakhulu. Indlela ayicwebelekile, kodwa ayibonakali ngaphandle ngoba umhubhe ukhuphuka ngokujwayelekile kuzo zombili izimo.
Funa ukwakheka kusixhumanisi somhubhe hhayi kwesokwenyama. Hlola ukuthi umkhawulo ulandela umsebenzisi, isitifiketi noma iphuli lamakheli. Uma i-akhawunti yakho yokuhlola iwela ephulini elingenamkhawulo, uzophetha ngokuthi iseva ilungile futhi umsebenzisi okhalayo unephutha. Leso siphetho sibi kunokungabi nasiphetho, ngoba sivala ithikithi.
Qhathanisa amaphuzu amabili okugcina ngomsebenzi owodwa oqinile
Ukuhlola ohlangothini lweklayenti kusafanele kwenziwe, kodwa kuphela uma izinto eziguqukayo ziqinisiwe. Sebenzisa idivayisi efanayo, inethiwekhi yokufinyelela efanayo, iphrothokholi efanayo kanye nefayela lendawo efanayo, bese uphinda ngokumelene nephuzu lesibili lokugcina ebangeni elifanayo. Noma yini eshintshayo phakathi kokugijima, kuhlanganise isikhathi sosuku, ingcolisa umphumela.
Qopha ukwehluleka ngokunakekela okufanayo nempumelelo. Uchungechunge lapho amaphuzu amathathu okugcina esebenza khona futhi elilodwa liphelelwa isikhathi lunolwazi olwengeziwe kunezinombolo ezine zejubane, ngoba lukhombisa inkinga yomgwaqo noma yenqubomgomo hhayi yomthamo. Gijimisa icala ngalinye okungenani kabili; isampuli eyodwa enensayo ayifakazi lutho kunethiwekhi eyabiwe.
Ekugcineni, gcina izinombolo oziqoqile kanye nesimangalo ezisisekelayo. "Leli phuzu lokugcina liqedele ukudluliswa kuwindi elifanayo lapho elinye lakhona khona" kuyavikeleka, kuyilapho "leli phuzu lokugcina liyashesha" limema impikiswano ongeke uyinqobe ngamaphuzu ekhasi lokuqala. Incwadi ye-OpenVPN 2.6 ibhala ifayela lesimo kanye nezinketho zokwakheka uma udinga imiyalelo eqondile yohlangothi lweseva.