I yiphi i-address yomthombo ebona i-STUN uma kune-VPN kurotha?
Umzila, ukukhethwa komthombo kanye nokuhunyushwa kunquma i-address okubikwa ngumkhombisi. Amaqiniso amathathu okubhalwa phansi, bese kuba umbuzo owodwa wokuqinisekisa ukuthi yimuphi umzila onqobayo.
Umbuzo uzwakala njengokusesha okukodwa futhi empeleni uyizinqumo ezintathu. Yimuphi umzila othathwa yi-binding request, yimuphi umthombo okhethwa yi-kernel yalowo mzila, nokuthi kukhona yini okubhala kabusha lowo mthombo endleleni. Shintsha noma yikuphi kwezintathu futhi i-address ebikwa yi-STUN server iyashintsha kanye nayo. Yingakho ukuthi i-VPN isekurotha kungasho cishe lutho kukodwa.
Isinqumo sincike emaqinisweni amathathu
Okokuqala umzila: imithetho yenqubomgomo nethebula yomzila kunquma ukuthi isicelo siphuma ngomhubhe noma nge-WAN evamile, futhi indawo ekhishiwe ithatha umzila wesibili ngisho nomhubhe uvuliwe. Okwesibili umthombo: i-kernel ikhetha umthombo walowo mzila okhethiwe, futhi lokho kukhetha kuncike kumthombo okhethwa umzila kanye nanoma yimuphi umthetho ohambisanayo. Okwesithathu ukuhunyushwa: i-NAT endleleni ithatha indawo yomthombo okhethiwe. I-address ekhombisiwe iwumkhiqizo wazo zontathu, hhayi isici somhubhe.
Shintsha eyodwa kwezintathu futhi impendulo iyashintsha ngenkathi ingxenye ngayinye ibonakala iphilile kumbhalo wayo. Lesi yisizathu esivamile sokuthi lokhu kuxilonga kumile.
Bhala phansi amaqiniso amathathu okugeleza okuhlolayo ngaphambi kokuqala. I-interface, umzila kanye nomthetho wokuhunyusha kwanele ukubikezela umphumela, futhi ukubikezela kukho okwenza isimangaliso sibe nolwazi. Uma ungeke ugcwalise eyodwa kwezithathu, lelo gebe yilokho okutholakele kwangempela.
Landela i-binding request eyodwa emzileni
I-binding request ye-STUN icela i-server ukuthi ibike i-address yokuthutha yomthombo eyibonile. Impendulo ichaza umzila othathwe isicelo, hhayi uhlu lwama-interface emshinini weklayenti. Izicelo ezimbili emigwaqweni emibili zizobika ngobuqotho ama-address amabili ahlukene.
| Path taken | Source the reflector sees | What it means |
|---|---|---|
| Tunnel to a public exit that translates | The exit's public address | The reflector learns nothing about the LAN |
| Tunnel to a private reflector, translated to the tunnel address, no later translation | That tunnel address | An internal identifier is disclosed to that reflector |
| Excluded flow over the ordinary WAN | The WAN address | The tunnel was not used at all |
Funda lelo thebula njengeqoqo lemibandela, hhayi njengohlu lwabahlinzeki. Umugqa ophakathi udinga ukuthi umkhombisi wangasese ufinyeleleke ngaphansi komzila nomgomo kontanga womhubhe ngokwawo; lokho kuyiqiniso lokuhlela ongakuqinisekisa, hhayi into eshiwo yizinga le-akhawunti. Umugqa ophansi ngokuvamile yiwona obalulekile kumgomo, ngoba leyo traffic bekufanele ihlale ngaphakathi komhubhe. Phakathi kwabo kukhona icala elivamile, lapho okuphumayo kuhunyusha futhi umkhombisi ubona okuphumayo kuphela.
Abazakheli be-host nabazakheli be-server-reflexive bavela emikhakheni ehlukene, ngakho uhlu lwabazakheli alusho ukuthi yimuphi umzila osetshenziswe ngempela yimidiya. Funda ipheya elikhethiwe, hhayi umbhalo wokuqoqa, uma ufuna ukwazi ukuthi iseshini yaya kuphi.
Yini okungeyona i-address yomhubhe yerotha
I-address yomhubhe enikezwe irotha ingeyenye yama-interface asekurotha. Isiphequluli esisendaweni ye-LAN sine-address zaso zama-interface futhi asiboni ngqo i-interface yomhubhe yerotha. Ukuziphatha zombili njengezingashintshanayo kuveza izimpendulo eziyiphutha eziqinisekile mayelana nalokho ikhasi lewebhu elingakufunda.
Ukudlulisela yikho okuxhumanisa zombili. Isicelo sinqamula irotha njenge-traffic elethwa ngumzila, futhi umthombo waso yilokho okwenziwe umzila nokuhunyushwa.
Uma umzila womhubhe ugcina umthombo we-LAN, umkhombisi wangasese angafunda leyo address ye-LAN, okuwukwembulwa kwangempela futhi okuhlukile kwi-address yomhubhe. Uma umzila uhunyushela ku-address yomhubhe, umkhombisi ufunda i-address yomhubhe esikhundleni salokho. Yomibili imiphumela ihambisana nesiphequluli esifanayo kusisekelo esifanayo, ngakho ukubona kufanele kuboshwe ekugelezeni okuthile. Buza i-kernel ukuthi iyiphi imithombo ezoyisebenzisa ngaphambi kokusola uhlelo.
Ukwembulwa ngokumelene nokwedlula: okutholakele okubili, ukulungiswa okubili
I-address yomhubhe ekhombisiwe yembula isihlonzi sangaphakathi emzileni owuvumele. Isicelo esiqondile nge-WAN sidlula umzila obufuna ukuwuphoqa. Okokuqala umbuzo wolwazi, okwesibili umbuzo wokuphoqelela, futhi kulungiswa ezindaweni ezihlukene. Ukuzihlanganisa ezwini elilodwa kuveza ukulungiswa okungabhekeli noma yikuphi.
I-WebRTC yenza lokhu kubonakale kakhudlwana ngaphandle kokukwenza kube yiphutha, ngoba ukuqoqa umzakheli akufani nokumkhetha.
ip route get 203.0.113.7 from 192.0.2.25
ip rule showGijimisa umbuzo womzila kuyo yonke i-address yomkhombisi oyivumelayo, nomthombo olindele ukuthi lowo mgeleza uwuthwale, bese uwugijimisa futhi ezingxenyeni ezikhishiwe ukuze ubone ukuthi okunye kukhetha ini. Qhathanisa izimpendulo ezimbili nomgomo owubhalile. Uma zihluka ngendlela obungayihlosile, uthole indawo yokulungisa ngaphandle kokudinga ukuhumusha uhlu lwabazakheli besiphequluli nhlobo.