Lapho imizila ye-tunnel ehlukanisiwe igxambaqa: iyiphi i-prefix ewina

Amaphrofayili amabili e-tunnel ehlukanisiwe, ama-prefix amabili ayimfihlo kanye ne-host eyodwa okubanga yona yomibili. Uphawu luvamise ukungabi ukuhluleka okuhlanzekile: isevisi isebenza ngoMsombuluko, iphelelwa isikhathi ngemva kokuxhuma kabusha kweklayenti lesibili, futhi isebenza futhi ngemva kokuqalisa kabusha. Ukulandelana okuxhumanise ngakho amaklayenti akunqumi umphumela, futhi nokulandelana kwemigqa kusixhumi sokusebenza seklayenti akunqumi. Yenza lezi zihlolo ngokulandelana, futhi ume kokokuqala okungagcini, ngoba ezilandelayo zinencazelo kuphela uma ezandulelayo ziyiqiniso.

1. Bhala phansi indawo kanye nomthombo

Qala ngekheli eliqondile isicelo esihlulekayo esiya kulo, hhayi igama le-host futhi hhayi igama lohlelo. Xazulula igama kanye, bhala yonke impendulo futhi ukhethe leyo umgele wokugeleza ohlulekayo oyisebenzisa ngempela. Bese ubhala phansi ikheli lasendaweni lomgele ofanayo, ngoba ikheli lomthombo lingashintsha ukuthi muphi umthetho wenqubomgomo ofanayo futhi ngakho ukuthi yiluphi ithebula elibukwayo.

Isicelo esiya kwelinye lamarekhodi amaningi e-A singahluleka kuyilapho ikheli elingumzalwane liphumelela, lokhu kubonakala njenge-tunnel engazinzi kodwa empeleni kuyimizila emibili ehlukene. Uma indawo kuyigama elinezimpendulo eziningi, hlola impendulo ngayinye ngokwehlukana ngaphambi kokushintsha noma yini.

2. Buza i-kernel ukuthi yawukhetha muphi umzila

Ungafundi ithebula lemizila bese uqagela impendulo. Buza umbuzo ofanayo owubuzwa isitaki, ngekheli lomthombo elifanayo: ip route get 10.20.4.10 from 10.8.0.2 ku-Linux, noma Find-NetRoute -RemoteIPAddress 10.20.4.10 ku-PowerShell. Umphumela usho umzila oyosebenza ngempela, futhi lokho ngokuvamile akusiyo leyo obuyilindele lapho ufunda ithebula.

Phakathi kwemizila efanayo, ngokuvamile iwina i-prefix eqondile kakhulu: i-/24 yehlula i-/16 yekheli elingaphakathi kwakho kokubili. Phakathi kokufana kobude obufanayo iwina i-metric ephansi, futhi umzila ofakwe kusixhumanisi esivaliwe uyehlulwa. Ama-tunnel amabili acindezela i-/24 efanayo nge-metric efanayo ayisimo esihlukile: i-kernel igcina imizila yomibili futhi ikhetha phakathi kwayo, ngakho umphumela ungangena uphuma esikhundleni sokulandela ukulandelana okuxhumane ngakho amaklayenti. Yiso lesi simo esikhiqiza iphethini uMsombuluko-uyasebenza-uLwesibili-uyahluleka, futhi ukuxhuma kabusha ngokulandelana okunye akukushintshi lokho.

3. Hlola ukuthi umthetho wenqubomgomo usuhambise ukusesha kwenye indawo yini

Ngaphambi kokuba ithebula lemizila libukwe, i-kernel idlula emthethweni wayo wenqubomgomo. Umthetho ungathumela ithrafikhi evela kumthombo othile, umsebenzisi noma uphawu lwensimbi yomlilo ethile iye kwelinye ithebula ngokuphelele, ngakho i-prefix ewina ethebuleni eliyinhloko ingase ingabukwa nhlobo kulowo mgele. ip rule show ibalulisa ngokulandelana kokuhlola, futhi ip route show table 100 ibonisa ukuthi ithebula elikhethiwe liqukethe ini ngempela.

Kunemigibe emibili lapha. Umthetho okhomba ethebulini elingenalutho ukhiqiza ukusesha okuwela kumthetho olandelayo, ngakho umthetho ubonakala ungenzi lutho. Okunye ingqikithi yenombolo yokubaluleka: imithetho ifundwa ngokulandelana okunyukayo, futhi amanani akhelwe ngaphakathi yi-0 local, 32766 main kanye ne-32767 default. Umthetho onenombolo engaphansi kuka-32767 ubukwa ngaphambi komthetho ozenzakalelayo obamba konke. Umthetho onenombolo engaphezulu kuka-32767 ulele ngemuva kwawo futhi ufinyelelwa kuphela uma kungekho thebula langaphambili eliphendulayo, okwenqatshwa umzila ozenzakalelayo ojwayelekile ku-main, ngakho empeleni awufinyelelwa neze futhi awenzi lutho buthule ngenkathi ubonakala ufakiwe. Uma iklayenti libhale umthetho nomzila, hlola kokubili, futhi uphinde ukuhlole ngemva kokuxhuma kabusha, ngoba iphrofayili ebhalwe kabusha ingangeza umthetho wesibili onokubaluleka okuhlukile.

4. Hlukanisa ukulingana kwemizila kusuka ohlelweni lwamakheli oluphindiwe

Ngesinye isikhathi i-prefix akuyona neze inkinga. Izindawo ezimbili ezisebenzisa zombili i-192.168.1.0/24 zisho ukuthi ikheli elifanayo likhomba ama-host amabili ahlukene, futhi awukho umzila ongawahlukanisa. Umzila we-host oya kwelinye lezimpendulo ezimbili usebenza kuphela kuze kube yilapho enye indawo iphendula ngegama elifanayo, bese kuthi okuhlukile kube yikhona okuyiphutha ngokuthula.

Uphawu ukuthi ikheli lendawo liyafana emizileni yomibili futhi kuhluke kuphela umnikazi ohlosiwe. Lesi isinqumo sohlelo lwamakheli, hhayi ukulungisa umzila: phinda unombolo uhlangothi olulodwa, beka uhlangothi olulodwa ngemva kwesango elihumushayo, noma finyelela endaweni yesibili ngesethuli esixazulula amagama aso ngokwaso. Ukwehlisa umzila ozenzakalelayo noma ukunqwabelanisa okuhlukile kwe-host kudlulisa ukungqubuzana kwenye indawo.

5. Qinisekisa ukuthi isixazululi siyavumelana nomzila

Igama elixazulula iye ekhelini langasese elingalungile likhiqiza zonke izimpawu zokungqubuzana komzila futhi alikhiqizi ngisho esisodwa sezimbangela zako. Qhathanisa impendulo etholwa i-host nekheli indawo elisebenzisa ngempela, futhi uhlole ukuthi yisiphi isixazululi esiphendulile. Uma i-tunnel icindezela isixazululi, iklayenti kufanele lisifake kumagele asebenzisa i-tunnel; uma ingenjalo, i-host iqhubeka iba buza isixazululi sasendaweni, esingaphendula sisuka esizindeni sokusesha noma kurekhodi eligciniwe.

Buza isixazululi ngqo futhi ubhale phansi isiphakeli esiphendulile. Impendulo egciniwe ene-TTL emfushane ingachaza nokuthi kungani isicelo sokuqala ngemva kokuxhuma kabusha senze ngendlela ehlukile kwesesihlanu.

6. Xhuma kabusha, hlola isimo esisetshenzisiwe, bese uhlola kokubili ukugeleza

Ngemva kokulungiswa, xhuma kabusha futhi uhlole ukuthi iklayenti lafaka ini ngempela esikhundleni sokuthemba umhleli wephrofayili. Phinda ufunde imithetho, amathebula kanye nempendulo ye-ip route get evelayo. Iklayenti lesibili lingakwazi ukufaka kabusha umzila walo lapho lixhuma futhi likhiqize kabusha ukungqubuzana, yingakho ukuhlolwa kwesimo kufanele kwenzeke ngemva kokuba iklayenti lokugcina lixhumile, hhayi ngaphambi.

Hlola ukugeleza okubili, hhayi okukodwa: isicelo esasihluleka ngaphambili, kanye nesisetshenziswa okufanele sisebenzise enye i-tunnel. Ukuhambisa yonke ithrafikhi yangasese iye kusixhumanisi esisodwa kuzokwenza ukuhlolwa kokuqala kudlule kuyilapho kwephula okwesibili, futhi ukuhlolwa okubhangqiwe kuphela okukubambayo lokho. Bhala phansi konke ukuhlukile okukugcinayo, kanye nendawo nesizathu, ukuze umuntu olandelayo ahlukanise umzila we-host owenziwe ngamabomu kusuka kokusele.