Yiliphi igxathu le-NAT elahla imephu ye-VPN engasebenzi, nokuthi ungazi kanjani
Ukugeleza kwe-VPN okungasebenzi kungafa kunoma yiliphi igxathu eligcina isimo. Phinda ukuhlola okukodwa, qhathanisa okwabonwa yiwona wonke umngcele, futhi ubike umphumela olinganiselwe esikhundleni somsolwa oqageliwe.
Ngemva kwesikhathi sokuthula umhubhe uxhuma kabusha, alukho ugcikili oluqoka umsolwa, futhi isinyathelo esisobala ukukhetha idivayisi enemibhalo yetimeyitha ehlaba umxhwele kakhulu. Lokho kuwukuqagela okugqoke njengokuxilonga. Isimo singaphila isikhashana ku-router yasekhaya, kumhumushi womhlinzeki kanye nasemkhawulweni wefu, futhi noma yikuphi kwalokho kungalahla ukugeleza okuthulayo. Esikhundleni salokho ungadweba indlela, ukhombe ukuthi yimaphi amadivayisi ongawabona ngempela, futhi wenze ukuhlola okukodwa okungasebenzi ongakwazi ukuphinda.
Ukuhlola okuphindwayo kuguqula indaba ibe isilinganiso. Konke okungezansi kucabanga iklayenti elilodwa, iseva eyodwa kanye nephrothokholi eyodwa, futhi kucabanga ukuthi uyamelana nokushintsha izinto ezimbili eziguqukayo ngasikhathi sinye. Inhloso ukwenza okulandelayo kube ngcono kakhulu kunalokhu.
Yenza ukuhlola okufanayo okungasebenzi isikhathi ngasinye
Bhala ukuthi ukugeleza kwakulungile nini ekugcineni, kwahlala isikhathi esingakanani kungasebenzi ngemva kwalokho, nokuthi iphakethe elisha elilodwa lakubuyisela yini. Lamavesi amathathu yisilinganiso; ngaphandle kwawo unendaba yekhompyutha ephathekayo ewile. Sebenzisa iklayenti elifanayo, iseva efanayo nephrothokholi efanayo ekuphindeni ngakunye, futhi qopha umzuzu okwathunyelwa ngawo iphakethe lokuqala ngemva kokuthula.
Bese uqhathanisa ukuthi umngcele ngamunye onawo wabona ini ngempela. Umehluko onquma uphenyo ukuthi iseva ayibonanga lutho ngemva kwekhefu, noma yabona isicelo futhi yaphendula yangena endleleni eyayingasathwali izimpendulo.
| What you observe | What it suggests | What it does not prove |
|---|---|---|
| server records no packet after the pause | state was lost upstream of the server | which hop dropped it |
| server answers, client never receives | return-path state or filtering | that the timer belongs to the client |
| client sends nothing at all | client-side timer or application behaviour | that the network path is healthy |
Ukuqhathanisa izindlela ngaphandle kokushintsha izinto ezinhlanu
Inethiwekhi yesibili yokufinyelela egunyaziwe iwukuqhathanisa okusemthethweni, ngoba uchungechunge lwe-NAT luhlukile. Iyahluka futhi kumhlinzeki, ezimweni zomsakazo futhi mhlawumbe emndenini wamakheli, ngakho umphumela uwumngcele hhayi ukubeka icala. Qopha imikhawulo kanye nomphumela esikhundleni sokuyishiya buthule lapho ubika. Bhala nendlela: idivayisi, indima, nokuthi isimo sayo singafundwa yini.
Okuthengwa ukuqhathanisa izindlela umbuzo olinganiselwe: ukugeleza kuyasinda kwelinye futhi kuyafa kwelinye ngemva kokuthula okufanayo, ngakho into eguqukayo isendaweni ethile ezingxenyeni ezihlukile. Lona umphumela wangempela ngisho noma lingashiwo idivayisi, futhi utshela unjiniyela olandelayo ukuthi angachitha kuphi intambama futhi angachithi kuphi.
Isimo sasendaweni kufanele sifundwe ngaphambi kokuqagela ngabahlinzeki. Kugethi ye-Linux, conntrack -L ibala ukugeleza okulandelelwayo kanye nempilo yako esele, okuguqula ukuqagela ngesikhathi kube inombolo ongayibona iphela. Kufunde ngaphambi nangemva kwesikhathi sokungasebenzi, hhayi ngemva kuphela.
Ini okuzokugcina uphawu lokuphila nokuthi ini okungeke kukugcine
Uphawu lokuphila olusekelwayo lugcina imephu ivuliwe, futhi ukugcina imephu ivuliwe akufakazeli lutho mayelana nensizakalo engemva kwayo. Umhubhe ungahlala umephile ngenkathi uhlelo lokusebenza oluyithwelayo seluyekile ukuphendula, futhi kusukela kusibani sesimo lezi zimo ezimbili zibonakala zifana. Thatha uphawu lokuphila njengesibambiso ngokumelene nokuphelelwa yisikhathi ngenxa yokungasebenzi, hhayi njengokuhlola impilo.
Setha isikhala ngokwesikhathi esifushane kakhulu osikala ngempela, hhayi inombolo ekhotshelwe kuforamu. Uphawu lokuphila oluhlelwe ngaphansi kwazo zonke izikhathi ezingaba khona luwuthrafikhi obengeke udingeke muntu, futhi lususa nophawu obeluzokutshela ukuthi umngcele uphela kuqala. Khetha isikhala kusukela enombolweni ekaliwe futhi ushiye konke okunye kunjalo.
Ushintsho olulodwa, bese uphinda ukale
Melana nesifiso sokukhulisa zonke izikhathi nokugeza wonke amagethi ngesikhathi sokuhlola bukhoma. Lokho kususa ubufakazi obuzelwe ngabo futhi kuphazamisa ukugeleza kwabanye abantu, okuwukuhweba okubi ngombono ongakahlolwa. Shintsha isilungiselelo esisodwa esisekelwayo kudivayisi eyodwa, bese uphinda isikhathi sokungasebenzi nokululama kohlelo.
Qopha ukuthi yikuphi ukubonwa komngcele okwashintshayo, futhi ukqophe ngisho noma kungabanga khona okwaba ngcono. Isilungiselelo esingalungisanga lutho siwulwazi, futhi kushibhe ukukuqaphela kanye kunokusakaza kulo lonke izwe.
Ukubhala okutholakele ongakuvikela
Lapho umhumushi ongaphezulu engakwazi ukuhlolwa, shono kuphela lokho okusekelwa ubufakazi: ukushintshana kufa endaweni ethile kule ngxenye yendlela ngemva kwalokho kuthula, futhi igxathu elibophezelekile lihlala lingabekwanga icala. Isitatimende esilinganiselwe sidlula ekubuyekezweni futhi sikhomba umuntu olandelayo engxenyeni efanele. Ukuqoka i-router efihliwe njengesizathu akwenzi kokubili. Nika okutholakele okulinganiselwe kumnikazi wengxenye engabonakali, kanye nesikhala.
RFC 4787 ichaza ukuthi kungani izikhathi zemephu ye-UDP kunzima ukuzithola kusukela kwelinye iphuzu, futhi lobo bunzima yibo obenza okutholakele okulinganiselwe kube ngokwethembeka. Izikhathi zingempela, futhi nokungaqiniseki okuzizungezile kungempela.