Kungani umzila womsingathi /32 ugcina iphoyinti lokugcina le-VPN lifinyeleleka

Umzila womsingathi ukhetha ikheli elilodwa, hhayi isixhumanisi esincane. Ungagcina iphoyinti lokugcina lomhubhe lifinyeleleka noma ubophele insiza eyodwa, kodwa uyaphelelwa yisikhathi njengoba amakheli eshintsha.

Uvula ithebula lemizila ngemva kokuxhuma uthole ikheli elilodwa elihamba ngomhubhe kuyilapho isixhumanisi esincane esizungezile sisaya esangweni lendawo. Lolo cwaningo umzila womsingathi: ikheli elilodwa, elihambisana nesiqalo esinakho konke okukodwa. Kubalulekile ngoba izinqumo zomzila zisebenzisa isiqalo eside esihambisanayo, ngakho /32 ingadlula /24 noma umzila ozenzakalelayo ngaphandle kokushintsha noma yimuphi wabo. Ukuthi lokho kuyisihloko esiqaphelayo noma ukuphazamiseka kwesikhathi esizayo kuncike ekutheni ubiza liphi ikheli nokuthi ngubani oligcinayo.

Ikheli elilodwa, ucwaningo olulodwa ethebuleni

Umzila womsingathi we-IPv4 uthwala isiqalo /32 kanti umzila womsingathi we-IPv6 uthwala /128, okusho ukuthi ucwaningo lungahambisana ncamashi nekheli elilodwa lendawo. Akukho okunye ethebuleni okunyakazayo: isixhumanisi esincane esimbozayo nomzila ozenzakalelayo kuhlala lapho bekukhona. Ucwaningo oluncane luyanqoba kulelo kheli ngoba isiqalo salo side, hhayi ngoba lwengezwe kamuva.

Leso simo senza umzila womsingathi ube isihloko esihle kanye nomkhuba omubi. Amacwaningo amabili e-/32 abiza umnyango wangaphambili wensiza awakubambi ikheli laso lesibili, ikheli laso le-IPv6 noma ikheli elithuthela kulo ngenyanga ezayo. Ithebula eligcwele amacwaningo ekheli elilodwa angachazwanga ngokuvamile lisho ukuthi othile wayelokhu eqopha eduze kwesinqumo sesixhumanisi esincane esikhundleni sokuthatha isinqumo. Qala ngokufunda ubude besiqalo, bese ubuza ukuthi ucwaningo kufanele luvikele ini.

Funda ucwaningo kusukela kuklayenti ukuya ngaphandle

Qala kumshini onenkinga, ngoba ikheli elifanayo lingahlelwa ngendlela ehlukile kukhompyutha ephathwayo nasesangweni elingaphambili kwayo. Buza i-kernel ukuthi iyiphi indlela eyayizokhetha yekheli eliqondile elisetshenziswa uhlelo lokusebenza, esikhundleni sokufunda ithebula kusukela phezulu. Impendulo ihlanganisa isixhumanisi kanye negxathu elilandelayo, okukanye ndawonye okuyisinqumo.

ip route get 203.0.113.25
ip -6 route get 2001:db8:4::25
ip route show | grep -F 203.0.113.25
Find-NetRoute -RemoteIPAddress 203.0.113.25

Phinda umbuzo womndeni wamakheli okhethwa uhlelo lokusebenza ngempela, ngoba iklayenti lingakhetha i-IPv6 futhi lidlule ngokuthula isihloko se-IPv4. Qhathanisa umphumela ngaphambi nangemva kokuba umhubhe unyuke, futhi gcina kokubili okuphumayo. Lokho kuqhathanisa kubonisa ukuthi iklayenti lengeze ucwaningo ngesikhathi sokuxhuma noma lwalukhona kakade.

Ucwaningo oluhlala njalo kanye nocwaningo lwesikhathi sokusebenza kwehluleka ngendlela ehlukile. Olwesikhathi sokusebenza luyanyamalala nesikhathi somhlangano, kuyilapho oluhlala njalo ludlula ekuqaliseni kabusha futhi luqhubeka nokuthumela ithrafikhi esangweni elingasekho.

Isihloko sephoyinti lokugcina kanye nogibe lokubuyela

Amaklayenti e-VPN ngokuvamile afaka umzila womsingathi oya ekhelini langaphandle lesiphakeli ngokusebenzisa isango lokuqala ngaphambi kokuhlanekezela umzila ozenzakalelayo. Ngaphandle kwalolo cwaningo amaphakethe abethelwe ayeyothunyelwa phakathi komhubhe abazama ukuwukha, futhi uxhumano lwaluzozungeza kuze kuphele isikhathi.

Ugibe luvela lapho izixhumanisi ezincane ezamukelwe zomhubhe zihlangana ngalelo kheli lephoyinti lokugcina, noma lapho iphrofayela yesibili yengeza umzila obanzi kamuva. Khona-ke ucwaningo lwephoyinti lokugcina luyahlulwa yisiqalo eside futhi isikhathi somhlangano siyawa ngokushesha lapho siqala ukudlulisa ithrafikhi. Ukubhala ikheli lephoyinti lokugcina eceleni kwezixhumanisi ezincane ezamukelwe kuyindlela eshibhe kakhulu yokuqaphela ukungqubuzana ngaphambi kwabasebenzisi. Kuchaza futhi ukuthi kungani iphrofayela efanayo isebenza kusuka kunethiwekhi eyodwa yehluleke kwenye.

Qinisekisa indlela esetshenziswa uhlelo lokusebenza ngempela

I-ping ephumelelayo egameni lomsingathi iwubufakazi obuthaka lapho uhlelo lokusebenza luxhuma nekheli elihlukile noma umndeni ohlukile. Qinisekisa inhlanganisela eqondile yekheli, umndeni, imbobo kanye nesixhumanisi, kusukela kumshini osebenzisa iklayenti.

ip route get 203.0.113.25
sudo nft list ruleset | grep -A 4 'chain output'
curl -sS --max-time 8 -o /dev/null -w '%{remote_ip}
' https://app.example.net

Uma indlela ingalungile, nquma ukuthi isidingo siyinethiwekhi noma ikheli elilodwa ngaphambi kokuhlela noma yini. Isidingo sekheli elilodwa sithethelela umzila womsingathi onombono kanye nomnikazi; insiza enamakheli azungezayo idinga umzila osuselwe esizindeni noma isinqumo sesixhumanisi esincane esithembekile.

Susa amacwaningo angasahambisani nendawo yangempela futhi ubhale lawo uwagcinayo. I-/32 engachazwanga ayikwazi ukuhlukaniswa nepheleke ngemva kwezinyanga ezintathu, futhi umuntu olandelayo uzoyisusa engazi ukuthi yini eyayincike kuyo.

Izihloko ezihlobene