Kungani iklayenti le-Tailscale ku-Linux liziba imizila yesubneti emenyezelwe

Usukhompyutha ephathekayo ye-Linux, tailscale status ibala eminye imishini, futhi i-NAS ku-10.80.0.25 isaphelelwa isikhathi. I-tailnet inempilo, irutha yesubneti iku-inthanethi, futhi akukho lutho emiphumeleni yeklayenti olusho ukuthi kungani i-LAN engemva kwayo ingafinyeleleki. Umhlahlandlela ongezansi usuka kuleso sibonakaliso uya ngaphandle: ifulegi kule klayenti, bese kuba isimemezelo kurutha, bese kuba ukugunyazwa, bese kuba inqubomgomo, futhi bese kuba yindawo uqobo. Wonke amasango ehluleka ngesikhathi esifanayo, ngakho ukulandelana kubaluleke kakhulu kunezinhlelo zomyalo.

Okwenqatshwa yiklayenti le-Linux ukuze kufakwe

Amaklayenti e-Tailscale ku-Linux awamukeli imizila yesubneti emenyezelwe ngaphandle uma uwacela. Ngaphandle kwaleso silungiselelo iklayenti lihlanganyela ne-tailnet futhi lifinyelela amakheli ontanga, kanti yonke imvume yokuqala emenyezelwa yirutha ihlala ingasetshenziswa. Inani lokungenzi lutho lenziwe ngamabomu, futhi yikho lokho okwenza isibonakaliso sibonakale njengerutha ephukile hhayi njengesinqumo sendawo.

Lapha izinto ezimbili ezihlukene zibizwa ngokuthi ukuhamba kwemizila, futhi kube yinye kuphela okwakho. Irutha imemezela imvume yokuqala ku-tailnet; umshini wakho unquma ukuthi uyifaka yini. Ukwehluleka kwesinye sazo kunikeza isikhathi esifanayo sokuphela, ngakho ukuqagela kuchitha intambama. Thola ukuthi yiluphi uhlangothi olwenqabayo ngaphambi kokushintsha noma yini.

Vula ukwamukela imizila kule mishini

Setha intando kuklayenti, bese ubheka ukuthi yini eshintshile esikhundleni sokucabanga ukuthi umyalo usebenzile. Isimo samanje sisebenzisa isilungiselelo ngaphandle kokuphinda ukuhamba kokungena, okubalulekile uma uphakathi kwesikhathi somhlangano.

sudo tailscale set --accept-routes
tailscale status
ip route show table 52

I-Tailscale ifaka imizila eyamukelwe kuthebula layo ku-Linux, ngakho imvume yokuqala evela kuthebula 52 iwubufakazi obuqondile bokuthi le klayenti lifake isimemezelo. Uma ububanzi bakho bungekho kulelo thebula, yima: inkinga ingeyasekhaya futhi akukho msebenzi kurutha ozoyishintsha.

Amaklayenti amadala aveza intando efanayo njengefulegi lomyalo wokungena, ngakho sudo tailscale up --accept-routes iyisixazululo esilandelayo uma tailscale set ingekho. Yisebenzise esikhundleni sokuhlela imizila ngesandla, ngoba i-daemon ibhala kabusha ithebula layo futhi ukuhlela kwakho kunyamalala ekuxhumaneni okulandelayo. Hlola inguqulo ngaphambi kokukopisha umyalo kusihloko esidala.

Hlola isimemezelo nokugunyazwa ngokwehlukana

Kurutha yesubneti imvume yokuqala kufanele imenyezelwe, futhi i-kernel kufanele idlulise amaphakethe phakathi kwezixhumanisi. Ukumemezela ngaphandle kokudlulisa kukunika umzila ogunyaziwe ogedla ithrafikhi ngokuthula, futhi lesi yisilungiselelo esivame ukungaqedwa.

sudo tailscale up --advertise-routes=10.80.0.0/24
sysctl net.ipv4.ip_forward
ip -br addr

Qhathanisa imvume yokuqala emenyezelwe nekheli ozama ngempela ukulifinyelela, uhlamvu ngohlamvu. Irutha ememezela i-10.70.0.0/24 ayisho lutho nge-NAS ku-10.80.0.25, futhi ukungafani akubonakali kuyo yonke imiphumela yesimo ngoba zombili izinombolo zibonakala zithembekile ngokulinganayo. Imibiko eminingi yomzila ophukile iphela lapha. Lungisa isimemezelo ngaphambi kokuthinta noma yini engezansi.

Ukugunyazwa kuwukuvimbela okulandelayo, futhi kulula ukukweqa uma irutha ilungiswe kusuka ku-shell. Isimemezelo kufanele senziwe sisebenze kuleyo divayisi kukhonsoli yokuphatha ngaphambi kokuba eminye imishini iyisebenzise. Ukwamukela imizila kuklayenti akugunyazi lutho futhi akweqi umthetho wokufinyelela.

Hlola ikheli langasese ngaphambi kwegama lomsingathi

Ukuxhumana okuphumelelayo nekheli le-tailnet likarutha uqobo kufakazela ukuthi i-tailnet iyasebenza, lokho obukwazi kakade. Ukuhlolwa okusizayo yisevisi oyidinga ngempela, kuqala mayelana nekheli langasese, ukuze ukwehluleka kwe-DNS kungakwazi ukuzenza kube ukwehluleka kokuhamba kwemizila.

tailscale ping 10.80.0.1
ping -c 2 10.80.0.25
nc -vz 10.80.0.25 445
getent hosts nas.internal.example

Uma ikheli liphendula kodwa igama lomsingathi lingaphenduli, unenkinga yokuxazululwa kwamagama futhi kufanele uyeke ukuyithatha njengenkinga yomzila. Uma kokubili kungaphenduli, buyela emuva isigaba futhi uqinisekise ukuthi isimemezelo sihlanganisa ikheli. Ukwehluleka kokubili kubonakala kufana kusuka kuhlelo lokusebenza futhi kulungiswa ezindaweni ezihlukene.

Ukuhlolwa kwasekhaya okukodwa kufanelekile ngaphambi kokusola i-tailnet. Uma i-LAN yakho yamanje isebenzisa imvume yokuqala efanayo nesubneti ekude, i-kernel ikhetha umzila oxhunywe ngqo futhi ithrafikhi ayikaze ishiye umshini; yilokho okwenzeka uma indlu nehhovisi kokubili kukhetha i-192.168.1.0/24.

Kungani ifulegi leklayenti lingesona isilungiselelo serutha

Lena imisebenzi ehlukene enezidingo ezihlukene, futhi ukukopisha ifulegi leklayenti kurutha yikho okwenza i-tailnet esebenzayo ithole umjikelezo. Umshini omenyezela imizila udinga ukudluliswa, imithetho yodonga lomlilo evumela ithrafikhi edlulisiwe, nesinqumo sokuthi yikuphi ukuthi imemezele. Akukho kulokhu okushiwo yi---accept-routes.

Idokhumenti yamarutha esubneti ixwayisa ngokungavuli ukwamukela imizila kumarutha ayisigelekeqe amenyezela imvume yokuqala eyodwa, ngoba i-node elindile ingaphusha ithrafikhi esevele ingeyasekhaya ngaphandle nge-node esebenzayo. Uma usebenzisa ipheya le-HA, thatha lokho njengomkhawulo wokuklama hhayi umbhalo ongezansi, futhi unqume ukuthi iyiphi i-node ephethe imvume yokuqala ngaphambi kokuyigunyaza kuzo zombili. Kurutha eyodwa isexwayiso esifanayo sifundwa njengesikhumbuzo sokuthi ukwamukela kungokwamaklayenti, hhayi komshini omenyezelayo. Bhala phansi ukuthi yisiphi isango ebelivaliwe.

Kuklayenti elijwayelekile ukulandelana kuphela ngokuhlolwa kohlelo lokusebenza okwehlulekile ekuqaleni. Kurutha, buyekeza ukudluliswa, isimemezelo, ukugunyazwa nodonga lomlilo ngalolo kulandelana, ngoba okokuqala okungekho kukhiqiza isikhathi esifanayo sokuphela owakuqala ngaso.