Kungani i-traceroute ifa ohlangothini olulodwa ngomhubhe we-VPN

Umphumela we-traceroute oqedwa ohlangothini olulodwa futhi uphrinta imigqa yezinkanyezi kolunye ubonakala njengokudlulisela okungalingani, futhi ngokuvamile akunjalo. I-hop ngayinye ekhonjisiwe idinga ukuthi uphenyo lufike, ukuthi i-router inqume ukuphendula futhi impendulo ibuye futhi ihambisane nophenyo. Phula noma yisiphi salesi sibopho futhi umugqa uba inkanyezi ngenkathi umhubhe uqhubeka uthwala idatha.

Umkhondo uwubufakazi mayelana nokuxilonga ngaphambi kokuba ube ubufakazi mayelana nokuthutha. Umbuzo ofanele ukubuzwa ukuthi yisiphi kulezi zibopho ezintathu esihlulekile, futhi impendulo ivela kumaphakethe, hhayi esimweni somphumela.

Inkanyezi iyimpendulo engekho, hhayi i-hop engekho

I-traceroute ihamba ngaphandle ngokuthumela izivivinyo ezinokuphelelwa kwesikhathi kwe-TTL ku-router eyodwa eqhele ngaphezulu kumjikelezo ngamunye. I-router elahla uphenyo oluphelelwe yisikhathi kufanele ibuyise umlayezo we-ICMP Time Exceeded ozibiza ngokwayo, futhi ithuluzi liphrinta lelo gama. Lokho ithuluzi elikulindile ngempela ukuthi lowo mlayezo ufike phakathi nesikhathi esibekiwe. Uma i-router iphendula isuka kwelinye ikheli lomthombo, inciphisa ukuthi ivame kangakanani ukukhiqiza amaphutha noma ilahle uphenyo ngaphandle kwezwi, umjikelezo awukhiqizi lutho oluphrintwayo.

Akukho kule miphumela esho ukuthi indlela eya phambili iphukile. Inkanyezi ingumbiko mayelana neposi elingaphendulwanga, hhayi mayelana nomgwaqo ongenalutho.

Indlela yophenyo inquma ukuthi uzohlangana nasiphi isihlungi

Indlela ezenzakalelayo ku-Linux ngokuvamile iyimbobo yendawo yokugcina ye-UDP enenombolo ephezulu, i-tracert ku-Windows ithumela umsindo we-ICMP, futhi i-Linux ingatshelwa ukuthi isebenzise i-ICMP noma i-TCP esikhundleni salokho. Ngayinye yazo ibonakala njengohlobo oluhlukile lwethrafikhi kumlilo ovimbayo onesimo noma eqenjini lokuphepha lefu. Ukuqhathanisa umkhondo we-UDP ovela kolunye uhlangothi nomkhondo we-ICMP ovela kolunye kuqhathanisa izivivinyo ezimbili ezihlukene. Qinisa indlela, umndeni wamakheli, ikheli lomthombo kanye nesikhathi esibekiwe ngaphambi kokubiza imiphumela ngokuthi umehluko.

Ukuze uqhathanise ngokulingana, sebenzisa umkhondo kusuka kubasingathi abathwala ngempela ithrafikhi, hhayi kusuka kusango elidlulisela egameni labo. Umkhondo okhiqizwe i-router usebenzisa ikheli lomthombo nengqubomgomo yokuphuma yayo, okungase kube nzima ukudlula noma yini ebonwa yiklayenti. Bhala umyalo oqondile ukuze umuntu olandelayo akwazi ukuwphinda.

Inani lesikhathi esibekiwe iyiyo enye ingxenye yocwaningo, futhi kulula ukuyishiya ngaphandle kumanothi. Ukulinda imizuzwana emibili endleleni egcwele kubika izinkanyezi lapho ukulinda imizuzwana emihlanu kubika ama-hop. Gcina inani lifana kuzo zonke izinhlelo ukuze ukuqhathanisa kuqhubeke kumayelana nenethiwekhi.

Indlela yokubuya iwumzila wayo

Iphutha le-ICMP iphakethe elijwayelekile elinomthombo nendawo yalo, futhi lidinga umzila wokubuyela kumlandeli. Uma inqubomgomo yomhubhe ithwala iziqalo ze-LAN kodwa hhayi ikheli le-router elikhiqize iphutha, umlayezo uphuma ngendlela engenakukufinyelela. Ukuhlunga kwezimpendulo kungayilahla ngisho lapho umzila ukhona, ngoba iphakethe livela ekhelini elingalindelekile kusixhumi esingalindelekile. Lokhu kungukungavumelani endaweni yokuxilonga, hhayi ukwehluleka kohlelo lokusebenza.

Ukunweba yonke into ekhethiwe kuze kuqedwe umkhondo kwenza isithombe sibe sihle futhi inqubomgomo ibe yimbi. Lungisa ikheli elithile lokuxilonga, noma wamukele inkanyezi bese uhlola uhlelo ngendlela ehlukile.

Qinisekisa umhubhe ngesicelo sangempela

Ukuxhawulana kwe-TCP embotsheni yesevisi uqobo kuhlola ukudlulisela, ukuhlela umzila wokubuya nokuhlunga ohlangothini olubalulekile. Imiyalo engezansi isebenza kuzo zombili iziphetho futhi iqhathanisa ukuthi uhlangothi ngalunye lungavula ini. Shintsha imbobo yesevisi negama lesixhumi somhubhe kusuka ekubekeni kwakho.

traceroute -I -n -w 2 203.0.113.40
traceroute -T -p 443 -n -w 2 203.0.113.40
curl -sS -o /dev/null -w '%{http_code} %{time_total}\n' --max-time 5 http://203.0.113.40:8080/health
ss -tan state established

Qala ngokufunda izinhlelo ezimbili ze-traceroute: uma uhlelo lwe-ICMP lukhombisa ama-hop kodwa olwe-TCP lungakhombisi, umehluko usendleleni, hhayi emzileni. Bese uthatha umphumela we-curl njengempendulo yezinga lohlelo, ngoba ukushintshana okuqediwe ngekhodi yesimo enengqondo kusho ukuthi zombili izindlela zokuhamba nokubuya ziyasebenza kuthrafikhi yangempela. Uhlu lwamasokhethi lukhombisa ukuthi uxhumano lwakhiwe noma cha, okuyinto akukho mkhondo ongakutshela yona.

Umhubhe othwala isikhathi sokusebenzisana kuzo zombili izinhlangothi ngenkathi i-traceroute eyodwa iphrinta izinkanyezi uphilile futhi awuthandeki ezithombeni kuphela. Gcina umphumela wemiyalo wohlangothi ngalunye njengomlando, futhi ubheke ama-hop angekho njengombuzo ovulekile mayelana nokuxilonga, hhayi isinqumo mayelana ne-VPN.