I-WireGuard iyama: umkhawulo we-MTU noma umthetho wokudlulisa ongekho?
Noma yini engale kwesiphakeli iyinkinga yokudlulisa noma yendlela yokubuya. Izicelo ezincane ezisebenzayo kuyilapho ezinkulu zima wuphawu losayizi wephakethe.
Umkhuba uwukwehlisa i-MTU ngokushesha uma i-WireGuard iqala ukuziphatha kabi, futhi lowo mkhuba ufihla enye iphutha. Isango elingadlulisi kanye nendlela engathwali amaphakethe amakhulu kukhiqiza amaphethini ahlukanisekayo: elinye lihluleka kuzo zombili izinhlangothi nakho konke usayizi, elinye liyasinda ezicelweni ezincane bese lifa kwezinkulu. Thola ukuthi yiluphi uhlobo onalo ngaphambi kokushintsha noma iyiphi inombolo. Ukuhlola akubizi futhi kususa ingxenye yezizathu ezingaba khona.
Amaphutha amabili, izimo ezimbili ezihlukene
Inkinga yokudlulisa ibonakala ngokushesha ngemva kwesiphakeli. Ukuxhawula kuyaphumelela, ikheli lomhubhe liyaphendula, futhi akukho lutho ngemuva kwesango olungafinyeleleka ngisho ngesicelo esincane. Iphakethe lafinyelela isiphakeli futhi alizange lidluliswe, noma impendulo yayingenayo indlela yokubuya.
Inkinga yosayizi ibonakala kuphela ngaphezu komkhawulo. I-DNS, ukuxhawula kwe-TCP kanye nocingo oluncane lwe-API kuyasebenza, kuyilapho ukulanda ifayela noma impendulo enkulu kulenga. Amaphakethe angenelele ahamba ukusuka komunye umkhawulo kuya komunye, futhi lawo anganelanga alahlwa endaweni ethile ngaphandle kombiko owusizo.
Lezincazelo zikhomba kubantu abahlukene namafayela wokumisa ahlukene, yingakho ukukala uhlobo kunenzuzo enkulu kunokuqagela. I-ping eyodwa esangweni ayikwazi ukuhlukanisa.
Susa ukudlulisa ngaphambi kokunciphisa noma yini
Hlola indawo engale kwesango, hhayi isango uqobo. I-ping ekheli lomhubhe wesiphakeli ifakazela kuphela ukuthi isixhumi sisebenza nokuthi ufinyelela umshini oqeda umhubhe. Ithrafikhi yomakhalathi obanzi incike ekutheni ukudlulisa kwe-IP kuvuliwe kulo lowo mshini nase-firewall evumela ukugeleza okudlulisiwe. Kokubili kufanele kube yiqiniso, futhi uma okukodwa kungelona iqiniso kuvela ukuthula okufanayo.
Umzila wokubuya ubaluleke ngokufanayo. Uma umakhalathi wendawo ungazi ukuthi ufinyelela kanjani ikheli lomhubhe womthengi, isicelo siyeza futhi impendulo inyamalale, futhi umthengi ubika isikhathi esiphelile esibonakala sifana nokudlulisa okulahiwe.
Lapho umklamo usebenzisa ukuhumusha kwamakheli, umthetho wokuhumusha uyingxenye yalowo mzila wokubuya. Ukuwususa ngenkathi ulandela inkinga ye-MTU kuguqula umklamo osebenzayo ube ngowophukile, ngakho funda imithetho ekhona ngaphambi kokuyihlela.
Kala lapho ukuphuka kuqala khona
Qala ngokufunda isimo sokudlulisa kanye nemithetho yokuhlunga. Lokhu kuwukuhlola kokufunda kuphela futhi kuphendula umbuzo oshibhile:
sysctl net.ipv4.ip_forward
sudo iptables -S FORWARD
ip route get 10.30.0.9Bese uhlola osayizi ngebiti ye-don’t-fragment, kusukela kumthengi, ubheke isiphathi esingale kwesango:
ping -M do -s 1200 10.30.0.9
ping -M do -s 1400 10.30.0.9Uma ukuhlola kokuqala kusebenza futhi kwesibili kuhluleka ngephutha lokuhlukanisa, indlela ikutshela usayizi wayo osebenzisekayo. Uma kokubili kungasebenzi, ubheka ukudlulisa noma umzila, futhi i-MTU ayisona isiguquli okufanele sishintshwe.
| Observation | Points toward | Where to look |
|---|---|---|
| Nothing beyond the gateway works | Forwarding or return route | Forwarding flag, filter rules, routing table |
| Small works, large stalls | Packet size on the path | Tunnel MTU and the link underneath |
| Only names fail | DNS resolution | The resolver configured for the tunnel |
| Works sometimes | Multiple paths or state expiry | Flow selection and NAT state |
Lungisa ungqimba obufakazele
Uma ukudlulisa kuyiphutha, ukulungiswa umthetho wokudlulisa noma umzila, oshiwo ngobubanzi obuncane njengoba umklamo uvumela. Uma usayizi kuyiphutha, ukulungiswa i-MTU ebheka ukufakwa esikhwameni kuleyo ndlela ethile, esetshenziswa kusixhumi esidingayo hhayi kuwo wonke ama-adapter emkhumbini.
Noma kukuphi, ngemva kwalokho phinda umsebenzi ofanayo uye endaweni efanayo. Uma ukudluliswa okukhulu kwasekuqaleni manje kuqedwa, ushintsho lubhekane nongqimba obuhlulekayo. Uma kwaba ngukuhlola okuncane kuphela okwathuthuka, welapha uphawu futhi umkhawulo wangempela usakhona.
Bhala ukuthi yiluphi uhlobo olwabonayo ngaphambi koshintsho. Lowo mugqa owodwa, oqoshwe eceleni kokulungiswa, yiwo ovimbela umuntu olandelayo ukwehlisa i-MTU eyayingakaze ibe yinkinga.