Isixhumanisi esingenantambo njengeyesibili: ukushintsha okuhlelwe noma ingxenye eyodwa?

Izakhiwo ezimbili, umsakazo wephuzu-kuya-phuzu kanye ne-VPN ye-inthanethi engaba indlela yesibili. Ngaphambi kokuba isipele sibe okuzenzakalelayo, umbuzo owodwa unquma cishe konke okunye: yini okufanele isinde — ukufinyeleleka kwe-IP phakathi kwamaxhumanisi amancane ahlukene noma ingxenye eyodwa ye-Ethernet eyabiwe? Ukuthi umsakazo uziphatha njengekhebula akusona isizathu sokudlulisa yonke ifremu yokusakaza nge-inthanethi. Phendula umbuzo kuqala, ngoba izimpendulo ezimbili zidinga ukulawulwa kwemijikelezo okuhlukile, izivivinyo zempilo ezihlukile kanye nomqondo ohlukile wokuthi ukubuyiswa kusho ukuthini.

Nquma ukuthi yini okufanele isinde ekuphazamisekeni

Bhala uhlu lwezinhlelo ezifanele ziqhubeke zisebenza futhi qaphela ukuthi zincike ekufinyelelekeni kwe-Layer 3 noma ekusondelaneni kwe-Layer 2. Ukwabelana ngamafayela, ukuxhumana kwesizindalwazi kanye nezinsizakalo zewebhu ngokuvamile zikhathazeka ngezindlela kuphela; izimiso zokuthola, eminye imikhiqizo yamaqembu kanye nakho konke okulindele isizinda esisodwa sokusakaza kukhathazeka ngokusondelana. Isipele esibuyisela uhlobo olungalungile lokufinyeleleka sakha indawo exhumeke ngokobuchwepheshe kodwa engenamsebenzi empeleni.

Bhala lolo hlu futhi ulunamathisele kumklamo, ngoba impendulo ivamise ukusuka ngokushesha lapho umnikazi wohlelo lokuqala ezwa ngomdibaniso omusha.

Ukushintsha okuhlelwe: amagama ayisihloko amabili, indlela eyodwa ethandwayo

Ngamagama ayisihloko ezindawo ahlukene, isipele siba inkinga yokuhlela izindlela. Isipheqa-ndlela ngasinye sinendlela ethandwayo edlula kumsakazo nendlela engathandwa kangako edlula kumhubhe, futhi lapho umsakazo uyeka ukuletha ithrafiki kuhoxiswa indlela ethandwayo. Uhlangothi olubhekene nalo ludinga indlela yalo yokubuya, futhi izinhlangothi zombili kufanele zivumelane ukuthi iyiphi indlela ethandwayo ohlangothini ngalunye, ukuze ithrafiki ingathathi indlela ende ohlangothini olulodwa kuphela.

ip route show | grep -E '10.44\.|10.45\.'
ip route get 10.45.0.10
ip route get 10.45.0.10 from 10.44.0.1

Funda umyalo wesithathu njengowesibili: umthetho wenqubomgomo, ithebula lesibili noma isinqumo esisekelwe emthonjeni kungathumela ithrafiki elivela kwisixhumanisi esisodwa ngendlela ehlukile kunelinye, futhi ukusesha okuzenzakalelayo okukodwa kukufihla lokho.

Ukushintsha okuxhunywe ngebhuloho: ingxenye eyodwa, indlela eyodwa evimbayo

Uma ukusondelana kudingeka ngempela, isipele kufanele sithwale amafremu e-Ethernet, okuyinto umhubhe we-IP ohleliwe angenzi. Amanye amaplatifomu asekela ukuxhumanisa isixhumanisi se-VPN ngebhuloho engxenyeni yasendaweni, futhi lezo zixhumanisi ziba amalungu ebhuloho nemiphumela ehambisana nayo. Izindlela ezimbili ze-Layer 2 ezidlulisa ngesikhathi esisodwa zakha umjikelezo, ngakho umklamo udinga isihlahla esinwebekayo esimboza zombili izindawo kanye nesitatimende esicacile sokuthi iyiphi indlela okufanele ivimbe.

Lesi akusona isikhwama sokumaka, isinqumo somklamo esibalulekile, futhi imibhalo yamabhuloho yeplatifomu yakho, isibonelo umbono jikelele wamabhuloho we-pfSense, iyindawo lapho uqinisekisa khona ukuthi ilunga le-VPN libamba iqhaza kuphi ngempela. Ukuvula ukukhetha kwesihlahla esinwebekayo kudivayisi eyodwa engahlobene akufakazeli lutho ngokuhlelwa kusukela ekupheleni kuya ekupheleni.

Qapha umngcele obalulekile

Umsakazo onamandla, isixhumanisi esikhuphukile kanye nomhubhe onempilo kahle ngakunye kuchaza iqiniso lasendaweni. Akukho kukho okufakazela ukuthi iphakethe elivela kwesinye isakhiwo lafika kumsingathi kwesinye, futhi lelo yilo iqiniso kuphela okufanele ukulawula kokushintsha kusebenze kulo. Qapha umgomo ongale kwezomgwaqo okude uma inqubomgomo ivuma, futhi qapha izinhlangothi zombili ngokwehlukana ukuze ukwehluleka okungalingani kubonakale.

ping -c 3 -W 2 10.45.0.10
ip -brief link show dev wlan0
ip route get 10.45.0.10

Gcina ukuhlola kushibhile futhi kunomkhawulo: isikhathi esifushane, inani elincane kanye nesikhathi sokuphela esihambisana nokubekezelela kohlelo. Isiqaphi esincike ngokwaso emkhondweni esiwuhlolayo sizobika impumelelo kuze kube yisikhathi lapho siyeka ukubika noma yini.

Zijwayeze izinhlangothi zombili ngaphansi komthwalo

Ungakopishi umgomo owodwa wokuhlangana ovela kutopoloyi yomunye umuntu. Isikhathi sokuthola, ukuhlangana kwendlela noma kwebhuloho, ukulungela komhubhe kanye nokubuyiswa kohlelo ngakunye kunomthelela wakho wokubambezeleka, futhi isamba kumathuluzi akho iyona nombolo kuphela ebalulekile. Zijwayeze ngesikhathi ithrafiki emele ikhona, ukuze isilinganiso sihlanganise imigqa namaseshini akhona ekukhiqizeni.

sudo ip link set dev wlan0 down
ip route get 10.45.0.10
sudo ip link set dev wlan0 up
ip route get 10.45.0.10

Hlola ukubuyiswa ngokucophelela okufanayo nokwehluleka. Umsakazo ongazinzile ovelayo futhi onyamalalayo uzodonsa ithrafiki emuva naphambili uma umqondo wokuthanda ungenakho ukuthulisa, futhi abasebenzisi bakubona njengokubi kakhulu kunokuphazamiseka okukodwa okumsulwa. Rekhoda indlela ekhethiwe esigabeni ngasinye, izicelo ezintsha eziphumelele kanye nokwenzeka kumaseshini ayevuliwe lapho indlela ishintsha. Yilowo mbhalo oguqula ikhebula lesibili lube inqubomgomo yokusebenza.