Umthetho we-MSS uyasebenza ku-router, kodwa awufinyeleli ku-Squid
Sebenzisa umqondo we-MTU kumaxhumano e-TCP ahlukene avulwa i-proxy, esikhundleni sokucabanga ukuthi wonke amaphakethe adlula ku-FORWARD.
Umlawuli wengeza i-TCPMSS clamping ku-FORWARD. Ukuhamba kwedatha okuqondisiwe kuyathuthuka, kodwa ukulanda nge-Squid yasendaweni kusalinda. Ukuxhumana kwe-proxy newebhusayithi akukona nje ukuxhumana kwe-TCP komsebenzisi okudlula kulolo chungechunge.
Ku-proxy evamile eqeda ukuxhumana, ukuxhumana ohlangothini lomsebenzisi kuphela endaweni. I-proxy yakha ukuxhumana kwe-TCP kwesibili okuya emthonjeni. Ku-Linux, amaphakethe enzelwe lokho kuxhumana alandela indlela yokuphuma yasendaweni.
Ngakho-ke umthetho we-FORWARD kuphela ungasebenza ngokugcwele futhi usaphuthelwa i-handshake okwakufanele ilungiswe. Dweba ukuxhumana kwangempela kanye nendlela ye-SYN ngaphambi kokukhetha i-hook. Ama-container noma izindawo zamagama ahlukene zingengeza esinye isigaba esihambayo, ngakho indawo efanele incike ekutheni inqubo isebenza kuphi.
Ungafaki inombolo ye-PMTU ngqo ku-MSS
I-MTU yendlela iwusayizi wephakethe le-IP. I-TCP MSS ichaza umthwalo we-TCP futhi kufanele ibale ama-header afanele. Ngokufanayo, ubude bomthwalo we-ping akubona ubude obugcwele bephakethe le-IP. Ukwengezwa okwaziwayo kwamabhayithi angu-28 kuhlotshaniswa nokuhlelwa okuyisisekelo kwe-IPv4 ICMP echo, hhayi wonke umndeni wamakheli noma i-encapsulation.
Ithagethi ye-TCPMSS ibhala amanani acacile kanye nokuvinjelwa kwe-PMTU. Ukuvinjelwa kusancike olwazini lwe-MTU lwendlela; akubona ubufakazi bokuthi ukutholakala kwendlela kunempilo, futhi akubona esikhundleni sokuvumela imilayezo ye-ICMP edingekayo.
Fanisa futhi uphawu nombono. I-handshake eqediwe elandelwa ukuma ekudluliseleni okukhulu kungase kuthethelele ukuphenywa kosayizi wephakethe. Ama-SYN aphindaphindiwe angenampendulo noma i-reset esheshayo adinga incazelo ebanzi; ukwehluleka kwamaphakethe amancane akufakazeli isigaba sedatha esikhulu kakhulu.
Gcina uhlukanisile emlandweni ukuxhumana okuqondile okusebenzayo nokuxhumana kwe-proxy okwehlulayo. Kungasebenzisa imithombo, izindlela kanye ne-encapsulation ehlukene, ngisho kusuka emshinini owodwa.