ืžืขืœื“ื•ื ื’ ืคื•ืŸ ื“ื™ ื ืขืฅ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ื˜ืขืจ NetworkManager 1.40.0

ื ืกื˜ืึทื‘ื™ืœ ืžืขืœื“ื•ื ื’ ืคื•ืŸ ื“ื™ ืฆื•ื‘ื™ื ื“ ืื™ื– ื‘ื ื™ืžืฆื ืฆื• ืคืึทืจืคึผืึธืฉืขื˜ืขืจืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื ืขืฅ ืคึผืึทืจืึทืžืขื˜ืขืจืก - NetworkManager 1.40.0. ืคึผืœื•ื’ื™ื ืก ืคึฟืึทืจ ื•ื•ืคึผืŸ ืฉื˜ื™ืฆืŸ (Libreswan, OpenConnect, Openswan, SSTP, ืขื˜ืง) ื–ืขื ืขืŸ ื“ืขื•ื•ืขืœืึธืคึผืขื“ ื•ื•ื™ ืึท ื˜ื™ื™ืœ ืคื•ืŸ ื–ื™ื™ืขืจ ืื™ื™ื’ืขื ืข ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืกื™ื™ืงืึทืœื–.

ื”ื•ื™ืคึผื˜ ื™ื ืึธื•ื•ื•ื™ื™ืฉืึทื ื– ืคื•ืŸ NetworkManager 1.40:

  • ื“ื™ nmcli ื‘ืึทืคึฟืขืœืŸ ืฉื•ืจื” ืฆื•ื‘ื™ื ื“ ื™ืžืคึผืœืึทืžืึทื ืฅ ื“ื™ "--ืึธืคืคืœื™ื ืข" ืคืึธืŸ, ื•ื•ืึธืก ืึทืœืึทื•ื– ืคึผืจืึทืกืขืกื™ื ื’ ืงืฉืจ ืคึผืจืึธื•ืคื™ื™ืœื– ืื™ืŸ ืฉืœื™ืกืœ ื˜ืขืงืข ืคึฟืึธืจืžืึทื˜ ืึธืŸ ืึทืงืกืขืก ื“ื™ ื”ื™ื ื˜ืขืจื’ืจื•ื ื˜ NetworkManager ืคึผืจืึธืฆืขืก. ืื™ืŸ ื‘ืึทื–ื•ื ื“ืขืจ, ื•ื•ืขืŸ ืงืจื™ื™ื™ื˜ื™ื ื’, ื•ื•ื™ื™ึทื–ื ื“ื™ืง, ื“ื™ืœื™ื˜ื™ื ื’ ืื•ืŸ ื˜ืฉืึทื ื’ื™ื ื’ ืกืขื˜ื˜ื™ื ื’ืก ืคึฟืึทืจื‘ื•ื ื“ืŸ ืžื™ื˜ ืึท ื ืขืฅ ืฆื•ื‘ื™ื ื“, ื“ื™ "nmcli ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’" ื‘ืึทืคึฟืขืœ ืงืขื ืขืŸ ืื™ืฆื˜ ืึทืจื‘ืขื˜ืŸ ืึธืŸ ืึทืงืกืขืก ื“ื™ ื”ื™ื ื˜ืขืจื’ืจื•ื ื˜ NetworkManager ืคึผืจืึธืฆืขืก ื“ื•ืจืš D-Bus. ืฆื•ื ื‘ื™ื™ืฉืคึผื™ืœ, ื•ื•ืขืŸ ืขืงืกืึทืงื™ื•ื˜ื™ื ื’ ื“ื™ ื‘ืึทืคึฟืขืœ "nmcli โ€”ืึธืคืคืœื™ื ืข ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ ืœื™ื™ื’ืŸ ...", ื“ื™ nmcli ื ื•ืฆืŸ ื•ื•ืขื˜ ื ื™ืฉื˜ ืฉื™ืงืŸ ืึท ื‘ืงืฉื” ืฆื• ื“ืขืจ ื”ื™ื ื˜ืขืจื’ืจื•ื ื˜ ืคึผืจืึธืฆืขืก ืฆื• ืœื™ื™ื’ืŸ ืึท ืงืฉืจ ืคึผืจืึธืคื™ืœ, ืึธื‘ืขืจ ื•ื•ืขื˜ ื’ืœื™ื™ืš ืจืขื–ื•ืœื˜ืึทื˜ ืฆื• ื“ื™ ืงืึธืจืึทืกืคึผืึทื ื“ื™ื ื’ ื‘ืœืึธืง ืคื•ืŸ ืกืขื˜ื˜ื™ื ื’ืก ืื™ืŸ ืฉืœื™ืกืœ ื˜ืขืงืข ืคึฟืึธืจืžืึทื˜. ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื ื•ืฆืŸ nmcli ืื™ืŸ ืกืงืจื™ืคึผืก ืฆื• ื“ื–ืฉืขื ืขืจื™ื™ื˜ ืื•ืŸ ื˜ื•ื™ืฉืŸ ืงืฉืจ ืคึผืจืึธื•ืคื™ื™ืœื–. ืฆื• ืึทืงื˜ืึทื•ื•ื™ื™ื˜, ื“ื™ ื‘ืืฉืืคืŸ ืคึผืจืึธืคื™ืœ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขืจืื˜ืขื•ื•ืขื˜ ืื™ืŸ ื“ื™ /etc/NetworkManager/system-connections Directory. # ืงืึทื ืคื™ื’ื™ืขืจ ืฉืคึผืึธืจืŸ ื˜ืขืงืขืก ืžื™ื˜ "600" ืจืขื›ื˜ (ื‘ืœื•ื™ื– ื‘ื ื™ืžืฆื ืคึฟืึทืจ ื“ื™ ื‘ืึทื–ื™ืฆืขืจ). umask 077 # ื“ื–ืฉืขื ืขืจื™ื™ื˜ ืึท ืคึผืจืึธืคื™ืœ ืื™ืŸ ืฉืœื™ืกืœ ื˜ืขืงืข ืคึฟืึธืจืžืึทื˜. nmcli - ืึธืคืคืœื™ื ืข ืงืฉืจ ืœื™ื™ื’ืŸ ื˜ื™ืคึผ ืขื˜ื”ืขืจื ืขื˜ ืžื™ื˜ ื ืึธืžืขืŸ ืžื™ื™ืŸ ืคึผืจืึธืคื™ืœ \ | tee /etc/NetworkManager/system-connections/my-profile.nmconnection # ื˜ื•ื™ืฉืŸ ื“ืขื ืคึผืจืึธืคื™ืœ nmcli โ€”ืึธืคืœื™ื ืข ืงืฉืจ ืžืึธื“ื™ืคื™ืฆื™ืจืŸ ืงืฉืจ.ืžืคึผื˜ืงืคึผ-ืคืœืึทื’ืก ืขื ื™ื™ื‘ืึทืœื“, ืกื™ื’ื ืึทืœ \ < /etc/ื ืขื˜ื•ื•ืึธืจืงืžืึทื ืึทื’ืขืจ/ืกื™ืกื˜ืขื-ืงืึธื ื ืขืงื˜ื™ืึธื ืก/ืžื™ื™ืŸ-ืคึผืจืึธืคื™ืœ.ื ืงืึธื ื ืขืงื˜ื™ืึธืŸ \ | tee /etc/NetworkManager/system-connections/my-profile.nmconnection~ mv /etc/NetworkManager/system-connections/my-profile.nmconnection~ \ /etc/NetworkManager/system-connections/my-profile.nmconnection # ื ืึธืš ืจื™ืจื™ื™ื˜ ืคึผืจืึธืคื™ืœ ืื•ื™ืฃ ื“ื™ ื“ื™ืกืง, ืจื™ืœืึธื•ื“ ื“ื™ ืกืขื˜ื˜ื™ื ื’ืก NetworkManager nmcli ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ ืจื™ืœืึธื•ื“
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ MPTCP (Multipath TCP), ืึท ืคืึทืจืœืขื ื’ืขืจื•ื ื’ ืคื•ืŸ ื“ื™ TCP ืคึผืจืึธื˜ืึธืงืึธืœ ืคึฟืึทืจ ืึธืจื’ืึทื ื™ื™ื–ื™ื ื’ ื“ื™ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ืึท ื˜ืงืคึผ ืงืฉืจ ืžื™ื˜ ื“ื™ ืขืงืกืคึผืจืขืก ืคื•ืŸ ืคึผืึทืงื™ืฅ ืกื™ื™ืžืึทืœื˜ื™ื™ื ื™ืึทืกืœื™ ืฆื•ื–ืืžืขืŸ ืขื˜ืœืขื›ืข ืจื•ืฅ ื“ื•ืจืš ืคืึทืจืฉื™ื“ืขื ืข ื ืขืฅ ื™ื ื˜ืขืจืคื™ื™ืกื™ื– ืคึฟืึทืจื‘ื•ื ื“ืŸ ืžื™ื˜ ืคืึทืจืฉื™ื“ืขื ืข IP ืึทื“ืจืขืกืขืก. ื ืขื˜ื•ื•ืึธืจืงืžืึทื ืึทื’ืขืจ ืงืขื ืขืŸ ืื™ืฆื˜ ืคื™ืจืŸ ื“ื™ IP ืึทื“ืจืขืกืขืก ืึทื“ื•ื•ืขืจื˜ื™ื™ื–ื“ ืึธื“ืขืจ ื’ืขื•ื•ื™ื™ื ื˜ ืื™ืŸ ื ืึธืš MPTCP ืคืœืึธื•ื–, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืงืึทื ืคื™ื’ื™ืขืจื™ื ื’ ื“ื™ ืึทื“ืจืขืกืขืก ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ, ืขื ืœืขืš ืฆื• ื•ื•ื™ ื“ื™ mptcpd ืคึผืจืึธืฆืขืก ื˜ื•ื˜ ืขืก. ื ืขื˜ื•ื•ืึธืจืงืžืึทื ืึทื’ืขืจ ืื•ื™ืš ืฉื˜ื™ืฆื˜ ืขื ื™ื™ื‘ืึทืœื™ื ื’ MPTCP ืื™ืŸ ื“ื™ ืงืขืจืŸ ื“ื•ืจืš ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ sysctl /proc/sys/net/mptcp/enabled ืื•ืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืœื™ืžืึทืฅ ืกืคึผืขืกื™ืคื™ืขื“ ื“ื•ืจืš ื“ื™ "ip mptcp ืœื™ืžืึทืฅ" ื‘ืึทืคึฟืขืœ. ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืžืคึผื˜ืงืคึผ ืคึผืจืึทืกืขืกื™ื ื’, ืึท ื ื™ื™ึทืข ืคืึทืจืžืึธื’ "ืงืึทื ืขืงืฉืึทืŸ.ืžืคึผื˜ืงืคึผ-ืคืœืึทื’ืก" ืื™ื– ืคืืจื’ืขืœื™ื™ื’ื˜, ื“ื•ืจืš ื•ื•ืึธืก ืื™ืจ ืงืขื ืขืŸ ื’ืขื‘ืŸ ืžืคึผื˜ืงืคึผ ืื•ืŸ ืกืขืœืขืงื˜ื™ืจืŸ ืึทื“ืจืขืก ืึทืกื™ื™ื ืžืึทื ื˜ ืคึผืึทืจืึทืžืขื˜ืขืจืก (ืกื™ื’ื ืึทืœ, ืกื•ื‘ืคืœืึธื•ื•, ื‘ืึทืงืึทืคึผ, ืคื•ืœืžืขืฉ). ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜, MPTCP ืื™ื– ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ืขื ื™ื™ื‘ืึทืœื“ ืื™ืŸ NetworkManager ืื•ื™ื‘ sysctl /proc/sys/net/mptcp/enabled ืื™ื– ื‘ืึทืฉื˜ื™ืžื˜ ืื™ืŸ ื“ื™ ืงืขืจืŸ.
  • ืขืก ืื™ื– ืžืขื’ืœืขืš ืฆื• ืฉืจื™ื™ึทื‘ืŸ IP ืึทื“ืจืขืก ื‘ื™ื™ื ื“ื™ื ื’ ืคึผืึทืจืึทืžืขื˜ืขืจืก ืคึฟืึทืจ DHCP (DHCP ื“ื™ื ื’ืขืŸ) ืฆื• ื“ืขืจ ื˜ืขืงืข /run/NetworkManager/devices/$IFINDEX (ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืื™ื– ืกื˜ืึธืจื“ ืื™ืŸ ืกืขืงืฉืึทื ื– [dhcp4] ืื•ืŸ [dhcp6]), ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ื‘ื™ื™ื ื“ื™ื ื’ื– ื“ื•ืจืš ืคืฉื•ื˜ ืœื™ื™ืขื ืขืŸ ื“ื™ ื˜ืขืงืข ืึธืŸ ืึทืงืกืขืก D -Bus ืึธื“ืขืจ ืœื•ื™ืคืŸ ื“ื™ ื‘ืึทืคึฟืขืœ "nmcli -f all device show eth0".
  • ื“ื™ ipv4.link-local ืคึผืึทืจืึทืžืขื˜ืขืจ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ื“ื™ ืงืฉืจ ืคึผืจืึธืคื™ืœ ืคึฟืึทืจ ื‘ื™ื™ื ื“ื™ื ื’ ื”ื™ื’ืข IPv4 ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ืขืŸ ืฆื• ื™ื ื˜ืจืึทื ืขื˜ ืึทื“ืจืขืกืขืก 169.254.0.0/16 (IPv4LL, ืœื™ื ืง-ืœืึธืงืึทืœ). ื‘ื™ื– ืึทื”ืขืจ, IPv4LL ืึทื“ืจืขืกื– ืงืขืŸ ื–ื™ื™ืŸ ืกืคึผืขืกื™ืคื™ืขื“ ืžืึทื ื™ื•ืึทืœื™ (ipv4.method=link-local) ืึธื“ืขืจ ื‘ืืงื•ืžืขืŸ ื“ื•ืจืš DHCP.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ืคึผืึทืจืึทืžืขื˜ืขืจ "ipv6.mtu" ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ MTU (ืžืึทืงืกื™ืžื•ื ื˜ืจืึทื ืกืžื™ืกื™ืข ื™ื•ื ื™ื˜) ืคึฟืึทืจ IPv6.
  • ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ ืงืึธื“ ืคื•ืŸ ืึท ืึทื ื™ื•ื–ื“ DHCPv4 ืงืœื™ืขื ื˜ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ืงืึธื“ ืคื•ืŸ ืกื™ืกื˜ืขืž. ื“ื™ n-dhcp4 ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ื ืขืฅืึธืœืก ืคึผืขืงืœ ืื™ื– ืœืึทื ื’ ืฉื•ื™ืŸ ื’ืขื ื™ืฆื˜ ื•ื•ื™ ืึท DHCP ืงืœื™ืขื ื˜.
  • ืขื ื™ื™ื‘ืึทืœื“ DHCP ืจื™ืกื˜ืึทืจื˜ ื•ื•ืขืŸ ื“ื™ MAC ืึทื“ืจืขืก ืื•ื™ืฃ ื“ื™ ืžื™ื˜ืœ ืขื ื“ืขืจื•ื ื’ืขืŸ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’