OpenVPN a lokacin tashi a Ubuntu: NetworkManager ko systemd?

Yawancin jagorori suna gabatar da zaɓin a matsayin abin ado: ko ka bar NetworkManager ya ɗaga ramin, ko ka kunna misalin systemd ka gama. Hanyoyin biyu sun bambanta a wani abu guda da ke yanke sakamakon a kan na'urar da ba ta da allo, kuma ba shi da alaƙa da wace kayan aiki ta fi sabo. NetworkManager yana buɗe asirai ta hanyar zama; misalin systemd ba shi da zama da zai buɗe. Zaɓi wanda yadda yake kula da asirai ya dace da na'urar da ke gabanka.

Duk sauran, daga girka hanyoyi har zuwa halin sake haɗawa, sun biyo wannan shawara ta farko.

Zoben maɓalli shine bambancin da babu wanda yake ambatawa

Lokacin da NetworkManager ya mallaki bayanin martabar VPN, kalmar sirri na iya zama a cikin zoben maɓallin shiga, wanda ake buɗewa lokacin da mai amfani ya shiga. Wannan yana aiki sosai a kwamfutar tafi-da-gida: mutumin yana nan, zoben yana buɗewa, ramin yana tashi. A kan sabar da ke tashi ba tare da kulawa ba babu wanda zai buɗe komai, don haka bayanin martaba yana jiran asirin da ba ya zuwa. Haɗin yana kama da an saita shi kuma ba ya aiki ko kaɗan.

Misalin systemd yana guje wa wannan matsalar ta hanyar karanta fayil ɗin shaida daga faifai, wanda ya mai da fayil ɗin abin da kake karewa. chmod 400 tare da mallakar root shine mafi ƙaranci, kuma fayil ɗin ya kamata ya kasance daga ajiyar ajiya da samfuran hoto waɗanda ba ka sarrafa su.

Haɗa VPN da haɗi ba garantin tashi bane

A cikin nm-connection-editor, zaɓi haɗin waya ko mara waya maimakon VPN, buɗe shafin General, sanya alama a kan zaɓin haɗawa da VPN kai tsaye sannan ka ba bayanin martaba suna. Sannan NetworkManager yana kunna VPN a matsayin haɗi na biyu lokacin da na farko ya kai matsayin an haɗa. Wannan dogaro ne, ba ka'idar wutar bango ba. Fakitoci na iya fita har yanzu cikin daƙiƙan kafin ramin ya tashi, kuma asirin da aka adana wanda ya kasa buɗewa yana barin na'urar a kan layi ba tare da shi ba.

Idan buƙatar ita ce babu abin da zai fita ba tare da ramin ba, faɗi haka ka gina maɓallin kashewa, domin wannan saitin ba zai samar da ɗaya ba. Gwada kuma dakatawa da ci gaba, domin ana sake tantance haɗin na biyu a hanyar dawowa.

Misalin systemd yana bukatar sunan fayil da ya dace

Saka bayanin martaba a cikin babban fayil ɗin abokin ciniki da kunshin ke tsammani, kamar /etc/openvpn/client/office.conf, sannan ka yi nuni daga ciki zuwa fayil ɗin shaida da auth-user-pass office.cred. Sunan misalin shine sunan fayil ɗin ba tare da ƙarin bayani ba, don haka openvpn-client@office yana karanta office.conf. Kunna shi da sudo systemctl enable --now openvpn-client@office ka tabbatar da daidaito da systemctl cat openvpn-client@office maimakon amincewa da misali daga bulogi.

Hanyoyi a cikin bayanin martaba ana warware su dangane da babban fayil ɗin aiki na rukunin, ba da bayanin martabar kansa ba, don haka layin dangi na ca ko auth-user-pass na iya kasawa a lokacin tashi yayin da yake aiki idan ka gwada shi da hannu. Yi amfani da hanyoyi cikakke ga duk abin da rukunin ya kamata ya samu. Sannan karanta journalctl -u openvpn-client@office -b bayan tashi na gaske; rukunin da ke bayar da rahoton aiki ba tare da rami ba yawanci yana ambaton fayil ɗin da ya ɓace a cikin wannan log ɗin.

Tsofaffin kunsoshi suna kawo sunan samfuri daban, don haka systemctl list-unit-files 'openvpn*' yana yanke shawarar wanne ne ya wanzu a wannan mai masaukin.

Halin sake haɗawa shawara ce daban

Bayanin martaba mai ping-restart yana sake gina ramin bayan ya faɗi, kuma rukuni mai umarnin sake farawa yana yin wani abu makamancin haka a matakin sabis. Waɗannan manufofi ne da kake zaɓa, ba tsoffin ƙima da kake gado ba. Idan haɗin ya kamata ya tashi kawai bisa buƙata, cire halin sake farawa da gangan ka rubuta dalili. Idan rukunin ya fara kafin cibiyar sadarwa ta zama mai amfani, yana bukatar manufar sake gwadawa, domin yunƙuri ɗaya da ya gaza a lokacin tashi ba ya sake kansa da kansa.

Tsayawa daidai yake a zahiri: sudo systemctl disable --now openvpn-client@office yana tsayar da misalin da ke gudana kuma yana cire hanyar haɗin tashi. Kashewa kawai yana barin ramin yana gudana har zuwa sake farawa na gaba, wanda ke ba da mamaki ga duk wanda ya gwada ta hanyar kashewa yana kallon yadda ma'aunin yake tsayawa a sama.

Sake farawa, sannan duba abubuwa huɗu a jere

Sake farawa da sabis yana gwada sabis ɗin; sake farawa da na'urar yana gwada hanyar tashi. Bayan sake farawa, tabbatar rukunin ya tashi, sannan akwai hanya don yankin da ke nesa, sannan wace adireshi na'urar ke gabatarwa ga intanet, kuma a ƙarshe cewa sunaye suna warwarewa ta ramin. Waɗannan bincike huɗu suna kasawa a wannan jeri idan wani abu ya ɓace, wanda ke sa gazawar farko ta zama mai amfani.

Rukuni mai aiki ba tare da hanya yawanci yana nufin bayanin martabar ya haɗu amma sabar ba ta tura wata hanya ba, ko kuma an girka hanyar a kan ma'aunin da ya ɓace daga baya. Hanya marar binciken suna mai aiki tana nuni ga saitin DNS maimakon ramin kansa.

Yanke shawara tun da wuri abin da ya kamata ya faru idan ramin ba zai iya tashi ba. Komawa zuwa haɗin yau da kullum manufa ce, kuma ya kamata a rubuta ta maimakon a bar ta ga duk wani manaja da ya fara da farko.