VPN na Windows da manhaja ke tayarwa da rarrabe rami: me ke warewa
Furofil ɗin VPN na Windows da manhaja ke tayarwa yana buɗe rami kawai. Rarrabe rami mai hanya yana ƙayyade abin da ke shiga ciki, kuma kowanne yana kasawa daban ga manhaja ɗaya.
Saiti biyu na Windows suna kama da juna a Saituna amma ba sa ɗabi'a ɗaya. Ɗaya furofil ɗin VPN ne da aka kwafa tare da mai tayar da manhaja, don haka buɗe fayil ɗaya mai aiki yana ɗaga ramin. Ɗayan kuma furofil ɗin rarrabe rami ne wanda jerin hanyoyinsa ya yi daidai da abin da wannan manhajar ke magana da shi. Na farko yana amsa lokacin da ramin yake. Na biyu yana amsa waɗanne fakiti ke shiga ciki, kuma na biyu ne kawai ke barin sauran na'urar a kan hanyar zahiri yayin da manhajar ke nan da haɗi.
Mai tayarwa ƙa'idar rayuwa ce, ba ƙa'idar hanya ba
Add-VpnConnectionTriggerApplication yana ɗaure hanyar fayil mai aiki da sunan furofil. Lokacin da wannan tsari ya fara, Mai Kula da Haɗin Shiga Nesa yana kiran furofil ɗin, kuma lokacin da yanayin mai tayarwa ya ƙare, haɗin zai iya tsagewa. Babu abin da ke bincika soketi a cikin wannan musayar. Cmdlet ɗin yana buƙatar shell da aka ɗaukaka, cikakkiyar hanyar zuwa binary ɗin, da -Force lokacin da kake maye gurbin wani shigarwar da ke nan. Tabbatar da cewa haɗin ya rayu da Get-VpnConnectionTrigger maimakon dogaro da umarnin; tambarin Add-VpnConnectionTriggerApplication yana lissafa sigogi da misalai.
Iyaka biyu ne ke bayyana yawancin rahotannin cewa „mai tayarwa ba ya yin komai”. An gina masu tayarwa a kewayen furofila na dukan masu amfani, don haka iyakar furofil ɗin ita ce abu na farko da za a warware, kuma hanyar manhajar dole ta dace da binary ɗin da ke aiki da gaske, ba gajeriyar hanya ko mai ƙaddamarwa da ke haifar da tsari na biyu ba. Sauran iyakar da gangan ce: a cibiyar da Windows ke lasafta a matsayin abin dogaro, mai tayarwa yana zama a kwance, domin an tsara furofil ɗin don aiki a wajen ofis.
Add-VpnConnectionTriggerApplication -Name "APP_VPN" -ApplicationID "C:\Program Files\Vendor\app.exe" -Force
Get-VpnConnectionTrigger -Name "APP_VPN" | Format-List *
Get-VpnConnection -Name "APP_VPN" | Format-List Name,ConnectionStatus,SplitTunneling,AllUserConnectionRarrabe rami yana ƙayyade abin da ke tsallaka ramin
Da rarrabe rami a kashe, Windows yana saka tsohuwar hanyar da ta dogara da aji mai ƙaramin ma'auni a kan muƙamin VPN. Kowane soketi yana bin ta, ciki har da burauza da sabis ɗin sabuntawa, don haka mai tayarwa a cikin wannan tsarin yana motsa dukan na'urar muddin furofil ɗin na da haɗi. Mai tayarwa har yanzu ƙa'idar rayuwa ce kawai; girman tasirin ya fito daga hanyar.
Da rarrabe rami a kunne, furofil ɗin yana ɗaukar fifiko ɗin da ƙofa ke turawa ko waɗanda ka ƙara a muƙamin VPN. Duk sauran suna ci gaba da amfani da hanyar zahiri ta asali. Wannan shi ne tsarin da mutane sukan nufa da „manhaja ɗaya ta hanyar fita daban”, kuma shawara ce ta hanya daga farko zuwa ƙarshe.
Set-VpnConnection -Name "APP_VPN" -SplitTunneling $true
Get-VpnConnection -Name "APP_VPN" | Select-Object SplitTunneling
Get-NetRoute -InterfaceAlias "APP_VPN" | Sort-Object DestinationPrefixInda rarrabuwa mai hanya ke daina ware manhajarka
Kuskure na yau da kullum shi ne wurin da ba ya taɓa bayyana a jerin hanyoyin ramin. Manhaja da ke shiga da wani adireshi sannan tana yawo daga CDN, ko tana warware dozin ɗin wuraren ƙarshe masu juyawa, za ta saka wasu haɗe-haɗe a muƙamin VPN sauran kuma a Wi-Fi. IPv6 tebur ne daban, don haka furofil ɗin da ke tura fifikon IPv4 kawai zai iya fitowa daidai yayin da zirga-zirgar IPv6 ta manhajar ke zama ta gida.
Wasu ƙananan tasiri biyu ma suna da muhimmanci daidai. Mafi tsayin daidaiton fifiko ne ke cin nasara, don haka wata hanya ta on-link da ta fi ƙayyadaddun, /32 da aka tura don mai karɓar bakuncin gudanarwa, ko subnet ɗin adafta na biyu na iya doke ramin daidai adireshin da ka damu da shi. Warwarewar suna ma tana faruwa kafin hanya: sai dai idan sabar DNS ta furofil ɗin ko ƙa'idar NRPT ta rufe sunan, manhajar na iya warware ta adaftar zahiri sannan ta kira adireshin da bai taɓa kasancewa cikin fifikon da aka saka a ramin ba.
Siffofi uku, da abin da kowanne ke saya
Tebur ɗin shi ne ɓangaren da zan manna a bango, domin shawarar game da girman tasiri ce ba fasali ba. Idan wuraren manhajar fifiko ne tsayayyu da za ka iya lissafa, rarrabuwa mai hanya tana ba da warewa da ƙaramin sawun. Idan ba haka ba, furofil ɗin hanyar asali a bayan VM ko na'ura ta biyu yana riƙe rabuwa da gaskiya a farashin motsa fiye da tsari ɗaya.
| Shape | What starts the tunnel | What enters it | Pick it when |
|---|---|---|---|
| Trigger plus routed split | Process start | Only pushed or added prefixes | The app's endpoints are stable prefixes and the host should stay direct |
| Trigger plus default route | Process start | Everything, machine-wide | You need one exit for all traffic and accept the wider scope |
| Separate VM or device | Guest boot or login | Everything inside that guest | The app's destinations rotate, or the host must keep its own public address |
Abin da babu ɗaya daga cikinsu da ke bayarwa shi ne ɗaure a matakin soketi a kan mai karɓar bakuncin. Abokin ciniki na VPN na gargajiya na Windows ba shi da ƙa'idar da ke cewa wannan tsari dole ya yi amfani da wannan adafta; masu tayarwa da matatun hanya suna rayuwa a yadudduka daban-daban, kuma yaduddukar da ke zaɓar muƙami ita ce teburin hanya. Idan jagora ya yi alkawarin tilastawa kowace manhaja daga furofil da aka kwafa kawai, tambaya wace hanya ko wane matace ke yin aikin.
Tabbatar da ma'auratan a bugu ɗaya
Gwada rayuwa da hanya daban, a wannan tsari. Rufe manhajar, tabbatar furofil ɗin yana bayar da rahoton Disconnected, sannan fara manhajar ka duba ko yanayin ya canza. Bayan an ɗaga ramin ne kawai ya kamata ka tambaya inda wani wuri ya nufa, kuma ya kamata ka yi amfani da adireshin da manhajar ke kira da gaske maimakon hasashe.
$app = Get-Process app | Select-Object -First 1
Get-VpnConnection -Name "APP_VPN" | Select-Object ConnectionStatus
Get-NetTCPConnection -OwningProcess $app.Id -State Established | Select-Object RemoteAddress,RemotePort
Find-NetRoute -RemoteIPAddress 203.0.113.10Find-NetRoute yana ambaton muƙamin da matakin gaba da zai ɗauki wannan wuri. Alias na zahiri a can yana nufin an ɗaga ramin kuma ba shi da amfani ga wannan kwarara: duba fifikon da aka tura, sannan hanyoyin da suka fi ƙayyadaddun, sannan IPv6. Idan yanayin bai canza komai ba, mai tayarwa bai tashi ba, kuma hanyar fayil mai aiki, iyakar furofil ɗin da littafin ayyukan abokin ciniki na VPN su ne wurare uku da za a duba.
Tsaftace da kyau domin gwajin gaba ya kasance gaskiya
Cire a jeren da ya saɓa wa yadda ka gina: da farko mai tayar da manhaja, sannan furofil ɗin. Share furofil ɗin yayin da mai tayarwa ya rage yana barin haɗin da ya rataye wanda ke sa ƙoƙari na gaba ya rikice, kuma Remove-VpnConnection -Force ba koyaushe yake share shigarwar littafin waya da aka ƙirƙira a wajen cmdlet ɗin ba.
Shigarwar kowane mai amfani suna cikin rasphone.pbk na mai amfani a ƙarƙashin furofil ɗin Roaming; shigarwar dukan masu amfani suna ƙarƙashin ProgramData. Duba ajiyar da ya dace da iyakar furofil ɗin, sake haɗa furofil ɗin da ka ajiye, kuma tabbatar hanyoyinsa da DNS ɗinsa har yanzu suna aiki, domin gwaji na gaba ya auna canjin da ka yi ba yanayin da ya rage ba.
- Ramin yana buɗewa ne lokacin da tsari ya fara, ba lokacin shiga ba.
- Fifikon da aka nufa ne kawai ke bayyana a muƙamin VPN.
- Adireshin nesa na gaske na manhajar yana warwarewa zuwa alias ɗin VPN.
- Babu mai tayarwa da ya rataye da ya rage bayan an cire furofil ɗin.