Hubi doorka macmiilka ee router-ka ka hor intaadan soo dejinin borotokool VPN

Bogga faahfaahinta oo leh astaanta VPN wuxuu sheegayaa in sanduuqa uu wax ku samayn karo VPN. Ma sheegayo in firmware-ku u shaqayn karo macmiil ahaan borotokoolka ku jira faylka gacantaada ku jira. Kuwani waa awoodo kala duwan oo leh shuruudo kala duwan, farqiga u dhexeeya ayaa ah meesha inta badan iibsadahan qaldamaan. Hubi doorka ka hor sumadda.

Afar hubin ayaa liiska sifooyinka u beddela jawaab.

Astaanta VPN maaha bayaan awood

Router-yadu waxay xayaysiiyaan taageerada VPN ugu yaraan saddex macne: gudbin taraafikada qalabka kale, server-ka aqbala tunnellada soo gala, iyo macmiilka bilaaba tunnellada baxa. Kaliya saddexaad ayaa isticmaala borotokoolka aad soo dejisatay. Gaar ahaan gudbinta IPsec waa kaaliyaha NAT maaha barta dhammaadka, waxayna ka muuqataa qalabka aan awoodin inay IPsec dhamaystiraan ama bilaabaan.

Weydii doorka faylku u baahan yahay, ka dib weydii haddii doorkaas uu ku jiro nooca firmware-ka qalabka.

Akhri liiska sifooyinka firmware-ka aad dhab ahaan ku shaqaynaysid

Magacyada moodeelka maaha noocyo firmware, hagaha loo qoray daabacaaddii hore ee weyn wuxuu qeexayaa sifooyin kale. OpenWrt waxaa su'aasha laga jawaabi karaa shell: opkg list-installed | grep -E "openvpn|wireguard" wuxuu muujinayaa haddii xirmooyinka macmiilka ay jiraan, qaybta kernel-ka WireGuard-na way ka duwan tahay qalabka meesha isticmaalaha. Qalabka iibiyaha, akhri qoraallada daabacaadda dhismaha la rakibay halkii bogga suuq-geynta moodeelka.

Haddii awoodda ay timaaddo xirmo ahaan, xaqiiji in la rakibay, maaha oo kaliya inay ku jirto kaydka.

Isku habee qaabka borotokoolka soo-dejinta

Borotokoolka OpenVPN waa luqadda tilmaamaha. Faylka lammaanaha WireGuard waa INI leh fure gaar ah iyo liiska IP-ga la oggolaaday. Aqoonsiga IKEv2 waa shahaado ama magaca isticmaalaha iyo aqoonsiga server-ka. Foomka router-ka ee aqbala mid ka mid ah ma turjumi doono kuwa kale, badhanka soo-dejinta ee sheegta inuu aqbala wax walba wuxuu mudan yahay shaki.

Fur faylka oo akhri tobanka sadar ee ugu horreeya. Taasi waxay kuu sheegaysaa soo-dejiye kee ayaad u baahan tahay ka hor menu kasta.

Hubi doorashooyinka ay borotokoolku dhab ahaan isticmaalo

Taageerada borotokoolka maaha taageerada borotokoolkaaga. Eeg tilmaamaha qaada sifooyinka amniga: shahaadooyin gudaha ah, tls-crypt ama tls-auth, doorashada cipher-ka iyo cipher-ka xogta, isku-buuxinta iyo qabatooyinka script-ka. Hirgelinta router-ka waxay aqbali kartaa faylka oo si aamusan u dhaafi kartaa tilmaan aanay hirgelin, taasoo keenta tunnel isku xira laakiin u dhaqma si ka duwan kan kombuyuutarkaaga.

Natiijada khatarta ah maaha soo-dejin la diiday. Waa soo-dejin la aqbalay oo si aamusan wax uga tagay.

Tijaabi siyaasadda, maaha oo kaliya gacan-qabsiga

Go'aami waxa isku-xirku qaadanayo: hal qayb ama qalab kasta, resolver-ka DNS ee kee, haddii IPv6 uu galo tunnel-ka ama uu degaanku sii joogo, iyo waxa dhaca marka tunnel-ku dhaco. Kuwani waa sifooyin ka duwan aasaasidda, halkanayna router-ku ugu badan ku duwan yahay macmiilka desktop-ka. Hayso maamulka gudaha mid la gaari karo inta aad tijaabinayso, haddii kale qaladka jidka ee ugu horreeya wuxuu kuu kacdo helitaanka jirka.

Gacan-qabis dhammaystiran waa bilowga xaqiijinta. U dir taraafik dhab ah meel dhab ah oo hubi jidka soo noqodka.