Astaanta cagaaran, isla IP dadweyne: waddada VPN-ku booday

Waa la xidhiidhiyay, astaanta tray-ga waa cagaar, bogga muujinaya cinwaanka weli wuxuu muujinayaa cinwaanka bixiye, taas oo aan si toos ah ula macneyn cillad. Macmiilku wuxuu qabtaa laba shaqo oo kala duwan: wuxuu dhisaa tunnel, wuxuuna wax ka beddelaa shaxda waddooyinka. Mid kastaa wuu jiri karaa midka kalena la'aan, waxaana waddo-doorashada xaaladda lagu si ula kac ah uga boodo tan labaad.

Waxa uu macmiilku dhab ahaan rakibay

Weydii interface-ka sidee baakad u gaarsiin doono meel dhab ah, halkii aad weydiin lahayd in tunnel-ku shaqeynayo. Tunnel aan waddo u lahayn meeshaas waa dariiq gaar ah oo aan cidna marayn.

ip route get 9.9.9.9
Find-NetRoute -RemoteIPAddress 9.9.9.9
route print -4

Amarka koowaad wuxuu ka jawaabaa Linux iyo macOS, labada kalena waa u dhigmaan Windows halkaas oo mid ku filan yahay. Haddii jawaabtu sheegto adapter-ka jirka, tunnel-ku wuu shaqeynayaa waddada caadiga ahina waligeed ma dhaqaaqin. Ku celi baaritaanka meel u baahan in tunnel-ka loo isticmaalo, maxaa yeelay laba baaritaan, mid fog iyo mid caadi ah, waxay sheegaan naqshadda la hirgeliyay.

Saddex nooc oo waddo-doorasho ah

Profile tunnel buuxa wuxuu caadi ahaan qoraa waddo caadi ah oo u jeedda interface-ka, ama wuxuu qoraa labada prefix oo nus-wareeg ah oo ku guuleysta dhererka prefix-ka inta waddada caadiga ah ee asalka ahi ku sii jirto shaxda. Waddo-doorashada waa ikhtiyaarka kale, waxayna ku timaaddaa qaabab dhowr ah. Hal profile wuxuu waddo u sameeyaa hal host sida server RDP, mid kale wuxuu waddo u sameeyaa xad dadweyne oo laga gaarayo meel gaar ah, saddexaadna si ula kac ah wuxuu ka reebaa hal abka. Saddexduba waa sharci, midkoodna ma beddelo cinwaanka ay arkaan website caadi ah.

grep -nE "redirect-gateway|route-nopull|route " /etc/openvpn/client/*.conf
ip route show table main | head -20

Akhri profile-ka amarka go'aanka leh, ka dibna akhri shaxda waxa uu soo saaray. Amarka la riixay ayaa sidoo kale laga joojin karaa macmiilka, taas darteed profile-ka iyo shaxdu waa inay is waafaqaan ka hor inta aanad server-ka eedayn.

Dhinaca fog waa inuu dib u qoraa cinwaanka isha

Waxaa jira cillad labaad oo browser-ka ka muujinaysa si isku mid ah. Waddadu waxay gashaa tunnel-ka, server-ku wuxuu helaa baakadaha ka dibna u gudbiyaa isagoo cinwaanka gaarka ah ee macmiilka u daatan. Boodhka xiga ma laha waddo ku noqosho cinwaankaas, sidaas darteed jawaabaha way luntay bogaguna way hangaan. Server-ku waa inuu gudbiyo, waana inuu u turjumo isha wax ay internet-ku dib u waddo karto.

sysctl net.ipv4.ip_forward
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -t nat -S | grep MASQUERADE

Sheeg interface-ka dhab ahaan u jeeda internet-ka, taas oo aan had iyo jeer eth0 ahayn qaybinta casriga ah. Server la martigeliyay oo leh cinwaan go'an wuxuu si cad ugu turjumi karaa cinwaankaas halkii uu isticmaali lahaa masquerade. Labada qayboodba waa muhiim, maadaama gudbinta turjumaad la'aan ay daadanayso ilo aan la waddi karin, halka turjumaadda gudbin la'aan aysan waligeed arkin baakadda.

Xallinta magacyada waxay qaadataa waddo u gaar ah

Taraafikadu waxay ka bixi kartaa tunnel-ka inta baaritaanka magaca helay uu u tagay xalliyaha shabakadda maxalliga ah. Cinwaanka muuqda wuu sii jiraa, baaritaannada ma jiraan, farqigaasna waa waxa ay naqshadda DNS qaybsan dooratay.

resolvectl status | head -20
resolvectl query example.org

Ogow serverkee jawaabay iyo inuu ka duwan yahay saldhigga tunnel-ka ka hor. Tunnel qaybsan, tanu caadi ahaan waa dejinta ay dadku rabeen inay beddelaan markii ay ka cawdeen cinwaanka, waana tan aysan waligood eegin.

Afar indho-indheyn oo arrinta xalliya

Qor cinwaanka bixidda tunnel-ka oo damisan, ka dibna oo shidan. Ku socodsii baaritaanka meesha labada xaaladoodba oo qor interface-ka mar kasta.

curl -sS https://ifconfig.me/ip
ip route get 9.9.9.9

Marka baaritaanku gudaha tunnel-ka galo oo echo-ku weli sheegto cinwaanka bixiyaha, turjumaadda bixidda ayaa maqan. Marka baaritaanku ku dhaco adapter-ka jirka, profile-ku waa mid doorasho ah cinwaanka dadweynena waligeed ku jirin baaxadda. Beddel adeegga echo mid aad aaminto oo qor afarta indho-indheyn oo wada jir ah, maxaa yeelay gooni ahaan waa sheekooyin uun. Wada jir ahaan waxay muujinayaan kee ka mid ah labada shaqo uu macmiilku dhab ahaan qabtay.