Laga xannibay macaashka VPN-kaaga: hayso dariiqa labaad ee gelitaanka
Tunel go’ay waa in aanu sidoo kale kaa qaadin awoodda aad server-ka ku hagaajiso. Qorshee, tijaabi oo dib u eeg dariiq maamul oo madax banaan ka hor inta aadan u baahnayn.
Waxaad furtaa console-ka, waxaad beddelaa hal qaanuun firewall, tunnel-kii aad ku xidhnayd wuu lumaa. Isbeddelku wuu saxnaa, dib u shubiddu ma ahayn, haddana dariiqa kaliya ee ku noqoshada mishiinka waa kii aad hadda jabisay. Dariiqa labaad ee gelitaanku waa go'aan naqshadeed, waana inuu jiraa ka hor khalka, ma aha inta uu socdo.
Dib u eeg waxa aad wali haysato
Ka bilow shaashadda console-ka ee hortaada oo tax dariiqyada aan ku tiirsanayn tunnel-ka. Console-ka web-ka ee bixiyaha oo leh fadhi serial ama VNC waa mid. Interface maamul oo ku yaal shabakad gaar ah waa mid kale. Helitaanka jirka ahaaneed waa kan saddexaad, waana kan dadku ogaadaan inuu maqan yahay waqtiga ugu xun.
| Path | Depends on | Usually fails when |
|---|---|---|
| Provider console | Account access and the provider's own API | Credentials live in a wiki only reachable over the tunnel |
| Management subnet | A second interface and its own routing | The bad change was a global route or firewall policy |
| Second tunnel | A different listener, port and credentials | Both listeners were changed in the same edit |
| Physical or local console | Being in the building | Nobody has been in the building for a year |
Akhri tiirka saddexaad sida liis guul-darrooyin ah ee ma aha sida wax aan la taaban karin. Laba ka mid ah dariiqyadaas waxay badanaa ku guul-darraystaan sabab isku mid ah. Shaxdu waa habka aad taas ku ogaato ka hor inta khalku kuu sharraxin.
Madax-bannaanidu waa su'aal ku saabsan ku-tiirsanaanta
Akoonka soo-kabashada ma aha mid madax banaan haddii password-kiisa lagu kaydiyay adeeg aad ku gaadho tunnel-ka. VPN labaad oo ku yaal isla host-ka, isla port-ka iyo isla siyaasadda firewall-ka sidoo kale ma aha mid madax banaan, sababtoo ah isbeddelkii jebiyay kii ugu horreeyay wuxuu jebiyaa labadaba.
Hoos u dhaadhac silsiladda oo magacow waxa tallaabo kastaa u baahan tahay. Gaaritaanka shabakadda, xallinta magacyada, isha aqoonsiga iyo adeegga maamulka laftiisu waa afar ku-tiirsanaan oo kala duwan, dariiq kasta oo mid ka mid ah wadaagnaanaa wuxuu dhaxlaa guul-darradaas.
Dariiqa aan waligiis la tijaabin wuxuu mudan yahay shakigiisa. Console aan la furin bilooyin waxaa laga yaabaa inuu u baahdo dib u dajin password iimayl ahaan, sanduuqaasna waxaa laga yaabaa inuu ku martigeliyo mishiinka aad gaari karin. Tijaabi dariiqa inta wax walba shaqaynayaan, waxaadna tan ka heli doontaa galab aamusnaan ah.
Isticmaal dariiqa labaad ee hal isbeddel la xakameeyay
Console-ka, qaado sawir ama koobi qaabeynta aad wax ka beddeli doonto. Beddel hal shay. Dib u shub adeegga oo akhri natiijada ka hor inta aadan taaban wax kale, sababtoo ah laba isbeddel hal mar waxay soo-kabashada u beddelaan tijaabo.
Fadhi soo-kabashada furan hayso inta aad taas samaynaysid. Qiimaha oo dhan ee dariiqa labaad waa inuu ka badbaado waxa aad beddelayso, marka haddii aad marka hore xirto waxaad ka saaraysaa sifada kaliya ee u horseeday faa'iido.
Ka xaqiiji dariiqa soo-kabashada, ma aha xusuusta
Hubinta muhiimka ah waa haddii dariiqa caadiga ah uu soo noqdo, fadhiga soo-kabashaduna waa meesha aad taas ku xaqiijiso si kala horreysan:
systemctl status openvpn-server@server --no-pager ss -lntup | grep -E ':(1194|443)\b' nft list ruleset | sed -n '1,40p' journalctl -u openvpn-server@server --since '-10 min' --no-pager | tail -n 30
Marka hore akhri xaaladda adeegga, ka dib dhageystaha, ka dib qaanuunnada, ka dib joornaalka. Adeeg ku shaqeeya dhageyste la'aan wuxuu tilmaamaa qaabeynta adeegga, halka dhageyste aan lahayn qaanuun la gaari karo uu tilmaamo shaandhaynta. Nidaamku waa muhiim sababtoo ah tallaabo kastaa way cidhiidhisaa tan xigta, boodidda joornaalkana badanaa waxay ka dhigan tahay akhrinta khaladaadka qeexaya calaamadda, ma aha sababta.
Dukumeentiga systemctl waxay daboolaa habdhaqanka xaaladda iyo dib u bilaabista ee halkan la isticmaalay, oo ay ku jirto sida dib u shubid fashilantay ay uga tagto habsocodkii hore mid shaqaynaya. Soo celinta nuqul iswaafaqsan ayaa ka wanaagsan in si isdaba joog ah dib loogu xidhmo macmiil aan server-ka hagaajin karin. Haddii shardiga dib u noqoshada ee aad ka hor isbeddelka qeexday buuxsamay, soo celi oo jooji.
Hayso liiska hantida mid cusub
Dib u eeg liiska gelitaanka marka dadka ama kaabayaashu isbeddelaan. Tijaabi dariiqa soo-kabashada inta wax walba shaqaynayaan. Ka fadhiisii akoonnada aan cidina isticmaalin tan iyo dib u habayntii ugu dambaysay. Laba akoon oo duugoobay iyo hal shahaado dhacday waa nadiifin yar Talaado iyo khalka Axad.
Diiwaangeli cidda isticmaali karta dariiq kasta, waxa uu oggol yahay iyo sida aqoonsiga loo beddelo. Dariiqa soo-kabashada oo aan lahayn milkiile wuxuu noqdaa irid la illoobay, taas oo ka duwan nooca guul-darrada ee ah in dibadda lagu xannibo.