VM-ka Vagrant wuu libdhaa marka VPN-ku xirmaa: waa yaa leh wadada jabtay

Mashiinku daqiiqad ka hor ayuu jawaabayay, VPN-ku wuu xirmay, haddana isla cinwaankaas wuu waqti dhaafaa. Saddex cillad ayaa calaamadan keenaya, waxayna ku nool yihiin mashiinno kala duwan. Martigeliyaha ayaa lumin kara wadada shabakadda gaarka ah, baaxadda NAT ee martida ayaa ku dhici karta baaxad uu tunnel-ku hadda ku dhawaaqayo, ama tunnel buuxa ayaa qaadan kara lahaanshaha wado kasta oo martigeliyaha ku yaal. Ogaado tan dhacday ka hor inta aadan beddelin wax qaab-dhismeed ah, waayo sixid kastaa meel kale ayuu ku nool yahay.

Fiiri wadada, ha fiirin mashiinka

Fiiri go'aanka jiheynta martigeliyaha ee cinwaanka martida inta tunnel-ku sarreeyo. Wadada weli tilmaamaysa adapter-ka martigeliyaha-kaliya ma aha dhibaatada. Wadada hadda tilmaamaysa adapter-ka VPN waa dhibaatada, macmiilka ayaa beddelay, adiga ma aha. In adapter-ku cinwaankiisa hayo waxay sheegaysaa in interface-ku badbaaday, taas oo ka duwan tahay in wadadu badbaadday.

Fadhi SSH oo si sax ah u dhaca xilliga xidhitaanka waa dabeecad la filayo. Macmiilku wuxuu dib u isticmaalaa adapter-yada oo rakibaa waddooyin, sidaas darteed xidhiidhku dhawr ilbiriqsi ayuu dhintaa. Cilladdu waa xidhiidhka aan marnaba soo noqon, ma aha kan hal mar iftiimay.

Qabso shaxda tunnel-ka ka hor iyo mar kale ka dib, ka dibna isbarbar dhig labadaas soo-saaris. Farqigu waa ogaanshaha, waana isla markiiba caddaynta milkiilaha shabakaddu dalbi doono.

ip -4 route get 192.168.56.10
ip -brief addr show
ip route show table main | head -20

Akhri shaxda martigeliyaha ka hor iyo ka dib

Linux-ka mudnaanta u dhexeeya waddooyinka is-dulsaara waxay ka timaaddaa dhererka horgalaha iyo mitirka, sidaas darteed wadada VPN ee gaar ah way guulaysataa xitaa marka ay khalad tahay. Windows-ka mitirka interface-ku wuxuu go'aamiyaa barbar-dhigga, adapter-ka tunnel-kuna wuxuu inta badan la yimaadaa mitir ka hooseeya kan macmalka ah. Labada xaaladood calaamaddu isku mid tahay: baakaduhu waxay ka baxaan adapter-ka tunnel-ka oo way libdhaan.

Daabac adapter-yada iyo mitirkooda ag wadada horgalaha martida. Labadaas soo-saaris waxay ka jawaabaan su'aasha lahaanshaha hal eegmo.

Get-NetAdapter | Select-Object Name, InterfaceIndex, InterfaceMetric
Get-NetRoute -DestinationPrefix 192.168.56.0/24
route print -4 | Select-String '192.168.56'

Haddii wadadu is beddeshay laakiin mitirka adapter-ku aanu is beddelin, macmiilku wuxuu rakibay wado tartan ah. Haddii mitirku is beddelay, macmiilku wuxuu dib u habeyn ku sameeyay adapter-yada. Labadaba waa la sixi karaa, waxaana lagu sixaa meelo kala duwan.

Marka baaxadda NAT ee martidu tahay isku-dhaca

VirtualBox NAT wuxuu si caadi ah u isticmaalaa 10.0.2.0/24, tunnel-ka riixa isla baaxaddaasna wuxuu martida ka dhigaa inuu taraafikadaas u diro iridda NAT-kiisa halkii uu u diri lahaa meesha dhabta ah. Baakadku marnaba kama baxo martigeliyaha, sidaas darteed wax diiwaan firewall ah oo dhinaca kale ah ma tusi doono. Docker Machine waxay leedahay isla nooca isku-dhaca qorshihiisa martigeliyaha-kaliya, beddelka qorshahaasna waxay u baahan kartaa in mashiinka dib loo abuuro iyada oo ay la socdaan shahaadooyinkiisa.

Dooro beddelka adigoo taxaya waxa tunnel-ku hore ugu dhawaaqo, ka dib waxa shabakadda xafiisku isticmaasho, ka dib waxa adapter kasta oo macmal ah oo martigeliyahan ku yaal sheegtay. Is-dul-saarku waa waxa jebiya jiheynta, u ekaanshuhuna waxba ma khuseeyo. Hal baaxad ayaa si dhamaystiran gudaha tan kale u fadhiisan kartaa iyadoo aragtida koowaad aanay haba u ekaan.

Deji baaxadda cusub marka mashiinka la abuurayo, ama beddel oo dib u rarto, ka dibna mar kale tijaabi xidhiidhka guuldarraystay martida. Shaxda martida lafteeda ayaa ah aragtida muhiimka ah.

VBoxManage modifyvm devbox --natnet1 10.77.0.0/24
vagrant reload devbox --provision
vagrant ssh devbox -c 'ip route get 10.20.0.15'

Soo celi wadada adigoon la dagaallamin macmiilka

Platfooram kastaa waxay bixisaa hab lagu soo celiyo horgalaha martigeliyaha-kaliya. macOS-ka wado taagan oo u socota interface-ka martigeliyaha-kaliya waxay shaqaysaa ilaa xidhitaanka xiga. Windows-ka mitir interface hooseeya oo ku yaal adapter-ka macmal ah ayaa mudnaanta u hayaa. Linux-ka hawlgalka beddelka wuxuu daboolaa hal horgale. Saddexdaaba waa xalal-mar, waayo macmiil dib u caddeeya waddooyinkiisa wuu tirtiri doonaa.

Qor hubinta sida skript halkii aad si indho-la'aan dib ugu xidhi lahayd boot-ka. Skript yar oo daabaca wadada horgalaha martida ka dib xidhiidh kasta wuxuu halxiraale u beddelaa sadar log ah.

Haddii profile-ku yahay tunnel buuxa, weydii milkiilaha shabakadda tunnel kala qaybsan ama ka-reebitaan la diiwaangeliyay. In si aamusnaan ah waddooyin lagu daro oo ka gudba siyaasadda amniga ma aha sixid, waa dhibaato labaad oo hadhow la yimaada hanti-dhawr.

Hubi sixidda labada dhinac

Ka dib beddelka hubi saddex wado: martigeliyaha ilaa martida, martida ilaa martigeliyaha shirkadda, iyo martida ilaa internet-ka. Sixid soo celisa mid oo jebisa mid kale waa beddel qaab-dhismeed oo isku ekaysiiyay dayactir. Qabso isla soo-saaristii aad ururisay beddelka ka hor si isbarbardhiggu uu siman yahay siman.

Diiwaangeli interface-ka, mitirka iyo wadada is beddelay, oo ay la socoto waqtiga, si dhacdada xigta ay raadin noqoto ee aanay dib-u-dhis noqon. Qoraalkaas wuxuu ka qiimo badan yahay dunta ticket dheer.

ip -4 route get 192.168.56.10
traceroute -n -m 4 10.20.0.15
curl -sS -o /dev/null -w '%{http_code}\n' https://example.com

Marka martigeliyuhu mar kale gaaro martida oo martidu gaarto LAN-ka, waxaad soo celisay wadadii aad ku bilowday. Marka midkood oo kaliya shaqeeyo, cilladda hadhay waxay ku taal dhulka milkiilaha kale, farqiguna wuxuu kuu sheegaa dhulkaas.