Aplikada VPN ee iibiyaha iyo NetworkManager: yaa iska leh xaaladda?
Borotfaylku wuxuu magacaabaa plugin, ma aha hab-dhaqanka macmiilka iibiyaha. Calaamadee cidda iska leh diiwaangelinta, DNS, xannibaadda iyo cusboonaysiinta ka hor inta aadan beddelin laptop la maareeyo.
Soo dejinta borotfayl ma aha isku mid la beddelo macmiil. NetworkManager waxay kaydisaa nooc plugin ah oo ay la socdaan xog iyo sir u gaar ah plugin-ka, plugin-ka haystana noocaas ayaa go'aamiya waxa isku xirka qaban karo. Wax kasta oo ay aplikada iibiyahu kor saarto, laga bilaabo diiwaangelinta ilaa xannibaad joogto ah, waxay ku nooshahay faylka dibaddiisa. Hadday beddelaaddu ammaan tahay waxay ku xiran tahay lakabyadaas ka mid ah kuwa aad si dhab ah ugu tiirsan tahay.
Faylku wuxuu magacaabaa plugin, ma aha koox sifooyin ah
Tixraaca dejinta VPN ee NetworkManager wuxuu sharraxayaa nooc adeeg oo dooranaya plugin-ka, oo ay la socoto qaamuus xog aan caddayn iyo qaamuus sir ah oo kaliya plugin-ku tarjumo. Borotfaylku waa heshiis lala galay hal hirgelin, ma aha sharraxaad hab-dhaqan ah oo macmiil kasta uu soo saari karo. Laba macmiil ayaa ku hadli kara isla borotokool oo weli ku kala duwanaan kara waxa ay ka wada hadlaan iyo waddooyinka xogta ee ay shidaan. Calaamadda borotokoolku waxay kuu sheegtaa waxa tunnel-ku yahay, waligeed ma sheegto waxa macmiilka hareerihiisa ah ku sameeyo.
Marka isbarbar dhig shuruudaha halkii aad isbarbar dhigi lahayd duubabka. Su'aashu ma aha in beddelku xiri karo, maxaa yeelay inta badan wuu xiri karaa; su'aashu waa in shuruud kasta oo macmiilkii asalka ahaa la aqbali karay uu ka gudbo guurka. Qor shuruudahaas ka hor inta aadan wax rakibin, haddii kale isbarbardhiggu wuxuu noqonayaa raadin waxa ugu horreeya jabaa.
Waxa aplikada iibiyahu ku darayso hareeraha tunnel-ka
Macmiillada iibiyayaashu waxay inta badan isku xiraan diiwaangelinta iyo hubinta xaaladda qalabka, qulqulka shayga labaad oo leh is-dhexgal u gaar ah, xannibaad joogto ah, kanaal cusboonaysiineed iyo qalab taageero. Qayb ka mid ah waxay taallaa borotokoolka agtiisa, qaybna waa badeeco gaar ah oo kaliya wadaagta rakibaha. NetworkManager waxay beddeli kartaa tunnel-ka iyo marinkeeda, skriptiyada diristuna waxay kicin karaan falal marka xaaladda isku xirka is beddesho. Laakiin ma soo saarto mishiinka xannibaadda, qulqulka cusboonaysiinta shahaadada ama mala-awaal ku saabsan macmiilka loo oggol yahay inuu kor u qaado isku xirka.
Qaybo badan macnaheedu ma aha ammaan badan, qaybo yarna macnaheedu ma aha itaal yaraan. Su'aashu waa qaybtee fulisa siyaasadda lagu yidhi raac. Haddii hawlwadeen su'aalo waxa xannibaya gaadiidka marka tunnel-ku dhaco, jawaabtu waa inay magacawdo wax sidaas dhab ahaan sameeya, borotfaylka kaliya isku xiraana ma aha jawaabtaas.
Halka lahaanshuhu si dhab ah uga duwan yahay
U akhri tan sida khariidad lahaansho ee ma aha liis hubin, maxaa yeelay guul-darrooyinka hoose waa nusqaamo lahaansho oo ma jiro qadar habaynta macmiilka oo xidha. Saf kastaa wuxuu magacaabaa lakabka, dhinaca inta badan haysta maanta, iyo halka nusqaanku ugu horreeya muuqdo.
| Layer | Vendor application | NetworkManager connection | Where the gap shows up |
|---|---|---|---|
| Enrollment and posture | built into the client | absent unless something else supplies it | a managed device fails its next posture check |
| Address and resolver authority | the client sets both | the plugin plus dispatcher scripts | names resolve through the wrong resolver after a state change |
| Blocking on drop | a bundled engine | nothing by default | traffic continues in the clear after the tunnel dies |
| Upgrade path | the vendor's own channel | the distribution package and its plugin | a plugin update changes behaviour with no vendor note |
| Diagnostics and support | vendor tooling with client state | journal and dispatcher output | support cannot see why negotiation failed |
Saf kasta ku lammaan indho-indheyn aad ku celin karto, ee ma aha dareen ku saabsan macmiilka. Magac lagu xalliyay xalliyaha loogu talagalay, waddo lagu waayo marka tunnel-ku istaago, iyo isku xir la xannibay ka dib go'itaan la ekaysiiyay waa saddex indho-indheyn oo wada jir ah daboolaya inta badan shaxda. Ku qor indho-indheynta shuruudda ay caddaynayso agteeda, oo hayso kuwa guul-darroobay, maxaa yeelay indho-indheyn guul-darroomaysa waa qaybta kaliya ee diiwaanka saadaalisa dhacdada xigta.
Beddelid iyada oo aan lahaanshaha is-dul-saarneyn
Isku wada shaqaynta macmiilka iibiyaha iyo isku xirka NetworkManager ee isla adeegga waa habka ugu caansan ee isbarbardhigyadan qaldamaan. Labaduba waxay rakibaan waddooyin, labaduba waxay dejin karaan DNS, labaduba waxay taaban karaan xaaladda dabka-daminta. Waxa aad markaas cabbirto waa habayn saddexaad oo aan u dhigmin hab-dhaqanka diiwaangashan ee midkoodna labada macmiil.
nmcli -f NAME,UUID,TYPE connection show
nmcli connection show work --show-secrets | grep -E "^vpn\."
journalctl -u NetworkManager -b --since "10 min ago"Amarka koowaad wuxuu kuu sheegaa haddii borotfaylku asal ahaan nooca VPN yahay. Kan labaad wuxuu muujinayaa nooca adeegga plugin-ka iyo sirta kaydsan, taas oo muhiim ah marka fure laga filanayo wakiil halkii faylka. Diiwaanka waa goobta plugin-ka soo raray laakiin aan gorgortan karin uu taas ku sheegi doono. Haddii midkoodna saddexda midna muujin mushkilad, nusqaanku wuxuu ku jiraa lakabyada siyaasadda ee tunnel-ka korkiisa ee ma aha isku xirka.
Ka gooy macmiilkii hore ka hor inta aadan shididda isku xirka cusub, hayso bartaaha iyo akoonka isku mid, oo qor qaybtee iska leh waddooyinka, dejinta xalliyaha iyo xannibaadda. Qoraalkaas ayaa ka hortagaya in cusboonaysiinta xigta ku dhammaato laba milkiile.