VPN dhintay hurdada ka dib: tunnel lumay mise app duugoobay?

Qalabka furkiisu wuu furmaa, calaamadda wireless-ka way soo noqotaa, VPN-na wali wuu u muuqdaa mid xiran. Markaas bogga koowaad ee gudaha ayaa sudhan ilaa waqtigu dhammaado, tab cusub-na sidaas oo kale ayuu sameeyaa. Saddex shay oo kala duwan ayaa sawirkaas abuuri kara, waxayna u baahan yihiin saddex hagaajin oo kala duwan: tunnel aan ka badbaadin hurdada, profile aan cidina weydiisan in mar kale la firfircoonaysto, ama app wali haysta session dhimatay saacado ka hor. In la isbarbar dhigo ayaa ka dhaqso badan in wax walba dib loo rakibo.

Saddex shay ayaa xumaada hurdada ka dib

Mushtaraha koowaad waa tunnel-ka laftiisa. Interface-ku wali wuu jiri karaa ciwaan, inkastoo xidhiidhka lammaanaha uu lumay, sidaas darteed iftiinka tilmaamuhu ma aha caddayn waddo shaqaynaysa. Gacan-qaadasho ka duqsi ah hurdada waa calaamadda, oo hal amarro ayaa ku filan in la arko.

Kan labaad waa firfircoonaynta. Macaamiil badan ayaa iskood u xirma mar kale; qaarkood ma xirmaan, profile aan cidina weydiisan inuu soo noqdo ayaa halkaas fadhiya oo u muuqda mid la habayn. Guuldarradaas waa aamusan xagga naqshadda, sababtoo ah waxba khalad ma bixin.

Kan saddexaad waa app-ka. Tab browser, session SSH ama xidhiidh database ayaa ka badbaadi kara isbeddelka shabakadda sida deskriptor fayl, inkastoo gaadiidka hoostiisa uu dhintay. Markaas session cusub si fiican ayuu u shaqeeyaa, taas oo kuu sheegaysa in tunnel-ku horay u fiicnaa.

Isbarbar dhig saddexda ka hor intaadan wax beddelin, sababtoo ah hagaajintu iskuma dul saarna. Dib u bilaabista macmiil aan waligiis la weydiisan inuu mar kale bilaabo ayaa lumiya caddaynta aad u baahnayd. Qor mushtaraha calaamaddu la socoto ka hor intaadan taaban habaynta. Jumladdaas kaliya ayaa inta badan go'aamisa baaritaanka intiisa kale.

Marka hore: tunnel-kii ma soo noqday?

Fiiri interface-ka iyo xaaladda lammaanaha halkii aad fiirin lahayd qoraalka xaaladda macmiilka. Interface leh ciwaan oo aan lahayn gacan-qaadasho dhowaan ah waa tunnel magac ahaan uun jira.

ip -brief addr show
wg show
ip route show table all | head -20

Haddii interface-ku gabi ahaan maqan yahay, tunnel-kii ma badbaadin oo su'aashu waxay noqotaa yaa dib u soo celin lahaa. Haddii uu jiro laakiin gacan-qaadashadu duqsan tahay, xidhiidhka lammaanaha waa dib loo dhisaa, macmiilkuna wuxuu sugayaa taraafik kiciya.

Sidoo kale hubi waddooyinka iyo habaynta DNS. Tunnel-ku wuu soo noqon karaa isagoo aan lahayn waddooyinkiisa, taas oo abuurta xaalad jahwareer leh oo interface-ku shaqeynayo laakiin magacyada guduhu wali ka soo baxaan server khaldan.

Marka labaad: ma jiraa wax weydiistay inuu soo noqdo?

Halkan ayaa isbarbardhiggu qiimihiisa kasbadaa. Profile plugin OpenVPN iyo xidhiidh WireGuard asli ah ayaa NetworkManager si kala duwan u maareeyaa, tixraaca habaynta xidhiidhka wuxuu si cad u sheegayaa in connection.autoconnect aanu firfircoonayn profile-yada VPN; habka VPN lagu qaado xidhiidh waa connection.secondaries.

nmcli connection show --active
nmcli -f connection.autoconnect,connection.secondaries connection show "Work VPN"
journalctl -u NetworkManager -b --no-pager | tail -40

Haddii dib u xirid gacanta ah mar walba dhibaatada hagaajiyo, waa calaamadda firfircoonayn maqan oo aan ahayn tunnel jaban. Diiwaanka wuxuu inta badan tusaa interface-ka oo hoos u dhacaya iyo wax aan dib u soo celin.

Ka hortag rabitaanka in si degdeg ah loogu daro hook hurdo. Hook shaqeeya ka hor inta aanay shabakaddu soo kabsan waxa uu la tartamaa isla habka uu isku dayayo inuu caawiyo, wuxuuna dhibaato dib loo soo saari karo u beddelaa mid mar-mar dhaca.

Marka saddexaad: app-ku ma hayaa xaalad duug ah?

Ka hor intaadan taaban VPN, fur session gabi ahaan cusub oo u socda isla goobta. Haddii session-ka cusubi shaqeeyo oo kii hore uusan shaqeyn, tunnel-ku wuu fiican yahay, app-kuna wuxuu hayaa xidhiidh dhintay.

Kani waa kan ugu jaban saddexda baaritaan oo ah kan ugu badan ee la boodo, sababtoo ah daaqadda fashilma ayaa saxda ah shaashadda. Xir, mar kale fur, oo xusuusnow haddii dhibaatadu sii socoto. Haddii session-ka cusubi shaqeeyo, jooji baaritaanka tunnel-ka gabi ahaan. Haddii isaguna fashilmo, app-ku waa calaamad oo ma aha sabab.

App-yada qaar ayaa iskood u soo kabsada waqti ka dib, sidaas darteed calaamaddu waxay u ekaan kartaa mid iskeed is hagaajisay daqiiqado ka dib. Dabeecaddaas waxay tilmaamaysaa app-ka oo aan ahayn tunnel-ka, waana mudan in si gooni ah loo qoro. Saaxiibka yidhi iskeed ayay is hagaajisay waxa uu qeexayaa qaabkan, ma aha nasiib.

Ka dhig isbarbardhigga mid dib loo soo saari karo

Hayso doorsoomayaasha yar: hal shabakad gelitaan, hal muddo hurdo iyo isla codsiga koowaad mar walba. Kadib qor laba natiijo: haddii dib u xirid gacanta ahi hagaajiyo, iyo haddii hurdo kale guuldarrada soo celiso.

Waaya-aragnimada ugu dambeysa ayaa ah tan u kala saarta saddexda mushtar si ugu lagu kalsoonaan karo. Session cusub oo shaqeeya session duug ah oo fashilmay ka dib ma aha dhibaato tunnel, dib u rakibidda macmiilkuna ma beddelayso taas.

Keepalive joogtada ah ee WireGuard waxa uu sawirkan ku soo galaa oo kaliya sida keepalive khariidad NAT. Wuxuu diraa baakadaha si khariidaddu u furan tahay; kama horjoogsado mishiinka inuu seexdo, lamana sii wadi karo dirista inta habsocodku hakad ku jiro.

Qor tigidhka waxaad heshay: saddexda kee ayaa xumaa, maxaa hagaajiyay iyo sidaad dib u soo saartay. Qofka xiga ee Isniinta furka furaya ayaa kuugu mahadcelin doona, jawaabtana lama ahaan doonto mid laga bilaabo eber.