Joojinta badbaadada VPN: goorma iyo waxa taraafikada ah ayuu joojiyaa
Dib u xiriirku wuxuu soo celiyaa tunnel-ka; joojintu waxay go'aansataa waxa dhaca inta uusan jirin. Si gooni ah u tijaabi xiriirka go'ay, gacanta ku goynta, ka bixista app-ka iyo isbeddelka shabakadda.
Laba shaqo ayaa lagu sifeeyaa hal eray waxayna qabtaan shaqooyin kala duwan. Dib u xiriirka otomaatiga ah wuxuu isku dayaa inuu soo celiyo tunnel-ka, wuuna ku guuleysan karaa hal ilbiriqsi gudahooda inta codsiyadu ku guuldareystaan farqigaas. Joojintu waxay go'aansataa waxa ku dhaca taraafikada farqigaas. In macmiil loo akhriyo sidii in labaduba ay hal dejinta yihiin ayaa keenta in dadku ay aaminaan calaamad halkii ay aaminaan siyaasad.
Joojinta iyo dib u xiriirku waa go'aanno gooni ah
Hal macmiil wuxuu joojiyaa kaliya marka xiriirka go'itaanku uusan filanayn, ka dibna dib u xiriira oo qaadaa joojinta. Mid kale wuxuu hayaa joojin heer nidaam ilaa qof gacan ku beddelo dejinta, saddexaadna wuxuu u arkaa goyn ula kac ah fasax lagu soo celinayo gelitaanka caadiga ah. Kuwani waa saddex dabeecadood oo kala duwan, waxaana dukumentiyada iibiyaha sheegayaan midka ay hirgeliso noocaada.
Soo dejinta profile ma go'aansato su'aashaas. Isla profile-ka server-ka ayaa lagu rarayaa laba macmiil oo leh dabeecad joojin ka soo horjeeda, sababtoo ah profile-ku wuxuu qaadaa dejinno ma aha ballan. Taas darteed sanduuqa calaamadaynta ee desktop-ka iyo badhanka telifoonka oo leh calaamado isku mid ah ayaa hirgelin kara xeerar kala duwan. Akhri sharaxaadda ku xigta kontoroolka platform-kaaga, ka dibna tijaabi waxa uu sameeyo.
Isla profile-ku si kala duwan ayuu u dhaqmaa laba macmiil
Dejinta app-ka OpenVPN Connect waxay sharraxaan hab tunnel oo haynaya taraafikada caadiga ah kaliya inta macmiilku soo sheegayo xaalad hakad ama dib u xiriir, taas oo ka cidhiidhi badan ballan guud oo ku saabsan dhacdo kasta oo platform kasta. Akhri xaaladaha liiska ku qoran, ma aha magaca alaabta. Sharaxaad loo qoray hal nooc oo macmiil ma u gudubto macmiilka iibiyaha kale.
Android wuxuu muujiyaa isla erayga laba kontorool, sababtoo ah VPN-ka had iyo jeer shidan iyo joojinta isku xirka VPN-la'aan ayaa si gooni ah loo dukumenteeyay. Macmiil desktop oo leh sanduuq calaamadayn isku magac ah ayaa hirgelin kara wax ka cidhiidhi ama ka ballaaran mid kasta oo ka mid ah. U qaado calaamad la wadaago laba menu inay tahay shil ilaa labada sharaxaad la akhriyo. Aaladaha la maareeyo waxay ku daraan lakab saddexaad, sababtoo ah profile-ka aaladda wuxuu qasbi karaa dejinta uusan isticmaaluhu arkin ama aanu ka noqon karin.
Dejinta platform oo isku eg isku mid ma aha
Isbarbar dhig kontoroolka aad aragto iyo siyaasadda dhab ahaan khuseysa. Aalad la maareeyo, badhanku muuqda wuxuu noqon karaa mid cawl, ama wuxuu noqon karaa mid shidan inta profile heer sare ah uu qasbayo lidka. Weydiiso siyaasadda wax ku oolka ah ee ma aha tan maxalliga ah, jawaabna qoraal ku hel.
Qor waxa lakab kastaa sheeganayo ka hor inta aadan wax tijaabin, sababtoo ah labaduba inta badan isku raacaan maayaan farqigaasna way lumaan karaan marka tijaabooyinku bilaabmaan. Aalad si sax ah u joojisa inta tijaabada socoto waxaa laga yaabaa inay u joojiso sabab qofna aan dukumenteeyn.
Hal dhacdo mar kasta socodsii oo qor koodhka
Hal dhacdo mid kasta tijaabi, codsi aan waxyeello lahayn, oo tijaabo kasta ka dhig codsi cusub ee ma aha bog laga yaabo inuu horey ugu jiro kaydka. Amarrada hoose waxay hoos u dhigaan tunnel-ka, waxay codsadaan bog, waxayna muujinayaan haddii interface-ku soo noqday.
ip link set tun0 down
curl -s -o /dev/null -w "%{http_code}\n" --max-time 5 https://example.com
ip -brief address show tun0Shaxdu waxay ku xirtaa fal kasta indho-indheynta muhiimka ah iyo caddaynta u qalanta in la hayo. Codsi ku guuldareysta waqtiga dhexdiisa wuxuu sheegayaa in joojintu shaqeysay; codsi gudba wuxuu sheegayaa in taraafikadu ay heshay waddo kale, taas oo laga yaabo inay tahay waddo laga reebay ee ma aha joojin la damiyay. Ku celi dhammaan kooxda ka dib cusbooneysiin software oo muhiim ah ama isbeddel siyaasadda marin, sababtoo ah mid kastaa wuu beddeli karaa laanta iyada oo aan dejinta muuqata dhaqaaqin. Ugu dambeyntii waxaad rabtaa dabeecad guuldarro la saadaalin karo, ma aha calaamad deganaansho leh.
| What I do | What I watch | Evidence to keep |
|---|---|---|
| Bring the tunnel down by hand | Whether a fresh request fails at once | The HTTP code and the client state at that second |
| Choose Disconnect in the client | Whether ordinary access returns on purpose | The same request succeeding with no tunnel up |
| Quit the app, then reboot | Whether the block outlives the client | A request made from a clean boot |
| Move from Wi-Fi to cellular | Whether DNS and IPv6 follow the policy | The resolver answer, the route table and the code again |
Ka-tagyo, bogag marti iyo waxa joojintu aanay samayn karin
Gelitaanka shabakadda maxalliga ah waa ka-tagga caadiga ah, wuxuuna beddelaa baaxadda ballanta. Macmiilku wuxuu gaari karaa daabacaadda isla subnet-ka isagoo joojinaya wax kasta oo kale, taas oo macquul ah guriga lana su'aal gelin karo shabakad martida. Go'aanso haddii aad rabto ka-taggaas ka hor inta dhacdo kuu ogaato.
Joojin adag waxay sidoo kale adkaynaysaa gelitaanka bogga shabakadda martida, sababtoo ah boggu waa taraafikada tooska ah ee joojintu u jirto inay joojiso. Baro habka la taageeray ee shabakadda loo fasaxo, ka dibna si ula kac ah u soo celi siyaasadda halkii aad damin lahayd kontoroolka ilaa boggu soo raro. Hayso jawaabta xalliyaha iyo shaxda marin ee isla qoraal, sida hoose. Waxa joojintu aanay samayn karin waa inay adeegga ka dhigto mid qarsoodi ah, sababtoo ah joojinta taraafikada tunnel-ka dibadiisa waxba kama sheegto waxa gudihiisa dhaca.
resolvectl query example.com
ss -tunp | grep -v tun0