Kicinta VPN ee Windows ee app kasta iyo tunnel kala go'an: maxaa go'doomiya
Profile VPN Windows oo app kiciso kaliya wuxuu furaa tunnel. Tunnel kala go'an oo waddo leh ayaa go'aamiya waxa gala, labaduna si kala duwan ayay ugu guuldarraystaan hal app.
Laba habayn Windows ah ayaa isku eg in Settings oo si bakhtiyaan ah uma dhaqmaan. Mid waa profile VPN la koobiyeystay oo leh kicin app, sidaas darteed bilowga hal faylka fulaya ayaa tunnelka kor u qaada. Midda kale waa profile tunnel kala go'an oo liiska waddooyinkiisu si kadis ah u daboolo waxa appkaas la hadlayo. Midka hore wuxuu ka jawaabaa goorta tunnelku jiro. Midka labaad wuxuu ka jawaabaa baakadaha galo, oo kaliya kan labaad ayaa mishiinka intiisa kale ku reeba xiriirka jireed inta appku xiriir la leeyahay.
Kicintu waa qaanuun mudo nololeed, ma aha qaanuun waddo
Add-VpnConnectionTriggerApplication wuxuu ku xiraa waddo fayl fulaya magac profile. Marka howshaas bilaabato, Maamulaha Xiriirka Gelitaanka Fog ayaa soo wacaa profileka, iyo marka xaaladda kicinta dhammaato, xiriirku wuu dhici karaa. Waxba isweydaarsigaas kuma baadho sockets. Cmdletku wuxuu u baahan yahay shell la sare u qaaday, waddo buuxda oo binary-ga, iyo -Force marka aad beddesho gelitaan jira. Xaqiiji in xiriirku sii socday iyada oo la isticmaalayo Get-VpnConnectionTrigger halkii aad ku kalsoonaan lahayd fariinta; tixraaca Add-VpnConnectionTriggerApplication wuxuu taxaa cabbirrada iyo tusaalooyinka.
Laba xaddid ayaa sharraxaya inta badan warbixinnada “kicintu waxba ma qabsato”. Kicinnada waxaa lagu dhisay profile-yo loogu talagalay dhammaan isticmaalayaasha, markaa baaxadda profileka ayaa ah waxa ugu horreeya ee la caddeeyo, waddada appkuna waa in ay la ekaataa binary-ga dhab ahaan socda, ma aha shortcut ama bilow-yaqaan abuura howl labaad. Xaddidka kale waa ula kac: shabakad Windows u kala saarto mid la aamini karo, kicintu way fadhiisataa, sababtoo ah profileka waxaa loogu talagalay in uu ka shaqeeyo xafiiska dibaddiisa.
Add-VpnConnectionTriggerApplication -Name "APP_VPN" -ApplicationID "C:\Program Files\Vendor\app.exe" -Force
Get-VpnConnectionTrigger -Name "APP_VPN" | Format-List *
Get-VpnConnection -Name "APP_VPN" | Format-List Name,ConnectionStatus,SplitTunneling,AllUserConnectionTunnel kala go'an ayaa go'aamiya waxa tunnelka gudba
Marka tunnel kala go'an damisnaado, Windows wuxuu interface VPN ku rakibaa waddo caadi ah oo ku salaysan fasalka oo leh cabbir hoose. Socket kastaa way raacdaa, oo ay ku jirto browserka iyo adeegga cusboonaysiinta, sidaas darteed kicin ku jirta habayntaas ayaa mishiinka oo dhan dhaqaajisa inta profileku xiriir la leeyahay. Kicintu weli waa kaliya qaanuun mudo nololeed; baaxadda saameyntu waxay ka timid waddada.
Marka tunnel kala go'an shidnaado, profileku wuxuu qaataa kaliya prefixyada gateway-ga riixo ama aad ku darto interface VPN. Wax kasta oo kale waxay sii isticmaalaan waddada caadiga ah ee jireed. Taasi waa habaynta dadku badanaa ula jeedaan “hal app oo mara bixitaan gooni ah”, waana go'aan waddo laga bilaabo bilow ilaa dhammaad.
Set-VpnConnection -Name "APP_VPN" -SplitTunneling $true
Get-VpnConnection -Name "APP_VPN" | Select-Object SplitTunneling
Get-NetRoute -InterfaceAlias "APP_VPN" | Sort-Object DestinationPrefixHalka kala qaybin waddo leh ay joojiso go'doominta appkaaga
Guuldarraysta caadiga ah waa meel loo socdo oo aan weligeed ka muuqan liiska waddooyinka tunnelka. App ku galo hal ciwaan kadibna ka soo shubma CDN, ama xalliya toban endpoint oo wareegaya, waxay qaar ka mid ah xiriirada dhigaysaa interface VPN iyo inta kale Wi-Fi. IPv6 waa shax gaar ah, sidaas darteed profile riixa kaliya prefixyada IPv4 wuxuu u ekaan karaa mid sax ah inta taraafikada IPv6 ee appku uu gudaha ku sii jiro.
Laba saameyn oo yar ayaa isla sidaas muhiim u ah. Waxaa guuleysta iswaafajinta prefixka ugu dheer, sidaas darteed waddo on-link oo gaar ah, /32 loo riixay host maamul, ama subnet adapter labaad ayaa ka adkaan kara tunnelka ciwaanka aad danaynayso. Xallinta magacyaduna waxay dhacdaa ka hor waddooyinka: haddii aanay server-yada DNS ee profileka ama qaanuun NRPT daboolin magaca, appku wuxuu ku xallin karaa adapterka jireed kadibna wuxuu wacaa ciwaan aan weligiis ku jirin prefixyada tunnelaysan.
Saddex qaab, iyo waxa mid kastaa iibsado
Shaxdu waa qaybta aan darbiga ku dhajin lahaa, sababtoo ah go'aanku waa baaxadda saameynta ee ma aha sifooyinka. Haddii meelaha appku u socdo ay yihiin prefixyo xasilloon oo aad taxin karto, kala qaybinta waddo leh waxay bixisaa go'doomin oo raad ugu yar. Haddii aanay sidaas ahayn, profile waddo caadi ah oo ka dambeeya VM ama qalab labaad ayaa kala-soocidda daacad ku haya iyada oo qiimaha lagu bixinayo dhaqaajinta wax ka badan hal howl.
| Shape | What starts the tunnel | What enters it | Pick it when |
|---|---|---|---|
| Trigger plus routed split | Process start | Only pushed or added prefixes | The app's endpoints are stable prefixes and the host should stay direct |
| Trigger plus default route | Process start | Everything, machine-wide | You need one exit for all traffic and accept the wider scope |
| Separate VM or device | Guest boot or login | Everything inside that guest | The app's destinations rotate, or the host must keep its own public address |
Waxa aan midkoodna bixin waa xiriirinta heerka socket ee hostka. Macmiilka VPN caadiga ah ee Windows ma laha qaanuun sheegaya in howshan ay tahay in ay isticmaasho adapterkaas; kicinnada iyo filtarrada waddooyinku waxay ku nool yihiin lakabyo kala duwan, lakabka doorta interface-kuna waa shaxda waddooyinka. Haddii hage ballan qaado fulin app kasta oo kaliya laga helay profile la koobiyeystay, weydii waddo intee leh ama filter kee ayaa shaqada qabanaya.
Xaqiiji lammaanaha hal mar
Si gooni ah u tijaabi mudo nololeedka iyo waddooyinka, isla nidaamkaas. Xir appka, xaqiiji in profileku soo sheegayo Disconnected, kadib bilow appka oo hubi in xaaladdu is beddeshay. Kaliya marka tunnelku kor yahay ayaa ah inaad weydiiso halka meel gaar ah ay u socoto, oo waa inaad isticmaasho ciwaanka appku dhab ahaan wacayo ee ma aha qiyaas.
$app = Get-Process app | Select-Object -First 1
Get-VpnConnection -Name "APP_VPN" | Select-Object ConnectionStatus
Get-NetTCPConnection -OwningProcess $app.Id -State Established | Select-Object RemoteAddress,RemotePort
Find-NetRoute -RemoteIPAddress 203.0.113.10Find-NetRoute wuxuu magacaabaa interfaceka iyo boodboodka xiga ee qaadi lahaa meeshaas. Alias jireed halkaas waxay ka dhigan tahay in tunnelku kor yahay oo aan khusayn qulqulkaas: hubi prefixyada la riixay, kadib waddooyinka gaarka ah, kadib IPv6. Haddii xaaladdu waxba is beddelin, kicintu ma kicin, waddada faylka fulaya, baaxadda profileka iyo diiwaanka hawlgalka macmiilka VPN ayaa ah saddexda meelood ee la eego.
Si nadiif ah u nadiifi si tijaabada xigta ay daacad u noqoto
Uga saar nidaamka ka soo horjeeda kii aad ku dhistay: marka hore kicinta appka, kadib profileka. Tirtirka profileka inta kicintu sii jirto waxay ka tagtaa xiriir laalaada oo isku dayga xiga khalda, iyo Remove-VpnConnection -Force mar walba ma nadiifiso gelitaanka buugga telefoonka ee lagu abuuray cmdlet-yada dibaddood.
Gelitaannada isticmaale kastaa waxay ku yaalliin rasphone.pbk isticmaalaha oo ka hooseeya profileka Roaming; gelitaannada dhammaan isticmaalayaasha waxay ku yaalliin ProgramData. Hubi bakhaarka u dhigma baaxadda profileka, dib u xiriir profilekii aad haysatay, oo xaqiiji in waddooyinkiisa iyo DNS ay weli shaqeeyaan, si tijaabo dambe ay u cabbirto isbeddelka aad samaysay ee ma aha xaalad hadhay.
- Tunnelku wuxuu bilaabmaa marka howshu bilaabato, ma aha marka la galo.
- Kaliya prefixyada loogu talagalay ayaa ka muuqda interface VPN.
- Ciwaanka fog ee dhabta ah ee appka waxaa loo xalliyaa alias VPN.
- Ma hadho kicin laalaada ah ka dib marka profileka la saaro.