Ngemva kokuthi iskripthi sokusetha sisebenze, umuntu kufanele abe ngumnikazi wesiphathi se-VPN

Imisebenzi emibili ehlukene idayiswa njengomunye: ukuguqula umshini ube isiphathi se-VPN, nokufaka iklayenti le-VPN kukhompyutha okufanele ixhumane nesango lomunye umuntu. Iskripthi sokusetha siphendula owokuqala, asikwazi ukuphendula owesibili, noma i-README yaso ithini. Thatha i-iskripthi se-setup-ipsec-vpn njengesibonelo: yakha isiphathi se-IPsec/L2TP, i-Cisco IPsec noma i-IKEv2 kusiphathi se-Linux esisekelwayo sisebenzisa i-Libreswan ne-xl2tpd. Lokho kuyisivumelwano sokusetshenziswa kwesiphathi esisodwa, hhayi iresiphi ejwayelekile yanoma yimuphi umshini. Yini okufanele uyinqume ngaphambi kokuhambisa isiphathi sakho se-VPN, ngoba konke okulandela kumayelana nesiphathi.

Khuluma iqiniso ngesiphathi

Umshini ophinde usebenzise enye into, noma ogquma umlilo walo ulawulwa yikhonsoli yefu esikhundleni sedaemoni yasendaweni, uwukusetshenziswa okuhlukile kudivayisi ehlanzekile. Bhala phansi inqubomgomo oyisebenzisayo kanye nenguqulo oyisebenzisayo, bese uhlola kokubili ngokumelene namanothi okukhishwa aphezulu, hhayi iphosti yebhulogi yonyaka odlule.

Ukusebenza akusho ukuthi indlela ivulekile. Ku-IPsec, inethiwekhi engaphambi kwesiphathi kufanele ivume i-UDP 500 no-4500 futhi, kuye ngokwakhiwa, iphrothokholi ye-ESP uqobo. Iskripthi esiphuma ngempumelelo ngemva kweqembu lokuphepha elilahla amaphakethe angu-50 sakha isiphathi okungekho muntu ongafinyelela kuso, futhi akukho lutho ekukhishweni kwesifaki okusho lokho.

Okuthathwa isifaki ngempela

Linde ifayela lokucwangciswa nezimfihlo ze-IPsec, ukucwangciswa kwedaemoni le-L2TP, izinketho ze-PPP kanye namayunithi e-systemd asebenza kulezo zimbobo. I-README yephrojekthi ithi amafayela akhona acushwa ngaphambi koshintsho, okulusizo futhi okungeyona into efanayo nokwenza ikhophi yesiphathi. Nquma ukuthi yiziphi izingxenye ezizobuyekezwa amaphakethe okusabalalisa nokuthi yiziphi ezizobuyekezwa ngokusebenzisa kabusha iskripthi noma ngokulibhala kabusha, ngoba lezo ziyizindlela ezimbili zokunakekela ezinobunzima obuhlukile.

Bopha inguqulo oyigunyazile. Ikheli lokulanda elinikeza igatsha elizenzakalelayo namuhla lingaveza okuqukethwe okuhlukile ngenyanga ezayo, ngakho bhala i-commit noma inguqulo oyisebenzisile futhi ugcine ikhophi yakho. Lowo mkhuba owodwa uguqula isimo esingachazeki sibe yinto umuntu wesibili angayicabanga ngayo ekuseni ngehora lesibili.

Okungeke iskripthi sikunikeze khona

Ukuzenzakalela kuveza ukusetshenziswa okusebenzayo bese kuma lapho. Asinqumi ukuthi ithuneli kufanele ithinte izinsiza eziyimfihlo ziphi, lowo umbuzo wenqubomgomo yokungena futhi ugesi wesiphathi nenethiwekhi ephezulu kunombono wabo. Asinqumi nokuthi ubani uthola ubufakazi, busatshalaliswa kanjani, noma ukufinyelela komuntu kuhoxiswa kanjani lapho ehamba. Futhi asinqumi Indlela yokubuyisela isiphathi ngemva kokuqalisa kabusha ngemva kokubuyekezwa okubi, okuyinto abantu abayithola ngesikhathi esibi kakhulu kunazo zonke.

Amaphrofayili eklayenti nezimfihlo ezibonakalayo kuyinto yokufinyelela, hhayi irekhodi lokufaka. Iphrofayili eyenziwe yase yafakwa esiteshini sokwabelana iyi-akhawunti, futhi izinga elifanayo lisebenza kusithombe-skrini sesifinyezo sokufaka. Gcina uhlu oluvikelwe lwesimo sobunikazi obudingekayo ukuze kubuyiselwe insizakalo, futhi bhala ukuthi yibuphi ubufakazi obuhoxisiwe kusukela lapho.

Iklayenti lokuqala iwukuhlolwa kokwamukela

Yamukela ukusetshenziswa kusuka kuklayenti elilodwa eligunyaziwe, usebenzisa iphrothokholi oyivule ngempela. Hlola ukuthi igama langaphakathi liyaphendulwa, ukuthi indlela yokubuya iyasebenza, ukuthi ukuxhuma kabusha kuziphatha kahle, nokuthi indawo ekuyiwa kuyo engaphandle kwesethi evunyelwe iyenqatshwa. Ukungena ngempumelelo kusuka kolunye uhlelo lweklayenti akusona ubufakazi ngeklayenti oyihambisile.

Uma inhlanganisela oyifunayo ingasasekelwa, khetha indlela enakekelwayo ngaphambi kokufaka. Ukuvusa ukucwangciswa kwakudala kuzophinde kwehluleke ekubuyekezweni okulandelayo, futhi kuzothatha obunye ubusuku ukukulungisa.

Bhala ikhasi lokunikezela

Yenza lifushane: isiphathi, inguqulo eyasakha, izimbobo ezizidingayo, izingxenye kanye nabanikazi bazo bokuzibuyekeza, izinsiza ezivunyelwe, indlela yobufakazi kanye nenqubo yokubuyisela. Engeza indlela yekhonsoli noma eyangaphandle kweshaneli evamile oyosebenzisa lapho ushintsho kuthuneli kuyinto eyephule ukufinyelela. Ngakho umuntu olandelayo uthola insizakalo, hhayi umyalo ayesaba ukuwusebenzisa kabili.

Buyekeza lelo khasi lapho isiphathi sishintsha, hhayi kuphela lapho kukhona okungahambi kahle. Ikhasi lokunikezela elingakaze lifundwe liyidokhumenti eyekile ukuba yiqiniso buthule.