I-automation ye-L2TP ku-Android: i-script ingacela, ayikwazi ukuyakha

Inganekwane iwukuthi L2TP ku-Android kungenye into i-script ye-shell engayiqalisa: engeza umzila, shayela umsindo wakudala, kuqedile. Ngeke kube njalo, ngoba izingqimba ezine ezihlukene kufanele zivumelane ngaphambi kokuba umhubhe uthwale iphakethe. I-IPsec ivikela umzila, i-L2TP ithwala iseshini, i-PPP ixoxisana ngokuxhumana, futhi i-Android kufanele ibhalise umphumela njenge-VPN engahamba ngayo. Ngikubonile lokhu kuzanywa kabili ngemiyalo ekopishiwe, futhi kokubili umzila wawukhona kuyilapho kungekho lutho olusetshenziselwe ukubethela.

Ushintsho lomzila lufinyelela ini ngempela

Ukungeza umzila kunquma ukuthi iphakethe liya kuphi ngokulandelayo. Akuxoxisani ngesivumelwano sokuphepha, akuvuli iseshini ye-L2TP, futhi akusebenzi ukushintshana kwe-PPP okukhiqiza ikheli, i-peer kanye nezilungiselelo ze-DNS. Ku-handset umphumela obonakalayo ukuthrafikhi ephuma ngomzila ongafanele, noma ephuma bese ifa, ngaphandle kwesimo somhubhe noma kuphi.

Kunjalo nangocingo lwensizakalo olukopishwe kusukela kunguqulo endala. Amapayipi e-VPN angaphakathi e-Android akuwona i-API yokulawula eshicilelwe, futhi ukuthengiselana okunezinombolo okuvela kwenye inguqulo kungase kuthinte umsebenzi ohlukile noma kufune amalungelo i-script engenawo. I-automation ethwala iphasiwedi akumele neze incike emibonweni yangaphakathi eqanjiwe, ngoba indlela yokwehluleka iwukuthi kube no-op ethule noma iphrofayela eyakhiwe uhhafu okungekho muntu oyihlanza.

Abanikazi abane, futhi i-script ayisibo

Zithathe ngokulandelana. I-IPsec isungula futhi igcina umzila ovikelwe futhi iqinisekisa ama-peer. I-L2TP ithwala iseshini phezu kwawo, futhi ukwendlaleka kwezingqimba yikho okwenza izinga likubheka njengezindlela ezihlukene hhayi njengephrothokholi eyodwa. Ngaphakathi kwalokho, i-PPP ixoxisana ngamapharamitha wokuxhumana azosetshenziswa iklayenti. Bese i-Android inengxenye yeplathifomu: isixhumi esibonakalayo se-VPN esibhalisiwe, ububanzi ngohlelo lokusebenza ngakunye, isimo se-always-on kanye nomjikelezo wokuphila onquma okwenzekayo lapho uhlelo lokusebenza lubulawa.

I-script ingabona ingqimba yokugcina kuphela kulezo, futhi ngokuvamile ngokungaqondile. Ingacela iklayenti ukuthi lixhume uma lelo klayenti liveza ukulawula okubhaliwe, futhi ingabe seyiqaphela isimo sesixhumi. Ayikwazi ukuthatha indawo yezingqimba ezintathu ezingaphansi, futhi ayikwazi ukwenza iplathifomu ibheke isixhumi esingabhalisiwe njenge-VPN.

Kungani ne-daemon kuyisinqamuleli

Ukuqalisa i-daemon ye-Linux enamalungelo kudivayisi kubonakala njengengxenye engekho, futhi ngokuvamile iyayiphakamisa ngempela umhubhe. Engakwenzi ukubhalisa lowo mhubhe ku-Android. Isixhumi sikhona ngaphakathi kwe-kernel, kodwa ukukhetha kwe-VPN yeplathifomu, ukuhamba kwemizila ngohlelo lokusebenza, inqubomgomo ye-always-on kanye nomjikelezo wokuphila akukwazi ngakho, futhi izinguquko zomzila ne-DNS zedaemon uqobo ziyancintisana nomphathi wenethiwekhi ngezethuli ezifanayo.

Umphumela uxhumano olusebenza kuthrafikhi yedaemon futhi ngendlela emangalisayo lungasebenzi kuhlelo lokusebenza obukukhathalele, noma oluhlala kuze kube yilapho uhlelo luhlola kabusha amanethiwekhi alo. Akukho emphumeleni womabili okuyibhugi yeplathifomu; umngcele phakathi kokuba nesokhethi nokuba nomhlinzeki we-VPN.

Imizila esekelwe ibukeka kanjani

Uma inhlangano ingakwazi ukudlulela kuphrofayela elethwa yi-Android uqobo, indlela yeplathifomu iyona eqotho. Kusukela ku-API 30, VpnManager isekela ukuhlinzeka nokulawula kwamaphrofayela e-VPN eplathifomu yizinhlelo zokusebenza, ngokugeleza kokugunyaza okuxhunywe kuhlelo lokusebenza olushayayo. Akusona isiguquli se-L2TP: imodeli yephrofayela eyihlinzekayo ye-IKEv2 ayikuhumushi ukucushwa kwe-L2TP okukhona, futhi ukushintsha iphrothokholi ukufuduka, hhayi ukuqanjwa kabusha. Ubunikazi, imizila, i-DNS eyimfihlo kanye nezimvume zokufinyelela kufanele kudluliswe ngamabomu.

Uma insizakalo kufanele ihlale i-L2TP/IPsec, inhlanganisela esekelwe i-klayenti kanye nokukhishwa kwe-OS umqhubi akubhala ngempela, kanye nenkontileka yayo ye-automation uma ikhona. Uma kungekho ukulawula okubhaliwe okungenabantu, impendulo efanele ukuxhumana ngesandla okusekelwe, hhayi i-script enamalungelo entekenteke ezenzeka isebenza kukwakhiwo okukodwa.

I-automation elungile yenzani

Uma kunokulawula okubhaliwe, i-automation inomsebenzi omncane futhi ovikelekayo: cela uxhumano olushiwo, linda ukulungela, yeka lapho ukufakazela noma ukusetha kwehluleka, sebenzisa umthwalo ohlosiwe, futhi ushiye ukuhlanza engxenyeni ephethe uxhumano. Izifakazelo zihlala neklayenti elazi ukuzigcina nokuziphenduza.

Bhala ukuthi iyiphi ingxenye ephethe iyiphi ingqimba ngaphambi kokubhala umugqa wokuqala, futhi uhlole umphumela ngokusho kwalokho:

• I-IPsec ne-PPP zisingathwa yiklayenti, hhayi imizila ye-script.
• Uxhumano luvela esimweni se-VPN seplathifomu, ngakho ububanzi ngohlelo lokusebenza ngakunye ne-always-on kuyasebenza kulo.
• Akukho cingo lwensizakalo lwangaphakathi, inombolo yokuthengiselana noma umbono oqanjiwe othwala isifakazelo.
• Ukwehluleka kunoma yisiphi isinyathelo akushiyi iphrofayela ebhaliswe uhhafu.