Uhlelo oluboshwe ekhelini le-VPN lusasebenzisa umzila ongafanele

Isokhethi eboshwe ekhelini le-VPN ilandela umzila ojwayelekile wokuzenzakalela. Hlola ubunikazi bekheli kanye nokusesha okuqaphela umthombo ngaphambi kokwengeza imithetho yenqubomgomo.

Uhlelo luboshelwa ekhelini le-VPN, futhi uxhumano lusaphuma ngomzila ojwayelekile wokuzenzakalela. Akukho okwehlulekile ekuboshweni; kwenze ngqo lokho okukwenzayo ukubopha. Ukubopha isokhethi ekhelini lendawo kukhetha ikheli lomthombo elibekwa i-kernel esihlokweni. Akufaki umzila, futhi akudali umthetho wenqubomgomo ozothumela amaphakethe aphethe lowo mthombo kumhubhe othile.

Ingxenye esele yale ncwadi iwuhlelo lokuhlola engilusebenzisayo, kanye nomyalo onikeza umbono ngamunye.

Yini ukubopha okunqumayo ngempela

Ukubopha kunikeza isokhethi ikheli lendawo. Bese kuba i-kernel yenza ukusesha komzila okufanayo ebingakwenza ngenye indlela, ngaphandle uma umthetho wenqubomgomo ushintsha ukuthi lolo sesho lufunda iliphi ithebula.

Yingakho iphakethe lingaphuma nekheli lomthombo we-VPN ku-interface ebonakalayo. Ngakolunye uhlangothi lifika lisuka ebangeni eliyimfihlo inethiwekhi engakaze ililindele kuleyo ndlela, ithrafikhi ebuyayo ayinawo umzila wokubuyela emuva, futhi uxhumano luyalenga noma lusethwe kabusha.

Inkomba yamasokhethi e-IP ye-Linux ichaza incazelo yokubopha. Ingxenye yomzila ihlala ku-ip-rule naku-ip-route, futhi lezo ziyizincwadi ezihlukene ngesizathu.

Qinisekisa ukuthi ikheli lingelalesi sikhala samagama

Ikheli ongabopha kulo kufanele libe khona ku-interface ngaphakathi kwesikhala samagama senethiwekhi lapho uhlelo lusebenza khona. Ikheli lozakwethu, ikheli lesango, noma ikheli elikhona kuphela kwesinye isikhala samagama angeke liboshwe, futhi ucingo luhluleka nge-EADDRNOTAVAIL.

ip -br addr show
ip netns identify <pid>
ss -tanp | grep <port>

Sebenzisa lezo zintathu esimweni esifanayo nohlelo: isikhala samagama esifanayo, nomsebenzisi ofanayo uma ungamthola. Idayagramu endala ye-net30 ayibona ubufakazi bokuthi yiluphi ikheli i-topology yakho yamanje eyinikeze iklayenti. Funda i-interface esebenza ngempela.

Funda ukusesha kwalowo mthombo naleyo ndawo

Umyalo owodwa uphendula umbuzo ukubopha okungazange kuwuphendule:

ip route get 203.0.113.10 from 10.8.0.2
ip rule show

Umugqa wokuqala uphrinta umzila iphakethe elizowuthatha lisuka kulowo mthombo liya kuleyo ndawo, kuhlanganise ne-interface yokuphuma nomthombo okhethiwe. Uma ibiza i-interface ebonakalayo, ukubopha nomzila akuhambisani, futhi iphakethe lizophuma nomthombo indlela engakwazi ukubuyela kuwo.

Khona-ke i-ip rule show ikutshela ukuthi ngabe umthetho uthile ubuzokhetha elinye ithebula. Ukubaluleka kubalulekile lapha, ngoba umthetho wokuqala ofanayo uyawina, futhi umthetho obamba konke ngaphezu komthetho wakho wenza umthetho wakho ungabonakali.

Faka umthetho wenqubomgomo kuphela uma lokho kuwumklamo

Umzila osuselwe kumthombo uwumklamo wamabomu, hhayi ukulungisa kohlelo olulodwa. Uma umnikazi wenqubomgomo efuna ukuthi ithrafikhi evela kunethiwekhi encane yomhubhe isebenzise umhubhe, umthetho ungowokuhlela kwakhe hhayi umyalo wesikhathi esisodwa kukhompyutha yakho ephathekayo.

Isimo esisebenzayo ithebula elikhethiwe elinomzila wokuzenzakalela odlula kumhubhe, kanye nomthetho othumela ibanga lomthombo we-VPN kulelo thebula. Engeza okuhlukile okudingwa umklamo, ngoba ithebula eliqukethe kuphela okuzenzakalelayo komhubhe lizobamba nezindawo okuhloswe ukuthi zihlale zingezendawo noma zifinyeleleke ngendlela ebonakalayo.

ip route add default dev tun0 table 100
ip rule add from 10.8.0.2 table 100 priority 100
ip route get 203.0.113.10 from 10.8.0.2

Hlehlisa nge-ip rule del ne-ip route flush table 100. Noma yini engezwe ngale ndlela iyanyamalala lapho kuqalwa kabusha ngaphandle uma umphathi eyibhala, okuyisici sokuphepha nesizathu sokungagcini ikhophi eyodwa emlandweni we-shell yakho.

Qinisekisa ngemibono emithathu

Bhala phansi umthombo owacelwa uhlelo, umzila okhethwe ukusesha, kanye nomthombo iseva eyibone ngempela.

Lezi zintathu zingase zingavumelani, futhi ukungavumelani ngakunye kukhombisa kwenye indawo. Ukubamba ku-interface yomhubhe kufakazela ukuthi iphakethe liphume nomthombo olungile. Ukubamba ku-interface ebonakalayo kufakazela ukuthi liphume ngendlela engafanele. Umbono ohlangothini lweserva uwona kuphela ofakazela umzila kusukela ekuqaleni kuze kube sekugcineni.

Uma uhlelo lunikeza inketho yokubopha kudivayisi noma imodi yomzila yohlelo ngalunye, kubheka njengendlela ehlukile enemikhawulo ehlukile. Izilungiselelo ezibukeka zifana azipheli zonke esinqumweni sifanayo se-kernel.

Izihloko ezihlobene