Ingabe Imizila ye-DHCP Ingathumela Ithrafikhi Yakho Izungeza Umhubhe we-VPN?

Ukubethela kuqala emngceleni, futhi lowo mngcele uyisinqumo somzila esithathwa indawo yokuphela ngaphambi kokuba noma yiliphi iphakethe lifakwe emgqonyeni. Inethiwekhi engayiboni nhlobo imiyalo yakho isengakunikeza umshini wakho umzila ewuthanda ngaphezu kwalowo womhubhe ngokwawo. Lapha amaphutha amabili ayadidaniswa: ukufunda iphakethe eselivele lingaphakathi komhubhe, nokuqondisa iphakethe elingakaze libekwe lapho.

Umehluko ubalulekile ngoba iphutha lesibili lishesha ukuhleleka futhi kulula kakhulu ukulweqa. Livela njengesicelo esiphume ngengxenye yokuxhumana engalungile kuyilapho iklayenti lisabika uxhumano olunempilo.

Izindlela Ezimbili Inethiwekhi Engakuthinta Ngazo

Iphakethe elifinyelela emhubheni linomthwalo walo ofihliwe kulo lonke igxathu eliwudlulayo, futhi lokho kuvikelwa kuhlala ngisho nomzila uma ukumangaza. Iphakethe elingafinyeleli nhlobo emhubheni isicelo esivamile esivela ekhelini lakho, sithunyelwa lapho ithebula lomzila likhombe khona. Iphutha lokuqala lidinga isibonakaliso esiphukile noma umlingani ogilwile, kuyilapho elesibili lidinga kuphela umlayezo wokumiswa umshini wakho owukhethe ukuthemba. Lokho kungalingani yikona okwenza ingxenye yomzila ifanele ukuhlolwa kwayo.

Ithuluzi elisemzileni alidingi izikhiye zakho ukuze lithinte icala lesibili. Lidinga kuphela ukuthi indawo yakho yokuphela yamukele umzila, isihlukanisi noma umthetho wenqubomgomo okhiqiza lowo.

expected:  app -> tunnel device -> encapsulation -> internet
observed:  app -> wlan0        -> plaintext     -> internet

Umzila Ungavela Kuphi Ngaphambi Kokuba Umhubhe Ube Khona

I-DHCP inikeza okungaphezu kokuqashwa kwekheli. Inketho yomzila oqinile ongenakho ukwahlukaniswa ingathwala iziqalo zendawo ekuyiwa kuyo kanye namagxathu alandelayo, futhi RFC 3442 ixoxa ngemiphumela yezokuphepha yekheli lomsizi elingalungile: ithrafikhi eqondiswe kabi, ukunqatshwa kwensizakalo, noma umboni ohlezi emzileni. Iklayenti elamukela leyo mizila ngaphambi kokuba umhubhe uphakame lingagcina selisemzileni othandwayo ongahlangene nhlobo nomhlinzeki wakho.

Akukho kulokho okwenza ukujovwa komzila kube yinto yonke. Iklayenti kumele lamukele inketho, isiqalo kumele sihlanganise ithrafikhi oyikhathalele, igxathu elilandelayo elikhethiwe kumele lifinyeleleke, futhi inqubomgomo yokuphoqelela kumele ivumele iphakethe ukuphuma ngalowo mzila. Susa noma yikuphi kwalokho bese impendulo efanayo ingabi nabungozi. Yingakho futhi imishini emibili kunethiwekhi eyodwa ingaziphatha ngendlela ehlukile, ngoba ayisebenzisi iklayenti elifanayo, inqubomgomo efanayo noma umndeni wekheli ofanayo.

I-IPv6 ifanele ukuhlolwa kwayo, ngoba izimemezelo zomsizi zithwala umzila ozenzakalelayo ngokhodi oluhlukile kunenketho ye-DHCPv4. Ukuhlola okuhlola kuphela ithebula le-v4 akukuhlanganisanga lokho.

Hlola Umzila Okhethwa I-Kernel Ngempela

Imibuzo yomzila ingaphendulwa, ngakho yibuze bona esikhundleni sokucabanga ngokukhanya kwesimo. Imiyalo engezansi ikhombisa umzila nomsuka okukhethiwe wendawo eyodwa, kanye nemithetho engadlula ithebula eliyinhloko. Yisebenzise uma uxhumekile futhi futhi ngemuva kokuxhuma kabusha, ngoba ukuvuselelwa kokuqashwa kungashintsha impendulo.

ip route get 203.0.113.10
ip route show table all | grep -E '^(default|203\.0\.113)'
ip rule show
resolvectl query example.com

Funda umphumela ngezinto ezimbili: ingxenye yokuxhumana eshiwo emzileni kanye nekheli lomsuka elikhethiwe. Umzila womhubhe usho ithuluzi lomhubhe, umzila ophuzile usho elomzimba, futhi umehluko ubonakala ngaphandle kokukhiqiza noma yini. Uma impendulo ishintsha phakathi kokusebenza, gcina imiphumela yomibili futhi uqhathanise imithetho eyikhiqizile.

Ungami emzileni ozenzakalelayo. Ukukhululwa kohlelo, isiqalo somhubhe ohlukanisiwe, noma umthetho wesibili wenqubomgomo kungathwala indawo ethile izungeza umhubhe kuyilapho ozenzakalelayo usakhomba ngaphakathi.

Nquma Ukuthi Ukuphoqelela Kufanele Kube Kuphi

Izimo ezintathu zinquma ukuthi ukuphoqelela ohlangothini lweklayenti kwanele noma udinga okuthile ngaphandle kwakho. Uma iklayenti lifaka futhi livikela imizila yawo wonke umndeni wekheli oyisebenzisayo, umhubhe onomzila ozenzakalelayo ngokuvamile wanele. Uma umshini kumele ufinyelele izinsiza zasendaweni kuyilapho konke okunye kuhlala emhubheni, lokho kukhululwa kumele kubalwe futhi kuthathwe umthwalo wakho, hhayi ukushiyelwa lokho okumenyezwa inethiwekhi yokufinyelela. Futhi uma isigaba sikwazi ukubopha ithrafikhi engxenyeni yokuxhumana ngohlelo ngalunye, lokho kubopha kuyisiqiniseko esinamandla ukudlula umzila ongadlulwa yinoma yini.

Noma yini oyikhethayo, bhala isinqumo lapho kuhlala khona ukumiswa. Umthetho okhona ngoba othile wawubhala ngesikhathi sehlakalo ngeke uhlale kuze kube ukuqaliswa kabusha okulandelayo, ngakho gcina ukukhululwa kwasendaweni nokokuqala kuncane futhi ubhale ukuthi kungani ngakunye kukhona.

Phinda usebenzise imiyalo yokubuzwa ngemuva kokuthuthukiswa kweklayenti ngakunye nangemuva koshintsho lwenethiwekhi ngalunye, futhi uqhathanise nomphumela wokugcina oqoshiwe. Ithebula lomzila liwumngcele wokuphoqelela, ngakho liphathe njengalowo.