Ukuxhumanisa ama-VPN amabili: kufihla ini futhi kubiza ini

Imigudu emibili ehlangene ayikwenzi ungaziwa. Yona ihlukanisa ukubuka phakathi kwabahlinzeki ababili, ngakho akekho kubo obona ikheli lakho lasekhaya nendawo oya kuyo ngesikhathi esisodwa. Lona yinzuzo yangempela kodwa encane, futhi iza nezinkinga zokuhlela umgudu, i-DNS ne-MTU ezivela ngokokuqala lapho uthembela kuyo.

1. Nquma ukuthi isigaba sesibili sisebenzelani

Bhala umgomo ngomusho owodwa ngaphambi kokuhlela noma yini. Uma kuwukuthi umhlinzeki wakho we-inthanethi akaboni ukuthi uvakashela ziphi izingosi, umgudu owodwa wanele. Uma kuwukuthi akekho umhlinzeki oyedwa ongaxhumanisa ikheli lakho nokuhamba kwakho, kudingeka amabili. Uma kuwukuthi akekho ongakwazi ukukuhlonza, asikho isibalo sezigaba esifika lapho.

Uchungechunge luqinile kuphela ngokulandelela kukamhlinzeki obuthakathaka kanye namarekhodi e-akhawunti abawagcinayo bobabili. Izinkokhelo, i-imeyili yokubhalisa kanye ne-telemetry yohlelo kusemgudwini ngaphandle ngokuphelele.

2. Yenza isiphetho sangaphakathi sifinyeleleke ngomgudu wangaphandle

Ukwehluleka okuvamile ukuthi umgudu wangaphakathi awusungulwa neze. Ukuxhumana kwangaphandle kwesimo somgudu ophelele kuphethe umgudu ozenzakalelayo, ngakho umzamo weklayenti langaphakathi wokufinyelela isiphetho saso ugwinya umgudu wangaphandle bese uyalahlwa noma ufakwa kuluphu. Isiphetho sangaphakathi sidinga umgudu ocacile ngohlaka lwangaphandle, ofakwe ngaphambi kokuthi iklayenti langaphakathi liqale. Uma kungenjalo ukuxhawulana kugijima nomgudu bese kuyahlulwa.

I-WireGuard ikhombisa ukungqubuzana okufanayo kolunye uhlangothi. Kuyo yonke i-peer, AllowedIPs inquma ukuthi iziphi izindawo ezingena kulowo mgudu, ngakho uhlaka lwangaphakathi olufuna yonke ikheli lufuna futhi isiphetho sangaphandle ngaphandle uma umgudu othile kakhulu unqoba. AllowedIPs edlulanayo kumahlaka amabili iyisilungiselelo lapho uhlangothi olulodwa luhlulwa ngokuthula.

Ukuxhumanisa ngamakhontheyna kwenza ukuhlukanisa kucace kanye nesicupho sibe sobala. Ikhontheyna enendawo yayo yamagama, umgudu wayo ozenzakalelayo kanye neklayenti ngaphakathi idlulisa lokho umsingathi akuthumela kuyo; umsingathi akazange aqale ukusebenzisa lowo mgudu ngokwakhe. Vula ukudlulisela, engeza umgudu womgudu wekhontheyna, bese uqondisa insizakalo ekhelini lekhontheyna.

3. Gcina i-DNS emgudwini ofanayo

I-DNS kufanele ihambe lapho kuhamba khona ukuhamba. Uma umhlinzeki wangaphakathi ecindezela ama-resolver futhi umsingathi esabuza awasekhaya, lokho kufuna kudalula ngqo iziza okwakufanele umgudu uzifihle. Hlola ngokubamba kuwo wonke uhlaka lomgudu esikhundleni sokuthemba iphaneli yesimo seklayenti. Ukuvuza lapha akubonakali lapho uphequlula ngokujwayelekile futhi kucaca ekubambeni.

Amadizayini e-DNS ahlukanisiwe enza lokhu kube nzima, ngoba umbuzo wegama lasekhaya ungaba ngokomthetho ngaphandle komgudu. Bhala uhlu lwezihlukile ngamabomu esikhundleni sokuluthola kusuka ku-resolver okuvele kwaphendula.

4. Setha i-MTU ngaphambi kokuba abasebenzisi bakutholele wena

I-MTU ingenye into elindelekile ukulahlekelwa. Ukuhlanganisa okubili kususa izihloko ezimbili, futhi umgudu wangaphandle osewehlisile i-MTU yomgudu ushiya indawo encane ngaphakathi. Izimpawu ziyaziwa: izicelo ezincane ziyaphumelela, ukudluliswa okukhulu nokuxhawulana kwe-TLS kuyama.

ip link set dev wg1 mtu 1280 iyisixazululo esingacacile, futhi ukucindezela i-MSS kumdlulisi kungcono kakhulu. Ukuphinda uzame ukuxhumana akuyona isixazululo.

5. Hlola ukwehluleka ozokuthola ngempela

Phula umgudu wangaphandle ngamabomu bese ubuka okwenzekayo. Uchungechunge olubuyela ngokuthula emgudwini oqondile lapho isigaba sangaphandle sifa lubi kunokungabi nalu chungechunge, ngoba luvuza ngqo ngesikhathi ocabanga ukuthi uvikelwe. I-kill switch emisa konke ukuhamba iyindlela yokuziphatha okufanele uyilwele. Rekhoda umphumela, ngoba ngeke ufune ukuphinda uwuthole phakathi kwesigameko.

Ukubambezeleka nesigaba sesibili sokwehluleka yizindleko ezihlala zikhona. Izigaba ezimbili zisho futhi imigqa emibili yokusekelwa lapho okuthile kwehluleka ngehora elingalungile.