Ikhasi lemininingwane elinophawu lwe-VPN lithi idivayisi ingenza okuthile nge-VPN. Alisho ukuthi i-firmware ingasebenza njengeklayenti yephrothokholi esefayeleni oliphethe. Lawa ngamakhono ahlukene anezidingo ezihlukene, futhi igebe phakathi kwawo yilapho ukuthenga okuningi okunjalo kuhamba khona kabi. Hlola indima ngaphambi komkhiqizo.

Izikhathi ezine zokuhlola ziguqula uhlu lwezici lube yimpendulo.

Uphawu lwe-VPN lwesitatimende samakhono akulona

Amarawuta amemezela ukusekelwa kwe-VPN ngezindlela okungenani ezintathu: ukudlula kwethrafikhi evela kwamanye amadivayisi, iseva eyamukela imigudu engenayo, neklayenti eqala umgudu ophumayo. Kuphela owesithathu osebenzisa iphrofayela oyilondolozile. Ikakhulukazi ukudlula kwe-IPsec kuyisihlobo se-NAT hhayi iphoyinti lokugcina, futhi kuvela kumadivayisi angeke neze aqede noma aqale i-IPsec.

Buza ukuthi ifayela lidinga yiphi indima, bese ubuza ukuthi leyo ndima ikhona yini kunguqulo ye-firmware esedivayisini.

Funda uhlu lwezici lwe-firmware oyisebenzisayo ngempela

Amagama emodeli awazona izinguqulo ze-firmware, futhi umhlahlandlela obhalelwe ukukhishwa okukhulu kwangaphambilini uchaza isethi ehlukile yezici. Ku-OpenWrt lo mbuzo ungaphendulwa kusuka ku-shell: opkg list-installed | grep -E "openvpn|wireguard" ikhombisa ukuthi amaphakethe eklayenti akhona yini, futhi imojula ye-kernel ye-WireGuard ihlukile kumathuluzi endawo yomsebenzisi. Kudivayisi yomthengisi, funda amanothi okukhishwa kwesakhiwo esifakiwe esikhundleni sekhasi lokumaketha lemodeli.

Uma ikhono lifika njengephakethe, qinisekisa ukuthi lifakiwe hhayi nje ukuthi litholakala endaweni yokugcina.

Qondanisa ifomethi yephrofayela nomngenisi

Iphrofayela ye-OpenVPN iwulimi lwemiyalo. Ifayela lomlingani we-WireGuard iyi-INI enokhiye oyimfihlo nohlu lwama-IP avunyelwe. Imininingwane ye-IKEv2 yisitifiketi noma igama lomsebenzisi kanye nobuwena beseva. Ifomu lerawuta elamukela elilodwa kulezo ngeke lihumushe amanye, futhi inkinobho yokungenisa ethi yamukela noma yini ifanele ukusolwa.

Vula ifayela bese ufunda imigqa eyishumi yokuqala. Lokho kukutshela ukuthi yimuphi umngenisi owudingayo ngaphambi kwanoma yimiphi imenyu.

Hlola izinketho iphrofayela elizisebenzisa ngempela

Ukusekelwa kwephrothokholi akulona ukusekelwa kwephrofayela yakho. Bheka imiyalo ethwala izici zokuphepha: izitifiketi ezingaphakathi, tls-crypt noma tls-auth, ukukhethwa kwe-cipher ne-cipher yedatha, ukucindezela namahuku e-script. Ukuqaliswa kwerawuta kungamukela ifayela bese likushaya indiva ngokuthula umyalo elingawuqalisi, okuholela emgudwini oxhumayo kodwa oziphatha ngendlela ehlukile kunalowo osekubhukwini yakho.

Umphumela oyingozi akulona ukungenisa okunqatshiwe. Ukungenisa okwamukelwe okushiye okuthile ngokuthula kuyingozi.

Hlola inqubomgomo, hhayi ukuxhawula kuphela

Nquma ukuthi uxhumano kufanele luthwale ini: ingxenye eyodwa noma yidivayisi ngayinye, yisiphi isixazululi se-DNS, i-IPv6 iyasingena emgudwini noma ihlala kwasendaweni, nokuthi kwenzekani uma umgudu uwelima. Lezi yizici ezihlukile ekusungulweni, futhi yilapho irawuta yehluka kakhulu kuklayenti yedeskithophu. Gcina ukuphathwa kwasendaweni kufinyeleleka ngesikhathi sokuhlola, ngaphandle kwalokho iphutha lokuqala lomzila lizokubiza ukufinyelela okungokomzimba.

Ukuxhawula okuqediwe ukuqala kokuqinisekisa. Thumela ithrafikhi yangempela endaweni yangempela bese uhlola indlela yokubuya.

Izihloko ezihlobene