I-Dante SOCKS nge-VPN: umhubhe ogcwele noma ukuhamba ngomthombo

Ufuna ukuthi ithrafikhi ye-SOCKS proxy iphume nge-VPN kuyilapho ingxenye esele yomsingathi igcina indlela yayo ejwayelekile. Imiklamo emibili ikwenza lokho, futhi iyahluka kulokho okuphukayo lapho kukhona into engahambanga kahle. Eyokuqala igxusha umzila ozenzakalelayo emhubheni bese iwudlula; eyesibili ishiya ithebula eliyinhloko ingayithinti futhi ithumele ikheli elilodwa lomthombo kwithebula lesibili. Eyesibili ihlanzekile kakhulu, futhi inezicupho zayo.

Imiklamo emibili, amazinga amabili ahlukene omonakalo

Umklamo womhubhe ogcwele yilokho abathengi abaningi be-VPN abakwenza ngokuzenzakalelayo: bashintsha umzila ozenzakalelayo ukuze konke kulandele umhubhe, bese bekhipha lokho okungafanelanga ukulandela. Kulula ukucabanga ngakho futhi kunzima ukukugcina kuncane, ngoba zonke izinsiza zasendaweni ozifakayo zithola umhubhe njengefa kuze kube yilapho uzikhipha. Indlela yokwehluleka ibanzi, ngoba umzila owodwa ongafanele uthatha nokuxhumana komsingathi uqobo.

Umklamo wokukhetha ngomthombo uhamba ngakolunye uhlangothi. Ithebula eliyinhloko lihlala njengoba lalikhona, futhi umthetho owodwa wenqubomgomo uthumela amaphakethe avela kukheli lendawo elithile eya kwithebula elinomzila ozenzakalelayo womhubhe. Akukho okunye okushintshayo, okusho ukuthi izinga komonakalo yikheli elilodwa.

Lokho kuncane futhi kuyisithiyo: umklamo usebenza kuphela uma amaphakethe aphumayo e-proxy ewathwala ngempela lawo kheli.

Okwenziwa isethingi ye-external ye-Dante

Isethingi ye-external ikhetha amakheli asetshenziswa i-proxy ekuxhumaneni okuphumayo; ayithinti inqubomgomo yokuhamba yengqondo yekhompyutha. Ukwehlukaniswa kwalokho yikho okwenza umklamo wesibili ube nokwenzeka, futhi yilapho abantu befunda imibhalo ngendlela engafanele. Ukukhomba i-external ekhelini lomhubhe kwenza i-proxy iqale ukuxhumana kwayo kulelo kheli, bese ithebula lokuhamba linquma ukuthi lawo maphakethe aya kuphi.

Isilaleli siyindaba ehlukile. Gcina i-internal ikhawulelwe kumakhasimende okufanele asebenzise i-proxy, funa ukuqinisekiswa, futhi uvale imbobo ngodonga lomlilo, ngoba isilaleli esivulekile akusona isici sokuphuma kwe-VPN.

Qinisekisa ukuthi ikheli elilungisiwe lingelomhubhe ngempela ngaphakathi kwendawo yamagama enethiwekhi ye-proxy.

Ukwakha ithebula elikhethwa ngomthombo

Kukheli le-TUN eli-10.90.0.2/24 elinontanga efinyeleleka ku-10.90.0.1, nenombolo yethebula okungekho okunye okuyisebenzisayo, ukuhleleka kubukeka kanje:

ip -4 route add table 100 10.90.0.0/24 dev tun0 src 10.90.0.2
ip -4 route add table 100 default via 10.90.0.1 dev tun0 metric 10
ip -4 route add table 100 unreachable default metric 32760
ip -4 rule add priority 1000 from 10.90.0.2/32 lookup 100

Umzila ongafinyeleleki uyingxenye abantu abayeqayo. Ngaphandle kwawo, ithebula elilahlekelwe umzila womhubhe liwela kumzila ozenzakalelayo ojwayelekile futhi i-proxy iphuma ngokuthula nge-WAN. Nawo, ukusesha kuyahluleka, okuwukwehluleka okubonakalayo esikhundleni sokuvuza okuthulile. Ukubaluleka komthetho nakho kufanele kube phambi kwanoma yini enye ehambisana nalowo mthombo.

Lawo manani achaza itopology eyodwa. Ontanga bephuzu-kuya-phuzu, ukukhethwa kwamakheli kwe-net30 namakhasimende anikeza isiqalo esihlukile konke kudinga imizila yako, ngakho kopisha isimo, hhayi amakheli.

Lapho umthetho womthombo uvuzayo

Umthetho ohambisana nekheli lomthombo uthinta yonke inqubo elisebenzisayo, hhayi i-proxy kuphela. Uma enye i-daemon ibopha ikheli elifanayo, ithrafikhi yayo nayo ithatha umhubhe, futhi ukwehluleka kuzobukeka njengenkinga yensiza engahlobene. Nika i-proxy ikheli okungekho okunye okulisebenzisayo, noma wamukele ukuthi ububanzi yikheli hhayi inqubo.

I-DNS ingenye yokuvuza. Isokhethi yesixazululi ayidingi ukusebenzisa umthombo wedatha ophumayo we-proxy, ngakho ukusesha kwamagama kusengaphuma nge-WAN. Hlola ukuxazulula ngokwehlukile ekusungulweni kokuxhumana, futhi unqume ukuthi umphumela lowo wamukelekile yini.

I-IPv6 idinga imithetho yayo nemizila yayo, ngoba ukuhleleka kwe-IPv4 akufakazi lutho ngayo.

Khetha ngokwehluleka ongakwazi ukukubekezelela

Khetha umhubhe ogcwele lapho umsingathi kufanele avikelwe wonke futhi ungakwazi ukugcina uhlu lwezokukhipha. Khetha ukuhamba okusekelwe emthonjeni lapho umsingathi kufanele agcine indlela yawo futhi insiza eyodwa kuphela okufanele iqondiswe kwenye indawo. Kokubili kusemthethweni; iphutha ukukhetha okukodwa bese ukuhlola njengokunye.

Noma yikuphi okukhethayo, qinisekisa kuzinhlangothi zombili: isicelo ngokusebenzisa i-proxy nesicelo esiqondile esivela kumsingathi, kurekhodwa ikheli lokuphuma elibonakele ngakunye.

Uma umhubhe uwa, nquma kusengaphambili ukuthi i-proxy kufanele yehluleke noma ibuyele emuva, futhi uvumele ithebula lokuhamba liveze leso sinqumo.