Ngabe yonke i-peer ye-OpenVPN idinga umugqa we-remote? Hhayi impela
i-remote isho ukuthi iphakethe lokuqala liya kuphi; ayikhethi indima ye-client, sevha noma ye-TLS. Funda ukuhleleka ngaphambi kokukopa kuzinhlangothi zombili.
Izilungiselelo ezimbili ze-peer ziqhathaniswa eceleni, esinye sinomugqa we-remote esinye awunaso, futhi isiphetho ukuthi esisodwa sazo siphukile. Leso siphetho asilungile ngokwanele ukuba kufanele kuhlaziywe. Umyalelo uchaza ukuthi iphakethe lokuqala kufanele lithunyelwe kuphi. Awukhethi ukuthi inqubo isebenza njenge-client eqalayo noma njengegesi elilindayo, futhi awunqumi ukuthi yiluphi uhlangothi olufakazela ubunikazi bayo kwelinye.
I-remote ibeka ini ngempela
Umugqa we-remote ubiza i-host, ngokuzikhethela i-port nokuthutha, futhi ngokuzikhethela imigqa eminingi enjalo ezizanywa ngokulandelana.
Ukungabikho kwayo kunencazelo eqondile hhayi engacacile: inqubo ilindile futhi ayisebenzi kumaphakethe avela kukheli ngaphandle uma leyo peer izifakazela. Ngakho igesi elisebenzela abasebenzisi abazulazulayo alinasizathu sokubiza noma ubani kubo kusengaphambili.
Funda umugqa njengobudlelwano bamakheli. Ukuthi uhlangothi olukude luthembekile yini kuphendulwa izitifiketi nezinketho zokuqinisekisa, hhayi iqiniso lokuthi ikheli lalotshwa.
Izinhlelo ezintathu zinquma impendulo
I-client ezulazulayo idinga indawo ekuyiwa kuyo, ngoba kufanele iqale futhi ayazi ukuthi igesi likuphi ngaphandle kwayo. Igesi elinama-client amaningi alidingi indawo yomsebenzisi ngamunye, ngoba ama-client ayafika futhi azifakazele. Isixhumanisi se-peer ezimbili esenziwe ngamabomu esinamaphethelo aziwayo singaba nendawo yokuya ohlangothini olulodwa, kuzo zombili noma kukho kokubili, kuye ngokuthi yiluphi uhlangothi oluqalayo.
Ukunamathisela ikheli le-client elingaguquki egesini elijwayelekile kuyiphutha elivela ekushayeni indiva lezo zigaba. Lisebenza ku-peer eyodwa kuphela okwarekhodwa ikheli layo futhi lidukisa wonke amanye.
Akukho lutho kumyalelo okuguqula isilungiselelo sibe isevha yama-client amaningi, futhi akukho lutho ekubeni khona kwayo okuvimbela indima yesevha. Incwadi yesandiso ye-OpenVPN 2.6 ibhala ngokwehlukana izimpikiswano zokuzikhethela nokuziphatha lapho kungekho remote, okuyisikhombisi sokuthi zizimele kangakanani.
| Arrangement | Needs a destination |
|---|---|
| Roaming client | Yes, which gateway to contact |
| Multi-client gateway | No, peers authenticate on arrival |
| Two known peers | Depends on which side initiates |
Izindima zokuthutha ziyi-eksisi ehlukile
Ku-TCP uhlangothi olulodwa lulindile futhi olunye lushaya ucingo. Lezi ziyimiyalelo ehlukile endaweni yokuya, futhi ukuzihlanganisa kukhiqiza umbhangqwana lapho kokubili kulindile noma kokubili kushaya ucingo.
Kukhona futhi indima yesihlungi somthombo we-TCP, yingakho isitatimende esicaba sokuthi isevha ayikwazi neze ukuba ne-remote singelona iqiniso.
Ku-UDP akukho ukuxhumana okufanele kusungulwe, ngakho zombili iziphetho zisebenzisa ukuthutha kwe-UDP okuhambisanayo futhi umyalelo usho kuphela ukuthi kubhekiswe kuphi. Izinguquko zekheli ezenziwe i-peer efakazelwe zisingathwa ukuziphatha okukhethekile hhayi ngokwengeza imigqa eminingi. Ukulungisa ukuthutha kuyisimo esidingekayo ukuze indawo yokuya ibe nencazelo, futhi ukuhlanganisa kokubili kukhiqiza izilungiselelo ezibonakala zikholakala futhi ezingaqedi ukuxhawulana.
Kungani i-remote engekho kungeyona umnyango ovulekile
Inqubo engenayo indawo yokuya isala inqaba ithrafikhi evela kuma-peer angazifakazelanga, futhi leyo yingxenye abantu abayiphuthelwa lapho befunda umugqa ongekho njengomlaleli ovulekele wonke umuntu.
Ukufakazela nendawo yokuya kuzimele, futhi eyokuqala yiyo ebalulekile ekuthembeni.
Iphutha eliphambene liyingozi kakhulu. Ikheli lomthombo elingaguquki lingazwakala njengokulawula ukufinyelela ngoba licacile futhi kulula ukuliqinisekisa, kodwa alifakazeli lutho ngokuthi ubani okwelinye uhlangothi. Gcina ukuqinisekisa izitifiketi, futhi gcina izihlolo zobunikazi ezihlanganisa isitifiketi nendima yaso. Ukuzishintsha ngokufanisa ikheli kushintsha ukulawula kwangempela ngokubonakala kwako.
Bhala lokho okucatshangwa yisilungiselelo
Kuhlangothi ngalunye, rekhoda izinto ezintathu: ukuthi iphakethe lokuqala lifinyelela kanjani ku-peer, yiluphi uhlangothi olungamukela ukuthutha, nokuthi uhlangothi ngalunye luqinisekisa ini ngolunye.
Lokho kucatshangelwa yikho ukuklama. Imiyalelo iwukupela kwayo kuphela.
Uma amafayela amabili ehlukile, hlola ukuthi aveza yini ukucatshangelwa okuhlukile esikhundleni sokucabanga ukuthi elilodwa alilungile. Ipheya lamafayela elilinganayo alidingeki futhi alanele emhubheni osebenzayo, futhi ukungalingani yikho okuvame ukwenza i-topology isebenze.