Ingabe i-VM yakho isebenzisa i-VPN yomsingathi? Yihlole ngaphakathi kwesivakashi
Ikheli lokuphuma lomsingathi alisho lutho mayelana nemizila yesivakashi. Bhala imodi yenethiwekhi, hlola umzila nesixazululi sesivakashi, bese uhlola isimo sokwehluleka.
Uhlola i-IP yomphakathi yomsingathi, ikhombisa i-VPN, bese uphetha ngokuthi i-VM ivikelekile. Leso siphetho asisekelwa yilolu hlolo. Isivakashi sinethebula laso lokuhambisa, isixazululi saso kanye nezixhumi zaso, futhi ikheli lokuphuma lomsingathi alisho lutho ngazo.
Uhlolo kufanele lwenzeke ngaphakathi kwesivakashi, futhi kufanele lusho ukuthi lwalinganisa ini.
Qala ngaphakathi kwesivakashi, hhayi kusiphequluli somsakhi
Qala ngokubhala imodi yenethiwekhi ye-hypervisor: NAT, bridged, host-only noma macvtap. Kumodi ye-NAT umsingathi uhambisa ithrafikhi yesivakashi, ngakho itheku lomsingathi lingasebenza noma lingasebenzi kuye ngokuthi iklayenti lifaka kanjani imizila. Kumodi ye-bridged isivakashi siyisihlobo esilinganayo ku-LAN yomzimba, futhi itheku lomsingathi alibalulekile. Lezi zimo ezimbili zinikeza izimpendulo eziphambene kusuka ekuhlelweni okufanayo komsingathi.
Bhala imodi phansi ngaphambi kokushintsha noma yini, ngoba yiyo enquma ukuthi umphumela ungasho ukuthini.
Yenza isicelo esisodwa osazi lapho siya khona
Sebenzisa isicelo esingenabungozi emsebenzini obika ikheli lomthombo eliwubonile. Bese uhlola isinqumo sokuhambisa sesivakashi ngalokho okuyiwa kukho: ip route get 203.0.113.5 iphrinta isixhumi kanye nesango elizosetshenziswa yisivakashi.
Uma isixhumi kuyi-NIC evamile yesivakashi, ithrafikhi ayihambi ngetheku ngaphakathi kwesivakashi.
I-adaptha yesibili, isilungiselelo se-proxy noma iklayenti le-VPN ohlangothini lwesivakashi kungashintsha impendulo yohlelo lokusebenza olulodwa hhayi olunye. Hlola uhlelo lokusebenza olubalulekile ngempela kuwe, hhayi isicelo esijwayelekile esivela ku-shell.
Hlola isixazululi ngokwehlukana
Ikheli lokuphuma elishintshile alikutsheli ukuthi yisiphi isixazululi esiphathe lelo gama lomsingathi. Buza igama ngokucacile ngethuluzi elihambisana neplatfomu, futhi bhala ukuthi yisiphi iseva esiphendulile. I-Split DNS isho ukuthi umbuzo wesixazululi nombuzo wokuhambisa unezimpendulo ezihlukene.
Lezi ezimbili zingahluka kunoma yiluphi uhlangothi, futhi lokho kwehluka ngokuvamile yibhuge yangempela.
Kumsingathi we-systemd, resolvectl query usho isixhumi kanye neseva ye-DNS engemuva kwempendulo. Izilungiselelo ezindala zikhombisa iseva dig kokuphumayo. Noma kunjalo, iphuzu ukuwubona ukuthi yisiphi iseva esiphendulile, hhayi nje ukuthi impendulo ifikile.
Hlola inqubomgomo yokwehluleka, hhayi ukuphumelela kuphela
Uma imfuneko iwukuthi akukho thrafikhi ephuma ngaphandle kwetheku, isicelo esiphumelelayo asifakazeli lutho. Sebenzisa uhlolo lokwehluleka olulawulwayo olusekelwa yiklayenti: misa itheku ngendlela esekelwayo bese ubona ukuthi isicelo esisha sesivakashi siyavinjwa yini. Ungacabangi ukuthi i-kill switch yeklayenti lomsingathi ihlanganisa zonke izinhlelo zokudlulisela ezingokoqobo. Ububanzi bayo obhalwe phansi yikho kuphela ongakuthemba.
Isivakashi esibuyela ku-NIC yomzimba lapho itheku liwa senza ngqo lokho okuvunyelwe imodi ye-NAT.
Bhala imodi kanye nobubanzi
Bhala imodi ye-hypervisor, isixhumi nomzila wesivakashi, isixazululi, kanye nohlelo lokusebenza oluhloliwe. Faka nosuku, ngoba ukubuyisela isithombe esisheshayo noma ukubuyekeza i-hypervisor kungashintsha konke lokhu okune.
Uma i-IPv4 ilandela itheku, shono lokho. Ungandisi isimangalo ku-IPv6, enye indawo yamagama noma enye i-VM kwenye inethiwekhi.