Uhlu lwemidlalo ye-LAN olungenalutho nge-OpenVPN? Hlola indlela yokuthola

Ukupinga ikheli lethuneli lomunye umdlali nokubona umdlalo wakhe osingathiwe kuyimpumelelo ezimbili ezihlukene. Uhlu oluselobini ngokuvamile luncike ekushintshaneni kokuthola okubhalelwe inethiwekhi eyodwa yasendaweni, kuyilapho isikhathi somdlalo siwukuxhumana okuvamile ekhelini nasechwebeni. Ukuthatha uhlu olungenalutho njengokwehluleka komzila kukuholela ebhulohweni okungenzeka ukuthi awulidingi, ngakho hlukanisa imibuzo emibili ngaphambi kokushintsha noma yini.

Hlukanisa ukujoyina isikhathi nokuthola kwaso

Ukujoyina okwehlulekile kukhombisa imizila, imithetho yodonga lomlilo kanye nensizakalo elalelayo. Ukujoyina okuphumelelayo kanye nohlu olungenalutho kukhombisa ukuthola, noma ikheli elithwalwa isimemezelo. Le miphumela emibili iholela emsebenzini ohluke ngokuphelele, futhi ungayihlukanisa kuphela ngokuzama eyokuqala ngamabomu.

Bhala umphumela phansi ngaphambi kokuthinta ukulungiselelwa kwe-VPN. Lesi yisivivinyo esishibhile kukho konke uphenyo futhi sisusa ingxenye yendawo yokuklama. Bhala futhi ikheli olishitshile, ngoba lizoba yiphuzu lesithenjwa kusivivinyo ngasinye esilandelayo. Uma lowo mugqa ungekho kumanothi akho, ukuqhathanisa okulandelayo kuwukuqagela nje.

Zama ukujoyina okuqondile ngaphambi kokuthinta ithuneli

Uma umdlalo unikeza ukukhetha kokuxhumana okuqondile, sebenzisa ikheli lethuneli lomsingathi kanye nechwebe lomdlalo elibhaliwe, futhi ushiye ukuqinisekiswa komdlalo ngokwawo kanye nemithetho yodonga lomlilo yomsingathi njengoba injalo. Ukujoyina okuphumelelayo kunciphisa inkinga ekutholeni. Ukujoyina okwehlulekile kusadinga uphenyo lwako, futhi ayikho i-relay ezokulungisa lokho.

Ungacabangi ukuthi ichwebe lokuthola kanye nechwebe lesikhathi ziyinombolo efanayo. Imidlalo ngokuvamile imemezela echwebeni elilodwa le-UDP futhi yamukele abadlali kwelinye, futhi i-relay eyakhelwe elingalungile inikeza uhlu oluhlala lungenalutho.

Hlola futhi ukuthi iyiphi i-adaptha eyakhethwa inqubo yokusingatha. Inqubo eboshelwe ekhelini le-LAN yasekhaya izomemezela lelo kheli, futhi umdlali okude akanakho ukuhambisa umzila kulo ngisho uma isimemezelo sifika. Uhlu lungagcwala futhi ukujoyina kungahluleka ngenxa yalokho kuphela.

Qonda ukuthi ukusakaza kuyeka kuphi

Ithuneli le-TUN elinomzila lithwala amaphakethe e-IP phakathi kontanga futhi alikukhiqizi kabusha ukusakaza kwasendaweni kunethiwekhi yontanga ngamunye. Ikheli lokusakaza elilinganiselwe 255.255.255.255 lihlala ngaphakathi kwesikhombisi esilikhiphayo, futhi ukusakaza okuqondiswe kunethiwekhi encane kuyisimo esihlukile, hhayi ilayisense evamile yokuthi ama-router akhukhule izimemezelo.

Lokho kuyisici somklamo, hhayi isiphako okufanele sixetshwe ngokukhetha. OpenVPN kanye client-to-client nesilungiselelo salo kulawula ukuhamba kontanga ngaphakathi kwethuneli futhi akusiyo i-relay yokuthola, nakuba kunconywa kule njongo kwezinye izintambo eziningi. I-relay iyingxenye ehlukile enokulungiselelwa kwayo kanye nezindlela zayo zokwehluleka. Ukucabanga ukuthi ukukhetha okukhona sekukuhlanganisile lokhu kuyisizathu esivame kakhulu sokuthi lolu phenyo lukhange.

Ukuthola kwe-multicast kunenkinga efanayo ngesigaba sekheli esihlukile, futhi kudinga umzila we-multicast noma i-relay, hhayi ukukhululwa kokusakaza.

Uma i-relay ifanelekile, yigcine incane

Uma ukuthola okuzenzakalelayo kuyisidingo, qala ukuthola ukushintshana kwangempela: ukusakaza noma i-multicast, ikheli lendawo, ichwebe le-UDP, isikhombisi esikuthumayo, kanye nekheli elingaphakathi kwimpendulo. I-relay ehambisana ne-protocol futhi elinganiselwe kulezo zinto ezinhlanu ziqiniso incane kakhulu kunokunweba yonke ingxenye ye-Ethernet.

Ukudlulisela iphakethe lingashintshiwe kusengase kunganeli. Uma umthwalo utshela umamukeli ukuthi axhumane nekheli angakwazi ukulifinyelela, i-relay inikeza impendulo engenamsebenzi, yingakho kufanele kuzanywe isikhombisi somdlalo ngokwawo noma isilungiselelo sekheli elimenyezelwe ngaphambi kokuba kube khona noma iyiphi i-relay.

Linganisela i-relay kuzikhombisi nakontanga abayidingayo, futhi chaza ukuthi izimpendulo zithola kanjani umceli. Ukuphinda ukusakaza okungahlobene kuveza ezinye izinsizakalo zasendaweni futhi kwakha amaluphu okunzima ukuwahlola kamuva.

Ibhufuloho kuphela uma umklamo udinga i-Ethernet

Amafreyimu e-Ethernet ahamba ngaphakathi kwe-TAP, ngakho ithuneli le-TAP lingaba ngeyesizinda sokusakaza esibhulohiwe ngamabomu. Ukumane dev tun kube dev tap akwakhi lowo mbhuloho, akwenzi ukulungiselelwa kwe-server kuhambisane futhi akwenzi uhlelo lukhethe isikhombisi esisha. Umhlahlandlela webhuloho we-OpenVPN uchaza ukuhlelwa okubanzi, hhayi ikhambi lelobi elilodwa elingenalutho.

Ukubhuloha futhi kwenza uhlelo lwamakheli lube yisicaba, yingakho isinqumo sifanele isizathu esingaphezu kokungabi nomoya. Amanethiwekhi amabili ayahlukene aba munye, futhi yonke insizakalo ohlangothini ngalunye iqala ukubona ukusakaza kolunye uhlangothi. Lowo mphumela kufanele ube kurekhodi yezinguquko ngaphambi kokuba othile ayivule. Awekho umthetho wokuthi amaklayenti omdlalo kufanele abe kusigaba sika-192.168; khetha uhlelo olungahlangani futhi uhlole imikhawulo yomdlalo othile esikhundleni sokuphinda ubalwe ithuneli ngoba okuthunyelwe kunkundla kwenze kanjalo.

Ekugcineni gcina imiphumela emibili ihlukene: ukuthi umsingathi angajoyinwa yini, nokuthi impendulo yokuthola imemezela indawo umdlali omunye angayisebenzisa ngempela yini. Ukulungisa okwesibili ngaphandle kokuqinisekisa okokuqala yiyo indlela abantu abagcina ngayo ibhuloho lenkinga eyayingekho mayelana nokusakaza.