Ithrafikhi ku-eth0 akusho ukuthi umhubhe we-VPN uyavuza

Ukubona amakheli omphakathi ku-eth0 ngenkathi umhubhe usebenza kuzwakala njengobufakazi bokuthi kukhona okuphumile. Ngokuvamile kuhlukile: amaphakethe omhubhe ngokwawo kufanele anqamule leyo adaptha ukuze afinyelele iseva, futhi abukeka njengemifudlana evamile ye-UDP noma ye-TCP. Iphakethe langaphakathi livela kuphela kudivayisi yomhubhe. Ukuhlukanisa lezi zimbili kuyindaba yokufunda isigqoko, hhayi yokuthemba isibalo samabhayithi.

Iphakethe ngayinye yomhubhe isanqamula intambo

Umhubhe uyi-interface, hhayi intambo. Iklayenti lithatha iphakethe langaphakathi, liyaligoqa, bese lithumela umphumela ekhelini nasechwebeni sesiseva kusuka kuphrofayela. Ku-adaptha yomzimba ubona isigqoko; kudivayisi yomhubhe ubona lokho okwaqoqwa.

Kumodi ye-UDP umfudlana wangaphandle uyipheya eyodwa yekheli nechweba ohlangothini ngalunye, yingakho umhubhe onempilo ubonakala unesithukuthezi cishe ku-eth0. Leyo pheya eyodwa iyona into yokuqala okufanele iyingwe.

Thwebula i-interface eyodwa ngesikhathi

Thwebula i-interface eyodwa kuphela ngesikhathi uma uhlose ukuqhathanisa izibalo. I-interface yamanga any iqoqa yonke idivayisi ngasikhathi sinye, ngakho iphakethe elidlulisiwe livela ekungeneni nasekuphumeni kanti elakhiwe endaweni livela kabili ngezimo ezimbili ezihlukile. Izibalo zamaphakethe ezilinganayo namabhayithi angalingani zivamile, ngoba isigqoko sikhulu kunalokho esikuthwalayo. I-ARP, i-DHCP kanye nezimemezelo ze-router ye-IPv6 zingezokuxhumana kwendawo futhi azisho lutho ngohlelo lwakho.

sudo tcpdump -i eth0 -n host 203.0.113.10 and udp port 1194

Shintsha ikheli nechweba ngamavelu ophrofayela ngokwawo. Uma lowo mfudlana uzinzile, umhubhe uthwala okuthile.

Buza i-kernel ukuthi ikhetha iphi idivayisi

Buza i-kernel ukuthi ingakhetha iphi idivayisi, bese uqinisekisa entanjeni. Ukusesha komzila yisinqumo, futhi ukuthwebula ubufakazi bokuthi isinqumo salandelwa. Ziyaphendula imibuzo ehlukile futhi udinga zombili.

ip route get 1.1.1.1
ip -6 route get 2606:4700:4700::1111

Umphumela ohlukanisiwe uyisitholakalo esivamile: i-IPv4 iya emhubheni kanti i-IPv6 iya ku-adaptha yomzimba ngoba uphrofayela ushicilele imizila ye-IPv4 kuphela. Lokho ukuvuza kwangempela, futhi akubonakali ekuthwebuleni okune-IPv4 kuphela. Hlunga i-IPv6 futhi uqaphele amakheli okungewona iseva futhi okungewona i-link-local.

Sebenzisa kokubili ukusesha ngaphambi nangemva kokuxhuma, ukuze ubone ukuthi iklayenti lishintshe ini ngempela. Umehluko phakathi kokusebenzisa kokubili umphumela wangempela weklayenti.

Lapho ukuthwebula kuwukuvuza kwangempela

Ngezinye izikhathi ukuthwebula kukhuluma iqiniso. Umzila omncane odlulisa isiqalo esisodwa eduze komhubhe, isub-nethi okwathiwa iklayenti liyikhiphe, noma imvume ye-firewall esebenza ngaphambi kwenqubomgomo yomhubhe, konke kungakhipha ithrafikhi entanjeni obala. Umthetho ohambisana neqembu lezinqubo nawo ungaba ukukhishwa okwenziwe ngamabomu. Funda i-interface yawo kanye nobubanzi bomgomo ngaphambi kokukubiza ngokuthi iphutha.

Lungisa umzila noma ukukhishwa, hhayi i-firewall. Bese uthwebula futhi kusuka ekuxhumekeni okusha futhi uhlole i-IPv4 ne-IPv6 ngokwehlukana, ngoba ukulungisa okukodwa akusho lutho ngokunye. incwadi ye-tcpdump ihlanganisa izikhethi ze-interface nomkhombandlela ezisetshenziswe ngenhla.