Uhlelo olukhishiwe luseku-inthanethi? Imithetho yohlelo nomzila yehlukile
Ukukhipha uhlelo lwe-Android ku-VPN akukuvimbeli. Izinhlu zemvume, imithetho ye-UID nemizila ethunyelwe kunquma izingxenye ezihlukene zomzila.
Ukukhipha iphakethe kuyisiyalelo somzila, hhayi ukuvimbela, ngakho amakhasi alayishwayo ngemva kokuxhuma kwe-VPN alindelekile, hhayi ubufakazi bokusilela. Ukukhipha kususa uhlelo emhubheni esikhundleni sokuluvimbela, futhi inethiwekhi evamile ithwala ulwazi lwayo. Lapha kuhlangana izinqubomgomo ezimbili ezihlukene: enye ikhetha izinqubo, enye ikhetha izindawo. Ukuzifunda ngalolo hlelo kuchaza ukuthi kungani uphawu oluxhunyiwe nohlelo olusebenzayo kungesona ukuphikisana.
Kungani ukukhipha kugcina inethiwekhi ivulekile
I-VpnService.Builder yamukela uhlu lwemvume noma uhlu lokwenqaba, hhayi kokubili ngaso sonke isikhathi. Amaphakethe akuhlu lwemvume kuphela adluliswa emhubheni. Uhlu lokwenqaba luhlanekezela lokho: iphakethe ngalinye ngaphandle kwalabo abasohlwini lisebenzisa umhubhe, kanti abasohlwini bagcina umzila wangempela. Iphakethe elingekho ohlwini lwemvume nalo lingaphandle komhubhe, ngakho ukukhipha kuyisimo esijwayelekile lezinhlelo eziningi kuleyo modi.
Lokho kwenza ukufakwa kokwenqaba kwasekhaya kube isinqumo somzila, hhayi umthetho we-firewall. Uma isidingo kukuvimbela uhlelo ekufinyeleleni umgcini, umhubhe kufanele ulumboze futhi iseva noma inqubomgomo yasekhaya kufanele yenqabe ulwazi. Ukukhipha uhlelo emhubheni kushintsha kuphela ukuthi iyiphi i-interface ethwala amaphakethe alo.
Icala le-Play Store yisibonelo esijwayelekile esenziwe ngamabomu. Ukukhipha iphakethe lesitolo kwenza okulayishiwe kusebenzise ukuxhumana okuyisisekelo lapho ukuphuma kwe-VPN kuphazamisa ukudluliswa, futhi kukhombisa ukuthi ukukhipha kusho ukugwema, hhayi ukuvimbela.
Iphrofayela eyodwa, uhlu olulodwa
Umakhi uphonsa okuhlukile uma zombili izinto zisetshenziswa, ngakho iphrofayela ephambi kwakho inguhlu lwemvume noma uhlu lokwenqaba. Lelo qiniso ellodwa linquma ukuthi kufundwa kanjani konke ukubonwa okulandelayo. Hlola ikhodi noma ukucushwa okulawulwayo ngaphambi kwethebula lomzila, ngoba uhlu lona lunquma incazelo yokuphuma okusele. Iphrofayela exubile ayisona isimo ongabheka kuso.
Umehluko uphinde ubikezele ukuthi uhlelo olusanda kufakwa luzokwenzani. Ngaphansi kohlu lwemvume luhlala lungaphandle kuze kube umuntu uyengeza, kanti ngaphansi kohlu lokwenqaba lujoyina umhubhe ngokuzenzakalelayo.
Ukucushwa okulawulwayo kuveza ukukhetha okufanayo ngaphansi kwamagama okhiye ahlukene, futhi amanye amakhonsoli akuchaza njengemodi ye-VPN yohlelo ngalunye hhayi njengohlu. Ukuziphatha kusagcina kuncipha kuleyo mibhalo emibili, ngakho landela isilungiselelo ubuyela ohlwini lwamaphakethe esikhundleni sokuthemba ilebula. Uma ilebula nohlu bengavumelani, uhlu luyanqoba.
Landela umthetho we-UID uze ufike ethebuleni lomhubhe
I-Android inikeza uhlelo ngalunye i-ID yalo yomsebenzisi we-Linux, futhi insizakalo ye-VPN ifaka imithetho yenqubomgomo ehambisana nezigaba ze-UID. Ulwazi oluhambisanayo luthunyelwa ethebuleni lomzila okumzila walo ozenzakalelayo ukhomba kudivayisi ye-tun. Inombolo yethebula yabelwa isenzakalo ngasinye se-VPN, ngakho iyashintsha ngemva kokuxhuma kabusha noma ngemva kokwakha iphrofayela yesibili ye-VPN.
Okuphuma emithethweni yimephu. Umgqa ngamunye ubiza ithebula lokusesha, futhi lelo thebula ligcina umzila ozenzakalelayo onquma ukuthi amaphakethe ahambisanayo angena emhubheni yini.
adb shell ip rule show
adb shell ip route show table all
adb shell cmd package list packages -U | grep <package>Qala usebenzise umyalo wesithathu ukuze uthole i-UID, bese uthola umthetho ogaba lwawo luyiqukethe. Lowo mthetho ukhomba kunombolo yethebula, futhi ip route show table <n> ngaleyo nombolo kubonakala ukuthi ukhona yini umzila ozenzakalelayo odlula kudivayisi ye-tun. Uma ithebula lingenawo ozenzakalelayo, uhlelo lukhethiwe kodwa alunayo indlela, okuwukungaphumeleli okunye.
Le miyalo idinga ukwakhiwa okungalungiseka noma idivayisi lapho i-adb shell ingafunda isimo senethiwekhi. Kufoni yokukhiqiza umphathi wamaphakethe usaphendula, kodwa ukuhlolwa komzila kungavinjwa, ngakho rekhoda okukwazi futhi uthathe okusele njengokungaqinisekisiwe.
Umzila udinga isiqalo, hhayi uhlelo
I-Builder.addRoute idinga iziqalo zendawo ekuyiwa kuyo zomhubhe. 10.0.0.0/8 Iphrofayela engeza kuphela ihlisa leso siqalo emhubheni futhi ishiye yonke enye indawo emzileni wangempela. Lokho kuwukuhamba komhubhe okuhlukanisiwe okuvamile, futhi akuncikile ekutheni yiziphi izinhlelo ezikhethwe imithetho.
Ukucushwa okuthunyelwe iseva kubonisa imodeli efanayo. Ukuthunyelwa kwemizila ngayinye kwengeza iziqalo, kanti isiyalelo se-redirect-gateway sithatha indawo yomzila ozenzakalelayo futhi sibambe konke ezinhlelweni ezimbozwa umhubhe. Ukususa leso siyalelo kungase kunciphise umhubhe osebenzayo ube inethiwekhi encane eyodwa ngaphandle kwanoma yiluphi ushintsho kudivayisi.
Umzila othunyelwe onesango noma isichasiso semethrikhi esingajwayelekile nawo ungase uhluleke ukufakwa. Khetha ifomu elilula lesiqalo futhi ushiye ukudlulisela ne-NAT kuseva.
Funda ukuhlangana ngaphambi kokushintsha isilungiselelo
Umhubhe uthwala ukuhlangana kwezinqubo ezimboziwe nezindawo ezifunwayo. Uhlelo olumboziwe olucela ikheli elingaphandle kweziqalo ezishicilelwe luphuma ngonethiwekhi wangempela. Iphakethe elenqatshiwe lihlala lingaphandle ngisho nalapho licela ikheli elingaphakathi kwalezo ziqalo. Akukho kulezi zimo okuyiphutha; zombili ziyizinqubomgomo ezimbili ezenza umsebenzi wazo.
I-VPN yohlelo ngalunye ingase futhi ishiye uhlelo oluxhunyiwe lungenakuxhumana. Lapho i-on-demand icishiwe futhi umhubhe uphansi, uhlelo luhlala luboshelwe ku-VPN yohlelo ngalunye futhi alunayo indlela yokubuyela emuva, okubonakala njengohlelo olugawulile hhayi njengesimo senqubomgomo. Ukuvula i-on-demand, noma ukususa ukuxhumana ngokuphathwa, kushintsha lokho.
| Layer | What it selects | Where to look | Typical mismatch |
|---|---|---|---|
| Package list | Processes | Builder calls or managed configuration | App excluded but expected to be blocked |
| UID policy rule | Which table a UID uses | ip rule show | Tunnel icon on, app still on Wi-Fi |
| Routing table | Destinations for matched traffic | ip route show table <n> | Covered app reaches only one subnet |
| Server push | Prefixes offered to the client | Server route configuration | Tunnel shrinks after a server edit |
Hlola ingxenye eyodwa ngesikhathi. Qinisekisa imvume noma ukwenqatshwa kuqala, funda imithetho ye-UID namathebula afakiwe okwesibili, futhi uhlole uhlelo lwesibili ngokumelene nendawo efanayo ekugcineni. Uhlelo lwesibili luhlukanisa ukukhethwa kwenqubo ekukhethweni kwendawo esicelweni esisodwa.
Rekhoda umphumela njengohlelo, indawo kanye nenombolo yethebula. Leyo nhlanganisela kathathu iyona okufanele ushintsho olulandelayo ilondoloze.