Imizila eyengeziwe ye-VPN ye-Mac idinga umnikazi, hhayi i-skrithi yokungena
Umzila owengezwe kanye ngesikhathi sokungena awuwona umgomo wokuxhumana kabusha. Nika iziqalo ezikude umnikazi futhi unqume ukuthi zivela kanjani, zishintsha kanjani futhi zinyamalala kanjani nalokho kuxhumana.
Ukufinyelela isiqalo sangasese nge-VPN yisidingo esinesikhathi: sisebenza isikhathi eside lapho lokho kuxhumana kusasetshenziswa, futhi siphela lapho kuxhumana kuphela. I-skrithi yokungena ayikwazi ukukuveza lokho, ngoba ukungena nokukhuphuka kwethubhu kuyizikhathi ezihlukene, futhi ithubhu elikhona ngesikhathi sokungena kungenzeka ukuthi akulona elithwala ithrafikhi ngemuva komzuzu owodwa. Isinqumo sokuqala akuwona umyalo okufanele uqaliswe. Yiliphi ingxenye eliphethe isiqalo.
Isiqalo sidinga umnikazi, hhayi isikhathi
Qala ngokubhala isidingo njengomusho onomhlangano: finyelela 10.77.0.0/24 nge-VPN Yasehhovisi ngesikhathi lokho kuxhumana kukhona. Lowo musho usho isiqalo, ukuxhumana nesimo, futhi ngokushesha ususa izinto ezimbili ezithandwayo: i-hook yokungena negama le-interface elifana ppp0 noma utun2.
Amagama e-interface anikezwa ngesikhathi sokusebenza futhi awazinzile phakathi kokuxhumana kabusha. I-hook ehambisana negama elabonwa isonto eledlule noma ngeke isebenze noma izosebenza ku-interface yomunye umuntu. Yomibili imiphumela ibonakala njengephutha lokuhlela imizila hhayi njengesimo sakudala esiyikho. Ukungavumi okufanayo kuyasebenza kunoma iyiphi i-skrithi eboshelwe egameni elikhona kuphela ngesikhathi ithubhu elithile likhona.
Sebenzisa umthombo osekelwe wenhloso yomzila
I-gateway, iphrofayela elawulwayo noma indlela yemizila ebhalwe phansi yeklayenti elingumnikazi iyindawo efanele, lapho leyo ndlela ikwazi ukuveza isidingo. Yikuphi okusebenzayo kuncike kuphrothokholi nomhlinzeki, futhi okhiye abahambi phakathi kwabo, ngakho inani elilungisa iphrofayela OpenVPN alisho lutho ngeklayenti lomdabu le-L2TP noma le-IKEv2.
| Mechanism | Can carry extra prefixes | Who owns the lifetime |
|---|---|---|
| Gateway-pushed routes | Often, if the gateway is configured for it | The connection |
| Managed profile settings | Depends on the client and profile format | The profile |
| Provider tunnel settings | Yes, as included and excluded routes | The provider process |
| Manual command | Yes, once | Nobody |
Kubathuthukisi bamathubhu amaphakethe, izilungiselelo zethubhu le-IPv4 ze-Apple ziveza ngokusobala imizila efakiwe nekhiphiwe, futhi ne-IPv6 inokulingana kwayo. Lezi zinqubo ze-API ezisetshenziswa umhlinzeki, hhayi ubufakazi bokuthi yonke iphaneli ye-VPN yomdabu inikeza umphathi uhlu lwemizila olungafunwa. Uma inhlanganisela yamanje ingakwazi ukuveza iziqalo ezidingekayo, isinyathelo esilandelayo indlela yokulungisa esekelwe umqhubi, hhayi enye ihlelo elifakwe ngethemba lokuthi lizoziphatha kangcono.
Isikhathi sokuphila sihlanganisa ukuhlanza
Ngezinye izikhathi umsizi wangaphandle uyadingeka ngempela, futhi lapho «engeza umzila» kuyingxenye encane kakhulu yomsebenzi wakhe. Kufanele azi ukuthi usebenzela ukuxhumana kuphi nokuthi lokho kuxhumana kusebenzisa iyiphi i-interface, alinde kuze kuzinze isimo senethiwekhi esikhona, ahlale eyi-idempotent lapho isebenza kabili ngokulandelana, futhi angahlanzi lutho angakufakanga yena.
Umgomo wokugcina yiwona obuhlungu. Umsizi osusa yonke imizila ehambisana nesiqalo sehhovisi uzosusa ngokushesha noma ngokuhamba kwesikhathi umzila angawengezanga. Ukuphazamiseka okubangelwayo kubekwa eklayentini ye-VPN, ngoba iklayenti iyingxenye umsebenzisi ayibonayo. Ukunquma ukuthi umsizi unani ngaphambi kokumbhala kushibhile kunokuchaza kamuva ukuthi kungani isubnet yasendaweni iyeke ukuphendula.
Umjaho wokuxhumana kabusha
Cabanga ngokuxhumana kabusha okusheshayo. Iseshini A iyawa, iseshini B iyaphakama futhi ifake umzila wayo, bese ukuhlanza okubambezelekile kwe-A kugcina kusebenza. Uma lokho kuhlanza kususa imizila ngesiqalo, kuthatha nomhlaba ovumelekile we-B, futhi ukuxhumana obekusebenza ngomzuzwana odlule manje kuhlela endaweni engenalutho.
Lona umjaho wobunikazi, futhi ukwengeza ubuthongo ku-skrithi kushintsha kuphela ukuthi yiluphi uhlangothi olunqobayo. Isixazululo ukwenza ukuhlanza kuncike ebunikazini: qhathanisa i-interface neseshini umsizi azifakile nalezo ezisasebenza, futhi ususe kuphela lapho zihambisana.
Yini okufanele ihlolwe, nokuthi umzila awukwazi ukwenzani
Ukwamukela kufanele kuhlanganise izinguquko ezine: ukuxhumana kokuqala, ukuxhumana kabusha ku-interface ehlukile, umzamo wokuxhumana ohlulekayo, nokunqamuka kokugcina. Ngemuva kwalokho ngakunye, funda umzila uhlelo olukhethe ngempela ikheli ohlangothini olukude, hhayi lowo obuwulindele.
route -n get 10.77.0.5
netstat -rn -f inetFaka nezehlakalo ezinzima kulo mjikelezo: i-IPv6 lapho idingeka khona, isiqalo sasendaweni esihlangana nesiqalo esikude, nomzila oya endaweni yokugcina yomphakathi ye-VPN uqobo, okufanele uqhubeke usebenza ngesikhathi ithubhu likhona. Bese ubhala ukuthi umzila awuyona ini. Ukhetha amaphakethe; awunikezi imvume ohlangothini olukude futhi awudali indlela yokubuya, futhi leyo ihlala iyizidingo ezihlukene ezinabanikazi abahlukene.
Umphumela owufunayo yisiqalo esilandela umnikazi wokuxhumana waso osekelwe kuzo zonke izinguquko, hhayi umyalo ophumelele ngamabomu kanye emshinini lapho wabhalwa khona.