Umzila wesipele we-VPN ontantayo awuthathi icala: uhlu lokuhlola lokushintsha

Imizila eqinile entantayo ilinda ukufaneleka, hhayi ukuthi amaphakethe ame. Izahluko eziyisithupha zokuhlola umzila wokuhlola, imikhawulo nokubuya kusipele se-VPN.

Umzila wakho we-VPN ontantayo usulungisiwe, ibanga lesipele likhulu kunelomzila oyinhloko, kodwa akukho okunyakazayo. Noma kuyanyakaza, bese kubuya emva kwemizuzu embalwa ngesikhathi uxhumano olungenantambo lusaphansi. Kuzo zombili izimo, enye into ngaphandle kwephutha okukhathazayo inquma ukufaneleka komzila.

Yenza lezi zihlolo ngokulandelana. Ngayinye inombandela wokuma, futhi ukuhlola okwehlulekile akukwazi ukusindiswa yilokho okulandelayo. Izibonelo zisebenzisa isintaksi ye-RouterOS ngoba ibanga, ukufinyeleleka kwesango kanye negxathu elilandelayo eliphindayo kuyabonakala kukho konke kuleyo ndawo, kodwa ukulandelana kusebenza kunoma yisiphi isidlulisimizila esinemizila eqinile elandelelwayo.

Qamba iphutha okufanele isipele sikhawulele

«Umzila oyinhloko uphansi» kuyizinto ezine ezihlukene ezibonwayo. Irediyo elahlekelwa umlingani wayo, isixhumanisi esilahlekelwa umthwalo waso, isango elikude eliyeka ukuphendula, kanye nohlelo oluyeka ukusebenza konke kubonakala ngendlela ehlukile endaweni yesidlulisimizila. Bhala ukuthi yikuphi okwenzelwe ukuklanywa ngaphambi kokuba othile ashintshe inani lebanga.

Bese uhlola ukuzimela. Uma ukuthuthwa kwangaphandle kwe-VPN kuhamba emzileni ofanayo ongenantambo, noma kuxhumano lokungena elabelana nomfudlana ophezulu ofanayo, isipele akusona isigaba sesibili sephutha futhi sizoba phansi ngqo lapho usidinga khona. Donsa ikhebula eliyinhloko ephepheni: uma ukuthuthwa komhubhe uqobo kufa nayo, umzila ontantayo uhlanganisa amaphutha okulungiselela kuphela, hhayi ukuphazamiseka.

Yeka ukucela ibanga ukuthi lithole noma yini

Ibanga elikhulu lenza umzila ungathandwa kakhulu. Lowo umsebenzi wonke. Uma umzila oqinile oyinhloko usafanelekile, umzila ontantayo uhlala ungasebenzi, futhi lokho kuwukuziphatha okulungile hhayi iphutha. Iphutha libonakala kuphela lapho umzila oyinhloko uhoxiswa noma umakwa njengongafinyeleleki.

Emizileni eqinile lokho kudinga umlandeli ocacile:

/ip route
add dst-address=10.20.0.0/24 gateway=192.0.2.1 distance=1 check-gateway=ping
add dst-address=10.20.0.0/24 gateway=wg-backup distance=10

Funda ukuthi lokhu kuhlola ini: igxathu elilandelayo, hhayi indawo yokuphela. Irediyo esaphendula ohlangothini lwayo lwasekhaya ngesikhathi ukudlulisela ngale kwayo kugobile ihlala igcina umzila oyinhloko usebenza. Leso yisimo esithule, futhi ibanga kanye nokuhlola isango ngeke bakubambe. Uma leso simo sibalulekile, ukutholakala kufanele kuvele entweni ebheka uhlangothi olude: ubumelwane bephrothokholi yomzila, noma ukuhlola okuwena ngokwakho ochaze umzila kanye nomthetho womphumela.

Landelela ukuthi amaphakethe okuhlola ngokwako aya kuphi

Ukuhlola kwempilo nakho kunomzila. Lapho ithrafikhi yedatha isidlulela ku-VPN, ukuhlola okungavinjelwe okuya kwikheli elifanayo elikude kungayilandela, kuphumelele, futhi kufundwe njengobufakazi bokuthi umzila oyinhloko ubuyile. Ithrafikhi ibuyela emzileni ogobile futhi umjikelezo uyaphindeka.

Namathisela ukuhlola emzileni okufanele uwahlulele. Ku-RouterOS indlela evamile umzila womsingathi oya emgqeni wokuqapha ngokusebenzisa isango eliyinhloko, ngobubanzi obuncane ngokwanele ukuthi awukho omunye umzila ongawuxazulula, futhi yilokho isibonelo sokushintsha esiphindayo encwadini ye-RouterOS elakha. Qinisekisa kuthebula elibusayo ngesikhathi isipele sisebenza, hhayi kumbhalo wokulungiselela:

/ip route print detail where dst-address=203.0.113.10
# gateway should still be the primary next hop

Chaza ukuthi umphumela wokuhlola usho ukuthini ngaphambi kokwengeza imigomo

Umgoqo owodwa owenqabayo i-ICMP noma ongena ekulungisweni ubonakala ngqo njengephutha lomzila, futhi imigomo emithathu engenamthetho ikunikeza imibono emithathu kuphela. Nquma umthetho kuqala, bese uwusebenzisa: isibonelo, oyinhloko ubalwa njengophansi lapho imigomo emibili kwemithathu ihluleka ngezikhathi ezimbili ezilandelanayo, kubhalwe encwadini yokusebenza lapho umuntu olandelayo ezoyithola khona.

Setha imikhawulo yephutha nokubuyisela ukuze iphakethe elilodwa elilahlekile lingasusi isizinda. I-hysteresis ibiza isikhathi esincane sokuthola futhi ibuyisela ukuqina. Khetha isikhathi ngokusekelwe ekutheni ukuphazamiseka kubekezeleleka kangakanani, hhayi ekutheni ukuhlola kungagijima ngokushesha kangakanani, futhi gcina ukubuya kunensayo kunokushintsha ukuze umzila oyinhloko kufanele uzibonakalise ngaphambi kokuthola ithrafikhi emuva.

Hlola umzila wokubuya kanye nendaba yamaseshini

Ukushintsha okusebenza ngaphandle kuphela kuyingxenye yokuklama. Isizinda esikude sidinga umzila wokubuya oya ebangeni lakho lomthombo nge-VPN, ngaphandle kwalokho ithrafikhi yokubuya ifika kusuka kukheli elingalindelekile futhi ishaye isimo somlilo ongasahambisani. Amaseshini akhona azophuka ngisho noma ukuxhumana okusha kusebenza, ngakho faka lokho emibandeni yokwamukela esikhundleni sokuthembisa ukuthi ukudluliswa kuzosinda.

Gcina ukufinyelela kokuphatha kude nomzila ohlolwayo. Uma indlela yakho yokungena iwukuphela kwayo ingeyomzila oyinhloko, ukuhlola kokushintsha kukukhiya ngaphandle kwedivayisi eziphethe kabi.

Gijima ukulandelana kokwamukela

Izivivinyo ezintathu zihlanganisa ingxenye enkulu: ukulahlekelwa ngokomzimba komzila oyinhloko, iphutha lokudlulisela elithule ngesikhathi isixhumanisi sisaphezulu, nokubuyiselwa komzila oyinhloko. Kwesinye ngasinye, rekhoda umthombo kanye negxathu elilandelayo lokuhlola, umzila wendawo osebenzayo, kanye nokushintshana kohlelo okuvunyelwe okusha kuzo zombili izinhlangothi.

Isimo esithule yisona esihlukanisa ukuklama. Uma isipele singathathi icala lapho, wakhe umqaphi woxhumano hhayi umqaphi womzila. Nquma ukuthi lokho kwamukelekile yini, futhi bhala umkhawulo lapho unjiniyela obhekele ukuthi uzowufunda khona. Umhubhe wesibili oxhunyiwe awuwona ngokwawo inqubomgomo yesipele ephelele.

Izihloko ezihlobene