Ukudlulisela konke ku-host eyodwa, noma ukubhala kabusha iphothi futhi?

Ukudlulisela konke ku-seva yakho ye-VPN kungachaza imithetho emibili ehluke kakhulu. Enye ishintsha ikheli lendawo okuya kuyo futhi igcina iphothi elingena; enye ibhala kabusha iphothi iye kumsilaleli oyedwa. Ukuchayeka akufani, futhi isinqumo sincike emibandeleni emithathu, hhayi ilebula elisetshenziswa i-interface ye-router.

Umbando wokuqala: iyiphi imikhakha umthetho ayishintshayo?

Ukuhumusha ikheli lendawo okuya kuyo nokuhumusha iphothi lendawo okuya kuyo kuyimisebenzi ehlukene. Umthetho ungasebenza owokuqala kuphela, noma womabili ndawonye, futhi umehluko unquma ukuthi yiziphi izinsizakalo ku-host eqondiwe ezifinyelelekayo. Iningi le-interface yabakhiqizi lifihla lokho kukhetha ngemuva kwelebula elilodwa. Ukufunda umthetho oyisisekelo iyona ndlela kuphela yokwazi ukuthi uthole muphi.

Funda umthetho wangempela, hhayi ilebula lemenyu. Isikrini esithi DMZ noma wonke amaphothi sichaza inhloso, hhayi indlela yephakethe. Imibhalo ye-Netfilter NAT ihlukanisa ukuhumusha okubili, futhi lokho kuyimodeli yokucabanga efanele ngisho noma i-router engaphambi kwakho iyisisetshenziswa sabasebenzisi.

Imikhakha emibili, imibuzo emibili ehlukene.

Umbando wesibili: yini ilalela kumaphothi agciniwe?

Uma umthetho ugcina iphothi elingena, iphothi ngalinye elifikayo lilethwa kunombolo efanayo ku-VPN host, ngokuhambisana nenqubomgomo yokufaka yaleyo host. Lokhu kufaka izinsizakalo okungenzeka ukuthi ukhohliwe ukuthi zazilalela. Umthetho awuzange udale lezo zinsizakalo, futhi manje yiwo oyindlela eya kuzo.

Uma umthetho ubhala kabusha iphothi, kwenzeka okuphambene: amaphothi amaningi angaphandle awela kumsilaleli oyedwa, futhi akukho okunye ku-host okufinyelelekayo ngalowo mthetho. Ukubhala kabusha kuphothi elingagxili akupheli ekubeni ukufinyelela kuzo zonke izinsizakalo zasendaweni ngenxa nje yokuthi ibanga elibanzi lamaphothi angaphandle lihambisana nalo. Imiklamo emibili yehluleka ngezindlela ezihlukene, futhi imodi yokwehluleka iyona oyikhethayo. Khetha leyo ongakwazi ukuphila nokwehluleka kwayo.

Bhala uhlu lwabalaleli ngaphambi kokukhetha.

Umbando wesithathu: umnyango wangaphandle ubanzi kangakanani?

Ukushicilela iphothi elilodwa elikhethiwe kuncane kunokushicilela ibanga, futhi kokubili kuncane kunokwamukela konke. Ububanzi bangaphandle nokuhumusha kwangaphakathi yizinqumo ezizimele, futhi iningi lokudideka livela ekushintsheni okukodwa ngenkathi uchaza okunye.

Ngokwendawo yokungena ye-VPN ejwayelekile, shicilela ukuthutha kanye nomsilaleli okudingwa umklamo ngempela. Bese ubuyekeza ezinye izinto ezintathu: ukumephu okusebenzayo kwe-router, imithetho yokufaka ye-host eqondiwe ngokwayo, nokuthi umsilaleli we-IPv6 ushicilela yini insizakalo efanayo. Umthetho obonakala mncane emndenini othile wamakheli ungaba mkhulu komunye.

Bhala iphuzu lokugcina elihunyushiwe ngokugcwele: iphrothokholi, iphothi langaphandle, ikheli langaphakathi, iphothi langaphakathi.

Lokho akukho mthetho okunikezayo kuwe

Awukho umklamo kokubili oqinisekisa ukuthi insizakalo ayinabo ubungozi, futhi awukho ovikela ukutholakala. Ukuqinisekisa, izibuyekezo nokubuyisela kuhlala kusimo ngaphandle kokuthi ukumephu kwamaphothi kuncane kangakanani. Ukumephu okuncane kunciphisa indawo efinyelelekayo; akwenzi umsilaleli aphephe.

Umthetho obanzi oseke wasekela enye insizakalo esemthethweni uyincikile, hhayi iphutha nje. Yenza uhlu lwawo futhi uwushintshe ngomnini wawo ngaphambi kokuwususa, kungenawo umehluko uzobonakala njengokuphazamiseka okubangelwe ukulungiswa kokuphepha. Ukucophelela okufanayo kuyasebenza ekubhaleni kabusha kuphothi elingagxili okuncike kulo okunye ngokuthula.

Ukuhlaziya ukuchayeka kumayelana nokuthi yini engafinyelela ini, hhayi ilebula elikusikrini.

Nquma uphethe iphuzu lokugcina elihunyushiwe

Bhala umphumela womthetho njengomusho: iphothi le-UDP lomphakathi X lifinyelela ikheli Y iphothi Z. Bese ubuza ukuthi yiziphi izinsizakalo ku-Y ezingaphendula ku-Z nokuthi zingabani.

nft list ruleset

Uma impendulo iwumsilaleli oyedwa obuwuhlelelile, umthetho wenza umsebenzi wawo.

Uma impendulo iminingi, ukhethe ukudlulisela ku-host yonke, kungakhathaliseki ukuthi i-interface ikubize kanjalo noma cha.