Kungani umzila wegxobo ogcwele unqamula iseva eyithwalayo

Vula igxobo eligcwele futhi yonke indawo iseyeyesikhombimsebenzi se-VPN, kufaka nomshini oyiqedayo. Amaphakethe angaphandle athwala igxobo athunyelwa kuleyo mshini, ngakho umzila ugcina udla ezokuthutha okuncike kuzo. Umzila owodwa othile owengeziwe uyikhipha le nkinga, futhi isizathu kufanele sizwakale. Ngaphandle kwaleso sizathu, ukwakhiwa kabusha okulandelayo kuzobuyisa iphutha.

Umzila odla ezakho ukuthutha

Ukufaka ngaphakathi kusonga iphakethe ngalinye kunhloko yesibili. Eyanganlela ithunyelwa isuka ekhelini lendawo lomzimba iye ekhelini lomphakathi leseva, futhi kufanele yeqe isixhumanisi somzimba ngaphambi kokuba noma yimuphi umgudu ube khona.

Manje vumela ukusesha kwalelo kheli lomphakathi ukuthi kukhethe umgudu. Ukuthumela iphakethe, umshini kufanele ulifake ngaphakathi, okudinga umzila oya kulelo kheli, futhi lowo mzila ubuyisela umgudu. Amaklayenti abhekana nalokhu ngendlela eyodwa kwezimbili. Onakekelayo uyenqaba ukufaka umzila ozenzakalelayo futhi ubika iphutha, kanti onganakekeli kangako ubika impumelelo bese engashintshi lutho. Ukwehluleka okuthule yikhona okudla ingxenye yosuku.

Ukufanisa isiqalo eside kakhulu kunquma ukusesha ngaphambi kokuba kubhekwe noma yisiphi isilinganiso, ngakho umzila wekheli elilodwa weqa yonke imizila yozenzakalelo kumshini. Yiyo yonke indlela engemuva kokulungiswa.

Faka okuhlukile ngaphambi kozensakalelo

Dala umzila wekheli elilodwa weseva, usebenzisa isango lomzimba njengendlela elandelayo, ngaphambi kokuba umzila ozenzakalelayo unyakaze. Ukulandelana kubalulekile: ukuwufaka ngemuva kusho ukuphila nomgudu ophukile ngesikhathi uthayipha.

Iningi lamaklayenti lenza lokhu ngaphandle kokucelwa. OpenVPN isesha ikheli elikude bese iligxila ngaphambi kokubhala kabusha isango elizenzakalelayo, futhi inketho yayo ye-route-delay ikhona emapulatifomuni lapho lokho kulandelana kugijima khona. I-wg-quick ithatha indlela ehluke ngokuphelele, imaka amaphakethe futhi ibonise umthetho wenqubomgomo esikhundleni sokwengeza okuhlukile. Izindlela ezahlukene, imfuneko eyodwa: iphakethe langaphandle kufanele liphume egxobeni elilidalile.

ip route add 203.0.113.10/32 via 192.168.1.1 dev eth0
ip route get 203.0.113.10

Umphumela wokusesha uyisivivinyo sokwamukela. Kufanele usho idivayisi yomzimba nendlela elandelayo yomzimba. Idivayisi yegxobo kuleyo mpendulo isho ukuthi okuhlukile akukho, noma kwabekwa ngemuva kwento okweqa ngaphezulu kwayo.

Isithombe esiyisibuko kuseva

Isicupho esifanayo silindele ngaphesheya, sibuyiselwe emuva. Nika iseva umzila ozenzakalelayo ngomunye umgudu, noma yiphoshele umzila ovikela amakheli omphakathi amaklayenti, futhi izimpendulo zayo zizothola umkhuba wendlela engalungile.

Cabanga ngeklayenti elixhumayo futhi lithumela isicelo. Impendulo ithunyelwa ekhelini lomphakathi lalelo klayenti, manje elihambisana nomzila wegxobo, ngakho iphuma kwesinye isikhombimsebenzi ithwele umthombo iklayenti elingakaze liwushaye. Iklayenti lingayamukela leyo phakethe futhi lilahlise, ngoba akukho okulixhumanisa nesicelo elisithumele. Qala esinqumweni somzila seseva hhayi esikhathini sokulinda seklayenti, ngoba kube kanye kuphela okukhombisa ukukhetha kwangempela.

ip route get 198.51.100.44 from 10.90.0.1
ip rule show
sudo tcpdump -ni any host 198.51.100.44

Kunezindlela ezintathu zokulungisa futhi azilingani. Ukugxila kwensiza ekhelini lomzimba, noma ukuhumusha umthombo, kokubili kufihla isinqumo somzila esikhundleni sokulungisa. Ukuthumela ukuthutha kwempendulo kwedamu legxobo ngethebula elikhethekile kulungisa imbangela, kanti ezinye ezimbili zamukeleka kuphela ngesikhathi umklamo womzila uqinisiwe.

Okuhlukile umgudu oqhubeka ukweba

Imisebenzi embalwa idinga i-inthanethi evulekile ngisho nomgudu uphethe umzila ozenzakalelayo, futhi ngamunye udinga okuhlukile kwakhe. Isibuyekezi se-DNS esiguqukayo ngokuvamile yiso esiqala ukwephuka.

Ixazulula umhlinzeki, ivula uxhumano, futhi ithola amaphakethe ayo ahamba ngomgudu okheli lawo lwashintsha ngamasekhondi adlule, ngakho isibuyekezo siyahluleka noma sishicilela ikheli elingalungile. Izindlela ezintathu zokuphuma: gxila umhlinzeki ngomzila wehodi onqamula isango lomzimba, gijimisa isibuyekezo ngaphambi kokuba umgudu ukhuphuke, noma nika isibuyekezi ithebula lenqubomgomo umgudu ongakaze uyithinte. Ukuvumelanisa isikhathi kunokuchayeka okufanayo kudivayisi eqala ngaphandle kwesixazululi, futhi izindawo zokugcina zokuqinisekisa izitifiketi zisohlwini ngesizathu esifanayo.

Okuhlukile okungabhalwanga muntu yikho umgudu ozokushiya ngokuthula ekwakhiweni kabusha okulandelayo.

Kufakazela ngemuva kokuxhuma kabusha, hhayi ngaphambi

Hlola izindawo ezintathu, hhayi eyodwa: iphuzu lokugcina, ikheli langasese ngemuva komgudu, nekheli lomphakathi ngale kwawo. Ukusesha okukodwa okuphumelelayo akusho cishe lutho ngezinye ezimbili.

ip route get 203.0.113.10
traceroute -n 203.0.113.10
ip route get 10.90.0.5
ip route get 1.1.1.1

Bese uqala kabusha uxhumano, ngoba iklayenti elakha kabusha ithebula lalo lapho lixhuma kabusha lizolahla umzila oyithayiphe ngesandla. Uma i-kill switch isebenza, hlola ukuthi iphuzu lokugcina livunyelwe, uma kungenjalo umgudu awukwazi ukubuya ngemuva koshintsho lwenethiwekhi futhi uphawu luzobonakala njengokuphazamiseka. Gcina okuhlukile kuphrofayela noma kufayela le-unit hhayi emlandweni we-shell, ukuze ukuxhuma kabusha kukudale kabusha esikhundleni sokukususa.