Isithonjana esiluhlaza, i-IP yomphakathi efanayo: iyiphi indlela i-VPN eyayigxuma

Isithonjana ku-tray sibika ithaneli, hhayi indlela ezenzakalelayo. Izihlolo ezine zikhombisa ukuthi iklayenti lifake indlela noma ukuphuma akukaze kuhumushe ikheli lakho lomthombo.

Kuxhunyiwe, isithonjana ku-tray siluhlaza, futhi ikhasi elibonisa ikheli lisabika ikheli lomhlinzeki — lokho akusho ngokuzenzakalela ukuthi kunesiphambeko. Iklayenti lenza imisebenzi emibili ehlukene: lakha ithaneli futhi lihlela ithebula lemizila. Eyodwa ingenzeka ngaphandle kwenye, futhi ukuhamba kwemizila okukhethiwe yilokho kulungiselelwa lapho okwesibili kweqiwa ngamabomu.

Okwafakwa yiklayenti ngempela

Buza ukuthi iyiphi i-interface ezothwala iphakethe liye endaweni yangempela esikhundleni sokubuza ukuthi ithaneli livuliwe yini. Ithaneli elingenayo indlela eya kuleyo ndawo ingumgwaqo wangasese ongageji muntu.

ip route get 9.9.9.9
Find-NetRoute -RemoteIPAddress 9.9.9.9
route print -4

Umyalo wokuqala uphendula ku-Linux naku-macOS, kanti eminye emibili iyizinto ezilingana nayo ze-Windows lapho eyodwa yanele. Uma impendulo isho i-adaptha yomzimba, ithaneli livuliwe futhi indlela ezenzakalelayo ayizange inyakaze. Phinda isihlolo endaweni okufanele isebenzise ithaneli, ngoba izihlolo ezimbili, elinye elikude nelinye elijwayelekile, zitshela ukuthi yiluphi uhlobo olusetshenzisiwe.

Izinhlobo ezintathu zokuhamba kwemizila okukhethiwe

Iphrofayela yethaneli eliphelele ngokuvamile ibhala indlela ezenzakalelayo ekhomba ku-interface, noma ibhala ipheya lezinqamuleli zengxenye yobubanzi ezinqoba ngobude besiqalo ngesikhathi indlela yokuqala ezenzakalelayo isahlezi ethebuleni. Ukuhamba kwemizila okukhethiwe kungenye indlela, futhi kuza ngezindlela ezimbalwa. Iphrofayela eyodwa ihambisa umsingathi oyedwa njenge-server ye-RDP, enye ihambisa ububanzi bomphakathi okufanele kufinyelelwe kusuka endaweni ethile, futhi eyesithathu ngamabomu ikhipha uhlelo lokusebenza olulodwa. Zontathu zisemthethweni, futhi azikho ezenza ikheli elibonwa iwebhusayithi ejwayelekile lishintshe.

grep -nE "redirect-gateway|route-nopull|route " /etc/openvpn/client/*.conf
ip route show table main | head -20

Funda iphrofayela ukuze uthole umyalo onqumayo, bese ufunda ithebula ukuze uthole okukhiqizile. Umyalo ophushiwe ungase futhi uvimbeleke kuklayenti, yingakho iphrofayela nethebula kufanele zivumelane ngaphambi kokusola i-server.

Uhlangothi olukude kufanele lubhale kabusha ikheli lomthombo

Kunesiphambeko sesibili esibonakala sifana ncamashi kusuka kubrowser. Indlela ingena ethanelini, i-server ithola amaphakethe bese iwadlulisela phambili nekheli langasese leklayenti lingashintshiwe. Ihop yesilandelayo ayinayo indlela yokubuya yalelo kheli, ngakho izimpendulo ziyanyamalala namakhasi ayahlala. I-server kufanele idlulise noma ngabe yini, futhi kufanele ihumushe umthombo ube into i-inthanethi engayihambisa ibuyele emuva.

sysctl net.ipv4.ip_forward
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -t nat -S | grep MASQUERADE

Shono i-interface ebheke ngempela kwi-inthanethi, okungesona njalo i-eth0 kusakazwa sesimanje. I-server ephethwe enekheli eliqinile ingahumusha ngokucacile kulelo kheli esikhundleni sokusebenzisa i-masquerade. Zombili izingxenye zibalulekile, ngoba ukudlulisa ngaphandle kokuhumusha kukhipha imithombo engahambiswa, kanti ukuhumusha ngaphandle kokudlulisa akukaze kubone iphakethe.

Ukuxazululwa kwamagama kuthatha indlela yako

Ithrafikhi ingaphuma ngethaneli ngesikhathi uphenyo oluthole igama lwaya kusixazululi kunethiwekhi yasendaweni. Ikheli elibonakalayo lihlala lifanayo, imibuzo ayihlali, futhi leso sikhala yisona esikhethwa ukwakheka kwe-DNS ehlukanisiwe.

resolvectl status | head -20
resolvectl query example.org

Qaphela ukuthi iyiphi i-server ephendulile nokuthi ihluke yini kusisekelo sangaphambi kwethaneli. Ethanelini elihlukanisiwe lokhu ngokuvamile ukulungiselela abantu ababefuna ukukushintsha lapho bekhononda ngekheli, futhi yikho abangakaze bakubone.

Ukubona okune okuqeda indaba

Qopha ikheli lokuphuma ngesikhathi ithaneli livaliwe, bese kuba livuliwe. Gijimisa isihlolo sendawo kuzo zombili izimo futhi uqaphele i-interface njalo.

curl -sS https://ifconfig.me/ip
ip route get 9.9.9.9

Uma isihlolo siwela ngaphakathi kwethaneli futhi umsindo wokubuyisa usabika ikheli lomhlinzeki, ukuhumusha kokuphuma akukho. Uma isihlolo siwela ku-adaptha yomzimba, iphrofayela iyakhetha futhi ikheli lomphakathi alizange libe sebangeni. Shintsha insizakalo yomsindo wokubuyisa ngeyodwa oyethembayo futhi uqophe ukubona okune ndawonye, ngoba ngokwahlukana kuyizinganekwane nje. Ndawonye zikhombisa ukuthi yimuphi kule misebenzi emibili iklayenti eliwenzile ngempela.

Izihloko ezihlobene