I-VPN yesivakashi ne-VPN yomsingathi: yimuphi umzila owinayo ngempela

Amaklayenti amabili asebenza ngasikhathi sinye, ngayinye iqinisekile ukuthi ingumnikazi womzila ozenzakalelayo, futhi umgomo uza njengento exakile: uhlelo lokusebenza olulodwa lwesivakashi luyasebenza, olunye luxazululwa endaweni engalungile. I-VPN engaphakathi kwesivakashi ne-VPN kumsingathi zingaba khona kanyekanye, kodwa kuphela lapho indlela yangaphandle nenqubomgomo yangaphakathi zivumelana ngokuthi ubani uthwala ini. Ukuqalisa kokubili akudali iketanga ngokwako. Qala ngokubhala ukuxhumana, bese ushintsha into eyodwa ngesikhathi.

Qala ngokubhala ukuxhumana kwesivakashi

Isivakashi sifinyelela kuseva yaso ye-VPN ngendlela esinikezwe yi-hypervisor: i-NAT ngemuva komsingathi, ibhuloho eliya esigabeni somzimba noma inethiwekhi yomsingathi kuphela enokuhlela umzila okunezelwe phezu kwayo. Ukuxhumana ngakunye kushintsha lokho isivakashi esingakubona nalokho umsingathi angakwenza ngokuhamba kwaso. Ngaphansi kwe-NAT amaphakethe esivakashi abonakala sengathi avela kumsingathi, ngakho umhubhe womsingathi uqobo ungawathwala isivakashi singazi lutho ngakho. Ngaphansi kwebhuloho isivakashi sinokuba khona kwaso esigabeni kanye nesango laso elizenzakalelayo.

Bhala ukuxhumana ngaphambi kokuthinta noma yikuphi ukulungiselelwa, kanye nokuthi yiliphi iklayenti okufanele lithwale uhlelo lokusebenza oluthile. Lowo musho uxazulula iningi lalezi zimo, ngoba amaklayenti amabili ngokuvamile akhiwe phezu kwezinkolelo ezihlukene. Isivakashi okulindeleke ukuthi sisebenzise umhubhe womsingathi akufanele futhi sibe nomzila waso ozenzakalelayo oyincintisana nawo.

Landela iphuzu lokugcina lesivakashi ngaphandle

I-VPN yesivakashi idinga indlela esebenzisekayo eya kuseva yayo ngaphambi kokuthi enye into isebenze. Lapho umhubhe womsingathi uvuliwe futhi isivakashi sihlezi ngemuva kwe-NAT, ukuxhawula kwesivakashi kuphuma ngomhubhe womsingathi, okungaba wumklamo noma ingozi okungekho muntu oyibhalile. Lapho umhubhe womsingathi uwela futhi isivakashi sasincike kuwo, isivakashi silahlekelwa uxhumano ngaphandle koshintsho olulodwa ohlangothini lwaso. Ukulandela iphuzu lokugcina ngaphandle kukutshela ukuthi yikuphi kulawa mabili onakho ngempela.

Umzila obanzi kunoma yisiphi isimo ubamba ukuhamba obekulindelwe yilona elinye iklayenti. Umzila 0.0.0.0/0 ngaphakathi kwesivakashi neklayenti lomsingathi elinomhubhe ogcwele kokubili kufuna konke, futhi kuwina lokho okusetshenziswa ekugcineni. Ukuhlangana phakathi kwamanethiwekhi angokoqobo esivakashi, i-LAN yasendaweni namanethiwekhi akude kuletha umphumela ofanayo kumaprefikhi ayimfihlo, nokwehluleka okubonakala njengezinkinga zokuqinisekisa; ukuziphatha kokuhumusha amakheli kuyafana nalokho okuchazwe inethiwekhi yamakhonteyina.

Qhathanisa irekhodi langaphambi nangemuva

Thatha umugqa wesisekelo ngomhubhe womsingathi uvaliwe, noma kusiphi isimo esilawulwayo esivunyelwe inqubomgomo yakho, bese ubhala umzila nesixazululi sesivakashi. Bese usebenzisa ukulungiselelwa okuhlanganisiwe futhi uqhathanise amarekhodi amabili, ugcina izidingo zobumfihlo zingathintekile. Uma umugqa wesisekelo oqondile ungafanele, bhala lowo mkhawulo erekhodini esikhundleni sokweqa ukuqhathanisa.

ip route get 10.20.30.41
ip rule show
resolvectl status --no-pager | head -12

Umbuzo womzila usho i-interface nekheli lomthombo elizothwala indawo ethile, futhi uyiwona mugqa oyisebenziseka kakhulu kulolu phenyo. Uhlu lwemithetho lubonisa ukuthi ukuhlela umzila ngokwenqubomgomo kuthumela ezinye izindawo ngapha kwethebula lesibili. Umphumela wesixazululi ubonisa ukuthi i-DNS yalandela umhubhe wesivakashi noma yahlala emzileni womsingathi. Gxuma imiyalo emithathu efanayo ngaphambi nangemuva koshintsho, futhi umehluko uzonikeza igama lomenzi wobubi.

Gcina ubunikazi bucacile phakathi kokuqalisa kabusha

Umkhawulo wokufinyelela kwasendaweni weklayenti lomsingathi ungavimba ukuhamba okuya ku-NAT engokoqobo noma ebhulohweni, futhi lowo mkhawulo uvame ukuthathwa ngephutha njengenkinga yezimpawu zokungena zesivakashi. Funda ukuziphatha okubhaliwe kweklayenti esikhundleni sokucisha umkhawulo ukuze isivivinyo siphumelele. Ngemuva kokulungiswa okusekelwayo, hlola kabusha uhlelo lokusebenza lwesivakashi nenqubomgomo yokwehluleka oyidingayo. Umsingathi oxhuma kabusha ngempumelelo awufakazi lutho ngomzila noma isixazululi sesivakashi.

Nquma ukuthi yiluphi uhlangothi olungumnikazi womzila ozenzakalelayo bese ukubhala lokho encwadini yokusebenza. Ukuqalisa kabusha kwesivakashi noma ukushintshwa kwenethiwekhi kumsingathi okubuyisela emuva ubunikazi buthule kukhiqiza umbiko wesiphambeko mayelana ne-VPN engakaze ibe necala. Ilungiselelo kufanele likwazi ukudlula ukuqalisa kabusha ngaphandle kokuthi kukhona okhumbulayo ukuthi kungani kwasebenza.