I-hypervisor yelebhu yasekhaya ayifinyeleleki nge-VPN: yikuphi okufanele ubheke

I-tunnel iyakhula, ikhasi lewebhu le-hypervisor liphelelwa isikhathi, futhi iklayenti lithi lixhunyiwe. Leyo nhlanganisela isusa okuningi: ukuxhawulana kwe-VPN kuyasebenza, iklayenti linedilesi, futhi indawo yokugcina iyafinyeleleka. Okusele uhlu olufushane lwemibuzo yomzila nenqubomgomo, futhi zinokuhleleka kwemvelo. Zisebenze kusukela ku-hypervisor kuye ngaphandle hhayi kusukela kuklayenti kuye ngaphakathi, ngoba isimo se-hypervisor ngokwaso siyinto eshibhe kakhulu ukuyiqinisekisa.

Qala ngesigaba sokuphatha

Qinisekisa ikheli lokuphatha le-hypervisor kanye nensiza elalela kulo, futhi uqinisekise ukuthi ikhasi lilayisha lisuka kwenye ingqalaba kuleso sigaba ngaphambi kokuxilonga noma yini kude. Ukuhlolwa kwendawo okwehlulayo akulona inkinga ye-VPN, futhi ukuhlolwa kwemizuzu emihlanu okonga ihora.

Bese kuba yimizila emibili. Iklayenti le-VPN lidinga umzila oya kunethiwekhi yokuphatha, okusho ngokuvamile ukuthi AllowedIPs yeklayenti noma imizila ephushiwe ihlanganisa leso sizinda. I-hypervisor, noma isango layo elimisiwe, idinga indlela yokubuyela eqenjini lamadilesi amaklayenti, ngaphandle uma umklamo uhumusha umthombo ngamabomu ekungeneni. Lawa amaqiniso amabili ahlukene futhi ukuntuleka komunye wawo kuveza isikhathi sokuphela esifanayo. Zihlole ngokwehlukana: ip route get 192.168.10.20 kuklayenti, nokubamba kumsingathi we-hypervisor okubonisa ukuthi iphakethe lafika yini.

Vumela umphathi wangempela okude

Ugunyazwa umbuzo ohlukile ekufinyelelekeni. Sebenzisa inqubomgomo yesango neyomsingathi elinganiselwe emithonjeni nasezinsizeni ezidinga ukufinyelela kokuphatha. I-akhawunti ye-VPN yesivakashi edinga uhlelo lokusebenza lwebhu elilodwa akufanele ngakho-ke ifinyelele ezingeni lokuphatha, futhi umthetho oyisicaba ovumela sonke isizinda se-tunnel yiyo indlela lokho okwenzeka ngayo.

Gcina ukuqinisekiswa kwe-hypervisor ngokwayo nokuhlolwa kwesitifiketi kuvuliwe. Umzila wangasese akusona isizathu sokuchofoza isixwayiso sobunikazi esingalindelekile.

Isixwayiso kufanele sithathwe njengokutholakele hhayi njengesithiyo. Uma isitifiketi singahambisani negama olimsebenzisile, kungenzeka igama alilungile noma insiza akuyona leyo oyicabangayo, futhi zombili izimpendulo zibalulekile kusixhumi esibonakalayo sokuphatha kunanoma ikuphi. Fika ekhasini ngegama isitifiketi esakhishwa ngalo, futhi uvumele i-DNS ikhombe lelo gama ekhelini le-tunnel. Igama langasese elixazululwa ngokungafani phakathi kwe-LAN ne-tunnel iyimbangela evamile yezikhalo zesitifiketi ezibonakala njengezinkinga ze-VPN.

Hlola ukuxhumana kwesibili

Ezinye izici zisebenzisa ukuxhumana ikhasi lewebhu elingakusebenzisi. Iseshini ye-console, ukulayisha kwe-ISO, i-proxy ye-VNC noma ye-SPICE kanye nesiteshi sokufuduka kungasebenzisa iphothi ehlukile noma ikheli lensingathi elihlukile. Uma ikhasi lilayisha futhi isici esisodwa sehluleka, funda imfuneko yalowo mkhiqizo esikhundleni sokuvula yonke iphothi kumsingathi.

Ukuvula konke yiyo indlela isixhumi esibonakalayo sokuphatha esiba esingaphathwanga ngayo. Iphothi ngayinye eyengeziwe ingumlaleli oyengeziwe okufanele ugcinwe ubuyekeziwe, futhi i-hypervisor isivele iveza ezanele. Khomba ukuxhumana okuqondile okudingwa yisici, qinisekisa ukuthi kuyafinyeleleka nge-tunnel, futhi ushiye okunye kuvaliwe. Uma isici siphikelela ekuxhumaneni okuqondile nekheli lensingathi elingakwazi ukuhamba nge-tunnel yakho, lokho kuwumkhawulo womklamo okufanele ugwenywe ngamabomu, hhayi isizathu sokudlulisela ububanzi.

Gcina indlela yokubuyela ngaphambi kokuthinta inethiwekhi

Ngaphambi kokushintsha inethiwekhi ebonakalayo ethwala i-VPN yakho, qinisekisa ukuthi unendlela yokubuyela yasendaweni noma ezimele.

Lokhu kubaluleke kakhulu elebhu yasekhaya, ngoba indawo yokugcina ye-VPN ivamise ukuba umshini obonakalayo kuyo kanye i-hypervisor oyizamayo ukufinyelela. Ukushintsha iswishi ebonakalayo, ibhuloho noma umthetho we-firewall kude kungase kususe indlela oyisebenzisayo, futhi iseshini ingase iphile isikhathi esanele ukuze ukubone kwenzeka.

Hlola ngaphandle kwelebhu hhayi nge-LAN, futhi uqinisekise ukwenqatshwa njengokuvunyelwa. Inethiwekhi okufanele ihlale ingafinyeleleki nge-tunnel kufanele ihlale injalo ngemva koshintsho lwakho, futhi lokho kuyisitatimende esihlukile ekulayisheni kwekhasi lokuphatha. Bhala zombili iziphumo, ngoba eyesibili yiyo eliyekwayo futhi ebalulekile lapho ilebhu ikhula.

Irekhodi okufanele igcinwe lifushane: ikheli nensiza yokuphatha, umzila odingwa uhlangothi ngalunye, ubunikazi obuvunyelwe ukufinyelela, nendlela yokubuyisela. Lokho kwanele umuntu olandelayo ukukhiqiza kabusha isimo esisebenzayo ngaphandle kokusisusa kabusha.

Uma ikhasi lisaphelelwa isikhathi ngemva kwakho konke lokho, bamba ku-hypervisor futhi ufune iphakethe ngaphambi kokushintsha omunye umthetho. Iphakethe elingafiki neze umbuzo womzila noma we-firewall; iphakethe elifika futhi lenqatshwa umbuzo wensiza noma wenqubomgomo; iphakethe elifika futhi liphendulwa ngenkathi iklayenti lilindile umbuzo wendlela yokubuyela. Imibhalo ye-strongSwan yokudlulisela ichaza ukuthi isango le-Linux lidlulisela kanjani ithrafikhi ye-tunnel kumsingathi wangaphakathi. Ukubamba kathathu kunqoba ukuqagela okunye.