Iseva ye-VPN yasekhaya ayifinyeleleki: landela uchungechunge lwe-NAT

Iseva iphendula ku-LAN, umthetho wokudlulisa iphothi ubonakala ulungile, kodwa iklayenti langaphandle alikwazi ukuxhumana. Ukudlula umkhawulo owodwa ngesikhathi uya ngaphandle kushesha kunokuhlela umthetho okwesine, ngoba umkhawulo ngamunye ushiya ubufakazi bawo: ikhasi le-WAN lerouta, ukuhumusha komhlinzeki kanye nomlaleli kusibungu. Qala ekhasini lokuphatha osele ulivulile futhi qeda ngocwaningo olusuka kunethiwekhi ongayilawuliyo. Bhala wonke umphumela njengoba uhamba, ngoba ukulandelana ukuxilonga futhi inombolo ekhunjulwayo ayibona ubufakazi. Uma udinga kuphela umhubhe ophumayo, ukuhumusha akusiyo inkinga yakho: kuvinjelwa kuphela ithrafikhi engenayo engacelwanga.

Qala ekhasini le-WAN lerouta

Ngena kurouta futhi ufunde ikhasi lesimo esikhundleni sohlu lokudlulisa amaphothi. Bhala ikheli le-WAN, isixhumi esibonakalayo elikuso kanye nokuthi uhlobo lokuxhumana yi-DHCP, i-PPPoE noma enye into enikezwa umhlinzeki. Bese uqhathanisa lelo kheli nalokho okubikwa yisevisi yangaphandle, usebenzisa ifoni kudatha yeselula ukuze ukubona kungabuyi ngayo leyo routa. Izinombolo ezimbili ziphendula imibuzo ehlukene, futhi ukuziqhathanisa kuyinjongo yonke yalesi sinyathelo.

Ikheli le-WAN elihlukile ekhelini lomphakathi eliboniwe lisho ukuthi kunomhumushi oyedwa okungenani ongaphezulu kwerouta. Lokhu akukabi iphutha, ngoba abahlinzeki abaningi bahumusha ngokwakhiwa futhi isevisi isasebenza. Uma kokubili kufana, ikheli cishe ngelikarouta futhi inkinga isisuke yangena kunethiwekhi yakho. Noma kunjalo bhala lo mbhangqwana nosuku, ngoba abahlinzeki babela amakheli kabusha futhi ukuqhathanisa namabhuku enyanga edlule akunanzuzo.

Khuphuka igxathu elilodwa

Gijima i-traceroute kusukela kurouta uqobo futhi ufunde amagxathu okuqala ambalwa. Amakheli omphakathi aphindayo, igxathu lokuqala eliphendula ngekheli langasese noma ikheli elingaphakathi kwebanga elabiwe elingu-100.64.0.0/10 konke kukhombisa umhumushi ongaphezulu. RFC 6598 ichaza lelo banga ngqo kulokhu kusetshenziswa, yingakho ukulibona endaweni ye-WAN kuwuphawu oluqinile hhayi into emangazayo. Abahumushi ababili endleleni benza umkhondo ungacaci, ngakho funda iphethini hhayi umugqa owodwa.

Abanye abahlinzeki bakhombisa ikheli elabelwe kuphela kuphothali yamakhasimende, ngakho bheka lapho ngaphambi kokuphetha ngokuthi irouta iyaqamba amanga. Ikheli lasephothali elihambisana nokubona kwakho kwangaphandle ngenkathi irouta ibika okunye liwubufakazi obucacile bokuthi kunomhumushi ongaphezulu. Gcina womabili amakhasi kurekhodi lezinguquko, ngoba ingxoxo yokuthi imiphi imikhawulo ingeyabani ihamba ngokushesha kakhulu ngezithombe ezimbili ezinonku.

Qinisekisa umlaleli nokudlulisa

Ucwaningo lwe-LAN lubonisa ukuthi isevisi isebenza endaweni futhi alubonisi lutho mayelana nokufinyeleleka kusuka ngaphandle. Amarouta amaningi aphendula umthetho wawo wokudlulisa ngokwawo kusuka ngaphakathi, ngakho ucwaningo lweluphu luyaphumelela ngenkathi indlela yangaphandle isavaliwe. Qinisekisa ukuthi i-daemon iboshelwe ekhelini nembobo oyicabangayo, bese uhlola kusuka ngaphandle. Konke okungezansi kungokufunda kuphela.

ss -lunp | grep -E '1194|51820'
ip -4 addr show | grep -E 'inet '
curl -s --max-time 5 ifconfig.me
traceroute -n -m 5 1.1.1.1

Uma ucwaningo lwangaphandle lubonisa ukuthi akukho phakethe elifika kurouta, ukuwa kwenzeke phezulu futhi awukho umthetho wendawo ozokulungisa. Uma amaphakethe efika kodwa akukho okuphendulayo, umkhawulo olandelayo umlaleli noma udonga lomlilo lwesibungu. Ukubamba amaphakethe kusibungu kunquma ukuthi iyiphi kulezi ezimbili oyibukayo, futhi kuthatha isikhathi esincane kunomjikelezo omunye wokuqagela imithetho. Gcina umlaleli nokuthuthwa kwawo kungashintshi ngenkathi uqhathanisa, uma kungenjalo ucwaningo olulandelayo luzophendula umbuzo ohlukile.

Shintsha ukwakheka, hhayi umthetho ofanayo

Uma umhumushi ungowomhlinzeki, ikhambi liyindlela ehlukile hhayi okunye ukudlulisa. I-VPS encane enekheli lomphakathi, exhunywe ngomhubhe ophumayo kusukela ohlangothini lwasekhaya, ibeka iphuzu lokugcina elifinyelelekayo phambi kwesevisi. Ikheli lomphakathi elinikezwa umhlinzeki lilula lapho likhona futhi ngokuvamile lishibhile kunokuqhuba umshini. I-IPv6 isusa ukuhumusha ngokuphelele, uma nje inethiwekhi yeklayenti, amarekhodi e-DNS kanye nenqubomgomo yodonga lomlilo konke kuyisekela.

I-DNS eguqukayo ivuselela igama kuphela; ayidali ukufinyeleleka, futhi ukuyikhomba ekhelini elabiwe kuthumela amaklayenti egedi lomhlinzeki elisetshenziswa ngabanye ababhalisile. Lokho kwehluleka kubonakala kufana ncamashi nesiva efile, yingakho irekhodi lezinyathelo zokuqala libalulekile. Bhala ukuthi igama laxazululwa laya kweliphi ikheli ngenkathi ucwaningo lwehluleka, futhi gcina impendulo kanye nomphumela wocwaningo.

Bhala kabusha uhlelo oluzungeze umkhawulo owulawulayo: umlaleli, umhubhe kanye nemizila. Gcina ukudlulisa kwakudala endaweni kuphela ngenkathi kusachaza into eyiqiniso, ngoba umthetho ongasahambisani nokwakheka mubi kunokungabi nawo umthetho. Bhala ukuthi yisiphi isigaba esasivimbela ngempela nokuthi yibuphi ubufakazi obakubonisayo. Uma kungenjalo umuntu olandelayo ovula ikhasi lokuphatha uzophinda zonke izinyathelo zalolu hambo kusukela ekuqaleni.