Indlela yokuthola umhubhe we-VPN osebenzayo kusuka kukhodi kunoma iyiphi inkundla
Ingabe umhubhe ukhona, ingabe le ndawo iwela kuwo, noma ingabe umkhawulo okude uyaphendula? Lezi zinto ezintathu zokuhlola ezihlukene nezimpawu ezintathu ezihlukene.
“Ingabe i-VPN ivuliwe?” empeleni yimibuzo emithathu emshweni owodwa. Ikuphi kuyo ikhodi yakho ekudingayo yisinqumo sokuqala, futhi yikho okweqiwa ukusetshenziswa okuningi. Ingabe umhubhe ukhona kule divayisi, ingabe ithrafikhi eya kule ndawo iphuma kuwo, noma umkhawulo okude uphendula ngobunikazi obulindele. Khetha impahla, bese ukhetha isignali eyikala, futhi ekugcineni bhala kulogi ukuthi iyiphi oyikale ngempela.
Izimpawu ezintathu, amasignali amathathu
Uma zicindezelwa zibe umugqa owodwa ngayinye, imibuzo emithathu inezimpendulo ezintathu ezihlukene. Ithebula elingezansi yisinqumo ngokwaso, hhayi isifinyezo saso.
| Property | Signal that answers it | What it still leaves open |
|---|---|---|
| Existence | The platform's own connection state: RAS on Windows, NetworkManager on D-Bus on Linux, scutil on macOS | Tunnels of a type the platform does not manage, which includes most third-party clients |
| Path | A route lookup for the one destination, or a scoped proxy or interface key that names the tunnel | Whether the far end is the peer you trust |
| Identity | An authenticated response from the far end, or a source-address policy applied on the server | Which local interface carried the packets |
Funda umugqa wokugcina kancane. Umkhathi oyimfihlo ophendulayo ufakazela ukuthi kukhona okuphendulile, hhayi ukuthi impendulo yeza ngomhubhe, futhi akasho lutho ngokuthi ubani okwelinye uhlangothi. Uma impahla oyidingayo iwumzila, kala umzila.
Ukuba khona: isimo senkundla ngokwayo
I-Windows iphendula lokhu kumaphrofayili omdabu nge-Remote Access Service API. RasEnumConnections ibala lokho okuxhunyiwe, RasGetConnectStatus ibika isimo sombhali owodwa, futhi RasGetLinkStatistics yengeza isivinini, izibali zamabhayithi kanye nobudala bokuxhumana. Imikhawulo iwukuthi: i-OpenVPN, i-WireGuard namaklayenti abathengisi abakaze babhalise ukuxhumana kwe-RAS, ngakho umhubhe onempilo walolo hlobo ukhombisa uhlu olungenalutho futhi ikhodi elula ibika ukuthi ucishiwe.
Amadeskithophu e-Linux aveza impahla efanayo nge-NetworkManager ku-D-Bus, lapho i-PropertiesChanged esintweni sokuxhumana se-VPN ishintsha ukuhlola kube umcimbi futhi impahla i-State ibika ukuthi isixhumanisi sifinyelela nini isimo sokuxhunyiwe. Kusuka ku-shell, i-nmcli connection show --active ifunda ulwazi olufanayo, futhi yilokho okudingayo ngesikhathi sokulungisa amaphutha. I-macOS igcina lolo hlu ku-System Configuration framework, ne-scutil njengokubuka kwayo komugqa womyalo. Zontathu zichaza ukuxhumana okulawulwa yinkundla, futhi zontathu ziyathula ngomhubhe engawulawuli.
Umzila: iphakethe liya kuphi ngempela
Ukuqondanisa amagama yisinqamuleli esithathwa ngumuntu wonke kuqala: bala ama-interface, hlola intambo ngokumelene ne-tun, i-tap, i-ppp noma i-ipsec, futhi thatha ukuqondana njengobufakazi. Kuwukucabanga okulinganiselwe, futhi isethi yama-interface ingabukeka ifana noma ngabe kukhona okuhambayo kuyo noma cha. Izakhiwo ezindala ze-iOS zaziphendula kanjalo kanti ezakamuva zayeka, ngoba ama-interface abonakalayo ayengasahlukanisi lezi zimo ezimbili.
Okwathatha indawo yako lapho yisichazamazwi se-proxy sohlelo. Uma i-VPN ixhunyiwe, ukubiza kwezilungiselelo ze-proxy kubuyisa okhiye abakhawulelwe kuma-interface ahlobene nomhubhe, futhi uma kungaxhunyiwe lutho isichazamazwi sibuya singenalutho. Leso yisitatimende esibuthakathaka kunalokho okuzwakalayo, ngoba sibhala inkolelo yohlelo yokuthi umhubhe ukhona, hhayi ukuthi iyiphi indawo ewusebenzisayo.
I-Android inenguqulo yayo yalolu gibe: ukusakaza kwe-vpn.connectivity kufinyelela kumamukeli akhishiwe ku-manifest kwezinye izakhiwo nakumamukeli abhaliswe ngesikhathi sokusebenza kwezinye. Kuthatha njengomzamo ongcono kakhulu, futhi gcina uphenyo oluqondile ngemuva kwakho.
Uma indawo iyiyo ebalulekile, buza ithebula lomzila esikhundleni sohlu lwama-adaptha. Izilinganiso zesango elizenzakalelayo ziyahluleka emishinini enamanethiwekhi amaningi nakumahubhe afaka isango lawo.
Ubunikazi: hlola umkhawulo okude
Iluphu ethumela umsindo we-ICMP kumkhawulo okude njalo ngemizuzwana embalwa iwukuhlola okushibhe kakhulu kwalolu hlobo, futhi ihluleka ngendlela ewusizo. Yiqondise ekhelini elikhona kuphela ngaphakathi kwenethiwekhi eyimfihlo, ngoba ikheli lomphakathi liphendula kunoma yiluphi uxhumo oluphezulu olusebenzayo futhi alifakazeli lutho. Lapho i-ICMP ihluzwa khona, ukuxhumana kwe-TCP okufushane embobeni wesevisi kwenza umsebenzi ofanayo.
Ukuhlola ohlangothini lweseva kunophawu olulodwa: ikheli lomthombo ekuxhumaneni. Ukugcina uhlu lwezikhathi kuwumsebenzi wokunakekela, futhi akukwazi ukuhlukanisa umhubhe kwanoma iyiphi enye inethiwekhi esebenzisa ngengozi ibhlokhi elifanayo.
Inqubomgomo eqinile ingaphila nalokho. Ubunikazi abukwazi, ngakho qinisekisa iklayenti esikhundleni sokuthemba lapho amaphakethe ayo abonakala evela khona.
Bhala isigaba, hhayi isinqumo
Gcina izigaba zokwehluleka zihlukene kulogi: awekho ama-interface nhlobo, ama-interface akhona kodwa indawo ayifinyeleleki, indawo iyafinyeleleka kodwa ukuqinisekiswa kunqatshiwe. Laba bangabanikazi abathathu abahlukene, futhi ngamunye uvula uphenyo oluhlukile.
Ukubahlanganisa kube “VPN yehlile” okukodwa kuthumela umbiko eqenjini elingakwazi ukukulungisa. Isigaba siwumphumela owusizo; isinqumo yiso esikwenza kube nephutha.