Indlela yokukhiya ukuphuma kwe-Linux ukuze kungabibikho okucwazayo uma i-VPN iwa
Ukuhamba kwendlela nokuhlunga kuyizinqumo ezihlukene. Khiya ingwegwe yokuphuma, bese ulinganisa okukhethekile kwendawo yokuphela, i-DNS kanye nokuphathwa okudingwa yitheneli ukuze ixhume kabusha.
Cabanga ngebhokisi lemidiya elukwembobo yasekhaya okufanele lifinyelele i-inthanethi ngomhubhe kuphela. Uma umhubhe uwa, uhlelo kufanele lume esikhundleni sokuqhubeka buthule ngesixhumi esibonakalayo. Ukuthola lokhu kuziphatha inkinga yesivikelo somlilo hhayi inkinga yokuhamba kwendlela, futhi umehluko ubalulekile ngoba indlela ingashintshwa ngokuqalisa kabusha idemon, kuyilapho isihlungi sihlala lapho usibeke khona. Okulandelayo yindlela umzila wephakethe elinquma ngayo ngempela, bese kuba yindlela yokulinganisa okukhethekile okugcina umhubhe uxhuma kabusha.
Ukuphuma kwasekhaya kuyingwegwe ehlukile ekudluliseni
Iphakethe eliphuma ohlelweni olusemishinini lidlula engwegweni yokuphuma; iphakethe umshini owuhambisa komunye umsingathi lidlula ekudluliseni. Inqubomgomo esho kuphela i-forward ivimbela eyesibili futhi ishiye eyokuqala ivulekile kakhulu, yingakho izikhiya zokuphuma eziningi zibonakala zilungile futhi zingenzi lutho. Ukufaniswa kwesixhumi nakho kukulo mthetho: i-oifname "tun0" accept idlulisa ithrafikhi eseyehambiswa ngomhubhe. Ukuhamba kwendlela nokuhlunga nakho kuhlala kuyizinqumo ezihlukene, ngakho umzila wokuxhumana ungaba khona kuyilapho isihlungi senqaba iphakethe. Uthembele kulokho kwehlukanisa.
Isango elidlulisela amanye amadivayisi lidinga zombili izingwegwe. Ukukhiya ukuphuma kuphela kuvikela umshini uqobo futhi kushiya iklayenti ngalinye elingaphansi likhululekile ukucwaza.
Bhala uhlu lokukhethekile kusukela endaweni yokuphela kuya ngaphandle
Qala endaweni yokuphela yomhubhe: ikheli elilodwa lendawo noma isethi encane egunyaziwe, iphrothokholi yokuthutha kanye nembobo yendawo, isibonelo i-udp dport 1194 ip daddr 203.0.113.7 accept. Uma iklayenti lixazulula igama lomsingathi, ukushintshana kwe-DNS kokuqala kudinga umthetho walo ogcwele kumxazululi nakumbobo 53, hhayi imvume ebanzi ekhelini lalowo mxazululi. Konke okukhethekile kufanele kusho isizathu sokuba khona kwakho. Imvume yayo yonke ithrafikhi ye-UDP eya embotsheni ye-VPN ihlanganisa okuningi kakhulu kunesevisi eyodwa eqinisekisiwe obucabanga ngayo.
Ukuxazululwa kokuqala yindawo lapho izikhiya zivame ukubola khona. Isethi yamakheli evuselelwa ngesikhathi idinga ukuziphatha okuchaziwe uma ukuvuselela kuhluleka, futhi lokho kuziphatha akukwazi ukuba ukuvula uxhumano kuze kuphumelele. Vuselela ngomhubhe ngenkathi umhubhe umile, uma kungenjalo buyela endaweni yokuphela eyaziwayo yokugcina enempilo.
Ukuphathwa kwasekhaya kudinga ukuphathwa okufanayo. Isethi encane yokuphatha ayithembekile ngoba amakheli ayo ayimfihlo, futhi umthetho oyethembayo ubiza indlela yesibili ezungeza isikhiya.
Ukufaniswa kwesixhumi akusona ubufakazi bomhubhe onempilo
Imithetho eyamukela konke okuphuma ku-tun0 icabanga ukuthi iphakethe kuleso sixhumi lavela emhubheni. Amagama ezixhumi ayakhiwa kabusha, futhi igama akusona isihlonzi se-cryptographic. Uzakwethu angase abe engasekho ngenkathi isixhumi sihlezi siphezulu, okwenza umthetho ube ukungenzi lutho okukholisayo kakhulu.
Ukulandelela ukuxhumana kwengeza ugibe oluhlobene. Umthetho obanzi wokuxhumana okusunguliwe uphinda imvume eyatholwa ukugeleza ngaphambili, ngakho iseshini eyaqala ngaphambi kokuba umhubhe uwe iqhubeka ngemva kwalokho. Linganisa ukwamukelwa okusekelwe esimweni kuzo lezo zixhumi namakheli oqondile ngempela, uma kungenjalo wakha isikhiya esizivula ngokwaso. Imithetho yokungena nokuphuma nayo iphendula imibuzo ehlukene, futhi ukuqinisa eyodwa ngenkathi uziba enye kushiya umshini ufinyeleleka ohlangothini ongalucabanganga.
Yini esinda ukuwa kwedemon
Isihlungi esifakwa iskripthi esisebenza ngemva kokuba umhubhe unyuke siyanyamalala kanye nomhubhe, ngaso leso sikhathi lapho sasidingeka khona. Layisha isikhiya ngesikhathi sokuqalisa futhi uvumele idemon ukuthi ilawule kuphela okukhethekile kwayo.
Ukususa umzila ozenzakalelayo nakho akusona isikhundla. Umzila uyisimo idemon engumnikazi waso futhi eyibhala kabusha, futhi ukususa kwaso kungase kuthathe indlela edingekayo ukuze kuxhunywane kabusha. I-IPv6 idinga uhlelo lwayo, ngoba ukutholwa komakhelwane kanye nezimemezelo zerawutha kuyizinsizakalo zokuxhumana okufanele ziqhubeke zisebenza ngenkathi ithrafikhi evamile ivinjiwe. I-DHCP nayo isesigabeni esifanayo. Bhala lezi njengokukhethekile okunomgomo, esikhundleni sokukuthola kamuva njengokuphazamiseka.
Indlela yokululama ngaphambi kokusetshenziswa
Hlola isikhiya ngendlela esizohluleka ngayo: ukuqalisa ngaphandle komhubhe, ukubulala idemon, ukushintsha indawo yokuphela nokuxhuma kabusha. Isimo ngasinye kufanele simise izinhlelo futhi sishiye isiteshi sokululama sisebenza. Kwenze kusukela kukhonsoli, ngoba isheli ekude yisona sikhathi okungenzeka kakhulu ukuthi sivalwe umthetho wakho.
Bese uhlola ukuthi uhlelo oluvamile lungafinyelela kuphi namanje, ngendawo engenabungozi nesicelo ongasiqinisekisa. Umphumela owufunayo ukunqatshwa koxhumano nokuphumelela ngomhubhe, hhayi isikhathi sokulinda esingacacile esingasho kokubili. Gcina isethi yemithetho ngaphansi komnikazi ofanayo nayo yonke ingxenye yesivikelo somlilo, esikhundleni sokushintsha lonke ithebula kusukela kuskripthi sheli. Inqubomgomo lapho yonke imvume ingazithethelela khona ibaluleke kakhulu kunomthetho omude wemithetho ongenakuchazwa muntu.