Indlela yokulinganisa isikhathi sokusebenza kweklayenti ye-OpenVPN ngamahuku up no-down

Ideshibhodi icela inombolo yokuthi ukuxhumana kunesikhathi esingakanani kuvuliwe, futhi OpenVPN ayikunikezi lokho. Iklayenti liyazi ukuthi umhubhe walo wakhuphuka nini, kodwa kuphela uma othile eqopha leso sikhathi ngaphambi kokulahleka kwesimo seseshini. Indawo esekelwayo iwuhuku up, futhi inani elifanele ukugcinwa iyisekhondi ye-epoch eluhlaza hhayi uchungechunge olufomethiwe. Konke okulandela lokho kuyizibalo, kanye nemithetho embalwa yokulandelana enquma ukuthi inombolo ihlala ithembekile yini.

Qinisekisa ukuthi amahuku ayasebenza ngempela

Fakazela ukuthi ihuku liyadubula ngaphambi kokuklama noma yini elizungezile. Ukulungiselelwa kweklayenti okuncane kudinga script-security 2 kanye nemigwaqo ecacile up futhi down; ngaphandle komugqa wokuphepha i-OpenVPN iyenqaba ukusebenzisa iskripthi futhi isho lokho ngokucacile. Engeza up-restart futhi down-pre ngasikhathi sinye ukuze imigwaqo yokuqalisa kabusha nokuhlakaza iziphathe ngendlela elindelekile.

Yenza inguqulo yokuqala yehuku ifake indawo yayo kufayela futhi ingenzi enye into. Lokho kukutshela amagama ezinto eziguqukayo okhiqizayo wakho akhipha ngempela, njenge dev futhi script_type, esikhundleni salezo ozikhumbulayo zelinye inguqulo. Gijimisa ukuxhumana okukodwa nokunqamuka okukodwa, bese ufunda ifayela. Uma kungaveli lutho, misa lapha, ngoba umklamo wesigxivizo sesikhathi phezu kwehuku elingagijimi neze uzobonakala njengokwehluleka kokuqapha amasonto ambalwa.

Hlola ukuthi ihuku ligijima njawuphi umsebenzisi. Uma user futhi group kusethiwe, i-OpenVPN iyeka amalungelo ngaphambi kokugijimisa izkripthi, ngakho ifolda i-root engabhalela kuyo ingase ivaliwe kuhuku. Khetha umgwaqo ngokombono wensizakalo hhayi owesibasho sakho.

Qopha inani elilodwa le-epoch bese ulisusa ngamabomu

Ihuku up lidinga umugqa owodwa, date +%s > /run/openvpn-client.started, umgwaqo ulungisiwe ngesimo ngasinye. Inani le-epoch ligwema imibuzo yolimi, isifunda sesikhathi nefomethi kamuva, futhi liyinombolo efanayo umenzeli wokuqapha angayiqhathanisa newashi lakhe.

Ukususa kubalulekile njengokubhala. Ihuku down kufanele likhiphe noma lisuse ifayela, futhi down-pre kwenza lokho ngaphambi kokuthi isixhumi esibonakalayo sivaleke, okususa iwindi lapho ifayela lichaza umhubhe osewuhambile. up-restart bese livuselela isigxivizo ekuqaliseni kabusha kwangaphakathi esikhundleni sokushiya inani lokuqala endaweni yalo. Ngaphandle kwaleyo mbhangqwana ukuqalisa kabusha ngemuva kokuphela kwesikhathi se-ping kukhiqiza inombolo eqhubeka inyuka ngesikhathi umhubhe usungulwa kabusha.

Khetha indawo enesikhathi sokuphila esifanele. Ifayela elingaphansi kwe /run linyamalala ekuqaliseni kabusha, okuhambisana neqiniso, kuyilapho ifayela elingaphansi kwe /tmp lingase lihlanjululwe ngendlela engalindelekile futhi elinye elikusigaba sokumisa liphila ngendlela ekhohlisayo. Setha izimvume ukuze kuphela umsebenzisi wensizakalo nomfundi wokuqapha abakwazi ukulifunda.

Bala isikhathi sokusebenza ngaphandle kokwethemba imigqa yelogi

Funda isekhondi eligciniwe, funda isekhondi lamanje, hlisa. Uma ifayela lingekho noma lingenalutho, impendulo ethembekile iwukuthi awukho umhubhe osebenzayo, hhayi ukuthi isikhathi sokusebenza siwuziro, ngoba lezo zimo ezimbili kufanele ziphakamise izaxwayo ezihlukene. Gcina amasekhondi aluhlaza kumthwalo wokuqapha futhi ufomethe izinsuku namahora kusendlalelo sokubonisa. Isifomethi esizungezayo ngaphakathi komkhiphi silahla ukunemba umuntu azokudinga ngesikhathi sezigameko.

Ukuhlaziya izigxivizo zesikhathi zelogi kuwumgwaqo omfushane okhangayo, futhi kwehluleka ngezindlela ezintathu: ifomethi ilandela noma yiziphi izinketho ezisethiwe, ukuzungezisa kususa umlando, futhi ukuxhumana kabusha kubonakala njengezikhathi ezihlukene hhayi umhubhe owodwa oqhubekayo. Ihuku liqopha umcimbi kanye, ngaso leso sikhathi owenzeka ngaso.

Uma ukuhlola kugijima kwelinye ihosi, thumela isigxivizo sesikhathi hhayi isikhathi esithathiwe ukuze umfundi asebenzise iwashi lakhe. Khona-ke umphumela omubi omncane ufunda njengomehluko bewashi hhayi ihuku eliphukile.

Hlanganisa ukuxhumana kabusha, ukuqalisa kabusha nezimo eziningi

Imihubhe emibili kuhosi elilodwa idinga amafayela amabili, ukhiye ngamagama esimo elisetshenziswa yinsizakalo kakade. Umgwaqo owabiwe usho ukuthi ukuxhumana kwakamuva kubhala phezu kwesikhathi sokuqala sephrofayela ngayinye, futhi uphawu yinombolo egxumayo ibheke emuva lapho kuhhubhe yesibili iqala.

Ukuziphatha kokuxhumana kabusha kufanelekela ukuhlolwa kwakho, ngoba yilapho umklamo okholakalayo ubika ngokuthula into engalungile. Phoqelela ukuqalisa kabusha ngokuwisa uzakwabo noma ngokuthumela isignali kwinqubo, bese uqhathanisa isimo sesixhumi nefayela. Isigxivizo sesikhathi kufanele siqhubele phambili ngaso sikhathi umhubhe obuyayo.

Ngasohlangothini lweseva, ifayela lesimo liphethe inani le-connected-since kuklayenti ngayinye, eliphendula umbuzo ohlukile: ukuthi iseva yagcina nini ukubona lowo zakwabo. Yisebenzise ekuhloleni okuphambene hhayi njengesikhundla, ngoba inyamalala kanye neseshini eliyichazayo. Akukho kokulinganisa kokubili okusho lutho ngempilo yohlelo olungemuva komhubhe.

Gijimisa izivivinyo ezintathu ezibamba amaphutha okulandelana

Hlola ukuxhumana okuvamile, ukuxhumana kabusha okuphoqelekile nokuma okuhlanzekile, ufunda uhlu lwezixhumi nefayela ndawonye ngemuva kwalokho ngakunye. Isigxivizo esisakhona ngemuva kokuma okuhlanzekile, noma ifayela elithi kunomhubhe ongekho ohlwini lwezixhumi, likhomba ngqo ekulandelaneni kwamahuku. Gijimisa izivivinyo njengomsebenzisi wensizakalo nangemigwaqo yensizakalo, ngoba isibasho se-root singabona elinye ifayela bese sinikeza impendulo engalungile ngokuzethemba. Bese ushiya umhloli ohamba kancane efunda ifayela futhi uqinisekise ukuthi akalibhali nakanye kulo.

Inhlolovo njalo ngemizuzwana engamashumi ayisithupha ihlanganisa izaxwayo, futhi akukho huku okufanele lithembele ekutheni lowo mhloli uyaphila. Hlukanisa leyo mithwalo emibili yomsebenzi futhi inombolo ihlala ithembekile lapho noma yiluphi uhlangothi lusetshenziswa kabusha.