Indlela i-tunnel ehlukanisiwe enquma ngayo ukuthi yikuphi ukuhamba okusebenzisa i-VPN

I-tunnel ehlukanisiwe iyinqubomgomo yomzila evezwa njengesethi yemithetho, futhi iklayenti liyinto nje eyifakayo leyo mithetho. Ukuhlukaniswa kwenzeka ezindaweni ezimbili: imithetho yokufanisa ekhetha umzila wephakethe ngalinye, kanye nokuxhumeka okubamba uhlelo lokusebenza ku-interface eyodwa noma ithebula lithini. Ukuthi iklayenti lakho lincike kuwuphi umshini kuchaza izimangaliso eziningi abantu abazibikayo.

Inqubomgomo ongayisho ngomugqa owodwa iyahlolwa. Inqubomgomo echazwa njengokuphequlula okusheshayo ayinjalo, futhi ngeke ikutshele ukuthi yimuphi umthetho okufanele uwushintshe lapho isicelo sithatha indlela engafanele.

Iklayenti lifaka imithetho, i-kernel yenza ukukhetha

Lapho i-tunnel inyuka, iklayenti lengeza imizila futhi kaningi imithetho yenqubomgomo kuyo leyo thebula esetshenziswa ezinye izixhumi zakho. Iphakethe ngalinye bese lifinyelela usesho olufanisa indawo eliya kuyo nayo yonke i-prefix engaba khona futhi lugcine ukufana okuqondile kakhulu, kuyilapho ukubaluleka kuxazulula ukulingana phakathi kwemithetho ekhomba amathebula ahlukene. Akukho lutho kulolo sesho olwazi ukuthi iphakethe lalivela kuthebhu yesiphequluli hhayi emsebenzini wokulondoloza. Umthetho onqobayo yiwo obeka umzila, futhi ungawufunda ngaphambi nangemuva koshintsho.

Yingakho i-tunnel ehlukanisiwe ingabonakala ingenangqondo. Izindawo ezimbili kuhlelo lokusebenza olulodwa zingathatha imizila ehlukene ngenxa nje yokuthi i-prefix eyodwa incane kunenye.

Ukukhetha okufanayo kukhona kuzo zonke izinkundla, nakuba amagama eshintsha. I-Windows idudula isinqumo endaweni yayo yokuhlunga, i-Android iveza uhlu lwezimvume lwe-app ngayinye ngensizakalo yayo ye-VPN, futhi i-macOS ixhumanisa i-tunnel nedivayisi esagcina ithebula lomzila. Amanothi ka-Microsoft omzila afanele afundwe esimweni se-Windows, futhi umhlahlandlela obhalelwe inkundla eyodwa awuvamisile ukudluliselwa ungenashintsho kwenye.

Ukuxhumeka kwe-app ngayinye nama-prefix endawo kungamathuluzi ahlukene

Inqubomgomo yendawo iyabuza ukuthi iphakethe liyaphi futhi ithintana nethebula lomzila noma umthetho wenqubomgomo. Inqubomgomo ye-app ngayinye iyabuza ukuthi yiluphi uhlelo oluvule isokhethi, futhi inkundla igcina lolo hlelo ku-interface ye-tunnel ngisho nalapho umzila oqondile kakhulu ukhomba kwenye indawo. Eyesibili inamandla kakhulu ngoba ihlala ikhona ezinguqukweni zethebula, kodwa ihlanganisa kuphela izinqubo inkundla engazabela zona. Inqubo elusizo, isiphequluli esishumekiwe, noma insizakalo evula ukuxhumana kwayo uqobo kungenzeka inganuki ukuxhumeka obukucabangile.

Awekho emikhakathi emibili anqoba inqubomgomo esekelwe emagameni ngaphandle kosizo. Amakheli amasayithi amakhulu ajikeleza phakathi kwamanethiwekhi wokuqukethwe, ngakho ukugxilisa igama lomsingathi kuma-prefix ambalwa kukhiqiza umthetho oyeka ngokuthula ukufana. Inqubomgomo okufanele ilandele amagama idinga ingxenye eyazi isixazululi esikhundleni somzila ongaguquki.

I-DNS nenkinobho yokuphepha zilandela imithetho yazo

Ukuxazululwa kwamagama kuyisinqumo esihlukile ekuhambeni kwephakethe, futhi i-tunnel ehlukanisiwe ngokuvamile ifuna izixazululi ezimbili: eyesikhungo yamagama angaphakathi, neyendawo yakho konke okunye. Iklayenti lingafaka izilungiselelo ze-DNS nge-interface ngayinye, linikeze imibuzo kwisixazululi esiphakathi, noma lishiye okumisiwe kwesistimu kungathintwanga. Isiphequluli esinesixazululi saso esibethekile sidlula lezi zinhlelo zontathu. Hlola usesho esikhundleni sokucabanga ukuthi isixazululi silandele umzila.

Inkinobho yokuphepha yengeza isihlungi phezulu, futhi leso sihlungi asihlali sihlukanisa ukukhishwa okuhlosiwe nokuvuza okungahlosiwe. Amanye amaklayenti avimba konke ngaphandle kwe-tunnel kuyilapho amanye evumela ukukhishwa okumenyezelwe yinqubomgomo, ngakho funda ukuthi eyakho isebenzisa kuphi ukuziphatha ngaphambi kokuthembela kwenye yazo.

Hlola ukuhlukaniswa ezinhlangothini zombili

Hlola umzila ofakiwe nomzila okhishiwe ngokwehlukana, futhi ahlulele umphumela ngegama le-interface hhayi ngekheli lomphakathi. Lezi ziyalo zicabanga i-Linux host enedivayisi ye-tunnel esivele inyukile. Shintsha i-203.0.113.10 indawo ehambiswa yinqubomgomo yakho ngaphakathi, futhi i-198.51.100.25 ileyo eyithumela ngaphandle.

ip route get 203.0.113.10
ip route get 198.51.100.25
resolvectl query intranet.example.com
curl -s --interface tun0 https://example.com -o /dev/null -w '%{http_code}\n'

Funda izimpendulo ezimbili zokuqala ndawonye, ngoba i-interface eshiwo kuyo ngayinye ibonisa ukuthi ukuhlukaniswa kwabeka leyo ndawo ku-tunnel yini. Umbuzo wesixazululi ubonisa ukuthi yisiphi iseva esiphendule igama langaphakathi, futhi umyalo wokugcina ufakazela ukuthi idivayisi ye-tunnel ingathwala isicelo nhlobo. Ukwehluleka emugqeni wesibili kuyilapho owokuqala uphumelela kusho ukuthi inqubomgomo yenza ngqo lokho eyayitshelwe kona.

Phinda isethi ngemuva kokuxhuma kabusha nangemuva koshintsho lwenethiwekhi. Ukuvuselelwa kwesivumelwano nokushintsha kwezixhumi yizona zindawo lapho ukuhlukaniswa kuyeka ukuhambisana nenjongo okwakhelwe yona, futhi umphumela ogciniwe wokugijima ngakunye wenza ukuphambuka kube sobala.