Ingabe imizila ye-VPN engenisiwe yehluka kusekheli elisebenzayo? Qhathanisa kokubili

Eminye imisebenzi yangasese iphendula nge-VPN kuyilapho ithrafikhi evamile ye-inthanethi iziphatha ngendlela ehluke kakhulu kunakumshini kazakwethu, futhi kunesilingo sokuphetha ngokuthi isekheli le-Ubuntu lonakele. Leso siphetho seqa isinyathelo esisodwa. Ukusebenza kwangasese okusebenzayo kanye nomzila womphakathi ohlukile kuyimibono emibili, futhi umehluko uvamise ukuba kumgomo wethrafikhi owafakwa yisekheli ngasinye, hhayi kusekheli uqobo.

Ukuqhathanisa ukumiswa okugciniwe nesimo sangempela senethiwekhi kuthatha imiyalo emithathu futhi kuphendula umbuzo okwakuzanywa ukuwuphendula ukuqagela.

Kuqala iphrofayela egciniwe, bese kuba yisimo sangempela

Uxhumano lwe-OpenVPN olungenisiwe luba iphrofayela yalo ye-NetworkManager. Ifayela le-.ovpn elaqhamuka kulo liyeka ukuba ngumthombo weqiniso ngesikhathi uku-import kuphela, ngakho ukuhlela lelo fayela kamuva akushintshi lutho kuxhumano olusebenzayo. Lana lapho ukuqhathanisa kuqala ukungahambi kahle, futhi kwenzeka buthule.

nmcli -f connection.id,connection.uuid,ipv4.never-default,ipv4.routes,ipv4.dns connection show office-vpn

Funda i-UUID uma amagama eshayisana; amagama aphindiwe ahlala ngemva kokufakwa kabusha nokubuyiselwa kwephrofayela, futhi ungachitha ihora uhlela ikhophi engasetshenziswa. Amanani owabonayo achaza inhloso egciniwe: ukuthi iphrofayela ingathatha umzila ozenzakalelayo yini, imiphi imizila egciniwe, kanye nabaqondisi noma izizinda zokusesha ezikucelayo. Awachazi okwenzeka lapho uxhumano luvulwa, ngoba ipulagi noma ukusunduzwa kwesiphakeli kungangeza isimo iphrofayela engasikhulumi. Yingakho umyalo olandelayo ubalulekile.

Bese ubheka okwenziwa uhlelo ngempela ngaleyo nhloso, kufaka nemithetho yenqubomgomo nazo zonke izinhlangothi hhayi ithebula eliyinhloko kuphela. Izici ezigciniwe ziwukungena, futhi amathebula afakiwe awumphumela.

ip -4 rule show
ip -4 route show table all

Izindawo ezimbili, ukuqhathanisa okukodwa

Khetha indawo eyodwa yangasese esebenzayo nendawo eyodwa evamile yomphakathi, bese ubuza i-kernel ukuthi yiluphi umzila umuntu ngamunye angawuthatha. Ukwenza lokhu kuzo zombili izinsimbi yikho okuguqula umehluko ongacacile ube ngumehluko ocacile.

ip -4 route get 10.40.0.20
ip -4 route get 203.0.113.20

Amakheli ayizibonelo okufanele ashintshwe awakho; okubalulekile iqembu, hhayi izinombolo. Qhathanisa isixhumi, ikheli lomthombo kanye nethuba elishiwo kokuphuma ngakunye. Uma ukusesha kwangasese kusho umhubhe nokusesha komphakathi kusho umhubhe, unomhubhe ogcwele futhi isekheli elinye lingaba nomhubhe ohlukanisiwe, noma okuphambene.

Ungafuni ukuthi amasekheli amabili aphrinta umbhalo ofanayo ncamashi. I-redirect-gateway def1 ku-OpenVPN ivamise ukuvezwa njengemizila emibili yengxenye yokuqala kunomzila owodwa ozenzakalelayo, futhi umphathi oyibonisa ngendlela ehlukile akabi nephutha ngenxa yalokho. Hlola ukumboza, okukhonjiswa ukusesha, hhayi ukufometha.

Lapho amasekheli amabili ehluka khona ngokusemthethweni

Okuzenzakalelayo kwesekheli kuyizinqumo zenqubomgomo, futhi kuvunyelwe ukungavumelani. Umkhiqizo owodwa ungase uthande umhubhe ogcwele, omunye ugcina okuzenzakalelayo kwasendaweni futhi uqondisa kuphela iziqalo zangasese, kanti owesithathu ulandela noma yini eyathunyelwa isiphakeli. Umehluko uyiphutha kuphela uma uphikisana nemfuneko oyinikiwe.

Ngakho qhathanisa isekheli ngasinye nenhloso egunyaziwe yomhubhe ohlukanisiwe noma ogcwele, hhayi elinye nelinye. Uma imfuneko iwukuthi ithrafikhi yangasese isebenzise umhubhe futhi umzila wasendaweni we-inthanethi uhlale usendaweni, khona-ke umhubhe ogcwele uyiphutha futhi umhubhe ohlukanisiwe ulungile, kungakhathaliseki ukuthi yiluphi isekheli okwenze ini. Bhala phansi inhloso ngaphambi kokubheka noma yikuphi ukumiswa, kungenjalo isekheli lokuqala oluhlolayo lizoba yindinganiso buthule.

I-DNS iyindawo yesibili futhi yehluleka ngokuzimela. Umzila olungile usengathumela imibuzo kumqondisi ongakwazi ukuphendula isifunda sangasese, futhi umqondisi olungile akawulungisi umzila ongalungile. Hlola kokubili, futhi thatha igama langasese elixazululwayo kuyilapho ikheli langasese lingaxazululwa njengobufakazi bokuthi izendlalelo ezimbili zixazululwa ngokuhlukene.

Gcina ukuqhathanisa kuhlanzekile

Sebenzisa umnikazi woxhumano oyedwa ngesikhathi. Isikhathi se-OpenVPN somugqa womyalo esisebenza eceleni kwephrofayela engenisiwe sifaka imizila yaso kanye nesimo saso somqondisi, futhi ingxube ephumayo akuyona indlela yokusebenza yanoma yiliphi isekheli. Khipha elinye ngaphambi kokulinganisa elinye. Qala kabusha uma ungaqiniseki ukuthi yini isabambe isimo, ngoba umzila omdala wehora eledlule uzobonakala ufana ncamashi nenkinga yenqubomgomo.

Gcina konke okunye kugxilile: i-endpoint efanayo, i-akhawunti efanayo, izinguqulo zefirmware ezifanayo, inethiwekhi efanayo. Impumelelo kukhompyutha ephathekayo ye-Windows kazakwethu ihlola isekheli esihlukile, ukuhlanganiswa okuhlukile komqondisi futhi mhlawumbe iphrofayela ehlukile yesiphakeli, ngakho akubona ubufakazi mayelana nomphathi we-Ubuntu.

Isithenjwa sezilungiselelo ze-IPv4 ze-NetworkManager sichaza ngokunemba i-never-default nezici zemizila egciniwe, okufanele kufundwe ngaphambi kokushintsha inani elilawulwayo. Futhi khumbula ububanzi balokhu kuqhathanisa: kuhlanganisa i-IPv4 futhi akusho lutho mayelana nenqubomgomo ye-IPv6 ehambisanayo, enokwayo okuzenzakalelayo kanye nendlela yayo yokukushaqisa.