Ukufaka Kuphela noma Ukukhipha Kuphela ku-Tunnel Ehlukanisiwe: Ikuphi Okuzenzakalelayo?
Khetha okuzenzakalelayo ngaphambi kokwakha uhlu: faka ku-tunnel kuphela lokho okukushoyo, noma faka konke bese usika okuhlukile. Bese uhlola uhlelo lokusebenza okungekho muntu olufakile ohlwini.
Vula isigaba sokuhlela imizila kuklayenti yakho ye-VPN futhi uzobona izilawuli ezimbili ezinesimo esihlukile ezivame ukugqoka ilebula elilodwa. Esinye sicela ukuthi ubhale izindawo okufanele zingene ku-tunnel, futhi konke okunye kuqhubeka sisebenzisa inethiwekhi yasendaweni. Esinye sithatha ngokuthi konke kudlula ku-tunnel bese sibuza ukuthi yini okufanele isikwe ibuyiselwe emuva. Zombili zinikeza i-tunnel esebenzayo ekuhlolweni kokuqala futhi zombili zigcinwa ngokwengeza imigqa ohlwini, yingakho umehluko uhlala ungabonakali kuze kube yilapho othile efaka okuthile okusha.
Lokhu ukukhetha okuzenzakalelayo, hhayi isici. Kunqume ngaphambi kokuba uhlu lube nezinto ezingamashumi amabili.
Funda okuzenzakalelayo kuklayenti, hhayi ebhukwini lokukhangisa
I-WireGuard yenza lesi sinqumo sibonakale ngendlela engavamile, ngoba i-AllowedIPs iwuhlu lokufaka futhi akukho okunye. I-peer ene-0.0.0.0/0, ::/0 ifaka konke ku-tunnel, kanti i-peer ene-10.20.0.0/16 ifaka leyo nethiwekhi kuphela. Asikho isakhiwo sokukhipha, ngakho uma ufuna ukushiya isubneti eyodwa ngaphandle, kufanele ubale zonke ezinye iziqalo noma wengeze ukuhlelwa kwemizila kwenqubomgomo ngaphandle kwesixhumi.
OpenVPN ifinyelela endaweni efanayo isuka kolunye uhlangothi: i-redirect-gateway def1 ibeka i-tunnel ephelele, kanti iziqondiso eziqondile ze-route zengeza noma zibhale kabusha iziqalo ezithile. Amaklayenti ezentengiselwano avame ukufihla kokubili ngemuva kwebhokisi lokumaka nethebula lezindawo, ngakho funda ukuthi iyiphi ithebula eliyilungisayo ngempela ngaphambi kokuthemba ilebula.
Umbuzo okufanele ubuzwe awuwona igama lebhokisi lokumaka. Umbuzo ukuthi kwenzekani ngephakethe indawo yalo engekho kuhlu lulodwa. Phendula lokho ngokubhala futhi okusele kokuhlelwa kuzolandela lapho. Uma weqa lo mbuzo, ukwehluleka kokuqala okungachazwanga kuzonqunywa yilowo oseduze kakhulu neklayenti ngalolo suku.
Landela uhlelo lokusebenza okungekho muntu olufakile ohlwini
Kumklamo wokufaka kuphela, lolo hlelo lokusebenza luphuma ngqo, kunethiwekhi yasendaweni nge-DNS yasendaweni. Kumklamo wokukhipha kuphela, ludlula ku-tunnel ngokuvumela kweseva, futhi yilapho ngokuvamile kukhona umehluko phakathi kwethuluzi elisha le-SaaS elisebenza ngosuku lokuqala nethikithi elithi i-VPN ililimazile.
Akukho okuzenzakalelayo okuvikelekile ngokwako. Ukufaka kuphela kunciphisa lokho i-tunnel ekuthwelayo futhi kwenza inethiwekhi yasendaweni ibe indlela enokuphikiswa okuncane, kanti ukukhipha kuphela kuthatha i-tunnel njengendlela evamile futhi kuphatha okuhlukile njengokuhlukile, okusondele ku-lokho izinqubomgomo eziningi zezinkampani ezikuhlosile ngempela.
| Question | Include-only | Exclude-only |
|---|---|---|
| Unlisted new app | goes direct | goes through the tunnel |
| A site that breaks over the VPN | add it to the list | carve it out |
| Internal names still resolve | only if routed and served | usually, until split DNS says otherwise |
| Upkeep | one entry per internal service | one entry per misbehaving public service |
Qaphela ukuthi inkundla ibhala ohlwini luphi uhlobo lwezinto
I-VpnService.Builder ye-Android iveza uhlu lwezinhlelo ezivunyelwe kanye nohlu lwezinhlelo ezinqatshelwe njengamadizayini amabili ahlukene, futhi imithetho yohlelo ngalunye ikhetha ngephakethe hhayi ngendawo. Isiphequluli esifakwe ohlwini olunjalo sithwala yonke indawo esiyivulayo, lokho kuyizinga elihlukile kunethebula lemizila futhi asikwazi ukulungisa isayithi elilodwa elonakele ngaphakathi kohlelo olusebenzayo.
Amaklayenti edeskithophu avame ukuhlanganisa izinhlobo zombili kusixhumi esisodwa, ngakho hlola ukuthi umugqa oyengezayo uyiphakethe, igama lomsingathi noma isiqalo. Zihluleka ngezindlela ezahlukene futhi zixazululwa ezindaweni ezahlukene. Umugqa wegama lomsingathi uvame ukuba umzila negama, kanti umugqa wephakethe uba isinqumo senqubomgomo ngaphakathi kuklayenti. Bhala ukuthi wengeze okukuphi, ngoba ozolungisa kamuva uzocabanga okunye.
Hlola isimo sokwehluleka, hhayi indlela ebushelelezi kuphela
Uhlelo olukhishiwe ku-tunnel alutholi ukufinyelela okuqondile okuhlanzekile ngokuzenzakalela. Uma iklayenti liphinda lisebenzise umthetho wokuvimba ngaphandle kwe-VPN, ithrafikhi ekhishiwe ingase ilahliwe ngokuphelele, futhi lokho kubonakala njengohlelo olwonakele hhayi njengesinqumo somzila. Hlola leso simo ngamabomu esikhundleni sokuthola ngombiko womsebenzisi.
Bese uhlola i-DNS ne-IPv6 njengezinto ezihlukene. I-tunnel ethwala i-IPv4 kuphela ishiyela uhlelo olunamandla e-v6 indlela yokuzungeza, futhi i-split DNS inquma ukuthi amagama angaphakathi ayaxazululwa yini kuthrafikhi engadluli neze ku-tunnel. Gijimisa uhlelo olusohlwini, uhlelo olungekho ohlwini, ukusesha kwegama okukodwa nokuxhuma kabusha okukodwa, bese ugcina imiphumela kanye nokuhlelwa.
Bhala okuzenzakalelayo lapho umuntu olandelayo ezokuthola khona
Bhala phansi okuzenzakalelayo okukhethiwe, okuhlukile kanye nomnikazi wakho endaweni efanayo nephrofayili yeklayenti, ngoba umlawuli olandelayo uzofaka okuthile ngaphandle kokufunda lesi sizathu. Bhala usuku nesizathu salokho okuhlukile ngakunye, ukuze okuhlukile okuphelelwe yisikhathi kwesayithi eselilungisiwe kukhishwe ngokuzethemba. Uhlu olungenasizathu lukhula ngokungapheli.
Lapho othile ebika indawo eyodwa eyonakele, shintsha okuhlukile hhayi isisekelo. Ukuphendula okuzenzakalelayo ukuze kulungiswe isayithi elilodwa kuhambisa ngokuthula zonke izinhlelo ezingekho ohlwini ziyise kolunye uhlangothi lwe-tunnel.