Amaphakethe angaphakathi nangaphandle ekubanjweni kwe-VPN: kungani usayizi wehluka

Ubamba amaphakethe angamabhayithi angu-1400 kusikhombisi somhubhe, bese uphinda ubambe kusikhombisi esibonakalayo, futhi izinombolo ziyala ukuvumelana. Amakheli ahlukile, osayizi bahlukile, futhi ifayela lesibili libukeka njengengxoxo ehlukile. Akukho okonakele. Amaphakethe amabili ahlukene ahleli ezigabeni ezimbili ezihlukene, futhi igebe phakathi kwawo yilokho umhubhe okwenzayo ekuhambeni kwakho. Funda zombili izimo ngaphambi kokusola i-MTU.

Izimo ezimbili, kanye nephakethe eliboniswa yilolo nalolo

Ukubamba okwenziwe kusikhombisi somhubhe kubonisa iphakethe langaphakathi: umthwalo wohlelo lokusebenza ophethe umthombo nendawo yokuyisa yasekuqaleni, ngaphambi kokuthi kusetshenziswe nakuphi ukunakekela. Ukubamba kusikhombisi esibonakalayo kubonisa iphakethe langaphandle: isihloko se-IP, isihloko sokuhamba, ukufakwa, bese kuba iphakethe langaphakathi elibethelwe njengomthwalo. Ingxoxo efanayo, izinto ezihlukile. Uma ususishilo ukuthi yikuphi okuqukethwe yifayela, ukungavumelani akuyikuba yimfihlakalo.

Umehluko wosayizi ungumthwalo owengeziwe, kanti umehluko wamakheli uwukuklanywa. Kuhlanekile, ukudideka kuba yinto eqagelayo: abantu baqhathanisa iphakethe langaphakathi lamabhayithi angu-1400 nephakethe langaphandle lamabhayithi angu-1450, banqume ukuthi kukhona okungalungile, bese beqala ukushintsha izilungiselelo ze-MTU ezazingekho neze ecaleni. Bhala ifayela ngesikhombisi nangezinga, ngoba lelo lebuli yinto yokuqala umfundi ayidingayo nento yokuqala abantu abayishiyayo.

Nquma ingxenye ngaphambi kokuba uqale ukubamba

Nquma ukuthi yisiphi isigaba esizophendula umbuzo wakho ngaphambi kokuba iphakethe lokuqala libhalwe. Umbuzo we-MTU ngokuvamile udinga ukubuka kwangaphandle, ngoba yilapho izihloko zinqwabelana khona nalapho umkhawulo wendlela ubonakala khona. Umbuzo wohlelo lokusebenza ngokuvamile udinga ukubuka kwangaphakathi, ngoba yilapho umthwalo okhathazayo usekhona khona. Ukubamba kokubili ngaphandle kwecebo kuveza amafayela amabili futhi kungavezi siphetho.

Sebenzisa ucwaningo olungenabungozi, olugunyaziwe futhi uhlunge ngomthombo, indawo yokuyisa nesikhathi okhathazayo. Funda izinketho zesikhombisi nesihlungi sethuluzi lokubamba ngaphambi kokuqoqa, ngoba imininingwane ejwayelekile ivamile ukwanele futhi kulula ukuyabelana ngayo kunokumthwalo. Thatha ukubamba kwangaphakathi njengokubucayi ngokuzenzakalela, ngoba kuphethe idatha yohlelo lokusebenza engabethelwanga eba ivikelwe phambili emhubheni.

Umehluko wosayizi uqukethe ini ngempela

Iphakethe langaphandle liphethe izihloko ezengeziwe nezinto zokuvikela, futhi ukuthi liphethe malini kuncike kuphrothokholi nasezinkethweni zayo. Ukuhlukanisa, ukuhlanganisa noma ukuhlela kabusha endleleni kungaphula ubudlelwano obubonakala bungowomunye-kuyedwa phakathi kwephakethe langaphakathi namaphakethe angaphandle alithwalayo, ngakho ukuqhathanisa usayizi ngosayizi akuhlali kutholakala. Uma kusolwa iphutha le-MTU, bheka impendulo yosayizi nendawo lapho ukuhamba kuma khona, bese uqhathanisa lokho nalokho okushiwo uhlelo lokusebenza. Iphethini yokuthumela kabusha engenampendulo iyisiginali ehlukile kune phutha le-ICMP eliphethe usayizi wesinyathelo esilandelayo.

Iphakethe elilodwa eliphuma kumsingathi alifakazeli lutho ngokuthi ingxenye ekude ilitholile yini. Uma ukubamba kwakho kuphela kusikhombisi sakho, ukhombisile ukuthi i-kernel ikhiphe okuthile, okuwubufakazi obubuthakathaka kakhulu mayelana nendlela. Hlanganisa ukubamba nomphawu ophindwayo: indawo yokuyisa efanayo, umsebenzi ofanayo, usayizi ofanayo, kubaleke kabili kushintshwe into eyodwa.

Ukufunda ukudluliselwa eminye imisebenzi kuzinombolo

Ukuhlukaniswa ohlangothini lomsingathi nokunye ukudluliselwa kwemisebenzi kunezela ukuhlanekezela kwesibili, futhi yikho okwenza ukubamba kwasendaweni kungavumelani nocingo. Ukubamba kwasendaweni kungabonisa amabhafa adidaniswa i-adaptha kamuva, ngakho amafremu asocingweni mancane futhi maningi kunalokho okushiwo yifayela. Yingakho ibhafa elikhulu efayelini lokubamba lingafakazeli ukuthi ifremu enkulu kakhulu yeqa zonke izixhumanisi. Uma osayizi babalulekile esiphethweni sakho, bhala lapho ukubamba kuthathwe khona nokuthi ukudluliselwa kwemisebenzi kwakusebenza yini kuleso sikhombisi.

Uma kungenjalo, uthola ukunethezeka komsingathi esikhundleni sokuziphatha kwendlela. Amafayela amabili abhalwe isikhombisi sawo nesimo sokudluliselwa kwemisebenzi axazulula iningi lalezi zimpikiswano ngomzuzu.

Lapho ukubamba kuyeka ukuba ubufakazi

Ukubona amaphakethe angaphandle abethelwe kukhombisa ukuthi umkhawulo wokuvikela ukhona ngaphansi kwalezi zimo zokuhlola, futhi akusho lutho ngezinye izinhlelo zokusebenza kudivayisi, ukuphatha komqhubi, noma isimo se-endpoint ngokwayo. Ukubona umbhalo ocacile ngaphakathi komhubhe nakho akusho ukuthi umhubhe wonakele; kusho ukuthi ubambe ngaphezulu kwendawo yokubethela, okuyindawo efanele ukubhekwa. Ukubamba ubufakazi ngendawo, hhayi isinqumo ngesistimu, futhi ithikithi kufanele liyichaze kanjalo. Gcina umusho wobubanzi embikweni, ngoba yiwo ovimbela ukubonwa okukodwa ekubeni yisimangalo sokucwaninga.

Qamba ifayela ngalinye ngesikhombisi, isihlungi nesigxivizo sesikhathi, bese ulisusa lapho uphenya luphela. incwadi ye-tcpdump ichaza amafulegi esikhombisi nesihlungi asetshenziswe lapha, kuhlanganise nalawo agcina ukubamba kuncane.

Uma kufanele wabelane ngobufakazi, abelana ngosayizi, izigxivizo zesikhathi namafulegi esikhundleni somthwalo. Umbuzo wawungosayizi wephakethe, futhi impendulo ayivamisile ukudinga idatha yomunye umuntu.