iPhone Always On VPN: amathumbu amabili angabelana nge-virtual IP eyodwa

Ku-iPhone egadiwe enephrofayela ye-Always On ephethwe, ifoni igcina ithumbu ku-interface ngayinye ye-IP esebenzayo, ngakho iselula ne-Wi-Fi ngakunye kuthola eyakho. Kube sekuva iseva ibala izinhlangano ezimbili zokuphepha ze-IKE zedivayisi eyodwa, ngokuvamile zabelana ngekheli elilodwa le-virtual, futhi umfutho wokuqala uwukukubiza ngokuthi umjikelezo we-rekey bese uqala ukushintsha izikhathi. Lowo mfutho ngokuvamile awulungile. Landela izinyathelo ezingezansi ngokulandelana okubonakala ngakho ubufakazi kuseva, futhi ushiye izilungiselelo zefoni kuze kube yilapho iseva ikutshela ukuthi yiliphi icala onalo.

Qala ngemigqa emibili iseva esenayo kakade

Bala izinhlangano nge-swanctl --list-sas futhi ufunde izinkambu ezine kuzo zombili izingeno: ikheli elikude, ubunikazi obuqinisekisiwe, i-IP ye-virtual eyabelwe kanye nesikhathi sokudalwa. Amakheli amabili angaphandle ahlukene anobunikazi obubodwa ne-IP eyodwa ye-virtual yiwona mumo owaqala lo mbuzo, futhi kufanelekile ukuwubhala phansi ngaphambi kwanoma yiluphi ushintsho. Bese uhlola izinhlangano zezingane ezixhunywe kwenye ngayinye, ngoba izikhethi zethrafikhi zinquma ukuthi ukusesha kwendawo kungake kuhlukanise amathumbu amabili yini. Ipheya elivela futhi linyamalale phakathi namasekhondi liyisilwane esihlukile kunepheya lapho kokubili kuphila khona amahora.

Ngaphambi kokufinyelela esiphethweni, hlela uhlu ngokwesikhathi sokudalwa. Ukusondelana kokukhishwayo akusho lutho, futhi uhlu olusesimweni sethebula lumema kulelo phutha.

Nquma ukuthi yikuphi ukugqagqana okubukayo

I-rekey ye-IKEv2 nokuqinisekisa kabusha kwe-make-before-break kwakha ngamabomu ukugqagqana okufushane, ngokusungula inhlangano entsha ngaphambi kokususa endala. Izimpawu zesikhathi zinquma icala, ngoba i-SA endala enyamalalayo isekhondi elilodwa noma amabili ngemva kokuvela kwentsha iwukuvuselelwa okwenza umsebenzi wayo. Amathumbu e-interface azimele awakaze abe njalo, ngoba ngalinye lihlala ngesikhathi i-interface yalo iphila, futhi ukususwa kwelinye akusuki ekwakhiweni kwelinye.

Ukwenza kwe-Always On okuphethwe i-Apple kungokwe-interface ngayinye, yingakho idivayisi egadiwe ingabonakala ibambezeleke ngokufanelekile kunephrofayela elungiselelwe ngesandla. Isishintshi sokuxhuma okuzenzakalelayo sohlelo lomhlinzeki asisho okufanayo, futhi nomthetho ojwayelekile we-on-demand awusho. Umbiko jikelele wokusatshalaliswa kwe-Apple uchaza imodeli ye-interface ngayinye; qhathanisa imigqa yakho emibili nawo ngaphambi kokucabanga umjikelezo. Zombili izimo zidonsa epulini elifanayo leseva, ngakho ukugqagqana kuwuphawu lwakho lokuqala kuphela.

Bona ukuthi kungani ikheli elilodwa le-virtual lamathumbu amabili liphula izimpendulo

Impendulo eya efonini ikhonjiswa ekhelini langaphakathi, futhi i-kernel ikhetha ithumbu lokuphuma ngokwendawo kanye nenqubomgomo, hhayi nge-interface efoni eyisebenzisile. Izinhlangano ezimbili zesikhathi esisodwa ezigcina i-IP efanayo ye-virtual nemigomo ehambisanayo zishiya isinqumo somzila ngaphandle kwendlela yokusho ukuthi impendulo ingeyesiphi isikhathi. Ezinye izimpendulo zithatha ithumbu elingalungile, futhi ifoni ibonisa uxhumano olusebenza ohlangothini olulodwa noma olufa lapho i-Wi-Fi inyuka. Imiphumela emibili yemiyalo iqinisekisa isimo: i-swanctl --list-sas ikhombisa i-IP efanayo ye-virtual kuwo womabili ama-SA, futhi i-ip xfrm policy ikhombisa izikhethi ezimbili ezifanayo.

Yilelo pheya lemiphumela olinamathisela kurekhodi loshintsho. Alikho elilodwa elikholisayo lilele lodwa, ngoba ngalinye lingabonakala linengqondo ngokwahlukana.

Lokhu ukukhonjiswa kwekhodi kanye nenqubomgomo ohlangothini lweseva, hhayi ukuziphatha okungalungile kwefoni, futhi asikho isilungiselelo sekhasimende esihlukanisa amakheli amabili angaphakathi afanayo. Ipuli linikeza inani elifanayo kabili futhi isifaki senqubomgomo layemukela. Funda umphumela ohlangothini lweseva ngaphambi kokusola ikhasimende.

Shintsha ipuli noma imodeli yokwenzeka kanyekanye, hhayi isikhathi se-rekey

Kukho ukulungiselelwa kwe-swanctl, ukuhluka kuwumgomo osobala kuxhumano: i-unique = replace isusa uxhumano oludala lapho olusha lusungulwa, futhi i-unique = keep iyala umuntu osanda kufika. Womabili amanani asebenza lapho kuhlelwa uxhumano, hhayi kuma-SA ezingane angaphakathi kulo.

connections {
  ios-alwayson {
    unique = replace
  }
}

Alikho inani elingathathi hlangothi kukhasimende nge-interface ngayinye. I-keep ibuyisela isikrini sesimo esihlanzekile ngokwala ithumbu lesibili futhi iphula umklamo ophethwe, kanti i-replace idiliza ithumbu elidala futhi iwukuvumelana okufanayo ohlangothini olunye. Uma amathumbu womabili edingeka ngempela, ingemuva lepuli kufanele likhiphe izivumelwano ezihlukene zobunikazi obubodwa, futhi ukhiye wokuvumelana kufanele uhlukanise izicelo. Ithebula elimile lobunikazi-kuya-kukheli lizobuyisela ngokukhululeka ikheli elifanayo kabili futhi lizokhiqiza kabusha inkinga yokuqala ngokulungiselelwa okwengeziwe. Hlola ukuthi ingemuva likhiya kanjani izivumelwano ngaphambi kokwengeza imephu yesibili emile.

Hlola ukushintsha okukusabalalisa ngempela

Phuma endaweni ye-Wi-Fi unesikhathi esisebenzayo, bese ubuya, futhi uhlole ukuthi izimpendulo zifika kuzo zombili izinhlangothi. Kwenze kabili, ngoba ukushintsha kwesibili yikhona lapho inqubomgomo endala ivame ukuvela khona. Hlola ngensiza ephendula kuxhumano oluvulile, futhi uphindise ukuphuma ngesikhathi ithumbu lithwala ithrafikhi kunokuhlala lingenzi lutho. Ifoni ekwazi ukuthumela kodwa engakwazi ukwamukela ibonakala iphilile kurekhodi le-handshake futhi iphukile kusiphequluli.

Isikrini sesimo esincishiselwe emugqeni owodwa akusona ubufakazi bomklamo osebenzayo, kuwubufakazi nje bokuthi ithumbu elilodwa lihambile. Zombili izinhlangothi kufanele zisebenze ngaphambi kokuba ukushintsha kudlule. Bhala phansi okubonile, kanye nemiphumela emibili yokuhlolwa kokugqagqana, ukuze unjiniyela olandelayo aqhathanise esikhundleni sokuphinda uhambo.