Gcina amathumbu amaningi e-vpnc ekhona ngokuhlola kwephrofayela ngayinye

Iphrofayela eyodwa ye-vpnc ixhuma kabusha ngokuhlanzekile ngemva kokuzulazula; ezintathu zazo ziyashintshana ngokwephula amasokhethi, imizila kanye nesimo sesixazululi somunye nomunye. Isikripthi sokuxhuma kabusha esiza nephakethe sibhalelwe umhubhe owodwa, ngakho siqala kabusha iphrofayela ngayinye noma nini lapho eyodwa yazo iphansi. Ukulungisa lokho kudinga izinto ezintathu: amachweba endawo ahlukene, ukuhlola okuhlola isevisi yangempela kwiphrofayela ngayinye, kanye neketanga elilodwa elihleliwe elingalokothi liqalise ukuxhumana okubili ngesikhathi esisodwa.

Nika iphrofayela ngayinye ichweba layo lendawo

Iphrofayela ye-vpnc eshiywe echwebeni lendawo elizenzakalelayo iqhudelana nephrofayela esivele isebenza. Ukuxhumana kwesibili kuyahluleka ngenkathi okokuqala kubambe ichweba, futhi umugqa welogi ubonakala njengenkinga yesango hhayi ukungqubuzana kwendawo. Esikhundleni salokho beka umugqa owodwa ngefayela ngalinye lephrofayela:

Local Port 0

Uziro uvumela ingqikithi ukuthi ikhethe ichweba lesikhashana, ngakho amaphrofayela amabili angasungulwa ngesikhathi esisodwa. Qamba ifayela ngalinye ngokwesango neqembu elilisebenzelayo, ligcine lifundeka kuphela ngu-root, futhi hlala uxhuma nephrofayela efanele esikhundleni sokwehlukaniswa okusebenza njengezinga. Ifayela lezinga elabiwe liyindlela isikripthi esixhuma kabusha umhubhe ongafanele ngemva kokuba othile eshintshe igama lephrofayela.

Amafayela ephrofayela aphethe ubufakazi bokungena, ngakho izimvume ziyingxenye yokuklama hhayi umsebenzi wasekhaya. Ifayela elifundeka yiwo wonke umuntu ngaphansi kwe-/etc/vpnc linikeza imfihlo yeqembu kumsebenzisi ngamunye wendawo. Gcina imodi ku-0600 nge-root njengomnikazi, futhi vumela izikripthi ukuthi lifunde ifayela njengo-root esikhundleni sokukopisha izimfihlo kuma-agumenti. Yikho futhi isikripthi sokuhlola okufanele singalokothi sibhale okuqukethwe kwefayela kulogi.

Hlola isevisi eyodwa kwiphrofayela ngayinye, hhayi ikheli lomhubhe

Isicelo se-echo esiya ekhelini lomhubhe ngokwawo sikhombisa ikakhulukazi ukuthi isixhumi-simo sikhona. Asisho lutho mayelana nokuthi umsingathi ongemuva waso usafinyelela yini uhlelo lokusebenza olwenza umhubhe ube nesiqondiso. Isixhumi-simo singaba phezulu ngenkathi umzila ongalena kwesinye usuvele ungekho.

Hlola isevisi eyodwa kwiphrofayela ngayinye ngesikhathi esifushane se-TCP futhi uxhume kabusha kuphela iphrofayela okuhlolwa kwayo kuhlulekile. Imizuzwana emibili ihlukanisa indlela efile kweyehla ngokushesha, futhi ukuhlola kwe-TCP akuncikile ekutheni i-ICMP ivunyelwe ndawana thizeni endleleni. Shintsha kuphela umgomo negama lokumiswa phakathi kwamaphrofayela:

#!/bin/bash
set -eu
if ! nc -z -w 2 10.63.7.20 8443; then
  /usr/sbin/vpnc-connect ops.conf
fi

Gcina lokho njenge-/usr/local/bin/ensure-vpn-ops.sh, kwenze kusebenziseke, futhi uphindaphinde kwiphrofayela ngayinye ushintsha kuphela umgomo wokuhlola negama lokumiswa. Ukuhlola okuphendula umbuzo weprothokholi kuyasinda kumageyithi alahla i-echo kodwa aqhubeka edlulisela izevisi ezinakekelwa abasebenzisi.

Xhumanisa ukuhlola kube iketanga ukuze kungalokothi kuncintisane

Isikripthi sokuxhuma kabusha esiza nephakethe singabiza ukuhlola kwakho ngokulandelana, futhi ukulandelana kuyiyo yonke into. Izingcingo ezimbili ze-vpnc-connect ezisebenza kanyekanye zibhala kabusha ithebula lomzila ngokulandelana okungekho muntu okulawulayo, futhi yiyo indlela iphrofayela enempilo elahlekelwa ngayo umzila wayo.

Gcina izingcingo ziphambili, engeza ukubambezeleka kokuzinza kwesixhumi-simo esingaphansi, futhi uhlele iketanga kusukela kuthebula le-cron lika-root, ngoba ngu-root kuphela ongabhalela phansi imizila yomhubhe:

#!/bin/bash
sleep 20
/usr/local/bin/ensure-vpn-ops.sh
/usr/local/bin/ensure-vpn-lab.sh

Gcina ukulandelana kufana phakathi kwesikripthi sokuqalisa nokufakwa kwe-cron, ngoba iketanga elisebenza ngokulandelana okuhlukile ngesikhathi sokuqalisa empeleni iwuhlelo olunye. Uma iphrofayela eyodwa incike emizileni yomunye, beka ukuncika phambili futhi uvumele ukuhlola kwakamuva kuhluleke ngokungenabungozi ngenkathi umhubhe wangaphambilini usakhuphuka.

Bukela ilogi, bese wephula eyodwa ngamabomu

Bhala umugqa owodwa ngokugijima ngakunye ngephrofayela, umgomo wokuhlola, umphumela kanye nesenzo esithathiwe. Ngaphandle kwalokho, umhubhe odlikizayo njalo ngomzuzu ubonakala ufana ncamashi nalowo ongakaze wehle, futhi iphutha lokuhlola alikwazi ukwehlukaniswa nokuphazamiseka kwesango. Ilogi futhi ifakazela ukuthi iketanga lathinta kuphela iphrofayela ehlulekile. Libhale endaweni eliphila ngayo ngemva kokuqalisa kabusha, kungenjalo ubufakazi buhamba nokusebenza.

Bese wephula umhubhe ngamabomu futhi ubuke okwenzekayo. Misa iphrofayela eyodwa futhi uqinisekise ukuthi yimiphi imisebenzi nemizila esekhona:

pgrep -a vpnc
ip -4 route show | grep -E '10[.]63|10[.]90'
tail -n 5 /var/log/ensure-vpn.log

Kuphela iphrofayela emisiwe okufanele ixhunywe kabusha, futhi ezinye izikhathi kufanele zigcine zombili imisebenzi yazo nemizila yazo. Uma amaphrofayela amabili eqala kabusha, iketanga lakho lisebenza ngokulingana endaweni obungalindelanga.

Lokho umqaphi okungamelwe akwenze

Umqaphi oqala kabusha konke noma nini lapho kukhona okuhlulekayo ubonakala enempilo phakathi nokuhlolwa futhi ubangela ukuphazamiseka esikhaleni sesondlo. Qala kabusha ngephrofayela ngayinye, hhayi ngokwembulunga yonke.

Khetha iklayenti elinakekelwayo uma isango linikeza elilodwa leprothokholi efanayo, futhi ungalokothi ufake iphasiwedi ngqo kusikripthi noma uyidlulise kumugqa womyalo, ngoba ifayela lephrofayela selivele liphethe imfihlo. Uma umsebenzi kufanele usebenze njengomsebenzisi ojwayelekile ngemva kokuba umhubhe ukhuphukile, yehlisa amalungelo ngaphakathi kwesikripthi esikhundleni sokuqalisa iketanga lonke ngaphansi kwalowo akhawunti. Ekugcineni, funda kabusha imizila ngemva kokuxhuma kabusha, ngoba iphrofayela ingabuya nekheli elihlukile elinikeziwe futhi ishiye umzila wakudala okungekho kuhlola oluqondiswe ekhelini lomhubhe oluyoke lukubone.