Iswishi yokunqamula ye-VPN sidecar: vimba ithrafikhi uma iphuma

Ikhontheyna yohlelo eyabelana ngesikhala samagama senethiwekhi sekhontheyna ye-VPN ayinayo i-interface yayo, ngakho kulula ukucabanga ukuthi ayikwazi ukuthumela lutho uma umhubhe wehluleka. Leso sizathu asilungile endleleni yokwehluleka ebalulekile. Uma inqubo ye-VPN ifa ngesikhathi isikhala samagama sisaphila, uhlelo lugcina amasokhethi alo futhi isikhala samagama sigcina imizila yaso, futhi ithrafikhi iyaqhubeka endleleni esafakiwe. Iswishi yokunqamula yangempela iyinqubomgomo ecacile yokuhlunga kanye nokuhlolwa komjikelezo wokuphila we-runtime, hhayi ukuncika kokuqala.

Kungani ukwabelana ngesikhala samagama kungeyona iswishi yokunqamula

Ukwabelana ngesikhala samagama kusho ukuthi uhlelo lusebenzisa ama-interface, amakheli kanye nethebula yemizila yekhontheyna ye-VPN. Kususa indlela ezimele yohlelo eya kunethiwekhi ngesikhathi isikhala samagama esabelwana sisaphelele, futhi akusho lutho mayelana nalokho isikhala samagama esizokwenza uma umhubhe unyamalala.

Imibandela yokuncika ye-Compose ingabambezela ukuqala kohlelo kuze kube yilapho ukuncika kunempilo. Lokho kuhlanganisa umzuzu owodwa wesikhathi futhi akukho kwehluleka kwakamuva, ngakho lokho kuyithuluzi lokuhlela ukuqala hhayi i-firewall ephumayo eqhubekayo.

Kwenzekani ngempela uma ikhontheyna iphuma

Hlukanisa izehlakalo ezintathu. Inqubo ye-VPN ngaphakathi kwekhontheyna ingafa ngesikhathi ikhontheyna isaqhubeka nokusebenza. Ikhontheyna ingama noma isuswe, lokho okubhubhisa isikhala samagama. Ikhontheyna ingenziwa kabusha, lokho okwakha isikhala esisha samagama kanye nemithetho emisha.

Esimeni sokuqala isikhala samagama sihlala, umzila ozenzakalelayo usengakhomba ku-interface yomzimba, futhi uhlelo luqhubeka nokuthumela ngqo. Esimeni sesibili uhlelo oluncikile ngokuvamile lulahlekelwa wukuxhumana ngokuphelele, ngoba isikhala saso samagama sinyamalele. Esimeni sesithathu uhlelo lungaxhumana kabusha nesikhala esisha samagama ngaphambi kokuba umhubhe ulungele. Isimo ngasinye sidinga ukuhlolwa okuhlukile, futhi umklamo ohlanganisa kuphela ukunqanyulwa okuhlelekile uhlanganisa okungathakazelisi kakhulu.

Yakha inqubomgomo ecacile yokuphuma

Bhala inqubomgomo ngaphakathi kwesikhala samagama esabiwe ukuze isebenze kumaphakethe ohlelo. Isimo ukulahla okuzenzakalelayo ngaphandle kwezimvume ezincane: loopback, i-interface yomhubhe, kanye nekheli nechweba elithile lendawo yokugcina edingwa ukuthutha komhubhe.

Ukukhishwa kwendawo yokugcina kufanele kube khona ngaphambi kokuba umhubhe ukhuphuke, kungenjalo iklayenti ye-VPN ayikwazi ukufinyelela iseva yayo. Yingakho isethi yemithetho ivumela ngokusobala ukuthutha kwangaphandle esikhundleni sokuvumela i-interface yomzimba ngokujwayelekile. Engeza futhi imithetho ye-IPv6 uma isikhala samagama sinokuxhumana kwe-IPv6, ngoba inqubomgomo ye-IPv4 kuphela ishiya omunye umndeni uvulekile.

I-DNS nayo iyingxenye yenqubomgomo. Uma uhlelo luxazulula amagama ngesixazululi esifinyeleleka kuphela ngaphakathi komhubhe, umthetho wokulahla uzophula ukuxazulula uma umhubhe uphansi, futhi lokho kuyindlela elungile yokuziphatha kwiswishi yokunqamula. Nquma ngamabomu ukuthi yilokho oyikho yini.

Hlola umjikelezo wokuphila, hhayi ukunqanyulwa kuphela

Thumela isicelo esisha esingenabungozi ngesikhathi umhubhe unempilo, bese ubulala inqubo ye-VPN futhi uthumele esinye. Phinda ngemva kokuma kwekhontheyna, ngemva kokuqala kabusha nangemva kokwenziwa kabusha. Isicelo esisha sibalulekile ngoba ukuxhumana okukhona kungase kusinde ekushintsheni kwemithetho okuvimba emisha.

Unganciki ekuhloleni kwempilo noma ekufuneni i-IP yokuphuma njengendlela yokuvimba. Ukuhlola kubheka isimo futhi kubike ngaso; inqubomgomo ilawula ithrafikhi. Kokubili kungokwengxenye yokusetshenziswa okukodwa, futhi akuthathi indawo yomunye nomunye.

Rekhoda imithetho ukuze ukuhlolwa kusinde ekubuyekezweni

Bhala umphumela olindelekile wesimo ngasinye sokwehluleka embhalweni wokusetshenziswa, kanye nemithetho ewusebenzisayo. Lowo mbhalo uvumela ukuhlolwa okufanayo ukuthi kuqhutshwe ngemva kokubuyekezwa kwesithombe noma ukuthuthukiswa kwe-runtime, lapho ukuziphatha kwesikhala samagama noma imizila ozenzakalelayo kungashintsha khona ngaphandle kokuthi othile ahlele ifayela le-compose.

Gcina indlela yangaphandle edingekayo yendawo yokugcina ye-VPN ihlukile ekuphumeni kohlelo okungenamkhawulo, futhi gcina i-DNS ne-IPv6 ngaphakathi kwendlela ehlosiwe. Uma inqubomgomo ivumela i-interface yonke yomzimba ukuze kube lula, iswishi yokunqamula ayisekho. Imibhalo yenethiwekhi ye-Docker ichaza ukuhlelwa kwesikhala samagama esabiwe okusekelwe kukho inqubomgomo, futhi yiyo eyisethenjiswa okufanele ihlolwe uma ukuziphatha kwe-runtime kungabazeka.