Ukulandelana kokucisha izinsizakalo ze-VPN ne-proxy ku-Linux

Ukuminyana lapho kucishwa ngenkathi i-proxy isebenza akuvamisile ukuba yiphutha le-VPN, ngisho nalapho i-VPN iyinto yokugcina ebonakala esibukweni. Izinhlelo ezingemuva kwe-proxy zisalinde indlela esezizothi shabalale, futhi iyunithi engumnikazi womhubhe ayikacelwanga ukuba iwuvale. Lokho okubonakala njengensizakalo enensayo ngokuvamile inkinga yokulandelana. Ukuhlela ukulandelana kuxazulula eziningi zalezi kunanoma yikuphi ukuguqulwa kwesikhathi sokulinda.

Hamba uye ngaphandle ngokulandelana okuphambene: abasebenzisi kuqala, bese kuba yi-proxy, bese kuba umhubhe — ngayinye imiswa ingxenye eyayiqale.

Bhala uhlu lwamayunithi ngaphambi kokumisa noma yini

Bhala phansi iyunithi yohlelo, iyunithi ye-proxy kanye nomnikazi we-VPN abahilelekile ekusebenzeni okuvamile. Faka noma yisiphi isixazululi noma ingxenye yosizo enokuvalwa kwayo, ngoba yizo eziyekelwa ukukhunjulwa ngehora lesibili ebusuku. Ngaphandle kwalolo hlu, umyalo wokuqala wokumisa owubhalayo uzokhetha isisulu ngokungahleliwe.

Amagama awubufakazi obuqinile. I-proxy yomsebenzisi, i-proxy yesistimu nomhubhe we-akhawunti enye kungaba negama elifanayo kodwa imijikelezo yokuphila ehluke ngokuphelele.

Qedela umsebenzi, bese umisa umsebenzisi

Ukumisa okuhleliwe kuqala ngohlelo: luyeke luqedele noma lukhansele izicelo zalo, bese umisa i-proxy ngeyunithi yensizakalo yayo. Uma uhlelo kufanele luqhubeke lusebenza ngemva kokunyamalala komhubhe, kuhlele lokho ngamabomu esikhundleni sokulushiya luxhunywe endleleni esezizothi shabalale.

Izicelo ebezisendleleni ngesikhathi sokumisa ziyingxenye yerekhodi, ngoba yilapho kuvela khona isivunguvungu semizamo emisha ekubuyeni okulandelayo.

I-ExecStop ne-ExecStopPost amathuluzi ahlukene

ExecStop= — lokho inqubo yokumisa evumelanayo; ExecStopPost= — lokho ukuhlanza okusebenza ngisho ngemva kokuqalwa okuhlulekile. Umyalo wokumisa othumela kuphela isignali enkambisweni bese ubuya uvumela i-systemd ukuthi iqhubeke ngenkathi umsebenzisi esakhipha idatha. Konke okufanele kwenzeke noma ngabe yini kungokwahluka kwangemva, futhi konke okufanele kuvimbe ukumisa kungokwakho evumelanayo. Hlola iyunithi esebenzayo namafayela ayo e-drop-in esikhundleni sokuhlela ifayela lephakethe endaweni yalo.

Igrafu yokuncika ihlela imisebenzi yokumisa. Ayiguquli umbhalo ongavumelanayo ube ngovumelanayo, futhi ayiphoqi uhlelo olukude ukuba luqinisekise idatha yalo.

Khakha ukumisa futhi wazi ukuthi umkhawulo ukhokha malini

TimeoutStopSec= ikhawulela kokubili umyalo wokumisa nokuphela kwensizakalo uqobo, futhi lapho isikhathi siphela i-systemd idlulela ekubulaleni okucindezelayo. Khetha inani ngokuziphatha kwangempela kokukhipha kohlelo, futhi bhala phansi lokho okungalahleka lapho umkhawulo ufika. Inombolo ekhethwe ngoba umshini kufanele ucime ngokushesha iyisethingi yokulahleka kwedatha ngaphansi kwegama elinye.

Lapho ukumisa kusenensayo, thatha iyunithi, izinqubo zayo ezingaphansi, isikhathi sejenali kanye nomphumela wesikhathi sokulinda. Ukwenza zonke izikhathi zokulinda zibe mfushane noma ukubamba ukubulala okubanzi yindlela okuguqulwa ngayo ukumisa okuhlanzekile kube yisimo esonakele ekubuyeni okulandelayo.

Nqamula ngomnikazi, bese uhlola izimo ezintathu

Lapho abasebenzisi behlile, cela umphathi ongumnikazi womhubhe ukuba anqamule: isenzakalo se-systemd, uxhaxha olusebenzayo lwe-NetworkManager noma insizakalo yomhlinzeki. Ukubulala inqubo ye-OpenVPN engahlobene akuyisusi ngempela isikhathi esanikeza indlela, futhi i-proxy enenqubomgomo yokuqala kabusha ingakha kabusha isicelo ngenkathi uqeda indlela. Xhumanisa leyo nqubomgomo nokumisa okuhleliwe ngaphambi kokuthi uqale.

Hlola ukumisa okuvamile, ukumisa okunesicelo esisebenzayo nokumisa lapho umhubhe wehluleka khona kuqala. Ukulandelana okuphindaphindekayo okunesikhathi sokugcina kungcono kunokuvala ngokushesha okusebenza kanye kuphela.