Kungani umzila wasekhaya unqoba umzila ozenzakalelayo we-VPN

Inethiwekhi engaphansi exhunyiwe kanye nomzila ozenzakalelayo obanzi odlula kuthumbu yizinhlobo ezimbili ezihlukene zomzila. Funda ukukhetha kwe-kernel, bese ulungisa ukuhlangana ngaphandle kokuqongelela imizila ye-host.

Iphrinta esetafuleni iyaqhubeka nokusebenza ngemva kokuba ithumbu likhuphukile, kuyilapho iseva ekwelinye ihhovisi ixazululwa buthule ibe yinto yasendaweni. Zombili izimo zivela emthethweni owodwa: umzila ocace kakhulu uyanqoba, futhi isiqalo esixhunywe ngqo sicace ngangokunokwenzeka. Ngokuvamile lowo umklamo owufunayo, futhi yileyo ndlela ibanga eliyimfihlo eliphindwe kabili elintshontsha ikheli elikude. Ukufunda ukukhetha kwe-kernel kuqala kuguqula ukwehluleka okumangalisayo kube ukuqhathanisa kweziqalo.

Isiqalo esixhunyiwe sicacile kunomzila ozenzakalelayo

Ithumbu ngokuvamile lifaka umzila ozenzakalelayo noma iqoqo leziqalo, kuyilapho isixhumanisi sasendaweni sithwala isiqalo esixhunyiwe kanye nomzila oya kuyo yonke i-LAN. Phakathi kwazo kunquma ukufana kwesiqalo eside kakhulu, ngakho-ke indawo ephakathi kwesiqalo se-LAN ayifiki neze kuthumbu. Yingakho iphrinta, ikhasi lokuphatha i-router kanye ne-NAS yasendaweni kuhlala kufinyeleleka ngesikhathi i-VPN ivuliwe. Yingakho futhi insiza ekude engaphakathi kwebanga elihlangene iya emshinini ongafanele.

Isikhala samakheli ayimfihlo asisodwa, futhi ukuthi amasayithi amabili akhethe isiqalo esifanayo kuvamile ngokwanele ukuba kuhlelwe. Lapho amabanga ehlangana, impendulo yasendaweni ifika ngokushesha futhi ibonakale inegunya, ngakho-ke kulula ukufunda kabi ukwehluleka njengenkinga yokungena. Indawo yaphendula, hhayi leyo obukade uyisho.

Funda ukukhetha okuzokwenziwa yi-kernel

Buza i-kernel ukuthi izosebenzisa muphi umzila endaweni eqondile esikhundleni sokufunda ithebula kusukela phezulu. Bese usesha imithetho yenqubomgomo engase ikhethe elinye ithebula. Imiyalo emibili iphendula imibuzo yomibili ngemizuzwana embalwa.

ip route get 10.20.30.41
ip route show table all | grep -E '10\.|default'
ip rule show

Umphumela wokuqala ubiza isixhumanisi, igxathu elilandelayo kanye nekheli lomthombo i-kernel ezolisebenzisa, futhi yiyo impendulo ebalulekile. Inani le-dev elikhomba ebhulohweni lasendaweni lisho ukuthi iphakedi alingeni neze kuthumbu, noma ngabe iphaneli yesimo seklayenti le-VPN ithini. Uhlu lwamathebula oluhlungiwe lukhombisa ukuthi ngabe elinye ithebula linaso isiqalo esifanayo, futhi uhlu lwemithetho lukhombisa ukulandelana okubuzwa ngakho lawo mathebula. Umthetho wenqubomgomo ungathumela isiqalo ngethebula elithile ngisho noma ithebula eliyinhloko lingavumelani, ngakho-ke lokho kulandelana kuyingxenye yempendulo.

Ukufinyelela kwasendaweni yimvume ehlukile

Ukuba nomzila akufani nokuba nemvume yokuwusebenzisa. Iningi lamaklayenti lingavimba ukuxhumana kwenethiwekhi yasendaweni ngesikhathi ithumbu liphakeme, futhi leso silungiselelo yisinqumo senqubomgomo, hhayi umphumela wokuhleleka kwemizila. Lapho insiza eseduze ethembekile iyingxenye yomklamo, vula inketho yokufinyelela yasendaweni esekelwayo esikhundleni sokuqamba imizila. Lapho idivayisi ikuyi-Wi-Fi yomphakathi, yishiye ivaliwe.

Izendlalelo ezimbili zehluleka ngendlela ehlukile. Umzila wasendaweni ovimbiwe udala ukuphela kwesikhathi noma umzila ukhona, kuyilapho umzila ohlangene udala impendulo evela kumsingathi ongafanele. Ukuhlukanisa kubo kuthatha umbuzo owodwa futhi kusindisa intambama yezinguquko ze-firewall, futhi ukuhleleka kokudlulisela kuchaziwe ku-amanothi e-strongSwan mayelana nokudlulisela.

Lungisa ukuhlangana ngaphandle kokuqongelela imizila ye-host

Umzila we-host wekheli elilodwa ubonakala ulungisa ukuhlangana futhi uhluleka khona lapho kudingeka ikheli lesibili ebangeni elifanayo. Ngemva kwamashumi amabili anjalo, akekho ongasho ukuthi yisiphi isiqalo esinegunya. Izixazululo eziqhubekayo ukushintsha kokukhelela, i-topology ebhaliwe egwema ibanga eliphindwe kabili, noma ukuhumusha kwelinye iceleni. Ngakunye kuthatha isikhathi sokuhlela kanye esikhundleni sokunakekela unomphela.

Uma ngempela kudingeka umzila we-host wesikhashana, bhala isizathu, umnikazi kanye nosuku eceleni kwawo ukuze ukwazi ukususwa kamuva. Bese uhlola ikheli nensiza eqondile kanye nendawo yomphakathi, ngoba ushintsho lokufinyelela lwasendaweni olukhipha buthule izinhlelo ezingahlobene kuthumbu lubi kunephutha lokuqala. Gcina isiqalo sasendaweni kanye nesiqalo esikude kubhalwe ngokwehlukana; lowo mkhuba uvimbela ukuthi i-ping yasendaweni esebenzayo idluliselwe njengobufakazi bokuthi ihhovisi elikude liyafinyeleleka.

Izihloko ezihlobene