Ukhiyiwe ngaphandle kwiseva yakho ye-VPN: gcina indlela yesibili yokungena
Umhubhe ophukile akufanele futhi ukususe ikhono lakho lokulungisa iseva. Hlela, hlola futhi ubuyekeze indlela yokuphatha ezimele ngaphambi kokuba uyidinge.
Uvula ikhonsoli, ushintsha umthetho owodwa we-firewall, futhi umhubhe obuxhumene nawo unyamalala. Ushintsho belulungile, ukulayisha kabusha bekungekho, futhi manje indlela eyodwa yokubuyela emshinini iyona oyiphule manje. Indlela yesibili yokungena isinqumo somklamo, futhi kufanele ibe khona ngaphambi kokuphazamiseka, hhayi phakathi kwako.
Buyekeza lokho osakuphethe
Qala kusikrini sekhonsoli esiphambi kwakho bese ubala izindlela ezinganciki kumhubhe. Ikhonsoli yewebhu yomhlinzeki enesikhathi se-serial noma se-VNC ingenye. Isixhumanisi sokuphatha kwinethiwekhi ehlukile singenye. Ukufinyelela ngokomzimba kungokwesithathu, futhi yikona abantu abathola kungena ngaso isikhathi esibi kakhulu.
| Path | Depends on | Usually fails when |
|---|---|---|
| Provider console | Account access and the provider's own API | Credentials live in a wiki only reachable over the tunnel |
| Management subnet | A second interface and its own routing | The bad change was a global route or firewall policy |
| Second tunnel | A different listener, port and credentials | Both listeners were changed in the same edit |
| Physical or local console | Being in the building | Nobody has been in the building for a year |
Funda ikholomu yesithathu njengohlu lokwehluleka hhayi njengombono ongabonakali. Ezimbili zalezo zindlela zivame ukwehluleka ngesizathu esifanayo. Ithebula iyona ndlela oqaphela ngayo lokho ngaphambi kokuba ukuphazamiseka kukuchazele.
Ukuzimela umbuzo wokuncika
I-akhawunti yokubuyisela ayizimeli uma iphasiwedi yayo igcinwe kusevisi oyifinyelela ngomhubhe. I-VPN yesibili kusihambi esifanayo, embobeni ofanayo nasemgomeni we-firewall ofanayo nayo ayizimeli, ngoba ushintsho olwephule okokuqala lwephula kokubili.
Ehla ngokulandelana bese ubeka igama lokho okudingwa isinyathelo ngasinye. Ukufinyeleleka kwenethiwekhi, ukuxazululwa kwamagama, umthombo wokuqinisekisa kanye nesevisi yokuphatha ngokwayo kuyizincikilelo ezine ezihlukene, futhi indlela eyabelana nganoma iyiphi yazo izuza leyo nhluleko njengefa.
Indlela engakaze ihlolwe ifanele ukusola kwayo. Ikhonsoli engakavulwa izinyanga ingase idinge ukusethwa kabusha kwephasiwedi nge-imeyili, futhi lelo bhokisi le-imeyili lingase libe kumshini ongakwazi ukufinyelela kuwo. Hlola indlela ngenkathi konke kusebenza, futhi uzokuthola lokhu ntambama ethulile.
Sebenzisa indlela yesibili oshintsheni olulodwa olulawulwayo
Kusukela kukhonsoli, thatha isithombe noma kopisha ukulungiselelwa osuzokuhlela. Shintsha into eyodwa. Layisha kabusha isevisi bese ufunda umphumela ngaphambi kokuthinta enye into, ngoba izinguquko ezimbili ngesikhathi esisodwa zenza ukubuyisela kube ukuhlola.
Gcina isikhathi sokubuyisela sivuliwe ngenkathi wenza lokhu. Lonke usizo lwendlela yesibili ukuthi isinda kuleyo nto oyishintshayo, ngakho ukuyivala kuqala kususa isici esisodwa esasiyenza ibe wusizo.
Qinisekisa ngendlela yokubuyisela, hhayi ngenkumbulo
Ukuhlola okubalulekile ukuthi indlela evamile iyabuya yini, futhi isikhathi sokubuyisela yindawo okuqinisekisa kuyo lokho ngokulandelana:
systemctl status openvpn-server@server --no-pager ss -lntup | grep -E ':(1194|443)\b' nft list ruleset | sed -n '1,40p' journalctl -u openvpn-server@server --since '-10 min' --no-pager | tail -n 30
Funda isimo sesevisi kuqala, bese umlaleli, bese imithetho, bese iphephabhuku. Isevisi esebenza ngaphandle komlaleli ikhomba ekulungiselelweni kesevisi, kuyilapho umlaleli ongenamithetho efinyelelekayo ekhomba ekuhlungwini. Ukulandelana kubalulekile ngoba isinyathelo ngasinye sinciphisa esilandelayo, futhi ukugxuma ephephabhukwini ngokuvamile kusho ukufunda amaphutha achaza uphawu, hhayi imbangela.
Imibhalo ye-systemctl ihlanganisa ukuziphatha kwesimo nokuqalisa kabusha okusetshenziswa lapha, kuhlanganise nendlela ukulayisha kabusha okwehlulekile okushiya ngayo inqubo yangaphambilini isebenza. Ukubuyisela inguqulo ehambisanayo kungcono kunokuxhuma kaninginingi kusuka kuklayenti engakwazi ukulungisa iseva. Uma umbandela wokubuyela emuva owuchazile ngaphambi koshintsho usugcwalisiwe, buyisela futhi ume.
Gcina uhlu lwempahla lushesha
Buyekeza uhlu lokufinyelela uma abantu noma ingqalasizinda ishintsha. Hlola indlela yokubuyisela ngenkathi konke kusebenza. Hoxisa ama-akhawunti okungekho muntu owasebenzisile kusukela ekuhlelweni kabusha kokugcina. Ama-akhawunti amabili aphelelwe yisikhathi nesitifiketi esisodwa esiphelelwe yisikhathi kuwukuhlanza okuncane ngoLwesibili kanye nokuphazamiseka ngeSonto.
Bhala ukuthi ubani angasebenzisa indlela ngayinye, ukuthi ivumela ini nokuthi izifakazelo zishintshwa kanjani. Indlela yokubuyisela engenaye umnikazi iba umnyango okhohliwe, okungolunye uhlobo lokwehluleka kunokukhiywa ngaphandle.