Ukukhiya kwe-VPN ye-PF ku-Mac: inqubomgomo yesayithi, hhayi isici esingathunyelwa
I-Packet Filter akuyona i-API esekelwayo yemikhiqizo esatshwayo. Nikeza isethi yemithetho umnikazi, qamba zonke izihlobo, futhi uhlole izinguquko.
Kuyasebenza ku-Mac yakho, ngakho kubonakala njengento ongayinikeza abasebenzisi. Leso sithombe sokuqala okufanele usilahle. I-Apple TN3165 isho ngokucacile ukuthi i-Packet Filter akuyona i-API esekelwayo yemikhiqizo esatshwayo ngokujwayelekile, futhi ibheka ukuphathwa kwesayithi okunamalungelo nokulawulwayo njengesimo esifanele. Ngakho ukukhiya kwe-VPN okwakhiwe ku-PF kuyinqubomgomo yokusebenza yendawo enomnini, hhayi isici esingathunyelwa ngaphakathi kohlelo lokusebenza.
I-PF akuyona indawo yokupakisha
Umehluko awuyona eyemfundo. Umkhiqizo osatshwayo oncike ku-PF uthola njengefa zonke izinguquko u-Apple azenza kuwo, zonke izingxabano namanye amathuluzi nawo abhala imithetho, futhi akukho isithembiso sokusekelwa sokuthi leli lungiselelo lizoqhubeka lisebenza. Isayithi eliphatha imishini yalo inobudlelwano obuhlukile: lingabhala phansi ukuncika, likuhlole kuwo wonke ukukhishwa kwe-OS, futhi lamukele ukunakekelwa.
Ezinye izeluleko zokufaka ziwela umngcele okufanele ubalulwe. Ukubhala kabusha lonke isethi yemithetho yesistimu ukuze kufakwe i-anchor eyodwa, ukuhlela ukucushwa kokuqalisa kwesistimu ye-Apple, noma ukukhubaza i-System Integrity Protection akuzona izidingo ezamukelekayo zeresiphi esingasetshenziswa futhi. Uma umhlahlandlela oshicilelwe udinga enye yalezi, uchaza ilabhu, hhayi inqubomgomo engasetshenziswa.
Bhala inhloso yokuphuma ngaphambi kwe-syntax
Nquma okungavunyelwe ngaphambi kokukhetha igama elisemqoka elilodwa. Ngokuvamile kufanele kube nezindlela ezintathu: ukuthuthwa kwekhasimende le-VPN ukuya kuseva yalo, uhambo lohlelo oluvikelwe ngaphakathi komhubhe, kanye nakho konke ukucushwa noma izinsizakalo zendawo ezidinga ngempela indlela eqondile.
Nikeza yonke imvume ehlongozwayo indawo, ukuthutha kanye nomnikazi. Ukuvumela yonke imigudu eya endaweni eyodwa kuvumela okuningi kakhulu kunokuthutha okukodwa okusetshenziswa umhubhe, futhi ukuchayeka okwengeziwe kuza ngaphandle kokuthi kukhona onqumile ukuthi kufanele kube njalo. Ukuvumela isixazululi somphakathi kuwufu olufanayo olugqoke ingubo enobungani: lwakha indlela eqondile ye-DNS ngisho nomhubhe uphansi, ngakho ukuseshwa kwamagama kusaphuma.
| Path | Destination | Owner |
|---|---|---|
| VPN transport | Gateway address, one UDP port | Network team |
| Tunnel traffic | Internal prefixes | Application owner |
| Resolver exception | Named internal resolver | Security team |
Ukuhlolwa okusizayo kwemvume ukuthi ungamqamba yini umuntu oyicele kanye nokwehluleka okuvimbayo. Uma zingekho zombili izimpendulo, umthetho cishe uyisu elizungeza ukucushwa okungalungile obekuzohlala kungabonakali.
Izinombolo ze-utun akuzona ubunikazi
I-MacOS yakha izixhumanisi zomhubhe njengamadivayisi e-utun, futhi inombolo enikezwe i-VPN yakho ayizinzile phakathi kokuqalisa kabusha, ukuxhuma kabusha, noma ukuba khona kwekhasimende elinye. Umthetho obala izinombolo ezimbalwa eziqanjiwe awuyona inqubomgomo; uyisithombe sentambama eyodwa.
Bophela umthetho entweni ekhomba umhlinzeki ohlosiwe: uhlelo lwamakheli olunikezwa umhubhe, inqubo ephethe isixhumanisi, noma ukucushwa okugcinwa yikhasimende le-VPN ngokwalo. Bese ubhala phansi ukuthi lokho kwaziswa kusebenza kanjani, ngoba umuntu ozobuyekeza umthetho ngemva konyaka ngeke abe nomlando wakho we-shell.
Yenza inqubomgomo elayishiwe ibe nokwabelwa
Igama le-anchor lihlela imithetho; alifakazi ukuthi inqubomgomo esebenzayo yileyo obekuyiyo oyihlosile. Ukubaluleka phakathi kwama-anchor, imithetho elayishwe enye isofthiwe, kanye nesimo esikhona konke kungashintsha umphumela. Buyekeza isethi esebenzayo kanye nabo bonke abanye abanama-PF kuleyo mishini, futhi ubhale phansi ubunikazi endaweni efanayo nokucushwa. Abanikazi ababili abahlela ama-anchor ahlukene ngemibono ehlukene yiyo indlela ejwayelekile yokuthi ukukhiya kuthole imbobo.
Gcina isethi yemithetho endleleni yokucushwa esekelwayo yesayithi, yenza inguqulo, futhi uphawule ukuthi yiziphi izinguqulo ze-macOS ezihloliwe. Ushintsho olusetshenziswa ngesandla futhi olukhunjulwa umuntu oyedwa aluyona ingqalasizinda enakekelwayo, noma ikhanda lefayela lithini.
Hlola izinguquko, hhayi isimo esixhunyiwe
Isithombe sesikrini esithathwe umhubhe uvuliwe asifakazi cishe lutho. Landela izimo esikhundleni salokho: ukuqalisa ngaphambi kokuxhuma, umhubhe osebenzayo, umhubhe owawa ngaphandle kwesixwayiso, ukunqamuka ngamabomu, nokuhamba ukusuka ku-Wi-Fi ukuya endaweni yokuxhumana. Isimo ngasinye sinempendulo yaso, futhi ezithakazelisayo izinto ezehlulekile, hhayi indlela enhle.
Esimweni ngasinye, bhala phansi okufinyeleleka ngamabomu. Hlola i-IPv4 ne-IPv6 ngokwahlukene, hlola ukuxazululwa kwamagama, futhi ufake ukuhamba obekusungulwe ngaphambi koshintsho, ngoba ukuxhumana okukhona akulandeli ngaso sonke isikhathi inqubomgomo entsha. Isiphequluli esihluleka umhubhe uphansi siyiphoyinti elilodwa ledatha, hhayi ubufakazi bokuthi zonke ezinye izindlela zivaliwe.
Ekugcineni, gcina indlela yokubuyisela enganciki endleleni yenethiwekhi oyishintshayo. Ukucushwa okuhle okwaziwayo endaweni yokugcina yendawo kanye nendlela ebhaliwe yokukulayisha kuguqula ukukhiya kube inqubomgomo; ngaphandle kwako, ukubuyekezwa okubi kukodwa kukhiya umphathi ngaphandle komshini obekufanele uvikelwe.