Iklayenti le-VPN le-Mac: i-Network Extension ne-System Extension

Amagama amabili e-Apple asetshenziswa sengathi asho into eyodwa, futhi lokho kudideka kuthumela abantu kuphaneli yezilungiselelo engalungile. I-Network Extension ichaza ikhono: indlela esekelwayo yokuqalisa amathumbu e-VPN, ama-proxy nezihlungi. I-System Extensions ichaza indlela yokuletha nokugunyaza yezandiso endaweni yomsebenzisi. Iklayenti lesimanjemanje le-VPN le-Mac ngokuvamile lidinga kokubili, yingakho kungekho ilebula elilodwa elichaza uphawu lwedwa. Ukuhlukanisa kokubili kuphendula ukuthi iyiphi ingxenye okufanele ihlolwe nokuthi isiphi isinyathelo sokugunyaza okufanele silindelwe.

Imibuzo emibili, hhayi ilebula elilodwa

Buza ukuthi ingxenye yenzani ngaphambi kokubuza ukuthi ifakwa kanjani. Ikhono linquma ukuthi iyiphi ikilasi lomhlinzeki ekhona futhi ngaleyo ndlela iyiphi ikhodi ephethe amaphakethe akho. Indlela yokuletha inquma ukuthi ibhinari ifika kanjani, igunyazwa kanjani nokuthi isimo sayo sibhalwa kuphi. Umkhiqizo ungasebenzisa ithumbu lamaphakethe ngaphandle kokuletha isandiso sesistimu kumakhulukhulu amadala, futhi ungaletha isandiso sesistimu esisebenzisa okunye ngaphandle kwethumbu.

Izandiso ze-kernel yigama lesithathu abantu abalixubayo. Kwakuyindlela endala yokuqalisa ikhodi yenethiwekhi enelungelo, kwakudinga ukugunyazwa okwehlukile, futhi i-Apple isiholela abathuthukisi kude nazo iminyaka. Ukusebenzisa iresiphi yokugunyaza yesandiso se-kernel kuklayenti lesimanjemanje kuchitha isikhathi engxoxweni engasoze ivele.

Funda amanothi okusabalalisa omhlinzeki wenguqulo ye-macOS oyisebenzisayo esikhundleni sokuthunyelwe kwenkundla kusukela enguqulweni yangaphambilini. Isakhiwo sashintsha izikhathi ezingaphezu kwesisodwa, futhi iziqondiso ziguga ngokushesha. Inothi elikhuluma ngokugunyazwa kwesandiso se-kernel lichaza enye inkathi yomkhiqizo.

I-Network Extension ihlinzeka ngani

Uhlaka luhlinzeka ngezinhlobo zomhlinzeki zemisebenzi ejwayelekile yenethiwekhi: ithumbu lamaphakethe lokuhamba kwe-VPN, i-proxy yohlelo lokuhamba ngohlelo ngalunye, isihlungi sokuqukethwe sokuhlola ukuhamba kanye nokuphathwa kwe-proxy ye-DNS kokuziphatha kwesixazululi. Uhlobo lomhlinzeki lunquma ukuthi isandiso singenzani, futhi iklayenti eliletha abahlinzeki ababili lingase lenze imisebenzi emibili ehlukene.

Lokho kubalulekile ngesikhathi sokuxilonga ngoba uphawu olufanayo lokuxhumana lungavela ethumbini, esihlungini noma ku-proxy ye-DNS. Ukuvimba iwebhusayithi yisinqumo sesihlungi, ukungafinyeleli kunethiwekhi engaphansi eyimfihlo ngokuvamile yisinqumo sethumbu, futhi ukuxazulula ikheli elingalungile ngokuvamile yisinqumo sesixazululi. Ukusho uhlobo lomhlinzeki kunciphisa usesho ngaphambi kokufunda noma iyiphi ilogi.

Akukho lutho kuhlaka olusikisela isimo sokuvikela ubumfihlo. Isandiso endaweni yomsebenzisi sisenezimvume, ukulungiselelwa kanye nomqhubi ngemuva kwaso, ngakho thatha isakhiwo njengemininingwane yokusebenzisa hhayi njengophawu lokwethemba. Buza ukuthi ubani oqhubayo iphoyinti lokugcina nokuthi ilungiselelwe ukuqoqa ini.

I-System Extensions ishintshani

Le ndlela ihambisa ikhodi enelungelo isuka ku-kernel iye endaweni yomsebenzisi, futhi ishintsha indlela uhlelo lokusebenza olucela ngayo imvume. Ukwenza kusebenze kuyisinyathelo esihlukile ekufakweni, futhi umsebenzisi noma iphrofayela ye-MDM kufanele ikuvumele. Iklayenti elifakwayo kodwa elingasoze lenze kusebenze libonakala likhona kufolda ye-Applications futhi alwenzi lutho ekuxhumaneni.

Isimo sibhalwa uhlelo hhayi uhlelo lokusebenza, okuwusizo ngoba singabuzwa. Umyalo ongezansi ubala izandiso ezaziwa uhlelo kanye nesimo sazo sokusebenza.

systemextensionsctl list
scutil --nc list

Umyalo wokuqala uphendula ukuthi ingxenye ifakiwe futhi yenzelwe ukusebenza yini. Owesibili ubala ukulungiselelwa kwe-VPN uhlelo oluphethe, okungumbuzo ohlukile futhi ngokuvamile yiwona obalulekile uma iphrofayela yokuxhumana ingekho hhayi ukuthi yephukile.

Iyiphi okufanele ihlolwe ngophawu oluthile

Hlanganisa uphawu nesendlalelo ngaphambi kokuvula iphaneli yezilungiselelo. Ukulungiselelwa okungekho kumbuzo wephrofayela, ingxenye efakiwe kodwa engasebenzi kumbuzo wokuletha, futhi ingxenye esebenzayo engakwazi ukudlulisa ukuhamba kumbuzo wekhono.

Umfudlana welogi uwubufakazi obabiwe bemigqa emibili yokugcina. Ukufunda uhlelo olungaphansi lwesandiso senethiwekhi kutshela ukuthi ubani umhlinzeki ophethe umfudlana, futhi isinqumo sesihlungi sibonakala sihlukile ekwehlulweni kwethumbu ngisho lapho umsebenzisi echaza kokubili njenge-VPN ephukile.

log show --last 10m --predicate 'process == "nesessionmanager"'

Ungaphethi ngokuthi isandiso siyasebenza ngoba kunesithonjana kubha yemenyu. Izithonjana ziyasinda ekwenzeni kusebenze okuhlulekile, futhi isithonjana esidala singesinye sezizathu ezivame kakhulu zokuthi ucingo losizo luqale endaweni engalungile. Funda isimo sokusebenza esikhundleni salokho, ngoba yiso uhlelo olusibhalayo.

Ukwemukelwa, i-MDM kanye nenganekwane yesandiso se-kernel

Kuma-Mac aphethwe, isinyathelo sokugunyaza singesephrofayela ye-MDM, futhi umsebenzisi ochofoza i-Allow ku-System Settings angase abe evinjelwe inqubomgomo engakabuyekezwa. Buza ithimba ledeskithophu ukuthi iyiphi indlela equgunaza isandiso kulelo qembu ngaphambi kokucela umsebenzisi ukuthi achofoze okuthile.

Ku-Mac engaphethwe, isicelo sokugunyaza sivela kanye kuphela futhi ukwenqaba kungase kube okungapheli kuze kufakwe kabusha isandiso. Lokho kuziphatha kuchaza umshini lapho iklayenti lalisebenza khona ngaphambi kokuthuthukiswa kwe-OS futhi manje libika uxhumano olungasoze lusungulwe.

Bhala phansi uhlobo lomhlinzeki, isimo sokusebenza kanye nendlela yokugunyaza yeklayenti olisabalalisa. Lezo ziqiniso ezintathu ziphendula imibuzo eminingi yesikhathi esizayo mayelana ne-VPN ye-Mac ngaphandle kokuvula kabusha impikiswano yekhono nokuletha.