I-VPN ku-Mac ibambelele ku-«Iyaxhumeka»: yini ngempela egijimayo

«Iyaxhumeka» yisimo esibikwa iklayenti ngesikhathi ihlakaza umhubhe, hhayi isinqumo sokuthi ukuhamba kumile. Ku-Mac lokho kuhlakaza kwenzeka njengokulandelana okufushane, futhi ilebula ishintsha kuphela lapho ingxenye ephethe ukuxhumana ibika emuva. Lapho isinyathelo sisilindile umsizi, isengezo noma isinqumo senqubomgomo, ilebula ingahlala lapho ngemva kokunyamalala kwesixhumi, noma umhubhe ungaqhubeka nokudlulisa ngesikhathi imenyu isawukhombisa. Thatha umbhalo njengokuthi «ukuhlakaza kuyaqhubeka, umphumela awaziwa» bese uthola ukuthi yiluphi uhhafu oluqinisile.

Iziphazamiso ezimbili zibonakala zifana kusuka kubha yemeyu futhi zidinga izimpendulo eziphambene. Kwenye umhubhe usadlulisa amaphakethe futhi ukuboniswa kuphela okuphelelwe yisikhathi. Kwenye umhubhe usuhambile kodwa inqubomgomo ehlukile igcina ukuhamba kuvinjiwe, okuvame ukwenziwa ngamabomu. Izindlela nesimo se-DNS ziwahlukanisa ngokushesha kunanoma yisiphi isenzo semeyu.

Ilebula ilandela ini

Iklayenti le-VPN ligcina umshini wesimo omncane, futhi ibha yemeyu iwukuphrojekshwa kwawo. Ohlelweni olulawulwa yi-macOS uqobo, lowo mshini usefreyimini ye-VPN yesistimu. Emhubheni olawulwa uhlelo lokusebenza, usohlelweni kanye nomsizi wawo ogunyaziwe. Isinyathelo sokugcina sokumisa akusikho ukuvala isokhethi. Ukukhulula lokho okwenza umhubhe usebenze: isixhumi se-utun, izindlela ebezikhomba kuwo, amarekhodi esixazululi afakwe iklayenti, nanoma yimuphi umthetho we-firewall noma inqubomgomo eyayivimba ukuhamba ngesikhathi kuxhunyiwe.

Lezo zinyathelo zihlukene, ngakho ukumisa kungabambelela kunoma yisiphi sazo. Umsizi oyeka ukuphendula, indlela efunwa futhi isixhumi sesibili, noma irekhodi lesixazululi eliphethwe enye iphrofayela kungashiya iklayenti lilindile. Ilebula ingumbiko mayelana nentuthuko yeklayenti uqobo, okulenza libe negunya mayelana nenhloso futhi lingathembekile mayelana nenethiwekhi.

Thola ingxenye ephethe ukuxhumana

Ekuhlelweni kwemvelo, scutil --nc list iphrinta izinsizakalo ezaziwa isistimu kanye nesimo sazo, kanti scutil --nc status "Work VPN" inikeza imininingwane yensizakalo eyodwa. Umhubhe ogcinwe uhlelo lokusebenza lwangaphandle kungenzeka ungaveli nhlobo kulolo hlu, ngakho umphumela ongenalutho awusona ubufakazi bokuthi akukho okuxhunyiwe.

Lapho iphrofayela ingeyohlelo lokusebenza, thembela embukisweni wesimo salo kanye nesilawuli esibhaliwe esithi «Nqamula». Ukuvala iwindi akusona isicelo sokumisa uma umsizi wangemuva ephethe umhubhe; isithonjana siyanyamalala futhi umsizi ugcina isixhumi siphila. isihloko sokubhekisela sezilungiselelo ze-VPN sakwa-Apple sihlanganisa izilawuli zemvelo nokuthi izilungiselelo ezilawulwayo zivela kuphi.

Funda izixhumi, izindlela ne-DNS

Izahluko ezintathu ziyaphendula ingxenye enkulu yombuzo ngaphandle kokuthinta ukuxhumana. Ukuzihumusha ndawonye yikho okubalulekile, ngoba ngayinye iyodwa iyadukisa.

scutil --nc list
netstat -rn -f inet | head -20
ifconfig | grep -A 3 '^utun'
scutil --dns | head -30

• isixhumi se-utun sikhona, indlela ezenzakalelayo noma ehlukanisiwe idlula kuso, isixazululi sikhomba kumhlinzeki: umhubhe usaphezulu futhi ilebula isiphelelwe yisikhathi.
• akukho utun, indlela evamile ezenzakalelayo ikhona, i-DNS ivela ku-DHCP, akukho intanethi: inqubomgomo evimba lapho kunqanyulwa yenza umsebenzi wayo.
• akukho utun, akukho ndlela, isixazululi sisakhomba kumhlinzeki: ukuhlakaza kwama phakathi nendawo, futhi i-DNS iyinsalela okufanele ihlanjululwe.

Bese uthumela isicelo esisodwa kumsingathi wangaphakathi okufanele aphendule kuphela ngomhubhe nesinye kumsingathi womphakathi. Ukufinyeleleka kuhlukanisa inqubomgomo nesimo esisele ngaphandle kokuguqula ukuhlola kube umsebenzi wokulinganisa. Gcina umsebenzi wakude kuqala uma indlela isaphendula, futhi uhlele indlela yesibili yokungena ngaphambi kokushintsha inethiwekhi kumshini owulawulayo ukude.

Kungani ukubulala ngobubanzi nokwasula iphrofayela kudukisa

Amagama ezinqubo afana ne-pppd, racoon ne-configd ingezinhlelo zokusebenza ezithile. Ukuzibulala kungathinta okunye ukuxhumana, kushiye izindlela nezixhumi ze-utun, futhi kungakunikezi irekhodi lokuthi yisiphi isinyathelo esabambelela. Igama elidala lenqubo nalo alusona ubufakazi bokuthi liphethe iphrofayela yamanje.

Ukusula nokwakha kabusha iphrofayela kuwushintsho olukhulu kunokuhlanza ukushintsha okubambelele. Kungalahla izilungiselelo ezilawulwayo kanye nempahla yobunikazi yasendaweni ngaphandle kokuchaza ukuthi yini yehlulekile, futhi ku-Mac egadiwe kungase kumane kubuyiselwe. Gcina ukususa kokuhlelo oluphelelwe yisikhathi ngempela bese uhlola ukushintsha esikhundleni salokho.

Ukulandelana kokumisa okushiya umkhondo

Ukuhleleka ngezansi kushiya izilawuli zokuxhumana uqobo zinesibopho futhi kukhiqiza irekhodi uma ukubambelela kubuya. Kukuvimbela futhi ekuguquleni inkinga yokubonisa ibe ushintsho lwenethiwekhi.

1. Gcina umsebenzi wakude, futhi qinisekisa ukuthi ungafinyelela i-Mac ngenye indlela uma ikude.
2. Bhala igama leklayenti, inguqulo nephrofayela. Thwebula iwindi elifushane nge-log show --last 5m --predicate 'subsystem == "com.apple.networkextension"'; izinguqulo ezindala zigcina umlando omncane, ngakho yisebenzise ngokushesha ngemva kokubambelela.
3. Sebutisa isilawuli esibhaliwe esithi «Nqamula», linda, bese uphinda izahluko zesixhumi nezindlela.
4. Uma ilebula isiphelelwe yisikhathi kodwa umhubhe uphansi, yeka futhi uvumele iklayenti ukuthi lizivuselele esikhundleni sokuphoqa izinqubo.
5. Uma ukuhlakaza kwabambelela ngempela, qala kabusha iklayenti, bese uhlela ukuqala kabusha i-Mac lapho umsebenzi usugciniwe. Imishini elawulwayo idinga inqubo yomlawuli.

Ngemva kokululama, qinisekisa ukuthi indlela evamile ezenzakalelayo nesixazululi se-DHCP zibuyile, nokuthi ukuhamba okuvinjiwe kubuyiselwe noma kusavinjwe ngamabomu. Bhala iphrofayela nenguqulo yeklayenti kanye nomkhondo, ukuze isigameko esilandelayo siqale ngobufakazi hhayi ngokuqagela kubha yemeyu.