Iyiphi ithuluzi le-macOS elingaphoqa uhlelo lokusebenza olulodwa ukuthi ludlule nge-VPN kuphela?
Umngcele we-VPN-kuphela udinga kokubili indlela nokwenqaba. Qhathanisa amaphrofayili wohlelo ngalunye, ama-proxy, izihlungi kanye ne-PF, bese uhlola lolo hlelo olulodwa olubalulekile kuwe.
Umutaro owodwa embhalweni wezidingo — “lolu hlelo lokusebenza lungasebenzisa i-VPN, futhi akukho okunye” — ucela ngokuthula izindlela ezimbili okungekho swishi eyodwa ezinikezayo. Ithrafikhi idinga indlela yokungena kumhubhe ohlosiwe, futhi ithrafikhi ebingaphuma ngqo kufanele yenqatshwe. Amathuluzi enza okukodwa kahle futhi angenzi nhlobo okunye avamile, yingakho ukuqhathanisa okubuza kuphela ukuthi kukhona yini okungavimbela kuphendula ngokuqiniseka ingxenye yombuzo. Qala ngokubhala umngcele, bese ukhetha izingxenye ezimboza zombili izigaba zawo.
Izidingo ezimbili ezicashe emshweni owodwa
Ukuqondisa yingxenye ebeka ukuxhumana emhubheni noma ku-proxy. Ukwenqaba yingxenye evimbela lokho kuxhumana ukuthi kuphume ngenye indlela. Izingxenye ezahlukene ziyakwenza lokho, ziyehluleka ngezindlela ezahlukene, futhi umkhiqizo ungase ube ngcono kwenye ngaphandle kokusho lutho ngenye:
| Approach | Steers traffic | Refuses direct egress | Knows the app identity |
|---|---|---|---|
| Per-app VPN profile | Yes, for the apps it names | Only if a filter or firewall also blocks | Yes, within its own rules |
| Application proxy setting | Partly, for requests that honour it | No | No |
| Content filter | No | Yes | Yes, if the filter is written that way |
| Local PF ruleset | No | Yes, by address and port | Not reliably |
Funda ithebula njengohlu lokuhlola hhayi njengokuhlela. Awukho umugqa ogcwalisa womabili amakholomu aphakathi, futhi imigqa ewamboza iyizingxenye ezimbili ezisebenzisanayo: enye iphethe indlela, enye iphethe ukwenqaba. Ikholomu yobunikazi ibalulekile ngesinye isizathu, ngoba umthetho ongakwazi ukusho uhlelo lokusebenza awukwazi ukuphoqelela umthetho ngalolo hlelo. Noma yini oyisebenzisayo kufanele iphendule kuzo zontathu, kungenjalo umngcele osembhalweni wezidingo awuwo umngcele osemshinini.
Ukuqondisa kuphela kushiya indlela yokuphuma
Isilungiselelo se-proxy yohlelo lokusebenza siyisibonelo esicacile sokuqondisa ngaphandle kokwenqaba. Singaqondisa izicelo ezivela ohlelweni oluhlonipha i-proxy yesistimu, futhi asimbozi lutho olunye: inqubo yokusiza, isibuyekezi, isevisi yangemuva noma enye iphrothokholi ingahamba ngendlela yayo ngaphandle kokufunda leso silungiselelo. Ngakho ukukhetha iphoyinti lokugcina le-SOCKS kuphaneli eyodwa akudali inqubomgomo yokwenqabela ukuphuma ngqo kuhlelo lokusebenza. Uma isidingo sikhuluma ngohlelo lonke, buza ukuthi umthetho ubona ziphi izingxenye ngempela.
Iphrofayili ye-VPN yohlelo ngalunye iqondisa kangcono kune-proxy, ngoba inkundla yiyo enquma ukuthi yiziphi izinhlelo ezingena emhubheni esikhundleni sokuthi uhlelo ngalunye lunqume lodwa. Noma kunjalo akwenqabi lutho: iphrofayili inikeza indlela, futhi ithrafikhi engahambisani nayo ithatha indlela evamile. Yilowo msama oyindawo lapho ingxenye yesibili ithola khona indawo yayo, futhi yingakho imikhiqizo ebukeka njengokushintsha okukodwa ivamise ukuba mibili.
Ukwenqaba kuphela kwephula uhlelo lokusebenza
Imibhalo ye-Apple mayelana nezihlungi zokuqukethwe ichaza isinqumo sokuvumela-noma-ukuvimbela mayelana nethrafikhi njengoba idlula esiteki senethiwekhi. Leso sinqumo akusona umhubhe futhi akusona ukuxhumana kwe-proxy, ngoba sinquma ukuthi okuthile kungaqhubeka yini, hhayi ukuthi kuphi kuya. Isihlungi sodwa sisebenzisa ukwenqaba ngokuphelele futhi sishiya uhlelo lokusebenza lungasasebenzi, nemibhalo ehlanzekile futhi ngaphandle kwencazelo. Isinqumo sesihlungi singamisa ukuxhumana kodwa asinikezi umhubhe, ngakho ukusihlanganisa nokuqondisa isinqumo somklamo hhayi isengezo esingakhethwa.
Isethi yemithetho ye-PF elawulwa endaweni isendaweni yokugcina yalolo bubanzi. Kuyisinqumo sokusekela esisemthethweni emshinini ophethwe umlawuli, futhi akusona ngokuzenzakalelayo isisekelo somkhiqizo ongabolekwa, ngoba ophethe isethi yemithetho uphinde abe nokuhlangana kwayo nabanye abasebenzisi be-firewall, indlela yayo yokuthuthukisa kanye nokubuyiswa kwayo lapho umthetho ungalungile. Ukwengeza i-PF kumkhiqizo akubususi lowo mbuzo wobunikazi; kuyawuchaza.
Ukusetshenziswa kunquma ukuthi umthetho usazoba khona kusasa
Indlela i-Network Extension esetshenziswa ngayo emakundleni e-Apple incike ohlotsheni lomhlinzeki, ukupakisha kanye nenguqulo ye-OS ephambi kwakho. Isandiso sohlelo kuma-macOS sisebenza kumongo womsebenzisi futhi siphela lapho lowo msebenzisi ephuma, kanti isandiso sesistimu sinomongo womhlaba wonke ongaxhomekekile kuseshini. Uma ukuvikela kufanele kuhlale ngemuva kokuphuma, lowo mehluko uyingqikithi yomklamo hhayi umbhalo waphansi. Qinisekisa indlela yokusetshenziswa ngaphambi kokuthembisa indlela yokuziphatha, ngoba ikhodi efanayo ihlala ngendlela ehlukile kuye ngokuthi yiluphi uhlobo lwesandiso oluthunyelwayo.
Ukutholakala komthombo kuyindaba ehlukile ekusebenziseni. Ukufunda isitoreji kukutshela ukuthi into ethile yenziwa kanjani, hhayi ukuthi ifayela le-binary elifakiwe livunyelwe ukwenzani kulo mshini. Ukusayina, ukufaka kanye nokugunyaza kusasebenza, futhi iziqondiso ezakhiwe ngasekungeni kwesandiso se-kernel esiphelelwe yisikhathi noma iqhinga lokujova ilabhulali zichaza enye inkundla nesinye isimo sobungozi, noma ngabe zasebenza kahle kangakanani.
Icala lokwamukela elisho uhlelo lokusebenza
Khetha isenzo esisodwa uhlelo olusenzayo ngokwalo, bhala ikheli okufanele lifinyelele kanye nokuthi lelo kheli liyi-IPv4 noma i-IPv6, bese uphinda leso senzo esimweni esigunyaziwe esingenamu hubhe. Ukusebenza kwesibili kufanele kuveze ukwenqaba okumenyezelwe hhayi umzamo wokuphinda othule oqondile. Yileso sikhathi abantu abasishiya singacacisiwe, futhi yisona sikhathi kuphela esibonisa ukuthi ukwenqaba kukhona ngempela. Sisebenzise kuqala lapho umhubhe ukhona, ukuze umehluko phakathi kwemiphumela emibili uvele kuphela kumhubhe ongekho.
Bese uhamba ngezinguquko ezishiwo yisidingo: ukuqalisa kabusha uhlelo, inqubo yokusiza eqalayo, umhubhe oxhumana kabusha, umshini oshintsha amanethiwekhi, kanye nokuphuma noma ukuqalisa kabusha lapho kufanele khona. Ikhasi le-IP lomphakathi kusiphequluli akulona ukuhlolwa kwamaskethe ohlelo olunye, ngakho angeke athathe indawo yalokhu. Lapho kungekho ukusetshenziswa okusekelwayo okumboza indlela yokuziphatha yangempela yohlelo, indawo ehlukanisiwe egunyaziwe enesango elicacile futhi engenayo enye indlela yokuphuma iyisinqumo sokuvimbela esinezindleko zayo zokuphatha, hhayi esikhundleni sebhokisi lokumaka.
Qeda ngokubhala izinto ezine: uhlelo lwakhiwe yiziphi izingxenye, ubani ophethe ukuqondisa, ubani ophethe ukwenqaba, kanye nezimo okufanele umthetho usasebenza kuzo. Isitoreji somphakathi singaba yikhrayitheriya eyodwa yokukhetha, kodwa akusona esisodwa kwezine, futhi lezo zinto yizona ezinquma ukuthi ithuluzi elithile liyazihlangabezana yini izidingo zenethiwekhi.