Indlela ye-VPN elahlekile ku-NetworkManager: inqubomgomo yephrofayela noma i-script?

Uyaxhuma, i-interface ye-tunnel iyavela, futhi isiqalo esisodwa osidingayo asikho etafuleni. Isinyathelo esilandelayo ngokuvamile ukufuna i-script esingeza sona. Lokho kufuna kuholela ezimpendulweni ezinamathisela umsizi we-OpenVPN kuphrofayela, futhi ingxenye yalezo zimpendulo yenza isimo sibe sibi kakhulu kunokuba sibe ngcono, ngoba indlela elahlekile inabanikazi abathathu abangaba khona futhi oyedwa kuphela wabo uyi-script elahlekile.

Nquma ukuthi yimuphi umnikazi onomthwalo wemfanelo ngaphambi kokubhala noma yini.

Abanikazi abathathu, isiqalo esisodwa esilahlekile

Isiqalo singase singabikho ngoba akekho osinikezile, ngoba iphrofayela isenqabile, noma ngoba safakwa endaweni ongayiboni. Lezi zinkinga ezihlukene futhi zinezixazululo ezihlukene.

Eyosikhathi sokuqala kulula ukuyiqinisekisa: ingabe iseva noma i-plugin yake yanikela ngale ndlela? I-backend engakaze isithole isiqalo ayikwazi ukusifaka, futhi i-script eyosiza ayikwazi ukuqamba ukufinyeleleka umlingani angakaze akuchaze. Eyesibili inqubomgomo yephrofayela, engavimba izindlela ukuxhumana obekungazithatha. Eyesithathu itafula noma umthetho, ongagcina indlela endaweni ukusesha okuzenzakalelayo okungakaze kuyibheke.

Umnikazi wesine nguwe, kamuva: i-script engeza indlela ngesikhathi sokuxhuma kodwa engayisusi ngesikhathi sokunqamuka. Lokho kukhiqiza isiqalo esiphila isikhathi eside kune-tunnel, esikhomba ku-interface efile, futhi esidida umuntu olandelayo ozolungisa umshini.

Funda iphrofayela ngaphambi kokwengeza noma yini

Qala ngezakhiwo zokuxhumana okugciniwe. Zifunde ngaphandle kokuchitha izimfihlo, futhi sebenzisa i-UUID uma igama lephrofayela lingacacile.

nmcli -f vpn.service-type,ipv4.never-default,ipv4.ignore-auto-routes,ipv4.route-table,ipv4.routes connection show office

vpn.service-type ikutshela ukuthi iyiphi i-backend ephethe ukuxhumana, futhi lokho kubalulekile ngoba idatha ye-plugin iqondene ne-backend ethile. Ukhiye owamukelwa i-plugin eyodwa awuwona umyalelo osekelwe kwenye, ngakho isiqeshana esikopishwe emibhalweni yelinye iklayenti asiyona ubufakazi balutho.

ipv4.ignore-auto-routes kanye ne-ipv4.never-default ziphendula imibuzo ehlukene. Eyokuqala inganqaba izindlela ukuxhumana obekungazithatha ngokuzenzakalelayo, kanti eyesibili ilawula ukuthi iphrofayela ingaba yindlela ezenzakalelayo yini. Iphrofayela elinganaki izindlela ezenzakalelayo futhi engathembeli kwenye into izoxhuma ngokuhlanzekile futhi cishe ngeke ifake lutho.

ip -4 rule show
ip -4 route show table all

Le mibhalo emibili ixazulula ithuba lesithathu. Sesha isiqalo sakho kuwo wonke amatafula, hhayi ku-main kuphela, futhi uhlole ukuthi umthetho wenqubomgomo uthumela ukusesha okuhambisanayo kwenye indawo yini. Uma isiqalo sikuletinye itafula futhi akukho okusibhekayo, awunayo indlela elahlekile; unokusesha okungasoze kusifinyelele.

Into i-script engakwazi ukuyilungisa

Ukwengeza i-script eyosiza kunika i-vpn.data ye-NetworkManager uhlelo lokulusebenzisa. Lowo umshini wangempela, futhi uyona ongafanele ezimweni eziningi zalezi, ngoba i-script ithola ukulawula ngemuva kokuba inqubomgomo yephrofayela uqobo isinqumile ukuthi yini ezokwamukelwa.

I-script-security ye-OpenVPN ingolunye udideko oluphindaphindayo. Kuyisethingi ye-OpenVPN elawula ukuthi imuphi ama-script iklayenti elingawasebenzisa nokuthi ingafaka ini endaweni yazo; izinga 3 livumela ukudluliswa kwezifakazelo ngendawo, okuyisinqumo mayelana nokuphathwa kwezimfihlo hhayi ukulungiswa kokuhamba kwendlela. Ukunamathisela kuphrofayela okungeyona i-OpenVPN i-backend yayo, noma ukukhuphula lapho kungekho script ekudingayo, kwengeza ukuchayeka ngaphandle kokwengeza indlela.

Khona-ke kunesimo sokuqalisa kabusha. Ukuqalisa kabusha isevisi ye-NetworkManager kuqeda futhi kwakhe kabusha zonke izixhumanisi ezilawulwayo, kuhlanganise naleyo oxhume ngayo uma usebenza kude. Kuyisenzo esiphazamisayo, hhayi ukuxilonga okungenangozi, futhi kuseva kungaba umehluko phakathi kwesesheni ephilayo naleyo engaphili.

Isinqumo, ngokulandelana

Buza imibuzo emithathu ngokulandelana. Ingabe umlingani unikeze isiqalo, lokho okuzokuboniswa yilog ye-backend noma umphumela wayo wesimo. Uma kunjalo, ingabe iphrofayela ilungiselelwe ukwamukela nokufaka izindlela, noma iyazivimba? Uma indlela ikhona kwenye indawo, ingabe umzila wokusesha ulungile kumsebenzi wokuxhumana oyihlolayo?

Kuphela lapho impendulo yokuqala inguyebo, eyesibili inguyebo nenseyesithathu ilungile lapho i-script eyengeziwe iba ngeyokuvikeleka, futhi nangaleso sikhathi kufanele ubuze ukuthi i-backend iyasekela indlela ngokwemvelo yini. Incwadi yesandiso yezilungiselelo ze-VPN ibhala nge-service-type nesichazamazwi sedatha esiqondene ne-plugin, futhi yilapho kufanele kuqalwe khona ngaphambi kokucabanga ukuthi ukhiye ukhona.

Ngemuva kokulungiswa okugunyaziwe, xhuma futhi futhi uhlole indawo ngokukhethekile nangegama, bese unqamuka futhi uxhume futhi ukuze uqinisekise ukuthi isimo siyaphindeka. Umnikazi oyedwa, itafula elilodwa, nendlela enyamalalayo kanye ne-tunnel iwumphumela ofanele.