Qapha i-VPN yerutha ngaphandle kokuthemba isibani esisodwa sesimo
Isimo sikalingani, umzila okhethiwe kanye nokuhlolwa kohlelo lokusebenza okuvunyelwe kuphendula imibuzo ehlukene. Xwayisa emngceleni ohlulekile, hhayi esithombeni esiluhlaza.
Ikhasi lesimo lithi kuxhunyiwe, isibani siluhlaza, kanti ihhovisi alikwazi ukufinyelela iseva yamafayela. Elinye lalawa maqiniso limayelana nethubhu kanti elinye limayelana nomzila ongena kuyo. Ukuqapha kokubili kuwumehluko phakathi kwesexwayiso ongathatha isinyathelo ngaso nalelo ofunda ukulishaya indiva.
Izivivinyo ezinhlanu, ngokulandelana, kusukela kumlingani kuya ngaphandle.
Isivivinyo 1: isimo somlingani noma senhlangano
Iphrothokholi ngayinye iveza isimo sayo. I-WireGuard ibonisa ukuxhawula kwakamuva kanye nezibali zokudlulisa kumlingani ngamunye nge-wg show. I-OpenVPN ibhala isimo seseshini efayeleni layo lesimo noma kusixhumanisi sokuphatha, kanti i-IPsec iveza izinhlangano zokuphepha ngamathuluzi afana ne-ipsec statusall. Umcupho ukufunda isigxivizo sesikhathi njengesinqumo: umlingani we-WireGuard ongenzi lutho ongenakho okuthunyelwayo ngeke axhawule muva nje, futhi lokho akukhona ukuphazamiseka.
Qhathanisa isigxivizo sesikhathi nethrafikhi elindelekile kanye nezilungiselelo ze-keepalive ngaphambi kokubiza omunye umuntu.
Isivivinyo 2: umzila okhethiwe
Isixhumanisi sethubhu singaba khona kuyilapho kungenalutho olugayizwa kuso. Hlola ithebula lokudlulisa endaweni oyikhathazayo, hhayi isubnethi yethubhu ngokwayo. Uma isiqalo sendlela singekho noma sikhomba kwenye indawo, isimo somlingani asibalulekile.
Lokho kuhlola kubamba ukwehluleka isibani sesimo esingakaze sikubonise.
Ukuhlola kwesibili okuwusizo kuphinde kuqhathanise ikheli lomthombo. I-ip route get 10.20.5.10 ibuyisela ugxuma olulandelayo, isixhumanisi kanye nomthombo okhethwayo, futhi umthombo ongafanele wanele ukwephula ithrafikhi ebuyayo ekugcineni okude. Bhala kanye izinto ezintathu ezilindelekile, bese uxwayisa lapho noma iyiphi ingxenye ishintsha. Lowo mugqa owodwa ubamba izinguquko ze-NAT, ukudlidlizela kwesixhumanisi kanye namaphutha okugayiza okusekelwe kunqubomgomo.
Isivivinyo 3: umzila wohlelo lokusebenza ovunyelwe
Hlola okuthile okumelela isidingo sangempela. I-ping evela kurutha iphuma ekhelini layo kanye nenqubomgomo yayo, okungenzeka kuhluke kuthrafikhi ye-LAN edlulisiwe, futhi amahost amaningi anciphisa i-ICMP. Uma isidingo siwusevisi yangasese, hlola leyo sevisi embobeni yayo yangempela.
Gcina umthamo wokuhlola ulinganiselwe. Umjikelezo wokuqapha akufanele ube yithrafikhi ewukalayo.
Isivivinyo 4: yini eshintshile futhi nini
Hlanganisa izinguquko ze-WAN, ukunwetshwa kokhiye, ukuhoxiswa kwemizila kanye nokwehluleka kohlelo lokusebenza emugqeni owodwa wesikhathi. Wehlukanisa ukwehluleka kwethubhu nomzila wokubuyela emuva obuyisela buthule ukufinyelela okujwayelekile kwe-inthanethi, ngoba kokubili kukhiqiza imibiko yabasebenzisi efanayo kanye nokuxilongwa okuphambene. Amaphutha endawo yesikhathi azohlinzeka ukuhleleka, ngakho yenza kube okujwayelekile ngaphambi kokuqhathanisa. Umugqa wesikhathi yiwona oguqula izivivinyo ezine zibe yimbangela.
Gcina amalogi okushintsha, hhayi komthwalo.
Isivivinyo 5: isexwayiso kufanele sisho umngcele
Isexwayiso esithi i-VPN yehle sithumela umuntu endaweni engalungile isigamu sesikhathi. Leso esithi ukuxhawula komlingani kudala imizuzu eyishumi nambili, umzila oya ku-10.20.0.0/16 awukho, noma ukuhlolwa kombobo 445 kuyahluleka, sikhomba esivivinyweni esithile.
Gcina izibali zokusebenza esikhundleni sokucinga imithwalo. Izibali ziphendula umbuzo wokuqapha ngaphandle kokuqoqa okuqukethwe ongakudingi.
Futhi vumela inqubomgomo yokushintsha ukuthi inqume okulandelayo. Ukuqapha kufanele kuthole ukuthi yimuphi umngcele ohlulekile, hhayi ukugunyaza indlela ebanzi njalo lapho ukuhlolwa kuhluleka. Incwadi ye-OpenVPN 2.6 ibhala ifayela lesimo kanye nesixhumanisi sokuphatha okwenza ukuhlolwa kokuqala kube nokubhalwa ngeskripthi.