Ama-remote amaningi e-OpenVPN: uhlu lwe-failover, hhayi ukuhlanganisa izixhumanisi

Imigqa emibili ye-remote kuphrofayela eyodwa ibukeka njengomzila wesibili; iyimizamo yesibili. Lapho i-endpoint yokuqala iyeka ukuphendula, iklayenti liya phambili futhi isikhathi asibanzi. Bhala uhlu ngokuthi yi-failover kusenesikhathi, ngaphandle kwalokho uzokhulisa isilawuli esingalungile.

Uhlu lwe-remote lukunikeza ini

Thatha iphrofayela njengeqoqo elihleliwe lemizamo, hhayi ichibi lamandla. Yonke into ethunyelwayo ithola ithuba layo lokumisa itheneli, futhi isikhathi sihlala kuleyo ephendulile. Uhlu olude luthuthukisa amathuba okuxhuma, hhayi usayizi wepayipi.

Ukuhlanganiswa kwangempela kungomunye umshini. Ukuhlukanisa ukuhamba okukodwa emigwaqweni eminingi kudinga isoftware ezinhlangothini zombili ukuze ihlukanise futhi ihlanganise kabusha ithrafikhi ngokulandelana.

Umthengisi othembisa amatheneli asheshayo avela kumaseva amaningi uthengisa leyo modeli yesibili, hhayi uhlu olude. Uma iklayenti lizama ama-endpoint ngokulandelana kuphela, izinto ezinhlanu zishintsha amathuba akho futhi akukho okunye. Buka ukuphazamiseka: isikhathi siyawa futhi sibuya kwenye indawo, lokho ilogi ekubonisa njenge-endpoint entsha, hhayi njengepayipi elibanzi.

Amabhuloki agcina izilungiselelo ne-endpoint eyodwa

Umugqa ojwayelekile we-remote uthwala ikheli, futhi kwesinye isikhathi iphothi nephrothokholi. Uma i-endpoint idinga iphroksi, noma ukuthutha okungakusetshenziswa yingxenye esele yefayela, faka lezo zilungiselelo kubhuloki lokuxhumana elizigcina nayo. Amabhuloki angaphakathi asebenza efayeleni elilodwa le-.ovpn, futhi iningi lamaphrofayela lihanjiswa kanjalo.

Konke okungaphandle kwebhuloki kusebenza njengokuzenzakalelayo kuma-entry angakudluli. Yingakho ibhuloki elilodwa elakhiwe nama-remote amane avamile kuziphatha ngezindlela uhlu lwamakheli olungenakukuchaza.

Ukususa ibhuloki ongalazi akuwona umhlobiso. I-endpoint elalikuyo ibuyela kokuzakalelayo kwefayela, okungenzeka kube ukuthutha okuhlukile kunalokho ekulalelayo. Susa isembozo esingalungile futhi into eyodwa yehluleka ngenkathi ezinye zisebenza, ngakho kubukeka njengesiseva esibi, hhayi iphrofayela ephukile. Funda i-remote ngayinye nokuthutha kwayo, iphothi nephroksi ngaphambi kokuhlela.

Ukulandelana kokuphinda kanye nezindleko ze-remote-random

Ukulandelana kubalulekile ngoba yonke into efile ithatha isikhathi ngaphambi komzamo olandelayo. Beka i-endpoint oyifunayo kuqala futhi uthathe okunye njengezindawo ezihleliwe.

remote-random ihlanganisa ukulandelana kokuqala, okusabalalisa umthwalo kumaseva alinganayo futhi kubuyela emuva uma i-endpoint eyodwa iyingqangi ngokucacile. Noma kunjalo, bhala i-endpoint ekhethwe yiklayenti; igama lephrofayela alisho lutho uma ukuxhumana kuzwakala kunensayo. Ukugrep umugqa wokuxhumana kusuka kwilogi enemininingwane kukhombisa lapho isikhathi sahlala khona.

Ukuhlanganisa abasebenzi bephula isitatimende sokwethemba

Iphrofayela futhi iyisitatimende mayelana nobuwena: lawa makheli ayisevisi owawufuna ukuyifinyelela, futhi isitifiketi esigxiliwe singesayo. Ukujikijela amaseva omphakathi amahhala kulelo fayela kwephula isitatimende: izitifiketi zawo nesakho zichaza izinsizakalo ezihlukile. Umphumela ojwayelekile ukwehluleka kobuwena, noma izifakazelo ezinikezwa umbingeleli ongaphandle kwenethiwekhi yomhlinzeki wakho. Gcina ezinye izindlela ngaphakathi kweqoqo elisatshalaliswa umsebenzi wakho, nezifakazelo nempahla yokwethemba ehambisanayo.

Uma udinga ama-endpoint avela kubahloli ababili, lokho kuwukuhamba kwendlela, hhayi ukuhlela iphrofayela. Xazulula lokho ngaphezu kwetheneli, lapho ungasho khona ukuthi iyiphi ithrafikhi ethatha iyiphi indlela.

Hlola into ngayinye esikhundleni sokucabanga

Ngemuva kokubuyekezwa kwephrofayela okugunyaziwe, xhuma ngenhloso kuwo wonke ama-endpoint adingekayo futhi uqinisekise ukuthi yikuphi ukuthutha okwakhuphuke. Ukusebenza okunemininingwane kwenza lokho kubonakale. Qala openvpn --config office.ovpn --verb 4 bese ufunda umugqa wokuxhumana wekheli obulindele. Bese uhlola izinsiza ezingemuva kwetheneli; into eyodwa ingaqeda ukuxhawulana futhi ingakuqondisi ndawo.

I-failover idinga ukuhlolwa kwayo esikhundleni sethemba. Vimba i-endpoint yokuqala elabhu, qala iklayenti, futhi ukala ukuthi kuthatha isikhathi esingakanani ukuya phambili. Uhlu olude ngemuva kwento yokuqala enensayo lubi kunolufushane oluqala kahle.

Hlola uhlu futhi njalo lapho umsebenzi elushintsha. Iqoqo elingenisiwe liwusizo kuphela ngenkathi ama-entry alo ekhona futhi ekhuluma ukuthutha okuchazwa amabhuloki akho. Incwadi ye-OpenVPN 2.6 ihlanganisa lapha iziqondiso ze-remote, connection ne-random-order, futhi yiyo inguqulo okufanele ihlolwe uma uhlelo lolimi lundweba.