I-Nextcloud ngokusebenzisa i-VPN kuphela: qala ukubala zonke izindawo zokungena

Uhlelo lwe-Nextcloud olusebenzisa i-VPN kuphela luhluleka lapho luvikela isiphequluli futhi lukhohlwa iklayenti lokuvumelanisa. Ikhasi lewebhu, injini yokuvumelanisa yedeskithophu, ukulayisha kusuka kuselula, amathuluzi e-WebDAV kanye nabamukeli bezixhumanisi ezabiwe bonke badinga indlela eya enkonzweni efanayo, futhi ngayinye ingaveza indawo yokungena ehlukile. Zibale ngaphambi kokuba uvale noma yini. Lolo hlu luyindawo yomngcele yangempela.

Landela uhlu lokuhlola ngokulandelana. Into yokuqala ichaza ukuthi imfihlo isho ukuthini kulolu kusetshenziswa; izinto ezilandelayo zivivinya ukuthi ukusetshenziswa kuhambisana ngempela naleso sichasiso yini.

Chaza imfihlo ngaphambi kokushintsha umngcele

Bhala imfuneko emshweni owodwa: wonke umsebenzisi kufanele ajoyine i-VPN ngaphambi kokufinyelela uhlelo lokusebenza, noma uhlelo lungahlala lusobala ngenkathi umsuka walo uhlala uyimfihlo. Lezi zinhlobo ezihlukile zokwakheka, futhi i-proxy ephambene evulekile edlulisela emhubheni oyimfihlo ihlangabezana nesibili kuphela.

Ikheli le-backend eliyimfihlo alenzi uhlelo lube yimfihlo. Uma imephu evulekile, igama lesibili lomsingathi noma isilaleli se-IPv6 sisafinyelela i-Nextcloud efanayo, indawo yokungena ikhona noma ngabe i-backend ikuphi. Hlola wonke amagama ngaphandle ngaphambi kokumemezela inkonzo njengeyimfihlo. Irekhodi le-DNS elingekho alifani ne-port evaliwe.

Vumelana futhi ngezilaleli ezihlosiwe: abasebenzi, umuzi, inhlangano enguzakwethu noma isethi engaphansi yama-akhawunti. Impendulo inquma ukuthi isixhumanisi sokwabelana esivulekile siyisici noma ukuphikisana. Bhala lezo zilaleli kuhlelo lokufinyelela. Yilokho ukuhlolwa kwakho konke ukukhishwa okulandelayo.

Bala yonke indawo yokungena nayo yonke igama

Bhala imephu zamakheli avulekile, ama-proxy aphambene, amagama omsingathi ahlukile, izilaleli ze-IPv6 kanye nanoma yikuphi ikheli lomhubhe noma le-mesh elifinyelela inkonzo. Faka namagama axazuluka kulawo makheli, ngoba irekhodi le-DNS elikhohliwe liyindawo yokungena enelebula elinomusa.

Hlola ukucushwa kwe-proxy mayelana namakhanda adlulisiwe kanye namabhulokhi asevisa ahlukile. I-proxy engezwe kwenye inhlelo lokusebenza ingaveza i-upstream efanayo ngendlela noma ngomsingathi ongokoqobo osele. Funda ukucushwa kwangempela hhayi umdwebo ohleliwe. Kokubili kuyehluka kakhulu ngemva kokuba uhlelo lususiwe.

Bese uvimba izindawo zokungena ongazikhethanga. I-backend eyimfihlo enengaphambili evulekile akuwona umklamo we-VPN kuphela, futhi umthetho we-firewall okhuluma kuphela nge-IPv4 ushiya isilaleli se-IPv6 sivulekile. Vala zombili izinhlobo kanye nawo womabili amagama kushintsho olulodwa.

Nika iklayenti ngalinye igama elilodwa lenkonzo

Qondisa i-DNS eyimfihlo enkonzweni, dlulisa lelo gama nge-VPN futhi ukhiphe isitifiketi salo. Igama kufanele lixazuluke ngendlela eyimfihlo futhi liqinisekiswe ngaphandle kwesexwayiso. Iklayenti elifinyelela ngqo ku-IP lisadinga igama elisebenzayo.

Amaklayenti axhuma ngekheli le-IP elingahlobene akumele aphoqeleke ukulahla amaphutha esitifiketi ukuze umklamo usebenze. Igama elizinzile livimbela futhi amaklayenti okuvumelanisa ekwenzeni amarekhodi asevisa aphindwe kabili lapho ikheli lishintsha. Lowo umehluko phakathi kwenkonzo eyimfihlo ne-IP eyimfihlo.

Shiya ukuqinisekiswa kwesitifiketi kunikwe amandla. Inethiwekhi eyimfihlo yehlisa ukuchayeka kodwa ayenzi ukuxhumana kwe-TLS okungaqinisekisiwe kwamukeleka, futhi iklayenti elijwayele ukushaya indiva izexwayiso lizozishaya indiva nakwezinye izinethiwekhi.

Linganisa ukufinyelela kwenethiwekhi, hhayi i-LAN yonke

Vumela abasebenzisi ababhalisiwe ukuthi bafinyelele inkonzo ye-Nextcloud kanye nokuncika kwayo okudingekayo, futhi gcina ukuphathwa kweseva endleleni ehlukile. I-VPN evumela iklayenti ukungena kuyo yonke inethiwekhi yasekhaya noma yasehhovisi inika lelo klayenti okuningi kakhulu kunalokho okudingwa uhlelo lokusebenza.

Ukungena kwi-VPN akuthathi indawo yama-akhawunti e-Nextcloud, izimvume noma ukuqinisekiswa okwengeziwe. Uhlelo lokusebenza lusaquma ukuthi muphi umsebenzisi ongafunda ifayela liphi, futhi ungqimba lwenethiwekhi akufanele lube ukulawula kuphela.

Bhala ibanga lomthombo elivunyelwe kanye namachweba enkonzo. Umnikazi womgomo udinga umthombo obonwayo, futhi i-NAT noma i-proxy ingayibhala kabusha ngaphambi kokuba isicelo sifinyelele uhlelo lokusebenza.

Buyekeza yonke inqubo yomsebenzi engaphandle kwesiphequluli

Ukuvumelanisa kwedeskithophu nokulayisha kusuka kuselula kuvula ukuxhumana kwabo ngezikhathi zako. Zidinga indlela eyimfihlo evunyelwe lapho zixhuma, futhi zingasebenza ngendlela ehlukile lapho i-VPN ingekho: ukuzama futhi, ukumisa isikhashana noma ukubonisa iphutha. Hlola ngakunye, hhayi isiphequluli kuphela.

Amathuluzi e-WebDAV kanye namaklayenti wekhalenda noma okuxhumana kuyizingxenye ezihlukile ezinokucushwa kwazo. Iklayenti eligcina i-URL evulekile kunqolobane liyaqhubeka lizama leyo URL ngemva koshintsho lomngcele, futhi ukwehluleka kubonakala njengenkinga yohlelo lokusebenza.

Izixhumanisi ezabiwe zifanele isinqumo esicacile. Isixhumanisi asiniki umamukeli waso ukufinyelela kwi-VPN, ngakho-ke kumklamo we-VPN kuphela wangempela umamukeli wangaphandle akakwazi ukusisebenzisa ngisho isixhumanisi sikhona ngokusemthethweni. Uma ukwabelana ngaphandle kudingeka, lokho ukukhishwa okwenziwe ngamabomu okunendlela yako yokufinyelela, hhayi ukunganaki okuzotholakala kamuva.

Umfelandawonye kanye nokuxhumana kweseva-neseva kudinga ukuphathwa okufanayo. Lokho ubudlelwano bokufinyeleleka phakathi kokufakiwe, futhi ukusetshenziswa okuyimfihlo kuphela kufanele kusho ukuthi kuyasekelwa yini.

Amukela kokubili icala elivunyelwe nelichithiwe

Kusukela kuklayenti elivunyelwe, hlola isixhumi esibonakalayo sewebhu kanye nokulayisha noma ukulanda ifayela okujwayelekile. Bese uhlola iklayenti lokuvumelanisa kanye nenqubo eyodwa yomsebenzi engaphandle kwesiphequluli. Impumelelo esipheqululini kuphela akuwona ukwamukelwa.

Kusukela endleleni engavunyelwe, qinisekisa ukuthi uhlelo lokusebenza alufinyeleleki ngayo yonke indawo yokungena ohlwini. Hlola igama lomsingathi elihlukile nekheli le-IPv6, hhayi i-URL eyinhloko kuphela.

Ekugcineni, buyekeza izilungiselelo zohlelo lokusebenza okulula ukuzidida nomgomo wenethiwekhi. trusted_domains kubala amagama amukelwa yisimo; akuwona uhlu lwemvume lwama-IP eklayenti. Uma i-proxy ephambene ihlinzeka ngolwazi lwekheli, trusted_proxies kufanele isho i-proxy yangempela, futhi amakhanda adlulisiwe kufanele amukelwe kusuka kuyo kuphela.

Qhubeka nomsebenzi ojwayelekile wokuqinisa kanye noshintsho lwenethiwekhi: gcina idatha nezindatshana zangemuva zingaphandle kwezindlela zewebhu ezingahlosiwe, faka izinguquko kuhlelo lokusebenza, vikela ukufinyelela komqondisi futhi gcina ukubuyiselwa kusebenziseka. I-VPN isusa ingaphezulu elilodwa lokungena; ayenzi iklayenti elibhalisiwe lithembeke.