Ubani okufanele abe ngumnikazi wemizila ne-DNS lapho i-openfortivpn ixhuma?

Izigaba ezine ziyahlangana phezu komunye kuseshini ye-openfortivpn esebenzayo. Iklayenti liziqinisekisa esangweni futhi liqale ukuxhumana kwe-TLS, bese lisebenzisa i-PPP ngaphakathi kwalokho kuxhumana, bese lithola ikheli nolwazi lwe-DNS, futhi ekugcineni lisebenzise imizila ye-host nezilungiselelo zesixazululi. Isigaba ngasinye singaba saphila kuyilapho esilandelayo singekho, futhi yingakho “kuxhunyiwe” kuyigama elishelelayo kangaka emicabangweni yosekelo.

Isinqumo esisusa ingxenye enkulu yokudideka ukuthi ubani ongumnikazi wesigaba sokugcina. Kungaba iklayenti le-VPN lisebenzisa ngokwalo izinguquko ze-host, noma enye ingxenye yenza lokho, futhi ukuhlanganisa kokubili phakathi nendlela yikho okwenza imizila namafayela esixazululi agcine echaza amaseshini ahlukene.

Izigaba ezine ezibukeka njengokuxhumana okukodwa

Isigaba sokuqala ukwamukelwa. isizinda sokuqinisekisa esinegama noma ikhodi esetshenziswa kanye, futhi lithola amapharamitha alidingayo ukuze liqhubeke. Lapho iklayenti liphrinta ukuthi lixhume esangweni, lokho kusho ukuthi ukuthutha kwe-TLS kuyasebenza. Akusho ukuthi i-PPP ixoxile, futhi ngokuqinisekile akusho ukuthi uhlelo lwangaphakathi luyafinyeleleka.

Isigaba sesibili isixhumanisi se-PPP. Iklayenti liqala inqubo ye-PPP ngokumelene nedivayisi yomhubhe, futhi izinhlangothi zombili zixoxa izinketho zesixhumanisi namakheli. Kuphela emva kwalokho i-host yazi ukuthi iseshini isebenzisa amaphi amakheli endawo nakude, futhi kuphela ngaleso sikhathi umzila okhomba emhubheni ungaba nencazelo.

Isigaba sesithathu ukusebenzisa lolo lwazi ku-host, futhi yilapha lapho ubunikazi bubalulekile khona. Iklayenti lingengeza imizila futhi libhale kabusha ukulungiselelwa kwesixazululi, noma lingatshelwa ukuthi lihlehle futhi lishiye kokubili kunoma yini enye ephethe inethiwekhi kuleyo mashini. README yephrojekthi ichaza lezi njengezibopho ezihlukene esikhundleni sokuziphatha okukodwa okuzenzakalelayo.

Ubani ohlela ithebula lomzila

Ngokuzenzakalela iklayenti lingumnikazi. Lingeza umzila obheke esangweni ngokusebenzisa isixhumanisi somzimba, umzila womlingani womhubhe, kanye nemizila yamanethiwekhi iseshini evunyelwe ukuwasebenzisa, bese iyisusa lapho inqubo iphuma. Lokho kuzenzakalela kulula kukhompyutha ephathwayo enomphathi oyedwa wenethiwekhi futhi ingekho enye isofthiwe ye-VPN.

Khetha ukudluliswa kuphela lapho okunye kungumnikazi wangempela wokuhlela imizila. Ukuhlanganiswa komphathi wenethiwekhi, indawo yamagama yenethiwekhi yekhonteyina, noma i-ejenti yokuhlela imizila yesayithi lonke kungenzeka isivele yazi indlela yokufaka nokuhlanza iziqalo ezifanayo. Ukudlulisa inketho ye-no-routes khona kuvimbela ababhali ababili ukuthi balwe ngethebula elifanayo, okuwumjaho ovela njengokulahleka ngezikhathi zamanye amazwe kwesabnethi eyodwa esikhundleni sokwehluleka okuhlanzekile.

Ukuhlangana kuyisizathu sesibili sokudlulisa. Uma imizila ephushwayo ihlanganisa isiqalo esisivele sisetshenziswa inethiwekhi yendawo, iklayenti alikwazi ukuxazulula ukungqubuzana endaweni yakho. Othile kufanele anqume ukuthi leso siqalo sifinyeleleka ngomhubhe, ngokuxhumana komzimba, noma ngomzila oqondile kakhulu, futhi leso sinqumo singesalowo ongumnikazi we-topology.

Ukuhlanza kungesithathu. Iklayenti eliphahlazekayo ngaphambi kokususa imizila yalo lishiya umgodi omnyama ophila isikhathi eside kuneseshini, futhi ukuxhumana okulandelayo kungangeza ikhophi phezu kwawo. Lowo ongumnikazi wokuhlela imizila ungowokuhlola nokuthi okufakiwe endala akusekho. Yenza lokho kuhlola kube yingxenye yendlela yokuqalisa, hhayi isinyathelo sokuhlanza esingakhethwa.

Ubani ongumnikazi we-DNS nefayela lesixazululi

I-DNS iyisinqumo esifanayo esinemiphetho ebukhali kakhulu. Iklayenti lingamukela amaseva e-DNS abikwa isango noma umlingani we-PPP futhi liwabhale ekulungiselelweni kwesixazululi se-host. Kumashini elula yilokho kanye okukufunayo, ngoba amagama angaphakathi axazululwa kuphela uma umhubhe usebenza.

Kumhost ye-Linux yesimanje isixazululi singaphathwa i-stub yendawo, futhi ukubhala kabusha ifayela lesixazululi ngemuva kwaleyo stub kukhiqiza ukulungiselelwa okubukeka kulungile futhi okuziphatha ngendlela engahambelani. Uma i-host isivele igijima umphathi wesixazululi, yiyeke ibe ngumnikazi we-DNS futhi uyiphe amaseva omhubhe ngokusebenzisa isixhumanisi sayo esisekelwayo. Inketho ye-no-dns yeklayenti iyisinqumo esilungile lapho, hhayi indlela yokugwema.

I-DNS ehlukanisiwe iyimbuzo ehlukile kunokuthi ubani obhala ifayela. Ukuthumela yonke imibuzo ngomhubhe kulula futhi kuhamba kancane; ukuthumela kuphela izindawo zangaphakathi ngawo kudinga ukulungiselelwa kwesizinda ngasinye ezingekho kumaklayenti amaningi alula. Nquma ukuziphatha okudingwa i-host ngaphambi kokuvula izinguquko zesixazululi seklayenti. Isinqumo esingalungile lapha sibukeka njengokuphazamiseka kokuxazululwa kwamagama ngisho umhubhe ngokwawo unokulunga.

Igunya, ukulungela, nokudluliswa

Ukwakha idivayisi yomhubhe nokuhlela imizila ye-host noma isimo sesixazululi kudinga igunya lenethiwekhi eliphakamile. Iphutha elivamile ukuphetha ngokuthi ngakho konke kufanele kusebenze njenge-root, kubandakanya isiphequluli noma uhlelo olusebenzisa umhubhe. Gcina ingxenye enegunya incane: iklayenti nefayela lalo lokulungiselela, okuwumnikazi womphathi, kuyilapho izinhlelo zomsebenzisi zigcina i-akhawunti yazo evamile.

Ukulungela kufanele kuchazwe kumthengi ngamunye. Umbheki angathatha insizakalo njengeqaliwe lapho inqubo yeklayenti igijima futhi idivayisi yomhubhe ikhona. Umsebenzi wokulondoloza kufanele uthathile i-VPN njengekhona ukusetshenziswa kuphela lapho indawo yayo yokugcina iphendula ngomhubhe. Lezi izivivinyo ezihlukene, futhi ukusebenzisa okubuthaka kunhloso eqinile kukhiqiza imisebenzi eqala ngokushesha kakhulu futhi yehluleka ngezikhathi. Bhala incazelo ekhethiwe, ngoba umbheki nomsebenzi abangavumelani ngokulungela bayithikithi losekelo elilindele ukwenzeka.

Hlola isivumelwano ngokubona okune: isigaba sesango siyaphela, i-PPP yabela amakheli, umzila ohlosiwe ukhona, futhi isicelo kumhost wangaphakathi siyaphumelela. Bese umisa iklayenti futhi uqinisekise ukuthi ngakunye kwalokho kususiwe noma kubuyiselwe. Uma i-host isaxazulula amagama angaphakathi noma isaphethe umzila ngemuva kokuvalwa komhubhe, ukudluliswa kobunikazi akuphelele.