OpenVPN 3 Linux: funda iphutha le-D-Bus ngaphambi kokuhlehlisa
Izinsizakalo ezinhlanu, i-frontend eyodwa. Hlobanisa iphutha le-D-Bus nengxenye eyenqabile, hlola ukuthi ikhona yini isikhathi, bese ulungisa kuleyo mngcele.
Ukwehluleka kwe-OpenVPN 3 Linux kufika njengephutha lendlela ye-D-Bus elinegama ongalazi linanyathiselwe, futhi isilingo siwukwehlisa iphakethe bese uthemba. Iklayenti akulona uhlelo olulodwa: i-frontend yomugqa womyalo ikhuluma ngebhasi nezinsizakalo eziphethe amaphrofayili, izikhathi, injini ye-VPN kanye nezinguquko zenethiwekhi ezinamalungelo. Ukunquma ukuthi iyiphi kulezi zinhlanu ephethe ucingo olwehlulayo ingxenye enkulu yokuxilonga, futhi kubiza umyalo owodwa esikhundleni sokuhlehlisa. Okulandelayo yileso sinqumo, ngokulandelana okwehluka ngakho ngokuvamile.
Abanikazi abahlanu ngemuva komyalo owodwa
Izinqubo ezinhlanu zibalulekile, futhi ngayinye inegama layo lebhasi: i-frontend eyamukela umyalo wakho, umphathi wokucushwa ogcina amaphrofayili nenqubomgomo yawo yokufinyelela, umphathi wezikhathi ophethe ubude besikhathi, i-backend eqhuba ukuxhumana nge-OpenVPN 3 Core Engine, kanye nensizakalo yokucushwa kwenethiwekhi efaka isixhumi, imizila nezilungiselelo ze-DNS. Iphutha elibiza into yokucushwa ngakho akulona iphutha le-backend, futhi i-backend engaqali akulona ukwehluleka kokuqinisekisa. Ukuhlukanisa umyalezo kwelinye lalawo migqa kufanele kwenzeke ngaphambi kokuba kushintshwe noma yini, ngoba isinyathelo ngasinye esilandelayo sincike ekutheni uwuphi umugqa oyiqiniso. Ukuqagela umugqa yindlela okuguqulwa ngayo ukulungiswa okufushane kube ubusuku bokusebenza ngamaphakethe.
Buza ibhasi lesistimu ukuthi yiziphi izinsizakalo ezikhona ngaphambi kokubuza enye into, bese uqinisekisa ukuthi izingxenye ezifakiwe zivumelana ngenguqulo. I-OpenVPN 3 Linux ibhalisa lezo zinsizakalo njengamayunithi esistimu, ngakho ibhasi okufanele libuzwe yilelo lesistimu, umbuzo wenguqulo udinga igunya lokuphatha, futhi uhlu olwenziwe nge---user lufunda isikhathi sakho sokungena, lapho amayunithi angaveli khona. Izinsizakalo ziyasebenza uma ziceliwe futhi ezinye ziyaphuma uma zingasebenzi, ngakho insizakalo engekho ngaphambi kwesicelo sakho sokuqala ayikaze ibuzwe lutho. Imiyalo emithathu engezansi iphendula ngokuba khona, inguqulo nesimo seyunithi ngaphandle kokuvula isikhathi se-VPN.
sudo busctl list | grep -i openvpn
sudo openvpn3-admin version --services
systemctl list-units 'openvpn3*'Yini uhlu ngalunye olufakazela ngempela
Ukubuka kweklayenti ngokwako kuwubufakazi obushibhile kakhulu obutholakalayo, futhi ngakunye kwako kufakazela okuncane kunalokho okubonakala kukho. Iphrofayili ohlwini lokucushwa ikhombisa ukuthi iphrofayili ingenisiwe futhi ayisho lutho mayelana nokuthi ukhona yini ovunyelwe ukuxhumana nayo. Isikhathi ohlwini lwezikhathi sikhombisa ukuthi into yesikhathi ikhona futhi ayisho lutho mayelana nokuthi ukuqinisekiswa kwakude kuphelile yini.
openvpn3 configs-list
openvpn3 sessions-listImigwaqo yezinto kuleyo miphumela ikhomba izinto eziphathwayo ebhasini hhayi amafayela, ngakho ayikwazi ukuhlelwa, futhi umgwaqo oqoshwe ngaphambili uyaphelelwa isikhathi ngomzuzu lapho leso sikhathi sinqamuka. Ukusebenzisa kabusha umgwaqo ovela kumanothi akho kukhiqiza amaphutha "no such object" angenawo umXhumanisi ne-VPN. Ithebula lesigaba esingezansi lihlukanisa lokho okusungulwa isinyathelo ngasinye sokuxhumana nokho okushiye kuvulekile, futhi lowo ngumehluko isinqumo sokuhlehlisa esincike kuwo. Funda umugqa ohambisana nobufakazi bakho, bese ufunda kabusha umbhalo wephutha.
| Stage | What exists | What proves it | What it does not prove |
|---|---|---|---|
| Profile imported | A configuration object held by the configuration manager | The profile is listed by the client | That the profile owner permits a connection |
| Session requested | A session object held by the session manager | The session appears in the session list | That the remote side accepted the credentials |
| Connect dispatched | An asynchronous attempt on the VPN backend | Status changes arrive for that session | That an interface was configured |
| Tunnel configured | An interface, routes and DNS settings | The network service reports success and routes appear | That traffic reaches the peer |
Ucingo lokuxhuma lubuya ngaphambi kokuba ithaneli likhona
Ucingo lokuxhuma lukunika isikhathi okufanele usilande bese lubuya, yingakho ucingo olubonakala luphumelele olulandelwa ukuthula kuyisimo esijwayelekile esiphakathi hhayi ukungqubuzana. I-frontend kusamele ilandele izinguquko zesimo futhi iphendule noma yisiphi isicelo sokuxhumana. Iphrofayili edinga ubufakazi futhi engatholi mpendulo ilinda esimeni esibonakala sifana ncamashi ne-backend elengayo. Leso simo sokulinda sifanele sibonwe, ngoba sithumela abantu engxenyeni engalungile.
Ngenkathi umzamo uqhubeka, landela uhlu lwezikhathi kanye nelogi ye-frontend ngokwayo yaleyondlela yephrofayili. Isikhathi esingashiyi isimo saso sokuqala sibiza ingxenye eyama, futhi ilogi ivamise ukuyibiza emigqeni yokuqala embalwa. Gcina igama lephrofayili eduze, ngoba umyalo welogi uthatha iphrofayili hhayi umgwaqo wesikhathi, okuyisinye isizathu sokufunda kabusha uhlu esikhundleni sokusebenzisa kabusha umgwaqo.
openvpn3 sessions-list
openvpn3 log --config <profile> --level 6Ukufunda ilogi yengxenye eyodwa ngaphandle kokuvula isikhathi
Uma i-frontend ingabiki lutho olusizayo, iya engxenyeni eyabhala iphutha esikhundleni sokuqala okunye ukuxhumana. Nge-logger ye-systemd-journald ecushiwe, umbono wejenali obekiwe womphathi ufunda izehlakalo zengxenye eyodwa ngaphandle kokuthinta inqubomgomo yebhasi noma ukuvula isikhathi, okuyinto ebalulekile ngoba ukuxilonga okushintsha isistimu ekulinganisayo kufakazela okuncane kakhulu. Hlunga ngeyunithi hhayi ngethegi ye-syslog: amayunithi wensizakalo ngawodwana awakuqinisekisi isihlonzi esabiwe, ngakho umbuzo wethegi ungabuya nekhasi elingenalutho ngenkathi iyunithi ngokwayo ibhale iphutha.
Qopha izinkambu ezine ngaphambi kokucela usizo kothile: igama eliphelele lephutha, insizakalo nento ethintekayo, isigxivizo sesikhathi, kanye nezinguqulo zamaphakethe afakiwe. Yilokho okudingwa umgcini, futhi akukho kukho okudinga ukunamathisela iphrofayili noma ubufakazi kwithikithi. Ukwandisa inqubomgomo yokufinyelela ebhasini ukuze kuthuliswe iphutha akukona ukuxilonga, kususa umngcele obubiza ingxenye kuwe. Okuqukethwe okuyimfihlo kwephrofayili kuhlala ngaphandle kwemibiko eyabiwe ngesizathu esifanayo nobufakazi.
journalctl -u 'openvpn3-service-*' -n 50 --no-pager
openvpn3-admin journal --service <name>Ukulungisa umngcele owenqabile
Umgqa ngamunye wemephu unokulungiswa kwawo, futhi imigqa ayishintshani. Umsebenzi owenqatshiwe kwiphrofayili umbuzo mayelana nenqubomgomo nobunikazi, kanti i-backend engasebenzi umbuzo mayelana nezinsizakalo nokupakishwa. Iseva enqaba ukuqinisekisa akukho kukho kokubili, ngakho ukushintsha iphasiwedi okuphindaphindiwe akukwazi ukulungisa inkinga yokusebenza yasendaweni. Ukukhetha ukulungiswa okungalungile yindlela inkinga yenqubomgomo eba ukufakwa kabusha ngayo.
Ngemuva koshintsho lwephakethe, qinisekisa ukufakwa okuhambisanayo nokusekelwayo esikhundleni sokukopisha ibhinari endala endaweni yayo. Ukuhlehlisa okulawulwayo kuyimpendulo efanele ekuhlehleni okuqinisekisiwe, inqobo nje uma amaphakethe ehlala ehambisana nokuthi ikhona indlela yokubuyela ekunakekelweni okusekelwayo. Sungula leyo ndlela ngaphambi kokuba insizakalo iyeke ukuqala, hhayi ngemuva.
Enye inkundla ingabelana ngelabhulali eyodwa yomsuka we-VPN ngaphandle kokwabelana ngezinsizakalo zebhasi ze-Linux, ngakho ukwehluleka okubukeka kufana ku-Windows akusho lutho ngalokhu. Uhlolojikelele lwe-D-Bus lubhala imigwaqo yezinto evezwayo yokucushwa nezikhathi, futhi leyo ingxenye yesakhiwo okuncike kuyo lokhu kuxilonga. Yifunde kanye, futhi iphutha elilandelayo lizofika nengxenye eseyinanyathiselwe kuyo.