Indlela yedivaysi ye-OpenVPN: umnikazi wokuhleleka noma umbhalo wokuqala?
Indlela yegatsha ekhululekayo ekubuyiselweni kabusha kanye ingase ilahleke ngemva kokugcinwa ku-GUI noma ukubuyekezwa kwefirmware. Qhathanisa umnikazi wokuhleleka osekelwayo nombhalo wezichibiyelo.
Ungeza indlela yegatsha, iyasebenza, bese kuthi ukubuyekezwa kwefirmware noma ukugcinwa kusuka ku-UI yewebhu kuyisuse. Izilungiso ezimbili zibonakala zifanele ngokulinganayo ngaleso sikhathi: ukubeka indlela emthonjeni wokuhleleka osekelwayo wedivaysi, noma ukuyengeza kufayela elikhiqizwe kusuka kumbhalo wokuqala. Ziziphatha ngendlela efanayo iviki futhi zihlukana ekuthuthukisweni kwesibili. Le ndatshana iqhathanisa ukuthi yikuphi okwabiwe yilowo nalowo.
Abangeneleli ababili banakho izinto ezahlukene
Umthombo wokuhleleka osekelwayo yikho konke idivaysi elikuthatha njengokufakiwe: inkambu ye-GUI, iphrofayela elethwe, umqulu obhaliwe womuntu ngamunye, isizindalwazi sezilungiselelo esifundwa iphakethe lokuphatha. Ifayela le-server.conf elikhiqiziwe liwukuphuma. Ukuhlela ukuphuma kuyasebenza kuze kube umakhi usebenza futhi, futhi lokho kwenzeka ekugcineni, ekubuyiselweni kabusha nasekuthuthukisweni.
Indlela yombhalo ixhawula lokho kuphuma ngemva kokuba umakhi eqedile. Kuyisu elisemthethweni elabhu, futhi iyisimo esingafanele sokugcina sasehhovisi legatsha, ngoba yenza indlela incike ekufanisweni kombhalo esikhundleni senkambu ebhaliwe.
| Question | Supported config source | Post-generation script |
|---|---|---|
| Survives a GUI save | Yes | Only if the save does not regenerate the file |
| Survives a package upgrade | Usually, when the field is documented | No guarantee; the wrapper can be replaced |
| Supportable by the vendor | Yes | No |
| Obvious to the next admin | Yes, it is in the UI | No, it lives in a wrapper |
Yini idivaysi eliyikhiqizayo futhi nini
Amaphakethe okuphatha ngokuvamile agcina izilungiselelo kusizindalwazi noma kusethi yezifanekiso futhi akhiqiza ukuhleleka kwe-daemon ekuqaleni. Ukugcinwa kusuka ku-UI yewebhu ngokuvamile kubhala kabusha lonke ifayela esikhundleni sokuxhawula umugqa owodwa. Uma ushintsho lwakho lwaluhlala kulelo fayela, manje selunyamalele, futhi akukho okubhala isixwayiso, ngoba ngokombono wedivaysi akukho okulahlekile.
Izembozo zokuqala zinemodi yesibili yokwehluleka. I-grep yomyalelo onokuhamba okuthile iyeka ukufana ngemva koshintsho lwesifanekiso, futhi umbhalo awenzi lutho buthule. Okubi nakakhulu, ukubuyekezwa kwefirmware kungase kushintshe isembozo ngenguqulo entsha, kuthwale isichibiyelo. Khona-ke unendlela eyayikhona unyaka yabe inyamalala ngesikhathi sokunakekela okungekho muntu owakuxhumanisa nokuhlelwa kwendlela.
Yini umnikazi osekelwayo okufanele ayiveze
Isiqalo segatsha sidinga izitatimende ezintathu, hhayi esisodwa. Iklayenti kufanele lifunde indlela, iseva kufanele yazi ukuthi iyiphi iklayenti eqinisekisiwe engumnikazi wesiqalo, futhi uhlangothi lwegatsha kufanele lubuyisele ithrafikhi ekhelini lethuneli elilinikiwe. Ngamagama e-OpenVPN lokho kusho i-route eqhutshwayo, i-iroute ehambisanayo eboshelwe kuklayenti, nendlela yokubuya ngaphesheya.
Yilapha lapho ama-UI edivaysi edukisayo khona. Ibhokisi lokumaka elinelebula elithi “vumela amaklayenti ukuthi afinyelele i-LAN yeseva” lichaza ithrafikhi ebheke kunethiwekhi yeseva uqobo. Igatsha lakho liwukuqondana okuphambene: inethiwekhi engemuva kweklayenti elilodwa, efinyeleleka ohlangothini lweseva. Lelo lebula alisho ukusekelwa kwalokho, futhi umyalelo ovumelekile efayeleni awusona isithembiso sokuthi iphakethe lizowugcina.
Lapho kungekho ukulawula okusekelwayo
Ngezinye izikhathi inguqulo efakiwe ayikwazi ngempela ukuveza indlela eqondene nozakwabo. Khona-ke izinketho eziqotho isango lesibili olilawulayo, noma imodi yesizinda-kuya-sizinda esekelwayo kuzo zombili iziphetho. Zombili iziphetho kufanele zikhulume lokho. Ikhasi lomkhiqizo elithi isizinda-kuya-sizinda alenzi iphrofayela ye-OpenVPN engahleliwe ishintsheke nethuneli yelinye iphrothokholi, futhi ukuphoqa lowo mbhangqwana ngokuvamile kukhiqiza ithuneli elixhumene nguhafu elibonakala lihle ekhasini lesimo.
Khetha inketho ongayichaza emshweni owodwa komunye ozothola inethiwekhi njengefa. Uma impendulo idinga ukusho umzila wombhalo nendlela yombhalo, umklamo usuvele untengantengile.
Yenza inhloso ihlolwe
Bhala isivumelwano ngaphandle kwedivaysi: ubunikazi beklayenti obusebenzayo, isiqalo, isango lokubuya, nenkambu esekelwayo enikeza ngayinye yazo. Khipha ukuhleleka ngendlela esekelwayo ukuze ukwakhiwa kabusha kube nereferensi, futhi uqinisekise insizakalo ngemva kokuxhuma kabusha, ukuqala kabusha nokuthuthukisa, hhayi ngemva koshintsho kuphela.
Uma okuthile kwephuka, qhathanisa umphumela okhiqiziwe naleyo rekhodi, esikhundleni sokubuyisela umugqa ongachazwanga bese uthemba.ireferensi ye-OpenVPN 2.6 iyindawo yokuqinisekisa ukuthi i-route ne-iroute zisebenzisana kanjani ngaphambi kokuba uphikisane ne-UI.
Uhlu lokuhlola loshintsho olulandelayo: shono umnikazi, shono isivumelwano sezingxenye ezintathu, khipha inhloso, futhi uphinde uhlole ngemva kwezigameko zomjikelezo wempilo wedivaysi uqobo, hhayi ngemva kokuhlela kwakho.