Ingabe iklayenti lakho le-OpenVPN kufanele lisebenzise i-nobind noma iphothi egxilile?

Amaphrofayili amabili ahluka ngomugqa owodwa aziphatha ngendlela ehlukile ngomzuzu okugalwa kuwo iklayenti lesibili kusihambisi esifanayo. Elinye liphethe nobind futhi lithatha noma iyiphi iphothi lendawo elinikezwa i-kernel; elinye ligcina u-1194, futhi isibonelo sesibili sifa nekheli elisetshenziswayo kakade. Lowo mugqa unquma ukuthi ubani okhetha iphothi lomthombo, lokho okunquma ukuthi iphrofayili ingaba khona yini kanye nanoma yini enye kumshini. Imibuzo emithathu iyakuxazulula, futhi owokuqala uphendula amaphrofayili amaningi ngaphambi kokuba ufike kweminye emibili.

Okushiwo yi-nobind ngempela

Ngokuzenzakalelayo iklayenti libopha isokhethi lendawo ngaphambi kokushaya, futhi iphothi lendawo lingu-1194 ngaphandle uma iphrofayili isho okunye. nobind isusa lokho kubekelwa, ngakho isitaki sabela iphothi elingasetshenziswanga ngesikhathi sokuxhumana. Lokhu kuyisihluzo, hhayi okuzenzakalelayo, futhi iklayenti elingenawu mugqa libamba u-1194, yingakho isibonelo sesibili esingagxiliwe sishayisana. Amaphrofayili amaningi eklayenti asatshalaliswa aphethe lo myalelo ngaleso sizathu, futhi ukuthi ifayela lesibonelo lenze okuthile akufani nokuthi umshini uwenza ngokuzenzakalelayo.

Okungashintshi wuhlangothi olude. Iseva isalalele lapho iphrofayili ithi ilalele khona, futhi iphothi lendawo ekuqondiseni kulo lisephothi lendawo. Iphothi lomthombo eliguqukayo lishintsha ikheli lokubuyela lesokhethi lakho, futhi alishintshi lutho kuleso seseva.

Futhi alifihli lutho. Ikheli lakho lomphakathi yilokho umzila okuhumusha kukho, iphakethe lisadlula kunethiwekhi yendawo, futhi noma ubani ophethe leyethiwekhi usabona ukugeleza. nobind akuyona isici sobumfihlo futhi akuyona indlela yokugwema i-firewall.

Izimo ezintathu eziquma lokho

Umbuzo owodwa unquma eminye emibili, ngakho phendula kuwo ngaphambi kokuhlela noma yini. Uma uzakwethu eshaya ngaphandle, imibuzo esele icacisa kuphela isinqumo esivele sithathiwe. Uma wamukela ukuxhumana okungenayo, akukho ukulungisa kwephothi lendawo okungenza likwazi ukufinyeleleka.

Ingabe lo uzakwethu uqala ukuxhumana? Uma eshaya ngaphandle, iphothi lomthombo eliguqukayo alinangozi futhi ngokuvamile lingcono, ngoba impendulo ibuyela emuva emseleni ofanayo. Uma elinde ukuxhumana okungenayo, iphothi eliguqukayo lenza kungafinyeleleki ngaphandle uma okuthile phambili kushicilela iphothi. Leyo mpendulo eyodwa yehlukanisa iphrofayili yeklayenti ngayinye kuyo yonke iphrofayili yeseva.

Ingabe umzila uhlunga ngephothi lomthombo? Umthetho oqinile obhalelwe iphothi elilodwa elaziwayo uphoqelela iphothi lendawo elicacile, futhi iphrofayili kufanele ibhale ukuthi iwufeza muphi umthetho. Iningi lama-nethiwekhi lihlunga ngendawo yokugcina kuphela, ngakho lesi simo sivamile kancane kunesokuqala. Lapho kusebenza khona, kudlula ukuthanda iphothi eliguqukayo.

Ingabe izibonelo eziningi zabelana ngesihambisi? Iphothi elilodwa eligxilile alikwazi ukukhonza ezimbili zazo, futhi isibonelo esiqalwe kabusha singathola u-1194 usasesimweni sokuvala. Amaphothi aguqukayo asusa lokho kushayisana ngaphandle kokushintsha okunye. Uma ungakwazi ukuphendula lokhu ngokuqiniseka, cabanga ukuthi yebo futhi uvumele i-kernel ikhethe.

Lapho iphothi eligxiliwe liyimpendulo efanele

Amanye amanethiwekhi ahlunga ngephothi lomthombo kanye nendawo yokugcina, ngakho umqhubi kungenzeka wabhala umthetho ovumela kuphela ithrafikhi evela kwiphothi elilodwa elaziwayo. Ukugxila iphothi lendawo khona kufanele, futhi iphrofayili kufanele iphathe umbhalo osho igama lomthetho ewufeza. Ukugxila ngenxa yokulingana nephothi yeseva akusona isizathu, ngoba lezi zinombolo ezimbili azihlobene. Uma ukugxila kukhona kuphela ngoba ithempulethi yayinakho, kususe.

Uma kungenjalo iphothi eligxiliwe lithenga izinkinga: amaklayenti amabili kumshini owodwa awakwazi womabili ukubamba u-1194, futhi elesibili lehluleka ngephutha elikhomba iphothi hhayi iphrofayili. Ikhonteyina eqala kabusha ngokushesha ishaya udonga olufanayo. Ukulungisa umyalelo owawusevele ukhona kumaphrofayili asatshalaliswa.

Iseva neklayenti azilingani

incwadi ye-OpenVPN 2.6 ibeka nobind eduze lport, okuyi-agumenti emugqeni owodwa: enye inketho ithi i-kernel iyakhetha, enye ithi wena uyakhetha. Iphothi lendawo eliguqukayo lisebenza kuphela kuzakwethu oshaya ngaphandle, ngoba uhlangothi oluphendulayo alukwazi ukwazi iphothi kusengaphambili. Yingakho ukukopisha iphrofayili yeklayenti eseveni kudala umlaleli okungekho muntu ongafinyelela kuye.

Kusihambisi esinezixhumanisi eziningi zenethiwekhi, ikheli liyisinqumo esihlukile kwiphothi. Ukubopha ikheli lendawo elithile nokubopha iphothi elithile kuyizilungiselelo ezimbili ezihlukile, futhi iseva enezixhumanisi ezimbili eziphezulu ivamise ukugxila zombili. Iklayenti eligxila zombili lithathe ukuqina okufanayo ngaphandle kwenzuzo.

Isifinyezo sikhuluma ngendima hhayi ngokuphepha: oshaya ngaphandle angaba novumelwano mayelana nomthombo wakhe, kanti ophendulayo akakwazi. Akukho kukhetha okushintsha lokho elinye ihlangothi elikufundayo mayelana nobuwena. Yingakho lo myalelo uvela emibonelweni yeklayenti futhi cishe awuveli kweminye yeseva.

Hlola iphothi elikhethwe i-kernel

Ngemva kokuxhuma, funda isokhethi hhayi ukucushwa, ngoba ukucushwa kubeka inhloso kanti isokhethi sibeka okwenzekile. Amaqiniso afanele ukurekhodwa iphothi lendawo, indawo yokugcina ekude, nokuthi ngabe kukhona okusalalele. Kusihambisi se-Linux womathathu abekwe kude ngumyalo owodwa.

ss -unp | grep openvpn
ss -lunp | grep openvpn
sudo lsof -nP -i | grep openvpn

Iklayenti eline- nobind libonisa iphothi lendawo eliphezulu kanye nephothi lekude elilungisiwe, okuyisimo esilindelekile. Iseva ibonisa isokhethi elalele kuphothi layo elilungisiwe, futhi uma leyo sokhethi ingekho iphrofayili mhlawumbe ayiyena umlaleli noma yehlulekile ukubopha. Uma ukugeleza kukhona kodwa amaphakethe awabuyi, qhathanisa iphothi lomthombo elikhethiwe nanoma isiphehli sephothi emzileni ngaphambi kokuhlela iphrofayili. Shintsha into eyodwa, xhuma futhi, bese ufunda isokhethi futhi.