Kungani iklayenti lakho le-OpenVPN lihlala phansi ngemuva kwesikhathi esisodwa sokuphela

UMsombuluko ekuseni: umhubhe owavuka ngoLwesihlanu awusekho, i-interface isasohlwini, futhi akukho okubhaliwe kujenali okuthi othile ukubonile. Umsingathi uku-inthanethi, idashibhodi iluhlaza, futhi konke elikuthumele ngempelasonto kuphume nge-interface ebonakalayo. Lapha kukhona izinqumo ezimbili ezizimele ezingekho: esinye mayelana nokuthi ingabe inqubo yeklayenti iyasinda ekwehlulekeni kwesikhashana, esinye mayelana nokuthi ingabe okuthile okuphezulu kwayo iqala kabusha inqubo ngemuva kokuba iphumile. Ukulungisa okukodwa kuphela kushiya enye intuba ivulekile.

Qala ngalokho okwenziwe yiyunithi ngempela, hhayi ngalokho okushiwo ukuqapha. systemctl status openvpn-client@office kanye ne-journalctl -u openvpn-client@office -n 50 kukhombisa isizathu sokuphuma kanye nomugqa wokugcina owabhalwa yiklayenti ngaphambi kokuhamba.

Inqubo yaphuma ngaphambi kokuba othile abone

Iklayenti elinyamalala ngaphandle kwephutha ngokuvamile liphume ngamabomu. Iphrofayela inquma lokho kuziphatha, hhayi umphathi wesevisi: ping-exit iphetha inqubo ngokushesha lapho uhlangothi olulodwa luyeka ukuphendula, kuyilapho ping-restart igcina inqubo futhi ixhuma kabusha ngaphakathi kwayo. Imikhawulo yeseshini kanye nezikhathi zokungasebenzi ziletha isithombe esifanayo ngaphandle: akukho mhubhe futhi akukho sexesho.

Iziqondiso ezimbili ze-ping azikwazi ukuba ndawonye kuphrofayela eyodwa, ngakho khetha esisodwa futhi urekhode ukukhetha. Bheka nesiphakamiso seseva, ngoba i-ping-exit yaso iqoboza iseshini noma ngabe iklayenti licelani, futhi ilogi yeseva kuphela ebhala ukuthi ubani uthathe leso sinqumo.

Ukukhetha phakathi kwe-ping-exit ne-ping-restart

Khetha i-ping-restart kukhompyutha ephathwayo noma isayithi ekude okufanele izelaphe yona, futhi gcina i-ping-exit ezimweni lapho umhubhe ofile kufanele umise inqubo ukuze okunye kukwazi ukusabela kuwo. Izinombolo azibalulekile njengobudlelwano: i-ping 10 ne-ping-restart 60 kusho imizuzwana eyishumi yokuthula ngaphambi kohlolo namashumi ayisithupha ngaphambi kokuqalisa kabusha, okuyinto enolaka kuxhumano lweselula olulahlekayo futhi inengqondo kuxhumano lwentambo. Bhala isizathu eceleni komugqa, ngaphandle kwalokho umfundi olandelayo uzocabanga ukuthi amanani ezenzakalelayo abenhloso.

Bese uqinisekisa ukuthi inqubo ngempela yiyo ephumile. Iyunithi ebika ukuthi iyasebenza ngesikhathi umhubhe ufile ingenye inkinga, okukhulunywa ngayo ngezansi.

Ukuqapha okuqalisa kabusha iyunithi ngempela

Kumsingathi we-systemd, ushintsho oluhlala njalo oluncane kakhulu yifayela elilodwa le-drop-in: i-Restart=on-failure ne-RestartSec=10 kuyi-/etc/systemd/system/[email protected]/restart.conf. I-drop-in ifundwa kuphela lapho i-systemd ilayisha kabusha izincazelo zayo, ngakho gijima i-systemctl daemon-reload ngemuva kwalokho. Qinisekisa nge-systemctl show -p Restart -p ExecMainStatus openvpn-client@office esikhundleni sokucabanga ukuthi inani lifikile. Isibonelo esisemagameni efayela kufanele kube yiphrofayela iyunithi eyilayisha ngempela, ngakho ifayela elibhalelwe i-office alenzi lutho ku-openvpn-client@home.

I-on-failure ayinaki icala elilodwa: ukuphuma okuhlanzekile okunesimo esinguziro. Ezinye izindlela zokuqaqa ziphetha kanjalo, ngakho funda isimo esirekhodiwe esikhundleni sokukholwa amagama ekhasini lencwadi. Uma iklayenti lakho linikezela nguziro, udinga i-Restart=always, futhi izindleko ziwukuthi iphrofayela ephukile ngempela iphindela emuva kaningi kuze kusebenze umkhawulo wesilinganiso sokuqalisa futhi kugcwale ijenali.

I-Restart=always iyasebenza futhi ngemuva kokuma ngamabomu. Sebenzisa i-systemctl stop ekulungiseni, futhi ufake isivikelo kuyunithi uma kufanele ihlale phansi ngesikhathi usebenza.

Bamba ukuvuza ngesikhathi umhubhe uphansi

Ukuqapha kubuyisela umhubhe; akukuvimbeli ukuthi ithrafikhi iphume ngesikhathi umhubhe ungekho. I-persist-tun igcina idivaysi kanye nemizila yayo phakathi kokuxhuma kabusha, okuyinto elula futhi evula iwindi. Idivaysi iyasinda, imizila isabhekisa kuyo, futhi amaphakethe aphuma ngaphandle ngokungavikelekile nangaphandle kukambiko. Lokho kuwukukhetha komgomo, hhayi inani lezenzakalelo elingathathi hlangothi.

Lapho umsingathi ungavumelekile ukukhipha amaphakethe angavikelekile nhlobo, ukhonkolo kuphela ongaqinisekisa lokho. Umthetho wokuphuma ovumela i-interface yomhubhe kanye nekheli leseva ye-VPN ngesikhathi ulahla konke okunye usasebenza ngemuva kokufa kweklayenti, futhi akukho lutho ekumisweni kweklayenti uqobo okungahlunga ithrafikhi engayithwali iklayenti.

Kuhlole ngokumisa iklayenti ngamabomu. Gijima i-systemctl stop openvpn-client@office, bese kuba i-curl -m 5 https://example.com, okufanele yehluleke esikhundleni sokuphumelela kuxhumano olubonakalayo. Impumelelo isho ukuthi umthetho wokhonkolo awukho noma uvumela kakhulu.

Xhuma futhi, qinisekisa ukuthi umhubhe uthwala ithrafikhi futhi, bese kuba kuphela lapho wengeza ukuhlola ekuqapheni. Ukubuza i-ip addr kusuka ku-cron kudivaysi ye-tun ukuqapha okuvame ukwehluleka, ngoba nge-persist-tun idivaysi iphila isikhathi eside kunoseshini futhi ukuhlola kubika impilo kuyilapho kungathwalwa lutho.