I-OpenVPN Connect yenqaba i-fragment: lungisa umthombo wephrofayela

Iphutha lifika ngesikhathi sokungenisa, ngaphambi kwanoma yikuphi ukuxoxisana, futhi lisho isiyalelo ikliyenti elenqabayo ukusamukela. I-OpenVPN Connect isebenzisa ikhodi yelabhulali ye-OpenVPN 3, engayisebenzisi nhlobo inketho ye-fragment yekliyenti yomphakathi. Lokho kukwenza kube umbuzo wokuhambisana phakathi kweziphetho ezimbili, hhayi umbuzo wokulungisa usayizi wephakethe.

Ukususa umugqa kukhiqiza ifayela ikliyenti elizolihlaziya, neseva okungenzeka isalindele ifomethi okuchazwe yilowo mugqa. Kuhamba lokhu kusuka kusikrini sokungenisa ukuya ngaphandle ngaphambi kokushintsha noma yini.

Lapho ukungenisa kuma khona

Isingenisi sihlaziya iziyalelo ngaphambi kokuxhumana neseva, ngakho ukwenqaba lapho kuyisinqumo sasendaweni mayelana ne-syntax hhayi umphumela wenethiwekhi, futhi uhlu lweziyalelo ezingasekelwa lwe-OpenVPN lubhala umkhawulo ofanayo. Lokho kuchaza indlela ifayela elilodwa elingasebenza ngayo kukliyenti yomphakathi futhi lihluleke ku-Connect kumshini ofanayo. Funda igama lesiyalelo kumyalezo futhi gcina ifayela lokuqala, ngoba lowo mbhalo uwubufakazi kuphela balokho ikliyenti ekuphikisile. Iphutha lokungenisa nesikhathi sokuphela kokuxhumana kuvela ezigabeni ezihlukene futhi kufanele izimpendulo ezihlukene.

Uma umyalezo usho i-fragment, umbuzo osele ukuthi ingabe neseva incike kuyo. Phendula lokho ngaphambi kokuthinta iphrofayela oyinikiwe.

Yini i-fragment eyishintshayo kukliyenti yomphakathi

Kukliyenti yomphakathi, isiyalelo sivula ukuhlukaniswa kwedathagramu kwe-OpenVPN ngokwayo, okuhlukanisa imithwalo ngaphambi kokuba ifinyelele isendlalelo se-IP sangaphandle. Ikhona ukuze ibekezelele izindlela ezilahla amadathagramu amakhulu e-UDP futhi igcine ithuneli isebenzeka lapho ukutholakala kwe-MTU yendlela kungathenjwa khona. Akusilo igama elifanayo lokwehlisa i-MTU yesixhumi, futhi akusilo ukuhlukaniswa kwezinga le-IP okwenziwa uhlelo lokusebenza. Ikliyenti engenayo le ndlela ayikwazi ukuyithola ngokwehlisa inombolo.

Njengoba isilungiselelo sihlala nakukhoqizo yeseva, ukusikhipha kukhophi yakho kushintsha uhlangothi lwakho kuphela. Iseva ingase isalindele umlingani oqonda inketho, futhi iphrofayela ehlaziywayo ayikho okwamanje isikhathi esisungulwayo. Lawa maqiniso amabili achaza isimo esiphakathi esididayo lapho ifayela elishintshiwe lixhuma bese lima khona.

Cela iphrofayela eyakhelwe le kliyenti

Indlela ehlanzekile iphrofayela yesibili ebhalwe ku-OpenVPN Connect, uma isevisi ishicilela eyodwa. Abahlinzeki abaningi benza lokho, futhi umehluko uvamise ukuba kuziyalelo abazishiyayo, hhayi endaweni yokugcina abayikhombisayo. Yicela ngegama lekliyenti esikhundleni sokuchaza iphutha, ngoba ideski losizo lingakwazi ukuhlobanisa iphrofayela nekliyenti ngokushesha kakhulu kunokuxilonga ifayela elihluziwe.

Uma uwena ophethe iseva, isinqumo sibanzi kunekliyenti yakho. Ukucisha ukuhlukaniswa kuthinta wonke umlingani, kuhlanganise nalabo ababekudinga ukuze bahlale bexhumekile endleleni embi. Ukushicilela isilaleli sesibili noma ukhoqizo yesibili yekliyenti ethintekile kugcina abasebenzisi abakhona besebenza ngenkathi ikliyenti entsha ithola into engayihlaziya. Noma yikuphi okukhethayo, bhala phansi ukuthi yikuphi ukhoqizo okusebenzela yiphi ikliyenti, ngoba lokho kuhlangana kuyanyamalala ngokushesha uma kungenjalo.

Qinisekisa ukuxhumana, hhayi ukungenisa kuphela

Ukungenisa okuphumelelayo kufakazela kuphela ukuthi isihlaziyi samukele ifayela. Sungula ithuneli ngekliyenti yomphakathi kumshini owulawulayo, usebenzisa iphrofayela efanayo, futhi funda ilogi mayelana nokuxoxisana kwezokuthutha nokubethela. Imiyalo engezansi yenza lokho ngaphandle kokuthi uhlelo lwedesktop lube sendleleni.

openvpn --config client.ovpn --verb 3
ip -4 addr show tun0
curl -sS --interface tun0 -o /dev/null -w '%{http_code}\n' --max-time 8 https://example.com/

Ilogi ibonisa lapho umzamo wama khona: iphutha lenketho livela ngaphambi kwanoma yikuphi ukushintshana kwe-TLS, kuyilapho ukwehluleka kokuqinisekisa noma kokubethela kuvela ngemva kwalokho. Uma ithuneli likhuphuka futhi isicelo sihluleka, inkinga isisukile ekuhambisaneni yaya ekuhambiseni imizila. Qhathanisa lokho nokuziphatha kwe-Connect kunethiwekhi efanayo ngaphambi kokuphetha noma yini ngeseva.

Gcina iphrofayela esebenzayo kanye nenguqulo yekliyenti eduze kwenothi. Inguqulo yekliyenti yesikhathi esizayo ingengeza ukusekelwa kwesiyalelo, futhi lokho kushintsha impendulo ngaphandle kokuthi kube umuntu othinta iseva.