I-OpenVPN isaqhubeka nokuthumela imizila emidala? Hlola ukuthi yini eyilayishile

Wengeza umzila, uqala kabusha insizakalo, uxhuma futhi, futhi ithebula leklayenti libukeka njengangaphambili. Izinto ezimbili ezihlukene zingaba yiqiniso: iseva ayizange ilayishe ushintsho lwakho, noma iklayenti ayizange ifake lokho ekutholile. Azikho into ezivumelanayo ngaphandle kophawu, ngakho isinyathelo sokuqala ukuthola ukuthi yikuphi kwalaba ababili onawo.

Ukuqhathanisa ngezansi kusuka enqubeni kuya ngaphandle, ngoba inqubo iyona kuphela enegunya lokuthi iyiphi ifayela esebenzayo.

Ifayela olilungisile kanye nefayela efundwa inqubo

Qala ku-unit kanye nomugqa womyalo ekhiqizile. Kusihambisi se-systemd, i-systemctl cat openvpn@server iphrinta umugqa we-ExecStart, futhi i-instance unit ivamise ukuthola umzila wayo wokucushwa egameni le-instance, ngakho i-daemon eqalwe njenge-openvpn@office ifunda ifayela elihlukile kunalelo elaqalwa njenge-openvpn@server. Qhathanisa lokho ne-argv yenqubo esebenzayo. Ithuluzi lokuphatha ukucushwa lengeza enye indlela yokulahlekelwa ushintsho: lingabhala ifayela elifanele endaweni i-unit engakaze iyikhulume, bese ukuthunyelwa okuphumelelayo kubonakala kungafakwanga lutho.

Izimpawu zesikhathi zinquma lokhu ngokushesha: uma ifayela lisha kunesikhathi sokuqala kwenqubo, inqubo ayikwazanga ukulifunda. I-firmware yerutha yengeza ikesi lesithathu, ngoba amamodeli amaningi agcina izilungiselelo zawo ku-flash futhi akha kabusha ukucushwa ngesikhathi sokuqalisa, okwenza ukuhlela ifayela kudiski kube yisendlalelo esingalungile ngokuphelele.

Lokho iseva ekuthumelayo nalokho iklayenti ekufakayo

Umzila othunyelwe kufanele weqe izihlungi ezimbili. Kuseva kufanele ube kukucushwa okulayishiwe, hhayi kubhloku elibhalwe amazwana noma kufayela elikhethekile leklayenti elinegama elingafani. Kuklayenti i-pull kufanele ivuliwe futhi akukho pull-filter okufanele ilahle leyo nketho. Xhuma nge-verbosity 4 futhi ufunde izinketho ezithunyelwe ezibikwa iklayenti: uma umzila uvela kulolo hlu, iseva yenze umsebenzi wayo futhi iklayenti iyona ekhetha ukungawufaki.

Amafayela akhethekile eklayenti ayisizathu esivamile sokudideka. Ifayela eliqanjwe nge-common name yesitifiketi lithumela izinketho kulelo klayenti kuphela, futhi umehluko wohlamvu olulodwa umisa ukuthumela buthule, kungekho phutha nhlangothi zombili. Iseva ibhala i-common name eyayibona ngesikhathi sokuxhuma, ngakho qhathanisa lelo nani negama lefayela, hhayi nalokho ocabanga ukuthi igama leklayenti.

Isiqalo esithunyelwe kanye nomzila wokubuya kuyizinkinga ezihlukene

Iklayenti elishaya indiva i-redirect-gateway ngamabomu ukuze ligcine umzila walo wangaphakathi we-inthanethi lidala igebe lesibili, elingahlobene. Izivivinyo zeseva zifinyelela ikheli lethuneli kodwa izimpendulo azifiki, ngoba impendulo eqondiswe ku-IP yethuneli yeseva ihanjiswa ngesango elijwayelekile lokuzimela leklayenti. Lapha akulona iphutha lomzila wesubneti othunyelwe; okungekho umzila obuyisela ithrafiki yenethiwekhi yethuneli yeseva ngemuva ngethuluzi lethuneli.

Ukufaka lowo mzila kuklayenti kulungisa izimpendulo ezivivinyweni eziqalwa iseva. Akuthathi indawo yomzila wesubneti othunyelwe, futhi okuphambene nakho kuyiqiniso, ngoba womabili achaza izindawo zokuhamba eziphambene.

Qhathanisa amathebula kuzo zombili iziphetho

Ngemva kwanoma yiluphi ushintsho, xhuma futhi futhi ufunde ithebula leklayenti lesiqalo esithunyelwe kanye nethuluzi lethuneli. Bese uhlola ngezindlela zombili: kusukela kuklayenti kuya kusihambisi esikusubneti ethunyelwe, nasekuhambeni kusuka kuleso sihambisi kubuyela kuklayenti. Umzila okhona kodwa ongathwali thrafiki usho okukodwa kwezintathu: uhlangothi olukude alidlulisi, i-firewall ilahla ukugeleza, noma impendulo ayinayo indlela yokubuya.

Gcina iziphakamiso ezintathu ndawonye: umzila wokucushwa, igama le-unit noma le-instance, kanye nobuwena beklayenti ohlole ngayo.

Lezi zintathu zenza isigameko esilandelayo sibe ukuhlola kwemizuzu emihlanu esikhundleni sophenyo olusha, futhi yizo ezidingwa uzakwabo lapho ithuneli isiba inkinga yomunye umuntu.

Inkinga yomzila eqhubeka ngemva kokuqalisa kabusha ngokuvamile ayiyona inkinga yokuhambisa; iphutha likhangaphezulu kwethebula oqhubeka ulifunda.