OpenVPN: i-local kanye nekheli lomhubhe, amasokhethi amabili ahlukene

Iklayenti liyala ukuqala futhi likhononda ukuthi alikwazi ukubopha ikheli lendawo, futhi isisombululo esisobala sibonakala sengathi siyakhomba ekhelini lomhubhe elilindele ukulithola. Lokho ngeke kusebenze, futhi isizathu kufanele sifundwe: ngaphambi kokuba umhubhe ube khona akukho kheli elingaphakathi, futhi isokhethi elixhumana neseva kufanele libe khona kuqala. Kukhona amakheli amabili ahlukene, futhi elilodwa kuphela lawo elingakhethwa endaweni.

Iphutha le-bind lisho ikheli lendawo

Lapho i-OpenVPN ibika ukuthi ayikwazi ukubopha ikheli lendawo, ikhuluma ngesokhethi lokuthutha: indawo yokugcina ye-UDP noma i-TCP ethwala uxhumano olubethelwe ku-peer.

Umyalo ocacile we-local ucela i-daemon ukuthi ibophe lelo sokhethi ekhelini lendawo elithile. Ikheli kufanele libe khona endaweni yamagama yenethiwekhi lapho inqubo isebenza khona, futhi kufanele likwazi ukwabiwa ngesikhathi iklayenti liqala.

Ikheli lomphakathi elihunyushwa ku-router noma emaphethelweni e-cloud akulona ikheli lendawo i-daemon engalibopha, nakuba liyikheli elibonwa iseva. Lowo mehluko uchaza ukuthi kungani iphrofayela eyodwa isebenza ekhaya kodwa yehluleke ku-instance ye-cloud. Futhi uchaza ukuthi kungani ukufaka ikheli lomphakathi ku-interface ye-loopback kungasizi, ngoba ukuthutha kuzobe sekuthatha umthombo ekhelini i-nethiwekhi engakwazi ukulibuyisela kulo. Funda uhlu lwama-interface ngaphambi kokuhlela iphrofayela.

Yini i-local ne-remote ezikhetha ngempela

remote isho i-peer okufanele kuxhunyanwe nayo. local ibopha umphetho oseduze walelo sokhethi. nobind ivumela uhlelo lokusebenza ukuthi likhethe ikheli lendawo kanye ne-port, yingakho amaklayenti angemuva kwamarouter asekhaya ngokuvamile esebenza ngaphandle kwemiyalo yomibili.

Awekho kule miyalo enomkhondo ngekheli elingaphakathi komhubhe.

Ku-container noma endaweni yamagama yenethiwekhi umthetho ofanayo usebenza nemingcele emincane: amakheli e-host awakho ngaphakathi, ngakho umugqa we-local okopishiwe kusukela kukhonsifigureshini ye-host wehluleka ngesizathu esihluke ngokuphelele kunekheli elingalungile.

ip -brief address show
ip route get 203.0.113.10

Ikheli langaphakathi livela kuseva

Ikheli elingaphakathi komhubhe lixoxwa noma labelwe ngemva kokusungulwa kwesiteshi sokulawula. Ku-pool eguquguqukayo iseva inquma ngaso ngesikhathi sokuxhumana, futhi kukhonsifigureshini eqondene neklayenti lingase lihlale lilingana kubunikazi ngabunye.

Ukubhala i-local ngekheli langaphakathi akuceli iseva ukuthi yabele lelo kheli. Esimweni esihle kakhulu i-bind iyahluleka; esimweni esibi kakhulu iklayenti lithola ikheli le-host elingahlobene nelilingana nalo bese liqala ukulisebenzisa ekuthutheni.

Ama-interface okufanele afundwe nawo ahlukile. Amapharamitha e-ifconfig nokuhlelwa kwe-pool kuchaza ingaphakathi, kuyilapho i-remote, i-local, i-proto ne-nobind kuchaza ingaphandle. Ukugcina lezi zinhlu zimbili zihlukene kuchaza cishe zonke izibonelo ezididayo ozozithola ku-forum. Yingakho incwadi ye-OpenVPN 2.6 izibhala ezigabeni ezihlukene.

Ugibe: umhubhe ogcwele obamba ukuthutha kwawo

Lapho umhubhe usukhona futhi uthwala umzila ozenzakalelayo, amaphakethe awugcinayo akufanele ahanjiswe phakathi kuwo. Lokhu kuyinkinga yomzila hhayi yekheli, futhi i-daemon ibhekana nakho ngokufaka umzila oqondile kakhulu oya ekhelini leseva uqobo nge-gateway yokuqala.

Uma ubophela ukuthutha ekhelini lendawo elithile futhi kamuva ushintsha indlela lelo kheli eliyisebenzisayo, uxhumano lwangaphandle lungalahleka endleleni ngenkathi ingaphakathi lihleliwe. Umhubhe uqhubeka ubika ukuxhumana ngoba ingaphakathi likahle. Ukuthutha kuphela okuphukile, yingakho amalogi efundeka njengokuphikisana.

Izimpawu ke zibonakala njengomhubhe oxhumayo bese ubanda, noma lowo oxhumayo futhi ngokuzungezayo ngaphandle kwephutha eliwusizo. Hlola umzila oya ekhelini le-peer ngaphambi kokuhlola noma yini ngaphakathi komhubhe, futhi qinisekisa ukuthi ikheli lendawo olibophile lisengelase-interface obekulindele.

Umkhuba ovimbela ukudideka

Funda wonke ikheli kuphrofayela bese unquma ukuthi lingeliphi ungqimba ngaphambi kokuyihlela.

Uma isho umphetho okude wokuthutha noma ibopha umphetho oseduze wayo, liyikheli langaphandle futhi kufanele libe khona ngaphambi kokuqala. Uma ichaza okwenzeka ngaphakathi komhubhe, kuvela kuseva noma ku-topology, futhi awukho umyalo wendawo ongathatha isikhala sawo.

Bhala lezi zinhlu zimbili kumanothi okusatshalaliswa eceleni kwephrofayela. Umhlangano olandelayo wokuxazulula izinkinga uzoqala ngongqimba hhayi ngokuqagela.