Isokhethi yokuphatha ye-OpenVPN: umzila wokulawula, hhayi izilinganiso

Buza isixhumanisi sokuphatha isimo kanye futhi siqala ukubonakala njengembobo yesimo. Kodwa akusiyo. Uma iklayenti selamukelwe, lingakhipha imiyalo yokulawula yephrothokholi, futhi i-akhawunti ephethe lelo klayenti izuza njengefa konke okungenziwa yile miyalo ku-daemon. Ukulithatha njengomfudlana wokufunda kuphela yiphutha eliguqula ukuhlanganiswa kokuqapha kube yikhonsoli engenakuqinisekiswa.

Inkolelo, nokuthi ibiza malini

Inkolelo iwukuthi isilaleli sokuphatha silingana nendawo yokugcina yezilinganiso: xhuma umqoqi, funda izibali, uqhubeke. Okwenzeka ngempela ukuthi umqoqi uvula iseshini enamandla okulawula, futhi konke okunye okwacabanga ngokuthunyelwa manje kuncike ekutheni lowo mqoqi uziphethe kahle.

Akukho lutho kusixhumanisi okumemezela imodi yokufunda kuphela. Awukho umsebenzi wombukeli ongawukhetha, futhi igama lomsebenzisi kusimo asiwutholi.

Okuqukethwe ngempela yiklayenti elamukelwe

I-daemon yomphakathi yamukela iklayenti lokuphatha elilodwa elisebenzayo ngesikhathi. Leso sikhala esisodwa sisho ukuthi i-GUI, iskripthi ne-ejenti yokuqapha azikwazi ukuxhuma zonke; eyesibili iyalinda noma yehluleke ngesikhathi eyokuqala ibambe iseshini. Uma umklamo wakho ucabanga abafundi abaningi ngesikhathi esisodwa, usuwonakele.

Lapho isithombe sesikhathi sikhathi sanele, umphumela wefayela lesimo ukunikeza izinombolo ezifanayo ngaphandle kweseshini ebukhoma. Ukubhala lelo fayela ngezikhathi nokulifunda ngezimvume ezijwayelekile zefayela kugcina umqoqi ngaphandle kwesigaba sokulawula ngokuphelele, futhi yilokho okudingwa ukuqapha okuningi ngempela.

Isokhethi sethu, hhayi evulekile

Isokhethi yesizinda se-Unix igcina indlela yokulawula ingaphandle kwenethiwekhi, okususa ikheli lethuneli elishintshayo enkimbini. Akususi umbuzo wezimvume. Umbhalo wamafayela ongumzali kufanele ubhaleke nge-akhawunti yesevisi futhi ufinyeleleke nge-akhawunti yesilawuli, futhi lezo yizimvume ezimbili ezihlukene:

management /run/openvpn/office-management.sock unix /etc/openvpn/management.password
management-client-user vpn-observer
management-client-group vpn-observer

Ifayela lephasiwedi liphethe imfihlo yokuphatha emugqeni walo wokuqala. Vikela lelo fayela njenganoma yiluphi olunye ubuqiniso, futhi ugcine okuqukethwe kwalo kude namalogi namathikithi okusekela. Imikhawulo yomsebenzisi neqembu iyizivivinyo zoqabane kusokhethi ye-Unix, hhayi izimvume zohlelo lwamafayela, ngakho inqubo ehlosiwe idinga kokubili ukufinyelela kufayela nobuwena obuhambisanayo.

Ukwenza isokhethi ifinyeleleke emhlabeni wonke ukuze kususwe iphutha lezimvume ukulungisa okuwukuphela kwalokho okufanele kugwenywe. Kuguqula umzila wokulawula wendawo ube yinto enganyathwa yinoma iyiphi inqubo kusibungu.

Ukukhipha nge-TCP akusona umklamo ofanayo

Ukuhambisa isilaleli embotsheni ye-TCP akusikwenzi siphephe noma silula. Iphasiwedi yokuphatha ithunyelwa ngombhalo ocacile, ngakho isilaleli se-TCP sembula kokubili ubuqiniso neseshini kunoma ubani ongabuka indlela. Ukusifinyelela kusuka kwesinye isibungu kudinga umzila wokuphatha ogunyaziwe, noma i-ejenti yendawo encane eveza kuphela ukubona okudingayo.

Iphasiwedi kuthutho lombhalo ocacile wukuqinisekisa ngaphandle kwemfihlo, futhi leyo nhlanganisela imbi kunalokho okubonakala ngoba izwa sengathi ivikelwe.

Ukuncika kokuqala ongakucelanga

Izinketho ezimbalwa zokuphatha zishintsha umjikelezo wokuphila we-daemon. Ukubamba ukuqala kuze kuxhume isilawuli, noma ukuqeda lapho isilawuli sinyamalala, kuguqula umbukeli ongakhethekile ube ukuncika okuqinile. Khona-ke i-ejenti yokuqapha ephahlazekayo izodonsa nethuneli phansi kanye nayo.

Buyekeza lezo zinketho ngaphambi kokunika amandla noma yini ngaphandle kwesokhethi uqobo. Ukubona okungakhethekile kufanele kuhlale kungakhethekile, futhi inqubomgomo yokuqala kabusha akufanele ixhumane nomqoqi owengezwa imidwebo.

Ifayela lesokhethi elisala ngemva kwenqubo ehlulekile akusona ubufakazi bokuthi isilaleli sikhona. Khomba ukuthi iyiphi i-instance ephethe indlela ngaphambi kokuyisusa, futhi usebenzise uhlelo lokubuyisela lwesevisi uqobo esikhundleni sokususa amafayela ngaphansi kwe-daemon esebenzayo.

Ukwamukelwa kubonakala kanjani

Izivivinyo ezine zihlanganisa umklamo: ubuwena besilawuli obuhlosiwe buyaxhuma, inqubo engenabo lobo buwena iyenqatshwa, i-daemon iyasinda esilawulini esixhuma ngaphandle kwesexwayiso, futhi ithuneli isathwala ithrafikhi ngokuqala kabusha okulawulwayo. Ukuxhumana kokuphatha okuphumelelayo kufakazela kuphela isigaba sokulawula. Akusho lutho mayelana nokuthi ithrafikhi yezinhlelo ezizimele iyasebenza yini, ngakho yihlole ngokwehlukana. Bhala imiphumela emine endaweni lapho umsebenzi olandelayo angayithola khona.

Imibhalo yesixhumanisi sokuphatha ichaza imodeli yeklayenti elilodwa kanye nobunjalo obunelungelo bephrothokholi, futhi leyo yingxenye efanele ukufundwa ngaphambi kokuba uqondise idashibhodi kuyo.