Kungani iphrofayili ye-OpenVPN ingangeneki ku-SoftEther

Amaphrofayili amabili okubukeka njengokuhlelwa kwe-VPN awela kufolda elilodwa, futhi yinye kuphela esebenzayo. Iphrofayili ye-OpenVPN ichaza umhubhe we-TLS nemiyalelo eqondwa yilelo klayenti, kuyilapho ukuxhumana kwe-SoftEther kuchaza isikhathi esibhekene nehabhu ebunjiwe enenkontileki yokuqinisekisa ehlukile. Ukuguqula okukodwa kube okunye akusona isifundo sokuhlela, ngoba amaklayenti amabili awasebenzisi iphrothokholi efanayo. Ukuthola ukuthi iyiphi isevisi eyashicilelwa ngumqhubi ngempela yikho okunquma konke okulandela.

Amaphrofayili amabili, izinkontileki ezimbili

Iphrofayili ye-OpenVPN iwukuhlelwa kweklayenti: indawo yokugcina ekude, ukuthutha, impahla ye-TLS, nemiyalelo yokuhambisa nokuxoxisana kabusha. Ukuxhumana kwe-SoftEther yisikhathi seklayenti lendabuko esibhekene nehabhu ebunjiwe, nesixhumi esibonakalayo esinanyathiselwe kuso.

Zingachaza ukufinyelela kunethiwekhi efanayo ngaphandle kokushintshana. Isilaleli se-OpenVPN siyisici sokuhambisana iseva engasishicilela embonini ehlukile, futhi sikhuluma OpenVPN esikhundleni sephrothokholi yendabuko. Iklayenti lendabuko likhuluma iphrothokholi yendabuko futhi lilindele iphrofayili yalo. Iseva eyodwa, iminyango emibili, futhi umnyango ngamunye unokhiye wawo.

Isandiso sefayela cishe asikutsheli lutho, yingakho impendulo yomqhubi ibaluleke kakhulu kunegama lefayela.

Funda iseva ngaphambi kokuthinta ibhlokhi yesitifiketi

Buza umqhubi izinto ezintathu: yibuphi imboni nokuthutha, iyiphi indlela yokuqinisekisa, futhi iyiphi iklayenti abalindele ukuthi uyisebenzise. Lezo zimpendulo zisusa iningi lokuqagela.

Bese uqinisekisa ukuthi yini elalelayo ngempela, hhayi lokho okushiwo incwadi. Isilaleli sokuhambisana esivaliwe asibonisi lutho embonini yaso, futhi esivuliwe sibonisa isokhethi ngisho noma kungekho owake waxhuma. Umehluko phakathi kwemboni evaliwe nokungena okwenqatshiwe ukuxilongwa kokuqala okuwusizo. Konke okulandela kuncike ekutheni kwakhwazwa kuphi.

ss -lunp | grep -E ':1194|:443'
sudo ss -ltnp | grep -E ':992|:5555'
grep -nE '^(remote|proto|auth-user-pass|ca |cert |key )' profile.ovpn

Imboni ye-UDP engekho ohlwini lwezilaleli isici esivaliwe, hhayi inkinga yodonga lomlilo.

Lokho iklayenti lendabuko elikudingayo okungenakunikezwa iphrofayili

Iklayenti lendabuko lifaka isixhumi senethiwekhi esibonakalayo futhi libopha ukuxhumana kuso. Ngaphandle kwaleso sixhumi awekho uhlaka lokuhambisa, yingakho ukuxhumana kwendabuko kungaqinisekisa kodwa kungathwali thrafikhi.

Ukuqinisekiswa kwendabuko kwenzeka kubhabhu ebunjiwe, ngento yomsebenzisi eyenziwe umphathi wahabhu. Amabhlokhi esitifiketi akopishwe kuphrofayili ye-OpenVPN awabi abasebenzisi behabhu, futhi umsebenzisi wehabhu akabi isitifiketi seklayenti. Izinhlelo ezimbili zigcina izinto ezihlukile, futhi iphrofayili ayinandawo yokubeka irekhodi lomsebenzisi wehabhu. Lona umehluko wesakhiwo hhayi inkinga yokubhala.

Gcina ukhiye oyimfihlo kude nanoma iyiphi isevisi yokuguqula, ngoba ukhiye ophuma emshinini kufanele uthathwe njengodaluliwe.

Yini isilaleli esihambisana ne-OpenVPN esiyamukelayo

Isilaleli sokuhambisana yiseva ye-OpenVPN yangempela ngokombono weklayenti: silindele iklayenti le-OpenVPN nemiyalelo elisekelayo. Amabhlokhi esitifiketi angaphakathi ayisici se-OpenVPN, futhi angakolunye uhlangothi lothango.

Lokho elingakwenzi ukwamukela iphrofayili yendabuko ye-SoftEther, ngoba leyo phrofayili ayiwukuhlelwa kwe-OpenVPN. Isilaleli futhi asiguquli iklayenti lendabuko libe yiklayenti le-OpenVPN. Uma umqhubi enikeza kuphela isevisi yendabuko, impendulo yiklayenti lendabuko; uma enikeza isilaleli sokuhambisana, impendulo yi-OpenVPN nempahla yayo.

Cela ukuthunyelwa ngaphandle okusekelwa umqhubi esikhundleni sokuhlanganisa okukodwa ngezingcezu, ngoba ukuthunyelwa ngaphandle kuthwala imininingwane efayela elakhiwe ngesandla evame ukuyishiya.

Fakazela indlela ngaphambi kokuhlela imiyalelo

Lapho iklayenti selikhethiwe, hlola umhubhe ngaphambi kokuthinta imizila. Ukungena okuphumelelayo nohlaka oluthwala ithrafikhi kuyimiphumela emibili ehlukile.

sudo openvpn --config profile.ovpn --verb 3
ip -br addr
ip route get 10.70.4.20
resolvectl status | grep -A2 'DNS Servers'

Qhathanisa ikheli elinikeziwe neqoqo elichazwe umqhubi, bese ubheka imizila nesixazululi ngokwehlukana. Ukuxhumana kwehabhu yendabuko kungaqinisekisa ngokuhlanzekile futhi kungafaki noma imuphi umzila, okubonakala kusuka ohlangothini lweklayenti njengomhubhe ophukile. Kuphela lapho lezo zintathu zivumelana khona kufanelekile ukuhlela umyalelo. Ukuhlela kusenesikhathi kufihla ukuthi yiliphi ungqimba olwalungalungile.