Ukuxhuma kabusha iklayenti le-OpenVPN: izilawuli ezintathu, ububanzi obuthathu
Ukulahla iseshini eyodwa, ukwazisa wonke amaklayenti e-UDP nokuqala kabusha idaemon kuyimisebenzi ehlukene. Qala ngokunquma ububanzi, bese uqinisekisa iseshini entsha.
Othile ucela ukuthi iklayenti le-VPN lixhunywe kabusha, futhi lesi sicelo singasho izinto ezintathu ezihlukene. Kungasho ukulahla iseshini eyodwa eqinisekisiwe, ukwazisa wonke amaklayenti ukuthi iseva ye-UDP iyahamba, noma ukuqala kabusha idaemon uqobo. Ngayinye inendawo ehlukile yomthelela, futhi ukukhetha okungalungile kuguqula ukulungiswa komsebenzisi oyedwa kube ukuphazamiseka kwesevisi. Ububanzi yisinqumo, futhi umyalo ulandela kukho.
Buza ukuthi ubani okufanele athinteke ngaphambi kokubuza ukuthi yisiphi isilawuli okufanele sisetshenziswe.
isimo esisodwa: isixhumanisi sokuphatha
Isixhumanisi sokuphatha esilungisiwe singabala izimo ezixhunyiwe futhi silahle eyodwa yazo ngqo. Yonke iseshini ithwala isihlonzi seklayenti, futhi client-kill CID siqondisa kuleso sihlonzi esikhundleni segama elijwayelekile. Funda isihlonzi esiphilayo kokuphuma kwesimo samanje, ngoba inani elikopishwe kusuka kulogi endala libhekisa kuseshini engasekho. Ukulahla isimo kuqeda lolo xhumano futhi akukho okunye.
Akusiqinisekisi ukuxhumana okusha. Ukuthi iklayenti liyabuya yini kuncike kuzilungiselelo zalo zokuphinda lizame, emibhalweni yasekudeni esele, ezidingweni zokuqinisekisa kanye nokuthi uhlelo olugadayo lusasebenza yini. Iklayenti elibuyayo lithola isihlonzi esisha, yingakho ukuqhathanisa izihlonzi kuyindlela yokuqinisekisa kuphela yokuhlukanisa okudala nokusha.
Isaziso sokuphuma se-UDP akusona isiyalo seklayenti ngalinye
explicit-exit-notify kuyisiqondisi sokulungisa esimayelana nezenzakalo zokuphuma nokuqala kabusha. Kuklayenti le-UDP sitshela ozakwethu ukuthi iseshini iyaphela, futhi ingxenye yezinombolo ilawula ukuthi isaziso siphinda kaningi kangakanani. Uma iseva isebenza nge-UDP ithumela umyalezo wokulawula wokuqala kabusha kumaklayenti ayo axhunyiwe, futhi amanani abhaliwe ahlukanisa ukuxhuma kabusha kuseva efanayo nokuhamba waya kwelinye ibhuku lasekudeni. Lokho kuwuphawu lomjikelezo wempilo onabalaleli abaningi.
Akukho lutho kukho okukhetha iklayenti elingajwayelekile noma kunini. Ukukuthatha njengenkinobho yokuxhuma kabusha kufinyelela yonke iseshini exhunyiwe ngesikhathi esisodwa.
Amasignali asebenza kwinqubo, hhayi kuseshini
SIGUSR1 icela inqubo esebenzayo ukuthi iqale kabusha ukuxhumana kwayo ngaphandle kokufunda kabusha ukulungiswa, futhi izinketho zokuqinisa zinquma ukuthi yini ephuma kuleso siqalo kabusha. SIGHUP iya phambili: ifunda kabusha ifayela lokulungisa futhi ivule kabusha izinsiza zayo. SIGTERM futhi SIGINT zicela ukuvala okuhlelekile. Lezi yimisebenzi yezinga lenqubo: kuseva enamaklayenti amaningi zithinta yonke iseshini inqubo eyithwalayo, hhayi leyo eshiwo kuthikithi.
Uma inqubo isebenza ngaphansi komphathi wesevisi, sebenzisa isilawuli somphathi uqobo esikhundleni sokuthumela isignali ku-PID oyithole ohlwini lwezinqubo. Funda iyunithi ukuze ubone ukuthi yisiphi isignali esithunyelwa umphathi, ngoba ukuqala kabusha nokulayisha kabusha kwenza izinto ezihlukene kudaemon efanayo.
Nquma ububanzi ngaphambi kokukhetha isilawuli
Imibuzo emithathu iyakunquma lokho. Ubani okufanele athinteke: umsebenzisi oyedwa, wonke amaklayenti eseva eyodwa, noma idaemon nakho konke ekuthwalayo. Yini okufanele isinde: ukulungiswa, isimo somhubhe, noma akukho nhlobo. Ubani ogunyaziwe: ukuhlanganiswa kokuphatha, umnikazi wesevisi, noma umsebenzi wenethiwekhi olawula isaziso sokuphuma. Phendula lokho futhi isilawuli esisodwa kuphela esifanele.
Ukungeza isilaleli sokulawula esingaqinisekisiwe ukuze uthole inkinobho yokuxhuma kabusha kunikeza noma ubani ongafinyelela embobeni okuningi kakhulu kunaleyo nkinobho.
Qinisekisa iseshini entsha, hhayi ukunqamuka
Isenzakalo sokunqamuka sifakazela ukuthi iseshini endala yaphela. Asisho lutho ngeseshini entsha eqinisekiswayo, ethola ikheli, efaka imizila noma efinyelela insiza umsebenzisi ayeyidinga. Hlola isihlonzi esisha, bese isimo somhubhe, bese insiza eyodwa yangempela. Lezo zinyathelo ezintathu zimelela umehluko phakathi kokuxhuma kabusha nokuxhumana okusebenzayo.
Bhala ububanzi kurekhodi yezinguquko. 'Ngixhume kabusha iklayenti' akusona incazelo uma iklayenti laliyingxenye yamashumi amane kuseva eyabiwe.