Indlela yokuthumela indawo eyodwa ye-IPv4 ngaphandle komhubhe we-OpenVPN

Izilungiselelo eziningi zomhubhe ogcwele zithumela iphakethe ngalinye nge-VPN, futhi i-redirect-gateway iyisiyalelo esikwenza lokho kwenzeke. Indawo eyodwa isengashiywa ngaphandle. Ukwengeza umzila womsingathi walelo kheli ngesikhala se-net_gateway kutshela ikhasimende ukuthi lifinyelele kulo ngokusebenzisa isango lokuqala lomshini, kuyilapho konke okunye kuqhubeka kusebenzisa umhubhe.

Umugqa ubonakala ungenabungozi futhi uvame ukuba njalo, kodwa uxazulula umbuzo owodwa kuphela: amaphakethe akheli lelo le-IPv4 aya kuphi. Awushintshi i-DNS, i-IPv6, inqubomgomo ye-firewall noma ukuthi iyiphi inqubo evule uxhumano, futhi ngakunye kwalokhu kungase kubhubhise ukushiywa ngaphandle buthule.

I-net_gateway ibiza ini ngempela

Isingeniso sephrofayela salokho kushiywa ngaphandle umugqa owodwa: route 198.51.100.77 255.255.255.255 net_gateway. Ikheli lokuqala iyisikhala sombhalo wendawo, imaski liyenza ibe umzila womsingathi oyedwa, futhi uphawu lokugcina lubiza isikhala sesango. OpenVPN ixazulula izikhala zesango lapho ifaka imizila. vpn_gateway isho isango lomhubhe uqobo, uhlangothi olukude lwesixhumanisi se-VPN. net_gateway isho isango elizenzakalelayo umsingathi ayenalo ngaphambi kokuba i-VPN ishintshe noma yini, okujwayelekile ukuba irutha yasendaweni kunethiwekhi ebonakalayo.

Isikhala sesithathu, remote_host, sikhomba ekhelini leseva ye-VPN, futhi sikhona ukuze umhubhe ufinyelele iseva ngomzila obonakalayo. Ukuhlanganisa lezi zintathu yisizathu esivame kakhulu sokuthi ukushiywa ngaphandle kuya endaweni engalungile noma kwehluleke ngokuphelele ukufakwa.

Inani lifundwa ngesikhathi sokuxhumanisa, alibhalwa efayeleni. Uma umshini udlulela kwenye inethiwekhi, isango langaphambi kwe-VPN liyashintsha futhi umzila ulandela elisha. Lokho ngokuvamile yilokho okukufunayo, kodwa futhi kusho ukuthi ukuziphatha kokushiywa ngaphandle kuncike kunethiwekhi ikhasimende eliqale kuyo.

Kungani umzila womsingathi unqoba okuzenzakalelayo komhubhe

Ukuhambisa imizila kunqunywa isiqalo esifanayo esicacile kakhulu. redirect-gateway def1 ngokuvamile akashintshi umzila ozenzakalelayo; wengeza izingxenye ezimbili, umzila wengxenye engezansi yesikhala samakheli nowengxenye engenhla, ukuze umzila wokuqala ozenzakalelayo ugcinwe kwezinye izinto. Lezo zingxenye zibanzi kunekheli elilodwa.

Umzila wekheli elilodwa onemaski engu-255.255.255.255 yi-/32, okuyizinga eliphezulu kakhulu i-IPv4 engalifinyelela. Lapho iphakethe lalelo kheli lihlolwa, i-/32 iyafana futhi iyanqoba kungakhathaliseki ukuthi yimuphi umzila ofakwe kuqala. Yilowo mshini ongemuva kokushiywa ngaphandle, futhi usebenza ngendlela efanayo ku-Linux, macOS naku-Windows inqobo nje uma umzila ukhona ngempela.

I-Windows yengeza isilinganiso sesibili. Lapho imizila emibili icacile ngokulinganayo, enemetriki ephansi iyanqoba, futhi i-adaptha ye-VPN ingathwala imetriki yesixhumi esinguwohluko esishintsha umphumela. I-/32 isacace kakhulu kunezingxenye, ngakho ukushiywa ngaphandle kuvame ukuma, kodwa umzila omdala wesikhathi esedlule ungaveza umphumela odidayo uma ucacile ngokulinganayo.

Okungakufaki ukushiywa ngaphandle

I-DNS iyingxenye yokuqala. Ikhasimende lingaphusha izilungiselelo zomxazululi wangaphakathi, futhi uhlelo lokusebenza luyoqhubeka lisebenzisa lezo ekucwaningeni. Uhlelo lokusebenza oluxazulula igama ngaphambi kokuxhumana lungathola ikheli langaphakathi lwesevisi okufanele ihambe ngqo, noma ikheli langaphandle elixazuluka kahle kodwa bese likhubeka engxenyeni elandelayo.

I-IPv6 ingeyesibili. Isiyalelo somzila sibhekana ne-IPv4 kuphela. Indawo enesitaki esikabili ingahle ikhethe i-IPv6, elandela umhubhe noma umzila ozenzakalelayo we-IPv6 kumsingathi ngokwenqubomgomo, ngakho ukushiywa ngaphandle kwe-IPv4 akukaze kusebense. Udinga umzila we-IPv6 ofanayo, noma isinqumo esinengqondo sokukhubaza i-IPv6 kulelo khasimende.

Ububanzi bezinhlelo kungokwesithathu. Umthetho usekelwe endaweni, ngakho yonke inqubo exhumana nalelo kheli isebenzisa umzila oqondile, kungakhathaliseki ukuthi yiyo inqubo obekade uyicabanga noma cha. Ngakolunye uhlangothi, isizindalwazi singaphendula sisuka kumakheli amaningi, ngakho ukushiya i-/32 eyodwa ngaphandle akusishiyi isizindalwazi ngaphandle. Uma isidingo sangempela kuwukuhambisa imizila ngohlelo ngalunye, ithebula lemizila lekhasimende le-Community iyithuluzi elingalungile.

Hlola ukushiywa ngaphandle ngaphandle kokuzikhohlisa

Qala ngomzila ofakiwe, hhayi ngesiphequluli. Ku-Linux, buza i-kernel ukuthi yimuphi umzila nehopu elandelayo ezoyisebenzisa kulelo kheli elithile; ku-Windows, funda ithebula lemizila yale-/32. Qinisekisa ukuthi isango lingelesimo esibonakalayo hhayi umhubhe. Uma isingeniso singekho, iphrofayela ayizange isetshenziswe noma ikhasimende lalingenawo igunya lokushintsha imizila.

Bese uhlola izindawo ezimbili. Isicelo esiya ekhelini elishiyiwe ngaphandle kufanele siphume ngesixhumi esibonakalayo, futhi isicelo esiya ekhelini langaphakathi lokulawula kufanele sisasebenzisa umhubhe. Ukuhlola kuphela ikheli elishiyiwe ngaphandle akufakazeli lutho ngengxenye esele yomhubhe, futhi ukuhlola isizindalwazi somphakathi kuhlola ikheli isizindalwazi esixazuluke siba sona, okungenzeka ukuthi akulona eliceleni.

Ekugcineni, hlola izilawuli ezingadlula umzila. I-kill switch ohlangothini lwekhasimende noma isilungiselelo se-block-outside-dns se-Windows kungavimbela ukuhamba okuqondile, okubonakala njengoxhumano oluhlulekayo nakuba umzila ulungile. Ungazicishi lezo zilawuli ukuze ukushiywa ngaphandle kubonakale kusebenza; uma inqubomgomo ivimbela umzila oqondile, ukushiywa ngaphandle kuyinkinga yokuklama kumnikazi wesevisi ye-VPN.

Hlola futhi ngemva kokuxhumana kabusha noma ukushintsha inethiwekhi, ngoba isango langaphambi kwe-VPN nomzila okhona kuyizimfanelo zaleso sikhathi, hhayi zephrofayela.