Iseva neklayenti ye-OpenVPN kusihambisi esisodwa: kungani amaklayenti ewa

Engeza iphrofayili yeklayenti emshinini osevele ugijima iseva ye-VPN, futhi isisulu sokuqala kuyoba yisevisi yokuqala. Umhubhe omusha kungenzeka ungakhiwe neze, noma ukhuphuke ngesikhathi amaklayenti akhona eseva eyeka buthule ukuthola izimpendulo. Ukungqubuzana okubili kuveza yomibili imiphumela: ichibi lemihubhe elivele lisetshenziswa, kanye nomzila ozenzakalelayo ofakwe uhhafu omusha weklayenti ohlanganisa lonke ithebula. Akukho kokubili okukhiqiza umlayezo wephutha we-OpenVPN, yingakho ukwehluleka kufundwa njengenkinga yeseva.

Umshini owodwa, izindima ezimbili, kanye nezimpendulo ezimbili ezingavumelani mayelana nokuthi izimpendulo kufanele ziyephi.

Ichibi elifanayo, amaseva amabili: ubani onqobayo

Yonke insiza yeseva idinga isethi engaphansi yomhubhe yayo. Ukukopisha umugqa ofana no-server 10.8.0.0 255.255.255.0 kukhwezelo lwesibili kunikeza izinsiza ezimbili isiqalo esifanayo, futhi umphumela kungaba ukwenqaba ukuqala noma umncintiswano othule lapho amaklayenti esiseva esisodwa ethola amakheli isinye esibona nawo njengasaso. Amachweba e-UDP ahlukene namagama edivayisi ahlukene awasizi, ngoba akukho kukho kokubili okuthinta indawo yamakheli. Shintsha ichibi lesibili, futhi ulishintshe yonke indawo lapho imizila ikhuluma ngayo.

Bhala uhlu lwalokho okusebenzayo ngaphambi kokuhlela: ip -4 addr show ibala amadivayisi omhubhe, ss -lunp ibala abalaleli, futhi systemctl list-units isho amayunithi. Ukubheka kanye amakheli omhubhe kunquma ukuthi amachibi ayangqubuzana yini.

Iphrofayili yeklayenti yengeza ini ethebulini

Uhhafu weklayenti ubhala imizila ngokushesha uma uxhuma. redirect-gateway def1 ihlukanisa umzila ozenzakalelayo ube ngu-0.0.0.0/1 kanye no-128.0.0.0/1, womabili ahamba ngedivayisi entsha, kanye nomzila womsingathi oya kuseva ekude oboshwe ngamabomu ku-interface yenyama. Lokho kubopha kukhona ukuze umhubhe ugcine indlela yokuthutha kwawo. Konke okunye, kuhlanganise nezimpendulo iseva yendawo ekweletayo kumaklayenti ayo, manje kulandela okungokwenzakalayo okusha futhi kuphuma ngoxhumano olukude.

Ngakho ukungqubuzana kwesibili akusiwona umhubhe ophukile. Kungumhubhe osebenza endaweni engalungile ethebulini.

Izindlela ezintathu zokuhlukanisa izindima

Isilungiso esingeneleli kancane sigcina umzila ozenzakalelayo ngaphandle kwephrofayili yeklayenti: route-nopull kanye nemigqa ecacile ye-route yamaqalo akude, ukuze ithebula lendawo lishintshe kuphela lapho ucele khona. Isinyathelo esilandelayo umthetho wenqubomgomo okhipha isethi engaphansi yomhubhe wendawo, ovumela izimpendulo kumaklayenti endawo ukuthi ziphume nge-interface eza ngayo ngisho noma kukhona umzila ozenzakalelayo. Okuphelele kakhulu indawo yegama lenethiwekhi ehlukile yendima yeklayenti, esusa ngokuphelele ithebula elabiwe futhi edinga umongo wesibili wokuhambisa imizila ukuze unakekelwe.

Noma yimuphi umzila owukhethayo, okuhlukile kufanele kushiwo isethi engaphansi yomhubhe wendawo hhayi i-LAN. Impendulo ethunyelwa iseva yendawo inekheli lomhubhe njengendawo eya kuyo, ngakho okuhlukile okwesimo se-LAN akukaze kuhambisane nayo.

Iyiphi kuzinsiza ezimbili enecala

Misa insiza yeklayenti bese uphinda uhlole amaklayenti okuqala. Ukululama ngokushesha kusho ukuhambisa imizila, hhayi iseva. Buyisela iklayenti bese ulandelela impendulo eyodwa nge-ip route get enikezwe ikheli lomthombo nelendawo eya kuyo, okubonisa umzila ikheneli engawukhetha, bese ubuka i-interface amaphakethe ayisebenzisa ngempela nge-tcpdump -ni any port 1194. Ifayela lesimo leseva, elibhalwa njalo ngemva kwamasekhondi ambalwa ngesiqondiso se-status, liqukethe uhlu lwamaklayenti axhunyiwe kanye nezibali zamabhayithi kuzo zombili izinhlangothi.

Funda lezo zibali ngokubhekisisa enye kwelinye. Ithrafikhi ephumayo futhi engabuyi neze iyimpendulo yokuhambisa imizila, hhayi inkinga yokuxhawula.