Ukuhambisa i-OpenVPN kusuka ku-TAP kuye ku-TUN: ukulandelana kokufuduka okusebenzayo
I-TAP ithwala amafreyimu, i-TUN amaphakethe: amaklayenti, amakheli nemizila yokubuya kuhamba konke kanyekanye. Bhala uhlu lwemibandela, hlola insiza entsha, bese ususa ibhuloho.
Ukushintsha dev tap nge-dev tun kushintsha lokho okuthwalwa umhubhe, hhayi igama lawo kuphela. Isixhumi esibonakalayo se-TAP sidlulisela amafreyimu e-Ethernet ebhulohweni, ngakho amaklayenti aziphatha sengathi axhunywe kuswishi yasehhovisi. Isixhumi esibonakalayo se-TUN sithwala amaphakethe e-IP, ngakho amaklayenti adinga imizila futhi uhlangothi lwaphesheya ludinga indlela yokubuya. Amaklayenti, uhlelo lwamakheli kanye nomzila wokubuya we-LAN konke kumele kuhambe nalolo shintsho.
Ukufuduka kuwukwakhiwa kabusha kwenethiwekhi okunomhubhe oxhunyiwe, futhi ukulandelana okungezansi kukugcina kubuyiseka.
Bhala uhlu lwalokho okuncike ngempela ku-Ethernet
Bhala uhlu lwezinhlelo zokusebenza, hhayi amahost. Thola ukuthi ngayinye isebenzisa izinsiza ze-TCP noma ze-UDP ezihanjiswayo, ukutholwa ngokusakaza, i-DHCP evela ku-LAN yasehhovisi, iphrothokholi ye-Ethernet engeyona eye-IP, noma umbono wokuthi iziphetho zombili zikusubneti eyodwa. Ukufinyelela okuvamile kwe-IP kuyasinda kumklamo ohanjiswayo. Iphrothokholi edinga amafreyimu e-Ethernet angahlungiwe ayisindi, futhi akukho mkhakha wokuhambisa ongayenza isebenze. Izinhlelo zokusebenza ezincike ekutholweni zidinga indlela yokushintsha enqunywe ngaphambi kokushintsha, hhayi phakathi nakho.
Lolo hlu luphinde lube uhlu lokwamukela. Yonke into ongakwazi ukuyihambisa iba umbandela obhaliwe noma isizathu sokugcina ingxenye encane ye-TAP iphila kuphela kulowo mthwalo womsebenzi.
Yakha uhlelo lwamakheli nemizila yokubuya
Khetha isiqalo samaklayenti esingahlangani ne-LAN, ububanzi obudala bebhuloho noma noma iyiphi inethiwekhi amaklayenti asevele eyifinyelela. Iseva ene-topology yesubneti idinga isiqeshana esifana ne-dev tun, topology subnet ne-server 10.78.0.0 255.255.255.0, kodwa leso siqeshana, hhayi iphrofayili esebenzayo. Gcina inqubomgomo evunyiwe ye-TLS, ubunikazi, ukuthutha nokufinyelela kuzungezile, futhi usebenzise isiqalo osiqinisekisile ukuthi asinamuntu.
Bese ubhala izindawo okufanele amaklayenti afinyelele kuzo nokuthi ubani ohlinzeka indlela yokubuya. Iseva idinga ukudlulisela okuvunyiwe kanye nendlela evunyelwe yokuqhubeka. Amarowutha e-LAN adinga umzila wokubuya oya esiqalweni esisha, noma umklamo udinga ukuhumusha komthombo kanye nezindleko zokubonakala okuhambisana nakho. Umzila ophushwa kuklayenti ulungisa iklayenti, hhayi indlela yokuphendula ye-LAN.
Hlola kusilaleli esihlukile
Misa insiza entsha eceleni kwendala ephothini layo kanye nobubanzi bamakheli ayo, esikhundleni sokushintsha indawo eyodwa yokungena esebenzayo. Khipha amaphrofayili okuhlola ngohlelo olukhona lokubhalisa ukuze kungabi namuntu owakha kabusha i-CA ngenxa yokufuduka. Xhuma iklayenti elilodwa elimelela kuvuliwe kuphela indlela yokuhlola, bese uqhathanisa amakheli anikeziwe, i-DNS eyimfihlo, izinhlelo zokusebenza ezivela ohlwini kanye nemizila okufanele ihlale ivinjiwe.
Faka ukuhlolwa kokuxhuma kabusha nethrafikhi yokubuya. Ukuxhawula okuqedwayo akusho lutho ngokuthi uhlangothi lwaphesheya lungaphendula yini.
Hambisa amaklayenti ngamaqembu nokubuyisela emuva
Fuduka ngamaqembu amancane ngokwanele ukuba ukwehluleka kube umsebenzi wokusekela hhayi ukuphazamiseka. Gcina insiza endala isebenza futhi ibhaliwe kuze kudlule ukuhamba kwangempela komsebenzi kweqembu ngalinye, futhi bhala ukubuyisela emuva njengokushintshela ephrofayilini yangaphambilini, hhayi ukwakha kabusha. Njengoba iqembu ngalinye lihamba, buyekeza imithetho ye-firewall esekelwe kumakheli, ukuqapha kanye nanoma yikuphi ukufinyelela okuqalwa iseva kwisiqalo esisha.
Amaqembu akunikeza nendawo yokuthola uhlelo lokusebenza okungekho muntu owakhuluma ngalo, ngenkathi indlela endala isekhona ukuze iqhathaniswe.
Susa ibhuloho kuphela ngemuva kokwamukelwa
Ukususa idivayisi ye-TAP yisinyathelo sokugcina, hhayi sokuqala. Hlola ukuthi ibhuloho lisathwala ikheli lokuphatha leseva, indlela yokuqapha noma umthwalo womsebenzi ongahlobene nawo ngaphambi kokususa noma yini. Susa ukuncika kokuqalisa, ubulungu bebhuloho kanye nokubekwa eceleni kwe-DHCP ngabangabanikazi bayo, ngalolo landelana, nencwajana yalokho okususiwe.
Ukufuduka kuqedwa lapho imodeli yokufinyelela ehanjiswayo isebenza ohlwini, hhayi lapho isixhumi esibonakalayo se-TAP sinyamalala kumphumela we-ip link.