Ukuhlinzeka nge-OpenVPN nge-TCP ne-UDP kusuka kuhost eyodwa
Inqubo eyodwa ibopha ithrenspothi eyodwa ngaphambi kwe-2.7. Qhathanisa ipheya le-TAP eliboshiwe, amasubnet amabili e-TUN kanye nechibi elabiwe, bese uhlobanisa iphrofayili ngayinye nesilaleli yayo.
Amanethiwekhi avumela i-TCP 443 kuphela ahlala kanye namanethiwekhi adlulisa i-UDP ngaphandle kwenkinga, futhi iseva eyodwa kufanele isevishe kokubili. Iphrofayili ene-proto udp iphendula iqembu lesibili futhi yehluleka kwelokuqala, futhi ukuhlela ukulungiselelo olufanayo ukuze kuthiwe proto tcp akudali isilaleli sesibili. Umyalelo ukhetha ithrenspothi eyodwa yenqubo eyodwa. Konke okunye kulandela leso sikhawu.
Kungenjalo usebenzisa inqubo engaphezu kweyodwa, noma usebenzisa inguqulo ekwazi ukubopha amasokhethi amaningi ngesikhathi esisodwa.
Inqubo eyodwa ibopha ithrenspothi eyodwa ngaphambi kwe-2.7
OpenVPN yomphakathi ibopha isokhethi echazwa yi-proto, futhi lowo myalelo ukhetha ithrenspothi eyodwa yesenzakalo. I-TCP ne-UDP ziyiziteki ezihlukene, ngakho inombolo efanayo yephothi ingasetshenziswa yizo zombili ngesikhathi esisodwa, kodwa hhayi yinqubo eyodwa. Ngakho umugqa we-2.6 ukunikeza ithrenspothi eyodwa ngedemon ngayinye. I-OpenVPN 2.7 isuse lowo mkhawu kumaseva, angabopha amasokhethi amaningi ngezitatimende eziningi ze---local enqubeni eyodwa.
Hlola inguqulo ngaphambi kokuklama eduze kwanoma iyiphi impendulo, ngoba uhlelo lwe-2.7 luyimodeli yokusebenza ehlukile enesintaksi yayo yokulungiselela. Umhlahlandlela obhalelwe i-2.6 uchaza izinqubo ezimbili ngisho uma ungasho njalo.
Izindlela ezintathu zokusebenzisa izenzakalo ezimbili
Ngamakhompiyutha we-TAP, sebenzisa isenzakalo esisodwa ngedi yethrenspothi bese ubopha amadivayisi amabili e-tap ngebhuloho kuhost. Womabili amaqembu amaklayenti agcina esesizindeni esisodwa sokusakaza, okuvumela ichibi lekheli elilodwa ukubamboza futhi kugcine amaphrothokholi ancike ekusakazeni esebenza. Nge-TUN ibhuloho alitholakali, ngakho ukuhlukanisa okulula kunikeza isenzakalo ngasinye isubnet yaso futhi umzila ugcina amaqembu amabili amaklayenti ehlukene. Inketho yesithathu igcina ichibi elilodwa ngokwenza isenzakalo ngasinye sishayele iskripthi se-learn-address esifaka umzila we-/32 kuklayenti ngedivayisi yaleso senzakalo.
Lolo hlelo lwesithathu yilona abantu abalucelayo futhi oludinga ukuqaphela okukhulu, ngoba iskripthi siba yingxenye yendlela yedatha futhi kufanele sibhekane nemicimbi yokwengeza, yokubuyekeza neyokususa ngendlela efanele.
| Arrangement | Interfaces | Address pool | Cost |
|---|---|---|---|
| Bridged TAP pair | Two tap devices joined by a bridge | One shared pool | Broadcast traffic and bridge maintenance |
| Two TUN subnets | Two tun devices, no bridge | One pool per instance | Routing rules and two plans |
| Shared pool with routes | Two tun devices plus a hook | One pool across both | A script on the data path |
Gcina izenzakalo ezimbili zihlukene
Isenzakalo ngasinye sidinga iphothi noma ikheli elihlukile, ifayela lesimo elihlukile kanye nendawo yelogi ehlukile. Amademoni amabili afaka kufayela elifanayo lesimo akhiqiza okukhiphayo okungafundeki ngesikhathi sehlakalo, futhi yileso sikhathi lapho ukudinga khona. Uma isenzakalo sesibili sibopha ikheli elithile, lelo kheli kufanele libe khona kuhost lapho inqubo iqala; uma kungenjalo iphuma ngokwehluleka kokubopha ngaphambi kokuthi isho okuthile ngokhiye.
Qamba amayunithi namaphrofayili ukuze ithrenspothi icace egameni lefayela. Umsebenzi olandelayo akufanele kudingeke avule ukulungiselelo ukuze azi ukuthi iyiphi i-TCP.
Hlobanisa iphrofayili nesilaleli
Iseva esebenzisa i-proto tcp ilindele iphrofayili yeklayenti ene-proto tcp-client, futhi iphrofayili esaphethe i-proto udp mayelana naleso silaleli iphelelwa yisikhathi ngaphandle kwephutha umsebenzisi angalithathela isinyathelo. Gcina amaphrofayili amabili uma ukusatshalaliswa kunikeza zombili izithrenspothi, futhi uwamake ukuze ukusekela kwazi ukuthi yikuphi okwazanywa. Inombolo yephothi iyodwa ayichazi ithrenspothi.
Imithetho yedwala lomlilo ilandela ukuhlukaniswa okufanayo: umthetho we-UDP 1194 awusho lutho nge-TCP 1194, futhi umthetho wekheli elilodwa awubozi isilaleli esinye.
Funda kuqala umbono weseva
Qala nge-ss -lntup kuseva bese uqinisekisa ukuthi kuvela kokubili isilaleli se-TCP ne-UDP. Bese uxhuma iklayenti elilodwa yonke inhlobo futhi uhlole okukhiphayo kwesimo ukuthi kunamarekhodi amabili anamakheli ahlukene. Uma amasokhethi ekhona futhi kungekho klayenti elifikayo, indlela noma udwala lomlilo lunqaba amaphakethe ngaphambi kokuthi idemoni iwabone.
Isokhethi engaveli neze iyinkinga yokulungiselela noma yokubopha, futhi isokhethi evelayo kodwa engarekhodi ukuxhumana inguinkinga yokuhlunga. Womabili abukeka efanayo kuklayenti, yingakho umbono weseva ngokwayo uza kuqala. Khumbula ukuthi i-TCP ithwala ukuvinjwa kwasekhanda komugqa, ngakho ukuyinikeza kuyisinyathelo sokufinyeleleka hhayi ukuthuthukiswa kumaklayenti anendlela ye-UDP ehlanzekile.