OpenVPN TUN ne-TAP: izimo ezintathu ezinqumayo

Imigudu emibili ingathwala ukudluliswa kwefayela okufanayo kodwa yehluke ngokuphelele kulokho ekubeka ocingweni. Eyodwa ihambisa amaphakethe e-IP phakathi kwamakheli amabili; enye ihambisa amafreyimu e-Ethernet futhi ingaxhunyaniswa ngebhuloho esigabeni. Lowo mehluko unquma ukuthi yiziphi izinhlelo ezisebenza, yimaphi amaklayenti angaxhuma nokuthi ungakanani ukuklama kwenethiwekhi ozithwalayo.

Ngokomkhuba, izimo ezintathu zinquma lokhu. Zihambe ngokulandelana, ngoba eyokuqala ivamise ukuqeda ingxoxo.

Yini isixhumi ngasinye esiyithwalayo ngempela

Idivayisi ye-TUN iyisixhumi sephoyinti-kuya-phoyinti sesigaba 3: i-kernel iyinikeza amaphakethe e-IP futhi umgudu uwahambisa ekhelini lozakwabo. Idivayisi ye-TAP iyisixhumi sesigaba 2 esithwala amafreyimu e-Ethernet, futhi yilokhu okwenza ibhuloho likwazi ngisho nokwenzeka, njengoba imibhalo ye-kernel ichaza. Kokubili akushintshi indlela umthwalo ogcwalisiwe obethelwa ngayo, futhi kokubili akusona isilungiselelo samandla. Ukukhetha kumayelana nalokho okumele kushintshwe iziphetho, hhayi ukuthi ithrafikhi ivikelwe kahle kangakanani.

Umphumela owodwa ulandela ngokushesha: zombili iziphetho kumele zivumelane. Iklayenti elilungiselelwe uhlobo olulodwa lwedivayisi alikwazi ukujoyina iseva elilungiselelwe olunye, noma ngabe yini enye ehambisana.

Isimo sokuqala: ingabe kukhona okudinga isigaba sesibili?

Ibhuloho lifaneleka ubunkimbinkimbi balo lapho iphrothokholi idinga ngempela isizinda sokukhonjiswa esifanayo: ithrafikhi engeyona eye-IP, ukutholwa okungekho ukweqa i-rotha, noma uhlelo lokusebenza olugcizelela ukuba sesigabeni esisodwa. Konke okunye kuyinkinga yomzila, futhi umzila uyixazulula ngemishini emincane kakhulu. Ukwelula isigaba endaweni ebanzi kwelula nokukhonjiswa kwaso, ngakho ukuvimbela imijikelezo, ukuhlela amakheli kanye nezindawo zokuhluleka konke kuba yingxenye yokuklama. Lokho kukhulu ukwamukela ngesidingo obekungasenelisa umzila owodwa.

Isivivinyo sicacile: shono uhlelo lokusebenza oluhlulekayo emgudwini onomzila bese usho ukuthi kungani. Uma impendulo ingukuthi ludinga ukukhonjiswa, isigaba sesibili yimpendulo eqotho. Uma impendulo ingukuthi othile akakwazanga ukufinyelela iseva eyodwa, isidingo umzila noma umthetho we-firewall.

Isimo sesibili: ingabe amaklayenti ayakwazi?

Ukusekelwa akufani. Amaklayenti ekhompyutha yetafula ngokuvamile anikeza zombili izinhlobo zedivayisi, kuyilapho amaklayenti eselula nasekwehlisiwe evamise ukusebenzisa imodi yomzila kuphela, futhi iphrofayili engeniswa ngaphandle kwezikhalo isengahluleka lapho izama ukwakha isixhumi. Hlola iklayenti elithile kanye nenguqulo esikhundleni sokuqagela izici egameni leplathifomu.

Iphutha mayelana nokukhetha okungasekelwe akuyona isimemo sokuthi ususe imigqa ongayazi kuze kuphumelele ukungeniswa. Kusho ukuthi iphrofayili neklayenti akuvumelani mayelana nalokho okwenzekayo, futhi ukulungisa kungokomqhubi okhiphe iphrofayili. Ukususa ukukhetha ukuze uthulise isiqinisekisi kungaveza uxhumano olubonakala lusebenza kodwa lushiya buthule impahla eyayikhona ngenxa yalo.

Isimo sesithathu: ingabe lokhu kuyinkinga yesixhumi ngempela?

Izinketho ezimbili eziseduze zisoleka ngezinkinga zesixhumi. Idivayisi yengqondo inquma ukuthi yini engena emgudwini, kuyilapho UDP noma TCP inquma ukuthi ukuthuthwa kwangaphandle kuziphatha kanjani, futhi kokubili akulaphi ukudluliswa okuma. Lapho ukudluliswa okukhulu kulenga kanti okuncane kuphumelela, usayizi wephakethe ne-MTU kufanele kunakwe.

Iklayenti elixhuma bese lingakwazi ukufinyelela ihost yangaphakathi eyodwa ngokuvamile libheka umzila, umthetho we-firewall noma indlela yokubuya engekho.

Kumsebenzi olawulwayo, sebenzisa ukuhlelwa kwesixhumi okucaciswa iphrofayili yomqhubi, ngoba uhlangothi lweseva selwakhiwe ngakulo. Ekusetshenzisweni kwangasese, khetha ngokwesidingo sangempela sohlelo lokusebenza bese ubhala isizathu eceleni kokukhetha.

Umbuzo awukho mayelana nokuthi yikuphi ukukhetha okuqinile. Ungukuthi yikuphi ithrafikhi ekudinga ngempela.