Ngabe i-script ye-up ye-OpenVPN yagijima ngaphambi kwesikhathi, noma ayizange ilungele?

I-script ye-up iyagijima, iphuma ngoziro, futhi umsebenzi ongaphakathi kuyo awufinyeleli isevisi eyimfihlo esebenza kahle ngemva kwamasekhondi amabili kusuka kutheminali. Umuzwa uthi yisikhathi, futhi ukulungiswa okuvamile ubuthongo, obufihla umjaho ngaphandle kokuwuqonda. Ukufundwa okuwusizo kakhulu ukuthi “up” ibiza i-hook, hhayi isiqinisekiso sokulungela. Isebenza lapho idivayisi ye-tunnel isilungisiwe, okuyisikhathi esingaphambi kwemizila, i-DNS futhi ngokuqinisekile ngaphambi kwanoma yiluphi uhlelo lokusebenza ngemuva kwe-tunnel.

Ukuhlolwa kwe-shell kwaphumelela ngoba kwagijima ngemva kokuba konke kuzinze. I-hook yagijima ngesikhathi esisodwa esithile.

I-up itholakala kuphi ekulandeleni kokuqalisa

OpenVPN ilungisa idivayisi ye-tunnel bese igijimisa i-hook ye-up. Ukufakwa kwemizila kuyisigaba sakamuva, futhi kunayo i-hook yayo, yingakho umsebenzi oncike emizileni obekwe ku-up ungabona idivayisi engenayo indlela ewusizo. Beka umsebenzi wemizila ku-route-up, futhi inkinga yesikhathi ngokuvamile iyanyamalala.

Incwadi yokukhombisa ibhala lolu kulandelana kanye nemvelo etholwa i-hook ngayinye. Lokho kulandelana kuyincazelo ephelele yombiko wakudala othi “kusebenza kusuka ku-shell yami”, futhi yisona sizathu sokuthi i-script efanayo ingaphumelela kumshini oyedwa yehluleke komunye onesigaba semizila esisheshayo. Awekho amaphethini emiphumela akhuluma ngokuthile ngekhwalithi ye-script.

I-DNS nokulungela kohlelo lokusebenza kuza kamuva nakakhulu. Ngisho nemizila efakiwe akuwona ubufakazi bokuthi iphoyinti lokugcina elikude liyalalela, ukuthi igama liyaxazululwa, noma ukuthi kukhona iseshini ye-desktop yomsebenzi osemkhakheni womsebenzisi.

I-hook ilithola ngempela ini njengefa

I-hook igijima ngaphansi kwe-akhawunti nemvelo yenqubo ye-OpenVPN, okuyinto engafani ne-shell yakho yokuxhumana. Kungenzeka ingabi nayo ibhasi yeseshini yomsebenzisi, imvelo ye-desktop, noma ubufakazi obuvuleka kuphela lapho kungenwa. Bhala ukuthi imuphi kulezi umsebenzi uwudinga ngempela.

Lokho kubalulekile emisebenzini ebukeka njengenethiwekhi kodwa encike kumongo womsebenzisi: ukufaka isabelo ngesiqinisekiso somsebenzisi, ukusetha i-proxy kumsebenzisi ngamunye, noma ukulungisa iphrinta. I-hook ye-tunnel enelungelo iyindawo engafanele yazo, futhi akukho ukulinda okulungisa iseshini engekho.

Lapho umsebenzi uhluleka ku-hook, bhala i-akhawunti, imvelo, kanye nomsebenzi wokuqala ohlulekile. Lokho kuhlukanisa isikhathi sangaphambi kwesikhathi nenkinga yemvume noma yomongo, futhi kokubili kunokulungiswa okuhluke ngokuphelele. Ukuqagela phakathi kwazo yindlela ukulungiswa kwemizuzu emihlanu okuba intambama yonke.

Kungani ukwengeza ubuthongo kungesona isihlolo sokulungela

Ubuthongo bubambezela i-script futhi bususa iwindi lomjaho. Ngosuku olusheshayo umsebenzi uyaphumelela; ngosuku olunensayo uyahluleka futhi, futhi ukuhluleka kuba nzima ukuphinda kukhiqizwe ngoba ukubambezela kubonakala kusebenza. Ukubambezela okusebenza kuphela ngaphansi komthwalo olula kungamane nje, hhayi ukulungiswa.

Uma ukuncika kuwumzila, sebenzisa i-hook ehambisana nokufakwa kwemizila. Uma ukuncika kuyisevisi engemuva kwe-tunnel, sebenzisa isihlolo esinomkhawulo esilinda leso simo esithile futhi sehluleke ngokusobala lapho singafiki neze.

Gcina ukuhluleka kucacile. I-hook ephuma ngoziro ngenkathi umsebenzi wayo wangempela wehlulekile imbi kune-hook ehlulekayo, ngoba umphathi wesevisi ubhala impumelelo futhi akekho obuye abheke. Umugqa owodwa we-log ovela ku-script uqobo uyindlela eshibhile yokugcina lokho kwethembekile.

Ukuhlanza nokuxhuma kabusha kufanele kuthole ukunakekelwa okufanayo

I-script eshintsha isimo esabiwe idinga indlela yokuhlehlisa ehambisanayo. Imizila, amafayela e-resolver, nezimpawu ze-firewall ezifakwa i-hook kufanele zibe idempotent futhi zihlehliseke, kungenjalo ukuxhuma kabusha kuzofaka ikhophi yesibili phezu kweyokuqala.

Ukuxhuma kabusha kungagijimisa ama-hook kaningi kunokuqalisa okuphelele kwesevisi. I-interface ehlala njalo evuselela iseshini ingase iphinde ivuse umjikelezo we-up ne-route-up, ngakho i-script ecabanga ukusebenza kanye ngakunye kokuvula izokugcina iziphatha kabi. Bala ukusebenza ku-log phakathi kosuku lokundindizela ukuze ubone ukuthi igijima kangakanani ngempela. Bese wenza i-script iphephe ukuze igijime izikhathi ezingaka.

Hlola umjikelezo wokuphila ohlulekile, hhayi umyalo wakamuva. Phinda uvule noma uxhume kabusha, bukela i-hook igijima, futhi qinisekisa ukuthi umsebenzi waphumelela ngaso leso sikhathi lapho igijima khona ngempela. Impumelelo evela ku-shell yokuxhumana ngemva kwalokho ingubufakazi mayelana nokuncika, hhayi ubufakazi bokuthi indlela yokuqalisa iyasebenza.

Qamba umcimbi umsebenzi ngamunye oncike kuwo, bese uxhuma umsebenzi ngalowo mcimbi. Konke okunye ukubambezela okuzenza sengathi isihlolo.