OpenVPN ku-VPS: ayikho idivayisi ye-/dev/net/tun ongayivula

Ukuqala kokuqala kwehluleka ngomlayezo mayelana ne-/dev/net/tun noma idivayisi ye-TUN/TAP engavuleki. Izitifiketi azikafundwa, ngakho akukho lutho oluphrofayilini olunecala. I-daemon icela umgogodla into isivakashi esinganayo.

Leyo nto iyidivayisi yezinhlamvu esekelwa yimojuli ye-tun. Ukuthi ungayakha yini kuncike ekutheni umgogodla ngowakabani.

I-daemon icela ini kumgogodla

OpenVPN ivula i-/dev/net/tun futhi icela idrayiva i-interface. Idrayiva imojuli ye-tun, futhi inodi yedivayisi isibambiso esisetshenziswa isikhala somsebenzisi ukufinyelela kuyo. Uma imojuli ingakalayishwa, inodi ingase ingabikho noma ukuvula kungase kwehluleke. Azikho kuzo zombili izimo ezilungiswa ngokuhlela i-server.conf.

Funda leli phutha kuqala njengombuzo mayelana nenkundla. Iphutha lokucushwa livela ngemuva kokuvulwa kwedivayisi, hhayi ngaphambili.

I-VM noma isivakashi esabelana ngomgogodla

Ku-KVM, Xen noma omunye umshini ogcwele wobungcweti, umgogodla uwulawula wena. Ungalayisha amamojuli futhi wakhe inodi. Ku-OpenVZ, Virtuozzo noma ikhonteyina yesitayela se-LXC, isivakashi sabelana ngomgogodla womsingathi, ngakho i-root engaphakathi ayikwazi ukulayisha imojuli umsingathi angayilayishanga.

Ngakho ukwehluleka okufanayo kunabanikazi ababili abehluke kakhulu. Esimweni sokuqala ungakulungisa ngaphakathi kwesimo. Kwesibili uceli umsingathi, noma umhlinzeki, ukuthi aveze okuthile.

Sebenzisa i-ls -l /dev/net/tun, i-lsmod | grep tun ne-ip -brief link show ngaphambi kokunquma ukuthi usesimweni esiphi.

Ku-VM, layisha imojuli ngesikhathi sokuqalisa

Kumshini wobungcweti, i-modprobe tun ngokuvamile yakha inodi yedivayisi. Qinisekisa ukuthi ivela, bese wenza ukulayisha kube okungunaphakade ngokucushwa kwamamojuli kwesabelo, esikhundleni sokuthembela kumyalo othayiphiwe kanye. Inodi enyamalalayo ngemuva kokuqalisa kabusha iba ithikithi elifanayo ngenyanga ezayo.

Futhi hlola ukuthi umgogodla oqalise ngawo unawo yini umojuli. Umgogodla womhlinzeki osuswe izingxenye awunakuba nawo.

Uma inodi ikhona kodwa ukuvula kusahluleka, abasolwa abalandelayo izimvume nezinombolo ze-major/minor zedivayisi. Lokho kuyizilungiso zasekhaya, hhayi izicelo kumhlinzeki.

Kukhonteyina, idivayisi ingeyomsingathi

Kukhonteyina, idivayisi nekhono kuyizidingo ezimbili ezihlukene. Isikhathi sokusebenza kufanele sidlulise i-/dev/net/tun, futhi ikhonteyina idinga ikhono lenethiwekhi ukuze yakhe i-interface. Isikhathi sokusebenza esingenayo i-root esingakuniki kokubili sizoqhubeka sikhiqiza lelo phutha lokuvula, noma ngabe iphrofayili ibhalwe kanjani. Amasingathi amaningi e-OpenVZ ahlinzeka ngesishintshi se-TUN/TAP kuphaneli yeklayenti, futhi ukusivula kanye nokuqalisa kabusha ngokuvamile kuyisixazululo sonke.

Buza umhlinzeki imibuzo emibili eqondile: ingabe imojuli ye-tun ilayishiwe kumsingathi, futhi ingabe idivayisi iyatholakala ngaphakathi kwalesi simo? Ithikithi elingacacile lithola impendulo engacacile.

Kungani ukwakha kabusha imojuli kuvamise ukungasizi

Ukwakha imojuli ngaphakathi kwesivakashi kuvamise ukungasizi. Ukuhlanganisa kudinga ukucushwa komgogodla osebenza ngqo, futhi i-/proc/config.gz ayisibophezele futhi ivamise ukungabikho ezithombeni ezincane. Ngisho imojuli esebenzayo ayikwazi ukufakwa kumgogodla ikhonteyina engayona umnikazi.

Lapho idivayisi ivela, qalisa kabusha insizakalo futhi uqinisekise i-interface ngaphambi kokuhlola ithrafikhi. Ukubona i-tun0 kukhombisa ukuthi i-daemon ivule idivayisi. Akukasho lutho mayelana nokudlulisela, imithetho yensimbi yomlilo noma imizila etholwa amaklayenti.

Le mibuzo ihlukene enobufakazi obuhlukene. Idvayisi engekho iwukwehluleka kwesimo esidingekayo; umhubhe okhona kodwa ongathwali lutho uwukwehluleka kwenqubomgomo.