Kungani iphrofayili ye-OpenVPN isebenza ekhaya kodwa yehluleka ehhotela

I-Wi-Fi yasehhovisi kanye nekamelosiko yehhotela kunganikeza ikhompyutha ephathekayo efanayo amanethiwekhi amabili ahluke kakhulu, futhi iphrofayili ephakathi kwawo ayazi lutho ngalokho. Lokho okusebenza ekhaya kucabanga umgwaqo ophezulu ovumelayo, ukuxazululwa kwamagama okusebenzayo kanye nenethiwekhi encane yendawo engashayisani nanoma yini ethwalwa umhubhe. Ngakunye kwalokhu kucabanga kungahluleka ngokwahlukene.

Indlela ewusizo yokulungisa lokhu ukubheka inethiwekhi njengamaqiniso amane ahlukene, bese uwahlola ngokulandelana. Ukuqagela iphrofayili kuqala ngokuvamile kuletha ushintsho olungalungisi lutho futhi olufihla ubufakazi.

Amaqiniso amane enethiwekhi ayashintsha phakathi kwezindawo

Iqiniso lokuqala ukuthi inethiwekhi yendawo iyakuvumela yini ukuphuma. Ingosi yokungena ingena idivayisi ekhasini lokungena futhi ivimbe konke okunye kuze kuqedwe lelo khasi, okusho ukuthi umhubhe awukwazi ukuqala, noma ngabe iphrofayili ilungile kangakanani.

Lesibili ukuxazululwa kwamagama. Ingosi ebamba i-DNS iphendula wonke umbuzo ngekheli yayo, ngakho igama lomsingathi we-VPN lixazululeka kuya engosini futhi iklayenti lizama ukwakha umhubhe oya ekhasini lewebhu.

Lesithathu ukuhlunga kokuthutha. Amanethiwekhi afuna ukuvumela ukuphequluka kuphela adlulisa i-TCP 443 kuyo noma iyiphi indawo futhi alahle cishe konke okunye, kuhlanganise ne-UDP.

Lesine ukukhethwa kwamakheli. Inethiwekhi encane yendawo ingase idlulane nenethiwekhi engemuva komhubhe, noma umgwaqo ophezulu unganikezi nhlinzelela ye-IPv4 esebenzisekayo.

Ukuxazululwa kwamagama kanye nengosi yokungena

Shintsha igama lomsingathi kuphrofayili ngekheli lezinombolo leseva bese uzama futhi. Uma i-IP ixhuma kodwa igama lingaxhumi, iphutha lisekuxazululweni kwamagama, futhi iphrofayili ngokwayo ilungile.

Vula isiphequluli bese uzama ikhasi le-HTTP elijwayelekile ngaphambi kokuthinta i-VPN. Ukudluliselwa ekhasini lokungena kusho ukuthi ingosi isalindile; qedela, bese uxhuma futhi. Amahhotela amaningi aphinde aqede isikhathi sesikhashana ngemva kwamahora ambalwa, okubonakala njengokuphuka phakathi nosuku hhayi inkinga yokungena.

Uma nekheli lezinombolo lihluleka, ukuxazululwa kwamagama akusona isichasiselo, ngakho dlulela ekuthuthweni. Gcina ikheli oyihlole, ngoba litshela ukuhlolwa okulandelayo ukuthi amaphakethe aphumile yini emshinini.

Ukuhlunga kokuthutha: i-UDP kuqala, i-TCP 443 njengelekele

Ukugeleza kwe-OpenVPN phezu kwe-UDP 1194 akubonakali njenganoma yini eyaziyo udonga lomlilo lwehhotela, ngakho kulahlwa ngaphandle kwephutha. Iklayenti lizama futhi kuze kuphele isikhathi salo, futhi umsebenzisi ubona uxhumano olungakaze lusungulwe esikhundleni sokwenqatshwa. Izindonga zomlilo ezenza kanjalo azivamisile ukuqopha ukulahlwa endaweni ongayibona. Ukungabikho kokwenqatshwa kukodwa kuyinkomba.

I-TCP 443 iyilekeleli elithembekile ngoba inethiwekhi ayikwazi ukuhlukanisa ne-HTTPS ejwayelekile. Sebenzisa iphrofayili ye-TCP yomhlinzeki uma ikhona, ngoba nesiseva kufanele silalele kuleyo nto yokuthutha nakuleyo mbobo; ukushintsha iklayenti kuphela kuletha olunye uhlobo lokwehluleka. Uma ingekho iphrofayili ye-TCP, buza umhlinzeki esikhundleni sokwakha eyakho ngokuhlela imbobo. Uhlangothi lwesiseva kufanele luvume, futhi ukungafanani kubonakala njengenkinga yodonga lomlilo futhi.

Linde izindleko zokusebenza. I-TCP ngaphakathi kwe-TCP inyusa ukuthunyelwa kabusha emgwaqweni onokulahleka, ngakho umhubhe we-TCP osebenzayo ungase uzizwe unensayo kunethiwekhi yehhotela egcwele. Lokhu kuwukushintshana ukuze kufinyeleleke, hhayi iphutha okufanele ulilandele.

Ukushayisana kwamakheli nemigwaqo ephezulu engenayo i-IPv4

Umhubhe ungase usungulwe kodwa ungathwali lutho. Uma i-LAN yendawo kanye nenethiwekhi ekude kwabelana ngesiqalo esifana ne-192.168.1.0/24, iklayenti lithatha umsingathi okude njengoxhumene ngqo futhi lithumela iphakethe kuxhumano lwendawo esikhundleni somhubhe. Uphawu uxhumano oluyimpumelelo olunenethiwekhi encane eyodwa engafinyeleleki, okulula ukuyifunda ngokungalungile njengenkinga yomzila ohlangothini lwesiseva.

Isixazululo esihlala njalo ukuhambisa i-LAN ekude iye ebangeni elizimele elingajwayelekile. Ukukhetha ibanga okungekho muntu olisebenzisa ekhaya, njenge-10.42.0.0/24, kuvimbela inkinga kuzo zonke izindawo zesikhathi esizayo esikhundleni sendawo eyodwa. Icebo lendawo ukugwema lelo hhotela, isizinda noma i-rawutha, okungeyona neze isixazululo.

Imigwaqo ephezulu yeselula yengeza izinhlobo ezimbili. I-NAT yezinga lomhlinzeki isho ukuthi ukuxhumana okungena akufiki, okubalulekile uma uphethe isiseva kodwa hhayi kuklayenti eliphumayo. I-APN elungiselelwe njenge-IPv6 kuphela enokuhumusha kwe-NAT64 ingahlulisa iklayenti elifuna umzila we-IPv4 wangempela, futhi ikhambi elivamile ukushintsha iphrothokholi ye-APN ibe yi-IPv4 noma isitaki esikabili.

Izimpawu ngemva kokuthi umhubhe unyuke

Umhubhe oxhumayo bese uthule ngokuvamile uyinkinga ye-keepalive noma ye-MTU, hhayi imbobo evinjiwe. Uxhumano oluwa ngemva kwenani elimisiwe lamaminithi lukhomba isibali sikhathi se-keepalive noma sokuxoxisana kabusha. Setha iklayenti ukuthi lihlole ozakwabo futhi liqale kabusha uma izimpendulo ziyeka, futhi hlola i-MTU yomhubhe encane uma i-ping idlula kuyilapho ukudluliswa okukhulu kumile.

Ngaphambi kokucela usizo, bhala izinto ezintathu: ikheli olizamile nokuthi liphendulile yini, ukuthutha nembobo oyisebenzisile, kanye nenethiwekhi encane yendawo yenethiwekhi ehlulekile. Ngokuhlanganyela zihlukanisa ukuxazululwa kwamagama ekuhlungeni kokuthutha nasekushayisaneni kwamakheli, futhi yizona zizathu ezihlala zikhona lapho kuhlangana nobufakazi.