Ukuhlelwa kwemigudu ye-OpenWrt: uchungechunge olubamba i-DNS yasendaweni
Izicelo zamaklayenti kanye nezicelo zomucubunguli ngokwawo zingena ngamahuku ahlukene. Inqubomgomo eqondiswe ku-prerouting ithwala zonke izicelo ze-LAN futhi ishiye umucubunguli ku-uplink ye-ISP.
Amaklayenti ase-LAN axazulula ngomhubhe kanti ukusesha komucubunguli ngokwawo akukwenzi lokho ngokuthula. Izibuyekezo zamaphakethe, ukuvumelanisa isikhathi kanye ne-DNS eguquguqukayo konke kuphuma ngomgudu ojwayelekile, kuyilapho zonke izicelo ezidluliswayo zithatha i-VPN, futhi akukho lutho kusixhumi esibonakalayo esibonisa ukuthi zikhona izindlela ezimbili ezihlukene. Incazelo ayiyona iphutha enqubomgomeni kodwa umbuzo wokuthi yiluphi uhuku olubona iphakethe. Imifudlana emibili, ikheli elilodwa lomxazululi, futhi munye kuphela wabo onqamula umucubunguli. Ukubahlukanisa kungukulungisa konke.
Imifudlana emibili, ikheli elilodwa lomxazululi
Umfudlana wokuqala yilowo abantu abawucabangayo. Iklayenti libuza umxazululi womucubunguli, umxazululi udlulisela phezulu, futhi lelo phakethe elidlulisiwe lidlula kumucubunguli lapho liphuma. Lelo phakethe libonakala kukho konke okubheka ithrafikhi edlulisiwe.
Umfudlana wesibili awufiki nhlobo noma kuphi. Umucubunguli uyawudala, ngakho-ke alikho iphakethe elingenayo kanye nesinyathelo sokudlulisela esingafaniswa.
Womabili angakhomba ekheli elifanayo lomxazululi, futhi yilokho kanye okwenza kube lula ukweqa umehluko. Indawo efanayo, umsuka ohlukile, uchungechunge oluhlukile. Uma usubona umsuka, okusele kokuxilonga kuyalandela.
Amaphakethe adlulisiwe nalawa enziwe endaweni angena ngendlela ehlukene
Ithrafikhi edlulisiwe ihlolwa lapho ifika isuka kwesinye isixhumi. Amaphakethe okuhlelwa komgudu wenqubomgomo akuveza lokho njengochungechunge lwe-prerouting, futhi umthetho obekwe lapho ubona zonke izinto ezingena emucubungulini. Yingakho izicelo zamaklayenti ziziphatha ngqo njengoba inqubomgomo ichaza, futhi yingakho umucubunguli uyiziba. Umthetho awunaphutha, uvele unamathele kuhuku umucubunguli ongakaze afinyelele kulo. Uwususe, futhi ukufana okufanayo kuqala ukusebenza.
Ithrafikhi eyenziwe endaweni yenziwa inqubo kumucubunguli futhi ingena emgudwini wokuphuma. Ihlelwa isinqumo somucubunguli ngokwawo futhi ihlangana nenqubomgomo kuphela uma inqubomgomo ihlanganisa lolo chungechunge. Akukho sixhumi esingenayo esingafaniswa kanye nesinqumo sokudlulisela esingabhekwa.
Lokho kuyisici sendawo lapho amaphakethe azalwa khona, hhayi iphakethe elithile. Umthetho obhalelwe uchungechunge olulodwa awunawo umbono ngolunye. Akukho kulungiswa komthetho okushintsha lokho.
Khetha uchungechunge lokuphuma, bese unciphisa ukufana
Ukulungisa ukunamathisela inhloso efanayo kuchungechunge lokuphuma futhi, noma ukuhambisa umthetho lapho uma kuyizicelo zomucubunguli ngokwawo ezibalulekile kuwe. Kusimo se-OpenWrt esakhiwe phezu kwephakethe lokuhlelwa komgudu, lokho kusho ukukhetha i-output esikhundleni se-prerouting ekulungiseleleni kochungechunge lomthetho. Gcina imithetho yomibili uma zombili izigaba zidinga ukumbozwa.
Bese unciphisa lokho umthetho okufanayo nakho. Amakheli omxazululi wendawo afika kuphothi umxazululi awusebenzisa ngempela isinqumo esincane kakhulu kunokuthumela yonke into eyenziwa umucubunguli emhubheni.
Gcina imithetho emibili icacile esikhundleni sokuzama ukubhala eyodwa ehlanganisa zombili izindlela. Imithetho ehlukene ilula ukufunda, futhi ikuvumela ukuthi ukhubaze indlela yomucubunguli ngaphandle kokuphazamisa ithrafikhi yamaklayenti lapho ulungisa amaphutha. Futhi yenza izinto zokubala zibe nencazelo ngayinye.
Gcina ukuthutha komhubhe ngokwawo ngaphandle komthetho
Ukuxhumana kwangaphandle komhubhe nakho kwenziwa umucubunguli. Umthetho othumela yonke ithrafikhi eyenziwe endaweni emhubheni uzohlela umhubhe ngawo ngokwawo, futhi awusoze wanyuka nhlobo.
Ukufinyelela kokuphatha kungumhlatshazwa wesibili. Izikhathi zokuphatha eziqhamuka kumucubunguli, noma izimpendulo kuzo, zingadonswa emhubheni ngumthetho wasendaweni obanzi kakhulu futhi zingafinyeleleki kusuka ku-LAN.
Khipha iphoyinti lokugcina lomhubhe ekufaneni, futhi ugcine umthetho ukhawulelwe kumakheli omxazululi. Lokho kwanele isidingo se-DNS futhi kukuncane ngokwanele ukucabanga ngakho.
Hlola zombili izigaba, hhayi esisodwa
Buka umucubunguli wenza isicelo sakhe futhi uphawule ukuthi yisiphi isixhumi esisithwalile. Phinda ukusesha kusuka kumsingathi we-LAN futhi uphawule ukuthi yiluphi uhambo olwaluthathwa. Izibali kumithetho yenqubomgomo zenza zombili izimpendulo zibonakale ngaphandle kokuqagela.
Thatha imiphumela njengezinto ezimbili ezitholakele. Iklayenti elixazulula ngomhubhe alisho lutho ngomucubunguli, futhi umucubunguli oxazulula kahle akasho lutho ngeklayenti elifakwe kwesinye isilaleli. Zibhale njengemigqa ehlukene kurekhodi loshintsho.
Hlola nephothi: umthetho ofana nephothi yendawo 53 ushiya umxazululi ofinyelelwa nge-DNS over TLS ku-853 noma iphoyinti lokugcina le-HTTPS. Fanisa ukuthutha okusetshenziswa ngempela upstream elungisiwe, futhi ukuvuza kuvaleka ngesizathu esifanele.