Uhlelo lwe-Linux olujwayelekile lusebenzisa i-VPN ngaphandle kokuthinta i-TUN

Isiphequluli esisebenzisa i-Linux VPN esivele isungulwe asivuli /dev/net/tun. Sivula i-socket, futhi i-kernel inquma ukuthi amaphakethe ale socket aphuma ngaluphi uxhumano. Inqubo eyadala umhubhe yenza umsebenzi ohlukile kunenqubo ethwala ithrafikhi yayo. Ukugcina lezi zindima ezimbili zihlukene kuphendula imibuzo eminingi yemvume ngaphambi kokuba ibuzwe.

Landela iphakethe elilodwa lisuka ku-socket liye emhubheni

Uhlelo olujwayelekile lubiza i-connect noma i-send, futhi i-kernel ibheka indlela eya endaweni ekuyiwa kuyo. Uma indlela ekhethiwe ikhomba kuxhumano lomhubhe, iphakethe lifakwa emgqeni kudivayisi efundwa yi-daemon ye-VPN. I-daemon iyayibethela futhi iyikhiphela ngaphandle ngoxhumano lomzimba. Umsindo ngamunye kuleyo ncazelo uyindawo okungaphendulwa kuyo umbuzo wemvume.

Akukho lutho kuleyo ndlela oludinga ukuthi uhlelo lwazi ngedivayisi. I-daemon ibamba isichazi sefayela futhi yenza imisebenzi yoxhumano, kuyilapho uhlelo lubona kuphela i-API ejwayelekile yenethiwekhi.

Dweba izingxenye ezimbili kanye, futhi imibuzo yemvume izoba lula ukuyibeka. Ingxenye ephezulu iwumhlaba wezinhlelo, kanti ingxenye engezansi ingeye-daemon.

Nquma ukuthi ubani udinga idivayisi nokuthi ubani akayidingi

Ukudala noma ukuxhuma kuxhumano lwe-TUN kudinga ukufinyelela kudivayisi kanye nokwengeziwe ikhono lokuyisetha, yingakho isevisi ye-VPN esekelwayo iqala ngegunya lokuphatha inethiwekhi noma isebenzisa umsizi onelungelo. Leyo mfuno ingeye-daemon. Ayisho lutho ngesiphequluli, iklayenti ledathabhezi noma ithuluzi lokudlulisa amafayela. Isevisi edinga lelo khono iyidinga ukuze kube yisinyathelo sayo sokusetha, hhayi amaklayenti ayo.

Uma indlela nenqubomgomo sezindaweni zazo, inqubo ejwayelekile isebenzisa indlela evelayo ngemibizo yayo ejwayelekile ye-socket. Ayidingi inodi yedivayisi, futhi ayidingi i-root.

Ukushintsha izimvume zedivayisi akusiyo indlela yokunika uhlelo ukufinyelela endaweni ekuyiwa kuyo. Kumane kudlulisa umngcele wedivayisi kwenye indawo.

Hlola isikhala samagama uhlelo olusebenza kuso ngempela

Ikhontheyna, noma isikhala samagama senethiwekhi sesibili, sinika izinqubo zayo iqoqo elihlukile lezixhumanisi noluhlu lwemizila. Umhubhe kusibungu awuveli lapho ngokuzenzakalela, futhi akukho shintsho lwezimvume zedivayisi olushintsha lokho. Uhlelo luzomane ludayelela ngokusebenzisa lokho isikhala samagama esikunikezayo. Yingakho isithombe sekhontheyna singeke sithole ifa lomhubhe wesibungu ngengozi.

Hlola nge- ip netns list kanye ne- ip -n NAME route, noma ngokubheka isixhumanisi sesikhala samagama senqubo. Impendulo ivamise ukubonakala ngomyalo owodwa.

Abasebenzisi ababili kusibungu esisodwa nabo bangahlinzekwa ngezindlela ezahlukene ngenqubomgomo. Leso yisinqumo senethiwekhi, hhayi ubufakazi bobunikazi bedivayisi.

Hlukanisa amakhono kunqubomgomo yenethiwekhi

Amanye amathuluzi adinga okungaphezu kwe-socket. Ukubamba amaphakethe kudinga i-socket eluhlaza, futhi ukushintsha imizila kudinga igunya lokuphatha. Lezo ziyimisebenzi ehlukene enezimvume ezehlukene, futhi ukunika eyodwa akumele kufundwe njengemfuno evamile yokusebenzisa i-VPN.

Uhlelo olusebenzisa umhubhe walo uqobo lwalo luyicala lesithathu. Luvula i-TUN ngempela ngoba luthatha indima ye-daemon, yingakho ludinga amalungelo e-daemon.

Qamba umsebenzi ngaphambi kokuthi uqambe ilungelo. Lokhu kokubili kuvame ukuba lula ukuhlukanisa kunokuba kubonakala.

Qinisekisa ukuhlukaniswa ngama-akhawunti amabili

Xhumanisa umhubhe njengesevisi, bese ugijima uhlelo njengomsebenzisi ojwayelekile futhi uqinisekise ukuthi lufinyelela insiza yangasese. Hlola ip route get yendawo ekuyiwa kuyo kusuka ku-shell yalowo msebenzisi ukuze ubone ukuthi yiluphi uxhumano olukhethiwe. Uma indlela ilungile futhi uxhumano lusahluleka, inkinga inqubomgomo hhayi ilungelo.

Idizayini ephumayo iyilungelo elincane kakhulu elinomngcele ocacile: ingxenye eyodwa inesetho kanye nezinsiza zomhubhe, imithwalo yomsebenzi igcina ama-akhawunti ayo ajwayelekile, futhi inqubomgomo yenethiwekhi inquma ukuthi yini engadlula. Ukugijima konke njenge-root kubhidliza lezo zindima ngaphandle kokuchaza lutho.