Imizila ehlala njalo ye-VPN ye-Mac: networksetup noma i-hook yokuxhuma?

Umzila obhalwa ngemuva kokuxhuma kabusha ngakunye awusona isu. Nquma ukuthi isiqalo sengesikhungo se-VPN, sokusetshenziswa kwesikhashana, noma se-hook yamakheli aziwa kuphela ngemuva kwezingxoxo.

Umzila obhalwa ngemuva kokuxhuma ngakunye uxazulula umzuzu hhayi iviki. Ku-macOS, ukukhetha okuhlala njalo ngokuvamile kuyisiqalo esigcinwe nesikhungo se-VPN, ngoba isikhungo siyifaka kabusha njalo lapho kuxhunywana futhi siyisusa lapho isikhungo singaxhunyiwe. Ezinye izindlela i-route add yesikhashana yokuhlola kanye ne-hook yokuxhuma yamakheli aziwa kuphela ngemuva kwezingxoxo.

Nquma ukuthi umzila ungesikhungo noma ungesikhathi

Buza ukuthi isiqalo sincike kuni. Uma kuyinethiwekhi yangasese eqinile ngemuva kwesikhungo se-VPN somdabu, umzila ungeso leso sikhungo. Uma sincike kukheli lozwa elishintsha njalo lapho kuxhunywana, i-hook noma umsebenzi oqhutshwa isimo kungaba umnikazi ongcono. Uma uhlola umzila wemizuzu emihlanu elandelayo kuphela, umzila wesikhashana wanele.

Umzila oboshelwe esikhungweni unomjikelezo wempilo ohlanzekile kakhulu. Uvela nesikhungo futhi unyamalale lapho isikhungo singaxhunyiwe, ngakho awukwazi ukuphila isikhathi eside kunomhubhe owukhomba. Leyo mpawu ibaluleke kakhulu kunokunethezeka komyalo womugqa owodwa.

Umzila oboshelwe esikhathini ungowokuxhumana, futhi leyo nombolo ishintsha ngaphandle sesaziso. Ukuxhuma kabusha kungase kunikeze umhubhe igama le-utun elihlukile kunalelo elasetshenziswa isikhathi esidlule, okuguqula umyalo obhalwe ngokuqinile ube umzila ongakhombisi lutho noma, okubi kakhulu, omunye umhubhe.

Funda isimo samanje somzila nesikhungo

Qala ngamagama asetshenziswa uhlelo ngempela. Igama lesikhungo kuzilungiselelo zenethiwekhi liyisihlonzi semiyalo engezansi, futhi ithebula lamanye imizila likhombisa lokho iklayenti elixhunyiwe elikufakile. Funda kokubili ngenkathi umhubhe uvuliwe.

scutil --nc list
networksetup -listnetworkserviceorder
netstat -rn | head -30
route get 10.20.5.5

Lokho kusesha kukhombisa ukuthi i-kernel ingakhetha isango nokuxhumana okuphi kuleli kheli ngalesi sikhathi. Uma isivele ikhetha umhubhe, isiqalo simboziwe futhi umzila omusha ubuzoba ngaphezulu. Uma ikhetha i-router yasendaweni, umhubhe awunaso leso siqalo.

Phawula ikheli lozwa ngenkathi uxhunyiwe. Liba inani lesango emzileni oboshelwe esikhungweni, futhi ngokuvamile iyindawo ekhonjiswayo yomzila ozenzakalelayo womhubhe ku-netstat -rn.

Gcina isiqalo nge-networksetup

Ithuluzi le-networksetup linamathisela imizila eyengeziwe kusikhungo senethiwekhi. Esikhungweni esibizwa nge-OfficeVPN nesiqalo sangasese esifinyeleleka ngozwa womhubhe, ifomu ithi:

sudo networksetup -setadditionalroutes OfficeVPN 10.20.0.0 255.255.0.0 10.8.0.6
networksetup -getadditionalroutes OfficeVPN

Yonke intathu ngemuva kwegama lesikhungo inikeza indawo, imaski yayo yenethiwekhi kanye nozwa womhubhe njengesango. Ucingo olulodwa lungathwala iziqalo ezimbalwa, kanti ucingo olungenalutho lususa uhlu olugciniwe. Umfundi uyisinyathelo sokuqinisekisa; uma uhlu lungenalutho, isethingi asizange sisetshenziswe kusikhungo osicabangayo.

Isango kufanele kube uzwa womhubhe, hhayi i-router yomzimba. Umzila osho isango lasendaweni uthumela isiqalo sangasese ngaphandle ngokuxhumana komzimba, okuwukwehluleka kwasekuqaleni okunezinyathelo ezengeziwe. Uzwa wakudala uyisizathu esivame kakhulu sokuthi umzila obonakala ulungile ungalokothe uthwale ithrafikhi. Funda kabusha uzwa kusimo esixhunyiwe esikhundleni sokukopisha ikheli encwadini endala.

Sebenzisa i-route add ekuhloleni kuphela

Umzila oqondile uwusizo ukufakazela ukuthi isiqalo siyasebenza ngaphambi kokusenza sibe njalo. Ifomu lokuxhumana ligwema ukusesha isango:

sudo route -n add -net 10.20.0.0/16 -interface utun4

Umzila unyamalala ekuxhumweni kabusha okulandelayo futhi uncike kunombolo yokuxhumana ekhona namuhla. Lokho kuwenza ube ukuxilonga, hhayi ukuthunyelwa. Uma ukuhlola kusebenza futhi umzila oboshelwe esikhungweni ungasebenzi, qhathanisa kuqala inani lesango; yiyo inkambu evame ukungalungi.

Qaphela izeluleko ezishintsha umzila ozenzakalelayo we-VPN ukuze ziphoqe ukuhlukaniswa. Iklayenti eliphoqa umhubhe ogcwele lingase lifake kabusha imizila yalo ngemuva kokuxhuma kabusha noma ukuvuselelwa kwenqubomgomo, ngakho ushintsho lwesandla luhoxiswa buthule. Iziqalo ezimbalwa zangasese ziyinkinga yomzila; ukugcina yonke ithrafikhi ye-inthanethi yasendaweni ngokumelene nenqubomgomo yomhubhe ogcwele isinqumo sohlangothi lweseva.

Khetha i-hook kuphela lapho ikheli kuxoxwa ngalo

Kumakhonkco asuselwa ku-PPP njenge-L2TP, i-macOS isebenzisa i-/etc/ppp/ip-up lapho umkhonkco ususungulwe. Iskripthi sithola igama lokuxhumana kanye namakheli asendaweni nakude okuxoxiwe ngawo, ngakho singengeza umzila oncike kuzwa owenikwe yiseva. Yiso kanye leso simo umzila wesikhungo oqinile ongakwazi ukusichaza.

I-IKEv2 namaklayenti abakhiqizi kungenzeka bangawusebenzisi nhlobo lowo mzila we-PPP, okusho ukuthi iskripthi singathula isikhathi sonke. Lapho lokho kwenzeka, umsebenzi we-launchd obuza i-scutil --nc status futhi osebenza ngokushintsha kwesimo uyindlela elinganayo, ngokubambezeleka okuncane.

Noma iyiphi i-hook oyisebenzisayo, yenze ibe idempotent futhi ivumele isuse kuphela imizila eyayidalile yona. Iskripthi esisusa yonke imizila ekhuluma ngomhubhe ekugcineni sizosusa umzila ogcina iseva ye-VPN ifinyeleleka, futhi uxhumano luzowa ngokushesha lapho luphumelela.

Qeda ngokuhlola indawo yangasese, ukuphequlula okuvamile kanye nomjikelezo wokuxhuma kabusha noma wokulala. Bese uhlola i-scutil --dns, ngoba ukuxazululwa kwamagama kungomunye umgomo futhi umzila osebenzayo awufakazeli ukuthi amagama angasese ayaxazululwa.

Izihloko ezihlobene