I-laptop inikeza ikhasi ku-localhost, ifoni ijoyina i-VPN efanayo, futhi isiphequluli efoni sibika ukuthi isayithi ayifinyeleleki. I-tunnel ayinawo umonakalo okwamanje, ngoba i-tunnel ihambisa amaphakethe kuphela. Iseva yokuthuthukisa eboshwe ku-interface ye-loopback ayikaze yamukele ukuxhumana okubhekiswe kwenye into, ngakho indawo yokuqala okufanele ibhekwe i-socket elalelayo, hhayi i-VPN.

Dlula ku-socket, isilungiselelo se-bind, umthetho we-firewall kanye ne-URL, ngalolo hlelo.

I-socket iphendula umbuzo omncane

Isilaleli esakhiwe ku-127.0.0.1 samukela ithrafikhi evela emshinini uqobo futhi senqaba konke okufika kukheli olunye. Isilaleli esikukheli le-wildcard samukela kuyo yonke i-interface yendawo, kuhlanganise ne-interface ye-VPN, okuyinto ebanzi kunalokho okudingwa ukuhlelwa kokuthuthukisa okuningi. Isilaleli esiboshwe kukheli elilodwa elithile le-VPN iyisihloko esincane kunazo zonke esiwusizo, futhi sisebenza kuphela ngesikhathi lelo kheli likhona.

Kulokho kuvela izicupho ezimbili zamagama. Kusiphequluli sefoni, i-localhost isho ifoni, hhayi i-laptop. Ikheli le-wildcard liyinqobo ye-bind hhayi into yokuthayipha ku-URL. Noma ubani ohlola ngelinye lawo uzobika ukwehluleka okungakaze kuhileleke kunethiweki.

I-IPv6 yengeza icala lesithathu, ngoba i-socket ingamukela i-IPv4 ne-IPv6 kuye ngezinketho okulula ukuzikhohlwa. Funda umndeni wekheli kuhlu. Ukufakwa kwe-wildcard komunye umndeni akuchazi omunye.

Funda ikheli lokulalela

Hlola i-socket ngaphambi kokushintsha ukuhlelwa. Ikheli lendawo, imbobo kanye nenqubo engumnikazi ndawonye zikhomba ukuthi iseva ifinyeleleka yini ku-VPN.

Get-NetTCPConnection -State Listen -LocalPort 8080 | Select-Object LocalAddress,LocalPort,OwningProcess
Get-Process -Id (Get-NetTCPConnection -State Listen -LocalPort 8080).OwningProcess
ipconfig | Select-String -Pattern 'IPv4'
Get-NetFirewallRule -DisplayName '*8080*' | Format-Table DisplayName,Enabled,Profile,Direction,Action

Ikheli lendawo elingu-127.0.0.1 liyasixazulula isicelo: alukho ushintsho lwe-firewall oluzosiza, ngoba uhlelo lokusebenza alulaleli ku-interface ye-VPN. I-wildcard noma ikheli le-VPN kusho ukuthi i-socket ikahle futhi umngcele olandelayo uyasebenza.

Qinisekisa nenqubo engumnikazi, ngoba isevisi engahlobene embotsheni ejwayelekile ingenza ithebula libonakale lilungile kuyilapho iseva ebihlosiwe ingakaze iqale. Qhathanisa indlela yefayela elisebenzayo, hhayi igama kuphela. Inqubo endala evela ekusebenziseni kwangaphambili iyisikhohlisi esivamile.

Shintsha i-bind ngohlelo lokusebenza

Sebenzisa inketho yekheli lokulalela ebhalwe yi-framework bese uqala kabusha inqubo. Uma i-laptop ingumnikazi wekheli eliyimfihlo elingu-10.77.0.1, i-URL yefoni iba http://10.77.0.1:8080/ futhi lelo kheli kufanele lihanjiswe nge-VPN; akukho okunye ekuhlelweni okushintshayo.

Ungangezi amakheli angemthetho ku-Windows futhi ungasishintshi isango ukuphoqa i-bind. Lezo zinguquko zihlala ngemva kwesikhathi sokulungisa amaphutha futhi zimangaza umuntu olandelayo. Iseva eqalwe ngaphambi kokuba ikheli le-VPN libekhona nayo ingehluleka ukubopha, ngakho ukulandelana kokuqala kubalulekile ku-interface yesikhashana. Yinike umzamo oyengeziwe noma uyiqale ngemva kwe-tunnel. Ukwehluleka kwe-bind ngesikhathi sokuqalisa kubonakala njengenkinga ye-firewall ngakusasa ekuseni.

Ku-HTTPS, gcina igama lomsingathi wesevisi nokuqinisekiswa kwesitifiketi kungaphazamisekile. Isexwayiso sesitifiketi kukheli elingahluziwe iyinkinga yamagama, hhayi isinyathelo sokuchofoza ukudlula, futhi i-DNS eyimfihlo kufanele ivumelane nesilaleli osikhethile.

Vula umthetho owodwa, hhayi yonke inethiweki

Lapho i-socket isamukela kukheli le-VPN, i-firewall inquma ukuthi isicelo siyafika yini. Khawulela umthetho kulo hlelo lokusebenza, le protocol, le mbobo yendawo kanye nomthombo okude ogunyaziwe, futhi uqinisekise ukuthi iphrofayela iphi esebenzayo ku-adaptha ye-VPN.

Sebenzisa ikheli lomthombo i-Windows elibona ngempela, kuhlanganise noma yikuphi ukuhunyushwa okwenziwa isango, ngoba umthetho obhalelwe ikheli lokuqala lekhasimende ngeke uhambisane nelihunyushiwe.

Ikhasi elilayishwayo futhi elibonisa iphutha lohlelo lokusebenza liyintuthuko: ukunqatshwa kwe-HTTP kuwukwehluleka okuhlukile kokungabi nokuxhumana kwe-TCP, futhi uphenyo olulandelayo lungolwenqubomgomo yokufinyelela yohlelo lokusebenza uqobo, hhayi lwenethiweki.

Qeda ngokucela ikhasi kufoni ehlosiwe nokuqinisekisa ukuthi idivayisi ekhishiwe ayikwazi ukulifinyelela. Isilaleli esisebenzayo esinomthetho owamukela konke akusona isiphumo esifanayo.

Izihloko ezihlobene