Ucingo lushiywe ngaphandle kwe-VPN? I-tunnel ye-router noma iklayenti kudivayisi ngayinye

I-laptop ixhumeke ku-VPN, ucingo luseku-Wi-Fi efanayo, futhi ucingo lusabhuqabhuqa kusuka kukheli we-ISP. Lokhu akulona iphutha leklayenti: i-tunnel ihlala kumshini oyiphetha, futhi akukho okunye okuyizuzayo ngokuba seduze. Ukusabalala kwanda kuphela lapho i-router ngokwayo isebenzisa iklayenti, noma lapho umshini uguqulwa ngamabomu waba yisango le-LAN. Ukuthi iyiphi imodeli oyifunayo kunqunywa izinto ezintathu: iphrothokholi i-provider yakho ekhuluma ngayo ngempela, ukuthi amadivayisi adinga ukuphathwa ngokuhluke kangakanani, nokuthi yikuphi ukwehluleka ongakwamukela ngehora lesishiyagalolunye kusihlwa.

I-tunnel ye-router ihlanganisa ini ngempela

Lapho i-tunnel iphela ku-router, yonke idivayisi ehamba ngayo ihlanganyela indawo yokuphuma eyodwa. Lokhu kuyasenga ku-TV, i-console noma idivayisi engasoze isebenzise iklayenti: akukho okufakwayo, akukho okugcinwayo kusesikhathi, futhi indawo eyodwa yokushintsha i-provider.

Ukusabalala kunemibandela ngezindlela ezimangaza abantu. Inethiwekhi yezivakashi noma i-SSID yesibili enomgomo wayo ihamba ngendlela echazwa yilowo mgomo, hhayi i-tunnel. Indlela ye-IPv6 ingadlula i-tunnel ethwala i-IPv4 kuphela. Idivayisi enohlelo lwayo lwe-VPN noma isixazululi sayo esibethelwe inganaka i-router ngokuphelele. Futhi ithrafikhi ye-router ngokwayo, kuhlanganise nezibuyekezo ne-DNS, ilandela umgomo wayo wokuphuma, okuyindlela ehlukile kune-LAN ethunyelwayo.

Ukuhlola kuyafana kumamodeli womabili futhi kuthatha umzuzu: buza amadivayisi amabili ukuthi yikuphi ikheli umhlaba owubonayo, bese ubheka ohlwini lokuxhumana lwe-router i-tunnel. Uma ucingo lubika ikheli le-ISP ngenkathi i-router ibonisa i-tunnel esunguliwe, ucingo aluhambi ngayo, futhi akukho ukuxhuma kabusha okuzokushintsha.

Iklayenti kudivayisi ngayinye linqoba kuphi

Amaklayenti kudivayisi ngayinye anqoba ngokushesha lapho izidingo zihlukana. I-laptop yomsebenzi ingase idinge i-tunnel yenkampani ucingo okungafanele luhlanganyele kuyo; iklayenti le-provider lingase linikeze i-tunnel ehlukanisiwe ngohlelo, into i-router engakwazi ukuyiveza; i-console ingase idinge ukuhlala ngaphandle ukuze igcine uhlobo lwayo lwe-NAT. Idivayisi ngayinye yehluleka nayo ngokwayo, ngakho ukubhalisa okuphelelwe yisikhathi akuthulisi indlu yonke.

Imininingwane yokungena iyimpikiswano ebukhali kakhulu. I-router exhuma egameni lawo wonke umuntu igcina i-akhawunti eyodwa, futhi wonke umuntu kuleyo nethiwekhi uzuza ukufinyelela kwayo. Uma inhloso kuwukuqinisekisa umuntu ngamunye ngaphambi kokufinyelela i-inthanethi, i-tunnel ye-router iyodwa ayikwazi. Idizayini evamile iyingosi ebamba eqinisekisa i-akhawunti bese ikhulula iklayenti lingene ku-tunnel esivele isunguliwe, okuyizingxenye ezinyakazayo eziningi kunokuba izindlu eziningi zifuna.

Ukusekelwa kwamaphrothokholi kunquma amacala amaningi kunokukhetha

Ama-router asetshenziswa abantu abonisa kuphela amaphrothokholi anikezwe umkhiqizi. I-router ene-PPTP, i-L2TP noma i-IPsec ejwayelekile ayikwazi ukuxhuma ku-provider oshicilela amaphrofayela e-OpenVPN noma e-WireGuard kuphela, futhi akukho kulungiswa okushintsha lokho. Izinketho zobuqotho i-provider ekhuluma iphrothokholi esekelwayo, i-router ene-OpenWrt noma enye i-firmware eneklayenti olidingayo, noma iklayenti kudivayisi ngayinye.

Icala elihambisanayo livamile ngokufanayo: i-router enekhono le-OpenVPN ayikwazi ukusebenzisa i-provider inkonzo yayo encike eklelayenti layo nasezicubungulweni zayo zokuhambisa. Funda ikhasi le-provider lamaphrothokholi asekelwayo ngaphambi kokuthenga ihadiwe, futhi uhlole inguqulo ye-firmware, ngoba «isekela i-WireGuard» ekhasini lomkhiqizo ngokuvamile isho isizukulwane esithile se-firmware.

I-router yokuhamba eneklayenti le-WireGuard inguqulo eshibhile yemodeli ye-router, futhi iyimpendulo enengqondo kumadivayisi ambalwa angenakho ukusebenzisa iklayenti. Isengu-tunnel ye-router, ngakho konke okungenhla ngezethiwekhi zezivakashi, i-IPv6 nokwehluleka okwabiwe kuyasebenza ngaphandle koshintsho.

Inketho yesithathu: umshini njengesango

Ukwabelana ngeklayenti kusuka ku-laptop kungenzeka, futhi yilokho abantu abavamise ukukusho lapho bethi baguqula i-laptop yaba yi-router.

sysctl -w net.ipv4.ip_forward=1
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE

Kusebenza kuze kube umshini uyalala, iklayenti lixhuma kabusha kwelinye iphrofayela, noma i-firewall yomshini ngokwayo ilahla amaphakethe adlulisiwe. Ngaleso sikhathi konke okungemuva kwayo kulahlekelwa uxhumano ngesikhathi esisodwa, futhi ukwehluleka kubonakala njengenethiwekhi efile hhayi inkinga ye-VPN.

Elabhorethri noma ukuhlelwa kwesikhashana kuyasebenza. Njengokuhlelwa okungunaphakade kwenza i-laptop eyodwa ibe yindawo yokwehluleka eyodwa yekhaya, futhi ngokuvamile kuphela ngomuntu ozibuza ukuthi kungani i-TV yayeka ukusebenza lapho isivalo sivalwa.

Amaphothi angenayo, i-DNS nokwehluleka okwabiwe

Izinsiza ezingenayo zihamba ne-tunnel. I-VPN ku-router ngokuvamile yephula ukudluliswa kwamaphothi kuseva ye-LAN, futhi igama le-DNS eliguqukayo kufanele likhombe ekuphumeni kwe-VPN hhayi ekhelini le-ISP uma insiza kufanele ifinyeleleke nge-tunnel. Abanye abahlinzeki abanikezi ikheli elingenayo elingahambiswa nhlobo, futhi lokho kuqeda buthule noma yiluphi uhlelo olwaluncike kulo.

I-DNS ilandela i-router lapho i-router iphethe i-tunnel, okuwusizo kuze kube idivayisi eyodwa idinga esinye isixazululi. Iklayenti kudivayisi ngayinye lingakubeka lokho; umgomo we-router awukwazi ngaphandle kokuhlukanisa inethiwekhi phakathi. Ukwehluleka nakho kwabiwe, ngoba ukuwa okukodwa, ukubhalisa okuphelelwe yisikhathi noma umzila owodwa omubi ophushwayo kuqamunda idivayisi ngayinye ngasikhathi sinye.

Khetha imodeli ye-router lapho amadivayisi engakwazi ukusebenzisa amaklayenti futhi ukuphuma okukodwa kwamukelekile. Khetha amaklayenti kudivayisi ngayinye lapho izinqubomgomo zihlukile, lapho i-provider idinga iphrothokholi i-router engenayo, noma lapho i-akhawunti kungafanele yabiwe. Uma umshini uyisango, bhala ukuthi iyiphi i-interface eyabelana ngiphi inethiwekhi futhi uhlole isimo «i-tunnel yehla», ngoba yileso simo lapho iningi lalezi zakhiwo libonakala lingalungile.