Khetha isikhala samakheli e-VPN ngokwabiwa, hhayi ngokufihleka
Izintaba zokulinganisa, ezabiwe kanye nezedokhumenti ngayinye inomniniyo nenhoso. Khetha isikhala se-VPN kusuka kurejista, bese uhlela ukweqa okungeke ukwazi ukukususa.
Isiqalo esibonakala singajwayelekile sizwa sengathi siyindawo yokuphunyuka engxabanweni yamakheli yasekhaya neyasehhovisi, futhi ngokuvamile akunjalo. Yonke ibhlokhi kurejista ye-IPv4 yezinjongo ezikhethekile inomnikazi, inhloso kanye nesizathu sokuba khona, futhi ukuboleka eyodwa ngoba ibukeka ithule kudlulisa ukungqubuzana esikhundleni kokukususa. Yenza lokhu njengokulandelana: funda ukwabiwa, yenza uhlu lwalokho osekuvele kuyaqhwakele, bese kuthi ngemva kwalokho unqume ukuthi uyaphinda unikeza izinombolo, uyahumusha noma wenza isikhala esisha. Ukulandelana kubalulekile ngoba isinyathelo sesithathu sincike kulokho okutholwe yizinto ezimbili zokuqala.
Funda ukwabiwa ngaphambi kokuboleka ibanga
Irejista yezinjongo ezikhethekile ye-IANA ihlukanisa amabanga ayisikhala sangasese esingasetshenziswa futhi kumabanga akhonza inhloso eyodwa ethile yezobuchwepheshe. Ukusetshenziswa kwangasese, isikhala samakheli esabiwe, ukulinganisa kanye namabhlokhi edokhumenti kubukeka kufana kuspredishithi futhi kuziphatha ngokuhluke ngokuphelele uma sekudluliswa ngemizila.
| Range | Category | What it means for a VPN plan |
|---|---|---|
| 172.16.0.0/12, 192.168.0.0/16, 10.0.0.0/8 | RFC 1918 private use | Reusable by any network, so remote sites may already use the same numbers |
| 100.64.0.0/10 | Shared address space | Intended for provider-side carrier-grade NAT arrangements, not a second private pool |
| 198.18.0.0/15 | Benchmarking | Reserved for test traffic measurement; not spare production space |
| 203.0.113.0/24, 198.51.100.0/24, 192.0.2.0/24 | Documentation (RFC 5737) | Illustration only; a guide that uses them is not assigning them to you |
| 169.254.0.0/16, 240.0.0.0/4 | Link-local, reserved | Never a routed site subnet, whatever the prefix length suggests |
Amaqalo amabili ahluka kuphela ku-oktethi yesibili awuyona ibhlokhi eyodwa: i-198.18.0.0/15 ithwala ukugcinwa kokulinganisa, kuyilapho i-192.18.0.0/16 ingathwali lutho olunjalo. Inombolo emane ibukeke ifana nebanga eligciniwe ayilitholi igunya lencazelo yalo. Lokhu kudideka kuvamile ngokwanele ukufanelekela ukubukwa kwesibili ngaphambi kokufika kumthetho wothango lomlilo.
Imikhiqizo ngesinye isikhathi isebenzisa ngamabomu ibanga elikhethekile ngaphakathi kwembondela ekhomunyiwe, futhi lowo umklamo wabo okufanele ubhalwe. Lokho akukwenzi ibanga elifanayo libe yisikhala esingenalutho se-LAN engahlobene. Isikhala somphakathi naso asiyona indawo yokucasha: umzila wangasese oya ekhelini elingelomunye umuntu uphambukisa ithrafikhi eyayihloselwe indawo yayo esemthethweni.
Yenza uhlu lwezinto eziqhwakele oseunazo
Ngaphambi kokukhetha isiqalo, bhala yonke inethiwekhi ezofinyeleleka kusuka kumhubhe. Amasayithi, amachibi amaklayenti, ama-VPC asefwini kanye nezixhumanisi zozakwethu konke kuyabalwa, futhi isixhumanisi sozakwethu yiso esikhohliwe abantu kuze kuhluleke umzamo wokuqala wokuxhumana.
ip -4 route show table all ip -6 route show ip -br addr ip route get 192.168.1.10
Faka imiphumela kuthebula elilodwa nomnikazi webanga ngalinye eceleni. Ibanga ongakwazi ukusho umnikazi walo yibanga ongakwazi ukuliphinda unikeze izinombolo kamuva, futhi uhlu lwalo yilo oluguqula impikiswano mayelana namaqalo «angajwayelekile» ibe yisinqumo mayelana nezinombolo ezithile. Likutshela futhi ukuthi ukungqubuzana ozama ukukugwema kungokoqobo noma kungokucabanga.
Uma inethiwekhi yasekhaya yesisebenzi esikude isebenzisa isiqalo esifanayo ne-LAN yasehhovisi, lokho kungqubuzana kuyabonakala ohlwini futhi kungasingathwa ngokusobala. Lokho akubona ubufakazi bokuthi ibhlokhi yokulinganisa ingaba ukukhetha okuhlakaniphile, futhi ukuyiphatha kanjalo yiyo indlela okudaleka ngayo ukungqubuzana okulandelayo.
Khiqiza i-ULA ehlukile esikhundleni sokukopisha isiqalo
I-IPv6 ixazulula inkinga yokusetshenziswa kabusha ngendlela ehlukile hhayi ngenombolo enhle kakhulu. I-RFC 4193 ichaza amakheli endawo ahlukile abiwe endaweni anomazisi womhlaba we-40-bit wokungahleliwe, okukunikeza i-/48 yesayithi okungenzeka kakhulu ukuthi ingashayisana neyalomunye umuntu. Amathuba aphezulu, awaphelele, futhi isiqalo se-ULA asikunikezi ukufinyeleleka kwe-inthanethi.
openssl rand -hex 5
Izinombolo eziyishumi ze-hexadecimal zingamabhithi angamashumi amane. Faka i-fd ngaphambili futhi uzihlukanise nge-/48: umphumela ongu-3f9c1a7b02 uba ngu-fd3f:9c1a:7b02::/48. Khiqiza eyodwa isayithi ngasinye futhi uyibhale phansi, esikhundleni sokunamathisela i-fd00::/48 efanayo elula kukho konke ukusatshalaliswa.
Bese uqinisekisa ukuthi yonke indlela ikhuluma ngempela i-IPv6. Amaklayenti, isango, imizila, i-DNS yangasese kanye nenqubomgomo yesevisi konke kufanele kuvumelane, futhi ukwabela isiqalo kumhubhe akukwenzi uhlelo olusebenza nge-IPv4 kuphela lusebenzise lona.
Hlela ukweqa ongakwazi ukukususa
Okunye ukweqa kungunaphakade, ngokuvamile ngoba uzakwethu ngeke aphinde anikeze izinombolo futhi awukwazi ukumphoqa. Yilapho-ke ukhetha ngamabomu indlela esekelwayo: ukuphinda unikeze izinombolo ohlangothini lwakho, umongo wokudlulisa ngemizila ohlukanisiwe noma ukuhumusha okusobala emngceleni. Ukukhetha ngamabomu kusho ukubhala ukuthi yikuphi okukhethile nokuthi kungani ezinye ezimbili zenqatshiwe. Lowo mbhalo yiwona umklamo wokuhlolwa koshintsho wesikhathi esizayo ozowufunda ngempela.
Ukuhumusha kufanele kugcine indlela yokubuya, okusho ukuthi ubhale kokubili isiqalo sangempela nesiqalo esethuliwe bese uzihlanganisa namagama e-DNS angasese ahlakazeka kuzo. Isibizo esimepwe singenza ukuxhumana okukodwa kungabi nokudideka; asizenzi izindawo zangempela zibe ezihlukile emhlabeni jikelele futhi ngeke kumelane nozakwethu wesibili oqhwakele ngaphandle kombhalo wesibili wemephu.
Bhala ukwabiwa kanye nokukhethekile kwakho
Qedela ngombhalo obhala isiqalo ngasinye, isigaba saso, umnikazi waso kanye nesizathu sokukhetha. Engeza okukhethekile ngesimiso sabo sokuhumusha noma sokuphinda kunikezwe izinombolo kanye nosuku umuntu othile aba qinisekisa ngalo. Ibheka eceleni kwemithetho yothango lomlilo eyisebenzisayo, hhayi ku-wiki okungekho muntu oyivula ngesikhathi sesigameko. Umbhalo uyilo okuphakelwayo, hhayi isifinyezo sawo.
Leyo rekhodi iyiyo evimbela unjiniyela olandelayo ukuthi angafuni inombolo ebukeka ixakile, futhi kuleyo ndlela le nkinga itholakala kabusha njalo eminyakeni embalwa ngaphansi kwegama elisha. Iphinda inikeze ukuhlolwa koshintsho okuthile okuqinisekile okumele kuvunywe esikhundleni sombono mayelana namaqalo. Kubhale kanye, ekupheleni kokwabiwa, ngenkathi isizathu sisaphambi kwakho.