Hlela ama-subnet ngaphambi kwe-VPN yesayithi: phinda inombolo noma humusha

Amahhovisi amabili womabili asebenzisa 192.168.1.0/24 ngoba akekho owayehlela okunye, futhi kulindeleke ukuthi umhubhe ukuxazulule. Awukwazi: umzila awukwazi ukwenza ikheli elifanayo eliyimfihlo lisho izindawo ezimbili ezihlukene. Umsebenzi ovimbela lokho wenzeka ngaphambi kokuthi kubhalwe ipharamitha yokuqala yomhubhe.

Bhala uhlu lwazo zonke izingqikithi, kuhlanganise lezo ozikhohliwe

Qoqa ama-LAN, izingxenye zamaseva, amachibi amaklayenti okufinyelela kude, izingqikithi ze-VPC zamafu kanye nanoma yiziphi izixhumanisi zama-container noma ezingaphezulu okufanele amahost afinyelele kuzo. Amachibi amaklayenti yilawo abantu abawakhohlwayo, futhi ayahlangana nobubanzi behhovisi ngokumangalisayo kaningi ngoba womabili akhethwa kusuka kokungagqamile okufanayo. Fakela isixhumanisi sokuphatha noma iyiphi ingxenye engaphandle kwebhande.

Bhala umnikazi, isango, inhloso nokuthi i-prefix kufanele ifinyeleleke yini kusuka kwelinye isayithi. I-prefix engadingi ukweqa umhubhe akudingeki ihluke, futhi ukukwazi lokho kunciphisa umsebenzi wokuphinda inombolo.

Yenza i-IPv6 ngokwehlukile, ngoba uhlelo lwayo nokuhlangana kwayo kuzimele.

Qhathanisa ama-prefix, hhayi amakheli ajwayelekile

Izixhumanisi ezimbili ezinamakheli amahost ahlukene zingahlangana noma kunjalo, ngoba ukuhlangana kuyisici samamaski hhayi sezinto abantu abazikhumbulayo. 10.20.0.0/16 iqukethe i-10.20.30.0/24 kungakhathaliseki ukuthi ukhona okushoyo ngokuzwakalayo noma cha. Qhathanisa amapheya aphelele ama-prefix, futhi hlola izibalo ezihlanganisiwe ngokumelene nezixhumanisi ezincane ezingaphakathi kwazo. Yikho lokhu kuhlolwa kufanele kube kusipredishithi hhayi ekhanda lomuntu.

Ukuhlolwa okufanayo kusebenza echibini lamaklayenti le-VPN ngokwayo nasekunoma iyiphi ingqikithi ehumushiwe ohlela ukuyethula, ngoba ingqikithi ehumushiwe engqubuzanayo imbi kakhulu kunokuhlangana kwasekuqaleni.

Ithebula lama-prefix anamasks lanele; umdwebo ongenawo amamasks awanele.

Nquma ukuthi yini ngempela okufanele iqeque

Isayithi singaqukatha ama-subnet angamashumi amathathu kuyilapho isixhumanisi esisodwa sesevisi sidinga ukufinyelela kude. Qala kuleso sidingo futhi umemezele kuphela lokho okudingayo, ngoba izimemezelo ezincane nemithetho yokufinyelela ehambisanayo kulula ukuyibuyekeza futhi kunzima ukuyandisa ngengozi. Ukumemezela zonke izingqikithi eziyimfihlo ezisetshenziswayo kuwumkhuba oguqula umhubhe ube ibhuloho. Uma isimemezelo sincane, umphumela wephutha lesikhathi esizayo uba mncane.

I-DNS eyimfihlo kufanele ibuyisele amakheli amaklayenti ahlosiwe angawafinyelela, ngakho igama elikhomba engqikithini engamenyezelwanga noma ehlanganayo lihlala liphukile ngisho nalapho ukusesha kuphumelela.

Bhala uhlu lokufinyelela ngaphambi kokucushwa komhubhe, hhayi ngemva kokuba wehlulekile.

Phinda inombolo noma humusha, futhi wazi izindleko

Ukuphinda inombolo yesixhumanisi esisodwa ngokuvamile kuyikhambi elicace kakhulu lesikhathi eside, futhi kuthinta ukubekwa kwezindawo, amadivayisi, i-DNS, imithetho yodonga lomlilo kanye nakho konke okunekheli elibhaliwe ekucushweni. Ukuhumusha ingqikithi yokufinyelela kungenye indlela uma ukuphinda inombolo kungenzeki, futhi kubiza ubunikazi bomthombo kanye nesigaba semithetho efaka amakheli emithwalweni. Khetha okukodwa futhi uqedele, ngoba isixhumanisi esiphindiwe inombolo ngengxenye sibi kakhulu kunezinketho zombili.

Noma yini oyikhethayo, bhala phansi ikheli lasekuqaleni nelikethulwe, ngoba zonke izingxoxo zokuxazulula izinkinga kamuva zizidinga zombili.

Isixazululo esingenayo indlela yokubuya akusiso isixazululo.

Sebenzisa i-matrix yemigwaqo njengokuhlolwa kokwamukela

Qeda nge-matrix: i-prefix yendawo, i-prefix ekude, isevisi evunyelwe kanye nesango lokubuya. Lelo thebula liwukuhlolwa kokwamukela lapho umhubhe unyuka, futhi futhi liwumbhalo ozowufunda unjiniyela olandelayo. Hlola kusuka kumahost angempela kuma-subnet akhethiwe hhayi kusuka emasangweni.

I-ping phakathi kwamakheli omhubhe ifakazela ukuthi umhubhe ukhona futhi ayisho lutho ngohlelo lwamakheli olungemuva kwawo.

Gcina i-matrix kanye nokucushwa komhubhe, futhi ukwengezwa kwesayithi okulandelayo kuzoqala kudatha hhayi enkumbulweni. Uma uhlelo lukhona, umhlahlandlela wokudlulisela we-strongSwan uhlanganisa uhlangothi lwesango.