Indlela yokuhlela iphuli yamakheli abasebenzisi be-VPN efanele

Qala emkhakheni wephuli kuseva ye-VPN, hhayi kusipredishithi. Lokho okuthayipha lapho kuba yisikhala samakheli angaphakathi kumsebenzisi ngamunye oxhuma ngemuva kwalokho, futhi kufanele kuhlale kanye ne-LAN labo basebenzisi abayifinyelelayo, iziza ezinomzila ezingemuva kwayo nanoma yiliphi ikheli umsebenzisi asevele enalo ekhaya. Xhuma umsebenzisi oyedwa ngokushesha lapho iphuli isigciniwe, ngoba lokho kuxhumana kokuqala kukutshela ukuthi inani liyasebenza yini ngempela. Kusukela lapho uhambo luya ngaphandle: ikheli umsebenzisi alitholile, indlela impendulo ehamba ngayo kanye nerekhodi olushiya ngemuva.

Qala emkhakheni wephuli, ngaphambi kokuba noma yimuphi umsebenzisi axhumeke

Umkhiqizo ngamunye uveza lokhu ngendlela ehlukile, ngakho thola into enikeza amakheli ngempela. I-OpenVPN inomyalelo wephuli ohlangothini lwesiphathi onikeza ikheli elilandelayo elikhululekile, isango le-IKEv2 linesigaba sephuli eliboshelwe ekucushweni kozakwabo, kanti i-WireGuard ayinakho kokubili ngoba uzakwabo ngamunye uthwala ikheli lakhe efayeleni lakhe lokucusha. Umyalelo wephuli nekheli lozakwabo ngamunye akushintsheki, futhi ukuhlela okungalungile kuchitha ingxenye esele yohambo.

Lapho usunomkhakha, bhala uhlu lwezintaba ezikhona kakade: i-LAN yehhovisi, isiza ngasinye esinomzila, i-VPC yefu kanye nanoma yiliphi elinye iphuli elisasetshenziswa. Ukweqa kunqunywa izibalo ze-prefix, hhayi ukuthi izinombolo zezihambeli zibonakala zijwayelekile, ngakho qhathanisa isamba nesilinganiso ngasinye salezo zintaba. Izintaba ezimbili ezibonakala zifana ne-10.x aziyona ingozi lapho izamba zazo zingahlangani futhi ziba yisigameko sokweseka lapho zihlangana.

Bese unquma ukuthi ikheli liwumsebenzi wokuthi ubani oxhumayo noma wokuthi nini bexhuma. Ukwabelwa okuguquguqukayo kunikeza lokho okukhululekile, kuyilapho ukwabelwa ngobunikazi kubopha ikheli eliqinile esiqinisekisweni. Bhala ukukhetha, ngoba kushintsha ukuthi ukuxhuma kabusha kufanele kubukeke kanjani kamuva.

Funda ikheli umsebenzisi alithola ngempela

Xhuma umsebenzisi oyedwa futhi ufunde okubikwa umhubhe, hhayi lokho iphuli elakuthembisa. Umsebenzisi ubonisa ikheli lakhe langaphakathi esimweni sokuxhumana, kanti ku-Linux isixhumi siyithwala ngqo.

Qhathanisa lelo kheli nobubanzi obulugcinile. Uma lingaphandle kobubanzi, ubona umzila wokwabelwa ohlukile kunalowo owuhlelile. Hlola nobude be-prefix, ngoba umsebenzisi one-/32 akanaye uzakwabo oxhumene futhi uthumela yonke indawo ngomzila wakhe ozenzakalelayo.

ip -4 addr show tun0
ip route get 192.168.50.20

Umsebenzisi oxhuma kusihamba sasekhaya esisebenzisa ububanzi obufanayo uzoxhuma bese engafinyeleli lutho. Umsebenzisi ugcina umzila wakhe wasekhaya wale prefix, ngakho ikheli lomhubhe lishayisana nenethiwekhi engemuva futhi ithrafikhi iphuma ngesixhumi esingalungile. Leso simo asikwazi ukulungiswa kuseva; ikhambi elibhaliwe ukuphinda kwenziwe izinombolo zenethiwekhi yasekhaya noma ukukhetha ububanzi bephuli elikude ngokwanele ukuze ukushayisana kuhlale kuyivelakancane. Bhala kokubili ukwehluleka nekhambi, ngoba ideski losizo lizokuhlangabeza futhi.

Xhuma futhi lowo msebenzisi futhi ubheke ikheli. Iphuli eliguquguqukayo lingabuyisela inani elifanayo noma elihlukile futhi womabili alilungile, kuyilapho iphuli ngobunikazi elishintsha ikheli lingahloniphi isibopho. Lokho kuhlola kuthatha amasekhondi futhi kunquma ukuthi imodi oyibhale esigabeni sokuqala iyona modi esebenzayo.

Landela impendulo emuva isuka kusevisi

Iphuli lisebenza kuphela lapho izimpendulo zikwazi ukubuyela kulo. Isevisi ku-LAN iphendula ikheli langaphakathi, ngakho isango layo lidinga umzila wephuli noma ukuhumusha phambi kwesevisi. Lapho isicelo sifika ngomhubhe futhi impendulo iphuma ngomunye umzila, isivikeli somlilo esinesimo noma ukuhlola komzila ohlanekezelwe kuyilahla, futhi umsebenzisi ubona isevisi exhuma bese ilenga. Beka iphuli kumklamo womzila njengebhlokhi elilodwa elingafingqwa esikhundleni sokwengeza imizila yezihambeli ngazinye.

Ukuhumusha kushintsha lokho ingxenye esele yesistimu ekubonayo. Lapho umthombo ubhalwa kabusha, ikheli elisivikelini somlilo womhambeli naserekhodini lohlelo liyilo elihunushiwe, ngakho umthetho obhalwe ngokumelene nekheli lephuli awuhlangani nalutho futhi umugqa werekhodi awukwazi ukulandelelwa uze ufike kumsebenzisi. Idokhumenti ye-strongSwan yokudlulisela ihlanganisa ingxenye yesiphathi yalowo mzila wesango le-IKEv2. I-DNS nayo ithwala umkhawulo ofanayo, ngoba igama elixazulula ekhlelini umsebenzisi angakwazi ukulifinyelela lihluleka kamuva nakwenye indawo.

Abasebenzisi ababili, bese kuba nokuhoxiswa okukodwa

Xhuma abasebenzisi ababili ngasikhathi sinye futhi ufunde womabili amakheli. Kufanele ahluke, asebenzeke futhi abe ngaphakathi kwephuli, futhi ngamunye kufanele afinyelele isevisi okuhloswe yona. Iphuli elinikeza amakheli aphindwe kabili ngokuvamile libonakala lapha hhayi ekuhlolweni kokuqala komsebenzisi oyedwa.

Hoxisa isiqinisekiso esisodwa ngesikhathi omunye umsebenzisi esaxhumekile, bese uzama isevisi kumsebenzisi osele. Ukuhoxiswa okuphazamisa enye isikhathi kubonisa isimo esabiwe, ngokuvamile isiqinisekiso esisodwa noma ikheli elilodwa elisetshenziswa kabusha phakathi kwamadivayisi. Xhuma futhi umsebenzisi ohoxisiwe futhi uqinisekise ukuthi unqatshiwe hhayi ukunikezwa ikheli elikhululiwe.

Qeda ngendawo okufanele inqatshwe. Umsebenzisi ofinyelela konke uxhumekile, akahloliwe.

Bhala amanani amane lapho ushintsho olulandelayo luzowathola khona

Irekhodi lifushane: ububanzi bephuli ne-prefix, imodi yokwabelwa, umzila wokubuya noma ukuhumusha okusetshenziswayo kanye nobukhulu be-DNS obuphendula lezo zindawo. Libeke eceleni kokucushwa kwesiphathi hhayi ethikithini, futhi ulibhale nosuku. Noma ubani oshintsha okukodwa kwakho kokune kamuva udinga ezinye ezintathu phambi kwakhe, ngoba ukushintsha kosayizi wephuli kwephula umzila futhi ukushintsha komzila kwephula impendulo ye-DNS.

Gcina inothi lobunikazi nayo: ububanzi bomhubhe bungobesiphathi se-VPN, futhi ukubekelwa okwenziwe esikhathini se-DHCP se-LAN akubekeli lutho umsebenzisi ongaphakathi komhubhe. Lowo mugqa owodwa uvimbela umsebenzi wokuphinda ovame kakhulu, lapho othile engeza ukubekelwa futhi elindele ukuthi ikheli lomhubhe lilandele.