Yini eshintshwa ukuqondiswa kwemigwaqo ngomgomo kuthrafikhi ye-VPN, futhi yini engashintshwa

Ukuqondiswa kwemigwaqo ngomgomo kuphendula umbuzo ohlukile kunalowo obuzwa iningi lamaphathekwano okuxazulula izinkinga. Ithebula eliyinhloko lisho ukuthi indawo ekuyiwa kuyo iya kuphi; imithertho yomgomo isho ukuthi iyiphi ithebula ebuzwa nhlobo, futhi ingakunquma lokho ngokukhetha ikheli lomthombo, uphawu lwephakethe, noma isixhumanisi iphakethe elafika kuso. Lapho umhubhe uziphatha ngendlela engahambisani, isethi yemithertho ngokuvamile iyimbangela futhi ithebula lokuqondisa ngokuvamile aliyona.

Imithertho ikhetha ithebula, bese ithebula likhetha umzila

Umgomo ngamunye uphethe ukubaluleka, isimo sokufanisa kanye nethebula eliqondiwe. Ikhompyutha eyinhloko ihamba imithertho ngokulandelana kokubaluleka futhi ima ekufanisweni kokuqala, bese yenza ukusesha okuvamile kwesandiso eside kakhulu kulelo thebula. Umthertho okhomba ethebuleni elingenalutho uwela kulokho okukhethwa umthertho olandelayo, futhi yileyo ndlela umthertho obhalwe ngokucophelela ongabonakala ungenzi lutho.

Yingakho ukukhipha ithebula eliyinhloko akuvamile ukuchaza iklayenti le-VPN elisebenzayo. Amaklayenti ngokuvamile afaka imithertho ezinombolweni eziphansi zokubaluleka, kude ngaphambi komthertho ozenzakalelayo wethebula eliyinhloko, ngakho iphakethe alikaze lifinyelele umzila obugqolozele kuwo. Ukwehlisa isilinganiso ethebuleni eliyinhloko akushintshi lutho kuthrafikhi eseyephambukiswa.

Umthertho futhi ungashintsha isandiso sibe umgodi omnyama noma singafinyeleleki ngenhloso. Amanye amaklayenti afaka umthertho onjalo njengeswishi yokuphepha, bese ukulahleka kubonakala kufana nomhubhe ophukile hhayi ohleliwe.

Funda isethi yemithertho njengokulandelana, hhayi njengohlu

Phrinta imithertho nezinto zayo ezibalulekile kanye namathebula ewakhombayo, bese uphrinta ithebula ngalinye eliphethe umzila ozenzakalelayo noma umzila womhubhe. Ukulandelana yikho okubalulekile, futhi yikho isithombe sesikrini esivame ukukushiya.

ip rule show
ip route show table all | sed -n '1,60p'
ip route get 198.51.100.20 from 10.8.0.2
ip route get 198.51.100.20 from 10.8.0.2 mark 0x1

Imiyalo emibili yokugcina yiyo eguqula ithiyori ibe ukubonwa, ngoba iyabuza ukuthi ikhompyutha eyinhloko yayingenza ini kulo mthombo nalolu phawu. Uma impendulo ishintsha lapho uphawu lushintsha, umthertho osekelwe ophawini uyasebenza futhi noma yikuphi ukuhlola okushiya uphawu kuhlola iphakethe elihlukile. Ukuxhumana kwangaphandle kufanele kube nomthertho wakho. Umhubhe oqondisa yonke ithrafikhi ngaphakathi kuwo kufanele ukhiphe ikheli lokugcina elixhuma kulo, kungenjalo amaphakethe ashumekiwe abuyiselwa emhubheni ewusanduka ukushiya. Iningi lamaklayenti lifaka lokho kukhishwa ngokuzenzakalela, futhi isethi yemithertho ehlelwe ngesandla yiyo indawo lapho kushoda khona.

Izimpawu namasokhethi: izindlela ezimbili amaklayenti ahlukanisa ngazo ithrafikhi

Amanye amaklayenti aphawula amaphakethe ku-firewall bese efaka umthertho ofanisa uphawu. Amanye asebenzisa ukuqondisa ezingeni lesokhethi, abeka umzila kusokhethi ngaphambi kokuxhuma. Eyokuqala ibonakala ku-ip rule; eyesibili ayibonakali, futhi ngeke ivele ekusesheni okuvamile.

Uma uhlelo lokuhlola luziphatha ngendlela ehlukile kunohlelo okufanele lumele, hlola ukuthi uhlelo lufaka uphawu noma luzibophela kudivayisi. Lowo mehluko awusona isimanga uma indlela isiveziwe, futhi uchaza ukuthi kungani i-curl evela ku-shell nethebhu yesiphequluli zingathatha izindlela ezihlukile emshinini owodwa. Zombili lezi zindlela wukuqondiswa ngomgomo ngomqondo obanzi: zikhetha umzila ngokuthize okungeyona indawo ekuyiwa kuyo. Akukho kuzo okugunyaza ithrafikhi, futhi akukho kuzo okuthatha indawo yemithetho ye-firewall noma imininingwane yokungena elindelwe uzakwethu.

Landelela ubunikazi ngaphambi kokwengeza omunye umthertho

Imithertho ifakwa okuthize. Iklayenti le-VPN, umphathi wenethiwekhi kanye neskripthi esibhalwe ngesandla kungafaka imithertho ekuqaleni, futhi umqondo wokuxhuma kabusha ungashiya isethi yangaphambilini. Imithertho emibili endala evela kuphrofayela yangaphambilini izoqhubeka iqondisa ithrafikhi isikhathi eside ngemuva kokuthi iphrofayela isusiwe.

Thola ukuthi iyiphi inqubo ephethe umthertho ngokubaluleka nangokuma kwayo, futhi uhlole ukuthi lowo mnikazi uyibhala kabusha yini isethi kukho konke ukuxhumana. Uma kunjalo, umthertho wesandla owengezwe namuhla uyanyamalala kusasa, futhi ukulungiswa kungokwakho ukuhlelwa kweklayenti hhayi ifayela lomlando we-shell. Ukusula yonke isethi yemithertho ukuze kuhlolwe kuyindlela emfushane ekhangayo enezindleko ezingabikezelwa: iphinda isuse imithertho edingwa iklayenti ukuze umhubhe walo uqhubeke usebenza. Susa umthertho owodwa ngesikhathi, noma uhlole emshinini ongawuqalisa kabusha.

Fakazela ububanzi ngemifuduko emibili, hhayi eyodwa

Ukulungiswa kuqinisekiswa kuphela umfuduko okufanele uthinteke kanye nomfuduko okungafanele uthinteke. Khetha indawo ekuyiwa kuyo umgomo oyihambisa emhubheni, kanye nenye okufanele ihlale ngaphandle, bese uqhathanisa ukusesha nokubanjwa kwakho kokubili:

ip route get 198.51.100.20 from 192.0.2.44
ip route get 198.51.100.21 from 192.0.2.44
tcpdump -ni any host 198.51.100.21 and port 443

Lapho ukusesha okubili kubuyisa izixhumanisi ezihlukile, umthertho wenza okuthile. Lapho kubuyisa isixhumanisi esifanayo, umthertho ufanisa ngobubanzi obukhulu kunalokho obekuhlosiwe, futhi yilokho ukwehluleka okuthumela ngokuthula yonke inethiwekhi engaphansi ngomhubhe owawenzelwe uhlelo olulodwa.

Bhala ukubaluleka kwemithertho kanye nensizakalo engumnikazi kutikithi, kanye namakheli amabili okuhlola. Khona-ke umuntu olandelayo unepheya elingaphindwa esikhundleni sencazelo yophawu, futhi angasho ngomzuzu owodwa ukuthi ukuqondiswa kwemigwaqo ngomgomo kusasebenza yini.