Isiqalo somphakathi sabakwa-VPN: yini ngempela esiyiphazayo

Iqoqo lamaklayenti elakhethwa ngoba izinombolo zibukeka zihle iyindlela elindele ukufakwa. Isiqalo akudingeki sibe ngasese ukuze i-VPN isebenze, futhi ukusebenzisa ibhlokhi engeyomunye umuntu nakho akubeki abasebenzisi bakho obala ku-inthanethi ngokuzenzakalela. Lokho esikwenzayo ukwenza lezo khelo zisho okunye ngesikhathi umhubhe usuphezulu, bese zisho okunye futhi lapho uwela. Hamba ngezivivinyo ezinhlanu ezingezansi ngokulandelana futhi ume lapho impendulo ithi «kwabiwe kwenye indawo».

Ukwabiwa akusona isimemezelo

Ukubeka ikheli kusikhombisi somhubhe akukusimemezeli ku-inthanethi. Ukufinyeleleka komphakathi kudinga umzila, indlela egunyaziwe kanye nomhlinzeki ozimisele ukuwuthwala, futhi akukho kulokho okuvelayo ngoba iklayenti lathola ikheli eqoqweni. Inqubomgomo yodonga lomlilo kanye nokugunyazwa komsingathi kuyizinqumo ezihlukene futhi.

Yingakho ingozi ingeyona leyo abantu abaningi abayicabangayo. Isiqalo esibolekiwe asenzi amaklayenti akho afinyeleleke; senza izindawo zomunye umuntu zingafinyeleleki kumaklayenti akho, okuwukwehluleka okuhlukile okunomnini ohlukile. Akekho ohlaselwayo futhi akukho simemezelo esiphumayo. Umsebenzisi akakwazi nje ukuvula isayithi ebesisebenza izolo, futhi ideski losizo alinasizathu sokusola iqoqo le-VPN.

Umehluko ubalulekile lapho ukhetha iqoqo. Ukube ukukhathazeka kwakho kuphela bekungukuvezwa ku-inthanethi, ibhlokhi yomphakathi ibingabonakala iphephile ngoba akukho okusimemezelayo. Ukukhathazeka umzila wasekhaya iklayenti eliwufakayo kuleso siqalo, futhi lowo mzila uyafakwa kungakhathaliseki ukuthi omunye umuntu uyawubona noma cha.

Umzila weklayenti ubamba ini ngempela

Lapho umhubhe ukhuphuka, iklayenti lithola umzila wesiqalo seqoqo, futhi lowo mzila wehlula umzila ozenzakalelayo kuyo yonke indawo engaphakathi kwawo. Isicelo esiya kumsingathi osemthethweni kuleyo bhlokhi manje siya ku-VPN esikhundleni se-inthanethi. Ukuthi siyahluleka, siyalenga noma sifike kuseva engalungile kuncike kulokho ohlangothi lwakho olukwenzayo ngaso.

ip route get 198.51.100.20
ip -br addr show tun0
traceroute -n 198.51.100.20

Gxuma ukusesha ngomhubhe uphezulu bese uphinda ngomhubhe uphansi. Ikheli lisho into eyodwa esimweni sokuqala futhi lisho okuhluke ngokuphelele kwesesibili, futhi noma yiluphi uhlelo olugcine ukuxhumana noma ukuxazululwa kwegama ngaleso sikhathi soshintsho luzoziphatha ngendlela engafani. Lokho kungafani kunzima ukukusekela kunokwehluleka okumsulwa, ngoba kuncike esikhathini. Umsebenzisi oxhuma kabusha ngesikhathi esingalungile uthola isipiliyoni esihlukile kunalowo ongenzi njalo.

Yingakho futhi ikheli le-IP elijwayelekile lingesona ubufakazi bobuwena. Gcina ukuqinisekiswa kwesitifiketi negama leseva endaweni yangempela, ngoba ikheli lezinombolo oyefika kulo emizuzwini emihlanu edlule manje lingase libe ngeyengxoxo enye.

Qhathanisa iqoqo nayo yonke inethiwekhi oyaziyo

RFC 1918 ibeka eceleni amabhlokhi amathathu okusetshenziswa okuyimfihlo: 192.168.0.0/16, 172.16.0.0/12 kanye ne-10.0.0.0/8. Izigidi zezinhlangano ezihlukene ziwasebenzisa futhi, ngakho okwangasese kuyisitatimende mayelana nokwabiwa futhi akusoze kwaba isethembiso sokuthi akekho omunye okhethe izinombolo ezifanayo.

Qhathanisa iqoqo elingumgadli nama-LAN asehhovisi, ama-VPC asefwini, amanye amaqoqo e-VPN, izixhumanisi zozakwethu kanye nezikhathi abasebenzi abakude abangase babe nazo ekhaya. Udaba lwasekhaya akusona isizathu sokuklama isiqalo esingajwayelekile; kuyisizathu sokugcina iqoqo lincane futhi libhalisiwe.

Xhumanisa ukwabiwa nalowo ophethe umzila, futhi ubhale indlela yokubuya endaweni efanayo. Iqoqo okungekho muntu ongakwazi ukulihambisa libuyele kulo iqoqo elizotholwa futhi ngesikhathi sokuphazamiseka. Beka iqoqo kudokhumenti efanayo namabanga ezindawo, hhayi ekulungiselelweni kweklayenti okuhlelwe umuntu oyedwa kuphela. Idokhumenti iyona eyenza ukungqubuzana okulandelayo kugwemeka.

Nini ikheli lomphakathi liyimpendulo efanele

Izinhlangano ezinesikhala somhlaba esabiwe ngendlela efanele zingakha iqoqo le-VPN elinamakheli omphakathi, futhi ezinye zikwenza ngamabomu ukuze zigweme ukuhumusha. Lowo mklamo usadinga umzila, ukuqinisekiswa komthombo, imithetho yokufinyelela kanye nokuqinisekiswa kweklayenti; ukwabiwa akukunikezi lulodwa lalokho.

Lokho esikunikezayo ukwehluka, isici isiqalo esibolekiwe esinganaso. Uma ungumnikazi webhlokhi, umzila ofakwa yiklayenti lakho ukhomba emakhelini angawakho ngempela, futhi incazelo ayishintshi lapho umhubhe uwela.

Ungangezi i-NAT ngokuzenzakalela ukuze unxephezele ukukhethwa kweqoqo. Umklamo oyimfihlo onomzila onezindlela zokubuya ezicacile uhlanzekile kunokuhumusha okusetshenziswa ngoba ukwabiwa kwekheli akukaze kuhlelwe, futhi i-IPv6 idinga uhlelo lwayo lwamabomu esikhundleni sekhophi yezimo ze-IPv4.

Hoxisa iqoqo elibi ngaphandle kokulahlekelwa ukufinyelela

Uma iqoqo selivele lisetshenzisiwe, yenza uhlu ngaphambi kokulishintsha: ukubekwa kwekheli, imizila efakiwe, amarekhodi e-DNS axazulula ebhlokhini, imikhakha yodonga lomlilo kanye nezinhlelo ezincike kukho. Bese uhlela ushintsho ngokunakekela okufanayo nanoma yikuphi okunye ukushintshwa komzila. Memezela kubantu abazokubona, ngoba amaseshini abo azowa lapho iqoqo lihamba. Ushintsho oluthule ekwabeni kwekheli leklayenti lukhiqiza amathikithi okusekela abonakala engahlobene nomsebenzi.

Gcina indlela yokubuyisela enginciki eqoqweni olisusayo, ngoba isikhathi osihoxisa ngaso yisona sikhathi ukufinyelela kwakho kude okungase kunyamalale kanye nalo. Bese uqinisekisa izinhlangothi zombili: izindawo eziyimfihlo ezihlosiwe zisasebenza, futhi izindawo ze-inthanethi ezazibanjwa ngaphambili manje zixazulula kubanikazi bazo bangempela.

Lokho okufunayo iqoqo iqembu lenethiwekhi elingalaba, lihambise futhi lihoxise njengento eyodwa ehambisanayo. Ifomethi yekheli iyodwa ayisunguli ukuphepha noma ukuxhumana.