Ngabe iklayenti le-VPN elizulazulayo lingabamba isevisi yasehhovisi?

Iklayenti elizulazulayo lingasebenzela izinhlelo zehhovisi kuphela lapho isango lihambisa ngqo kulo, inqubomgomo yomsingathi ivuma, futhi idivayisi ihlala ifinyeleleka isikhathi esanele.

I-laptop yasehhovisi lakho ingashayela ingene isuka ekhaya futhi inikeze okuthile okudingwa ihhovisi, kodwa kuphela lapho izinqumo ezintathu ezihlukene zivumelana. Umhubhe ukuwukuthutha, ikheli langaphakathi liyindawo ekuyiwa kuyo, futhi inqubomgomo inquma ukuthi ubani angakwazi ukungqongqoza. Ukuthatha noma iyiphi yazo njengempendulo ephelele kuveza isikhalo esijwayelekile: umsingathi uphendula i-ping kodwa uhlelo lokusebenza aluhlanganisi neze. Iqhaza azifani, futhi umehluko ukhona khona lapho umsebenzi wokuklama ukhona.

Indlela yokungena ayisho lutho ngendlela yesevisi

Lapho iklayenti liqala umhubhe, livula indlela ezingasetshenziswa yizinhlangothi zombili uma isivele ikhona. Ukuthi uxhumano olusha lungangena yini lusuka esikhungweni luye kulelo klayenti umbuzo wenqubomgomo yesango, hhayi isici salowo ongene. Isibonelo, esikhungweni se-OpenVPN esihambiswayo, iseva idinga umzila oya ekhelini langaphakathi leklayenti kanye nokudlulisa okuvumela ubudlelwano bontanga.

Cabanga ngohlelo lwempahla olubuza i-ejenti kuma-laptop azulazulayo, noma unjiniyela odinga i-API yokuhlola esuka esiteshini sokusebenza ekhaya. Bobabili bafuna uhlangothi lwasehhovisi luqale ingxoxo, okuphambene nephethini evamile yeklayenti-kuya-kuseva.

Imikhiqizo yokufinyelela kude ebambisiwe iyahluka lapha, futhi umehluko awulona iphutha. Amanye ama-VPN ekhonzo elawulwayo avimbela ngamabomu ukuxhumana okungaceliwe okubheke kumaklayenti axhunyiwe ngoba imodeli yawo iyiklayenti-kuya-kwinsiza, hhayi insiza-kuya-kwklayenti. Funda ukwakheka komkhiqizo okubhaliwe ngaphambi kokuthembisa uzakwethu ukuthi i-laptop yakhe ingasebenza njengeserva.

Landela umzila wokubuyela emuva ngaphambi kokuvula imbobo

Indlela inezingxenye ezintathu: umzila esangweni okhomba ekhelini langaphakathi leklayenti, inqubomgomo evumela umshayeli othile, kanye nesevisi elalelayo emgomweni. Ingxenye ngayinye yehluleka ngendlela ehlukile, yingakho «i-VPN ivuliwe» isho cishe lutho.

Izindaba ezinhle ukuthi indlela yangaphakathi ayidingi ukudluliswa kwembobo kurotha yasekhaya yeklayenti. Yingakho kushicilelwa isevisi ekhelini lomhubhe esikhundleni sekheli le-WAN lasekhaya, lapho ukuchayeka kanye nemithetho ye-NAT kuyobe kuhluke ngokuphelele. Irotha yasekhaya ingase futhi inqabe ukwenza i-hairpin koxhumano olusuka ehhovisi, ngakho umzila we-WAN uhluleka ngezizathu ezingahlobene ne-VPN yakho. Ukugcina ithrafikhi ngaphakathi komhubhe kugwema zombili lezi zinkinga ngesikhathi esisodwa.

Hlola nangohlangothi lomgomo. Isevisi eboshelwe kuphela ku-127.0.0.1 ayikwazi ukwamukela uxhumano olufika kusixhumi somhubhe, kungakhathaliseki ukuthi imizila yesango ilungile kangakanani. Umthetho wothango lomlilo womsingathi ovumela imbobo kuphela esukela kunethiwekhi engaphansi yasendaweni nawo uzolahla ithrafikhi yasehhovisi, futhi lowo mthetho awuncikile kunqubomgomo ye-VPN engaphezulu.

Amagama namakheli yizinqumo zokuklama

Ikheli ngaphakathi komhubhe aliyona igama ngokuzenzakalela. Irekhodi le-DNS langasese olilawulayo licaca kakhulu kunokuthemba ukuthi iphrothokholi yokuthola izodlula umhubhe, ngoba ukuxazululwa kwamagama nge-multicast yasendaweni kuhlala engxenyeni yasendaweni futhi akupheli kube yi-DNS phakathi kwamanethiwekhi angaphansi.

Ukuzinza kwekheli kubalulekile ngokufanayo. Uma amaklayenti e-VPN ethatha emthonjeni onezikhathi zokuqashisa ezimfushane, ikheli langaphakathi le-laptop liyashintsha phakathi kwamaseshini futhi zonke izimpawu zokubhuka, ububanzi bothango lomlilo kanye nokuhlolwa kokuqapha okwakhelwe kulo kuyaphuka buthule. Sebenzisa ukubekelwa eceleni noma umzila obhaliwe wokubuyekeza okuguquguqukayo.

Vumelana ngegama nalowo ongumnikazi wobunikazi be-VPN, ukuze irekhodi, ukwabiwa kwekheli kanye nenqubomgomo yokufinyelela kushintshe ndawonye hhayi kumathikithi amathathu ahlukene.

Hlola isevisi, hhayi ubulungu

Kusukela emgomweni, qinisekisa ukuthi yini elalelayo nokuthi kukhiphi ikheli, bese uqinisekisa umbono wesango womzila wokubuyela emuva:

$ ss -ltnp | grep 8080
LISTEN 0 128 10.80.0.23:8080 0.0.0.0:*
$ ip -4 addr show tun0 | grep inet
inet 10.80.0.23/24 scope global tun0
$ ip route get 10.80.0.1
10.80.0.1 dev tun0 src 10.80.0.23

Manje hlola kusukela ohlangothini lwasehhovisi ngesicelo sangempela hhayi ngomdlandla. I-curl ephumelelayo ngokumelene nesevisi ifakazela umzila, inqubomgomo kanye nesilaleli ngesikhathi esisodwa, kanti i-ping ephumelelayo ifakazela kuphela ukuthi i-ICMP ivunyelwe. Uma isicelo sehluleka, buyela emuva ezingxenyeni ezintathu esikhundleni sokwandisa uthango lomlilo bese uthemba.

Ukutholakala kuyingxenye yengxoxo efanayo. I-laptop iyalala, izulazule phakathi kwamanethiwekhi futhi inqamule ekupheleni kosuku. Isevisi okufanele iphendule nganoma yisiphi isikhathi ifanele umsingathi ovuliwe ngaso sonke isikhathi, kanti isevisi yomzamo ongcono ingahlala kuklayenti ngalowo mkhawulo obhaliwe.

Shicilela insiza ngamabomu, inegama, uhlu lwabashayeli abavunyelwe kanye nomnikazi, futhi idivayisi ekude iba isevisi esekelwayo esikhundleni seseva eyenzeka ngesikhathi esingalindelekile.

Izihloko ezihlobene