Ukuqondisa amaklayenti e-OpenVPN nge-Cloudflare? Hlola indima kuqala
Iklayenti ledivayisi akulona irotha. Qinisekisa ukuthi indima ye-Cloudflare idlulisa amaphakethe amanye amahost, bese ugcina umhubhe wesiphakamiso ngokwaso endleleni yakho endala.
Unesiphakamiso se-OpenVPN esisebenzayo kanye nehosti futhi eqhuba isoftware yedivayisi ye-Cloudflare, futhi isinyathelo esilandelayo esisobala sibonakala njengokuqondisa ithrafikhi yamaklayenti kukho. Izixhumanisi ezimbili ezisebenzayo kumshini owodwa azakhi isango lokudlulisa. Okushodayo indima ebhalwe phansi yokudlulisa amaphakethe angomunye umuntu, kanye nenqubomgomo ehlukanisa lawo maphakethe lapho efika.
Ngaphambi kwanoma yimuphi umthetho kuza imibuzo emine: iyiphi ithrafikhi engenayo, iya kuphi ngokulandelayo, izimpendulo zithola kanjani indlela yokubuya, futhi umklamo wenza ini lapho leyo ndlela yesibili yehluleka. Imibili yokuqala imibuzo yekhono.
Izinsizakalo ezimbili kuhosti owodwa akulona indlela yokudlulisa
Iklayenti ledivayisi lakhiwe ukusingatha ithrafikhi evela kumshini elisebenza kuwo. Libamba ukuxazululwa kwamagama, noma ithrafikhi yohlelo ekhethiwe, bese liyithumela ngomhubhe walo, futhi inqubomgomo yalo ibhalelwe umsebenzisi waleyo divayisi kanye nezinqubo zaleyo divayisi. Iphakethe elidluliswa lisuka kuklayenti ye-OpenVPN akulona okukhiphayo kwendawo, ngakho imithetho efanayo ayiwuhlukanisi. Lokhu akulona imininingwane yokumiswa engasuswa ngumthetho obanzi, ngoba yikho okunquma ukuthi isoftware iwubona noma cha uphakethe.
Yingakho umbuzo womklamo uwumbuzo wekhono. Kungenzeka ukuthi umkhiqizo ofakiwe unendima ebhalwe phansi edlulisa ithrafikhi yamanye amanethiwekhi, noma umsebenzi wokudlulisa ungowenye indawo ngokuphelele.
Iyiphi indima ye-Cloudflare evunyelwe ukudlulisa
Iklayenti ledivayisi le-Cloudflare linikeza amamodi ahluka ngobubanzi: ukuxazululwa kwamagama kuphela, ithrafikhi evela kudivayisi, futhi ngezinye izikhathi kokubili. Awekho kulawo mamodi ashintsha ihosti ibe irotha yebanga eliyimfihlo elifika ngomunye umhubhe. Indima yokuqondisa ekhethekile iwumkhiqizo ohlukile onesixhumi sayo, ukubhaliswa kwayo kanye nemodeli yayo yenethiwekhi.
| Question | What has to answer it |
|---|---|
| Does the installed product forward packets from other hosts? | A documented routing or connector role, not a device mode |
| Which prefixes does the connector advertise? | Its own configuration and status output |
| Does the server's own transport still take the old path? | ip route get for the endpoint, before and after |
| Do replies return through the same path? | Connection tracking counters on the forward rule |
Hlola indima efakiwe ngaphambi kokuklama izindlela ezizungezile. Funda ukuthi isixhumi sidala yiphi i-interface, ukuthi simemezela iziqalo ezithile noma indlela ezenzakalelayo, nokuthi inqubomgomo yendawo isebenza kumaphakethe adlulisiwe njengakwamaphakethe endawo. Uma kusingathwa ithrafikhi yendawo kuphela, isiphakamiso se-OpenVPN asikwazi ukuba yindawo yokudlulisa, noma ngabe umthetho wokuhumusha ubhalwe kanjani.
Lapha-ke isidingo sokukhishwa komphakathi kufanele sisho ngokunembile. Ukukhishwa okunikezwa yi-Cloudflare kwethrafikhi yamaklayenti edlulisiwe kuyisimo sokusetshenziswa esithile, futhi kufanele kuqinisekiswe ngokumelene nensizakalo onayo ngempela.
Gcina umhubhe wangaphandle ukhululekile endleleni entsha
Ngaleso sikhathi lapho wengeza indlela ezenzakalelayo eya ku-interface entsha, ithrafikhi yokuphuma yesiphakamiso ngokwaso iqala ukuncintisana ngayo, futhi lokho kufaka izimpendulo kumaklayenti e-OpenVPN kanye nesiteshi sakho se-SSH kumshini. Uphawu olujwayelekile umhubhe ozinzile bese uyafa, noma umphathi ovalelwe ngaphandle kuyilapho ushintsho lubonakala lusebenzile. Qhathanisa i-ip route get yendawo yokugcina ngaphambi nangemuva, futhi sebenzisa ukuqondisa okusekelwe kunqubomgomo noma indlela yehosti ukugcina ukuthutha kwesiphakamiso ngokwaso lapho bekukhona. Qhuba lokho kuqhathanisa kusuka kumshini ngokwawo, ngoba umbono wesiphakamiso ngokwaso ngendlela yaso uwona obalulekile.
Ukukhululwa kwekheli lomphakathi lesiphakamiso akwanele ngokwako, ngoba indlela yokubuya yomphathi ngamunye okude iwukugeleza okuhlukile. Nquma ukuthi yikuphi kwalokho kugeleza okufanele kudlule ushintsho, bese uqinisekisa ngakunye esikhundleni sokucabanga ukuthi okokuqala kuhlanganisa konke okunye.
Khawulela ukudluliswa nokuhumusha kugeleza okukodwa
Amaphakethe atholiwe alandela indlela yokudlulisa, hhayi indlela yokuphuma yendawo, ngakho umthetho obalulekile uhlala kwi-hook ye-forward. Lapho i-interface elandelayo idinga ukuhumusha, khawulela umthombo echibini lamaklayenti, indawo ekholelwa kuyo kanye nokuphuma kuleyo interface eyodwa. Umthetho we-masquerade oboshelwe ku-interface kuphela awukhethi ndlela ngokwawo futhi awuvumeli ukudluliswa ukudlula noma yisiphi esinye isihlungi.
Nquma ngaphambili ukuziphatha kokuvala lapho kwehluleka, bese ukuhlola. Misa indlela elandelayo bese uqinisekisa ukuthi amaklayenti alahlekelwa ukuphuma okuhlosiwe esikhundleni sokuwa ngokuthula abuyele kuxhumano olujwayelekile lwangaphezulu, ngoba lowo umphumela ongeke uqashelwe muntu kuze kube yilapho ithrafikhi iqala ukuphuma ngomnyango ongafanele. Phinda ukuhlola kokuxazululwa kwamagama kanye ne-IPv6, ngoba isethi yemithetho ye-v4 kuphela ishiya indlela ye-v6 ivulekile.
Bhala izimpendulo ezine owagcina kuzo kanye nokuqaphela okufakazela ngakunye. Indlela yokudlulisa ongayichaza iyona ongayivikela ekubuyekezweni kwezehlakalo okulandelayo.