I-VPN ku-router iyasebenza, kodwa amaklayenti e-LAN awanayo i-inthanethi

I-router ifinyelela i-inthanethi ngomhubhe wayo, kuyilapho amadivayisi angemuva kwayo engafinyeleli. Ukudlulisela, ukuhumusha nemizila yokubuya kuyizimvume ezihlukene.

Isimo sithi umhubhe uvuliwe, isiphequluli esiku-router ngokwaso silayisha amakhasi, futhi yonke idivayisi engemuva kwayo isaphelelwa isikhathi. Le nhlanganisela inciphisa inkinga ifike esigabeni izincwadi eziningi ze-VPN ezingakaze zisikhulume: i-router akuyona kuphela ihomathi okudingeka ukuthi amaphakethe ayo aphumele emhubheni. Ithrafikhi ekhiqizwa endaweni kanye nethrafikhi edluliselwayo zithatha izindlela ezihlukene ngaphakathi kwebhokisi elifanayo. Hlola kusuka kuklayenti, umehluko awuseyona into yethiyori.

Funda ukwehluleka kusuka kuhomathi ye-LAN

Qala kudivayisi ehlulekayo, ngoba ukuhlola okwenziwa ku-router kuphendula umbuzo ohlukile. Qinisekisa ukuthi i-gateway ezenzakalelayo yeklayenti iyile router, bhala ikheli lomthombo kanye ne-subnet yalo, bese ubheka ukuthi yini ephuma ku-interface yomhubhe we-router.

Uma ikheli leklayenti lihunyushwa, uhlangothi olukude lubona ikheli lomhubhe, futhi kusukela lapho konke kubonakala kuphilile kuyilapho iklayenti lisahluleka. Uma lingahunyushwa, uhlangothi olukude kufanele lwazi umzila wokubuya oya ku-subnet yeklayenti, futhi ama-gateway amaningi awanawo lowo mzila ngokuzenzakalelayo. Noma kungaba yini, impumelelo ye-router ngokwayo ayibalulekile, ngoba amaphakethe ayo akhiqizwa endaweni futhi awazange adlule emzileni wokudlulisela.

Ithrafikhi yasendaweni nethrafikhi edluliselwayo zehlukile

I-Linux kanye ne-firmware eminingi yama-router ziphatha amaphakethe akhiqizwa yibhokisi ngokwalo ngendlela ehlukile kunamaphakethe adlula kulo. I-output chain ibona uhlobo lokuqala, i-forward chain ibona lwesibili, futhi inqubomgomo elungiselelwe ithrafikhi ye-router ngokwayo ingashiya ukudlulisela kungathintwanga.

sysctl net.ipv4.ip_forward
ip -4 address show br-lan
ip route get 203.0.113.9
nft list ruleset | grep -A 6 'chain forward'

Hlola ukuthi ukudlulisela kuvuliwe yini ngempela, bese ufunda i-forward chain esikhundleni se-output chain. Umthetho ovumela ukuxhumana kwangaphandle okubethelwe awuwona umthetho ovumela ukudlulisela amaphakethe asusiwe ukubethela, futhi ukuhlanganisa lezi ezimbili kukhiqiza khona lokhu kubonakala. Ukuba umhubhe uvuliwe kufakazela okokuqala kuphela.

Umzila wokubuya nawo kufanele ube khona

Ukuhumusha komthombo kunquma ukuthi umzila wokubuya uyadingeka yini. Uma kune-masquerading ku-interface yomhubhe, izimpendulo zibuyela ekhelini lomhubhe futhi i-router izihumusha zibuyele emuva. Ngaphandle kwako, i-gateway ekude idinga umzila ocacile oya ku-subnet yeklayenti, futhi inqubomgomo yayo uqobo kufanele ivume lowo mkhakha.

Bhala ukuthi yiluphi kulezi zinhlelo ezimbili olusetshenziswa ukuthunyelwa ngaphambi kokushintsha noma yini, ngoba izilungiso zikhomba ezinhlangothini eziphambene. Ukwengeza ukuhumusha kufihla umzila wokubuya ongekho futhi kuphula izinhlelo ezidinga ikheli lomthombo lokuqala. Ukwengeza umzila wokubuya ngaphandle kokuhumusha kwehluleka buthule lapho i-firewall ekude ilahla umthombo ongaziwa. Khetha owodwa, ubhale phansi, futhi ulinganise olunye uhlangothi.

I-DNS yeklayenti iyingxenye yokubuyekezwa okufanayo. Isixazululi se-router singaphendula kuyilapho iklayenti elikhomba kwesinye iseva lingatholi lutho.

Qinisekisa ukugeleza okukodwa okuvunyelwe nokukodwa okwenqatshiwe

Ngemuva kokulungiswa, hlola ukuxhumana okusha kusuka kuklayenti esikhundleni seseshini ekhona ye-router. Bese uqinisekisa ukuthi isigaba okungafanele sisebenzise umhubhe asikasebenzisi.

curl -sS --max-time 8 https://api.ipify.org
ip route get 203.0.113.9
dig +short intranet.example.net

Hlola ikheli lomthombo elibonwayo ekugcineni okude, ngoba likutshela ukuthi yiluphi uhlelo olusebenzayo ngempela. Qinisekisa ukusesha kwegama kanye nekheli, ngoba ukuziphatha kwesixazululi kuwumzila ohlukile odlula kulo bhokisi elifanayo.

Gcina imithetho ikhawulelwe kumanethiwekhi amaklayenti adinga umhubhe, futhi umelane nesilingo sokuvala isihlungi sokudlulisela ukuze ukuhlola okukodwa kudlule. Lolo shintsho lungisa ukuhlola futhi lususa umngcele umhubhe owawufanele uwunikeze. Bhala ikheli lomthombo, isinqumo sokuhumusha kanye nomzila wokubuya encwadini eyodwa, nosuku.

Izihloko ezihlobene