Ukuhambisa ithrafikhi ye-VM kunethiwekhi ye-host-only ngesiphakeli se-TUN OpenVPN

Hlukanisa umhubhe kanye nesandiso se-host-only, sunduza indlela yesivakashi, bese unika umshini wokwenziwa ngamunye indlela yokubuya ehlosiwe ngomgcini.

Ama-adaptha e-host-only akha inethiwekhi yokwenziwa yasendaweni, futhi imihubhe ye-TUN eqondisiwe ithwala amaphakethe e-IP phakathi kwamakheli. Akukho kulokhu okuyibhuloho kwenye, yingakho ukuhlelwa okusebenzayo kufanele kusho ukuthi ubani udlulisela futhi indlela yokubuya ingeyabani. Uma lezi zabelo ezimbili zishintshwa, isivakashi siphendula umhubhe ngomthombo isisebenzisi somhubhe esingakaze sisicela. Umklamo ongezansi ugcina izandiso zombili zihlukanisiwe futhi wenza indlela yokubuya icace.

Amanethiwekhi amabili, izandiso ezimbili

Nika ichibi lomhubhe kanye nenethiwekhi ye-host-only izandiso ezihlukene futhi ungasebenzisi esisodwa esikhundleni somunye. Kulesi sibonelo ichibi le-VPN ngu-10.44.0.0/24 futhi inethiwekhi ye-host-only ngu-192.168.99.0/24, umgcini uku-192.168.99.1 futhi isivakashi siku-192.168.99.20. Ukunika isandiso esifanayo kukho kokubili idivayisi ye-TUN ne-adaptha ye-host-only akuzihlanganisi. Kwakha izimangalo ezimbili ebangeni elilodwa lamakheli, futhi ithebula lomzila liphendula isimangalo esasisele ngengozi.

I-adaptha ye-host-only ikhona kumgcini nangaphakathi kwesivakashi, futhi ayinayo indlela yokuphuma emshinini ngokwayo. Ukuxhumana kwebhuloho ne-NAT kunokuchayeka okuhlukene, futhi ukushintshela kumodi yebhuloho akusona isimo sokufinyelela insizakalo eyodwa yesivakashi.

Umgcini usuvele uphethe indlela

Bheka ukuthi yini ekhona ngaphambi kokwengeza noma yini. Umgcini unesixhumanisi kunethiwekhi ye-host-only kanye nomzila walesosandiso, kokubili kwadalwa lapho i-adaptha inyuka.

ip -br addr show
ip route show 192.168.99.0/24
sysctl net.ipv4.ip_forward

Umugqa wesithathu uyindlela eyenza umgcini ube ukugxuma. Ngaphandle kwayo, iphakethe elivela emhubheni likhonjiswa kunethiwekhi umgcini angayifinyelela kodwa ngeke ayidlulisele. Ukudlulisela kuyadingeka futhi akwanele. Inqubomgomo yokuhlunga isananquma ukuthi ukugeleza okuthile phakathi kwesixhumanisi somhubhe nesixhumanisi se-host-only kuvunyelwe, futhi leso sinqumo kufanele sibe ngokubhaliwe hhayi kunqubomgomo ezenzakalelayo engafundwanga muntu.

Sunduza umzila, bese uhlunga lokho okufinyelelwayo

Isiphakeli singanikeza isandiso se-host-only kumakhasimende amukela imizila esunduziwe, okuyiyo ndlela efanayo esetshenziswa kunoma iyiphi enye inethiwekhi encane engemuva komhubhe.

push "route 192.168.99.0 255.255.255.0"
iptables -A FORWARD -i tun0 -o vboxnet0 -d 192.168.99.20 -p tcp --dport 5432 -j ACCEPT
iptables -A FORWARD -i vboxnet0 -o tun0 -s 192.168.99.20 -p tcp --sport 5432 -m conntrack --ctstate ESTABLISHED -j ACCEPT

Le mithetho emibili ivumela insizakalo eyodwa ohlangothini olulodwa kanye nezimpendulo zayo. Umzila ofinyelela isandiso sonke kanye nesihlungi esivumela imbobo eyodwa kuyinhlanganisela ehlosiwe; umzila kanye nokwamukela okungenamibandela kuyindlela insizakalo yaselabhu eyiba insizakalo evezile. Umzila osunduziwe nawo awusona isigunyazo. Ikhasiemende liyamukela, umgcini uyadlulisela, futhi udonga lomlilo lwesivakashi kanye nensizakalo ngokwayo kusenombono.

Isivakashi sidinga indlela yokubuya

Isivakashi esifinyelelwa kusukela ku-10.44.0.x kufanele sithumele izimpendulo zaso ekhelini le-host-only lomgcini, noma umgcini kufanele ahumushe umthombo. Ukuthola ikheli ku-DHCP ye-VirtualBox akusho lutho ngakulokhu kuhlelwa kokubili.

ip route add 10.44.0.0/24 via 192.168.99.1 dev enp0s8
ip route get 10.44.0.15

Ukungeza lowo mzila ngaphakathi kwesivakashi kugcina umthombo wangempela, okugcina inqubomgomo namalogi kukhasimende ngamunye kunengqondo. Ukuhumusha komthombo okulinganiselwe kumgcini kungenye indlela, futhi kuyasebenza, ngezindleko zokufihla ukuthi iyiphi ikhasimende exhume. Ukugqagqana kungenye indlela yokwehluleka. Ikhasimende elikude i-LAN yasekhaya esivele isebenzisa u-192.168.99.0/24 lizofunda umzila osunduziwe njengenethiwekhi yalo, futhi akukho shintsho ohlangothini lwesiphakeli oluxazulula lokho kungaqondakali. Phinda inombolo ohlangothini olulodwa noma khetha isandiso okungenzeka singashayisani.

Idivayisi ye-TUN ithwala amaphakethe e-IP, ngakho ukwengeza isango elizenzakalelayo ngaphakathi kwesivakashi akwenzi umhubhe ube yisigaba se-Ethernet ne-adaptha ye-host-only. Ibhuloho le-TAP liwumklamo ohlukile onokweseka kwekhasimende nobunini bekheli balo, futhi ukuhlanganisa izincazelo ezimbili kuholela ekuhlelweni okungahlangani nakancane.

Qinisekisa, bese kwenza ikwazi ukumelana nokuqalisa kabusha

Hlola insizakalo eyodwa engenabungozi kusukela kukhasimende elikude elijwayelekile, hlola indlela yokubuya yesivakashi, futhi uqinisekise ukuthi insizakalo ongayivumelanga iyanqatshwa hhayi ukuthi inensa.

ss -lntp '( sport = :5432 )'
conntrack -L | grep 192.168.99.20

Bese uqalisa kabusha insizakalo ye-VPN kanye nenethiwekhi yomshini wokwenziwa, futhi uphinda lezo zivivinyo ezintathu. Umzila owengezwe ngesandla uhlala kuze kube ukuqalisa kabusha okulandelayo, futhi ukuhlelwa okusebenza kuphela esikhathini esifudumele akusona umklamo. Bhala izandiso zombili, inqubomgomo yokudlulisela kanye nomzila wesivakashi ndawonye. Noma ubani ongeza umshini wokwenziwa olandelayo uzodinga kokuthathu, futhi uma kungenjalo uzophinde akuthole ekuxhumaneni ngakunye okwehlulekile.

Izihloko ezihlobene