I-CA eyabiwe, iminyango ehlukene: isevisi eyodwa ngefayela lokwamukela

Isitifiketi esiqinisekiswa ngokumelene negunya elabiwe sidlule ukuhlolwa kokuthembela, hhayi ukuhlolwa kobulungu. Lezi zinqumo ezimbili zivame ukuhlanganiswa ngoba zombili zenzeka ngesikhathi sokuxhuma, futhi ukuhlanganiswa lokho kuhlala kungabonakali kuze kube yilapho umuntu obengafanele ukuba kusevisi evunyelwa kuyo. Isixazululo akusilo igunya lesibili; isinqumo sesibili, esithathwa ngesevisi ngayinye futhi esilotshwa lapho idaemon ilifunda khona. Gcina lezi ezimbili zihlukene futhi iningi lokudideka kule ndawo liyanyamalala.

Uchungechunge oluthembekile alusho lutho mayelana nobulungu besevisi

Amasevisi amabili angamukela izinga elifanayo lokukhipha futhi abe nemiphakathi ehlukene. Ilaptop eyodwa ingeyokuqala futhi akufanele ifinyelele owesibili, kuyilapho amanye amaklayenti ezinga elifanayo engaphansi kwalo ngempela. Ukususa igunya kuleyo sevisi kungalivala wonke umuntu oyisebenzisa ngokusemthethweni, ngakho umsebenzi ukwamukela, hhayi ukuthembela.

Kuyasiza ukucabanga izingidi ezimbili emnyango owodwa. Isitifiketi sivula ingidi yangaphandle, futhi isinqumo sesevisi ngayinye sivula eyangaphakathi; akukho okunye okuthatha indawo yokunye. Isevisi enengidi yangaphandle kuphela ayiphoqeleli ubulungu nhlobo, iqinisekisa ubunikazi kuphela. Bhala zombili izinqumo ngaphambi kokushintsha noma yini, ngoba inqubomgomo ekhona kuphela ngendlela yokuxhumana okusebenzayo ayikwazi ukucwaningwa. Okulandelayo kumayelana nengidi yangaphakathi.

Phendula ukushintshwa okungakhethwa kube yisango lokwamukela

Umbhalo wokumisa iklayenti ngokuvamile uwusizo: amafayela akulo ashintsha izilungiselelo zamaklayenti ewabizayo, futhi iklayenti elingenafayela lisebenza ngezindinganiso eziyisisekelo zeseva. Umyalo owodwa uguqula lolosizo lube yisango, ngakho ukungabikho kwefayela kusho ukuthi ukuxhumana kuyenqatshwa.

client-config-dir /etc/openvpn/service-a/clients
ccd-exclusive

Uhlelo lomphakathi lwe-OpenVPN 2.6 ccd-exclusive lubhala ekhasini lalo lomhlahlandlela kanye ncamashi lesi simo, futhi ukusesha kwefayela elishiwo kuncike kubunikazi obusebenzayo beklayenti. Okunye ukwakhiwa namaseva aphethwe umkhiqizo kungase kuhluke, ngakho qinisekisa inguqulo efakiwe ngaphambi kokuthembela kusemantiki efanayo kwenye indawo.

Thatha indlela engenhla njengesibonelo futhi uhlole ukuhlelwa okusetshenzisiwe ngempela esikhundleni sokwakha umbhalo oqanjiwe umhlahlandlela. Shiya ukuhlolwa kwesitifiketi, ukuhlolwa kobunikazi beseva kanye nokuqinisekiswa kwe-akhawunti njengoba bebenjalo, ngoba lesi siqeshana sengeza isimo futhi asikhiphi lutho. Lungiselela ushintsho ngaphambi kokukhiqizwa, ngoba ukunqatshwa okuphakanyiswe endaweni engalungile kubonakala njengokwehluleka kwesitifiketi futhi kuqondisa uphenyo egunyeni. Bese uqinisekisa ukuthi umugqa welogi weklayenti elinqatshiwe usho ifayela lokumisa elingekho hhayi uchungechunge.

Umbhalo owodwa ngesevisi ngayinye, hhayi uhlu olulodwa olwabiwe

Ubulungu bungobesevisi obubugcina, ngakho isevisi ngayinye igcina umbhalo wayo namafayela ayo. Ukuqondisa amasevisi amabili ohlwini olulodwa kuwenza abe abelana ngobulungu kungakhathaliseki ukuthi ubani wayekuhlosile noma cha, futhi ushintsho oluvelayo kunzima ukulandelela luye esinqumweni. Igunya elabiwe lingahlala labiwe; amafayela okwamukela awakwazi. Ukuwagcina ehlukene kusho futhi ukuthi iphutha kusevisi eyodwa alikwazi ukwandisa enye buthule.

Umhlahlandlela we-DEFAULT uyicala elidukisa abantu. Unikeza izilungiselelo zokubuyisela uma ifayela elishiwo lingatholakali, kodwa akusilo ifayela elishiwo elidingwa isango, ngakho awukwazi ukwamukela iklayenti ngokwalo. Hlola iklayenti elingenalo nhlobo uhlu futhi uqinisekise ukunqatshwa; uma lelo klayenti lamukelwa, ukubuyisela kuyasetshenziswa futhi ccd-exclusive akukho emandleni kuleso sibonelo.

Ubunikazi obusebenzayo bunquma ukuthi yiliphi ifayela elifundwayo

Ukusesha kusebenzisa ubunikazi iklayenti eliqinisekise ngalo ngempela, okuvamile ukuthi igama elivamile lesitifiketi. Lapho iseva iqinisekisa khona futhi igama lomsebenzisi nephasiphudi bese ihlanganisa lelo gama negama elivamile, ifayela kufanele lihambisane negama lomsebenzisi eliqinisekisiwe esikhundleni salokho. Ukungafani kushiya umbhalo ugcwele amagama afayela anengqondo angakaze akhethwe.

Ukufunda ingxenye enye. Idaemon ivamise ukushiya amalungelo ngemva kokuqala, ngakho i-akhawunti encishisiwe idinga ukufinyelela kokufunda kumbhalo nakuyo yonke into kuwo. Amaklayenti akumele akwazi ukwakha into yawo ngayo yiphi indlela ebhalekayo, ngoba ukwamukela kokuzikhonzela kubhidliza ngokuphelele indlela yokusebenza. Hlola izimvume zokugxumeka nokwabelana hhayi imodi yefayela kuphela, ngoba umbhalo obonakala uvaliwe kwenye i-akhawunti ungase uvuleke kwenye. Bese uqinisekisa ukuthi iyiphi i-akhawunti esetshenziswa ngempela inqubo esebenzayo, hhayi ukuthi iyiphi i-akhawunti eshiwo yifayela le-unit. Lezi ezimbili ziyafana kuphela uma kungekho okunye okuzishintshile.

Qaphela ukunqatshwa, ukwamukela nokuhoxiswa ngokwehlukana

Zama ubunikazi obungobesevisi bese uqinisekisa ukuthi buyaxhuma. Zama isitifiketi esivumelekile esingenalo uhlu bese uqinisekisa ukuthi sinqatshiwe. Zama ubunikazi obamukelwe kwenye isevisi bese uqinisekisa ukuthi abukwamukelwa lapha. Bhala isibonelo sesevisi nobunikazi obusebenzayo eceleni komphumela ngamunye, ngoba umphumela ongenaso leso simo akekho omunye ongawenza futhi.

Ukuhoxisa kuyisenzo esihlukile ekuchitheni. Ukuhlela ifayela lokwamukela kususa ilungelo lesevisi eyodwa kuyilapho ubunikazi buhlala busebenza kuyo yonke enye indawo, kanti ukhiye ophuliwe udinga impendulo yokuchitha yenhlangano. Nquma kusengaphambili ukuthi kuzokwenzekani kumaseshini asevele evuliwe, ngoba kokubili ukuhlela umbhalo kanye nohlu lokuchitha akukuphethi ngokwako.

Ukwamukela kuyisango lokuqala kuphela. Ukujoyina isevisi akusho lutho mayelana namasubneti, izisekelo zedatha noma izixhumi zokuphatha ezingemuva kwayo, futhi leyo nqubomgomo yezinsiza kufanele ibhalwe futhi ihlolwe ngokwehlukana.