I-SoftEther ngemuva kwe-NAT: ukunqamula okuqondile noma i-relay ye-VPN Azure?

Iseva yakho ye-SoftEther ingemuva kwerutha yomhlinzeki ongakwazi ukuyishintsha, futhi amakhasimende asaxhuma, ngakho ucabanga ukuthi i-relay ithwala konke. Ukuthi lokho kuyiqiniso yini kuncike ekutheni iyiphi indlela eyenza umsebenzi: igama le-DNS, indlela ye-UDP ehlanganisiwe noma umhubhe ophumayo oya ku-relay. Zontathu zingaveza ikhasimende elixhunyiwe, futhi ziyahluleka ezimweni ezahlukene. Nquma ukuthi iyiphi indlela oyithengayo ngaphambi kokuthinta abasebenzisi noma ama-hub.

Izindlela ezintathu, izethembiso ezintathu ezahlukene

I-DNS eguqukayo iwukuqamba amagama. Igcina igama lomsingathi likhomba ikheli elishintshayo ukuze abantu bayeke ukujaha inombolo, futhi ayenzi enye into. Ukunqamula kwe-NAT kwemvelo kuwukuhlanganisa: amaphoyinti amabili e-SoftEther ashintshana ngolwazi futhi azama ukuvula indlela ye-UDP esebenzisekayo ngamadivayisi okuhumusha aphakathi kwawo. I-VPN Azure iyi-relay: iseva ishayela ngaphandle iya kusevisi, futhi amakhasimende afika ngokusebenzisa igama lomsingathi engqalasizinda ye-relay.

Lezi zintathu ziyagcwalisa, azizona izinguqulo zesici esisodwa. Ukusetshenziswa kungasebenzisa ukuqamba amagama kuyilapho ukuxhumana kwakho kuncike ekunqamuleni noma ku-relay.

Nquma ngokusuka kukhasimende nasenethiwekhi

Ukukhetha kuqala kukhasimende, ngoba ukunqamula kukhona kuphela endleleni yemvelo yokuxhuma ye-SoftEther. I-OpenVPN, i-L2TP/IPsec kanye nabalaleli be-SSTP kuseva efanayo abakutholi njengefa, nakuba babelana ngomsingathi. Bheka lokho umsebenzisi azokukusebenzisa, bese kuba lokho okwamukelwa inethiwekhi. Inethiwekhi yebhizinisi evumela kuphela i-TCP 443 ikusunduzela ku-relay kuleyo port, kuyilapho inethiwekhi evumela ama-port e-UDP adingekayo ekunqamuleni ingazama indlela eqondile; qinisekisa kokubili ngokumelene nenqubomgomo yokuphuma yangempela.

Umlaleli ofinyeleleka ngesandla usewumklamo osemthethweni lapho umqondisi engashicilela owodwa, kodwa iyiphrojekthi ehlukile enekheli layo kanye nomsebenzi wodonga lomlilo.

Qinisekisa ukuthi ingqungquthela ikhethe luphi ukuthutha

Isimo sokuxhumana siwukuphela komthombo othembekile wendlela esetshenziswayo. Yifunde kuseva, futhi uxhazulule igama lomsingathi elitholwe yikhasimende.

vpncmd /SERVER localhost /HUB VPN /CMD:SessionList
vpncmd /SERVER localhost /HUB VPN /CMD:SessionGet <session-name>
nslookup alice.vpnazure.net

I-SessionList ibonisa ukuthi yiziphi izingqungquthela ezixhunyiwe, futhi i-SessionGet kwesinye sazo ibika uhlobo lokuxhumana, kuhlanganise nokuthi ingqungquthela ifike ngokusebenzisa i-relay yini. Irekhodi elixazulula engqalasizinda ye-relay likutshela ukuthi ingqungquthela idlula kubantu besithathu, okungaqinisekiswa ngokuvimbela leyo ndlela esivivinyweni. Ngekhasimende lemvelo, ukusheshiswa kwe-UDP kungasusa indlela yedatha kude nendlela yokulawula, ngakho ukubona okukodwa akuchazi yonke ingqungquthela. Igama le-DNS eliguqukayo eliphelelwe yisikhathi ngemva koshintsho lwekheli, kanye ne-relay ephendulayo ngenkathi indlela yengemuva ingekho, yizindlela ezimbili zokwehluleka okufanele zivivinywe ngokwahlukana. Bhala lokho okukulinganisile, hhayi lokho okwakuhlosiwe umklamo.

Hlela lokho indlela ekhethiwe encike kukho

Yonke indlela ithwala ukuncika. Ukunqamula okuqondile kungashintsha ngemva kokushintsha kwenethiwekhi noma idivayisi entsha yokuhumusha, kuyilapho ingqungquthela ye-relay ihluleka lapho kuhluleka isevisi noma iphothi layo efinyelelekayo. Xhuma futhi kusuka kwenye inethiwekhi futhi uqinisekise ubunikazi baseseva obuqinisekisiwe yikhasimende, ugcina indlela eyayisebenza ngaphambili esivivinyweni esifanayo. Bese uhlola insiza yangasese engemuva kwe-VPN, ngoba ukugunyazwa, ubulungu be-hub, ukwabiwa kwekheli kanye nezindlela zokubuya kuhlala kuwumthwalo wakho kunoma yikuphi.

Bhala igama lomsingathi, iphrothokholo, izilungiselelo zesici kanye nokuthutha okubonwe. Yilo rekhodi elinezingxenye ezine elivumela umuntu olandelayo ukuthi aphinde akhe ukuxhumana okusebenzayo.