Iseva ye-SoftEther ingaphendula ngasikhathi sinye kuphothi ye-SSL yasekhaya nakuphothi ehambisana ne-OpenVPN, okwenza zombili zibonakale njengesisebenzi esisodwa esinezicabha ezimbili. Ziyizisebenzi ezimbili ezinamaklayenti ahlukene, amafomethi wokulungiselela ahlukene namakhono ahlukene. Ukufaka iphrofayela yasekhaya kuklayenti le-OpenVPN kuyahluleka ngesikhathi sokuhlaziya, futhi iphutha alivamisile ukusho ukuthi kungani.

Khetha isilaleli kuqala, bese kuba iklayenti.

Izilaleli ezimbili, amafomethi amabili wokulungiselela

Iphrothokholi yasekhaya isebenzisa iklayenti le-SoftEther kanye nencazelo yoxhumano ebiza iseva, iphothi, ihhabhu elingokoqobo nomsebenzisi. Isilaleli esihambisana ne-OpenVPN silindele iphrofayela ye-OpenVPN enomyalelo we-remote, impahla ye-TLS nezinketho ezivela eqoqweni elisekelwayo elincane kakhulu kunalelo elinikezwa iseva ye-OpenVPN ezimele. I-SoftEther ikubiza lokhu ngokuthi umsebenzi wekhloni ye-OpenVPN, futhi ikhloni iyinkomba ewusizo mayelana nokwethembeka.

Ukuhambisana kuwumbuzo wenguqulo. Hlola ukuthi inguqulo esetshenzisiwe yamukela ini, hhayi ukuthi incwadi yamanje ye-OpenVPN ibhala ini.

Isinyathelo 1: thola ukuthi umqhubi uvule isilaleli sini

Cela uhlu lwezilaleli esikhundleni sokuqagela ngenombolo yephothi. Iseva ephendula nge-TLS ku-443 ayidingi ukuba yindawo yokugcina ye-OpenVPN, ngoba iphrothokholi yasekhaya ingasebenzisa iphothi elifanayo. Isigaba sencwadi mayelana nemisebenzi yeseva ehambisanayo sichaza ukuthi yiziphi izikhloni ezikhona nokuthi zivulwa kanjani.

Uma ungafinyelela kumsingathi, hlola iphothi olinikiwe, hhayi iphothi elisuka kusifundo: openssl s_client -connect vpn.example.com:443 -brief okungenani likutshela ukuthi i-TLS ikhona yini.

Isinyathelo 2: sebenzisa iklayenti nephrofayela ezihambisanayo

Ukuze uthole ukufinyelela kwasekhaya, faka iklayenti le-SoftEther, dala uxhumano ngemininingwane yomqhubi bese uxhuma i-adaptha engokoqobo. Esilalelini esihambisanayo, ngenisa iphrofayela ye-OpenVPN eyathunyelwa ngumqhubi isuka kuseva, ngoba ithwala impahla ye-CA neyeklayenti elindelwe yileso silaleli. Ungahlanganisi iphrofayela ngesandla kusuka kusibonelo esijwayelekile, futhi ungayinamathiseli incazelo yoxhumano yasekhaya ekulungiseleleni kwe-OpenVPN.

Iphutha lokuhlaziya ngesikhathi sokungenisa liyinkinga yefomethi, hhayi inkinga yenethiwekhi, futhi akufanele likuthumele kufirewali.

Isinyathelo 3: gcina ukuqhathanisa kuyiqiniso

Uma umqhubi eshicilela kokubili, qhathanisa ngokugcina idivayisi, inethiwekhi yokufinyelela nomsebenzi kungashintshile. Izindlela ezimbili zingahluka ekuqinisekisweni, kumasubnethi ezixhumayo, nakulokho iseva ekwenzayo kamuva ngethrafikhi yakho. Umsingathi owabiwe awuwona umgomo owabiwe. Gcina nomsebenzi unjalo, ngoba ukukopisha ifayela nocingo lwevidiyo kucindezela izingxenye ezahlukene zendlela eyodwa.

Phikisana nezilungiso ezivela njalo lapho ukungenisa kwehluleka. Ukucisha ukuhlolwa kwezitifiketi noma ukuvula iziphu zokufihla ezindala ukuze iphrofayela idlule kuwukubuyela emuva, hhayi isici sokuhambisana.

Isinyathelo 4: qinisekisa indlela ngemva kokuxhuma

Uma usuxhumile, hlola ikheli olimukile, imizila eza nalo, i-DNS kanye nensiza eyodwa yangaphakathi. Ohlangothini lwasekhaya i-adaptha engokoqobo iyisixhumanisi okufanele sihlolwe; ohlangothini lwe-OpenVPN idivayisi ye-tun noma ye-tap eyadalwa yiklayenti. Noma kungayiphi indlela, umbuzo uwukuthi isilaleli osikhethile sinikeza ukufinyelela okudingayo yini, lokho kuyiqiniso elihlukile ekutheni umhubhe wenyuka yini. Bhala ikheli ngaphambi nangemva, bese uwaqhathanisa.

Bhala ukuthi yisiphi isilaleli naluphi uhlobo lweklayenti olwaluletha umphumela osebenzayo. Uma kungenjalo umuntu olandelayo uzophinda ukutholakala kusukela kunombolo yephothi kuye phezulu.

Izihloko ezihlobene