Kungani umthetho wakho we-split tunnel wapheza ukufanisa nensiza

I-split tunneling ngokuvamile ihluleka ngendlela eyodwa kwezimbili. Kuhamba ngaphandle kweshubhu ukuthumela okufanele kube ngaphakathi kulo, noma kudonswa ngaphakathi ukuthumela okufanele kuhlale ngaphandle. Ukwehluleka komthetho wakudala uhlobo lokuqala, futhi kudida kakhulu, ngoba umthetho uqinisekiswa ngqo njengoba wabhalwa. Okwashintshayo yindawo okuyiwa kuyo: insiza manje iphendula ekhelini umthetho ongakaze ulisho, futhi akukho okungalungile eshubhuni.

Umthetho ubophela ini futhi i-DNS ibuyisela ini

Umthetho we-split tunnel isitatimende esimile mayelana neziqondiso, esivame ukuvezwa ngesiqalo, umzila noma uhlu lwamakheli. Uhlolwa ngokuya endaweni yokuya yephakethe ngesikhathi sokuthumela. Igama lomsingathi ukusesha okubuyisela isethi yamakheli anempilo nesilondolozi, futhi impendulo ingahluka nge-resolver, ngohlobo lombuzo nangomzuzu.

Lezo zinto ezimbili azikaze zixoxisane. Umthetho uqhubeka ufanisa isiqalo esawuthola, insiza iqhubeka ishintsha ikheli eliyikhiphayo, futhi igebe phakathi kwazo likhula buthule. Yingakho uphawu luvela ngemva kokufuduka komhlinzeki noma ukuvuselelwa kwesitifiketi hhayi ngemva koshintsho lokuhlela. Akekho ohlele ishubhu, ngakho akekho obheka ishubhu, futhi ukuxilonga kugudla kuhlelo esikhundleni senqubomgomo.

Izindlela ezintathu ukufanisa okwephuka ngazo

Icala elicacile yinsiza esifuduke: umqhubi wayinikeza ikheli elisha, i-DNS yalandela, futhi ukukhishwa akuzange kulandele. Okwesibili umndeni wamakheli umthetho ongakaze uwumboze, okwenzeka lapho igama liqala ukubuyisela amarekhodi e-AAAA okungawashiyi ukukhishwa kwe-IPv4 kuphela. Okwesithathu umehluko we-resolver: umbono wangaphakathi nowomphakathi bangabuyisela amakheli ahlukene egameni elifanayo, ngakho ikheli elisetshenziswa uhlelo lwakho akulona olela owalihlola ngalo.

Ukuxhumana okugcinwe ku-cache uhlobo lwesine futhi kulula ukukushiya. Uhlelo lungase lusakhuluma nekheli elalilixazulule ehoreni eledlule, okusho ukuthi ukusesha kwakho okusha kanye ne-socket yalo evuliwe akavumelani ngokuthi insiza ihlala kuphi.

Funda indawo okuyiwa kuyo esetshenziswa nguhlelo ngempela

Buza uhlelo lokusebenza nethebula le-socket, hhayi ithebhu yesiphequluli. Ukusesha kuphendula ukuthi igama lixazululeka kunani manje, futhi ithebula le-socket likhombisa ikheli inqubo exhunywe kulo, elingase libe lidala. Sebenzisa kokubili ngaphambi kokwakha ithiyori, ngoba umehluko phakathi kwako ngokwawo uyimpendulo ezimeni ezicishe zibe yingxenye yesibili.

getent ahosts api.example.com
dig +short api.example.com A
dig +short api.example.com AAAA
ss -tnp | grep -F api
ip route get 203.0.113.40

Bese uqhathanisa nalokho umthetho okumbozayo. Uma ikheli lamanje lingaphandle kokukhishwa futhi isicelo sisahluleka, utholile imbangela ngaphandle kokuthinta ukuhlelwa kweshubhu. Uma uhlelo luxhumene nekheli elihambisana nomthetho futhi isicelo sisahluleka, inkinga ingale kweshubhu futhi lolu uphenyo olungalungile.

Lungisa indlela yokusebenza, hhayi uphawu

Uma umkhiqizo usekela ukuqondisa okunakekelwayo okusekelwe esizindeni, kusebenzise futhi ulandele ukuziphatha kwakho kokuvuselela nokububanzi okubhaliwe. Lokho kufaka impendulo enakekelwayo esikhundleni sokuqagela okumile, ngezindleko zokuncika ekutheni isici sisebenza njengoba kubhaliwe.

Uma umklamo uncike ohlwini olumile, yinikeze umnikazi nohlelo lokubuyekeza. Uhlelo kufanele lusho ukuthi ikheli litholakala kanjani, ubani ogunyaza ushintsho nokuthi uhlu kulindeleke ukuthi lulandele ukufuduka komhlinzeki ngokushesha okungakanani. Uhlu olungenaye umnikazi ukuphazamiseka kwesikhathi esizayo okunembangela eyaziwayo.

Ungandisi ukukhishwa kunethiwekhi enkulu engumakhelwane kuphela ukuze ubambe wonke amakheli owabona ngesikhathi sokuhlola okufushane. Lokho akulona ukulungisa; kuwushintsho oluhlala njalo emngceleni wokuphepha, futhi kuzovumela buthule izinsiza ezingahlobene ukuba zidlule ishubhu inqobo nje uma umthetho ukhona.

Qinisekisa izingxenye zombili zenhloso

Umklamo we-split tunnel unezinhloso ezimbili, futhi ukulungisa kufanele kugcine zombili. Insiza evikelwe kufanele idlule eshubhuni, futhi izigaba ezikhishiwe kufanele ziqhubeke zilizungeza. Hlola ukuxhumana okusha endaweni elungisiwe, bese uhlola into okufanele ihiale ngaphandle.

curl -sv --max-time 5 https://api.example.com/ -o /dev/null 2>&1 | grep -E 'Trying|Connected to'
curl -sS --max-time 5 https://public.example/ -o /dev/null -w '%{http_code}\n'

Bhala phansi ikheli elisha, indlela yokusebenza oyikhethile kanye nosuku. Umbhalo lowo uwona ogcina umuntu olandelayo ekutheni aphethe ngokuthi i-VPN yashaya indiva ukuhlelwa kwayo ngokungahleliwe.