I-split tunneling yamakhasimende e-hotspot akuwona ukukhishwa ngohlelo lokusebenza
Ukukhipha uhlelo lokusebenza ku-VPN kushintsha ucingo kuphela. Ikhompyutha ephathekayo exhunyiwe idinga umthetho wayo wokudlulisela, oqhathaniswa ngomthombo, indawo okuyiwa kuyo kanye ne-NAT.
Izimfuno ezimbili ezizwakala zifana azifani: «khipha lolu hlelo ku-VPN» kanye «thumela le ndawo eyodwa okuyiwa kuyo ngaphandle kwe-VPN kwikhompyutha ephathekayo ku-hotspot yami». Eyokuqala ishintsha indlela isokhethi ocingweni ekhetha ngayo inethiwekhi. Eyesibili kumele ishintshe isinqumo sokudlulisela sepakethe elavela kwenye idivayisi ngemuva kokuba ucingo seluyamukele. Ukuhlanganisa lezi ezimbili yikho okwenza ikhasimende le-hotspot liphele ngokukhishwa okwakusebenza kuphela kubhulawuza locingo ngokwalo.
Imibuzo emibili inamasistimu amabili angaphansi
I-Android igcina i-networking yezinhlelo kanye ne-tethering kuhlukene. Amasokhethi ezinhlelo abelwa inethiwekhi yisitaki sokuxhumana, futhi uhlelo lwe-VPN lunquma ukuthi yimaphi amasokhethi alo angena kuthuneli. Amapakethe adluliselwa kusuka kukhasimende elixhunyiwe asingathwa isistimu engaphansi ye-tethering, efuna ku-netd imizila, imithetho yenqubomgomo kanye nokuhumusha kusixhumi esiphansi.
Ukukhishwa ngohlelo lokusebenza kuhlolwa lapho uhlelo luvula isokhethi. Ipakethe elidlulisiwe alifiki kuleyo nhlolo, ngoba alizange livele kusokhethi yohlelo kule divayisi. Yisona sizathu sonke sokuthi lezi zilungiselelo ezimbili azikwazi ukushintshana, futhi lokhu akulona iphutha kukuzo zombili.
Ukukhishwa ngohlelo lokusebenza kushintshani ngempela
Umakhi we-VpnService angasho amaphakethe ahlala ngaphandle kwe-thuneli nge-addDisallowedApplication, noma asho amaphakethe kuphela avunyelwe ngaphakathi nge-addAllowedApplication. Lezo zinhlelo zibe sezivula amasokhethi kunethiwekhi engaphansi ngesikhathi i-VPN isahamba iphethe umzila ozenzakalelayo wakho konke okunye.
Ububanzi bunembile: amasokhethi epakethe ngokwalo, kule divayisi, uma nje i-thuneli iphakeme. Akusho lutho mayelana nokuthunyelwa okudlulisiwe, lutho mayelana nedivayisi yesibili futhi lutho mayelana namaphakethe isistimu ewathumela egameni le-tethering.
Futhi akusona isilawuli sendawo okuyiwa kuyo. Ukukhipha ibhulawuza kukhipha yonke ikheli ibhulawuza elifinyelela kuyo, kuhlanganise nalelo obufuna ukuligcina ngaphakathi kwe-thuneli. Lapho imfuneko isho indawo okuyiwa kuyo esikhundleni sohlelo, isikhethi sohlelo siyithuluzi elingalungile ngokwakhiwa kwalo.
Ipakethe le-tether libonakala kanjani ocingweni
Ipakethe lekhasimende lifika kusixhumi se-hotspot linekheli lomthombo eliyimfihlo elinikezwe ucingo, ake sithi 192.168.43.20, kanye nendawo okuyiwa kuyo yomphakathi. Ukuyidlulisela, ucingo ludinga umzila obheke kusixhumanisi esiphezulu kanye nomthetho wokuhumusha ukuze izimpendulo zithole indlela yokubuya, ngoba ikheli eliyimfihlo lekhasimende alinanjongo kunethiwekhi yeselula.
I-Android iveza lokho ngemithetho yenqubomgomo ekhetha ithebula lomzila, futhi i-netd yakha kabusha amathebula nemithetho efanele lapho inethiwekhi nama-VPN kushintsha. Inombolo yethebula, ukubaluleka komthetho noma igama lesixhumi elikopishwe embhalweni wenkundla, noma kusuka kumodeli efanayo ekukhishweni okudala, akusimisi ubunikazi obuhlala njalo. Lokho kwakha kabusha futhi kuyisizathu sokuthi umthetho obhalwe ngesandla ungasebenza ihora bese uma ngemuva kokuxhuma okulandelayo.
Iyiphi inqubomgomo edingwa ngempela ukukhishwa kwe-hotspot
Bhala isinqumo njengomthombo, indawo okuyiwa kuyo kanye nomzila ohlosiwe ngaphambi kokuthinta umthetho. Isimo esincane sendawo eyodwa okuyiwa kuyo evunyelwe sibonakala kanje:
| Source | Destination | Intended path |
|---|---|---|
| One authorized hotspot client | One approved public service address | Ordinary cellular uplink |
| The same client | All other covered destinations | Shared VPN |
| The phone's own apps | Their existing destinations | Unchanged phone policy |
Izinhlangothi zombili kumele ziphelele. Igatsha eliqondile lidinga umzila osebenzisekayo ngokusebenzisa isixhumanisi esiphezulu seselula esikhona njengamanje; igatsha le-VPN lidinga umzila we-thuneli kanye nemvume yokudlulisela. Noma yikuphi ukuhumusha komthombo kumele kuhambisane nokuphuma okukhethile, ngoba i-NAT esetshenziswa kusixhumi se-thuneli ikhombisa ikheli le-thuneli hhayi eleselula, futhi ngaleso sikhathi indlela yokubuya ayihambisani nendlela yokuya.
Izimpendulo kumele zifinyelele ikhasimende eliphansi elifanayo ngokusebenzisa isimo esilandelwayo noma umzila ocacile, futhi isibali samaphakethe aphumayo asifakazi lutho kwalokho. Gcina nokuthuthwa kwangaphandle kwe-VPN uqobo ngaphandle kobubanzi bokukhishwa, uma kungenjalo amaphakethe athwala i-thuneli azuza njengefa inqubomgomo ebhalelwe isicelo sewebhu sekhasimende.
Ikheli elilodwa elithunjiwe akusona indawo okuyiwa kuyo
Ikheli elilodwa le-IPv4 elifundwe kubhulawuza isithombe somzuzu. Izinsizakalo ezinkulu ziphendula zisuka ku-anycast noma eqoqweni elijikelezayo lamakheli asemaphethelweni, eziningi zinezingqimba ezimbili, futhi ukugeleza kokungena kungathinta izingqalazizinda zokuqinisekisa kanye ne-telemetry iphepha elingakaze likhombise. Ukukhishwa okwakhiwe ngasekheli obona ngengozi kuyophuka ngokulandelayo lapho insizakalo ilinganisa kabusha umthwalo.
Sebenzisa amakheli abhalwe phansi omninikhaya wensizakalo, noma ububanzi abushicilelayo, futhi ubale imindeni yamakheli yomibili. Uma imfuneko ingenakushiwo njengeqoqo elizinzile, cishe kuwumbuzo wenqubomgomo wensizakalo hhayi icebo lomzila ocingweni.
Qinisekisa kusuka ohlangothini oluphansi
Izinhlolo ezintathu, ngalokhu kulandelana: insizakalo ekhethiwe kusuka kwikhompyutha ephathekayo, indawo ejwayelekile okuyiwa kuyo okumele ihlale ingaphakathi kwe-VPN, kanye nohlelo locingo okumele luhlale lungathintekile. Bese uphinda ngemuva kokuxhuma kanye ngemuva kokushintsha kwesixhumanisi esiphezulu, ngoba yilapho amathebula enqubomgomo akhiwa kabusha.
Uma ukusetshenziswa kokwabelana kocingo kungakwazi ukugcina leso sivumelwano phakathi kokuxhuma, hambisa inqubomgomo ekhethiwe ku-router ephansi esekelwayo esikhundleni sokuqongelela imithetho ye-root kudivayisi. I-router ingaveza ukufana komthombo nendawo okuyiwa kuyo nomnikazi ozinzile, futhi imibhalo yesimojuli se-tethering iyisithenjwa esifanele salokho okwenziwa ucingo empeleni.