Kungani irekhodi le-SRV lisiza kuphela iklayenti elizibuza lona

Ukungeza irekhodi le-SRV kuzoni yakho akufundisi noma yiliphi iklayenti le-VPN ukulisesha. Iklayenti kumele lazi ilebula, linqume ukuthumela umbuzo futhi lenze okuhambisana nalokho okubuyayo, kanti i-DNS ayikwazi ukunikeza ezimbili zokuqala. Ngakho izinhlelo eziningi ze-SRV ezihlulekayo ziyizinkinga zeklayenti ezigqoke izingubo ze-DNS. Funda kuqala indlela iklayenti elithola ngayo, bese ushicilela kuphela ilebula elilibuza ngempela.

Irekhodi okungekho muntu olibuzayo alikwazi ukusiza muntu

I-SRV ishicilela indawo yesevisi; ayimemezeli isevisi. Akukho okusunduza irekhodi kuyo iklayenti, futhi asikho isixazululi esinikeza igama elingakaze libuzwe. Ukusesha kuqala lapho uhlelo lunquma ukukwenza, ngakho ilebula kumele livele emibhalweni yomkhiqizo noma ekuboneni isoftwe kunethiwekhi. Lapho iklayenti lingenaso isinyathelo sokuthola, irekhodi lishintsha izoni futhi akukho okunye.

Yingakho umkhiqizo owodwa kunethiwekhi ungaqala ukusebenza kanti omunye awuthinteki ngalolo shintsho. Okuguqukayo yisoftwe, futhi iseva ye-DNS yenza ngqo lokho eyakutshelwa. Funda izoni futhi ngemva kokuhlela, ngoba ilebula elibhalwe kabi licasha kalula phakathi kwamarekhodi abonakala efana wonke.

Funda izinkambu ngaphambi kokuzibhala

Irekhodi lithwala amanani amane, futhi ngalinye liphendula umbuzo ohlukile: ukubaluleka kuhlela imigomo iklayenti elingayizama, isisindo sahlukanisa umthwalo phakathi kwemigomo yokubaluleka okufanayo, ichweba lisho ichweba lokuthutha, kanti umgomo usho umgcini. Isimiso sivumela futhi umgomo we-. ukusho ukuthi isevisi ngamabomu ayitholakali, okuyimpendulo ewusizo hhayi eyephukile.

Azikho kulezi zinkambu ezithwala ubufakazi, inqubomgomo yesitifiketi noma inguqulo yohlelo, futhi iklayenti elinganaki isisindo liyaxhumana noma kunjalo, ngaphandle nje kokulingana okuhleliwe. Umgomo udinga amarekhodi akho ekheli, futhi kufanele ube igama elivamile hhayi igama elingelinye. Ukushicilela irekhodi elikhomba kumgcini ongenasilaleli kukhiqiza iphutha lokuxhumana elifundeka njengephutha le-DNS, futhi yilokho ukuduka okubiza kakhulu. Shicilela lonke uchungechunge noma lutho kulo.

Thola ilebula iklayenti elilithumelayo ngempela

Sungula ilebula ngokusekelwe ebufakazini hhayi ekuqageleni ngegama lomkhiqizo. Kungenjalo imibhalo isho igama lesevisi, noma ukubanjwa kubonisa umbuzo ophuma kuklayenti lapho liqala. Zombili izindlela ziphelela endaweni eyodwa: igama nohlobo oluqondile okufanele kuhlolwe ngesixazululi.

dig +short SRV _vpn._tcp.gw.example
dig +short A edge2.gw.example
tcpdump -ni any udp port 53

Qhathanisa impendulo nerekhodi olushicilelile, uhlamvu ngohlamvu, ngoba imigqa engaphansi kanye nephuzu lokugcina ziyingxenye yegama. Impendulo engenalutho kumbuzo othunyelwe ngempela ikhomba izoni, kanti ukungabikho kombuzo nhlobo kukhomba iklayenti, futhi lokho kutholakele kukuthumela emaqenjini ahlukene. Impendulo yangempela ifana nomugqa ongezansi, lapho ukubaluleka 20 kwehlulwa yinoma yiliphi irekhodi elinokubaluleka okuphansi futhi iklayenti lishaya ichweba 8443 kumgomo oshiwo.

_vpn._tcp.gw.example. 600 IN SRV 20 10 8443 edge2.gw.example.

Umgomo nawo kumele ube khona

Umgomo oxazululwayo awufani nesevisi ephendulayo. Hlola amarekhodi ekheli omgomo, bese uhlola ukuthi kukhona okulalelayo echwebeni nakuprotokholi okushicilelwe. Irekhodi le-TCP elikhomba kusilaleli se-UDP kuphela ukungafani okungeke kulungiswe yinoma yikuphi ukuhlela kwezoni. Gcina i-TTL imfushane ngenkathi umgomo uguguka, futhi uyandise lapho igama liyeka ukunyakaza.

Amaklayenti asebenzisa ngempela ukuthola ayahluka ngokuthi ahlonipha kangakanani irekhodi. Amanye asebenzisa ukubaluleka kuphela, amanye abheka isisindo njengeseluleko, futhi ambalwa awanaki ichweba futhi acabanga inani elizenzakalelayo. Leyo mehluko ingeyamanothi akho eduze kwalebula, ngoba ichaza ukuziphatha okungathi ngaphandle kwalokho kuyiphutha lesixazululi.

Ukuthola akukona ukuqinisekisa

Impendulo ye-SRV isho lapho uxhumana khona, futhi ayisho lutho ngokuthi ubani okufanele umethembe lapho ufika. Shiya ukuqinisekiswa kwesitifiketi kanye nokuhlolwa kobuwena besiseva kuklayenti kunjalo njengoba kwakunjalo, ngoba irekhodi umuntu ongakwazi ukulikhohlisa akufanele libe isinqumo sokwethemba. Izimpendulo ze-DNS zingagcinwa futhi zihlelwe yinoma ubani olawula izoni, okuzenza zibe yindawo embi yokufaka inqubomgomo ekhodini.

Kuklayenti elingenakho ukusekelwa kokuthola, sabalalisa iphrofayili noma i-URL yesango eliyamukelayo, futhi uqophe ukuthi yimuphi umkhiqizo osebenzisa iphi indlela. Leyo nothi ivimbela umphathi olandelayo ukuthi engeze irekhodi futhi alindele ukuthi lizosebenza yonke indawo. Isimiso se-SRV sichaza ukukhetha phakathi kwemigomo, futhi ukusifunda njengendlela yokugunyaza iyona ndlela irekhodi eliwusizo eliba ukuqagela kwezokuphepha. Shicilela ngamabomu, shono ilebula emibhalweni yakho, futhi ubheke iklayenti njengengxenye enquma ukuthi kukhona yini okubalulekile kukho konke lokhu.