Uqala iklayenti le-VPN nge-SSH? Qala uqinise indlela yakho
Iklayenti eline-tunnel egcwele libhala kabusha ithebula elithwala impendulo yakho ye-SSH. Qinisa indlela eyodwa yesibungu ngegesi yokungena endala, noma sebenzisa iklayenti endaweni yalo yamagama.
Ungena nge-SSH kusibungu sokwakha, uqale iklayenti le-VPN kuso, bese isikhathi sokuxhumana siyeka ukuphendula. Akukho okushayile phansi, futhi akukho okubonakala kungahlelelwe kahle ngomqondo osobala. Iklayenti lifake indlela ezenzakalelayo, ngakho izimpendulo eziya esiteshini sakho sokusebenza manje ziphuma nge-tunnel, lapho ikheli lesiteshi sakho sokusebenza lingenakuhamba khona. Ingxenye ethakazelisayo ukuthi lo mphumela wawubikezelwa, futhi isixazululo siyindlela eyodwa ebhalwa ngaphambi kokuthi iklayenti liqale. Ake sithi iseva enekhadi elilodwa lenethiwekhi, igesi yokungena engu-192.0.2.254, nomphathi oxhuma esuka ku-203.0.113.9.
Bhala indlela ngaphambi kokuthi uqale
ip route show default ibala igesi yokungena kanye nesixhumi esikhona manje, kuyilapho ip route get 203.0.113.9 ikhombisa ukuthi i-kernel izosebenzisa isiphi isixhumi nekheli lomthombo sesikhathi sakho. Gcina kokubili okuphumayo. Ngemuva kokuthi i-tunnel inyuke, leyo miyalo emibili kufanele isachaza indlela yomzimba, futhi uma ichaza i-tunnel esikhundleni salokho, isikhathi sesivele siphila ngesikhathi esibolekiwe.
Okubalulekile ukuxhumana osekuvele kusungulwe, ngakho ungagunyazi ngesikhathi sokungena esisha kuphela. Isikhathi esisha singaphumelela isikhashana ngesimo isikhathi esidala esingasenayo.
Qinisa ikheli ekuhlelweni kweklayenti uqobo
Indlela efakwe ngesandla iyanyamalala lapho kuqalwa kabusha futhi incintisana nokubuyekezwa kwethebula kweklayenti uqobo, ngakho beka okuhlukile lapho ithebula liphethwe khona. Ku-OpenVPN igama elingukhiye net_gateway lixazululwa libe igesi yokungena eyayikhona ngaphambi kwe-tunnel, ngakho route 203.0.113.9 255.255.255.255 net_gateway igcina ikheli elilodwa ncamashi ngaphandle. I-WireGuard idinga indlela ehlukile ngoba i-wg-quick iphethe izindlela ngokwayo: setha Table = off futhi wengeze okuhlukile ku-PostUp, kanye ne-PostDown ehambisanayo eyisusayo. Zombili lezi zinhlobo ziveza inhloso efanayo, futhi zombili zikhawulela okuhlukile ekhelini elilodwa esikhundleni sokwenza i-tunnel ibe buthaka kukho konke.
Ku-IPv6 umqondo ofanayo uthatha isiqalo sesibungu esisodwa, futhi icala lokuthuthwa okugoqiwe kufanele likhunjulwe: uma ukuxhumana kwangaphandle kwe-tunnel uqobo kukheli eligxilile, lelo kheli kufanele lihlale ngaphandle kwe-tunnel elikuthwalayo, ngaphandle kwalokho iklayenti lihambisa ukuthuthwa kwalo ngaphakathi kwalo.
Noma khipha ithebula eliyinhloko esibalo
Lapho izinsizakalo eziningi kusibungu kufanele zigcine indlela yazo evamile, yeka ukuhlela ithebula eliyinhloko bese unikeza iklayenti elalo. Indawo yamagama yenethiwekhi enepheya le-veth yenza lokho ngokuhlanzekile: indlela ezenzakalelayo yeklayenti ihlala kwesinye isitaki futhi izinqubo eziqalwe ngaphakathi kwayo kuphela ezisebenzisa i-tunnel. Ukuhamba kwendlela ngomgomo kufinyelela endaweni efanayo kuyindawo eyodwa, ngokuthumela ithrafikhi ehambisanayo ethebuleni elikhethekile elisha elisabonisa igesi yokungena yomzimba. Yikuphi ukusebenza kokubili kushiya ithebula eliyinhloko lesibungu lingenayo indlela entsha ezenzakalelayo, futhi yisona sici esigcina i-SSH iphendula.
Kokubili kungumshini omningi kunendlela eyodwa yesibungu, futhi kokubili kufanelekile lapho into engaphezu kweyodwa kumshini kufanele yeqe i-tunnel.
Thatha njengokuthi ukuqinisa kungahluleka
Indlela eboshelwe ekhelini lakho lomphakathi lamanje iyaphuka ngaso leso sikhathi lapho umhlinzeki wakho eyabela kabusha. Iseva ekude ngaleso sikhathi idinga indlela engathembeli kulelo kheli: ikhonsoli, isixhumi sesibili sokuphatha, noma isibungu sokugxuma esihlala ngaphandle kwe-tunnel.
Izinyathelo ezimbili zokuphepha zithatha imizuzu eyishumi. Umlindi oyeka iklayenti uma ukungena kokuqinisekisa kungaveli phakathi nemizuzu embalwa uguqula ukuvalelwa ngaphandle kube ukubambezeleka, futhi isikhathi sesibili se-SSH esigcinwa sivuliwe ngesikhathi soshintsho sibonisa ukuthi okuhlukile kuyasebenza ngesikhathi i-tunnel iphezulu. Ama-keepalive kuphela awasizi lapha, ngoba indlela isihambile hhayi ukuthi ayisebenzi; enza ukufa kube lula ukuqaphela.
Qinisekisa ngokulandelana okubalulekile
Xhuma i-tunnel, qinisekisa ukuthi indlela eya ekhelini lakho isaphuma ngegesi yokungena yomzimba, bese uvula isikhathi esisha. Uma isikhathi esisha sisebenza futhi esidala sifa noma kunjalo, imbangela ukulandelela ukuxhumana noma i-firewall enesimo hhayi ukuhamba kwendlela, okuyisixazululo esihlukile.
Bhala ikheli eliqinisiwe kanye nomyalo owakufakazelayo kurekhodi loshintsho. Umuntu olandelayo oqala iklayenti kulelo bungu uzodinga kokubili, futhi ikheli lingase lisheshe lishintshe ngaleso sikhathi.