Misa ukuxhumana okulungile kwe-OpenVPN: phambili, systemd noma i-NM

Ukuvala iwindi lethemineli akufani nokuvala ithumbu, futhi ukubulala inqubo akufani nokumisa isevisi. Ku-Linux umyalo ohlukanisa ngempela ukuxhumana uncike ekutheni yisiphi isigaba esiqale ukuxhumana futhi ngalokho siphethe umjikelezo wokuphila kwaso. Ukuqhathanisa okungezansi kuhlanganisa izinhlelo ezine okungenzeka ukuthi uhlangabezane nazo, kanye nesihlonzi esidingwa yileso naleyo.

Amaklayenti angaphambili namaklayenti e-daemon

Iklayenti eliqalwe ngesandla kuthemineli lingelalelo themineli. I-Ctrl+C idlulisa ukuphazamiseka, iklayenti lihlakaza isixhumi sitho salo, futhi ithumbu liyaphela. Akukho okunye okudinga ukwaziswa.

Iklayenti eliqalwe ngokusebenzisa isembozo se-shell futhi lashiywa ngemuva akuselona lomuntu othile, futhi yiso leso simo lapho abantu befinyelela khona ku-killall. Thola inqubo kuqala, qinisekisa ukuthi umugqa womyalo wayo ukhuluma ngephrofayili oyifunayo, bese uthumela isignali evamile yokuphela. Inqubo egadiwe ebulawa ngaphansi komgadi wayo izovele iqale kabusha, yingakho ukuhlonza umnikazi kubaluleke ukudlula ukukhetha isignali. Thumela isignali eqenjini lezinqubo kuphela uma usuqinisekisile ukuthi alikho elinye ithumbu eliyabelana nalo.

I-SIGUSR1 akusikho ukuhlukanisa; icela iklayenti ukuthi iqale kabusha ithumbu.

Izimo ze-systemd

Uma i-unit iphethe ukuxhumana, i-unit iyinto okufanele imiswe. Izimo zethempulethi ezifana ne-openvpn-client@office zithwala igama lephrofayili, futhi ukumisa umgomo wethempulethi esikhundleni sesimo kungathinta wonke amaklayenti kusibungu.

systemctl list-units 'openvpn-client@*'
systemctl stop [email protected]

Funda i-ExecStart ye-unit uma ungaqinisekile ukuthi isiphi iphrofayili esilayishwe yisimo.

I-unit enikwe amandla izobuya ekugaleni okulandelayo, okuyisinqumo esihlukile ekumiseni kwayo manje. Yikhubaze kuphela ngemva kokuba unqume ukuthi ukuxhumana akufanele kubuya, futhi rekhoda leso sinqumo lapho umlawuli olandelayo ezosithola khona.

Amaphrofayili e-NetworkManager

Iphrofayili ephethwe yi-NetworkManager akuyona inqubo ongayithumelela isignali. Umphathi uphethe umjikelezo wokuphila, futhi into okufanele kwenziwe kuyo ukuxhumana okusebenzayo, okuhlonzwa nge-UUID hhayi ngegama lokubonisa. Ukufunda uhlu olusebenzayo kuqala kukhombisa nokuthi kukhona yini enye ithumbu elisebenza ngaphansi kwegama obungalilindele.

nmcli connection show --active
nmcli connection down uuid actual-uuid

Amagama okubonisa ayaphindaphinda, futhi igama lefayela lephrofayili akusona isihlonzi salo, ngakho kopisha i-UUID ohlwini. Uma ukuxhumana kubuya ngokushesha, kukhona okukwenza kusebenze: umbhalo we-secondaries kukuxhumana okuyisisekelo, iskripthi se-dispatcher, noma ifulegi lokuxhumana okuzenzakalelayo. Ukumisa ukuxhumana komphathi kuyisinyathelo sokuqala esifanele, futhi ukuvuselela kabusha umbuzo olandelayo. Ungasusi iphrofayili ukuze umise ukuvuselela kabusha, ngoba lokho kususa namakhredenshali ongase uwadinge kusasa.

Incwadi yomyalo yomphathi ibhala ukuthi umgomo we-down ukhethwa kanjani.

Amaseshini e-OpenVPN 3

I-OpenVPN 3 Linux isebenzisa imodeli yamaseshini esikhundleni senqubo ngayinye ithumbu. Uhlola amaseshini aziwa yisevisi, bese wenza okuthile endleleni eyodwa yeseshini. Indlela iyisihlonzi, futhi ayikwazi ukushintshwa ngegama lokuhlela.

openvpn3 sessions-list
openvpn3 session-manage --path /net/openvpn/v3/sessions/... --disconnect

Ukuhlukanisa iseshini ngayinye kuyisenzo esihlukile, futhi kufanele kube ngamabomu.

Isibungu esifanayo singagcina amaseshini abasebenzisi abaningana, ngakho bhala uhlu ngaphambi kokwenza okuthile futhi uqinisekise umnikazi weseshini osethe uzoyiqeda.

Yini okufanele iqinisekiswe ngemva kwalokho

Hlola izinto ezintathu ngemva kwanoma yikuphi kwalokhu kumisa: uhlu lokuxhumana olusebenzayo alusanalo ithumbu, isixhumi sitho asisekho, futhi ukufuna umzila wendawo yangaphakathi akusakhethi idivayisi yethumbu. Bese unquma ukuthi kuzokwenzekani ekugaleni okulandelayo.

ip -brief address
ip route get 10.8.0.1

Ukususa isixhumi sitho ngesandla akumisi umnikazi, futhi kushiya ukuhlanza kungaphelele.

Ukuhlukanisa manje, ukuvimbela ukuqala okuzenzakalelayo okulandelayo, nokuvumela ithrafikhi engeyona ye-VPN ngemva kwalokho kuyizinqumo ezintathu ezihlukene. Yenza ngasinye ngokucacile.