I-TAP ngaphandle kwebhuloho: isigaba esibonakalayo esinokuxhumana okuphezulu okuhleliwe

I-TAP inikela amafremu e-Ethernet kusistimu yokusebenza, okuyikhono elikhulu kunalokho okudingwa imiklamo eminingi yokufinyelela kude futhi elincane kunebhuloho. Ikhoneli ingayinika ikheli, ihlele ngayo, futhi iyivikele ngesihlangu somlilo ngaphandle kokuyixhuma kunoma yisiphi isigaba esibonakalayo. Lokhu kuhlelwa kufanele kuqondwe kuqala: isigaba se-Ethernet esibonakalayo esihlukanisiwe iseva yaso esebenza njengomhleli ukuya ku-LAN yangempela. Inikeza ukuziphatha kwesendlalelo sesibili ngaphakathi komhubhe nokudluliswa kwe-IP okuvamile ngaphandle, okuyizethembiso ezimbili ezihlukene. Okusele ukwakhiwa, umzila, indlela yokubuya nokubuyisela emuva.

Yakha isigaba esihlukanisiwe

Ku-Linux isixhumi samukela imiyalo emithathu: yidale, yikhuphule, futhi yinike ikheli ngaphakathi kwesigaba osihlosile. Khetha isandiso esingashayisani ne-LAN yekhofi futhi usibhale phansi, ngoba ukushayisana akubonakali kuze kube yilapho iphoyinti elingafanele libe khona liphendula.

ip tuntap add dev tap0 mode tap
ip link set tap0 up
ip addr add 10.77.0.1/24 dev tap0

Akukho lutho lapha okudinga ibhuloho, futhi akukho okubamba ukwengeza elinye kamuva. Imibhalo yekhoneli mayelana ne-TUN/TAP ichaza isixhumi uqobo; ubulungu bebhuloho nenqubomgomo yokudlulisa yizinqumo ezihlukene ozenza kamuva.

Hlela ngaphesheya komngcele

Nika amandla ukudlulisa, vumela izandiso ezimbili ochungechungeni lokudlulisa, futhi wengeze umzila oya esandisweni sekhofi ngokuthatha umhleli we-LAN njengesinyathelo esilandelayo. Bese uhlangothi lwe-VPN luthumela ithrafikhi eqonde ekhofi kuseva njengesango layo, futhi iseva idlulisa lawo maphakethe njengayo uqobo, hhayi njengebhuloho. Isixhumi se-TAP esivaliwe ukudlulisa yisigaba esiphendula endaweni futhi esingafinyeleli lutho ngale kwaso, okuyisimo esivamile esingaphelele. Kamuva hlola izibali zesixhumi zazo zombili izinhlangothi, ngoba isibali sokwamukela esikhuphukayo nesibali sokuthumela esinganyakazi ohlangothini lwe-LAN kusho ukwehla ochungechungeni lokudlulisa, hhayi umzila omubi.

Bhala umzila nomthetho wesihlangu somlilo njengoshintsho olulodwa, ngoba ngamunye eyedwa udala isimo esibonakala njengokwehluleka kokuhlela ohlangothini lweklayenti.

Nquma indlela yokubuya

Kungenjalo umhleli we-LAN ufunda umzila wokubuya oya esandisweni se-VPN, kungenjalo iseva ihumusha amakheli omsuka ephuma. Ukuhumusha kwenza indlela yokubuya ibe lula futhi kucekele phansi ubunikazi bomsuka, ngakho amarekodi endawo ekuyiwa kuyo azobonisa ikheli leseva kuklayenti ngayinye engemuva kwayo. Isandiso esihleliwe sigcina ubunikazi futhi sidinga ushintsho emishinini okungenzeka ukuthi awuyilawuli.

Khetha ngamabomu hhayi ngokuthi yikuphi okushesha ukuthayipha. Isandiso esisodwa esihleliwe ngokuvamile sihlanzekile kunokuhumusha, futhi ukuhumusha ngokuvamile kungcono kunokufundisa umhleli ongalawuleki isandiso esisha ngenjongo yelabhorethri eyodwa.

Gcina ububanzi bokusakaza ngamabomu

Ngaphakathi kwesigaba esibonakalayo, i-DHCP, ukutholwa nesimemezelo somakhelwane kuziphatha njengakuswishi, ngoba kuwukuxhumana okukodwa. Ngaphesheya komngcele ohleliwe akwenzi lokho, ngakho i-DHCP yekhofi nokutholwa kwensizakalo kudinga umklamo ocacile hhayi umcabango wokuthi i-TAP iyakuhlanganisa. Uhlobo lwesixhumi akusona isidluliseli sezinsizakalo ezihlala kwenye indawo.

Lesi yisizathu esithembekile sokukhetha i-TAP nhlobo: okuthile esigabeni esibonakalayo kudinga ukuziphatha kwendawo kuxhumano. Uma kungekho okukudingayo, idivayisi ye-TUN enesandiso esihleliwe incane, futhi kuncane okumele kuchazwe lapho ihluleka.

Qinisekisa, bese ubhala ukubuyisela emuva

Kusuka kuklayenti ye-VPN, pinga umhleli we-LAN, pinga iphoyinti, futhi uvule insizakalo eyodwa ebalulekile ku-TCP. Bese uhlola izibali nochungechunge lokudlulisa, ngoba ukwehla ngenqubomgomo kude kubonakala njengomzila ongekho. Ukubuyisela emuva kungukuphambana nokwakhiwa futhi kungena kurekhodi yezinguquko ngaphambi kokuthi uqale: susa umzila, susa ikheli, delete isixhumi.

Uma isidingo ngempela siyisigaba esisodwa se-Ethernet esihlanganisa izindawo ezimbili, ibhuloho liyimpendulo ethembekile nomklamo ohlukile onombubanzi womthelela ohlukile. Uma isidingo siwukufinyeleleka, isigaba esihlukanisiwe esinokuxhumana okuphezulu okuhleliwe senza umsebenzi ngokuchaza okuncane kamuva.