Indlela yokuhlukanisa imizila eqhutshwa yi-VPN kuleyo emile ku-Linux

Isiqalo sivela kukhompyutha ephathekayo lapho itheku likhuphuka, ngakho kuzwakala sengathi i-VPN iyifakile. Kungenzeka, kodwa umphumela ofanayo ungavela kuskripthi sekhasimende esisebenza lapho kuxhunyaniswa, kuphrofayela yoxhumano ebala i-subnet, noma emzileni omile owawukhona kusukela ekuqaleni futhi owaqala ukusebenza lapho isixhumi sethu sikhona. Ukukhetha umnikazi ongafanele kusho ukuthi umzila uyabuya ngemva kwakho konke ukuhlanza, futhi umuntu olandelayo uphinda ukulungisa okufanayo. Ukulandelana ngezansi kuhlukanisa laba abathathu ngaphambi kokuba kushintshwe noma yini.

Isinyathelo 1: shono indlela efaka iziqalo

Amaphrothokholi ahlukene ahlinzeka ngokufinyeleleka ngezindlela ezahlukene, futhi ukukubiza konke lokhu ngokuthi isimemezelo kufihla umehluko. Iseva ye-OpenVPN iqhubezela isiqondiso somzila ngesiteshi sokulawula futhi ikhasimende liyifaka ngaphandle uma isihlungi se-pull sivinjelile. Ukucushwa kwe-WireGuard kubala iziqalo ezivunyelwe endaweni, ikhasimende lizisebenzisa kokubili ekuhambiseni kokhiye bokubethela nasezimzileni elizengezayo. Itheku le-IPsec livumelana nokukhethwa kwethrafikhi nozakwabo, futhi i-kernel ifaka imizila kusuka kulokho kukhetha.

Khombisa ukuthi iyiphi yalezi itheku lakho eliyisebenzisayo ngaphambi kokufunda noma iyiphi ithebula. Umzila oqhutshwa ngesikhathi sokuxhumana awusona isimemezelo sephrothokholi yokuhambisa, futhi awuthembisi ukuthi isiqalo siyafinyeleleka ngemva komkhawulo okude. Bhala indlela eceleni kwesiqalo, ngoba iyona enquma ukuthi ukulungisa kufanele kube kuphi.

Isinyathelo 2: qhathanisa ithebula phakathi kokuxhumana okukodwa

Gcina ithebula eliyinhloko lapho itheku liphansi, likhuphule, ligcine futhi, bese uqhathanisa ukuthwebula okubili. Noma yini evelile ingeyomjikelezo wokuphila koxhumano, futhi noma yini esele ingeyokucushwa kwendawo.

Yithwebule nge-ip route show table main > /tmp/route-down.txt, xhumana bese uphinda uthwebule. Yenza okufanayo nge-ip -6 route uma isayithi isebenzisa i-IPv6, ngoba isiqalo esingekho lapho sibangela ukwehluleka okubonakala kungahlobene nokuhambisa.

Isinyathelo 3: funda imethrikhi, hhayi ubukhona kuphela

Amaqopha amabili esiqalo esifanayo angaba khona ndawonye, futhi i-kernel ikhetha imethrikhi ephansi. Umzila omile onemethrikhi engu-50 uzoqhubeka ukunqoba umzila oqhutshwe ku-100 nakuba womabili abonakala, yingakho 'umzila ukhona' kanye 'nethrafikhi iwusebenzisa' kuyizitatimende ezihlukene.

Buza i-kernel ngqo nge-ip route get 10.20.5.7 bese ufunda isixhumi esikubikayo. Uma ithrafikhi iphuma nge-adaptha yomzimba ngenkathi umzila wetheku uhlezi kuthebula, imethrikhi noma ubude besiqalo kuyakuchaza lokho, hhayi ikhasimende le-VPN. Phinda usesho kumhambi owaziyo ukuthi usemva kwetheku nakomunye owaziyo ukuthi akekho, futhi umehluko uzobonisa ukuthi ukwahlukanisa kuziphatha ngendlela okuhlosiwe.

Isinyathelo 4: thola amaqopha aphila isikhathi eside kunetheku

Imizila emile iyasinda ekunqanyulweni ngokomklamo, futhi yilapho kuvela khona amaqopha asephelelwe yisikhathi. Umzila ongapheli okhomba kusixhumi esingasekho ungagwinya i-subnet buthule, futhi lowo okhomba egameni lesixhumi elisetshenziswe kabusha ungathumela ithrafikhi yangasese ngomnyango ongafanele ngemva kokuqalisa kabusha.

Hlola uhlangothi olungapheli endaweni esetshenziswa ukusabalalisa kwakho, kungaba iyunithi ye-systemd-networkd, iphrofayela ye-NetworkManager noma iskripthi kusikhombisi se-up sekhasimende. Ukulungisa ithebula eliphilayo nge-ip route del kuhlala kuphela kuze kube ukuxhumana okulandelayo. Thatha lokho kususa njengokuhlolwa kwesihlawumbiselo, hhayi njengokulungiswa.

Lapho umkhawulo okude unikeza ukumboza okungalungile, kuletha kumqhubi wohlelo esikhundleni sokuhlunga konke. Ukulahla zonke izilungiselelo eziqhutshiwe kulahla ne-DNS kanye nenqubomgomo yetheku ehlukanisiwe okuncike kuyo iphrofayela.

Isinyathelo 5: qinisekisa indlela yokubuya ngaphambi kokusola ikhasimende

Kuxhumano lwesayithi-kuya-sayithi noma i-subnet engemva kwetheku, uhlangothi olude ludinga umzila obuyela ekhelini lekhasimende lakho kanye nokudlulisela okuvuliwe kugethiweyi. Indlela yohlangothi olulodwa ibukeka njengephutha lokuhambisa lekhasimende, ngaphandle kokuthi ukuxhawulana kanye nephakethe eliphumayo kuyaphumelela kokubili.

Ukuhlunga kwendlela ephambene kunezela ugibe lwesibili kumagethiweyi e-Linux. Impendulo efika kusixhumi esihlukile kunaleso umzila owuqagelayo iyalahlwa kumodi eqinile, futhi izindlela ezingalingani ngabahlinzeki ababili zikubangela ngokuthembekile. Izibali zokulahla kugethiweyi, hhayi kukhasimende, zikutshela ukuthi ukuhlunga kuyimbangela yini.

Isinyathelo 6: hlola insiza, hhayi i-ping

Uma umzila okhethiwe ulungile, vula insiza yangempela bese uqinisekisa ithrafikhi yokubuya. Impendulo ye-ping ifakazela indlela ohlangothini olulodwa futhi utho mayelana nesevisi, futhi isevisi ephendula kuxhumano olugciniwe ifakazela okuncane nakakhulu.

Bese uphinda ukuhlola konke ngemva kokuxhumana kabusha. Inani lokulandelana ukuthi libikezela ukuthi ukuxhumana okulandelayo kuzokwenzani, yingakho kokubili ukuqhathanisa nemethrikhi kungena kuthikithi.