Hlola ukuhamba kwe-VPN ezikhaleni zamagama ngaphandle kokuthinta imizila yomsingathi

Amalabhorethri amabili angalingisa i-topology ye-VPN efanayo futhi ehluleke ngezindlela ezihluke ngokuphelele: elinye lihlala ezikhaleni zamagama zenethiwekhi, elinye emizileni yomsingathi uqobo. Ingxenye yezikhala zamagama igcina yonke i-interface, umzila kanye ne-socket esimweni ongasikhhipha, kuyilapho ingxenye yomsingathi iqala ngokushesha futhi ishiye isimo ngemuva. Yiso leso simo esisele esenza ilabhorethri yesibili ibe nzima ukuyiphinda ngemva kwenyanga. Qhathanisa ukuhlanza kuqala, ngoba kuyona okunquma ukuthi ungayenza kabili yini indlela yokuhlola.

Izindlela ezimbili zokwakha ilabhorethri efanayo, nokuthi yiluphi olunqoba nini

Elabhorethri yemizila yomsingathi wengeza i-interface yethuneli kanye nemizila kumshini osebenza kuwo, ngakho ukuhlola kwabelana ngesiphetho ne-shell yakho, umphathi wamaphakethe kanye nakho konke okunye ukuxhumana. Elabhorethri yezikhala zamagama indima ngayinye ithola isitaki sayo se-interface, amakheli, imizila kanye nama-socket, futhi ukususa isikhala samagama kususa konke lokho. Akukho modeli eyiyo kakhulu, ngoba ziyaphendula imibuzo ehlukene. Khetha izikhala zamagama lapho isihloko siwukuhamba nokudlulisa, futhi khetha ilabhorethri yomsingathi lapho isihloko siwukuthi iklayenti yedeskithophu eyodwa ihlangana kanjani.

Ukuhlanganisa kokubili iphutha elivamile: ilabhorethri yezikhala zamagama ehlolwe neklayenti elisemsingathini kuphela ayifakazi lutho mayelana nakukuphi kwalokhu kuhlelwa okubili. Nquma ukuthi ubuza muphi umbuzo ngaphambi kokudala ukuxhumana kokuqala.

Isimo esisodwa ngendima ngayinye, sixhunywe ngamabomu

Dala isikhala samagama esisodwa ngendima ngayinye futhi uhambise umkhawulo ngamunye wamapheya e-veth esimweni esiwumnikazi waso. Imiyalo emine yokuqala yanele ukubona isimo:

ip netns add client
ip netns add gateway
ip link add veth-c type veth peer name veth-g
ip link set veth-c netns client

Nikeza ilabhorethri izigaba ezingahlangani nanoma yini kumsingathi, futhi ubhale ngaphambi kokuqala ukuthi yisiphi isikhala samagama esiphethe yiliphi ikheli. Ilabhorethri esebenzayo idinga izindlela ezimbili ezihlukene: eyangaphandle ukuze iphoyinti lokugcina le-VPN lifinyelele umlingani walo, kanye nendlela yokubuya yomthombo ovikelayo. Zilingise njengezinqumo ezimbili, ngoba ilabhorethri eyakha ingxenye yokuphuma kuphela iyaphumelela ukuhlolwa kokuxhawana futhi yehluleke ukuhlolwa kohlelo lokusebenza.

Indima yokudlulisa iyindawo lapho amalabhorethri eba mnandi khona

Indima eyodwa kufanele idlulise, okusho ukuthi unike amandla ukudlulisa ngaphakathi kwaleso sikhala samagama futhi wengeze umthetho odingwa ukwakheka. Isimo sokudlulisa singesaso isikhala samagama ngasinye, ngakho isilungiselelo somsingathi asibalulekile elabhorethri futhi isilungiselelo selabhorethri asiphumi ngaphandle, njengoba imibhalo yezikhala zamagama zenethiwekhi ichaza. I-WireGuard ibhala ukuthi i-interface kanye ne-socket yayo yangaphandle kungahlala ezikhaleni zamagama ezahlukene, okuyisu eliwusizo kanye nendlela enhle kakhulu yokuzidida. Ungacabangi ukuthi ukuhambisa i-interface kuhambisa zonke izingxenye zokuxhumana ngendlela efanayo.

Hlola isibali sokudlulisa ngemva kwephakethe lokuhlola, ngoba umthetho ongakaze uhlangane kanye nomthetho owalahla iphakethe kubonakala kufana kuthebula lemizila. Yizibali kuphela ezihlukanisa kubo.

Qopha umugqa wesisekelo, bese wephula umzila owodwa

Qala ngokuqopha lokho okukhona, isimo sibhalwe eceleni komugqa ngamunye. Funda izikhala zamagama, bese kuba umzila indawo yokuhlola engawuthatha ngaphakathi kwesinye sazo, bese kuba izibali kuxhumano oluyithwalayo:

ip netns list
ip -n client route get 10.0.0.5
ip -n gateway -s link show veth-g

Umyalo wesithathu yiwona abantu abawushiyayo, futhi yilapho ubufakazi bukhona: izibali zokulahliwa namaphutha zikutshela ukuthi iphakethe lafinyelela yini indima yokudlulisa nhlobo. Qopha ukubuka okuthathu okufanayo ngemva koshintsho, futhi uvumele i-diff ibe ubufakazi esikhundleni senkumbulo yakho. Bese wephula into eyodwa ngqo, kungaba ngokususa umzila noma ngokwengeza umthetho wokunqaba endleleni yokudlulisa, futhi uqinisekise uphawu obulubikezelile: ukuxhawana okuqediwe ngaphandle kwempendulo, noma ukwehluleka kokuxazulula igama esikhundleni sokuphelelwa isikhathi. Ilabhorethri ekhombisa impumelelo kuphela ifundisa okuncane kakhulu.

Ukuhlanza yikho okwenza ukugijima okulandelayo kuphindwe

Gcina ukuhlanza kulinganiselwe emithonjeni oyibize ngamagama, ngoba ukusetha kabusha i-firewall yonke noma ukususa umzila womsingathi akusikho ukuphindeka, kuyisigameko sesibili. Gcina i-topology, imiyalo eqondile kanye nokubonile obukulindele, ukuze ukugijima okulandelayo kuphinde kudale ukwehluleka okufanayo esikhundleni sokuqagela ukuthi yisiphi isimo esasiphethe isimo sangaphambilini. Ngaphandle kwalowo mbhalo ilabhorethri iyindaba, hhayi inqubo.

Sebenzisa imininingwane yokungena ekhiqizwe endaweni yelabhorethri, futhi gcina ama-akhawunti okukhiqiza kude nezibonelo ezabiwe. Bese ususa isikhala samagama ngasinye futhi uqinisekise ukuthi umbono womsingathi awukashintshi, okuyiso sonke isizathu sokukhetha le modeli. Ilabhorethri ongakwazi ukuyisusa ngokuhlanzekile ukushintsha komsingathi okunezinyathelo ezengeziwe.