Okwenza i-TUN, nokumele kusenziwe iphrothokholi ye-VPN

Ukuthatha i-tun0 nephrothokholi ye-VPN njengento eyodwa kuholela abantu kuyilog engalungile. I-interface iwumngcele wasekhaya lapho uhlelo olusendaweni yomsebenzisi luhwebelana ngamaphakethe e-IP nekherneli. Iphrothokholi iyilokho uhlelo olwenza ngamaphakethe lapho selunayo: ukudluliswa, ukuqinisekiswa, ukubethelwa kanye nozakwabo. Ukwakha idivayisi akukhethi lutho kulezo.

Izingxenye ezimbili, indlela eyodwa yephakethe

Ikherneli ibhala iphakethe le-IP kudivayisi, futhi uhlelo luyalifunda kusichazi sefayela. Kwelinye iceleni uhlelo lubhala iphakethe libuyela emuva futhi ikherneli iligxilisa njengengathi lifike ku-interface yangempela. I-TUN ithwala i-IP, kanti i-TAP ithwala amafremu e-Ethernet. Ukufunda iphakethe kuleso umngcele kubonisa ukwakhiwa kwamafremu, futhi idivayisi yenzelwe lokho impela.

Konke okungaphesheya kwaleso mngcele kuwumsebenzi wohlelo. Izinhlelo ezimbili zingasebenzisa umqondo ofanayo we-interface futhi zenze izinto ezihluke ngokuphelele ngamaphakethe. Idivayisi ngokwayo ayinalo umbono mayelana nokuzokwenzeka ngemuva kwalokho. Isichazi sefayela siyisibambo esisodwa uhlelo olunaso ohlangothini lwekherneli.

Yakha idivayisi, bese ubheka umngcele

Yakha idivayisi ngamabomu lapho uhlola umngcele. Idivayisi ehlala njalo iyasinda ngemuva kwenqubo eyidalile, lokho kuwusizo ezivivinyweni futhi kamuva kuba umthombo ovamile wokudideka. Hlola amafulegi kanye nomnikazi ngaphambi kokusola i-VPN.

sudo ip tuntap add dev tun9 mode tun user alice
ip -d link show tun9

Imininingwane yesixhumanisi ikhombisa uhlobo lwedivayisi kanye nomnikazi oxhunyiwe. Uma kungekho nqubo eyivulile, amaphakethe abhalwe kuyo awayi ndawo. Idivayisi engenayo inqubo exhunyiwe ingabonakala iphilile ohlwini lwezixhumanisi kuyilapho ingadlulisi lutho.

Okungeke kwethenjiswe yigama le-interface

Igama le-interface alisho lutho mayelana nokubethelwa noma ukuqinisekiswa. Uhlelo lungasonga amaphakethe ku-TLS, kuphrothokholi yalo, ku-IPsec noma kungabi lutho. Ukukhetha i-TUN esikhundleni se-TAP kushintsha ukwakhiwa kwamafremu emngceleni, hhayi umklamo wezokuphepha. Ukukhetha kokwakhiwa kwamafremu kungokoqobo, futhi kuncane kakhulu kunombuzo wezokuphepha.

Ukutholwa kusebenza ngendlela efanayo: umbonisi ubona iphrothokholi yangaphandle ocingweni, hhayi ilebula elisho ukuthi iyiphi idivayisi yasekhaya eyikhiqizile. Ithuneli ebonakala njengenye into yenza lokho ngenxa yephrothokholi yayo yangaphandle, hhayi ngenxa yegama le-interface yayo. Umbonisi akakwazi ukubona ukuthi iyiphi idivayisi yasekhaya ekhiqize iphakethe, ubona kuphela ukuthi iphakethe libukeka kanjani. Hlukanisa le mibuzo emibili lapho uqhathanisa imikhiqizo, ngoba impendulo eyodwa ayisitshelanga enye neze.

Fanisa isilungiso nesigaba esihlulekayo

Hlukanisa izigaba zokuhluleka lapho kukhona okonakele. Idivayisi engekho, iphutha lemvume kanye nokungena okwenqatshiwe kuveza ubufakazi obuhlukile nezilungiso ezihlukile. Funda isimo sasekhaya kuqala, bese kuba yilog yohlelo uqobo, bese kuba umbono wozakwabo. Funda kukho konke kuthathu ngaphambi kokushintsha noma yini.

ip -d link show tun0
journalctl -u openvpn-client@corp --since '10 min ago'

Uma idivayisi ikhona futhi kunenqubo eyibambile, umngcele wasekhaya uyasebenza futhi inkinga isenduzeni. Uma idivayisi ingekho, akukho ukuhlolwa kwezinkombandaba okuzosiza. Isigaba ongasisho ngegama yisigaba ongasivivinya. Imibhalo ye-TUN/TAP ichaza umngcele kanye nesimo sedivayisi.