Guqula ibanga le-IP kusukela kukheli lokuqala kuya kwelokugcina libe yimizila ye-VPN enembile

Othile ukunika ikheli lokuqala nelokugcina bese ecela umzila we-VPN. Isinyathelo esikhangayo ukukhetha isandiso esifushane kunazo zonke esiqukethe iziphetho zombili, futhi leso sinyathelo sengeza ngokuthula izindawo okungekho muntu ozicelile. Ibhulokhi ye-CIDR ihlezi inobukhulu obuyisiphakamiso samabili kanye nekheli lokuqala elihambisana nalo, ngakho ibanga elingenasisekelo ngokuvamile lidinga ngaphezu kwesisodwa. Hamba ibanga, lihlukanise ngokunembile, bese uhlola amakheli angaphandle kwalo.

Qala ngebanga, hhayi ngesandiso

Bhala ikheli lokuqala nekheli lokugcina ngaphambi kokubhala enye into. Ipheya yilo lokho okudingekayo; isandiso siyingcazo eyodwa kuphela engenzeka, futhi ngesinye isikhathi ingcazo engalungile. Izinombolo ezimbili nazo zilula kakhulu ukuzihlola kunemaski.

Ibanga elihambisanayo lincipha libe yibhulokhi elilodwa. Elingahambisani lihlakazeka libe yizingxenye eziningi, futhi ukuhlukaniswa kunembile hhayi ukuqagela. Ongakumelwe ukwenze ukuqoqa ngaphandle bese uthi kuseduze ngokwanele, ngoba amakheli angeziwe athola inqubomgomo ethwelwa umzila.

Izinhlangothi zombili zephutha zibalulekile. Emzileni ongena emhubheni, amakheli angeziwe adonswa e-VPN. Kumaqembu okuwela, amakheli angeziwe ayawudlula. Akukho mphumela uvelayo etafuleni lomzila elibonisa kuphela isandiso osifakile.

Icala lokuqala: ibanga lihambisana ngengozi

Thatha 198.51.100.64 kuya ku-198.51.100.127. Ikheli lokuqala lihambisana emngceleni wamakheli angama-64 futhi ibanga lingamakheli angama-64 ngqo, ngakho i-/26 eyodwa iyalichaza ngaphandle kwensalela.

Leli yicala elilula futhi kufanele lilandiwe, ngoba lisho ukuthi imfuneko kungenzeka yabhalwa umuntu owayesecabanga ngezandiso. Lisho futhi ukuthi ukuhlola kufushane: qinisekisa ukuthi ubukhulu buyisiphakamiso samabili nokuthi isiqalo siyisiphindaphindo salobo bukhulu.

Amabanga emibhalo ayizibonelo ezinhle ngoba akekho umnikazi wawo. Ungawafaki lawa makheli emhubheni wangempela futhi ungacabangi ukuthi ibanga olunikezwe lona liyindawo yemibhalo ngoba nje libonakala lingajwayelekile.

Icala lesibili: alihambisani, ngakho lihlukanise

Manje thatha 198.51.100.100 kuya ku-198.51.100.107. Lawa ngamakheli ayisishiyagalombili, okuyisiphakamiso samabili, kodwa u-100 akusona isiphindaphindo sasishiyagalombili. Ibhulokhi eyodwa yalobo bukhulu ayikwazi ukuqala lapho, ngakho ibanga kufanele limbozwe ngaphezu kwesisodwa.

Ukumboza okunembile amabhulokhi amabili e-/30: i-198.51.100.100/30 imboza 100 kuya ku-103, kanti i-198.51.100.104/30 imboza 104 kuya ku-107. Amakheli ayisishiyagalombili esewonke, akukho lutho ngaphandle kwebanga, futhi ukuhlukaniswa kukhethekile ebangeni elinikeziwe.

python3 -c "from ipaddress import ip_address, summarize_address_range as s; print(*s(ip_address('198.51.100.100'), ip_address('198.51.100.107')), sep='\n')"

Umsebenzi welabhulali ejwayelekile wenza izibalo esikhundleni sakho, futhi incwadi ye-ipaddress ichaza ukuthi ibuyisela ini. Engakwenzi ukukhetha isango, ukunquma ukuthi amakheli awabani, noma ukunikeza ukufinyelela kunoma iyiphi isevisi engemuva kwawo.

Kala ukuthi isandiso esibanzi sasizobamba ini

Ngaphambi kokwamukela indlela emfushane, bala ukuthi ibiza malini. I-/28 eqala ku-198.51.100.96 imboza 96 kuya ku-111, okuyimakheli ayishumi nesithupha esikhundleni samakheli ayisishiyagalombili. Amakheli angeziwe ayisishiyagalombili ngu-96 kuya ku-99 no-108 kuya ku-111, futhi ngayinye yazo yayizozuza umzila.

python3 -c "from ipaddress import ip_network as n; w=set(n('198.51.100.96/28')); t=set(n('198.51.100.100/30'))|set(n('198.51.100.104/30')); print(len(w), len(t), sorted(w-t))"

Izindawo eziyisishiyagalombili ezengeziwe ziyinombolo eqondile ongayifaka esicelweni soshintsho. Futhi iyinombolo enquma ukuthi indlela emfushane yamukeleka yini, futhi lowo umbuzo wenqubomgomo hhayi wezibalo.

Gcina izibalo nokutholakala kuhlukene. Ibanga elinikezwa umqhubi wenethiwekhi liguqulwa ngokunembile. Impendulo eyodwa ye-DNS evela kwisevisi eshintshayo ayisunguli ibanga eliphelele noma elihlala njalo yalelo sevisi, futhi amagama angahlobene angabelana ngekheli elilodwa.

Faka isethi enembile futhi uqinisekise imiphetho

Nikeza isandiso ngasinye esiphumayo kumnikazi wokucushwa kwe-VPN bese uwafaka ngendlela esekelwayo. Uma imfuneko idinga amangeno amabili, gcina amangeno amabili esikhundleni sokunweba elilodwa ukuze ifomu libe lifushane.

sudo ip route add 198.51.100.100/30 via 10.90.0.1 dev tun0
sudo ip route add 198.51.100.104/30 via 10.90.0.1 dev tun0
ip route get 198.51.100.101
ip route get 198.51.100.97

Imiyalo emibili yokugcina yiyona abantu abayidlulayo. Ikheli langaphakathi lokuqala kufanele lilandele umzila omusha, kanti ikheli elingaphandle kwebanga akufanele lilandele. Uma womabili ehamba ngendlela eyodwa, ibanga linwetshiwe ndawana thize phakathi kwemfuneko nokucushwa.

Rekhoda ikheli lokuqala, ikheli lokugcina kanye nezandiso eziveza wona. Umuntu olandelayo obuyekeza umthetho uzokwazi ukuqhathanisa imfuneko nokucushwa ngaphandle kokuphinda izibalo, futhi umehluko phakathi komzila onembile nomzila olula uzohlala ubonakala.