Amakhompyutha aphathwayo amabili kusi-router sasekhaya esisodwa angafinyelela i-inthanethi ngezindawo zokuphuma ze-VPN ezihlukene, futhi i-Wi-Fi eyabiwe ayinalutho elingasho ngalokho. Okunquma umphumela ukuthi umhubhe ugijima kuphi nokuthi iyiphi inqubomgomo ekhetha indlela yesicelo ngasinye. Inkolelo ephambene ivamile futhi ayilungile ngendlela efanayo: amadivaysi amabili anamaphrofayili ahlukene awakhi ngokuzenzakalela amakheli amabili omphakathi. Zombili iziphambeko zivela ekuthatheni ikheli elilodwa njengamathathu.

Amakheli amathathu, futhi kuphuma elilodwa kuphela

Ikhompyutha ephathwayo inekheli le-LAN yasekhaya eliyikhomba esigabeni sendawo, futhi ingase ibe nekheli lomhubhe elinikezwe ngaphakathi kwe-VPN. Akukho kulawo okubonakala kusevisi ekude. Lokho okuqoshwa yileyo sevisi ikheli lokuphuma lomphakathi ledivaysi ekugcineni ethumela iphakethe, ngemva kwanoma yikuphi ukuhunyushwa endleleni.

I-RFC 3022 idweba umehluko ochaza iningi lokudideka lapha. I-NAT yendabuko ihambisa amakheli angaphakathi kumakheli omphakathi, kuyilapho ukuhunyushwa kwamatheku kuvumela amakheli amaningi angaphakathi ukuthi abelane ngekheli elilodwa lomphakathi ngesikhathi esisodwa. Umuzi onekheli elilodwa lomphakathi namadivaysi amaningi uyicala lesibili, futhi lokho kuyisimo esijwayelekile cishe yonke indawo.

Bala amakheli omphakathi, hhayi amaphrofayili. Amaklayenti amabili anamakheli omhubhe ahlukene kanye nenqubomgomo yokuphuma efanayo akhiqiza ikheli elilodwa elibonwayo, kanti iklayenti elilodwa elinokuphuma okuhlelwe ngendlela ehlukile lingakhiqiza elinye. Lokho kuqhathanisa okukodwa kuwukuhlolwa konke. Konke okunye kuwukucabanga ngohlangothi olukude.

Yini eyenza izindawo zokuphuma ezimbili zihluke ngempela

Indawo yokuphuma ihluka lapho idivaysi yokugcina ngaphambi kwe-inthanethi isebenzisa ikheli elihlukile lomphakathi kuleyo traffic. Lokhu kungenzeka ngoba i-VPN iphela kwenye indawo, ngoba ichibi lokuphuma linikeza ikheli elihlukile, noma ngoba umhlinzeki uqondisa isicelo ngendlela yokuphuma ehlukile. Zontathu izinqumo zenqubomgomo ezenziwe ohlangothini olukude, futhi akukho nokukodwa okubonakala kusuka kurouter yasekhaya.

Amadivaysi amabili okuthi ngalinye ligijimise iklayenti lalo ngephrofayili efanayo ngokuvamile awela echibini elifanayo futhi ngokuvamile athola indawo yokuphuma efanayo kuseshini ethile. Lokho akusona iphutha, yindlela ejwayelekile yechibi elabiwe. Ukuthola izindawo zokuphuma ezihlukene ngokuvamile kusho ukucela kusevisi izabelo ezihlukene esikhundleni sokuhlela iklayenti kabili.

Funda imigomo yesevisi mayelana nokuxhumana kanyekanye ngaphambi kokuhlela ngokuya ngesiqinisekiso. Ukungena kwesibili kuyimvume yokuxhumana, hhayi isithembiso sekheli elikhethekile. Uma imigomo ithule, buza umhlinzeki esikhundleni sokucabanga. Impendulo ishintsha umklamo ngaphezu kwanoma yisiphi isilungiselelo sekhayenti.

Kungani amaphrofayili ahlukene kungezona izindawo zokuphuma ezihlukene

Iphrofayili ichaza ukuthi kufinyelelwa kanjani ku-VPN nokuthi kuqinisekiswa kanjani, futhi ayisho lutho mayelana nalokho okwenzeka ngemva kwalokho. Indawo yokuphuma ikhethwa wuhlangothi olukude, lapho kuhlala khona ukuhlela indlela, amachibi amakheli kanye nenqubomgomo yokuhunyusha. Ukukopisha iphrofayili kumshini wesibili kukopisha ukuhlelwa kweklayenti, hhayi isinqumo seseva.

Okuphambene nakho kuyiqiniso. Iseva eyodwa ye-VPN ingethula izindawo zokuphuma zomphakathi ezingaphezu kweyodwa uma ukuhlela kwayo indlela nenqubomgomo yokuhunyusha kwakhiwe kanjalo, kuyilapho amaseva ahlukene engondla indawo eyodwa yokuphuma engaphansi. Ngakho-ke inani lamagama asevisi ekuhlelweni kwakho alisho lutho ngenani lamakheli. Yingakho ukuhlelwa kuyindawo engalungile yokufuna le mpendulo.

Impendulo eyodwa ethembekile ivela esicelweni esenziwe ngohlelo ohlosela ukulusebenzisa. Konke okunye kuwukucabanga.

Kubekwe kuphi ukwehlukanisa

Umhubhe we-router uhlanganisa wonke umuzi, okulula futhi kukhiqiza indawo eyodwa yokuphuma eyabiwe yedivaysi ngayinye engemuva kwawo. Iklayenti kudivaysi ngayinye likunikeza ukulawula ngedivaysi ngayinye kodwa kudinga ukuthi idivaysi ngayinye ihlinzekwe futhi ihlale ihlinzekiwe. I-router enamandla enqubomgomo ihlezi phakathi, ikhetha indlela ngedivaysi ngayinye, futhi isebenza kuphela uma ikwazi ukubona amadivaysi ngendlela ethembekile phakathi kokuxhumana kabusha nezinguquko ze-DHCP.

Ukudala enye into yokuqashisa ye-DHCP yangasese kurouter akufani nokudala elinye ikheli lomphakathi. Kushintsha umbono wasendaweni futhi kushiye indawo yokuphuma ingathintekile. Ukwehlukanisa kuhlala kunqubomgomo yokuphuma, noma ngabe leyongqubomgomo isekurouter noma kusevisi ye-VPN.

Noma yisiphi isimo osikhethayo, bhala ubunikazi: ubani ohlinzeka idivaysi, ubani oshintsha izifakazelo zayo, futhi ubani oqaphelayo lapho iyeka ukusebenzisa indlela ehlosiwe.

Hlola indawo yokuphuma oyitholile ngempela

Yenza ukuhlola kusuka kuhlelo lokusebenza olubalulekile, futhi uqhathanise umndeni ofanayo wamakheli kuwo womabili amadivaysi. Umphumela we-IPv4 kwelinye nomphumela we-IPv6 kwelinye awufakazi lutho nganoma yikuphi. Bese uphinda ukuhlola ngemva kokuxhumana kabusha, ngoba isabelo sechibi singashintsha phakathi kwamaseshini.

Kuyisebenzise kusuka kutheminali engaphakathi kwenqubomgomo yomhubhe, hhayi kudivaysi eliyedlulayo. Umsingathi ongalungile unikeza impendulo engalungile eqinisekile.

curl -4 -sS https://api.ipify.org; echo
curl -6 -sS https://api64.ipify.org; echo
ip route get 1.1.1.1

Uma womabili amadivaysi ephrinta ikheli elifanayo le-IPv4, abelana ngendawo eyodwa yokuphuma kungakhathaliseki ukuthi mingaki imihubhe evuliwe. Bese unquma ukuthi kwenzekani lapho umhubhe uhluleka: iklayenti elibuyela emuva endleleni eqondile libeka womabili amadivaysi kubhekheli lasekhaya, futhi ukwehlukanisa kunyamalala ngaphandle kwephutha. Qinisekisa lokho kuziphatha kokubuyela emuva ngaphambi kokuchaza uhlelo njengezindawo ezimbili zokuphuma, futhi khumbula ukuthi amakheli ahlukene awumphumo wenethiwekhi hhayi ubunikazi obubili obungaziwa.

Izihloko ezihlobene