Amaklayenti amabili e-OpenVPN kusibunguza esisodwa se-Linux: ubani ongumnikazi wendlela?

Womabili amaphrofayili abika ukuthi axhunyiwe futhi elinye lawo lithwala ngokuthula ithrafikhi ehloselwe elinye. Amaklayenti amabili kusibunguza esisodwa kuwuhlelo olusekelwayo; amaklayenti amabili angenamnikazi wesiqalo ngasinye akusilo. Umsebenzi umayelana kancane nokuphakamisa ithubhu yesibili futhi kakhulu nokunquma ukuthi iyiphi inqubo engafuna iyiphi indlela. Landela uhlelo olungezansi futhi ukuhlelwa kuvela kuzimpendulo.

Qala ngokubuza ukuthi ithubhu yesibili iyingani

Izimo ezintathu zibukeka zifana emugqeni wesimo futhi zidinga amadizayini ahlukene. Ukuhlukaniswa ngendawo okuyiwa kuyo kuthumela isiqalo esisodwa ngephrofayili yasehhovisi nesinye ngephrofayili yaselabhorethri, futhi akukho kokubili okufuna indlela ezenzakalelayo. Ukuhlukaniswa ngohlelo lokusebenza ngokuvamile kugcina ithubhu ephelele eyodwa futhi kuqondisa ithrafikhi ethile ngemithetho yenqubomgomo. Ukushintshwa lapho kwehluleka kugcina ithubhu eyodwa ncamashi isebenza ngesikhathi esisodwa, okusho ukuthi eyesibili akumele iqale ngokuzenzakalela.

Bhala icala ngaphambi kokuvula noma iyiphi ifayela lokuhlelwa, ngoba leyo mpendulo inquma konke okulandela.

Ukuhlelwa okugqekeziwe okuvame kakhulu amaithubhu amabili aphelele womabili aphushe indlela ezenzakalelayo, lapho ongena ngokugcina enqoba futhi owokuqala eqhubeka nokuzenzisa. Leso simo sibukeka sengathi senziwe ngamabomu emugqeni wesimo futhi sidla usuku olulodwa etafuleni lomzila. Ukuqamba icala kuqala kwenza kungabi nokwenzeka hhayi nje okungenzeki.

Bheka amachibi ngaphambi kwemizila

Amaseva amabili angabela amakheli kalula esuka kububanzi obuyimfihlo, futhi uma enza kanjalo iklayenti ligcina linama-interface amabili ngaphakathi kwesiqalo esisodwa. Lapho-ke akukho ndawo ekuyiwa kuyo engabelwa i-interface ngokwekheli, ngoba kokubili kubukeka kulungile ngokulinganayo. Phinda unombolo ichibi elilodwa esikhundleni sokuthi uqambe umthetho wokuphula ukulingana.

Hlola nenethiwekhi yasendaweni, ngoba i-LAN yasekhaya noma yasehhovisi edlula kububanzi bethubhu idala ukungacaci okufanayo ngakolunye uhlangothi. Qhathanisa amakheli kusibunguza nokuhlelwa kwamaseva womabili ngaphambi kokusola iklayenti. Ukushintsha ichibi kuseva yaselabhorethri kuwukulungiswa kwemizuzu emihlanu, kanti ukugwema ngomzila wenqubomgomo wesiqalo esidlulanayo kuyintela engapheli kubo bonke abazofunda ukuhlelwa kamuva. Nquma ukuthi yikuphi kulokhu okufunayo ngaphambi kokukhetha lapho uzongenelela khona.

Imindeni emibili yamakheli isho imijikelezo emibili yalokhu kuhlolwa. Amachibi e-IPv6 ashayisana ngokuthula njenge-IPv4.

Nika iphrofayili ngayinye umnikazi

I-instance eyodwa ngephrofayili, ifayela lokuhlelwa elilodwa nge-instance kanye negama elilodwa elibonisa umbhangqwana. Ekufakweni kwesitayela se-Debian igama elingemva kophawu @ likhetha ifayela, yingakho amaphrofayili amabili abelana ngegama le-instance engeke asebenze womabili. Qinisekisa ukuhlangana kusukela ku-unit efakiwe, hhayi kusukela kusifundo.

systemctl cat [email protected]
ip -4 addr show

Bese unquma ukuthi ubani ofaka imizila, okuyindaba yenqubomgomo hhayi yesakhiwo somusho.

Lapho amaseva amabili ephusha amasethi angahambisani, kungenjalo faka route-nopull futhi ubalise kuphela iziqalo ezidingwa iphrofayili ngayinye, noma vumela eyodwa igcine indlela yayo ezenzakalelayo futhi uqondise okusele ngomthetho wenqubomgomo. Izinqubo ezimbili ezifaka indlela ezenzakalelayo zombili zigcina zinomnqobi oyedwa futhi akekho ongasho ukuthi kungani. Uma amaithubhu amabili ethwala ithrafikhi yemithombo ehlukene, impendulo ingaphuma ngethubhu engalungile, futhi iphethini elimiyo uphawu lokuxhumana olubuyiselwa ezimpendulweni futhi luqondiswe etafuleni lalo. Khawulela uphawu ukuze amaphakethe abethelwe weithubhu ngokwazo angalingani nalo nakancane.

Qinisekisa ithubhu ngayinye, bese umisa eyodwa

Uma zombili ziphakeme, thatha ukufunda kathathu: ikheli kudivayisi yethubhu ngayinye, indlela eya kusibunguza esihlala ngemuva kwalolo nalolo, kanye nendlela indawo okuyiwa kuyo engaphandle kwazo zombili engayithatha. Uhlu lomzila olujwayelekile luyeka ukuchaza ukusesha kokugcina ngokushesha uma imithetho ingena emdlalweni, ngakho buza i-kernel ukuthi izokhetha ini ngempela. Bese umisa i-instance eyodwa futhi ubheke ukuthi ini elahlekayo. Uma ukumisa eyokuqala kuphazamisa eyesibili, kukhona okusabekwe phakathi kwazo: umzila, igama ledivayisi, noma umthetho we-firewall ongahlukaniswanga muntu.

ip rule show
ip route get 203.0.113.9

Buyisela iphrofayili emisiwe futhi uphinde lezo zivivinyo, ngoba ithubhu esebenza kanye ngemva kokuqalisa kabusha futhi ingabe isasebenza iyiphutha lomjikelezo wempilo eligqoke izingubo zomzila.

Bhala emibhalweni yokuthunyelwa ukuthi iyiphi iphrofayili engumnikazi wesiqalo sini, eduze nobubanzi bamachibi. Amaithubhu amabili awuhlelo olwenziwe ngamabomu, futhi umfundi olandelayo udinga ukubona umngcele ngaphambi kokuthinta noma iyiphi iphrofayili. Ngaphandle kwalowo mbhalo, umngcele utholakala kabusha yilowo osemsebenzini lapho isiqalo esabiwe sigcina siphukile.