Ukuma kwemizuzu emibili: kwakuyi-VPN noma i-Wi-Fi?
Ukuma kwemizuzu emibili nesikhathi esisha se-VPN yizigameko ezimbili ezihlukene. Beka indlela yokufinyelela kanye nomhubhe emigqeni yesikhathi ehlukene ngaphambi kokushintsha isibali.
Ukuma kwemizuzu emibili okuzilulamisayo ngokwako kubonakala kufana noma ngabe umhubhe uxoxisane kabusha noma umsakazo ukhubekile. Kungenzeka futhi ukuthi akukho lutho olwawa nhlobo, futhi lelo thuba kufanele lihlolwe kuqala. Ukuqhuma kokulahlekelwa okufushane, ukuxoxisana kabusha kanye nokuma kohlelo lokusebenza kuzwakala kufana kumuntu obhala kukhibhodi. Kukodwa kuphela kwezinto ezintathu okulungiswa ngokushintsha ukucushwa komhubhe.
Amarekhodi amabili, hhayi elilodwa
Bhala phansi ukuthi kwenzeka ntoni kuxhumano olungaphansi, futhi ngokwehlukile ukuthi umhubhe ngokwawo wenzeni. Bese ubeka ikhefu lohlelo lokusebenza phambi kwamarekhodi womabili. Lezi ziqoqwana zezigameko ezizimele ezihlangana ngezinye izikhathi, futhi ukubiza zontathu ngokuthi ukunqanyulwa kucabanga impendulo kusukela ekuqaleni.
Isiqaphi esihlola kanye ngomzuzu asikwazi ukubona ukuphazamiseka kwemizuzu emibili. Ukubika ngalolo suku njengolunempilo kulungile ngokobuchwepheshe futhi akusizi ngokomsebenzi. Beka isikhawu sesampula eceleni komphumela ngamunye oyishoyo.
Okwenziwe isixhumanisi sokufinyelela ngenkathi uhlelo lokusebenza luma
Isikhawu sesampula nesikhathi sokuphetha kunquma ukuthi isiqaphi sasingase sibone ini ngempela, ngakho bhala kokubili eceleni komphumela. Ukungabikho kokuphazamiseka okurekhodiwe akusho lukhulu lapho ithuluzi lithatha isampula njalo emizuzwini engamashumi ayisithupha. Bese uhlola izindawo ezintathu ngwezimpawu zesikhathi: i-router yasendaweni, isiphakamisi sangaphandle esigunyaziwe esifinyelelwa ngendlela elula, kanye nensiza engemuva komhubhe.
Qala uqinisekise imigudu, ngoba umgomo womphakathi ngokwawo ungahamba ngomhubhe bese ulinganisa umhubhe esikhundleni sendlela yokufinyelela. Ubufakazi obugxilisa usuku lokuphazamiseka ngempela busezingeni elingaphansi: izigameko zesixhumanisi ku-router, amarekhodi okuvumelanisa kabusha ku-modem, kanye nekheli le-WAN elishintshile. Isibali samaphutha esiqoqiwe sikutshela ukuthi kukhona okungahambanga kahle, asikutsheli noma nini ukuthi nini. Hlanganisa lawo marekhodi newindi lesigameko esikhundleni sokuwasoma ngawodwa.
ping -i 0.5 -c 40 192.168.60.1
mtr -rwc 40 203.0.113.25
ip -brief address showIsibali esikhuphuke izolo asichazi lutho mayelana nokuma kwalokhu ekuseni. Khawulela ukuhlobana kuwindi olubikwe umsebenzisi.
Funa irekhodi lokuqalisa kabusha
Idathagramu ye-UDP elahlekile ayiyenzi i-Community OpenVPN iqale ukuxoxisana kwe-TLS okusha ngokwayo. Ukuziphatha kokuqalisa kabusha kulandela i-ping-restart, futhi inani elisebenzayo kungenzeka ukuthi lathunyelwa iseva; incwadi ye-2.6 ichaza lezo zibali. Ukulethwa kuphuka isikhashana, umkhawulo awukaze weqiwe, futhi ilogi ihlala ingenalutho. Ngakho funa kulogi eduze kwekhefu umugqa wokuqalisa kabusha, uxhumano olusha, noma isihlonzi sesikhathi esishintshile. Uma kungekho noyedwa kwabathathu ovelayo, umhubhe awenzanga lutho futhi isibali besingakaze sibe inkinga.
Ukunciphisa yonke i-keepalive kwenza ukutholwa kubonakale kushesha futhi kususa umugqa lapho ukukhubeka okuncane kuba uxhumano kabusha. Uxhumano kabusha ngalunye lubiza umjikelezo wokuqinisekisa kanye nokufaka kabusha imigudu. Ukwelula isibali akuthengi lutho ngaphandle kwewindi elide lapho indlela efile isabonakala iphila. Kokubili kuyizinqumo zokulungisa ezinendleko, hhayi ukuthuthuka kwamahhala.
Isigameko esingenzekanga naso singubufakazi, futhi yilolo hlobo abantu abalwelela ngoba akukho lutho kulogi oludonsa ukunaka kulo. Bhala ucwaningo olwenzile, hhayi umphumela kuphela.
Vumela ukuqhathanisa kunqume ukuthi yini okufanele ilungiswe
Lapho amarekhodi womabili aseceleni, ukwabiwa ngokuvamile kuzibhalela ngokwako. Isigameko sesixhumanisi se-router kuyo yomibili imigudu sisho ukuthi isihloko uxhumano lokufinyelela. Umhubhe othule nendlela elula esebenzisekayo kusho ukuthi isihloko ukuxoxisana.
| What you observed | Tunnel log at that second | Where to look next |
|---|---|---|
| two-second pause, plain path answers throughout | nothing | the monitor's resolution, then a loss burst |
| pause plus a router link event, plain path stops and returns | no restart line | the access link, not the tunnel timer |
| pause, then a new session identifier | restart line | the restart threshold and what triggered it |
| one application freezes while both paths answer | nothing | that application and its server-side work |
Umgqa ngamunye uwumkhondo, hhayi isinqumo: iziphetho zehlisa ukubaluleka kwe-ICMP, futhi izindawo ezimbili azidingi ukwabelana ngomgudu owodwa. Gcina amawashi eklayenti, isango kanye nohlelo lokusebenza ehambisana ukuze ukuqhathanisa kube nokwenzeka. Umgqa ongena kumakholomu amabili udinga okunye ukubonwa, hhayi isinqumo.
Umbiko ohlula ukubuyekezwa uphendula izinto ezine: ukuma kwathatha isikhathi esingakanani, imiphi imigudu eyaqhubeka iphendula, yini umhubhe ayirekhoda ngaleso sikhathi, nokuthi isiqaphi sithatha isampula kangaki. Lawo maqiniso amane avumela umfundi olandelayo ukuthi aphindise ukubonwa esikhundleni sokwethemba isifinyezo. Iphesenti lesikhathi sokusebenza lifihla ngqo isikhawu osikhathazayo, futhi nomusho othi "i-VPN yawa" wenze njalo.