Izinhlelo ezimbili ze-VPN ngesikhathi esisodwa: iyiphi i-kill switch esebenza ngempela?
Iklayenti lesibili le-VPN alilitholi neze i-kill switch yelokuqala. Izimo ezintathu zinquma ukuthi iyiphi inqubomgomo esebenzayo, nokuthi ungayiqinisekisa kanjani eyakho.
Amaklayenti amabili e-VPN angasebenza ndawonye, kodwa ama-kill switch awo awahlangani abe inqubomgomo eyodwa. Iklayenti ngayinye ifaka imithetho yethunjini layo, futhi akekho owazi ukuthi enye ikhona. Ngahlangabezana nalokhu ngeklayenti lomsebenzi elalixhunywe kuqala: uhlelo lwesibili alukwazanga ukuqeda ukuxhawula kwalo, lwahlala ku-„Connecting“ imizuzu eyishumi, futhi ithuneli lokuqala lathwala konke buthule. Ukuthi uhlelo lwesibili luyavikeleka kuncike ezimweni ezintathu, hhayi ekutheni zombili izithonjana zithi Kuxhunyiwe.
I-kill switch ibhekene nani ngempela
Akukho ngisho ifulegi elilodwa le-kill switch kusistimu yokusebenza. Iklayenti elikhangisa elilodwa lifaka isethi yemithetho: lahla konke okungaphumi ngethuneli lami, futhi ngokuvamile fail closed lapho ithuneli linyamalala. Ku-Linux ngokuvamile kuwuchungechunge lwe-nftables noma i-iptables, ku-Windows isethi yezihlungi ze-Windows Filtering Platform, ku-Android ne-iOS ukuhlelwa komzila kwaso siqu kwesevisi yethuneli kanye nesilungiselelo sesistimu esivimbela ukuxhumana ngaphandle kwe-VPN. Umhlahlandlela we-VPN we-Android uchaza leyo modeli yesevisi uma ufuna umbono weplathifomu.
Ububanzi ingxenye ebalulekile. Umthetho ofana nokuthi „vumela amaphakethe kuphela kusixhumi sokuphuma i-wg0“ awunaki ukuthi ikhona yini ithuneli lesibili. Uma elinye iklayenti likhuphula i-wg1, imithetho yeklayenti lokuqala ithatha lawo maphakethe njengethrafikhi ejwayelekile: ngokuvamile iyalahlwa, ngezinye izikhathi iyavunyelwa. Noma kungaba yiphi indlela, iklayenti lokuqala elinqumayo, futhi alinalo ngisho umqondo wokuthi uhlelo lwesibili lulindile.
Izimo ezintathu ezinquma ukuthi ubani ufakwa
Awudingi ukubala zonke izinhlanganisela. Imibuzo emithathu iyixazulula ngemizuzu embalwa.
- Ingabe iplathifomu ivumela ithuneli lesibili nhlobo? Iningi lamafoni e-Android nama-iPhone amukela isevisi eyodwa kuphela ye-VPN esebenzayo ngephrofayela yomsebenzisi, ngakho uhlelo lwesibili alunalo neze ithuneli futhi aluqhubi lutho. Uthola inqubomgomo eyodwa, evela kuhlelo olwazuza indawo.
- Iphi inqubo ephethe umzila ozenzakalelayo? I-Windows, i-macOS ne-Linux zithwala amathuneli amabili kalula. Umzila ozenzakalelayo ungoweklayenti eliwuhlele okokugcina noma ngesilinganiso esingcono, futhi elinye iklayenti lixhunyiwe kodwa alisebenzi. Ku-Linux imodi yomzila ozenzakalelayo ye-wg-quick isebenzisa ukuhlelwa komzila okusekelwe kunqubomgomo ngethebula langasese nomthetho we-fwmark, ngakho ithuneli lesibili le-wg-quick lengeza umthetho oqhudelanayo esikhundleni sokushintsha owokuqala.
- Ingabe iklayenti lesibili liyafinyelela kuseva yalo siqu? Uma i-kill switch yokuqala iyinkolelo-mbumbulu yokuzenzakalelayo, iphoyinti lokugcina langaphandle lohlelo lwesibili liwindawo nje enye elahliwe. Iphinda izame buthule futhi ayibiki neze iphutha.
Inguqulo emfushane, yezintambo zokusekela:
| Setup | What you actually get |
|---|---|
| Second client cannot hold a tunnel | One active policy; the other app only reports that it is waiting |
| Both tunnels up, second took the default route | The first kill switch blocks traffic it never meant to touch; the connection dies, or leaks if its rules are broad |
| First kill switch allows only its own endpoint and interface | Second client never connects; first tunnel unaffected |
| Both up, DNS written by whichever client ran last | Name resolution breaks for one side when either tunnel drops |
Imigqa emibili kuleyo ibukeka ifana uma ibukwa kusithonjana esitsheni sesistimu, yingakho isithonjana siwubufakazi obubi kakhulu obutholakalayo lapha.
Yini ehluleka kuqala, futhi ibukeka kanjani
Iklayenti elibambekile ku-„Connecting“ ngenkathi elinye liphilile cishe njalo lisho indlala yephoyinti lokugcina: i-kill switch esebenzayo ilahla ukuxhawula kweklayenti lesibili kuseva yalo siqu. Qinisekisa lokho ngokushibhile ngokumisa isikhashana imithetho yokuvimba yeklayenti lokuqala emzamweni owodwa. Uma elesibili lixhuma ngokushesha, umbuzo uphenduliwe.
I-DNS iwukwehluleka kwesibili. Amaklayenti asetha ukucushwa kwesixazululi sesixhumi sawo siqu, futhi amanye abhala phezu kohlu lomhlaba wonke ngokuphelele. Njengoba zombili izithuneli ziphakeme, imibuzo ingaphuma ngohlangothi olulodwa ngenkathi isixazululi singesolunye uhlangothi. Nqamula noma yiluphi uhlelo futhi olusele lugcina iseva yamagama engafinyeleleki: amakhasi ayama umzuzu bese exazululwa futhi, ngenkathi i-VPN isabonisa ukuxhumeka.
Okwesithathu ukuntengantenga kwemizila. Ukuxhumana kabusha kuhlela kabusha umzila ozenzakalelayo, futhi i-kill switch eboshelwe kusixhumi ayilandeli. Ithrafikhi eyayisethunelini isikhashana esedlule manje isihambisana nomthetho wokulahla, okufundwa ohlangothini lomsebenzisi njenge-VPN eye yeka ukusebenza ngokungazelelwe.
Qinisekisa ukuthi iyiphi inqubomgomo esebenzayo ngempela
Kwenze lokhu ngethrafikhi engenabungozi, hhayi ngento ongayikhumbula.
Ku-Linux buza i-kernel ukuthi ubani owina nokuthi i-firewall iboshelwe kuni. ip -4 route show default isho ithuneli eliphethe ukuphuma. ip rule show ikhombisa ukuthi ukuhlelwa komzila okusekelwe kunqubomgomo kuyasetshenziswa yini. sudo nft list ruleset | grep -n oifname ikhombisa ukuthi ukulahla kuboshelwe egameni lesixhumi, kumaki, noma kuchungechunge lonke lokuphuma.
Ku-Windows indaba efanayo ihlala kusilinganiso somzila nasehlni lezihlungi: Get-NetRoute -DestinationPrefix "0.0.0.0/0" | Sort-Object RouteMetric ne-Get-NetFirewallRule -Enabled True | Where-Object DisplayName -match "VPN". Ku-macOS, netstat -rn -f inet | head -5 ne-scutil --dns | head -20.
Bese wenza isinyathelo abantu abasidlulayo: misa ithuneli ngamabomu futhi uqinisekise ukuthi ithrafikhi oyilindele ukuthi yehle ngempela iyehla. Isithonjana esixhunyiwe yisimo sesixhumi, hhayi ukuqinisekisa.
Lapho amaklayenti amabili kuwumklamo ongafanele
Uma isidingo sodwa ngemuva kohlelo lwesibili siwukuvikeleka okwengeziwe, lususe. Izinqubomgomo ezimbili zokuvimba ezisebenzisana azibikezeli kahle kuneyodwa, futhi ukuxhumana kabusha ngakunye kuyithuba lokuhla esimweni okungekho mthengisi oyihlolayo.
Uma ngempela udinga uchungechunge, njengesango lebhizinisi elifinyelelwa ngokugxuma kwezohwebo, khetha umklamo onephoyinti elilodwa lokuqinisekisa. Lokho ngokuvamile kusho i-router noma iklayenti elilodwa elisekela uchungechunge, hhayi izinhlelo ezimbili zedeskithophu eziphikisanayo ngomzila ozenzakalelayo ofanayo. Kudivayisi ephethwe, gcina iklayenti eligunyaziwe futhi uthathe konke okunye njengangaphandle kobubanzi, noma yini ekubonisayo esitsheni.
Uhlu lokuhlola ngaphambi kokugcina kokubili
Landela uhlu ngokulandelana; into yokuqala ehlulekayo yiyo okufanele ilungiswe.
- Qinisekisa ukuthi iklayenti elilodwa ngqo liphethe umzila ozenzakalelayo nesixazululi.
- Uma ufuna iklayenti lesibili liphakeme, vumela ngokusobala iphoyinti lokugcina leseva yalo futhi uhlole futhi ngemuva kokubuyekezwa kweklayenti ngakunye.
- Bhala umphumela olindelekile lapho kuwa noma yiliphi ithuneli, bese uhlola lelo cala elithile.
- Hlola indlela yokwehluleka ngemuva kokuqala kabusha, lapho ukulandelana kokuqala kuhlukile.
- Kuphrofayela ephethwe, ma futhi ubuze umnikazi ngaphambi kokwengeza noma yini.
Uma isinyathelo sesithathu sehluleka, impendulo eqotho iwukuthi iklayenti elilodwa kuphela elikunikeza inqubomgomo. Nquma ukuthi uyethemba liphi bese uyeka elinye lihambe.