Ama-VPN client amabili ngesikhathi esisodwa: ubani owina umzila ozenzakalelayo?

Ukusebenzisa ama-VPN client amabili ngesikhathi esisodwa ingxabano yokuhlela imizila, hhayi isethingi yobumfihlo. Noma iyiphi i-tunnel ephethe umzila ocacile kakhulu ithola ithrafikhi, kanti enye ihlala ixhunyiwe kodwa ingenzi lutho. Igeyithi yebhizinisi ibona umxhumano ozayo usuka endleleni yokuphuma yomuntu siqu, kuyilapho i-client yebhizinisi kumshini wakho isabona yonke i-adaptha. Ukunquma ukuthi yikuphi kwalaba maqiniso amabili okubalulekile yilo lonke umsebenzi.

Ithebula lemizila likhetha owinile oyedwa

Thwebula ithebula ngaphambi nangemva kokuqala kwe-client yebhizinisi, futhi funda ikholomu ye-interface hhayi indawo nje. Umzila ozenzakalelayo ojwayelekile ovela ku-tunnel yangaphandle kulula ukuwususa, ngoba ipheya le-/1 licacile kune-/0. Ipheya elingokoqobo 0.0.0.0/1 ne-128.0.0.0/1 lihlanganisa yonke indawo ye-IPv4 ngezindawo ezimbili futhi linqoba noma yimuphi umzila ozenzakalelayo oyedwa. Uma usufakiwe, i-tunnel yangaphandle isabonakala ixhunyiwe futhi ayithwali lutho.

ip route show default
ip route show | grep -E '^(0.0.0.0/1|128.0.0.0/1)'

Ukuhlela ngomgomo kungadlula ngokuphelele ithebula eliyinhloko, ngakho funda imithetho nemizila. Umthetho othumela ithrafikhi emakwe waya kwelinye ithebula unqoba ngaphambi kokuba ithebula eliyinhloko libuzwe. Yile ndlela uhlelo olulodwa olungahlala kusixhumanisi somzimba ngenkathi konke okunye kusebenzisa i-tunnel.

ip rule show

I-Windows inquma ngezilinganiso

Ku-Windows owinile umzila onesilinganiso esiphansi kakhulu sendawo, futhi ama-client amabili angafaka umzila ozenzakalelayo ngezilinganiso ezahlukene. Funda ithebula nokuhlelwa kwe-interface kanye, ngoba i-adaptha enesilinganiso esiphansi akuyona njalo leyo oyilindele. I-client ebeka nesilinganiso se-interface ingasusa umzila ozenzakalelayo ngaphandle kokwengeza umzila owodwa. I-adaptha ehlulwayo ihlala ivuliwe futhi ayitholi lutho.

route print -4
Get-NetIPConfiguration | Select-Object InterfaceAlias, IPv4DefaultGateway

Qhathanisa imiphumela emibili futhi usho i-interface ephethe 0.0.0.0/0. Uma ama-client womabili eyifuna, isilinganiso siyanquma, yingakho ukuhlolwa kokulandelana kokuxhumana kungabonakala kungafani emishinini ehlukene. Uma kungekho mphumela okhombisa igeyithi ozenzakalelayo, i-client ayisebenzi ku-tunnel egcwele futhi impikiswano yochungechunge ayinamsebenzi.

Ababukeli ababili, imibono emibili ehlukene

Igeyithi ekude ibona umxhumano owodwa ozayo usuka endleleni yokuphuma yangaphandle kanye nakho konke i-client ekudlulisela ku-tunnel yayo. I-client yasekhaya ibona ama-adaptha, imizila nokuba khona kwenye i-tunnel, ngoba isebenza ngemvume yokukwakha. Ukuhlukanisa le mibono yikho okubalulekile; ukusho ukuthi i-client ayikwazi ukubona akusikho.

Cabanga ukuthi i-client ingabala noma yini eyifunayo, futhi hlela umbono wegeyithi esikhundleni salokho. Idizayini encike ekutheni i-client ihlale iyimpumputhe isesigabeni esisodwa sokugcina ngaphambi kokuphuka.

I-DNS ne-IPv6 yizindawo lapho uchungechunge luvuza khona

I-DNS ilandela noma yisiphi isethingi sesisombululi esinqobayo, futhi lokho akusilo ngempela indlela amaphakethe ahamba ngayo. Isisombululi sebhizinisi esifinyelelwa nge-tunnel yebhizinisi sihambisana nedizayini; isisombululi sasekhaya esifinyelelwa ngaphandle kwayo asihambisani, futhi siveza amagama i-tunnel obekufanele iwafihle. I-IPv6 ingukuvuza kwesibili: umsingathi onesitaki esimbili uqhubeka nokusebenzisa i-IPv6 waya ezindaweni i-tunnel eziphethe kuphela nge-IPv4. Hlola imindeni ngokwehlukana, ngoba i-tunnel ye-IPv4 kuphela ayisho lutho ngemizila noma ngezisombululi ze-IPv6.

ip -6 route show default
resolvectl status | grep -A2 'DNS Servers'

Lungisa isisombululi nomzila we-IPv6 ngamabomu esikhundleni sokufaka enye i-tunnel phezulu. Ukugoqa kabili kubiza ne-MTU, ngakho i-MTU yangaphakathi encane iyinto yokuqala okufanele uyizame uma amakhasi ema ngemuva kokuphakama kochungechunge. Isisombululi esiphendula ngokushesha akusona ubufakazi bokuthi yiso esifanele.