Okukhethekile kwe-UFW kwe-VPN lapho ikheli le-endpoint lishintsha

Iklayenti lizama ukuxhuma kabusha futhi akukho okukhulukayo kumshini, nakuba iphrofayela efanayo yasebenza ngesonto eledlule. Igama lehosti le-endpoint manje lixazululwa kukheli oluhlukile, futhi okukhethekile kokuphuma kusabiza lelo lakudala. Leyo mvume eyodwa ephelelwe yisikhathi yanele ukuguqula i-kill switch esebenzayo ibe ukuphazamiseka okuphelele, futhi ayibonakali kunoma yisiphi isibonisi sesimo esiboniswa yi-desktop. Ukulungisa kuwuhambo oluncane lomsebenzi, hhayi ukuguqulwa komugqa owodwa.

Ithuneli ixhuma kabusha, bese kungabi khona okukhulukayo

Umthetho wokuphuma obiza ikheli lendawo okuyiwa kuyo uyisithombe sesikhashana, futhi izimpendulo ze-DNS azinjalo. Lapho umhlinzeki ephendula ikheli, iphakethe elithunyelwa yiklayenti liya ku-peer entsha alihambisani nalutho futhi lilahlelwa phansi ukwenqatshwa okuzenzakalelayo. Iklayenti libe selibika isikhathi sokuphela, okuzwakala njengenkinga yeseva hhayi yefayela lomlilo.

Ukugxilisa noma yiliphi ikheli elibuyiswa ukusesha komphakathi kwenza namuhla kusebenze futhi kushiye kusasa kuphukile. Lokho ukuguqulwa kwesikhathi esisodwa, hhayi inqubomgomo yesondlo.

Chaza okukhethekile okuhlose ngempela

Qala ngokubhala amanani amane adingwa umthetho: igama le-endpoint elivunyelwe noma isethi yamakheli, ukuthutha, imbobo yendawo okuyiwa kuyo kanye ne-interface iphakethe elipuma ngayo. Womane bayingxenye yemvume, futhi noma yiliphi kubo lingaba nephutha ngenkathi umthetho usabonakala uzwakala. Umthetho olungile kwemithathu yabo uhluleka ngendlela efanayo nomthetho onephutha kuwo womane. Bawabhale phansi ngaphambi kokuthayipha umyalo, ngoba umthetho ulungile kuphela ngokwendlela incazelo engemuva kwawo elungile ngayo.

Umyalo ongezansi ukhombisa isimo se-endpoint eyodwa ye-IPv4 UDP ku-uplink yentambo. Shintsha womabili amanani ngalawo owaqinisekisa ngawo ngokumelene nokwethulwa.

sudo ufw allow out on enp3s0 proto udp to 192.0.2.44 port 1194
sudo ufw status verbose

Levo mvume ayigunyazi izindawo eziqondile embotsheni efanayo, ayidali isilaleli futhi ayihlanganisi i-TCP. Ikhasi lencwadi ye-UFW lichaza indlela ikheli, i-interface kanye neprotocol okunciphisa ngayo umthetho, futhi lokho kunciphisa kuyiyo yonke into.

Vuselela njengohambo olulodwa lomsebenzi

Phatha okukhethekile njengomthombo onomnini nokuguquka, hhayi njengomyalo umuntu akhumbulayo ukuwusebenzisa. Okokuqala thola umuntu ozongenela phansi kusixazululi nasemfanekisweni wamakheli wokwethulwa uqobo, futhi chaza ngamabomu ukuthi lelo gama lixazululwa kanjani ngaphambi kokuba ithuneli libekhona. Bese uqinisekisa umuntu ozongenela phansi ngokumelene neprotocol, imbobo kanye nomndeni wamakheli okuhlosiwe ngaphambi kokuthinta isethi yemithetho.

Faka kuqala imvume entsha encane bese uqinisekisa ukuthi ilayishiwe, ngoba ukucela iklayenti ukuthi lisebenzise ikheli elifayela lomlilo lisalivimbayo kukhipha iphutha elibonakala njengokungasebenzi kweseva. Shiye imithetho engahlobene ingathintwanga ngesikhathi soshintsho.

Qaphela ukuguquka kweklayenti ngendlela yalo yokuxhuma kabusha esekelwayo bese uqinisekisa ukuthi yiliphi ikheli elikude elikhethile. Ukuvuselela i-DNS kuphela akusihambisi isokhethi esivele sikhona, futhi isilungiselelo sokuqhubeka kwe-endpoint singagcina iklayenti ku-peer endala isikhathi eside ngemva kokuba irekhodi lishintshile.

Ekugcineni hoxisa imvume ephelelwe yisikhathi ngamabomu, uvumela iwindi lokuhlangana elivunyelwe ngenkathi iseshini endala isasebenza. Ukususa okufakwayo okudala kusenesikhathi kukhipha ukuphazamiseka okufushane; ukukushiya unomphela kushiya imvume okungekho muntu ongayichaza.

Hoxisa imvume endala ngamabomu

Ukususa yikhona lapho ingxenye enkulu yobungozi ikhona, ngoba umthetho omdala ukuphela kwento esebenzayo njengamanje. Uma ukufakwa komuntu ozongenela phansi kuhlulekile, musa ukuqhubeka futhi ungakususi okufakwayo okusathwala ithrafikhi. Uma ukususa ngokwakho kuhlulekile, rekhoda imvume ephelelwe yisikhathi njengephelelwe yisikhathi esikhundleni sokumemezela inqubomgomo njengesikhathi samanje.

Phinda ukubuyekezwa konke lapho i-uplink ishintsha isuka ku-Ethernet iya ku-Wi-Fi, lapho ukuthutha kushintsha, noma lapho insizakalo izungeza emakhelini amaningi. Umthetho oqondene ne-interface kufanele uyeke ukufanisa ngemva koshintsho lwenethiwekhi, futhi leyo ndlela yokuziphatha ilungile nakuba ibonakala njengokuhlehla.

Bese ufakazela isivumelwano ngethrafikhi engenabungozi. I-endpoint evunyelwe kumele ifinyeleleke ngesikhathi sokusetha, uhlelo oluvikelwe kumele lusebenze uma selixhunyiwe, futhi ithrafikhi eqondile engahlobene kumele iqhubeke ivinjiwe ngesikhathi sokuphazamiseka. Hlanganisa yomibili imindeni yamakheli kanye nomzamo owodwa wokuvuselela ohlulekile ngamabomu, ngoba ukuxhumana okuphumelelayo ngemva kokuguqulwa okukodwa kwekheli eligxiliwe akufakazeli lutho kulezo zimo.