I-VirtualBox NAT noma ibhuloho: i-VPN ye-VM iphela kuphi

Imibuzo emibili ehlukene ifika kanyekanye njalo lapho umshini onguzenzi ushayela iklayenti le-VPN, futhi izimpendulo zawo ziyehluka. Owokuqala ukuthi umhubhe ongaphakathi kwesivakashi uvikele umsingathi yini, futhi owesibili ukuthi umhubhe okumsingathi umboza isivakashi yini. Imodi ye-adaptha inquma kokubili, ukudlula ngisho isofthiwe ye-VPN uqobo. I-adaptha ye-NAT yenza umsingathi abe indawo yokugcina ebonakalayo, kanti i-adaptha yebhuloho ibeka isivakashi kunethiwekhi nekheli laso siqu.

Ubani ogcina isikhathi esivaliwe ngempela

Isikhathi esivaliwe singesomshini osehlisa isikhathi, futhi lowo isivakashi uma iklayenti lisebenza ngaphakathi kwe-VM. Umhubhe lowo udlula kuphela ithrafikhi engena ku-adaptha yengqondo yesivakashi, futhi i-hypervisor ayisoze ihambise omunye umshini ngesivakashi ngokwayo. Yingakho isivakashi singagcina umhubhe osebenzayo kuyilapho umsingathi uphequlula kunethiwekhi evulekile. Okuphambene akulingani, futhi lokho kungalingani yikho okuyingxenye imihlahlandlela eminingi eyephula kuyo.

Ukuthi inethiwekhi yangaphandle ibona ikheli likabani umbuzo ophendulwa yimodi ye-adaptha. Lapho lokho sekuxazululiwe, ukumboza akuseyona inkinga yenqubomgomo futhi kuba yinkinga yomshini. Konke okungezansi kuvela kulezi zinto ezimbili.

I-NAT ibhala kabusha isivakashi ize ibe njengomsingathi

Nge-NAT, i-hypervisor ibhala kabusha iphakethe ngayinye yesivakashi iye ekhelini lomsingathi ngaphambi kokuba ifinyelele iswishi yokuqala. Leyo thrafikhi ibe isinikezwa isiteki senethiwekhi somsukathi uqobo, lapho ilandela ithebula lomzila wayo, kuhlanganise nomzila ojwayelekile ophethwe umhubhe okumsingathi. Ngakho isivakashi se-NAT simbozwa umhubhe okumsingathi ngaphandle kwanoma yikuphi ukulungiselelwa, okuphambene nalokho okushiwo icala elisuka esivakashini liya kumsingathi.

# on the host: adapter mode and NAT DNS behaviour
VBoxManage showvminfo "lab-vm" | grep -i -E "nic|nat"
VBoxManage modifyvm "lab-vm" --natdnshostresolver1 on

Isivakashi esishayela iklayenti laso siqu siqeda lowo mhubhe ngaphakathi kwesivakashi, futhi ithrafikhi evaliwe iphuma ngayo leyo ndlela yokubhala kabusha, ngakho izinhlelo zomsingathi zigcina indlela yazo nekheli lazo lokuphuma. I-VirtualBox futhi inokuxazululwa kwamagama kule modi, futhi idlulisa imibuzo yesivakashi ngomshini wayo ngaphandle uma i---natdnshostresolver1 ivuliwe. Ukuyivula kunikeza ukusesha kwesivakashi kumxazululi womsingathi, okulungisa ukuxazululwa lapho umbono womsingathi uqobo ulungile futhi ngokulinganayo kunikeza umxazululi ongase abe khona ngaphakathi komhubhe kuphela. I-VM kufanele icishwe ngaphambi kokushintsha isilungiselelo, futhi isilungiselelo singesadaptha hhayi isofthiwe yesivakashi.

Ibhuloho linikeza isivakashi irenti yaso nokuchayeka kwaso

Ibhuloho lidlulisa izingcezu zesivakashi ziye engxenyeni yenyama, ngakho i-DHCP liyinikeza irenti futhi inethiwekhi iliyithatha njengomsingathi ohlukile. Isivakashi ngasinye esibhulohiwe singagcina umhubhe ozimele onomzila waso ojwayelekile, futhi ithebula lomsingathi alisoze lishintshe. Intengo ukuchayeka: isivakashi siphendula ekusakazeni, sibonakala kumathebula omakhelwane, futhi singena ngaphansi kokuphepha kwezimbobo zeswishi nokuhlukaniswa kwamaklayenti angenantambo. Umhubhe okumsingathi nawo awukumbozi lokhu kuhlelwa, ngoba izingcezu zesivakashi azisoze zadlula esitekeni somsukathi.

Lokho kwehluka esimeni se-NAT kufanele kushiwo ngokucacile kunokuba kushiye njengesibonelo. Isivakashi esibhulohiwe sidinga iklayenti laso siqu nezicucu zaso zokuqinisekisa njalo lapho ithrafikhi yaso kufanele isebenzise umhubhe. Lapho isivakashi kufanele sihlale singabonakali kunethiwekhi yasendaweni, i-NAT noma inethiwekhi yangaphakathi kuphela enomzila olawulwayo iwumklamo ongcono.

Kungani isivakashi singeke sibe yisango lomsingathi

Ukuboleka umhubhe wesivakashi kumsingathi akunaso iswishi esisekelwayo kuyo yomibili i-hypervisor enkulu. Umsingathi awunayo indlela engena emhubheni wesivakashi futhi awunayo imithetho yokuhumusha ekhomba lapho, ngakho ithrafikhi yesivakashi neyomsingathi ihlala iyimifudlana ehlukene enabanikazi abahlukene. Leyo ndlela iyahluleka kungakhathalekile imodi ye-adaptha.

Izinto ezingena esikhundleni ezisebenzayo ukudlulisela kanye namaphroxy. Ukudlulisela kwasendaweni kwe-SSH kwenza umsingathi axhumane ne-loopback yaso ngokwayo kuyilapho isivakashi sithwala umfudlana siwungenisa emhubheni, futhi lokhu kumboza izinsizakalo ze-TCP ngaphandle kokufaka iklayenti lesibili. Ukwenza ithrafikhi ye-IP yomsingathi uqobo isebenzise umhubhe wesivakashi esikhundleni salokho kudinga umzila ngaphakathi kwesivakashi kanye nomzila ocacile kumsingathi nokuhumusha kumsingathi. Lokho kuwumklamo omncane wenethiwekhi hhayi ibhokisi lokumaka, futhi kudinga icebo lomzila wokubuyela emuva. Uma isivakashi sikhona kuphela ukuze sishayele iklayenti, beka iklayenti kumsingathi futhi ususe ukweqa okungeziwe.

ssh -N -f -L 8080:internal-host.example:80 user@lab-vm

Abaxazululi nemizila akweqi umngcele

I-DNS ilandela i-adaptha eyamukele inketho, ngakho isivakashi asizuzi ifa lomxazululi womhubhe womsingathi futhi umsingathi awusoze wazi iseva eyaphushwa kwisivakashi. Amanani e-dhcp-option DNS aphushwayo asebenza kuyi-interface eyawamukela, yingakho isivakashi esibhulohiwe esingenakho iklayenti singakwazi ukuxazulula amagama angaphakathi. Isivakashi se-NAT ngokuvamile sisebenzisa ukuphathwa kwe-DNS kwe-hypervisor, futhi umehluko ubonakala kumyalo owodwa endaweni ngayinye.

# on the host
VBoxManage showvminfo "lab-vm" | grep -i -E "nic|nat"
# inside a Linux guest
ip -4 route
resolvectl status
# inside a Windows guest
Get-DnsClientServerAddress

Funda umxazululi nomzila ngaphakathi kwesivakashi ngaphambi kokucabanga ukuthi omunye wabo ulandela umsingathi. Engeza umxazululi womhubhe ku-adaptha yesivakashi uqobo lapho amagama angaphakathi kufanele axazululwe khona, bese uqinisekisa ngegama elikhona ngemuva komhubhe kuphela. Bhala imodi ye-adaptha, umnikazi womhubhe nomthombo womxazululi ku-VM ngayinye, ngoba lezi zinto ezintathu ziphendula cishe yonke imibuzo elandelayo. Amanye ama-hypervisor ashintsha amagama ezimodi futhi ashiye umgomo unganyakazi.