I-DNS yesivakashi se-VirtualBox NAT iyaphuka ngemva kokuba umgcini ejoyina i-VPN

Kumgcini we-Windows igama lohlelo lwangaphakathi liyaxazululwa uma nje i-VPN ixhuma, kodwa ngaphakathi kwesivakashi se-Ubuntu akuxazululwa. Isivakashi sigcina izilungiselelo zaso zomxazululi, futhi i-adaptha ye-NAT engaphambili ingaphendula imibuzo ye-DNS ngezindlela ezimbili ezihlukene. Ukuqondisa isivakashi kumxazululi womphakathi kwenza amasayithi aphinde alayishe kuyilapho amagama ayimfihlo ehlala ephukile. Yingakho umzila womxazululi ulandelwa ngaphambi kokuba kushintshwe noma yini.

Landelela ukusesha okukodwa nge-adaptha ye-NAT

Khetha igama langaphakathi elifanele ngokugcwele negama lomphakathi elilodwa njengokulawula. Uma ithuna liphezulu, qinisekisa kumgcini ukuthi igama langaphakathi liyaxazululwa nokuthi uhlelo olungemuva luyavuleka. Bese ugijima lokho kusesha okubili ngaphakathi kwesivakashi futhi uqhathanise izimpendulo, hhayi amathuluzi.

Ngaphambi kokuqhubeka, qinisekisa ukuthi i-adaptha iyi-NAT evamile ngempela. I-adaptha yebhuloho, inethiwekhi ye-NAT enegama kanye neklayenti lesibili le-VPN ngaphakathi kwesivakashi ngakunye kunokuhlelwa kwayo nencazelo yayo. Ukuqagela kulesi sigaba kumosha uphenyo olusele.

VBoxManage showvminfo work-ubuntu --machinereadable | grep -i natnet
resolvectl status | head -40
cat /etc/resolv.conf

Umyalo wokuqala ukhombisa imodi ye-adaptha nanoma iyiphi inethiwekhi ye-NAT exhunywe kuyo. Ngaphakathi kwesivakashi se-Ubuntu owesibili ubala izilungiselelo ze-DNS ngokuxhumana ngakunye, futhi owesithathu uvame ukwembula ikheli le-stub lendawo kuphela, okusho ukuthi i-upstream yangempela ikwenye indawo.

Hlukanisa ukuxazululwa nokufinyeleleka. Isivakashi esithola ikheli elifanele kodwa singakwazi ukuvula uxhumano sinezinkinga zokuhlela umzila, zokuhlunga noma zemvume yesevisi, futhi izinguquko ze-DNS ezilandelayo ngeke zisithinte neze. Hlola ikheli ngokwehlukana bese ubhala ukuthi iyiphi kulezi ezimbili ehlulekile.

Imodi ye-proxy nemodi yomxazululi womgcini ziyizindlela ezihlukene

Kumodi ye-proxy injini ye-NAT idlulisela imibuzo yesivakashi kumaseva e-DNS esivele iwazi. Kumodi yomxazululi womgcini ibamba umbuzo futhi icela uhlelo lokusebenza lomgcini ukuthi luxazulule igama ngalokho umgcini akusebenzisayo njengamanje. Yiyo kuphela yesibili elandela iklayenti le-VPN elibhala kabusha ukuxazululwa kumgcini lapho ithuna likhuphuka. Yingakho izilungiselelo ezimbili zinikeza izimpendulo ezihlukene emshinini omunye.

Lowo mehluko yiwo lonke inkinga emshweni owodwa. Ukunikeza isivakashi uhlu lwamakheli amaseva akufani nokucela i-Windows ukuthi ixazulule igama ngomxazululi wayo ohleliwe, futhi ku-VPN ene-DNS ehlukanisiwe izimpendulo ezimbili ziyahluka. Ukukhetha kwe-adaptha kumayelana nendlela, hhayi imvume.

Awekho modi onikeza ukufinyelela kunoma yini. Ugunyazi luhlala kumgomo we-VPN nakusevisi, futhi ukusesha okusebenzayo kusho kuphela ukuthi igama laba ikheli.

Shintsha i-adaptha, bese uqinisekisa ukuthi isivakashi sithola ini

Qala ubhale izilungiselelo zenethiwekhi ne-DNS ze-VM, bese uvale umshini ukuze kuhlelwa okuhlala njalo kube yikho okuhlelayo. Kwi-VM ebizwa ngokuthi work-ubuntu okwadaptha yayo yokuqala ithwala i-NAT, ukukhetha ngayinye ye-adaptha kusethwa kusuka kumgcini ngesikhathi i-VM ivaliwe. Bese uyivula futhi uhlole umphumela esikhundleni sokuthemba isimo sokuphuma.

VBoxManage modifyvm work-ubuntu --natdnshostresolver1 on
VBoxManage showvminfo work-ubuntu --machinereadable | grep -i natdns

Idijithi yokugcina ikhetha inombolo ye-adaptha, ngakho akulona inani jikelele; isilungiselelo se-adaptha 2 sizothwala u-2 kuleso sikhundla. Sebenzisa ibhinari ye-VBoxManage engokwenguqulo ye-VirtualBox efakiwe, ngoba endala esemzileni ingabhala izilungiselelo inguqulo esebenzayo engazinaki.

Ukwenza kusebenze ukukhetha kwe-proxy esikhundleni salokho kukhetha enye indlela futhi akukunikezi ukuziphatha komxazululi womgcini. Ngemva kokuba isivakashi siqalile, hlola ukuhlelwa kwe-DNS esikuphethe ngempela, ngoba umxazululi oboshiwe noma isilungiselelo se-DNS esibethelwe ngaphakathi kwesivakashi sigcina izinhlelo kwenye indlela kungakhathalekile ukuthi i-adaptha inikela ngini.

Hlola kulo mjikelezo wokuphila we-VPN, hhayi kanye kuphela

Phinda ukusesha kokubili esivakashini, bese uvula uhlelo lwangempela futhi uluvumele luqinisekise igama lomgcini le-TLS. Ukuhlola uxhumano nge-IP kuphela kuhlukanisa i-DNS kahle, kodwa akusona isihlolo sesitifiketi futhi akufanele kubikwe kanjalo. Bhala igama, ikheli nomphumela wohlelo ndawonye.

Ngesikhathi sewindi evunyelwe, nqamula futhi uxhume kabusha i-VPN yomgcini bese uphinda ukuhlola. Umphumela kufanele uhambisane nomgomo wokufinyelela, futhi ukuthi ukuxazululwa komphakathi kusebenza futhi akusho lutho mayelana nokuthi imibuzo eyimfihlo yahlala emzileni obekiwe yini.

Lapho imodi yomxazululi womgcini ingashintshi lutho, buyisela inani elibhaliwe futhi ugcine imibono. Iklayenti le-VPN elikhipha ithrafiki ye-hypervisor, umxazululi wangaphakathi ongafinyeleleki kanye nesilungiselelo sesivakashi esiboshiwe ngakunye kudinga ukulungiswa okuhlukene, futhi ukuhlanganisa i-adaptha ngebhuloho kushintsha ukwakheka kwenethiwekhi esikhundleni sokusetha kabusha i-DNS.