Yiluphi uphawu lokuhlonza oludingwa ukubhukha kwakho kwe-VPN?
Ukubhukha kusebenza kuphela uma kusho uphawu lokuhlonza olufundwa isabi. Ngaphambi kokumisa, khetha phakathi kwekheli lehadiwe, ubunikazi bomhubhe kanye nokhiye wozakwethu.
Izimo ezintathu zinquma ukuthi ukubhukha kufanele kusebenzise luphi uphawu lokuhlonza: yiluphi uhlelo olusabalalisa ikheli, ingabe lolo hlelo luke lwabona ifremu yesigaba 2, nokuthi lusebenzisa ini njengokhiye weklayenti. Irotha yasekhaya ene-DHCP, i-VPN ehlanganisiwe kanye nomhubhe oqondisiwe ziphendula le mibuzo ngendlela ehlukile. Ukukhetha uphawu lokuhlonza kuqinile kunokuzama ukumisa wonke amakheli e-MAC abikwa i-adaptha, ngoba uphawu lokuhlonza yiyo into isabi eliyifundayo ngempela.
Qala kwisabi bese usebenza emuva; uphawu lokuhlonza ohlangothini lweklayenti yinoma yini uhlelo lelo eliyamukelayo.
Buza isabi kuqala
Iseva ye-DHCP isabalalisa isuka echibini futhi ihlanganisa ukubhukha nophawu lokuhlonza eyalwaziyo, okungase kube ikheli lehadiwe, uchungechunge lophawu lokuhlonza lweklayenti noma i-DUID kuye ngenguqulo yephrothokholi. Iseva ye-VPN isabalalisa isuka echibini layo futhi ihlanganisa nalokho okuvezwa imodeli yayo yokumisa, ngokuvamile i-Common Name eqinisekisiwe. Inethiwekhi ehlanganisiwe ingadlulisela le nkinga kwiseva ye-DHCP esevele isebenzela i-LAN. Ngakunye ukusesha okuhlukile, futhi ukubhukha okusebenzayo kwelinye akubonakali kwabanye.
Qinisekisa ukuthi iseva ibona ini ngempela ngaphambi kokumisa noma yini. Ukubhukha okusho uphawu lokuhlonza olungalungile kwehluleka buthule: iklayenti lithola ikheli lechibi kuphela, futhi iphutha libonakala njengenkinga yeklayenti.
Lapho ikheli le-MAC lisasho okuthile
Kusixhumanisi se-Ethernet noma se-Wi-Fi sangempela, ikheli lehadiwe likhomba isixhumi esisendaweni yaleyondawo. Izici zobumfihlo ziyaliphendula, ama-adaptha angokoqobo akha amasha, futhi ikhompyutha ephathekayo ingabonisa amanani ahlukene ku-Wi-Fi nasesikhumulweni. Umhubhe we-TUN oqondisiwe uthwala amaphakethe e-IP futhi awudlulisi ubunikazi bokusebenzisa umoya bangempela kwiseva ye-DHCP ekude, ngakho ukubhukha okusekwe ku-MAC kulolo hlelo akunakho ukuqhathanisa. I-TAP yehlukile: ithwala amafremu e-Ethernet futhi ingahlanganyela esizindeni esihlanganisiwe lapho uphawu lokuhlonza lwesigaba 2 lusabalulekile.
Ngisho lapho, ikheli elifanele yilelo elisetshenziswa kuleso sizinda, hhayi ngokuzenzakalela elomhuba wangenhla wangempela.
Amakheli omhubhe nokhiye wozakwethu kunendawo yabo
Ukusetshenziswa kwe-OpenVPN oqondisiwe kwabela amakheli ngemodeli yayo: ukumisa kweklayenti ngayinye okukhiyiwe ngegama eliqinisekisiwe, noma ichibi elicacile. Ukushintsha ukubhukha kwe-DHCP kwerotha ye-LAN akukudali lokho kwabela, futhi ukwengeza ukubhukha komhubhe akulithinti i-LAN. I-WireGuard ihamba ibe kude, ngoba uzakwethu ubonakala ngokhiye wakhe womphakathi kanye namakheli avunyelwe, hhayi ngenoma yiluphi uphawu lokuhlonza lwehadiwe. Akukho kubhukha kwe-Ethernet okuvamile okuthatha indawo yokumisa kukazakwethu lapho.
Gcina uhlu oluhlukanisa izinto ezine: ubufakazi bedivayisi, i-adaptha engokoqobo, uphawu lokuhlonza lwesabi kanye nekheli elabelwe. Umshini oyedwa wangempela ungaba nama-adaptha, amakheli kanye nezikhathi eziningi.
Ikheli elimile akubona ubunikazi
Ikheli elilindelekile lisebenza kalula ekuphathweni futhi akusilo ubufakazi bokuqinisekisa. Imithetho yokufinyelela encike ekhelini iyeka ukuba ukuhlolwa kobunikazi ngomzuzu lapho ikheli libelwa kabusha, labelwa noma lenziwa inkohliso. Uma umthetho uncike ekhelini, xhumanisa ukwabelwa kabusha nokuhoxiswa nomnikazi wobunikazi, futhi gcina isinqumo sangempela sokuqinisekisa kwenye indawo. Ngaleyo ndlela ukunethezeka akubi ubufakazi obukuphela kokuthi iyiphi idivayisi exhume.
Rekhoda isabi, uphawu lokuhlonza kanye nekheli elabelwe ndawonye. Uma okukodwa kushintsha, ezinye ezimbili yizo ozihlolayo.
Uma izinhlelo ezimbili zombili zithi zabela isubneti efanayo, nquma ukuthi yiluphi olunayo ngaphambi kokwengeza ukubhukha kunoma yiluphi lwazo.