Isayithi lilayishwa kusukela kukhompyutha ephathwayo kwinethiwekhi efanayo futhi liphelelwa yisikhathi kuyo yonke enye indawo, futhi umsingathi uphinde asebenzise iklayenti le-VPN lethrafikhi yakhe yokuphuma. Le nhlanganisela ikhiqiza ukwehluleka okuthile: ukuxhumana okungena kuyafika, impendulo iphuma ngomzila ongafanele, futhi iklayenti langaphandle aliyiboni neze impendulo. Zombili izingxenye zivela ekuthunjweni kwamaphakethe afanayo, ngakho ukulandelana kwezigameko yikho okufanele kufundwe.

Umthetho womzila osuselwe emthonjeni uvame ukulungisa uphawu. Futhi uvame ukukhulula ithrafikhi eningi kunaleso sayithi esiwubangele, futhi yileyondlela okufanele iqondwe ngaphambi kokugcina umthetho.

Uphawu: uphendula ngaphakathi, hhayi ngaphandle

Ngaphakathi kwenethiwekhi impendulo akudingeki ukuthi iwele umhubhe, ngakho ikhasi liyalayishwa futhi isevisi ibukeka iphilile. Ngaphandle isicelo sifinyelela kumsingathi futhi impendulo iqondiswa kwi-VPN, lapho umkhawulo okude ungenasizathu sokuyamukela. Isiphequluli sibona ukuphela kwesikhathi esikhundleni sokwenqatshwa, okuwuphawu lomzila wohlangothi olulodwa hhayi lwetheku elivaliwe.

Qinisekisa ukuma ngaphambi kokushintsha umzila: isilaleli siyasebenza, isicelo sangaphakathi siyaphumelela, futhi isicelo sangaphandle asikhiqizi impendulo neze. Lezi zimo ezintathu ndawonye zikhomba emzileni wokubuya hhayi ekulungiselelweni kweseva yewebhu. Ukungalingani okuhlanzekile kangaka kuwusizo kunanoma yimuphi umugqa welogi, ngoba kukhipha isilaleli ngaphambi kokuthi ufunde nomyalezo owodwa wephutha.

Gcina umzila wokuphatha ozimele uvuliwe ngesikhathi usebenza. Umthetho ophula isikhathi sakho se-SSH uguqula ukulungisa kwemizuzu eyishumi kube ukuvakasha ngokomzimba.

Isikhethi somthombo sihlangana nani ngempela

Ekuhambeni kwemigomo ye-Linux, umthetho ofana no-from 192.168.50.2 uhlangana namaphakethe omthombo wawo oyilelo kheli. Awukufaki ngamakhodi iqiniso lokuthi iphakethe liyaqhubeka nengxoxo eyangena ngomzila wasekhaya, futhi awazi ukuthi yiluphi uhlelo oluyidalile. Ikheli kuleso sibonelo liyingcazelo nje; libuyisele ngekheli umsingathi wakho ayisebenzisa ngempela. Thatha umugqa njengesitatimende mayelana namakheli futhi akukho okunye.

Uma ithebula elikhethiwe lihlinzeka ngomzila ojwayelekile wokuzenzakalela, iphakethe ngalinye elithwala lowo mthombo lingathatha okuhlukile okufanayo. Enye insevisi eboshwe ekhelini elifanayo iyayizuzu, futhi uhlelo oluzibophela ngamabomu kulelo kheli nalo luyayizuzu. Inkomba yemithetho yenqubomgomo ibala umthombo, indawo, iphrothokholi, itheku, uphawu kanye nokubaluleka njengabakhethi abahlukene, okukhumbuza ukuthi umthombo wodwa uwona obanzi kakhulu okhona.

Ukubaluleka kunquma umphumela. Ukusesha kuhamba ngokulandelana futhi ithebula lokuqala elikhipha umphumela lingaqeda ukusesha, ngakho umthetho obekwe kusenesikhathi kakhulu ungafihla umzila othile kakhulu obuzonikezwa ithebula elilandelayo. Funda uhlu oluphelele oluhleliwe hhayi umugqa owodwa owengezile. Umthetho ongalokothi uhlangane awubizi lutho, kuyilapho lowo ohlangana kusenesikhathi kakhulu ushintsha ngokuthula konke okusemuva kwawo.

Hlola umzila wokubuya kanye nethrafikhi obungayihlelanga

Funda imithetho namathebula, bese ubuza i-kernel ukuthi yimuphi umzila okungayithatha iphare elithile lomthombo nendawo. Ukuhlola kusukela kumsingathi uqobo akufani nokuhlola ngaphandle, ngakho yenza kokubili.

ip rule show
ip route show table 100
ip route get 203.0.113.44 from 192.168.50.2
ss -ltnp '( sport = :443 )'

Bese wamukela ukuxhumana okusha kwangaphandle futhi, ngokwehlukile, isicelo okusafanele siphume nge-VPN. Uma eyesibili isiphuma ngqo manje, okuhlukile kubanzi kunenkinga obuyixazulula, futhi ukuhlolwa okubalulekile yilokho obungakuhlelanga ukukushintsha.

Ukuhlola ikheli lomphakathi esipheqululini kubika kuphela izicelo ezenziwe yileso siphequluli. Akusho lutho mayelana nezimpendulo zeseva yewebhu, mayelana nokukhethwa komthombo kolunye uhlelo lwangaphakathi, noma mayelana nokwenzeka kuthrafikhi yokuphatha ngemuva kokuxhumana kabusha kwe-VPN okulandelayo.

Nquma ukuthi okuhlukile kungaba mncane kangakanani

Imiklamo emibili iyavikeleka futhi kufanele ikhethwe ngamabomu. Uma umsingathi ukhona ukuze kushicilelwe le sevisi futhi ithrafikhi yakhe yokuphuma ingabalulekile, ikheli lendawo elikhethekile elinomgomo we-WAN kuphela liyisihlelo esinengqondo uma wamukela wonke umkhakha. Uma kufanele kufaneleke kuphela ukuxhumana okuthile okungena, ukukhethwa kwekheli kukhulu kakhulu futhi phambi kwako kufanele kube nomklamo oqaphela ukuxhumana.

Rekhoda isivumelwano osincike kuso: ukubalwa komphakathi, ikheli lomsingathi isicelo esilethwa kulo, kanye nomzila okulindeleke ukuthi impendulo iwuthatha. Isevisi engenayo eshicilelwe ngomhlinzeki we-VPN iyisivumelwano esihlukile kuneso eshicilelwe ngomzila wasekhaya, futhi okuhlukile okukopishwe kwisibonelo esisodwa kuvame ukungalungi kwesinye.

Gcina umgomo kungxenye ephethe umzila esikhundleni sokunamathisela umyalo kufayela lokuqalisa. Ukulandelana kwemithetho, ukuhlanza ngemuva koshintsho lwenethiwekhi kanye nokuphinda ngemuva kokuqalisa kabusha konke kufanele kuphile, futhi ifayela lokuqalisa elingahloliwe livame ukwehluleka ngomzuzu ongabheki. Qeda ngomphumela wokwamukela ongawuvikela: isayithi elilodwa elishicilelwe libuyisiwe futhi ukugeleza okukodwa okungahlobene akushintshanga.

Izihloko ezihlobene