I-VPN ifile ngemuva kokulala: umhubhe ulahlekile noma uhlelo lwakudala?

Isivalo siyavuleka, isithonjana esingenantambo siyabuya, futhi i-VPN isabonakala ixhunyiwe. Khona-ke ikhasi lokuqala langaphakathi liyajinga kuze kuphele isikhathi, nethabhu elisha lenza okufanayo. Izinto ezintathu ezihlukene zingadala leso sithombe futhi zidinga izilungiso ezintathu ezihlukene: umhubhe ongazange usinde ekulaleni, iphrofayili okungekho muntu oyicelile ukuthi iphinde isebenze, noma uhlelo olusabambe isikhathi esafa emahoreni ambalwa adlule. Ukuziqhathanisa kushesha kunokufaka kabusha noma yini.

Izinto ezintathu zingonakala ngemuva kokuvuka

Ikhandidethi yokuqala umhubhe uqobo. Isixhumi singase sibe khona nekheli ngenkathi ukuxhumana nozakwethu sekunyamalele, yingakho isibani sesikhombisi singesona ubufakazi bendlela esebenzayo. Ukuxhawana kwezandla okudala kunokulala yisona sibonakaliso, futhi kudingeka umyalo owodwa ukuze kubonakale.

Okwesibili ukusebenzisa. Amaklayenti amaningi azixhuma wona kabusha; amanye awakwenzi, futhi iphrofayili okungekho muntu oyicelayo ukuthi ibuye ihlala lapho ibukeka ihleliwe. Lokho kwehluleka kuthule ngokwakhiwa, ngoba akukho okunikeze iphutha.

Okwesithathu uhlelo. Ithabhu yesiphequluli, isikhathi se-SSH noma ukuxhumana nedathabheki kungasinda ekushintsheni kwenethiwekhi njengesichazi sefayela ngenkathi ukuthutha okungaphansi kukho kufile. Khona-ke isikhathi esisha sisebenza kahle kakhulu, okukutshela ukuthi umhubhe wawulungile sonke isikhathi.

Qhathanisa zontathu ngaphambi kokushintsha noma yini, ngoba izilungiso azihlangani. Ukuqalisa kabusha iklayenti elingakaze licelwe ukuqala futhi kuchitha ubufakazi obukudinga. Bhala ukuthi yikuphi ikhandidethi esihambisana naso isibonakaliso ngaphambi kokuthinta ukuhlelwa. Lowo musho owodwa uvamise ukunquma okusele kophenyo.

Okokuqala: ngabe umhubhe ubuyile?

Bheka isixhumi nesimo sozakwethu esikhundleni sombhalo wesimo weklayenti uqobo. Isixhumi esinekheli kodwa esingenakho ukuxhawana kwezandla kwakamuva umhubhe okhona ngegama kuphela.

ip -brief addr show
wg show
ip route show table all | head -20

Uma isixhumi singekho nhlobo, umhubhe awuzange usinde futhi umbuzo uba ngukuthi ngubani obekufanele uwubuyise. Uma sikhona kodwa ukuxhawana kwezandla kudala, ukuxhumana nozakwethu kudinga ukusungulwa kabusha, futhi iklayenti lingase lilinde ukuthutha okuzokuwenza kusebenze.

Hlola nemizila nokuhlelwa kwe-DNS. Umhubhe ungabuya ngaphandle kwemizila yawo, lokho okudala isimo esididayo lapho isixhumi sisebenza khona kodwa amagama angaphakathi asaxazululwa ngesiphakeli esingalungile.

Okwesibili: ngabe kukhona okucelile ukuthi ubuya?

Yilapho ukuqhathanisa kuzuzisa khona. I-NetworkManager isebenza ngephrofayili yesengezo se-OpenVPN nokuxhumana komdabu kwe-WireGuard ngendlela ehlukile, futhi incwadi yezilungiselelo zokuxhumana isho ngokucacile ukuthi connection.autoconnect akusebenzisi amaphrofayili e-VPN; indlela yokuphakamisa i-VPN nokuxhumana connection.secondaries.

nmcli connection show --active
nmcli -f connection.autoconnect,connection.secondaries connection show "Work VPN"
journalctl -u NetworkManager -b --no-pager | tail -40

Uma ukuxhuma kabusha ngesandla kulungisa inkinga ngaso sonke isikhathi, lokho kubonakaliswa kokuntuleka kokusebenzisa hhayi komhubhe ophukile. Ilogi ivamise ukukhombisa isixhumi sehla futhi akukho okusibuyisayo.

Phikisana nesifiso sokwengeza ihuku lokulala ngokushesha. Ihuku elisebenza ngaphambi kokuthi inethiwekhi ilulame lincintisana naleyo nqubo elizama ukuyisiza, futhi liguqula inkinga ephindelekayo ibe yinkinga yezikhathi ezithile.

Okwesithathu: ngabe uhlelo lubambe isimo esidala?

Vula isikhathi esisha ngokuphelele siya endaweni efanayo ngaphambi kokuthinta i-VPN. Uma isikhathi esisha sisebenza futhi esidala singasebenzi, umhubhe ulungile futhi uhlelo lubambe ukuxhumana okufile.

Lokhu kushibhile kakhulu kwezivivinyo ezintathu futhi yikho okweqiwa kakhulu, ngoba iwindi elihlulekayo likhona khona esikrinini. Vala, vula futhi, bese uphawula ukuthi inkinga iyasala yini. Uma isikhathi esisha sisebenza, misa ngokuphelele uphenyo lomhubhe. Uma nakho kwehluleka, uhlelo luyisibonakaliso hhayi imbangela.

Amanye amahlelo azilulama ngokwawo ngemuva kokuphela kwesikhathi, yingakho isibonakaliso singabonakala sizilungisa ngokwaso ngemuva kwemizuzu embalwa. Lowo mkhuba ukhomba uhlelo hhayi umhubhe, futhi kufanelekile ukukuqopha ngokwehlukana. Uzakwethu othi kuzilungise ngokwako uveza leli phethini, hhayi inhlanhla.

Yenza ukuqhathanisa kuphindeleke

Gcina okuguquguqukayo kukuncane: inethiwekhi yokungena eyodwa, ubude bokulala obubodwa kanye nesicelo sokuqala esifanayo njalo. Bese uqopha imiphumela emibili: ukuthi ukuxhuma kabusha ngesandla kuyakulungisa yini, nokuthi okunye ukulala kubuyisa ukwehluleka yini.

Ukwelulekwa kokugcina yikho okuhlukanisa amakhandidethi amathathu ngendlela ethembekile kakhulu. Isikhathi esisha esisebenzayo ngemuva kwesidala esihlulekile akusona inkinga yomhubhe, futhi ukufaka kabusha iklayenti ngeke kukushintshe lokho.

I-keepalive ehlala njalo ye-WireGuard ingena kulesi sithombe kuphela njenge-keepalive yemephu ye-NAT. Ithumela amaphakethe ukuze imephu ihlale ivuliwe; ayivimbeli umshini ukuthi ulale futhi ayikwazi ukuqhubeka nokuthumela ngenkathi inqubo imisiwe.

Bhala ethikithini lokho okutholile: yikuphi kwezintathu obekonakele, yini ekulungisile nokuthi ukubuyisele kanjani. Umuntu olandelayo ovula isivalo ngoMsombuluko uzobonga kuwe, futhi impendulo ngeke idinge ukutholwa kabusha kusukela ekuqaleni.