I-VPN inqanyuliwe, i-inthanethi isavalekile: iswishi noma umthetho wakudala?

I-tunnel iyavalwa, isiphequluli siyama, futhi yonke enye idivayisi ekuleyo Wi-Fi isasebenza, okukhipha i-router. Leli phatheni linabanikazi abathathu abangaba khona: i-kill switch eyayalelwe ukuvala, isimo esashiywa yiklayenti elasuswa, kanye ne-resolver noma umzila ongakaze ubuyiselwe. Kusuka ewindini lesiphequluli zibukeka zifana futhi zidinga ukulungiswa okuhlukile. Nquma ukuthi iyiphi onayo ngaphambi kokusebenzisa ukusetha kabusha kwenethiwekhi.

Ama-inthanethi amabili avaliwe ahluke kakhulu

Ukuvalwa ngamabomu kuyisici: uma kungekho tunnel esebenzayo, iklayenti ilahla ithrafikhi ukuze kungabikho lutho oluphuma ngaphandle komzila ovikelwe. Ukuvalwa ngengozi kuwumthetho osele, isethingi yedivayisi noma ye-resolver eyasinda ekuphumeni kweklayenti. Okunye kulungiswa ngokuxhuma noma ngokuvala inqubomgomo ngamabomu, okunye ngokuhlanza okusele.

Umehluko ubonakala ephutheni, hhayi esipheqululini. Ukuvalwa ngamabomu ngokuvamile kukhiqiza ukwenqatshwa ngokushesha noma ukulengela buthule, kanti i-resolver eseleyo ikhiqiza ukwehluleka kokuxazululwa kwamagama okuqhubeka ngisho noma i-ping eya ekhelini elingokoqobo isebenza. Akukho kokubili okufana nokuxhumana kwe-Wi-Fi okugqekile, okungathinta nezinye izinto. Hlela izihlolo ngokwalowo mehluko: ikheli elingokoqobo kuqala, bese kuba igama.

Iklayenti yathembisa ini lapho inqanyulwa

Funda izilungiselelo zeklayenti uqobo ukuze uqonde incazelo yokunqanyulwa, ngoba imikhiqizo eminingi yehlukanisa ukumiswa kwesikhashana nokuma okuphelele. Ukumiswa kwesikhashana kugcina ukuvalwa endaweni yakho ngokwakhiwa, kanti ukuma kungakususa. Ezinye izinkundla zeselula ziveza umqondo ofanayo njengomthetho ohlala uvuliwe ovala ithrafikhi noma nini lapho kungekho VPN exhunyiwe.

Lapho inhlangano idinga ukuvikelwa, ukulungiswa iwukuxhuma kabusha iphrofayela efanele hhayi ukweqa ukuvalwa. Hlola ukuthi igama leseva lisaxazululwa nokuthi ingcopho yokugcina ingafinyelelwa ngezihluzo ezibhalwe ukuthunyelwa, ngoba ukuxhuma kabusha okwehlulekile kubukeka njengokuvalwa okuqhubekayo.

Isimo sakudala esivela ekususweni okuphazamisekile

Ukususwa kokufakwa okuphazamisekile, noma iphakethe elisuswe ngenkathi i-tunnel isebenza, kungashiya ngemuva uchungechunge lwe-firewall, umthetho womzila, okufakiwe kwe-resolver noma i-adaptha ebonakalayo. Inqubo ihambile kanti imiphumela ayihambanga.

Qala ngendlela yokuhlanza nokulungisa esekelwayo uhlelo lokusebenza, bese ngaphambi kokususa, khomba ukuthi iyiphi ingxenye eyafaka yonke into eseleyo. Ukuvala i-firewall yomsingathi kubuyisela ukuphequlula futhi kususe ukuvikelwa okungahlobene ngesikhathi esifanayo. Ukusetha kabusha kwenethiwekhi yonke kubi kakhulu, ngoba kulahla izilungiselelo zasehhovisi noma ze-Wi-Fi ezisebenzayo ngaphandle kokusho imbangela.

Uma kufakwe amaklayenti amabili, nquma ukuthi iyiphi ephethe inqubomgomo. Abanikazi ababili yindlela ukuvalwa okusinda ngayo ekususweni kwakho kokubili.

Qinisekisa isimo sokunqanyulwa, hhayi ukuphequlula kuphela

Ukuphequlula ukusebenza futhi kuwukuhlolwa kokwamukela okubuthakathaka. Qinisekisa ukuthi inqubomgomo edingekayo ayilimele futhi akukho okunye okwenziwe buthaka ngokuthula.

ip rule show
ip route show table all | grep -v '^default'
resolvectl status | head -n 20
sudo nft list ruleset | grep -A 6 'chain output'

Qhathanisa imithetho yomzila, i-resolver kanye nenqubomgomo ye-firewall nokuthi umshini ohlanzekile onqanyuliwe ubukeka kanjani. Bese uxhuma futhi unqamule ngokugeleza komsebenzi ojwayelekile futhi uphinde ukufunda, ukuze isimo esilindelekile sibhalwe phansi kunokuba sikhunjulwe.

Gcina leyo mbhangqwana yangaphambi-nangemuva kuthikithi. Umuntu olandelayo ozobona isiphequluli esivaliwe uzoyidinga kakhulu kunombono omunye mayelana nokuthi iyiphi iklayenti engcono.