Igama lendlela yokugcina ye-VPN nelegama lensiza eyimfihlo: abanikazi ababili

Indlela yokugcina ye-VPN yomphakathi negama lensiza eyimfihlo kushintsha ngezizathu ezahlukene. Nika ngamunye umnikazi wakhe wokubuyekeza, indlela yesixazululi kanye nokuhlolwa kokufinyeleleka.

Amagama amabili angachaza igatsha elilodwa futhi aphendule imibuzo ehluke ngokuphelele. vpn.branch.example utshela umlingani okude ukuthi itholakala kuphi indlela yokugcina ye-VPN, futhi kumele ixazululwe ngaphambi kokuba kube khona noma yimuphi umhubhe. inventory.branch.example utshela umsebenzisi ogunyaziwe ukuthi uhlezi kuphi uhlelo lokusebenza oluyimfihlo, futhi kubalulekile kuphela uma umhubhe usukhulisiwe. Ukunakekela omunye akwenzi lutho komunye.

Qamba kokubili amarekhodi ngaphambi kokulungisa noma yimuphi kubo

Bhala kokubili kanye nabanikazi bako. Endleleni yokugcina, bhala ukuthi ubani ubuyekeza ikheli lomphakathi nokuthi iklayenti le-VPN livuselela kanjani impendulo yalo. Ensizeni, bhala ukuthi ubani ungumnikazi wekheli eliyimfihlo, iyiphi indawo egcina irekhodi nokuthi yiziphi izixazululi okufanele ziphendule ngayo.

Lolo hlu olufushane luvimbela ukuxilongwa okungalungile okuvame kakhulu kule ndawo: ukuqalisa kabusha umhubhe wegatsha osebenzayo ukuze kulungiswe irekhodi elihlala ngokuphelele ngaphakathi kwawo. Umhubhe uwukuthutha kwegama lensiza; awusona isiphathimandla salo.

Uma kuhlongozwa ushintsho, buza ukuthi luthinta muphi kumarekhodi amabili. Uma kungabanga khona ophendulayo, ushintsho alukakalungi ukuhlelwa.

Indlela yokugcina kumele ixazululwe ngaphambi kokuba kube khona noma yimuphi umhubhe

Ake sithi uxhumano lwe-inthanethi lwegatsha luthola ikheli elisha lomphakathi. Isibuyekezi sendlela yokugcina sishicilela ikheli elisha, futhi ukuqaliswa kwe-VPN okude kumele kukwazi ukufunda impendulo eshintshile. Noma yisiphi isixazululi esinikeza leyo mpendulo kumele sifinyeleleke ngaphandle komhubhe, ngaphandle kwalokho iklayenti lijaha igama elingalixazulula kuphela ngemva kokuxhuma entweni engayitholi.

Lokho kuncika kwasekuqaleni kufanele kushiwo ngokucacile, ngoba kulula ukukwakha ngengozi uma zonke izixazululi zangaphakathi zingemuva kwe-VPN. Gcina indlela engaphambi komhubhe yokusesha indlela yokugcina, futhi uqinisekise indlela yeklayenti yokuxhuma kabusha esikhundleni sokucabanga ukuthi impendulo entsha ithathwa ngokushesha.

I-DNS eguquguqukayo nayo inemingcele okungeke kuyidlule ukubuyekezwa kwerekhodi. Ukubuyekeza irekhodi akulivuli iphothi lika-firewall, akukhiqizi imephu ye-NAT futhi akufakazi ubunikazi bomlingani. Ikheli elishicilelwe elinephothi elivaliwe linika iklayenti elixazulula kahle futhi lingakwazi ukuxhuma nanoma yini.

Ekugcineni, iklayenti elisebenzayo lingaqhubeka lisebenzisa indlela yokugcina egciniwe kuze kuxhume kabusha. Hlukanisa ukushicilela, ingobo yomlando kanye nenqubomgomo yokuxhuma kabusha emibhalweni yakho, ukuze umlingani osemva kwesikhathi angabhekwa njengesibuyekezi esiphukile.

Igama lensiza lichaza ukuthi uhlezi kuphi uhlelo lokusebenza

Manje ake sithi umhubhe uhlala unempilo kodwa iseva yempahla isuka ku-172.26.14.20 iye ku-172.26.14.35. Irekhodi lendlela yokugcina yomphakathi alithinteki, kuyilapho irekhodi lensiza eyimfihlo kumele lishintshe. Ukusebenzisa ikheli eligcinelwe leyo nsiza, noma ukwabiwa okungaguquki, kwenza lokhu kube yivelakancane; indlela yokubuyekeza egunyaziwe isingatha izikhathi lapho lokho kuhlosiwe.

Lapha kuhlanganiswa izindlela ezimbili zokubuyekeza. RFC 2136 ichaza iphrothokholi yokwengeza nokususa amarekhodi e-DNS endaweni, kuyilapho umhlinzeki we-DNS eguquguqukayo wezentengiselwano engase aveze i-HTTP API ehluke ngokuphelele ngenye injongo. Ukusebenzisa okukodwa akusho ukuthi okunye kukhona endaweni yakho. Hlola ukuthi iyiphi indlela indawo yakho eyamukela ngempela ngaphambi kokubhala isibuyekezi ngokumelene nayo.

Impendulo eyimfihlo elungile iyisimo sokuqala kuphela. Ukuze umfoni okude ayisebenzise, iklayenti lidinga isixazululi esithwala indawo eyimfihlo, inqubomgomo evumela imibuzo kuleso sixazululi, nokudluliselwa kwekheli elibuyayo. Igama elixazulula ekhelini iklayenti elingakwazi ukufinyelela kulo likhiqiza isikhathi sokuphela esibonakala njengokwehluleka kweseva.

Hlola izindlela ezimbili ngokwehlukana

Hlola indlela yokugcina ngaphandle komhubhe nensiza ngaphakathi kuwo, futhi gcina imiphumela njengamaqiniso amabili azimele:

$ dig +short vpn.branch.example @1.1.1.1
$ dig +short inventory.branch.example @172.26.0.53
$ ip route get 172.26.14.35

Uma umbuzo wokuqala uhluleka, inkinga isekushicilelweni komphakathi noma endleleni yokuxazulula engaphambi komhubhe, futhi akukho shintsho lwangaphakathi oluzosiza. Uma owesibili ubuyisela ikheli kodwa owesithathu ungabonisi mzila odlula emhubheni, isendlalelo se-DNS silungile futhi inqubomgomo yokudlulisela ayilungile.

Gijimisa laba ababili ngemva kwakho konke ukushintsha kwekheli, futhi bhala ukuthi iliphi irekhodi elihambile. Ukudlulisela okusho kuphela ukuthi «i-DNS ibuyekezelwe» kushiya unjiniyela olandelayo eqagela ukuthi imiphi kule mijikelezo emibili yokuphila eyasebenza ngempela.

Izihloko ezihlobene