Ukuvuselelwa kwesango le-VPN kuyahluleka: funda isigaba ngaphambi kokuvula indlela yokuphuma
Ukuvuselelwa okuhlulekileyo kusho isigaba, hhayi imbobo engekho. Hlanganisa umyalezo nomnikazi wawo, funda indlela ye-proxy, bese unquma ngenhloso inqubomgomo yokunakekela.
Ukwala ukufaka izibuyekezo zokuphepha kusele iviki elilodwa elibi ukuba ube inkinga yomunye umuntu, futhi isango elamukela amaklayenti yindawo elula kakhulu yokuthuthukisa lowo mkhuba. Isizathu esivamile akusiyo indlela engekho kodwa isinqumo esingekho: akekho otshele ukuthi ingaba umgcini ngokwakhe kufanele afinyelele isitoreji kanjani lapho ukudluliswa kwamaklayenti kunqunyelwe ngamabomu. Leso sinqumo kufanele sithathwe ngokusobala, futhi kufanele sibe mncane kunokucisha inqubomgomo yokuphuma intambama eyodwa.
Izigaba ezine, abanikazi abane abahlukene
Ukwehluleka kokuvuselela kuyisigaba esishiwo, noma umyalezo usho kanjalo noma cha, futhi isigaba ngasinye singesomunye umnikazi. Igama elingaxazululeki iwumbuzo kumxazululi. Ukuxhumana okuphelelwa isikhathi iwumbuzo kwezokuthutha, i-proxy noma ekugcineni okukude. Iphutha lobunikazi be-TLS iwumbuzo lokuthembana, futhi imethadatha yesitoreji enqatshiwe iwumbuzo lwesiginesha. Izigaba ezine, abanikazi abane, futhi umthetho wembobo uphendula eyodwa yazo kuphela.
| The failure text mentions | Which component owns it | What you check first | What you must not change |
|---|---|---|---|
| a name that will not resolve | the resolver policy for this host | which resolver is used, and whether its path is permitted | nothing in the firewall: no repository packet has left yet |
| a connection that times out | routing, proxy or the far end | the destination, port and proxy the manager actually attempts | the egress policy, before you know that destination |
| a TLS identity mismatch | trust configuration and the server's identity | the chain the manager is presented with | verification settings, which only hide the mismatch |
| rejected archive metadata | the repository's signing metadata | whether the source carries valid, trusted metadata | the signature check, which is not a routing question |
I-Ping nokuxazululwa kwamagama yizivivinyo ezimbili abantu abazisebenzisa kuqala, futhi zombili ziphendula imibuzo engabuzwanga muntu. Impendulo ye-echo isebenzisa iphrothokholi ehlukile kunokuxhumana nesitoreji, futhi ukusesha okuphumelelayo kuyama ekuxazululweni kwamagama ngaphandle kokuhlola ukulanda. Zombili zingaphumelela ngenkathi umsebenzi wangempela uhluleka, futhi zombili zingahluleka ngenxa yezizathu ezingahlobene nendlela.
Funda indlela umphathi ayithathayo ngempela
Hlola ama-URI omsuka alungisiwe kanye nokuhlelwa kwe-proxy kwangempela esikhundleni sokucabangela okukodwa kwakho. Umthetho obhalelwe i-HTTP elula awulona ukulungisa lapho isitoreji sikhuluma i-HTTPS, futhi inhlangano edinga i-proxy isivele yakhetha indlela. Abaphathi bamaphakethe bahlonipha izinto eziguquguqukayo zemvelo kanye nokumiswa kwabo, futhi izilungiselelo eziqondene nomgcini zingadlula okujwayelekile. Lokho okwenziwa yisiphequluli esisebenzisanayo akudingeki kube yikho okwenziwa umphathi.
apt-get update -o Debug::Acquire::http=true
apt-config dump | grep -i proxy
env | grep -i proxyImibhalo yezokuthutha ye-APT ichaza ukuthi iziphi izilungiselelo ezisebenza kuphi uhlelo lwe-URI nokuthi izinqumo eziqondene nomgcini zibhalwa kanjani. Gcina okukhishwe imiyalo netikithi, ngoba kuhlukanisa inkinga ye-proxy nendlela engekho ngokushesha kunanoma iyiphi inani lemiphumela ye-ping. Bhala indawo okuyiwa kuyo, imbobo kanye nephrothokholi eqondile umphathi azama ngayo, futhi vumela ushintsho lwensimbi yomlilo luncike kuleyo rekhodi hhayi ekhelini lesibuko elicatshangelwe eliguga ezinyangeni.
Khetha inqubomgomo yokunakekela, hhayi okuhlukile
Izinqubomgomo ezintathu ziyavikeleka: ukunakekela ngomhubhe, ukunakekela nge-proxy yokuvuselela elawulwayo, noma ukunakekela ngendlela eqondile egunyazwe kancane. Ngayinye isho ukuhlelwa komxazululi okuhambisana nayo. Okungavikeleki ukuhlukile okuba ngokuthula indlela yokugcina engenamkhawulo njalo lapho umhubhe uwela.
Bhala inqubomgomo ekhethiwe kanye nomnikazi, ngoba umsebenzi olandelayo uzothola umthetho hhayi isizathu esingemuva kwawo. Sebenzisa imvume ngensimbi yomlilo ekhona kanye nomnikazi wenethiwekhi esikhundleni sokukhipha imithetho noma ukwengeza umphathi wesibili wenqubomgomo kumgcini oyedwa. Hlanganisa imindeni yamakheli kanye nezindawo zokuphela zensiza ezisetshenziswa umsuka wangempela, futhi buyekeza uhlu lapho isitoreji sithutha.
Qinisekisa ngaphandle kokunciphisa ukwethembana
Ukuthutha okuphumelelayo akusona imvume yokukhulula ukuqinisekisa: ukuqinisekiswa kwesitoreji kanye nobunikazi besiphakamisi se-TLS kuyizivivinyo ezimbili ezihlukene, futhi ukucisha noma yikuphi kuzo kwenza iphutha linyamalale ngenkathi kushintsha lokho umgcini azokwamukela. I-proxy ephazamisayo iyisinqumo sokwethembana somnikazi wenethiwekhi hhayi isizathu sokucisha ukuqinisekisa endaweni, futhi imininingwane yokungena yesitoreji akufanele ibe kuzokuxilonga okwabiwe, ngoba ilogi enemininingwane iyindawo elula kakhulu yokuvuza yona.
Yamukela ushintsho ngokulandwa kwemethadatha okulawulwayo okulandelwa umsebenzi wamaphakethe owodwa ogunyaziwe, bese uhlola okwenzekayo lapho umhubhe uwela. Indlela yokunakekela ekhula ngokuthula ngesikhathi sokuphazamiseka imbi kunaleyo ehlulekayo ivaliwe, futhi umphumela kufanele ube yindlela yokuvuselela enomnikazi oshiwo kanye nobubanzi obulinganiselwe.