Uhlu lwe-VPN: ukufinyelela okuhloswe, ukulungiselelwa okukhiqiziwe, amaseshini aphilayo
Igama lomhubhe liwukubona, hhayi irekhodi yesevisi. Hlanganisa umqashi, ukulungiselelwa okusetshenzisiwe kanye nobufakazi bokubalwa kwemali ngaphambi kokuhoxisa noma yini.
Lonke igama lomhubhe libukeka njengomugqa wohlu kuze kube yilapho ubuza ukuthi ngubani umnikazi. Igama likutshela ukuthi kukhona okuxhunyiwe manje; alikwazi ukukutshela ukuthi isevisi ingeyabani, yini abavunyelwe ukuyifinyelela, noma ukuthi ukulungiselelwa okukhiqize umhubhe yikho ogunyazile. Esikalini semikhumbi, leyo mibuzo emithathu iwuhlu, kanti umhubhe uwukubona kwakamuva nje kuphela.
Isevisi eyodwa, amarekhodi amathathu
Isevisi ehlosiwe yilokho umqashi anelungelo kukho: ubunikazi, iziqalo, izinsiza kanye nesimo somjikelezo wempilo. Ukulungiselelwa okusetshenzisiwe yinqubomgomo ekhiqiziwe okufanele ikufeze. Iseshini ebonwayo iwubufakazi besikhathi sokusebenza bokuthi kukhona okuxhumile. Ukuzithatha njengetafula elilodwa kucindezela izinhlobo ezintathu ezahlukene zeqiniso emugqeni owodwa ongafanele ngezindlela ezintathu ngesikhathi esisodwa.
| Record | Answers | Goes stale when |
|---|---|---|
| Intended service | Who may reach what | A contract changes and nobody edits the record |
| Deployed configuration | What the gateway was told | A device is edited by hand |
| Observed session | What is running now | Telemetry stops or a session ends |
Ukuhlolwa okungokoqobo umbuzo irekhodi ngalinye elingawuphendula lodwa. Buza ukuthi ngubani umnikazi walesi siqalo futhi irekhodi lesevisi ehlosiwe liyaphendula. Buza ukuthi isango linaniphi inqubomgomo futhi irekhodi elisetshenzisiwe liyaphendula. Buza ukuthi ukhona yini oyisebenzisile kuleli sonto futhi irekhodi leseshini liyaphendula. Ikholomu engakwazi ukuphendula umbuzo wayo yiyo okufanele ilungiswe kuqala.
Rekhoda umqashi, hhayi isixhumanisi
Nikeza isevisi ngayinye isihlonzi esihlala ngemuva kokuxhumana kabusha. Isixhumanisi somhubhe wesikhashana noma inombolo yeseshini kuyashintsha ngenxa yezizathu ezingenalo ukuxhumana neklayenti, futhi uhlu olusekelwe kokunye kwayo luthola umugqa omusha njalo lapho isixhumanisi sinyakaza. Lusekele kumqashi nasevisini esikhundleni salokho, bese unamathisela ukubona kulowo khi.
Irekhodi lidinga umqashi nomqhubi abaphethe, ubunikazi obamukelwe bukazakwethu noma bomsebenzisi, isikhombi eqinisweni lokungena hhayi ikhophi yalo, iziqalo ezivikelwe, umongo womzila, izinsiza ezivunyelwe kanye nesimo somjikelezo wempilo esihlosiwe. Izinto zeqiniso lokungena zingezesitoreji semfihlo esekelwayo; uhlu oluphethe okhiye bangasese selube yikhophi yesibili yendawo ezungezile, evikelwe kabi.
Ukulungiselelwa okukhiqiziwe kunomnini nenguqulo
Ukuzenzakalela kwenza lokhu kube lula futhi kukufihle kangcono. Umkhiqizi osebenza ngempumelelo ufakazela ukuthi isifanekiso senziwe, hhayi ukuthi idivayisi ngayinye iyahambisana nokuphumayo. Othile ekugcineni uzoshintsha isango ngesandla ngesikhathi sezehlo, futhi lolo shintsho yilona oluyigugu kakhulu okufanele lubhalwe phansi, ngoba yilona kuphela umgijimo wakamuva ongeke uwuphinde.
Rekhoda ukuthi yikuphi ukubuyekezwa okwakhiqize inqubomgomo esetshenzisiwe, futhi gcina izinguquko eziqondile njengomehluko okufanele uhlanganiswe esikhundleni sokuzibhala ngaphezulu buthule. Ukuhlanganisa kuwumkhiqizo lapha: impumelelo yomkhiqizi kanye nesimo sangempela sedivayisi kungamaqiniso amabili okufanele aqhathaniswe, hhayi kucatshangwe ukuthi ayalingana.
Amaseshini awubufakazi, hhayi imvume
Lapho ukusetshenziswa kusebenzisa ukubalwa kwe-RADIUS, i-RFC 2866 inikeza izinkambu eziphathekayo zokusebenza. Acct-Status-Type ihlukanisa ukuqala nokuma, futhi amarekhodi eseshini eyodwa abelana nge-Acct-Session-Id. Lezo zinkambu zikuvumela ukuthi wakhe kabusha ukuthi iseshini yaqala nini yaphela nini ngaphandle kokwethemba isifinyezo sedashibhodi.
Isihlonzi sokubalwa siwubufakazi besikhathi sokusebenza. Asichazi ukuthi yimuphi umqashi ophethe isubneti, futhi asinikezi ukufinyelela kunoma yini. Sihlobanise nesango kanye nobunikazi besevisi, bese ugcina isikhathi sokuqoqa eduze kokubona. Umbiko ongekho kungase kube ukwehluleka kwe-telemetry hhayi ukuntuleka kokusetshenziswa, futhi irekhodi elidala aliwona ubufakazi bokuthi ukufinyelela kusasebenza manje.
Ukuhoxiswa kusebenzisa ukuhlanganisa okufanayo
Ukwesusa isevisi kusho ukususa ukufinyelela okuhloswe, izinto zeqiniso lokungena kanye namaseshini aphilayo, ngalolo hlelo, ngabanikazi bakho ngakunye. Bese uqinisekisa ukuthi ukulungiselelwa okuphelelwe yisikhathi akusekho kumadivayisi nokuthi izindlela zako ezivunyelwe azisaxazululwa. Iklayenti elihambile ngekota edlule akufanele lisahlala ohlwini lweziqalo ngoba igama lomhubhe lisusiwe kodwa umzila awususiwe.
Akukho kulokhu okudinga idivayisi eyodwa ngomsebenzi ngamunye noma umkhiqizo othile wokuzenzakalela. Isidingo sokusebenza sincane futhi sinzima: iklayenti, ukufinyelela elikuhlosile, inqubomgomo esetshenzisiwe kanye nobufakazi besikhathi sokusebenza samanje kufanele kuhlanganiswe ngaphandle kokuncika enkumbulweni yothile ngegama lomhubhe. Qala ngokwakha amarekhodi amathathu, bese ukhetha amathuluzi awanakekelayo.