I-VPN ihlala inqamuka? Landela lokhu ngokulandelana

Bhala phansi isikhathi, iphutha leklayenti kanye nesimo senethiweki ngaphambi kokushintsha noma yini. Isikhala phakathi kokunqamuka sikutshela ukuthi iyiphi ingqikithi kwezine okufanele uyihlole.

Ngaphambi kokufaka kabusha iklayenti, bhala izinto ezintathu: ukuthi ithumbu lahlala isikhathi esingakanani, ukuthi iklayenti lasho ukuthini ngesikhathi linqamuka, nokuthi umshini walala noma washintsha inethiweki phakathi kwalokho. Lolo nothi yiwona kuphela ubufakazi ozoba nabo kamuva, futhi ukufaka kabusha kuvame ukulususa. Ukunqamuka ngesikhathi esiphindayo kuyisibali ngesikhathi noma ukuphela kwesimo; ukunqamuka ngomzuzu ongahleliwe kuyinkinga yendlela. Ukulandelana okungezansi kukuvimbela ukushintsha izinto ezintathu ngesikhathi esisodwa futhi ungafundi lutho.

Isinyathelo sokuqala: bhala isikhathi kanye nombhalo wephutha

Qala ngengqophamlando yeklayenti uqobo hhayi idashbhodi yomhlinzeki. Kuklayenti le-Linux, ingqophamlando yesevisi kanye nesimo esiphilayo sethumbu kuhambisa ingxenye enkulu yalokho:

journalctl -u openvpn-client@client --since '3 hours ago' | tail -60
journalctl -u wg-quick@wg0 --since '3 hours ago' | tail -40
wg show
ip -s link show wg0

Bhala izimpawu zesikhathi zokuxhawulana kokugcina okuphumelelayo kanye nomzuzu lapho ithrafikhi yama khona, hhayi kuphela umzuzu lapho isithonjana sashintsha umbala. Iklayenti le-GUI elithi linqanyuliwe ngemuva kwesigameko kungenzeka libika isimo ikheneli eyafinyelela kuso imizuzwana ngaphambili.

Gcina amagama ephutha. Ukuphela kwesikhathi, ukunqatshwa kokuqinisekisa kanye nephutha le-adaptha noma idrayiva kukhombisa izingqikithi ezintathu ezihlukene, futhi iningi lomzamo olahlekile kule nkinga livela ekubatheni njengento eyodwa. Kopisha umugqa njengoba unjalo ekushicilelweni kwakho.

Isinyathelo sesibili: shintsha ukuguquguquka okukodwa, hhayi iphrofayili

Gcina idivayisi kanye nephrofayili kunjalo bese uhambisa umshini uye kwenye inethiweki yokufinyelela, njenge-hotspot yocingo. Lolu ukuhlolwa okushibhile kakhulu okuhlukanisa iklayenti nendlela. Yisebenzise isikhathi esanele ukumboza isikhathi sokuqala sokuhluleka; imizuzu emibili ezinzile akufakazi lutho mayelana nokunqamuka okwenzeka ngomzuzu wamashumi amathathu.

I-laptop enembobo ye-Ethernet ikunikeza ukuqhathanisa kwesibili okususa i-Wi-Fi ngokuphelele esithombeni. Uma ithumbu limile kuzo zombili izindlela, inethiweki yokuqala yokufinyelela ifanele ukunakwa: ukuzulazula phakathi kwezindawo zokufinyelela, i-router yasekhaya enetafula lokuhumusha eliphelelwa yisikhathi, noma isixhumanisi esiphezulu esisetha kabusha ukuhamba okude.

Bhala ukuthi yikuphi ukuguquguquka okushintshile. Ukuqhathanisa kubalwa kuphela uma konke okunye kusalokhu kunjalo, futhi lokho kuhlanganisa indawo yokugcina yeseva kanye nesikhathi sosuku.

Isinyathelo sesithathu: hlobanisa isikhathi nengqikithi

Ubude besikhathi somhlangano omuhle iyinombolo eyodwa enolwazi oluningi onayo. Yifunde ngokuqhathanisa nalolu hlu ngaphambi kokuthinta izibali zesikhathi:

  • Ukunqamuka ngemuva kokulala noma kokuvuka: isimo sethumbu sasinda ekumisweni kodwa isixhumi esibonakalayo asizange. Hlola ukuziphatha kweklayenti kokuxhuma kabusha lapho kuvuka kanye nokuthi isevisi iqala kabusha ithumbu noma ilinde ithrafikhi.
  • Ukunqamuka kuphela lapho kungenzi lutho: okuthile phakathi kwavumela ukuhamba ukuthi kuphele. Ama-keepalive akhona ngoba kulesi simo.
  • Ukunqamuka eminyakeni emisiwe yomhlangano: umcimbi wokuqinisekisa kabusha noma wokuvuselela ukhiye, hhayi ukuhluleka kwendlela. Ukunqatshwa okucacile engqophamlandweni ngaso leso sikhathi uphawu.
  • Ukunqamuka ngesikhathi sokudluliswa okukhulu noma amakhasi amakhulu: sabisa i-MTU nokuhlukaniswa, hhayi isibali sesikhathi sokungenzi lutho.

Esimweni sokungenzi lutho, izilungiselelo zincike kuphrothokholi futhi zombili iziphetho zibalulekile. keepalive 10 60 ye-OpenVPN kuseva ithumela i-ping njalo ngemizuzwana engu-10 futhi iqala kabusha isixhumanisi ngemuva kwemizuzwana engu-60 ngaphandle kwayo; amaklayenti e-WireGuard ngemuva kwe-NAT asebenzisa PersistentKeepalive = 25 kubhulokhi yozakwethu. OpenVPN iphinde ixoxisane kabusha ngesiteshi sedatha ngesibali sesikhathi, reneg-sec, esiyi-3600 imizuzwana ngokuzenzakalela ku-2.x.

Ungakopishi amanani anolaka kusuka kumhlahlandlela womunye umhlinzeki. Isikhathi esifushane esixhumanisini seselula esilahlekelayo sikhiqiza khona kanye lokho kunqamuka obekufanele kukuvimbe, futhi amanani acindezelwa yiseva adlula lokho okusetha kuphrofayili yeklayenti.

Isinyathelo sesine: qhathanisa enye indlela esekelwayo

Uma umqhubi eshicilela kokubili iphrofayili ye-UDP ne-TCP, sebenzisa idivayisi efanayo nenethiweki efanayo ngokumelene nomenye. Sebenzisa ifayela elihambisanayo langempela esikhundleni sokuhlela ukuthutha kuphrofayili ekopishiwe. Iphrofayili ye-TCP ezinzile endleleni lapho i-UDP isethwa kabusha khona inciphisa inkinga kuleyo ndlela; akufakazi ukuthi i-TCP iwukuthutha okungcono kuyo yonke indawo.

Umgqondo ofanayo usebenza kuziphetho. Zama enye iseva futhi gcina umphumela wangempela eceleni kwayo. Uma kuphuma eyodwa kuphela esetha kabusha amaseshini, lokho ubufakazi mayelana naleyo ndawo yokugcina, hhayi isizathu sokwakha kabusha i-adaptha ngayinye ku-laptop.

Ngemuva kwanoma yiluphi ushintsho, phinda isisusa sangempela bese uqinisekisa ukuthi ithrafikhi iya kuphi ngempela. Ukufinyelela kwi-inthanethi okubuyisiwe akusona umphumela ofanayo nethrafikhi engaphakathi kwethumbu, futhi iklayenti eliwele ngokuthula endleleni eqondile libonakala liphilile kusiphequluli.

Qinisekisa ukulungiswa, futhi gcina indlela yokuhlehla

Ukulungiswa kuqinisekiswa ngokuphinda kukhiqizwe isisusa sangempela, hhayi ngokuxhumana okuphumelelayo. Shiye ithumbu lingenzi lutho ngale kwesikhathi sokuhluleka sakudala, limise bese uqala kabusha kanye, bese uhlola ubudala bokuxhawulana kanye nekheli lokuphuma:

wg show wg0 latest-handshakes
curl -m 5 -sS https://ifconfig.me
cp client.ovpn client.ovpn.bak   # before editing timers

Gcina iphrofayili yangaphambilini kanye namanani ezibali zesikhathi angaphambilini kuze kube yilapho ukuziphatha okusha kudlula usuku oluphelele lokusebenza. Uma ukunqamuka kubuya, buyisela ikhophi yokulondoloza, bese uphinda usebenzise izinguquko ngayinye ngayinye ukuze umzamo wesibili uqale esimweni esaziwayo.

Uma ingqophamlando ihlala ihlanzekile futhi ithumbu lisanda kunqamuka ngesikhathi esiphindayo, isitobhi esilandelayo uhlangothi lweseva lwaleso seshini. Hamba nokuhlonza iseshini yeklayenti kanye nesikhathi esiqondile sokunqamuka, ngoba yilowo mbhangqwana owenza ingqophamlando yeseva itholakale. Izinketho zokuxhumanisa zephrothokholi zibhalwe ku-mhlahlandlela we-OpenVPN 2.6 lapho udinga incazelo eqondile yenani.

Izihloko ezihlobene