Ingabe i-laptop ye-VPN idinga ukudluliswa kwe-IP ukuze isheshe?
Ukudluliswa kudlulisa amaphakethe phakathi kwezixhumanisi; akusheshisi isiphequluli sasekhaya. Hlukanisa indima yeklayenti endimeni yesango ngaphambi kokwandisa umthetho.
Ukwenza i-laptop ibe i-router kuyindlela edumile yokuxazulula inkinga engalungile. Ukudluliswa kukhona ukuze umshini ukwazi ukudlulisa amaphakethe okungeyona indawo yawo ewukuphela, futhi awunambono ngokuthi isiphequluli kulo lowo mshini silayisha ikhasi ngokushesha okungakanani. Lezi zindlela ezimbili zibukeka zifana kuphela ngoba zombili zithumela ithrafikhi ngomhubhe owodwa. Hlukanisa kanye, futhi iningi lezeluleko mayelana nokuvula ukudluliswa noma ukuvula i-firewall lizoveza ukuthi lichaza i-topology ongenayo.
Izindlela ezimbili zamaphakethe ezibukeka zifana kusukela etafuleni
Isiphequluli esikulaptop sidala isicelo saso. Umakinga ukhetha umzila womhubhe, inqubo yeklayenti isonga iphakethe bese ilithumela kumlingani, futhi impendulo ibuyela kuhlelo. Akukho lutho kulolo chungechunge oludlula esinqumweni sokudlulisa, ngoba lo mshini uyimvelaphi nendawo okufika kuyo yengxoxo.
Manje beka elinye idivaysi kusegimenti ye-Ethernet ehlelwe ngamabomu futhi wenze i-laptop ibe isango layo elizenzakalelayo. Leyo divaysi iqala isicelo, i-laptop ithola iphakethe elikhethelwe kwenye indawo, futhi i-kernel kufanele inqume ukuthi iyalidlulisa yini. Leyo yindima yokudluliswa, futhi iza nezimfuneko i-laptop yeklayenti engakaze izidinge: umzila wokudlula ovunyelwe, imizila yezinhlangothi zombili kanye nomzila wokubuya osasebenza uma ukuhumusha kuyingxenye yedizayini.
| Role | Who originates the traffic | What has to be true |
|---|---|---|
| Client only | The laptop itself | Tunnel route, working resolver, supported profile |
| Gateway | Another device | Forwarding enabled, permitted transit, routes both ways, return-path decision |
Yini ip_forward ekushintshayo ngempela
Imibhalo ye-kernel mayelana ne-IPv4 sysctl ichaza ip_forward njengeswishi evumela umakinga ukudlulisa amaphakethe phakathi kwezixhumanisi. Akuwona umzila osheshayo wethrafikhi umakinga aye wayenza ngokwakhe, futhi akukho ukufunda kwaleyo parametha okwenza isiphequluli sasekhaya sisheshe. Uma kukhona, ukudluliswa kwengeza isimo nenqubomgomo kumshini owawusebenza kancane ngaphambili.
Imibhalo efanayo ixwayisa ukuthi ukushintsha inani kubuyisela amanye amapharametha e-IPv4 kumadefault awo omakinga noma e-router. Lokho kwenza iswishi ibe umcimbi wokuhlela hhayi ukuhlola: izilungiselelo ezilungisiwe zingabuya ngaphansi kwezinyawo zakho, futhi ushintsho lungaba yimbangela yokuhlehla okungeke kucatshangwe ukukuhlobanisa nakho. Kusho futhi ukuthi iswishi kufanele isethwe kanye, ngamabomu, yilowo onendima yesango. Ukuyiphendula ngenkathi kuphenywa ukubambezeleka yisimo kuphela lapho umphumela ohlangothini uhlanganiswa khona ngesiqiniseko nophawu.
Imibuzo emithathu ye-firewall engeyona umbuzo owodwa
Ukuvumela isilaleli se-VPN, ukuvumela izinsizakalo eziqhutshwa i-laptop, nokuvumela ithrafikhi ukuba idlule kulaptop yizimvume ezintathu ezihlukene. Eyokuqala ivumela umlingani ukufinyelela i-daemon, eyesibili ichaya okuthile kwasendaweni, futhi eyesithathu yenza umshini ube yindawo yokudlula yomunye umuntu. Ngakunye kunobubanzi obuhlukile, futhi okokugcina kubanzi kakhulu kunezimpendulo ezidingwa uhlelo oluphumayo olujwayelekile.
Lapho ukugeleza okuthile kuvinjiwe, shono umthombo wako, indawo ekuyiwa kuyo, indlela kanye nomnikazi wenqubomgomo ngaphambi kokuhlela umthetho. Umthetho omncane walokho kugeleza uyisilungiso; ukwamukela konke kusixhumanisi somhubhe wushintsho lwenqubomgomo oluhlanganisa isilungiso ngengozi. Isiphequluli esisebenza ngemuva kwalokho sibonisa ukuthi ukugeleza kuyasebenza, hhayi ukuthi umthetho obanzi wawudingeka.
Kala kuphela lapho umzila ulungile
Kala ngendawo efanayo ekuyiwa kuyo, umthwalo womsebenzi ofanayo nezimo eziqhathanisekayo, futhi shintsha uguquko olulodwa ngesikhathi. Ukuhlola okuhlanganisa ushintsho lokudlulisa, ukwandiswa kwe-firewall kanye nesilungiselelo se-cipher esikopishiwe kunikeza inombolo futhi akukho ncazelo, ngoba akukho lutho phakathi kwayo olusho ukuthi yikuphi kokuthathu okuhambise umphumela.
Gcina ukwehluleka komzila nesixazululi ngokuphelele ngaphandle kwengxoxo yokusebenza. Igama elixazululwa kancane akuyona inkinga yokudlulisa, futhi ukudluliselwa okuma ngosayizi othile ogxilile ngokuvamile umbuzo we-MTU hhayi umkhawulo wejubane. Bhala ukuthi yikuphi kokuthathu okubonile ngempela ngaphambi kokuqhathanisa noma yiziphi izinombolo. Uma kungenjalo umfundi olandelayo uzothola isilinganiso esilinganisa into engalungile kanye noshintsho ongenakho ukuthi lusekelwe.
Chaza i-topology onayo, hhayi ilebula ekulayentini
I-laptop eyabelana ngoxhumano lwayo, ephethe inethiwekhi yamakhontheyna ehlosiwe noma ethwala ithrafikhi yomshini onguzenzakalo iyisango, noma ngabe isoftware izibiza ngani. Igama elithi iklayenti lichaza ukuthi umhubhe uhlelwe kanjani, hhayi ukuthi amaphakethe adluliselwa komunye yini.
Yenza indima icace encwadini yokusebenza: yini edala ithrafikhi, yini kufanele idlule emshinini, futhi yikuphi kwalokhu okubili umsebenzi wamanje okhuluma ngakho. Vula indima yesango lapho ingeyohlelo olusekelwe, hhayi njengokulungiswa kwejubane okungachazwanga okusetshenziswa ku-topology engakaze ikudinga.