I-VPN isihambile: kungani iklayenti lakho le-OpenVPN lisashaya i-IP endala

Umhlinzeki washintsha ikheli lakho lomphakathi, wabuyekeza irekhodi le-DNS elishintshayo, futhi iklayenti alikwazi ukuxhumana. Ngaphandle kubonakala sengathi irekhodi alizange lisakazeke. Isikhathi esiningi irekhodi lilungile futhi iklayenti lishaya ikheli elalixazulule ngaphambi kokufuduka, ngoba umhubhe ogijimayo nephrofayili egciniwe zombili zinomqondo wazo wokuthi iseva ihlala kuphi. Izendlalelo ezintathu kufanele zivumelane, futhi zibuyekezwa ngezikhathi ezihlukene.

Bheka lokho iphrofayili ekushayayo, hhayi lokho okushiwo i-DNS

Vula uxhumano olusebenzayo ngempela futhi ufunde umugqa we-remote. Ikheli lezinombolo lapho alilokothi lilandele ukubuyekezwa kwegama lomsingathi, kungakhathaliseki ukuthi irekhodi lilungile kangakanani.

Bese uhlola ukuthi iphrofayili oyihlangule iyona yini elayishwa yiklayenti. Amaphrofayili angenisiwe ajwayelekile: umphathi kungenzeka athatha ikhophi ezinyangeni ezedlule futhi agcine inguqulo yakhe, ngakho ifayela elikusixhumanisi sakho sokulanda kanye nokufakwa kuhlelo lokusebenza kungahluka. Qhathanisa iphoyinti lokugcina emininingwaneni yoxhumano yeklayenti ngokwalo ngaphambi kokuxazulula i-DNS.

Amafayela amabili, iphoyinti elilodwa lokugcina — lokhu yilokho okujwayelekile ukutholakala lapha.

grep -nE '^remote|^resolv-retry|^persist-remote-ip|^float' client.ovpn
printf 'resolver says: '; dig +short vpn.example.net

Funda umzamo wokuxhumana olandelayo weklayenti

Qala kabusha uxhumano ngokuloga okuningiliziwe futhi ufunde umugqa osho ikheli elizoxhumana nalo. Lelo nani elibalulekile, hhayi lokho okuxazululwe isiphequluli sakho.

Isilondolozi sesixazululi sisengase sibambe impendulo yangaphambilini, futhi amanye amanethiwekhi ayigcina isikhathi eside kunalokho okufunwa yi-TTL yerekhodi. Buza isixazululi iklayenti elisisebenzisa ngempela, hhayi esidlangalaleni osihlole kwenye indawo.

Uma ilogi ibonisa ikheli elisha futhi uxhumano lusahluleka, inkinga isisukile: iphakethe liya kwenye indawo futhi akekho ophendulayo. Lona umbuzo wesilaleli, isihlangu-mlilo noma ukudluliselwa kwephothi, futhi usohlangothini lweseva hhayi endleleni yokuxazulula yeklayenti. Hlukanisa lezi zinto ezimbili zokuhluleka, ngoba ukuthatha isilaleli esingafinyeleleki njengenkinga ye-DNS kukujikelezisa kabili kulo mkhombandlela.

Yazi ukuthi yikuphi ukuqala kabusha okwenzayo

Akuzona zonke iziqalo kabusha ezigcina isimo esifanayo, yingakho ushintsho lwekheli lungaziphatha ngendlela ehlukile kuye ngokuthi inqubo iphindwa kanjani. Ukuqala kabusha okuthambile okuqalwa yisignali kugcina umongo omningi wesikhathi esedlule, kuyilapho ukuma nokuqala okugcwele kuqala kabusha kusukela ekulungiselelweni. Uma uhlola ukuthi iklayenti liyaxazulula kabusha, ufuna indlela eqala ekulungiselelweni.

Izilungiselelo zokuqhubeka zibalulekile futhi, ngoba zenzelwe ukugcina lokho okwaqinisekiswa, hhayi ukujaha amakheli amasha.

Ukuhlola okumsulwa kakhulu ukuqala okusha kusukela kuphrofayili ehlosiwe, kulandele ukubheka umugqa welogi osho iphoyinti lokugcina. Noma yini oyifundayo esikhathini esigcinwe ngokwengxenye iyisitatimende ngaleyo sikhathi.

Izinketho ezine nemisebenzi yazo ehlukene

remote enegama lomsingathi yilona silungiselelo esenza ukuxazulula kabusha kwenzeke nhlobo; ikheli elingokoqobo kulowo mugqa liyakuvimbela. I-resolv-retry ilawula okwenzeka uma ukusesha kuhluleka, futhi i-2.6 isivele iyibeka njengokungapheli ngokuzenzakalela. Ngakho ukuyengeza akushintshi lutho, futhi ayikaze ihlele ukuhlola ngezikhathi ezithile ukuze ithole enye impendulo. Noma ubani othi ihlola amakheli amasha uhlanganisa ukubuyisela nokusha.

I-persist-remote-ip ikhuluma ngokuqhubeka hhayi ngokusha: isebenzisa kabusha iphoyinti lokugcina elaqinisekiswa, kuzo zonke iziqalo kabusha ezithambile ezizisekelayo. Ngesikhathi uhlola ukufuduka, lokho kuphambene nalokho okufunayo. Yikhubaze ukuze uhlole uma ukwakha kwakho kuyivula, bese uyibuyisela lapho iphoyinti elisha selifakazelwe. Uma ishiywe ivuliwe, ukuxhumana kabusha okuphumelelayo kungenzeka kungakutsheli lutho nge-DNS.

float yamukela untanga oqinisekisiwe okwashintsha ikheli lakhe phakathi nesikhathi, futhi kuphela ezilungiselelweni ezikusekelayo. Ayivuseleli i-DNS, futhi ngeke ilandele ushintsho lomhlinzeki ngokwayo. Yithathe njengesici sokuqina kontanga abazulazulayo, hhayi njengendlela yamakheli ashintshayo yamaseva.

Qinisekisa iphoyinti elisha lokugcina ngaphambi kokusola iklayenti

Ngaphandle kwenethiwekhi yakho, hlola ukuthi ikheli elisha linesilaleli kuphothi elilungiselelwe nokuthi ukudlulisela komhlinzeki kukhomba kulo. Irekhodi le-A elifanele lomshini ongenayo iphothi evuliwe likhiqiza kanye uphawu abantu abalusho kusilondolozi.

Bese uxhuma kabusha futhi uqinisekise izinto ezimbili: iklayenti laqinisekisa ngokumelene nesitifiketi seseva esilindelekile, futhi isikhathi sifinyelela insiza obuyihlosile. Ushintsho lwekheli alwehlisi izimfuno zobunikazi, futhi uxhumano oluphumelelayo oluya endaweni engalungile lumbi kunalolo oluhlulekayo. Incwadi ye-OpenVPN 2.6 ibala zonke izinketho ezine nomkhakha wazo, futhi yilokho okumele kugcinwe eceleni kwephrofayili.

Gcina indlela engaphandle kwebhande yokungena kuseva ngaphambi kokuqala kabusha umhubhe ophethe ukufinyelela kwakho kokuphatha. Lokho kuqapha okukodwa kuvimbela izigameko eziningi ezidalwa yilesi simo.