Kungani umzila we-VPN osusiwe ubuya ngemva kokuxhumana kabusha

Ukususa umzila osebenzayo akushintshi lutho lapho iphrofayela, i-push noma iyunithi yokuqalisa iwudala kabusha. Thola umnikazi, kushintshe lapho, bese uqinisekisa ekuxhumaneni kabusha.

Umzila owususe ngesandla ubuya ngemva kokuxhumana kabusha okulandelayo, futhi ithebula libukeka njengangaphambili. Lena akuyona iphutha lokuhambisa: kukhona okudala kabusha ingeno kusukela kukhoqo noma kusukela esenzweni somjikelezo wokuphila koxhumano. Iningi lama-runbook lima etafuleni elisebenzayo, yingakho ukususa kubonakala kusebenza umzuzu bese kwehluleka. Khomba umnikazi, kushintshe, futhi kufakazela ekuxhumaneni kabusha.

Ubani ofake umzila

Qala nguhlu lwabazimeleli esikhundleni sokulungisa. Iphrofayela ye-VPN ingathwala imizila yayo, iseva ingayithengisa ngesikhathi sokuxhumana, iphrofayela yomphathi wenethiwekhi ingayimemezela, iyunithi yokuqalisa noma iskripthi kungayengeza, futhi ukusetshenziswa kwe-IPsec kufaka imizila yezikhethi zethrafikhi ezixoxayo. Imithetho yokuhambisa ngomgomo nayo ingaqondisa ithrafikhi ngokuphelele kwelinye ithebula.

Isikhathi sihlukanisa ngokushesha kunokumbiwa kokuqo. Ingeno evela khona lapho isixhumi sikhula ingeyeklayenti; leyo efika ngemva kwesekhondi ngokuvamile ivela ku-push yeseva; leyo ekhona ekujikeni ingeyokhoqo okugciniwe. Bhala ithebula ngaphambi nangemva kokuxhumana, ukunqamuka nokuqalisa kabusha, futhi iphethini izobiza umnikazi. Umzila obuya kuphela lapho isevisi iqalisa kabusha ukhomba iyunithi, hhayi i-VPN.

Funda ithebula ngaphambi kokulihlela

Bheka umbono wekherneli ngokwakho esikhundleni sefayela eligciniwe. Ikholomu yephrothokholi ibonisa ukuthi yini eyafaka ingeno ngayinye:

ip route show
ip route show table all
ip rule show

Inkundla yephrothokholi, imethrikhi nenombolo yethebula kukutshela ukuthi ubheka ingeno emile, eyadalwa yikherneli noma into eyengezwe yidemoni. Uhlu lwemithetho lubalulekile ngoba usesho lungashiya ithebula eliyinhloko ngokuphelele, lokho kwenza ukuhlela lapho kungabonakali kuhlelo lokusebenza olulungisayo. Funda umugqa kusukela kwesobunxele kuye kwesokudla: indawo oya kuyo, isango, idivayisi, iphrothokholi nemethrikhi.

Bese ubuza ikherneli ukuthi iyiphi imizila ezoyisebenzisa ngempela. Ikheli elivikelwe liyisihloli esingcono kuneleli lomphakathi:

ip route get 10.20.5.7

Shintsha umnikazi, hhayi uphawu

Lapho umnikazi esaziwa, ushintsho lungolwakhe. Susa umzila kuphrofayela yeklayenti, lungisa umzila othunyelwe kuseva, noma hlela ukuxhumana komphathi wenethiwekhi esikhundleni sokwengeza umzila unomphela oqhudelanayo owina ngemethrikhi. Imithetho emibili elwa iyodwa yenza ithebula okungekho muntu ongayichaza kamuva.

Gcina ukukhishwa kwesiphetho. Umzila wasesihambini othumela ikheli lomphakathi leseva ye-VPN ngokwayo ngokusebenzisa isango lomzimba yiwo ogcina amaphakethe angaphandle komhubhe ehamba; uwususa, umhubhe uzama ukuzithwala ngokwawo. Kuphrofayela ye-split tunnel, ukunakekela okufanayo kusebenza kumanethiwekhi amancane endawo okufanele adlule umhubhe.

Xhumana kabusha futhi uqinisekise zombili izindlela

Xhumana kabusha, bese uhlola zombili izindawo ngokuhamba okukodwa. Ikheli elivikelwe nesiphetho esikhishiwe ziphendula imibuzo ehlukene:

ip route get 10.20.5.7
ip route get 198.51.100.20

Eyokuqala kufanele ixazululwe ngesixhumi somhubhe neyesibili ngesango lomzimba. Uma zombili zixazululwa ngomhubhe, ukukhishwa akukho; uma kungekho noyedwa, ushintsho lwephrofayela aluzange lusebenze futhi ubheka umnikazi ohlukile kunalowo obucabanga.

Bhala injongo yomzila, umnikazi wawo nokuthi kufanele uhlale isikhathi esingakanani. Leyo nothi iyona evimbela umuntu olandelayo ukuphinda umjikelezo ofanayo wokususa nokuxhumana kabusha.

Izihloko ezihlobene