Ukunwetshwa kwesayithi ye-VPN: landela umzila wokubuya ngale kwegedi

Ukunwetsha i-VPN yesayithi iye kwesinye isikhungo sedatha kudinga umzila wokuya phambili nomzila wokubuya, hhayi nje esinye isiqalo kugedi eliseduze.

Ithrafikhi evela egatsheni igcina kugedi okungeyona i-LAN yayo equkethe uhlelo lokusebenza obucelwe ukulufinyelela. Iseva isesikhungweni sesibili sedatha, ngale kwesixhumanisi sangaphakathi i-VPN engakaze isilungise. Ukwengeza esinye isiqalo kugedi eliseduze akusizi lutho kulelo cala, ngoba igedi elikude iyindawo yokugcina yokubethela, hhayi umzila wokugcina. Umzila udinga umzila wokuya phambili, imvume emngceleni wokuphepha okude nesinqumo sokubuya kwinethiwekhi yendawo ekuyiwa kuyo uqobo.

Igedi elikude iyindawo yokugcina yokubethela

I-IPsec phakathi kwamagedi ivikela ithrafikhi phakathi kwamadivayisi amabili okuphepha, futhi amakheli angaphakathi adlula kuleyo ngxenye ebethelwe. Ngale kwegedi elikude, ukuhamba kwendlela okuvamile kuthatha izintambo, kuhlanganise nanoma iyiphi inqubomgomo ekhona phakathi kwezikhungo zedatha. Ngakho-ke ingxenye evikelwe ihlanganisa ingxenye yohambo hhayi okusele. Ukucabanga okuhlukile yikho okwenza umklamo ugcine ngomhubhe onempilo nohlelo lokusebenza olungafinyeleleki.

Dweba umzila ezingxenyeni ezintathu: igatsha liye kwigedi eliseduze, eliseduze liye kwelikude, igedi elikude liye kuhlelweni lokusebenza. Ingxenye ngayinye inomnikazi wayo nendlela yayo yokwehluleka.

Funda izinhlangothi zombili zenqubomgomo yomhubhe

Inqubomgomo yomhubhe ngokuvamile ibhalwa ngombono wohlangothi lwasekhaya, futhi ukulungiselelwa okuyingxenye kuvela kulo mkhuba. Izinhlangothi zombili kufanele zibhale umthombo wegatsha nendawo ekuyiwa kuyo ngendlela ezizovela ngayo ngaphakathi komhubhe, kuhlanganise noma yikuphi ukuhumusha okuhlosiwe umklamo. Ukubuyekeza kuphela umkhawulo oseduze kukhiqiza ukungafani kwesigaba sesibili okubonakala njengokwehluleka kokuhamba kwendlela. Qhathanisa amasethi amabili enqubomgomo ngaphambi kokuthinta noma yimuphi umzila.

Bhala umthombo nendawo ekuyiwa kuyo njengamakheli hhayi njengamagama esayithi. Ukungacaci lapha kuyobuya kamuva njengokungalingani okudidayo.

Engeza umzila wokuya phambili bese uqinisekisa imvume

Igedi elikude lidinga umzila oya kunethiwekhi engaphansi yohlelo lokusebenza, futhi umzila ngamunye ophakathi kwabo kufanele uvume umthombo wegatsha. Qinisekisa ukuthi igedi elikude linakho ngempela hhayi lokho okushiwo umdwebo.

ip route get 10.30.5.10 from 10.10.1.50
traceroute -n -s 10.10.1.50 10.30.5.10

Umyalo wokuqala ubika isixhumanisi sokuphuma nokugxuma okulandelayo igedi elikude elingakukhetha kulo mthombo, umbuzo ongenakuphendulwa ithebula elivamile lokuhamba kwendlela. Umkhondo ukhombisa lapho amaphakethe ame khona, futhi ukuphuka ngemva kwegedi elikude kukhombisa ukudlula kwangaphakathi hhayi umhubhe. Uma umzila ukhona futhi ithrafikhi isanyamalala, thatha isithombe kugedi elikude futhi ufunde ikheli lomthombo elifikayo, ngoba ikheli elingalindelekile lisho ukuthi ukuhumusha kwenzeka endaweni engakahlelwanga. Wonke amakheli lapha ayizindawo zokubamba, ngakho-ke faka amanethiwekhi angaphansi wangempela egatsha, okudlulayo nohlelo lokusebenza.

Hlola usuka egatsheni, bese uphinda uhlole umzila wakudala

Ukwamukela kudinga umthombo wangempela hhayi uphenyo olusuka kugedi elikude. Gijimisa isheke kusuka kusibungu segatsha futhi ugcine izindawo ekuyiwa kuzo ezazisebenza ngaphambili kuleso silingo.

curl -sS -m 5 http://10.30.5.10:8080/health
ping -c 3 10.20.1.1

Impendulo evela kuhlelweni lokusebenza ifakazela kanyekanye umzila wokuya phambili nomzila wokubuya, kuyilapho i-ping eya endaweni yakudala ifakazela ukuthi ushintsho aluzange luphule lokho obekusebenza kakade. Thatha ikheli lomthombo elilogwa uhlelo lokusebenza, ngoba imithetho yalo yokufinyelela nanoma yimuphi umzila wokubuya kufanele kuhambisane nalelo nani. Lapho igatsha lihumusha ngaphambi komhubhe, ikheli lenqubomgomo nekheli elibonwa uhlelo lokusebenza kuyahluka ngokomklamo, ngakho-ke rekhoda kokubili. Phinda usilingo ngemva kokuvuselelwa kokhiye noma ushintsho lokuhamba kwendlela, ngoba lezi zindlela zivame ukuqinisekiswa kanye bese zikhohlakala.

Yabela umnikazi esigabeni ngasinye kwezintathu kanye nomzila wokubuya ngaphakathi kwenethiwekhi yendawo ekuyiwa kuyo. Umzila onabanikazi abane wehluleka ezikhaleni eziphakathi kwabo.

Izihloko ezihlobene