I-VPN ivuliwe, i-VM ayifinyeleleki? Cishe kwakungeyona inkinga umzila

Xhuma i-VPN, futhi i-VM yokuthuthukisa eyayiphendula umzuzu odlule iyathula. Indaba esobala iyazibhala: umhubhe uthathe umzila, umsingathi manje uthumela ithrafikhi yesivakashi kunethiwekhi yenkampani, futhi isixazululo ukwengeza umzila oqinile noma ukushintsha i-adaptha ibe yimodi yebhuloho. Leyo ndaba kwesinye isikhathi iyiqiniso. Kodwa akusona isizathu esivamile, futhi ukusebenza ngaso kuqala ngokuvamile kuphula enye into.

Inethiwekhi ye-host-only iyinethiwekhi yesofthiwe ephethwe umsingathi futhi yabiwe nezivakashi zayo, ehlukile kunoma yikuphi ukuxhumana komzimba. Akukho lutho kusixhumi esibonakalayo sekhlayenti ye-VPN uqobo okushintsha leyo nethiwekhi, ngakho ngaphambi kokuyithinta, thola ukuthi yisiphi isigaba kwezine esihlulekile ngempela.

Umzila ngokuvamile usahlala usendaweni

Buza i-kernel esikhundleni sekhasi lokuqala lethebula yemizila. Ku-Linux, ip route get 192.168.56.10 ibika umzila oqondile, isixhumi kanye nekheli lomthombo elizosetshenziswa, okuyimpendulo ehlukile ekufundeni umzila ozenzakalelayo nokuqagela. Uma okukhiphayo kusho isixhumi se-host-only, umhubhe awuhlanganyeli nhlobo kuleyo ndlela.

Izinto ezimbili zingayephula ngempela, futhi zombili izinkinga zamakheli hhayi ze-VPN. Inethiwekhi encane ekude edlula ku-prefix ye-host-only yenza umzila othile uwinise, futhi ikhlayenti ye-VPN efaka umzila obanzi ngemetriki ephansi ingadonsa i-prefix. Zombili zibonakala kumyalo owodwa: isixhumi esishiwo kokukhiphayo kuyoba umhubhe, futhi ukulungisa kungokwalowo ophethe lelo hlelo lamakheli.

Ukukhetha umzila nokwamukela iphakethe yizinqumo ezimbili ezihlukile

Lena ingxenye imodeli yomqondo evamise ukuyishiya. Ngisho nomzila wendawo ophelele, ikhlayenti ye-VPN ingayenqaba iphakethe. Amakhlayenti amaningi asebenzisa inqubomgomo yokufinyelela inethiwekhi yendawo enquma ukuthi yiziphi izindawo ezivunyelwe ngaphandle komhubhe, futhi inethiwekhi encane exhunyiwe ayilubuyekezi lolo hlu ngokuzenzakalela.

Ngakho ukwehluleka kubonakala kufana nkinga yomzila ngasohlangothini lohlelo lokusebenza, futhi kuhluke ngokuphelele ngasohlangothini lwekhlayenti. Uma ip route get isho isixhumi esifanele kodwa uxhumano lusaphela isikhathi, yeka ukuhlela imizila bese ufunda indlela yokufinyelela yendawo ebhaliwe yekhlayenti. Amanye amakhlayenti anikeza uhlu lwezivunyelwe lwamane ethiwekhi encane endawo, amanye avimbela konke okungewona umhubhe, kanti amanye avimbela kuphela uma i-kill switch inikwe amandla.

Lowo mehluko ubalulekile ngoba izilungiso azikwazi ukushintshwa. Ukwengeza umzila akukwazi ukwanelisa isihlungi, futhi ukuvala isihlungi ukuze ufinyelele isivakashi esisodwa yisinqumo esikhulu kakhulu kunalokho okusikisela uphawu.

Isivakashi sinezindlela ezintathu zokuthi cha

Isivakashi esikwazi ukuphequlula i-inthanethi asifakazanga lutho mayelana nensizakalo oyifunayo. Isilaleli singase siboshelwe ku-127.0.0.1 ngaphakathi kwesivakashi, futhi kuleso simo asikho isicelo esivela kumsingathi esingafika, noma ngabe indlela inhle kangakanani. Hlola nge-ss -ltn esivakashini bese ubheka ikholomu yekheli lendawo, hhayi imbobo kuphela.

Okulandelayo i-firewall yesivakashi uqobo. Isithombe sokuthuthukisa esinokungagqagqani okuqinile singamukela amaphakethe omsingathi bese siwalahla emngceleni wensizakalo, okukhiqiza ukuphela kwesikhathi okubonakala kufana ngqo nomgodi omnyama womzila. Ekugcineni kukhona ukulungiselelwa kwensizakalo uqobo: uhlelo lwewebhu oluboshelwe egameni elithile lomsingathi, noma uhlu lwamakheli eklayenti avunyelwe, luzonqaba isicelo esivela kunethiwekhi encane ye-host-only ngisho lapho iphakethe ngalinye lifika.

Dlula kulezi zintathu ngaphambi kokucabanga ukushintsha imodi yenethiwekhi ye-VM. Ngayinye iwushintsho oluncane kunokuhlela kabusha uxhumano lwesivakashi, futhi ngayinye inokuhlolwa okucacile.

Iyini ngempela ibhuloho, futhi kubiza malini

Ukushintsha i-adaptha ibe yimodi yebhuloho akusikho ukulungisa indlela ye-host-only. Kuyisinqumo sokubeka isivakashi kunethiwekhi enye, ngokuvamile i-LAN yomzimba, lapho siba sobala kukho konke okunye okuhlala lapho. Lokho kungase kube yikho kanye okukufunayo. Kodwa akusiko lokho okwakwenziwa ukulungiselelwa kwasekuqaleni.

Kusebenzise lapho isivakashi sidinga ngempela ukuba ngumlingani kuleyo LAN futhi ukuchayeka kuvunyelwe. Ungakusebenzisi ngoba insizakalo eyodwa iyekile ukuphendula, ngoba ushintsho lungakhipha isivakashi ekuhlukaniseni okwakusenza kuphephile ukuthuthukisa kuso.

Ngemva kwanoma yisiphi isilungiso esigunyaziwe, hlola ngokulandelana okungaguquki: isicelo esisha esisuka kumsingathi siya esivakashini, insiza yenkampani edingekayo ngomhubhe, kanye nokuziphatha kokwenqaba okuhlosiwe lapho umhubhe uvaliwe. Uma okokugcina kungasasebenzi, isilungiso sidlule inkinga.

Isigaba se-VirtualBox mayelana nenethiwekhi ye-host-only sichaza isixhumi sesofthiwe ngasohlangothini lomsingathi nokuthi sihluke kanjani ekuxhumekeni kwebhuloho, okuwumbhalo ofanele ukufundwa ngaphambi kokucabanga ukuthi lezi zimodi zimbili ziyashintshana.