I-VPN yakho isebenza kuphela ngemuva kokungena ngenxa yendandatho yokhiye

Iphrofayela esebenzayo kuseshini yakho akuyona insiza yesikhathi sokuqalisa. Bona ukuthi imuphi umnikazi oqala umhubhe, isiphi isifihlo esihlala khona, nokuthi ungayihlola kanjani izehlakalo zangempela.

Umyalo usebenza uma ungene, ngakho uwufaka kuskripthi sokuqalisa bese ugoduka. Ngakusasa ekuseni umshini ukuxhumekeni kanti umhubhe awukho. Inganekwane iwukuthi umyalo osebenzayo uyinsiza esebenzayo. Ngokomkhuba umehluko uvame ukuba ngenye yezinto ezimbili: iphrofayela ingeyaseshini yakho yomsebenzisi hhayi eyesistimu, noma isifihlo sivulwa into ekhona kuphela ngemuva kokungena kwakho. Kokubili kusebenza ngokuphelele esivivinyweni sesandla futhi kuhluleka ngaso sikhathi lapho kungekho muntu obukayo.

Kungani ukungena kuwenza usebenze

Ukungena kwesithombe kuqala ibhasi leseshini kanye ne-ejenti yensiza yezifihlo, futhi yilapho amaklayenti amaningi agxile kudesktop egcina khona iphasiwedi yephrofayela noma umshwana wokhiye oyimfihlo. Ukwenza kusebenze okugijima njengomsebenzisi wakho ngemuva kokungena kungacela isifihlo kuleyo ejenti bese kuphumelela. Ukwenza kusebenze okufanayo okwenziwa iyunithi yesikhathi sokuqalisa akunaseshini, ibhasi noma i-ejenti, ngakho ukusesha kuyahluleka noma kubhajwa esicelweni okungekho muntu osibonayo.

Gijimisa iphrofayela efanayo ngaphambi nangemuva kokungena bese uthola imiphumela emibili ehlukene ekuhlelweni okukodwa. Lona wuphawu lokuncika kumininingwane yokuqinisekisa, hhayi komhubhe ophukile, futhi kuchaza ukuthi kungani isivivinyo sesandla kutheminali sifakazela okuncane kunalokho okubonakala. Umhubhe ulungile; into evula isifihlo sawo ayikho.

Nquma ukuthi imuphi umnikazi oqala umhubhe

Kunamaphethini amabili asekelwayo, futhi ukuwaxuba kungenye indlela lokhu okuhluleka ngayo. I-NetworkManager ingavula uxhumano lwezinga lesistimu, okufanele lapho umshini usuvele ugxilisa inethiwekhi yawo lapho. Ngenye indlela, iyunithi ye-systemd ezinikezelwe igijimisa i-VPN ngqo futhi ingumnikazi wesixhumi esibonakalayo ngokwaso.

systemctl list-unit-files 'openvpn*'
systemctl list-unit-files 'wg-quick*'
nmcli connection show --active
systemctl enable --now wg-quick@wg0

Ungagijimisi abanikazi bobabili ekuhlelweni okukodwa. Uma i-NetworkManager iphethe isixhumi esibonakalayo futhi iyunithi nayo iyiphakamisa, zizolwela imizila ne-DNS, futhi isimo esiwumphumela sincike ekutheni ubani oqede ekugcineni.

Beka isifihlo lapho insiza ingasifunda khona

Insiza yangemuva ayikwazi ukuphendula isicelo. Imishwana yephasiwedi yesitifiketi, amaphasiwedi e-akhawunti namafayela okuqinisekisa abhekiselwe kuwo konke kudinga ukuhlelwa kokugcinwa okungafinyelelwa iyunithi ngaphandle komuntu, okungokwe-akhawunti egijimisa insiza futhi okungafundeki yibo bonke abanye.

Isinqamuleli esilingayo ukwenza ifayela lifundeke kuwo wonke umuntu kuze kunyamalale iphutha lemvume. Lokho kushintshanisa ukuhluleka kokuqalisa nokuchayeka kwemininingwane yokuqinisekisa isikhathi eside, futhi wuhlobo lwenguquko okungekho muntu obuyela kuyo. Sebenzisa indlela ukusetshenziswa osekuvele kuyithemba: ifayela lemininingwane yokuqinisekisa elikhawulelwe, ukhiye ongabhalwanga ngokufihlekile ovikelwe izimvume zefayela, noma uxhumano lwezinga lesistimu olunesitoreji saso sifihlo.

Hlola izehlakalo ezenzeka ngempela

Ukuqalisa insiza ngesandla ngemuva kokungena akuhloli cishe lutho. Qalisa kabusha, noma khubaza ukungena kwesithombe umjikelezo owodwa, bese ubuka iyunithi iziphakamisa yona. Lona ukuphela kwesivivinyo esihlola ndawonye ukutholakala kwemininingwane yokuqinisekisa, ukulungela kwenethiwekhi nokuhleleka kwama-unit. Futhi isivivinyo esikhiqiza kabusha ukuhluleka okubikwe umsebenzisi, okuqalisa ngesandla okungakwenzi neze.

systemctl is-enabled wg-quick@wg0
journalctl -u wg-quick@wg0 -b --no-pager
systemctl status systemd-networkd-wait-online --no-pager

Ukuhleleka kubalulekile njengemininingwane yokuqinisekisa. Iyunithi eqala ngaphambi kokuthi kuhlelwe uxhumano lwangenhla lwesisekelo izokuyeka, futhi ezinye izinhlobo zokwabiwa ziyahluka mayelana nokuthi zilinda ukuxhumana yini. Uma iyunithi ibika ukuhluleka ngesikhathi sokuqalisa kodwa iphumelele uma iqalwa ngesandla ngemuva kwamasekhondi angamashumi amathathu, uthole inkinga yokuhleleka hhayi inkinga yesifihlo.

Qinisekisa imizila ne-DNS, hhayi isixhumi esibonakalayo kuphela

Isixhumi esibonakalayo esikhona akulona umhubhe osebenzayo. Ngemuva kokuqalisa okungagadiwe, hlola imizila, isimo sokuxazulula kanye nendawo eyodwa ngokwekheli ngaphambi kokuhlola igama. Bese uhlola uhlelo lokusebenza umhubhe okhona ngenxa yalo.

ip -4 route show
resolvectl status
ping -c 3 10.61.0.1
curl -sS --max-time 5 https://internal.example/ -o /dev/null -w '%{http_code}\n'

Uma ikheli lisebenza kanti igama alisebenzi, inkinga esele inqubomgomo ye-DNS hhayi umhubhe. Bhala ukuthi imuphi umnikazi oqala insiza nokuthi isifihlo sihlala kuphi, ngoba umuntu olandelayo ozoqalisa kabusha lo mshini uzodinga womabili amaqiniso.

Izihloko ezihlobene