Ukuhosha kwewebhu noma i-VPS: ingabe uhlelo lwakho lungaqhuba iseva ye-VPN?
Ukuhosha okwabiwe, uhlelo olulawulwayo kanye neseva ezilawulayo zokuzimela kunikeza ukulawula kwenethiwekhi okuhlukile. Qhathanisa amakhono amane ngaphambi kokuthenga noma ukuthutha noma yini.
Iwebhusayithi esebenzayo iwubufakazi bokuthi umhlinzeki angakwazi ukunikeza i-HTTP, hhayi ukuthi wena ulawula umshini. Phakathi kohlelo olwabiwe, uhlelo olulawulwayo kanye neseva ezilawulayo kukhona igebe elikhulu kulokho i-akhawunti engakwenza kunethiwekhi. Nquma ukuthi uluphi uhlangothi lwalelo gebe oludingwa ukwakheka kwakho kwe-VPN ngaphambi kokukhokhela omunye unyaka. Amakhono amane ahlukanisa laba ababili, futhi awekho nolulodwa avela ohlwini lwamanani.
Yini uhlelo ngalunye olunikezayo ngempela
Ukuqhathanisa okusizayo akusikho intengo noma usayizi wediski, kodwa igunya. Buza ukuthi i-akhawunti ingaqala ini, iziphi izici ze-kernel engafinyelela kuzo, imiphi imigudu eyamukela ukuhamba kwedatha okungenayo nokuthi ukuhamba kwedatha okuvunyelwe kungaphuma futhi kuye kwenye indawo.
Iningi lemikhiqizo yokuhosha iwela ezinhlotsheni ezintathu, futhi eyokugcina kuphela iyiseva yenjongo evamile:
| Capability | Website plan | Self-managed server |
|---|---|---|
| Long-running custom process | Usually not permitted | Yours to run under a service manager |
| Virtual network interface | Almost never available | Present when the kernel module and privilege allow it |
| Arbitrary inbound port | Restricted to the web stack | Provider filtering still applies |
| Forwarding for clients | Not offered | Possible once routing and policy are configured |
I-akhawunti ye-shell ingumthombo wokudideka ojwayelekile. Ukudlulisa amafayela noma ukufinyelela imisebenzi ehleliwe kungabonakala njengokuphatha ngenkathi inqubo iboshelwe kufolda elilodwa kanye nezenzo ezimbalwa ezivunyelwe.
Amakhono amane anquma impendulo
Wathathe ngokulandelana, ngoba ukwehluleka esigabeni sokuqala kwenza okunye kungabi nancazelo.
Okokuqala, isofthiwe kufanele isebenze njengenqubo yesikhathi eside ephila ngaphambi kokunakekela. Okwesibili, ukusetshenziswa kufanele kukwazi ukudala isixhumi esibonakalayo sayo esibonakalayo; ku-Linux lokhu ngokuvamile kusho ukuvula i-/dev/net/tun ngemvume yokuphatha efanele, njengoba idokhumenti ye-kernel nge-TUN/TAP ichaza, nakuba kungekhona lonke ukwakheka kwe-VPN okusebenzisa leyo divayisi. Okwesithathu, amakhasimende kufanele afinyelele isilaleli ekhelini lomphakathi, ekuthuthweni nasegudwini ohlose kukho, futhi ummeleli ophambene wewebhu owamukela i-HTTPS akasho lutho ngeprotokholi engahlobene kuleyo nombolo. Okwesine, ukuhamba kwedatha okuvunyelwe kufanele kuqhubeke, nemizila, ukudlulisela kanye nanoma ikuphi ukuhumusha okusekelwayo ngempela.
Imigomo yesevisi imi eduze kwalezo ezine futhi ayiyona nhlobo eyezobuchwepheshe. Imikhawulo yokuhamba kwedatha engapheli ngokuvamile ichaza izicelo zewebhu, hhayi umhubhe othwala ukulandwa kwabanye. Funda isigaba sokusetshenziswa okwamukelekayo ngaphambi kokuklama eduze kwaso, futhi khumbula ukufinyelela kokubuyisela osukwini lapho isevisi ingeke iqale khona.
I-akhawunti yewebhusayithi igcina kuphi
Uhlelo lwewebhusayithi ngokuvamile lusebenzisa ikhodi yakho endaweni yokusebenza elawulwayo enendawo yokungena eqinile. Ngisho noma ifayela lensimbi lomhubhe likhona, inqubo ingase ingabi nemvume yokuvula inodi yedivayisi, yokubopha igudu elikhethekile noma yokushintsha ithebula lemizila. Lezo zivimbelo ziwumkhiqizo uqobo, hhayi ukunganaki.
Yingakho isengezo esithembisa i-VPN ngokuvamile siphetha ngokuba ummeleli oya kwenye indawo. Uma i-akhawunti yamanje inikeza izilawuli zewebhusayithi kuphela, isinyathelo esethembekile yiseva ehlukile, hhayi ukufuna imojuli evula igunya elingekho.
Lapho umphathi oyedwa kufanele aqhube kokubili
Ukwabelana kungenzeka futhi ngezinye izikhathi kunengqondo, kodwa kuthatha njengesinqumo sokuphepha hhayi njengokunethezeka. Uhlelo lwewebhu olunefomu lokulayisha lumi eduze kwezinkulumo zokungena zomhubhe kanye nesokhethi yokulawula, futhi ingozi kwenye ifinyelela kwenye. Ama-akhawunti ahlukile, amayunithi esevisi ahlukile kanye nezinhlelo zamafayela ezihlukile kunciphisa lokho kuchayeka ngaphandle kokuthenga umshini wesibili.
Ukwuncintisana ngezinsiza kubalulekile ngokufanayo. Ikhopi yokulondoloza ngomhubhe kanye nenqubo yewebhu ematasa kuncintisana ngomugqa wokukhuphuka ofanayo kanye nediski elifanayo, futhi ukwehluleka kubonakala njengesayithi elihamba kancane hhayi umhubhe ogcwele. Nquma ukuthi muphi umthwalo ozonqoba ngaphambi kwesigameko, futhi khawulela umhubhe ukuze iwebhusayithi iqhubeke iphendula.
Akukho kulawa mahlelo amabili okwahlukanisiwe ngoba nje zombili izinsiza ziyasebenza. Ikhono lokuzihosha ndawonye liwukuqala kokuklama, futhi umsebenzi wokuhlukanisa yiwo owenza kube nokuvikeleka.
Nquma lokho kusiseva yokuzama ngemiyalo emine
Ngaphambi kokuthutha, qasha isibonelo esincane kunazo zonke somkhiqizo ohlosiwe ihora elilodwa futhi uhlole amakhono amane ngqo. Ukuqagela kusuka kuthebula lezici kumosha imali encane kunonyaka wohlelo olungalungile, kodwa isikhathi esiningi kakhulu.
Gijimisa lezi kuseva yokuzama futhi ufunde ukwehluleka njengezimpendulo, hhayi njengezithiyo:
ls -l /dev/net/tun
sudo ip tuntap add dev tun9 mode tun && sudo ip link del tun9
sysctl net.ipv4.ip_forward
ss -lunp | headImigqa emibili yokuqala itshela ukuthi idivayisi yomhubhe ingaba khona yini nhlobo. Eyesithathu ibika ukuthi umphathi angadlulisa amaphakethe yini, futhi eyesine ikhombisa ukuthi yini esivele ilalela ukuze ukungqubuzana kwegudu kubanjwe kusenesikhathi. Umhlinzeki ohluleka emugqeni wesibili angase asekele ukusetshenziswa endaweni yomsebenzisi, ngakho lapho ubuza ideski labo losizo, shono indlela oyidingayo, hhayi isigaba somkhiqizo.