Ukufinyelela isixhumi esibonakalayo sewebhu ngaphakathi kwesiqukathi se-VPN: khetha umnikazi wephothi

Uhlelo lwabelana ngesikhala samagama se-VPN, ngakho iphothi lingelesiqukathi se-VPN. Xhuma isilaleli ngendlela efanele, ushicilele kumnikazi futhi ugcine indlela incane.

Akukho okungalungile kuhlelo futhi akukho okungalungile kuthumbu, kodwa idashibhodi ayilayishi. Lapho isevisi isebenza nge-network_mode: service:vpn, yabelana ngesikhala samagama senethiwekhi sesiqukathi se-VPN, okusho ukuthi isilaleli sayo namaphothi ashicilelwe ayeleso sikhala samagama hhayi esevisi. Kulandela izinqumo ezintathu: uhlelo luxhuma kuphi, isiphi isiqukathi esishicilela iphothi, nokuthi indlela yokuphatha incane kangakanani. Zihlele ngendlela engalungile futhi isilungiselelo ngasinye sizobonakala silungile kuyilapho inhlanganisela ingeke isebenze.

Ubani umnikazi wesikhala samagama sephothi

Esikhaleni samagama esabiwe, ukwengeza umugqa we-ports: kwisevisi encikile akusizi ngalutho, futhi izinketho ezimbalwa zenethiwekhi azisekelwe kuyo ngokomklamo. Esikhundleni salokho shicilela kusiqukathi esinesikhala samagama. Leso siqukathi yisona futhi ikheli laso elivela kuhost, ngakho ukumephana kufundwa njengomugqa owodwa hhayi owodwa ngesevisi ngayinye.

services:
  vpn:
    image: vpn-client-image
    cap_add: [NET_ADMIN]
    ports:
      - "127.0.0.1:8080:8080"
  app:
    network_mode: "service:vpn"

Qaphela ikheli elingakwesobunxele bokumephana. Ukuxhuma ku-127.0.0.1 kugcina iphothi eshicilelwe ku-loopback yekhost, okuyinto evamile edingwa isixhumi sokuphatha. Ukuxhuma ku-0.0.0.0 kuyidalula kuzo zonke izixhumi zekhost, futhi lokho kusinqumo esihlukile sokuphepha, hhayi ukunethezeka.

Yenza uhlelo lulalele lapho isikhala samagama silindele khona

Isilaleli esixhunywe ku-127.0.0.1 ngaphakathi kwesikhala samagama sifinyeleleka kuphela ngaphakathi kwaleyo nkundla yamagama. Amaphothi ehost ashicilelwe afika ngaphandle, ngakho uhlelo kufanele luxhume ikheli elibanzi ukuze ukumephana kusebenze. Lokhu ukushintsha komugqa owodwa kumaseva amaningi, futhi yileso sinyathelo abantu abasidlulayo ngemva kokukopisha umhlahlandlela wokuqinisa obhalelwe ukuthunyelwa okungenazo iziqukathi.

docker compose exec app ss -lntp
docker port vpn
curl -sS -o /dev/null -w '%{http_code}\n' http://127.0.0.1:8080/

Uhlu lwezilaleli ngaphakathi kohlelo lusho iqiniso mayelana nekheli lokuxhuma, futhi i-docker port ibonisa lokho umnikazi akushicilela ngempela. Uma eyokuqala ibonisa i-127.0.0.1 kanti eyesibili ibonisa ukumephana kwehost, utholile ukungahambisani ngaphandle kokuthinta ukulungiselelwa kwe-VPN.

Khetha ukuthi indlela yokuphatha ingena kanjani

Kunezinhlelo ezintathu ezinengqondo. Shicilela kusiqukathi se-VPN bese ufinyelela kuso usuka kuhost noma kunethiwekhi yasendaweni. Beka ummeleli ophambene phambi kwesikhala samagama bese unikeza ummeleli iphothi elilodwa elivulekile. Noma gcina idashibhodi lifinyeleleka kuphela ngaphakathi kwesikhala samagama ngokusebenzisa iseshini ye-exec noma ithumbu le-SSH, okuwukudalulwa okuncane kakhulu nokunethezeka okuncane kakhulu.

Ukuthi yikuphi okufanele kuncike ekutheni ubani udinga isixhumi nokuthi uvela kuphi. Umlawuli oyedwa kuhost efanayo weneliseka ngokuxhuma ku-loopback. Ithimba elifinyelela ngokusebenzisa i-VPN lidinga indlela ehlosiwe kanye nomnikazi oqanjiwe. Ukukhetha inketho yommeleli kukunikeza i-TLS namalogi okufinyelela, ngenani lesinye isakhi esidinga ukugcinwa sikhona esikhathini samanje.

Vula iphothi lokuphatha ngaphandle kokuvula konke

Inqubomgomo yohlelo lweklayenti ye-VPN yokufinyelela kwasendaweni noma yokukhiya ingalahla isicelo sokuphatha esingenayo ngisho nangenkathi ithumbu eliphumayo lisebenza ngokugcwele. Vumela ukukhishwa okukodwa okubhaliwe komthombo nephothi okuhlosiwe, bese uqinisekisa ukuthi ukuvikelwa okuvamile kwethumbu akukashintshi. Ukucisha iswishi yokuphuthuma ukuze idashibhodi lilayishe ukushintsha ukulawula kwangempela ngethebhuli yesiphequluli.

Shiya ukuqinisekisa kohlelo uqobo kuvuliwe. Ukuba ngaphakathi kwesitaki esixhunywe ku-VPN akugunyazi wonke umsebenzisi wasendaweni noma yonke idivayisi engafinyelela kuhost, futhi iphaneli yokuphatha engenakho ukuqinisekisa ngemuva kwethumbu iseyiphaneli yokuphatha engenakho ukuqinisekisa.

Qinisekisa kudivayisi yokuphatha, bese uphinda uqinisekise kamuva

Hlola kumshini ozophatha isevisi ngempela, hhayi kuhost, bese uqinisekisa ngokwahlukile indlela ye-inthanethi edingwa uhlelo. Impumelelo yokuphatha ifakazela uhlangothi olulodwa futhi ayisho lutho ngokuphuma.

Hlola futhi ngemva kokuba isitaki sidalwe kabusha. Umnikazi wenethiwekhi oshintshiwe ushintsha isikhala samagama uhlelo oluxhuma kuso, futhi i-URL eyayisebenza ngaphambi kokubuyekezwa ingase ingabhekisi ndawo ngemva kwalokho. Bhala phansi ukumephana okushicilelwe nekheli lokuxhuma ukuze ukwakhiwa kabusha okulandelayo kube ukuhlola kwemizuzu emibili hhayi uphenyo oluphindwayo.

Izihloko ezihlobene