Yini i-bypass-dhcp eyengeza ngempela kuhlelo lwemizila ye-OpenVPN

Iphrofayela ephethe redirect-gateway def1 bypass-dhcp ihlanganisa ukushintshwa komzila ozenzakalelayo we-IPv4 nokunye okucashile okuncane. Abantu bafunda igama lokugcina bese belindela isixazululo esijwayelekile sezixhumo zikamaselula, bese bechitha intambama kwithiyori ye-DHCP leli flag engakaze iliyisekela. Ingxenye ngayinye yenza into eyodwa, futhi okucashile kuncane kakhulu kunodumo lwayo.

Hlukanisa amafulegi ngaphambi kokuthi uhlobanise ukwehluleka okwenzeka kunethiwekhi yeselula kuphela nokwabiwa kwamakheli. Izingxenye ezimbili zalowo mugqa azihlobene nakancane.

Amafulegi amabili, imisebenzi emibili engahlobene

Nge-def1, iklayenti lengeza imizila emibili eyingxenye yomzila ozenzakalelayo we-IPv4 esikhundleni sokushintsha umzila ozenzakalelayo osekhona. I-0.0.0.0/1 ihlanganisa ingxenye engezansi yesikhala samakheli kanti i-128.0.0.0/1 ingxenye ephezulu, ngakho ndawonye zifinyelela yonke indawo ngenkathi ngayinye ihlala icacile kune-0.0.0.0/0. Ngakho umzila wokuqala ozenzakalelayo uhlala etafuleni ngaphandle kokunqoba leyo mphendulo, okugcina isango elidala lifinyeleleka kukho konke iklayenti elikuhambisa ngokusobala. Futhi kushiya imizila emibili ozenzakalelayo egqagqene etafuleni, yingakho ukukhishwa kwemizila kungabonakala kuxakile kunalokho okuphakanyiswa iphrofayela.

I-bypass-dhcp ihlukile, futhi ayithinti umzila ozenzakalelayo nakancane. Incwadi ye-OpenVPN 2.6 iyichaza njengokwengeza umzila oqondile oya kuseva ye-DHCP engekho kusubneti yasendaweni, ukuze ukuthuthwa kokuqashwa kuphume ngaphandle komhubhe, futhi iphawula ukuthi le nkambiso yenzelwe kumaklayenti e-Windows futhi ingase ingatholakali kwenye indawo.

Isizathu sokuba ikhona sincike emshinini. Lapho imizila eyingxenye yomzila ozenzakalelayo isibambe ukuthuthwa okuphumayo, ukuvuselelwa kwe-DHCP okuqondiswe kuseva esenethiwekhi yomzimba kuzohambiswa kungene emhubheni ngaphandle uma kukhona okubopha lelo kheli kusixhumi esidingakalayo. Ifulegi liyabopha.

Okucashile kuhlanganisa ini ngempela

Itafula eliyisibonelo ngemva kokuxhumana okuphumelelayo libonisa ukuma: imizila emibili eyingxenye yomzila ozenzakalelayo edabula umhubhe, nomzila owodwa womsingathi oya kuseva ye-DHCP odabula isango lomzimba. Yifunde njengokuma, hhayi njengamakheli akho.

0.0.0.0/1        via 10.8.0.1      dev tun0
128.0.0.0/1      via 10.8.0.1      dev tun0
192.168.1.1/32   via 192.168.1.254 dev wlan0

Lowo mugqa wesithathu usho indawo eyodwa. Akuwukuhlelwa kwesixazululi, akuwukuvunyelwa okuvamile kwenethiwekhi yasendaweni futhi akuwumthetho wokuphuma kuseva. Ifoni ekunethiwekhi yeselula ingase ingabi naseva ye-DHCP iklayenti elingayibona ngale ndlela, yingakho ifulegi lingashintshi lutho lapho.

Hlola ukuthi iklayenti lifake ini ngempela

Hlukanisa inketho ebhalwe kuphrofayela, inketho enikezwa iseva nomzila owasetshenziswa ngempela umnikazi wokuxhumana. Iklayenti elinqaba ifulegi elingasekelwe lingase ligcine ukuhlolwa okusele, ngakho umhubhe uyaphuma futhi okucashile kumane kungabikho. Funda ilogi yeklayenti ngokwalo kanye netafula lemizila eliwumphumela esikhundleni sokucabanga ukuthi umugqa osefikeni waqala ukusebenza. Ezintathu zalezi zingaba yiqiniso ngasikhathi sinye, futhi eyokugcina kuphela eshintsha lapho amaphakethe aya khona ngempela.

Gcina umzila oya endaweni yokuphela ye-VPN ukwazi ukusetshenziswa ngasikhathi sinye. Lokho kucashile kwendawo yokuphela kuyisidingo esihlukile kwesokucashile se-DHCP, futhi ngaphandle kwaso umhubhe ungabamba ukuthutha okugcina wona.

Endaweni yohlelo lokusebenza, hlola ukusesha okusebenzayo esimweni lapho kwehluleka khona. Imizila yasendaweni ecacile kakhulu, ukuhambisa ngomgomo kanye nokukhishwa ngohlelo lokusebenza konke kushintsha impendulo, ngakho ukuba khona kwemizila emibili eyingxenye yomzila ozenzakalelayo akuwuluhlu lwakho konke ukugeleza.

Indlela esele ayikho kuleli fulegi

Iseva isadinga imvume yokudlulisa ukuthuthwa kwe-inthanethi yeklayenti kanye nelungiselelo lokuphuma elingakubuyisela. Awukho umzila ohlangothini lweklayenti odala ukudluliswa noma ukuhunyushwa komthombo okungekho kuseva, futhi alikho ifulegi elithatha indawo yendlela yokubuya esebenzayo.

Ukuxazululwa kwamagama kanye ne-IPv6 kudinga umthetho wawo ngamunye. Ukushintshwa kwe-IPv4 akubhekisi isixazululi kuseva ohlangothini lomhubhe futhi akusunguli ukumbozwa kwe-IPv6, futhi iklayenti eliqondisa kabusha i-v4 kuphela lishiya umzila we-v6 ungathintwanga.

Qhathanisa isicelo esisodwa esivunyelwe esingenabungozi emzileni wokufinyelela osebenzayo nowehlulekayo, iphrofayela nendawo kugcinwe kunzima. Bhala ukuthi umehluko usekuxazululweni kwamagama, ekusungulweni komhubhe, ekukhethweni komzila noma ekuthuthweni okudlulisiwe, futhi gcina impendulo nephrofayela. Lelo rekhodi yilo elivimbela umuntu olandelayo ukuba asole i-DHCP ngenkinga engakwazi ukuyifinyelela.