Okwembulwa amarekodi wohlelo lwasekhaya mayelana nokuxhumana kwe-VPN
Uhlelo lokusebenza luqopha ukuqala kwesevisi, izinguquko ze-adaptha kanye nokwehluleka kwemizila okungabhaliwe yinhlelo zokusebenza. Funda iwindi elincanyana elilodwa bese uxhumanisa.
Ikhompyutha ngayinye yedeski igcina irekhodi layo siqu lokuthi i-VPN yenzani, futhi ukukhishwa kohlelo lwesicelo ngokuvamile ukona okungaphelelanga kakhulu kuzo. Abaphathi besevisi babhala ukuthi iyunithi yaqala nini, i-kernel ibhala ukuthi isixhumi esibonakalayo savela nini, futhi isitaki senethiwekhi sibhala ukuthi imizila yehluleka nini ukusetshenziswa. Asikho kulezi zinsiza esazi ukuthi iklayenti lalihlose ukuthini, futhi iklayenti alazi ukuthi i-kernel yenzani ngesicelo sayo.
Ukufunda irekhodi elilodwa elinjalo ngokwahlukana kumema isiphetho esingalungile. Funda amabili, kusukela kumzuzu ofanayo, futhi ukulandelana kuyabonakala.
Izinsiza ezintathu namagama amathathu
Ku-Linux, iphephabhuku le-systemd libamba imilayezo yomjikelezo wokuphila kweyunithi evela ku-wg-quick@wg0 noma kusengezo se-VPN se-NetworkManager, futhi isigcinalwazi esiyindilinga se-kernel sithwala imilayezo yesixhumi esibonakalayo nokuhlela imizila. Ku-Windows, irekhodi lemicimbi lihlukanisa indaba phakathi kwabahlinzeki bohlelo, i-WLAN nokufinyelela kude, ngamunye unezihlonzi zayo. Ku-macOS, irekhodi elihlangene lithwala imilayezo eboshwe kumuhlelo ongaphansi i-Console yezithombe ewukhombisa ingxenye kuphela.
Amagama awahunyushwa. Isihlonzi somcimbi sokusetshenziswa kwenye inkundla asisho lutho kwenye, futhi isithombe-skrini sengxoxo ye-Windows asifakazi lutho mayelana neyunithi ye-Linux.
Okwabiwe yizo zontathu isigxivizo sesikhathi, umthombo kanye nobukhali, futhi yilowo nxantathu owenza kube nokwenzeka ukuxhumanisa phakathi kwerekhodi lamaklayenti nerekhodi lohlelo lokusebenza. Ukutholakala nakho kuyahluka: isiqukathi esingenalo iphephabhuku, isithombe se-Windows esifushanisiwe, noma izinga lerekhodi elincishisiwe ngesikhathi sokwakha kungafihla ungqimba oluphelele.
| Facility | What it records | What it cannot show |
|---|---|---|
| systemd journal | Unit start and stop, helper output, exit status | Whether packets actually reached the peer |
| Kernel and netlink | Interface creation, address assignment, route changes | Why the client asked for that configuration |
| Windows event log | Provider-specific connection and adapter events | Anything the provider chose not to log |
Umgqa oxhunyiwe ufakazani futhi ungafakazi ini
Umcimbi wokuqala kwesevisi ubhala ukuthi iyunithi yasendaweni yacelwa ukuthi iqale futhi ayizange iphume ngokushesha. Awubhali ukuxhawulana okuphelile, ukhiye weqembu ovumelekile noma umzila osebenzayo. Ukuthatha lowo mgqa njengobufakazi bethumbu kungukufunda okungalungile okuvame kakhulu kwalezi zirekhodi. Umgqa ufakaza inhloso nesimo senqubo, futhi akukho lutho nhlobo mayelana nokufinyeleleka.
Isimo sokudlulisela phambili siwukubhekwa okuhlukile, futhi siza etafuleni lokuhlela imizila hhayi kunoma yiliphi iphephabhuku.
Umcimbi we-adaptha ungachaza ukwehluleka okuthule: isixhumi esibonakalayo senyuka, ikheli labelwa, futhi imizila ayizange ifakwe ngoba umthetho wenqubomgomo wayenqaba. Kulolo kulandelana wonke umgqa obonakalayo ubonakala uphilile kuyilapho kungahlelelwa lutho, futhi indlela eyodwa yokukubona iwukuqhathanisa izigxivizo zesikhathi zerekhodi netafula lokuhlela imizila ngasikhathi sinye. Gcina ukulandelana kwemicimbi yeklayenti uqobo eceleni kwakho kokubili, ngoba iklayenti iwumthombo owodwa owazi ukuthi lacela ini. Amaqiniso amabili owaludingayo ndawonye awavamile ukuvela emgqeni munye.
Ukuxhumana kabusha kamuva kubhala phezu kwengxenye ethakazelisayo yalesi sithombe, ngakho thwebula iwindi ekuqaleni kokwehluleka hhayi ngemuva kwemizamo emithathu.
Xhumanisa iwindi elincanyana
Bhala isikhathi somzamo kanye nesifunda saso sesikhathi, bese ukhipha imizuzu embalwa eyizungezile. Iphutha lokuqala ewindini licishe lihlangule emgqeni wokuqamuka okhulunywa ngamathikithi okusekela.
journalctl -u wg-quick@wg0 --since "today 09:00" --until "today 09:20" ip route show table all | grep wg0 log show --last 20m --predicate 'subsystem == "com.apple.network"'
Umyalo ngamunye uphendula ingxenye ehlukile yombuzo: owokuqala unikeza umjikelezo wokuphila, owesibili isimo sokudlulisela phambili, owesithathu uhlelo olungaphansi lwenethiwekhi lwe-macOS. Ku-Windows, hlunga irekhodi lohlelo ngokwegama lomhlinzeki esikhundleni sokuskrola yonke isiteshi, futhi ukhiphe kuphela imicimbi ehambisanayo.
Gcina isiqeshana sincane ngokwanele ukuthi umfundi angasilandela. Iwindi lemizuzu engamashumi amabili elinezenzeko ezine ezihlobene lisekela isiphetho; ukukhishwa kosuku lonke olunezinkulungwane zemigqa akusekeli lutho.
Lapho kuma khona lawa marekhodi
Amarekhodi asendaweni achaza idivayisi, hhayi indlela. Awakwazi ukukhombisa ukuthi umhlinzeki wagcina ini, ukuthi isikhathi sokuxhumana sashayiswa nesikhwama sokungena yini, noma ukuthi indawo yokuyisa yabona ini. Isitatimende somhlinzeki sokuthi akagcini amarekhodi asisho lutho ngohlelo lokusebenza ekwadlalayo, futhi umcimbi wasendaweni awufakazi lutho ngamarekhodi omlando womhlinzeki.
Futhi athwala idatha yomuntu siqu eningi kunalokho obekulindelekile: amagama abasebenzisi, amagama ezihambeli, izindlela zokufaka kanye nezihlonzi zedivayisi zivela emilayezweni ejwayelekile yohlelo ngisho lapho kungekho okuqukethwe kokuphequlula. Susa lezo ngaphambi kokunamathisela noma yini ethikithini, futhi gcina okwangempela ngaphansi kwezilawuli zokufinyelela ezijwayelekile.
Kudivayisi ephethwe, cela isiqeshana esifanele ku-IT esikhundleni sokuzama ukususa ukubhalwa kwamarekhodi enhlangano. Umgomo wokuxilonga umbuzo owodwa omncane ophendulwa imithombo emibili, hhayi umlando ophelele womshini.