Okwenziwa yigxathu le-Proxy kuphrofayela ye-VPN yakwa-Apple
Ukugcwalisa igxathu le-proxy akukwenzi i-VPN ibe yi-HTTP. Kukhona ukuxhumana okubili okuhilelekile, futhi igxathu lifinyelela kokukodwa kuphela.
Ukugcwalisa igxathu le-Proxy kusimo se-VPN sakwa-Apple kwenza kube sengathi kufanele kuqondise umhubhe ngewebhu yesikhulumi. Akwenzi lokho. Igxathu likhetha umxhumanisi osezingeni lohlelo lwezinhlelo zokusebenza kuthrafikhi uhlelo oluhambisanayo olunquma ukuyithumela lapho. Kodwa ukuxhumana kwekhasimende le-VPN uqobo nesango laso kubuswa iphrothokholi, isilaleli nokuthuthwa okulungiselelwe wena, futhi lezo yizinqumo ezihlukene.
Ukuxhumana okubili, abanikazi ababili
Noma yikuphi ukulungiselela okunjalo kuhlanganisa ukuxhumana kusuka kukhasimende kuya esangweni nokuxhumana kusuka ohlelweni kuya lapho kuywa khona. Ingxenye ye-Proxy ikhuluma ngokwesibili, nakuba isekuphrofayela efanayo nowokuqala.
| Connection | What decides its behaviour |
|---|---|
| VPN client to VPN gateway | The supported protocol, the listening port, the transport and the network policy in between |
| Application to a selected proxy | The application's own proxy support, the configured proxy policy, and the route to that next hop |
Incwadi yokubhekisela yezilungiselelo ze-proxy yakwa-Apple ibala i-HTTP, i-HTTPS, i-SOCKS nokulungiselelwa kwe-proxy okuzenzakalelayo, okuchaza izinketho ze-proxy zezinhlelo. Akukho kulokhu okufakiwe okusho ukuthi iphakethe le-IPsec noma le-WireGuard lifinyelela kanjani esangweni.
Nakhu ukuhlola okusheshayo okuxazulula lokhu. Shono isikhulumi nephrothokholi okubika kukho ikhasimende le-VPN kumlandu walo. Uma lowo mugqa usathi i-UDP 500 noma i-UDP 51820, igxathu le-proxy alukashintshi lutho kuwo.
Nini igxathu liyithuluzi elifanele
Kunesimo sangempela lapho i-proxy ima phambi komhubhe, kodwa leyo yisici sekhasimende hhayi igxathu lephrofayela. Incwadi ye-OpenVPN ibhala --http-proxy kokuxhumana kwe-TCP okuthwelwa nge-proxy ye-HTTP CONNECT. Ukuyisebenzisa kudinga inketho yekhasimende ehambisanayo, isango elifinyeleleka ngaleyo ndlela, kanye ne-proxy evumela i-CONNECT esikhulumini esisetshenziswayo.
Uma ikhasimende lakho linikeza leyo nketho futhi inethiwekhi ivumela i-CONNECT esikhulumini, kungase kusebenze. Uma ikhasimende lingayinikezi, ukugcwalisa i-proxy yesistimu akunamphumela emhubheni nakancane.
Nini kungashintshi lutho
Iphrofayela ye-IKEv2 noma ye-IPsec ayibi umhubhe we-HTTP ngoba igxathu le-proxy ligcwaliwe. I-WireGuard nayo ayibi, njengoba ifomethi yayo yokulungiselela ingenalo umqondo we-proxy. Ukushintsha isikhulumi sesango nakho akushintshi iphrothokholi yaso. Futhi indawo yokuphela ephendula i-HTTPS evamile ayiyona isilaleli se-VPN ngokuzenzakalelayo.
Lolo gibe lufanayo lubamba abantu abakopisha amaphrofayela enkathi ye-PPTP emihlahlandleleni emidala ye-iPad. Izinketho zisekhona kusixhumi-to-nxazulu; insizakalo engemuva kwazo ayisakhulumi lolo hlelo.
Ukunquma ukuthi yiluphi ungqimba okufanele kulungiswe
Buza ukuthi yiluphi ungqimba olwehlulekile ngaphambi kokushintsha noma yini. Uma ikhasimende lingakwazi ukusungula isikhathi, inkinga isekuthuthweni futhi igxathu le-proxy alihambelani. Uma umhubhe usebenza kodwa uhlelo olulodwa lungakwazi ukufinyelela isiphakeli salo, kufanele kubhekwe i-proxy yohlelo. Uma umhubhe usebenza futhi zonke izinhlelo zehluleka, abasolwa umzila kanye ne-DNS ngaphakathi komhubhe.
Esimeni sokuqala, buza umqhubi ukuthi yikuphi ukuthuthwa noma inethiwekhi ehlukile egunyaziwe ayisekelayo. I-OpenVPN phezu kwe-TCP 443 ikhona ngoba ezinye izinethiwekhi zivumela lokho kuphela, futhi isadinga ukuthi isiphakeli silalele.
Ungakuthati isikhulumi se-UDP esivaliwe njengemvume yokuqamba. Gcina ukuhlolwa kwesitifiketi noma kobuwena besango kungashintshiwe esikhundleni sokukucisha ukuze kuhambisane ukuxhawulana.
Qinisekisa zombili izingqimba ngazinye
Qinisekisa kuqala umhubhe: bheka ikhasi lesimo lekhasimende ukuthi kunesikhathi esisunguliwe nokuthi inani lamabhayithi alilona uziro. Bese ufunda isilungiselelo se-proxy ngqo, usebenzisa scutil --proxy ekulungiseleleni okusebenzayo noma networksetup -getwebproxy Wi-Fi enanini eligciniwe. Bese uhlola uhlelo olulodwa oluhlonipha i-proxy yesistimu nolunye oluyishaya indiva, ngoba izinhlelo eziningi zomdabu ziyishaya indiva.
Imiphumela emithathu, izilungiso ezintathu ezahlukene.
Uma zombili izingqimba zibika impumelelo kanti uhlelo lusahluleka, bheka ukuhlukaniswa komhubhe, i-DNS nezilungiselelo zenethiwekhi zohlelo uqobo. Lolo ungqimba lwesithathu, futhi nalolo akulona igxathu le-proxy.