Yini eshintshayo ngempela uma ushintsha izilungiselelo ze-VPN ezigciniwe ku-macOS
Ukushintsha i-VPN yase-Mac egciniwe akukona ukushintsha iphrofayela. Bheka okushintshayo emizileni, ku-DNS nasezinkombeni, nendlela yokuqinisekisa umhubhe owutholile.
Uvula uhlu lwe-VPN, ukhetha enye ingeno egciniwe futhi ulindele ushintsho oluhlanzekile: ikheli lokuphuma elisha nakho konke okunye kungashintshile. Leso sici sokucabanga okufanele ushiye kuqala. Ku-macOS i-VPN egciniwe iyisevisi ephelele yenethiwekhi hhayi isethi yangaphambili, ngakho ukushintsha izisevisi kungashintsha ngasikhathi sinye umzila, i-DNS nokuqinisekisa. Ibha yemenyu ikutshela ukuthi iyiphi isevisi esebenzayo; ayikutsheli ukuthi umhubhe ongaphansi kuyo uhambisana nalokho obukuhlosile.
Uhlu olugciniwe akusilo isikhethi sephrofayela
Yonke ingeno kuzilungiselelo zesistimu > Inethiwekhi iyisevisi yayo, enekheli layo leseva, i-akhawunti, indlela yokuqinisekisa, amaseva e-DNS nezinketho ezinjengokuthumela yonke imithwalo ngoxhumano lwe-VPN. Izinguqulo ezindala zigcina uhlu olufanayo kuzilungiselelo zesistimu. Izingeno ezimbili zingakhomba egameni elifanayo lomsingathi futhi ziziphathe ngendlela ehlukile, ngoba iprotokholi noma isandiso sekhasimende sinquma ukuthi umhubhe wakhiwa kanjani.
Amakhasimende ezinkampani zangaphandle agcina izinhlu ezihlukene. I-Tunnelblick ifunda izilungiselelo kusikhwama sayo, i-WireGuard igcina uhlu lwayo lwemihubhe, kanti i-OpenVPN Connect igcina amaphrofayela ngaphakathi kohlelo lokusebenza. Amanye abhalisa isilungiselelo ohlelweni; amanye agcina konke ngaphakathi kohlelo futhi awaveli ohlwini olwakhelwe ngaphakathi. Ngakho «shintshela kokugciniwe» kusho izinyathelo ezihlukene kuye ngokuthi iyiphi ihlelo eliphethe iphrofayela.
scutil --nc list iphrinta izisevisi ze-VPN ezibhaliswe kusilungiselelo sesistimu, namagama asezingeni lokucaphuna. Sebenzisa lawo magama ngqo uma ubhala umbhalo wokushintsha, futhi ungacabangi ukuthi uhlu luhlanganisa wonke umhubhe wangaphandle.
Ukushintsha kushintsha ini ngempela
Izinto ezine zihamba ndawonye uma isevisi esebenzayo ishintsha. Umzila ozenzakalelayo ulandela umhubhe omusha uma leyo sevisi ithumela wonke umthwalo; uhlu lwezixazululi lushintsha lube amaseva e-DNS ashiwo isevisi; ukuxhumana okusha kuthatha ikheli lomhubhe omusha njengomthombo; futhi izinkombi ezisetshenziswayo ngezesevisi entsha. Isilungiselelo sendabuko nephrofayela yohlelo azikwazi ukushintshana, ngisho zombili ziphela esangweni elifanayo.
| What you assume | What the system does |
|---|---|
| Same server name means same tunnel | Protocol, certificate and account are per service |
| All traffic follows the active VPN | Only when Send all traffic over VPN is on |
| DNS switches with the VPN | Only if that service defines DNS servers |
| Disconnect ends the connection | On Demand or a management profile can reconnect |
| Open sessions survive the switch | TCP sessions tied to the old address stall |
Ingxenye ye-DNS iyona eyenza abantu bamangale. I-macOS igcina ukulandelana kwezixazululi, futhi scutil --dns ikhombisa ukuthi iziphi izixazululi zisetshenziswa nakuphi uxhumo. Isevisi ye-VPN engenazo izixazululi ze-DNS ezilungiselelwe ingavumela isixazululi se-Wi-Fi ukuba siphendule, ngakho uthola ikheli lomphakathi elisha ngokuziphatha kwe-DNS endala futhi uphethe ngokuthi ukushintsha kusebenze nengxenye.
Kungani isilungiselelo esidala sibuya
Uma unqamula uxhumano futhi leyo sevisi ixhumana futhi ngemva komzuzu, bheka i-On Demand kuqala. Umthetho wokuxhumana ngokucela ungabuyisela isevisi uma uhlelo luxazulula isizinda esihambisanayo, futhi iphrofayela yokuphatha ingaphoqa umthetho ofanayo. Ukususa ingeno akuvamisile ukulungisa lokhu: isilungiselelo esifakwe ngephrofayela sivame ukubuya ekugqekeni kwephrofayela elandelayo, kanti esenziwe ngesandla singashiya iphasiwedi yaso ku-Keychain ngenkathi isevisi ingasekho.
Ukuqala isevisi yesibili akuvamisile ukumisa eyokuqala. Kuye ngekhasimende neprotokholi ungase ugecine ngemihubhe emibili namasethi amabili emizila, futhi ukulandelana kwezisevisi kanye nokucacisa komzila yikho okunquma ukuthi yikuphi okuthwala umthwalo, hhayi isithonjana osicinde ekugcineni. Hlola izixhumanisi ngaphambi kokucabanga ukuthi ushintsho lwenzekile.
Qinisekisa umhubhe, hhayi uphawu
Dlula embonini yesistimu uqobo ngaphambi kokuthinta izilungiselelo.scutil --nc status "Name" ibika lokho okukholelwa isistimu;ifconfig ikhombisa ukuthi uxhumo lwe-utun lunekheli yini;netstat -rn -f inet ikhombisa ukuthi umzila ozenzakalelayo ukhomba kuphi;scutil --dns ikhombisa isixazululi esisetshenziswayo ngempela. Bese uvula uxhumano olusha futhi uqinisekise ikheli lokuphuma, ngoba ikhasi oselungene kulo lingase lisasebenzisa isokhethi eboshelwe kumhubhe wakudala.
Uma i-DNS isaphendula isuka kunethiwekhi yasendaweni, qhathanisa amaseva alungiselelwe esa sevisi nohlu lwezixazululi. Uma umzila ozenzakalelayo usakhomba kuxhumo lomzimba, isevisi isemhubheni ohlukanisiwe noma ayixhumene ngokugcwele. Kokubili kuyimiphumela yesilungiselelo, hhayi ubufakazi bekhasimende eliphukile.
Ukulandelana kokushintsha okugwema ukumangala
- Bhala isevisi yamanje nokuthi ingabe iphrofayela iyilawula yini.
- Nqamula kuyo kuqala uma imihubhe emibili ingenakuhlala ndawonye.
- Xhuma indawo oya kuyo bese ulinda Ixhunyiwe, hhayi Iyaxhumana.
- Hlola umzila ozenzakalelayo, uhlu lwezixazululi nekheli lokuphuma elisha.
- Qalisa kabusha izinhlelo ezigcina izikhathi ezinde.
Gcina ingeno endala kuze kube yilapho entsha idlula lezo zivivinyo, futhi unikeze ingeno ngayinye igama elihlukile; amalebula afanayo enza kube nzima ukuchaza ukwehluleka okulandelayo. Usizo lwe-Mac lwe-Apple luchaza uhlangothi lwendabuko ku Ukusetha uxhumano lwe-VPN ku-Mac, okuyisithenjwa okufanele sibhekwe ngaphambi kokuhlela isilungiselelo esilawulwayo.
Uma ukukhetha kubuyela emuva, kubheke kuqala njengenqubomgomo noma i-On Demand. Qinisekisa ukuthi isilungiselelo ngesikabani nokuthi sethwe yini ukuxhumana ngokuzenzakalela, bese unquma ukuthi ushintsha isevisi noma ulwa nephrofayela.