Iyiphi ikheli izoqoqo elizoyinikeza ekuxhumekeni okulandelayo?
Amakheli eqoqo alandela ukulandelana okungewona okungahleliwe: kuqala ikheli elikhunjulwayo, bese kuba elikhululekile elingasetshenziswanga isikhathi eside kakhulu. Funda lokhu ngaphambi kokubeka umthetho.
Umthetho owawuhambisana izolo awusahambisani namuhla ngoba iklayenti libuyile nekheli elihlukile lomhubhe. Isabi sokwaba asikona okungahleliwe, futhi ukwazi ukulandelana kwaso kushintsha lokho kumangala kube umcimbi obikezelayo. Sikhetha ikheli iklayenti elifanayo elalinalo ngaphambilini, sihlehlela ekhelini elikhululekile elingasetshenziswanga isikhathi eside kakhulu, futhi sikhohlwa konke uma ungasinikezi indawo yokukhumbula. Imithetho encike ekuqashiseni iyaqhubeka ihambisana kuze kube usuku lapho, buthule, ingasahambisani.
Ukulandelana okulandelwa isabi sokwaba
Ngesikhathi esisodwa nge-common name ngayinye, isabi sokwaba sibheka kuqala ikheli iklayenti elifanayo elalisisebenzisa ngaphambilini futhi manje elikhululekile. Uma lelo kheli lingekho, sithatha ikheli elikhululekile elibe lingasebenzi isikhathi eside kakhulu. Uma izikhathi eziningi zivunyelwe ngesikhathi esisodwa egameni elifanayo, ukukhethwa kwekheli langaphambilini akusebenzi futhi kusetshenziswa ikheli lokuqala elikhululekile, ngoba izikhathi zithathwa njengezindawo ezilinganayo ezihlukene.
| Situation | Address chosen | Practical effect |
|---|---|---|
| Reconnect, old address still free | The remembered address | Rules appear stable for days |
| Old address taken by another client | Least recently used free address | A working rule silently stops matching |
| Concurrent sessions, same name | First free address, per session | One identity can hold several leases |
Imiphumela emibili ilandela ngokushesha. Iklayenti elixhuma futhi ngokushesha ngokuvamile ligcina ikheli lalo, yingakho kungekho muntu obonayo lolu hlelo kuze kube lishintsha. Futhi enye idivayisi exhuma kulelo windi elincane ingathatha ikheli ngesikhathi likhululekile isikhashana, ngemuva kwalokho iklayenti lokuqala lithola okunye futhi wonke umthetho osuselwe kunombolo endala awulungile. Akukho mcimbi kulawa mabili okhiqiza umugqa wokubhalisa obukeka njengephutha.
Kungani ukuqashisa kubukeka kuzinzile bese kusuka
Ukuzinza lapha kuyisici esivela ekuxhumaneni kabusha okufika ngaphambi kokuba omunye umuntu afune ikheli. Akusona isithembiso, futhi akusetshenziswa ngenkathi iklayenti lixhunyiwe. Hlela ukuthi ikheli lizoshintsha esikhundleni sokumangala ngalo. Iqoqo elilingana nje nenani lamadivayisi lenza izingqubuzana zibe yinto evamile, ngoba ukuhlehlela ekhelini elingasetshenziswanga isikhathi eside kakhulu akunakho cishe lutho ongakukhetha.
Ukuvumelana kwesikhathi esiphakeme yinombolo okufanele kulinganiswe ngayo, hhayi inani labasebenzisi. Umuntu ohlola kumadivayisi amabili ngesikhathi esisodwa, noma iklayenti elixhuma futhi ngaphambi kokuphela kwesikhathi esidala, uthatha ukuqashisa okubili isikhashana. Iqoqo elilinganiswe ngenani labantu kuphela lizokhiqiza ukushintshana abantu abakubeka eceleni kweseva.
Ifayela lokuqhubeka likhumbula, aligcini indawo
Ikheli elisinda ekuqalweni kabusha kwesevisi lidinga ifayela lokuqhubeka. Ligcina igama leklayenti nekheli ngenkathi kuvalwa futhi likufunda futhi lapho isevisi iqala, yingakho ukuqalwa kabusha okuhleliwe akusaphazamisi yonke imithetho oyibhalile.
ifconfig-pool-persist /etc/openvpn/ipp.txt
server 10.8.0.0 255.255.255.0Lokho elingakwenzi ukugcina ikheli ngenkathi iklayenti lingekho. Kulelo gebhe isabi sokwaba sikhululekile ukunikeza inombolo komunye umuntu, futhi ifayela libe selibhala ukuthandwa okuphelelwe yisikhathi umxhumi olandelayo ongakwazi ukukufeza. Kuthatha njengomkhondo othuthukisa ukuziphatha kokuqalwa kabusha, hhayi njengekheli elingaguquki.
Hlola iqoqo ngokumelene nayo yonke inethiwekhi encane ehambisiwe ngenkathi usefayeleni. Ibanga elihlangana linikeza amakheli iseva engakwazi ukuwahambisa, futhi uphawu iklayenti elixhumayo, elithola ikheli futhi elingafinyeleli ndawo.
Ukubeka ikheli ngendlela efanele
Lapho umthetho wodonga lomlilo noma irekhodi le-DNS ludinga ngempela ikheli eliqinile, linikeze esikhundleni sokulithemba. Umugqa wokumisa weklayenti ngayinye ungaphusha ikheli nesifihlo ngqo, futhi lowo mugqa uxhumene negama leklayenti elisebenzayo.
# client-config-dir entry for "laptop-acme"
ifconfig-push 10.8.0.50 255.255.255.0Gcina amakheli aqinile ngaphandle kweqoqo eliguqukayo ukuze isabi sokwaba singalokothi linikeze inombolo efanayo kwesinye isikhathi. Bese uhlola ukwakheka komhubhe, ngoba kushintsha ukuthi iklayenti ngalinye lisebenzisa amakheli amangaki eqoqo: ukuhlelwa kwangaphambilini kwekhomba-kuya-kwekhomba kusebenzisa ibhlokhi encane ngeklayenti ngalinye, kuyilapho ukuhlelwa kwenethiwekhi encane kusebenzisa ikheli elilodwa kulowo nalowo. Iqoqo elibonakala likhululekile ngaphansi kokuhlelwa okukodwa lingaphela ngaphansi kokunye.
Qinisekisa umphumela kuklayenti esikhundleni sokuthemba ukubalwa kweseva. Lapho isikhathi sibuya, bheka ikheli lesixhumi nesikhombisi esiphushelwe, ngoba irekhodi kuseva lingase libike ikheli eliceliwe ngenkathi isixhumi ngokwaso siphethe elinye.
Ikheli elikude liwumbuzo ohlukile
Ikheli emgqeni we-remote weklayenti kufanele lifinyeleleke ngaphambi kokuba kube khona umhubhe. Ukubeka ikheli leqoqo lapho, njengendawo yokugcina yomhubhe yeseva uqobo, kusho ukuthi iklayenti lizama ukufinyelela endaweni yokugcina ngomhubhe elingakawaki, futhi umphumela uyindilinga noma ukulinda buthule esikhundleni sendlela emfushane.
Sebenzisa indawo yokugcina yomphakathi enikezwe umqhubi, futhi gcina iqoqo kulokho elakhelwe kona: amakheli ngaphakathi komhubhe. Ukubhala ibanga leqoqo, izabelo eziqinile kanye nendlela yokuqhubeka endaweni eyodwa kusindisa umuntu olandelayo ekuthatheni ukuqashisa ngakunye njengokungahleliwe.