Yimiphi imisebenzi yesofthiwe i-gateway ye-OpenVPN engenasikrini eyidingayo
I-gateway encane ye-OpenVPN idinga isevisi yomhubhe ehlosiwe kanye nendlela yokuphatha, hhayi yonke indima yesiphakeli engakhethwa. Hlukanisa umhubhe ne-SSH ne-PKI.
Umshini ozinikezele ku-gateway ye-OpenVPN udinga ukufakwa kwesiphakeli okusekelwayo kanye nesofthiwe yemisebenzi ewenza ngempela. Imenyu yokufaka enikezela nge-SSH, ukusingathwa kwewebhu nezinye izindima zesiphakeli ayilona uhlu lwezidingo zangaphambili ze-OpenVPN. Ukusetshenziswa ngaphandle kwesikrini kufanelekile ngokuphelele. Okubalulekile ukuhlukanisa imisebenzi emithathu: ukuthwala umhubhe, ukuphatha umsingathi nokukhipha izifakazelo.
Lona uhlelo lokubala engilisebenzisayo, kanye nokuhlolwa okuvala isinyathelo ngasinye.
1. Nikeza isevisi yomhubhe iphakethe neprofayela yayo
Umhlahlandlela wesiphakeli se-OpenVPN we-Ubuntu usebenzisa iphakethe le-openvpn lokusabalalisa nomugqa womyalo nokulungiselelwa kwesevisi. Iphakethe elifanayo lisebenza njengeklayenti le-Linux, futhi ukulungiselelwa kukhetha indima.
Lokho kusho ukuthi ukufaka i-GUI yeklayenti akuyona into eguqula umsingathi ube yisiphakeli, nokuyisusa akuyona into eyenza kungabi nasikrini. Bhala ukuthi iyiphi iprofayela efundwa yisibonelo esisebenzayo, ngoba ifayela lesibili lokulungiselela endaweni efanayo lingalayishwa ngaphandle kokuthi kube nomuntu oqaphelayo, futhi i-daemon ibika impumelelo kuzo zombili izimo. Uma kunezinhlobo ezimbili zeprofayela, umphathi wesevisi unquma ukuthi iyiphi enqobayo, futhi leso sinqumo singesamanothi akho hhayi ukuqagela.
2. Nquma indlela yokuphatha ngaphambi komhubhe
I-OpenSSH ivela kuphakethe elihlukile le-openssh-server futhi isebenza njengesevisi yayo. Iyawusizo lapho umphathi kufanele afinyelele umshini nge-SSH, kodwa OpenVPN ayidingi isiphakeli se-SSH ukuze ishintshisane ngamaphakethe e-VPN. Ikhonsoli yasendaweni noma umzila wokuphatha wepulatifomu ogunyaziwe kungenye indlela evumelekile. Nquma ukuthi uncike kuyiphi ngaphambi kokushintsha umzila noma ukuhlunga, ngoba umhubhe omusha akumele ube yindlela eyodwa engakahlolwa yokuzilungisa.
3. Khipha izifakazelo kumnikazi ogunyaziwe
Isibonelo se-Ubuntu sifaka i-easy-rsa eduze kwe-OpenVPN ukuze kwakhiwe i-PKI encane, okuyindima yokukhipha izifakazelo hhayi isevisi yomhubhe esebenzayo. Uma inhlangano isivele inenqubo yokukhipha egunyaziwe, yisebenzise esikhundleni sokwakha i-CA engahlobene nje ngoba isifundo siqukethe eyodwa. Gcina ukhiye wangasese nesitifiketi se-gateway kuhlukile kukhiye wokusayina we-CA, futhi khetha indawo yokusayina neyokugcina ngamabomu. Ukukopisha yonke ifayela le-PKI kuwo wonke umsingathi akusona isidingo sesofthiwe.
4. Shiya izengezo zedeskithophu kumadeskithophu
Umhleli we-NetworkManager noma isengezo sokungenisa sinenjongo kumshini osebenzisa lowo mkhondo womsebenzi. Akusona isici sesiphakeli esingeziwe esidingekayo ngoba i-gateway ikhuluma i-OpenVPN.
Khetha umnikazi oyedwa woxhumano, futhi ungaqali ikhophi yesibili yeprofayela efanayo ephethwe yideskithophu.
5. Yamukela i-gateway ngeklayenti langempela
Amaphakethe ambalwa awukona i-gateway ephelile. Isiphakeli sisadinga umlaleli ogunyaziwe, ubunikazi, imizila, ukudlulisa lapho kudingeka, inqubomgomo encane yodonga lomlilo kanye nomzila wokubuya ohlosiwe. Bhala ukuthi amalogi ayo avela kuphi nokuthi izibuyekezo zisetshenziswa kanjani, ngoba lezi zimpendulo ezimbili zinquma ukuthi ukwehluleka kuzotolikwa kanjani kamuva.
Idizayini yokuphuma ku-inthanethi nedizayini yokufinyelela kunethiwekhi yangasese zinezidingo ezahlukene zokudlulisa, ngakho nquma ukuthi wakha eyiphi ngaphambi kokuvula noma yini. Vusa iklayenti elilodwa eligunyaziwe futhi uhlole insiza ehlosiwe esikhundleni sesikhombisi somhubhe. Bese uqalisa kabusha isevisi ngendlela elawulwayo futhi uqinisekise indlela yokuqalisa ngaphandle kokuqapha, ngoba i-gateway ephuma kuphela lapho kukhona obukayo ayikakasetshenziswa.