Amalogi e-OpenVPN ngawabani: idaemon, i-rsyslog noma i-logrotate?

Ukujikeleziswa kwamalogi kwephuka ngendlela ebikezelwayo: izingxenye ezintathu ngayinye icabanga ukuthi ingumnikazi wefayela, futhi umphumela yilogi ejikelezisiwe eqhubeka ikhula ngenkathi entsha ihlala ingenalutho. Idaemon ibamba isichazi, i-logrotate iqamba kabusha indlela, kanti i-rsyslog ibhala kwenye indawo ngokuphelele. Khetha umbhali oyedwa nesijikelezisi esisodwa ngaphambi kokwengeza omunye umthetho enqwabeni. Uhlu lokuhlola ngezansi luhamba ngalolo hlelo ngoba isinyathelo ngasinye esilandelayo sincike kulo.

Nquma ukuthi ubani obhala ifayela

Imiklamo emibili isemthethweni. Kweyokuqala, inqubo ye-VPN ibhala ifayela ngokwayo ngokusebenzisa inketho yayo ye-log noma ye-log-append. Kweyesibili, ithumela amarekhodi kusibhali sehlelo, kanti i-rsyslog noma i-journald inquma ukuthi zizohlala kuphi.

Lezi ziyizindlela ezihlukile, akuyona izingqimba. Umkhandi ovula zombili ugcina unamafayela amabili angavumelani, futhi lelo olifundayo ngokuvamile elidala. Khetha indlela ngamabomu, bese ususa omunye umbhali.

Funda ukucushwa okusebenzayo kwensizakalo ngaphambi kokushintsha noma yini, kuhlanganise amafayela e-drop-in angase eqe ifayela le-unit. Umyalelo okhona kuphrofayela oyihlopha awusona ubufakazi bokuthi yiwo owalayishwa inqubo esebenzayo. Qhathanisa i-unit nezimpikiswano zenqubo, bese uqhathanisa namafayela ewavula ngempela.

Qamba idaemon ukuze isihlungi sibe mncane

Endleleni ye-syslog, nikeza idaemon ubunikazi obuhlukile bese uhlunga ngalo. Umthetho ohambisana negama lohlelo lwalesi sikhathi se-VPN ugcina amarekhodi ayo ngaphandle kwefayela elabiwe okwenqubomgomo yalo yokugcina okokunye.

Imitherho emincane yenza nombuzo olandelayo uphenduleke: iyiphi insizakalo eyakha lolu hlu? Isihlungi esihambisana nakho konke okunezwi elithi VPN sizobutha ngokukhululeka ithrafikhi yomhubhe wesibili futhi senze kokubili kube nzima. Hlanganisa nesihlonzi esinqunyiwe esinikezwa i-unit kusibhali.

Vala umthetho ngemuva kwesenzo ukuze amarekhodi angawi nendawo okuyiwo ngokuzenzakalelayo. Imigqa ephindwayo kumafayela amabili ibonakala njengephutha lokubhala kodwa empeleni iwukuma okungekho. Lokho kushiywa okukodwa kuphinda kabili izindleko zediski zenqubomgomo yokugcina.

Jikelezisa ngaphandle kokulahlekelwa isichazi

Lapho idaemon ibhala ifayela, i-logrotate iqamba kabusha indlela kodwa inqubo igcina isichazi sayo esivuliwe. Amarekhodi amasha aqhubeka angena efayeleni eliqanjwe kabusha kuze kube yilapho okuthile kuphoqa inqubo ukuthi ivule kabusha indlela yokuqala; yingakho ukujikeleziswa kungase kubonakale kusebenza ngenkathi ifayela elisha lihlala lingenalutho.

Isixazululo yisenzo se-postrotate esiqalisa ukuziphatha okubhaliwe kokulayisha kabusha noma kokuqala kabusha kwensizakalo. Ukuthumela isignali kusibhali kuyisenzo esihluke ngokuphelele futhi akwenzi lutho kudaemon egcina ifayela layo.

Lapho ukuvuleka kabusha kungenakwenzeka, i-copytruncate iyisipela: kopisha ifayela, bese ulisika endaweni. Igcina isichazi sisebenza ngenani lokulahlekelwa yikho konke okubhalwe phakathi kwekhophi nokusikwa, ngakho ukushintshana hhayi isixazululo. Ngaphansi komthwalo lelo gebe lingase ligwinye khona kanye ukwehluleka ozama ukukubamba.

Khetha okukodwa kwemibili ngefayela ngalinye futhi ubhale ukukhetha, ngoba ukuhlanganisa kukho endleleni eyodwa kudala izikhala okunzima kakhulu ukuzihlobanisa kamuva. Umfundi othola zombili izindlela kusijobelelo esisodwa akanakusho ukuthi iyiphi enegunya.

Setha ukugcinwa kusukela ewindini lomcimbi

Ukugcinwa, ukucindezelwa nosayizi ophezulu kufanele kuvele ekutheni ngempela ubheka emuva kangakanani. Iwindi lezinsuku eziyisikhombisa elinokucindezelwa nomkhawulo wosayizi siyisiqalo esifanele ekusetshenzisweni okuningi; inombolo ekopishwe kusifundo ayisilo.

Gcina inqubomgomo endaweni eyodwa. Uma i-logrotate ijikelezisa ifayela futhi ne-rsyslog iyijikelezisa, ukujikeleziswa kwesibili kuyanqoba futhi isimiso samagama sokuqala sisele njengokungcolile. Khetha umnikazi, vala okunye ukujikeleziswa, futhi ubhale leso sinqumo eceleni kwenqubomgomo.

Imibhalo ye-rsyslog ihlanganisa imodeli yayo yokuhambisa ngezinto neyezenzo, kanti imibhalo yensizakalo ye-OpenVPN ihlala inegunya ezinkethweni zokubhala zedaemon uqobo. Akukho kukho okubili okunquma inqubomgomo yakho yokugcina esikhundleni sakho.

Hlola ukujikeleziswa okukodwa nomcimbi omusha owodwa

Phoqa ukujikeleziswa okukodwa bese udala umcimbi omusha owodwa, njengokuqinisekisa okuhlulekile. Qinisekisa ukuthi irekhodi elisha livela efayeleni elisha nokuthi ifayela elidala liyeke ukukhula.

Bheka nezimvume zefayela elisha, ngoba ukujikeleziswa okulidala kabusha ngomunye umnikazi kwephula umbhali ekubhaleni okulandelayo futhi kudala igebe elibonakala njengokuwa. Qhathanisa umnikazi nemodi ne-akhawunti yensizakalo ngaphambi kokuhamba. Bese uqinisekisa ukuthi ingobo yombhalo ecindezelwe iyafundeka, ngoba ingobo umuntu engakwazi ukuyivula akuwukugcinwa. Ukufunda ngokushesha irekhodi elisha kakhulu efayeleni elidala kufakazela kokubili ukucindezelwa nezimvume.

Qedela ngokubhala umnikazi wesinyathelo ngasinye: iyiphi ingxenye ebhalayo, iyiphi ejikelezisayo, nokuthi inqubomgomo yokugcina ihlala kuphi. Lelo rekhodi yilo eliguqula umcimbi wokubhala olandelayo ube wukuhlola kwemizuzu emihlanu esikhundleni sendluphu yonke yokuqagela ukuthi isiphi isigaba esilahle umugqa.