Kungani ukulandelana kwama-adaptha kungayinqumo indlela ye-VPN yaselabhorethri yakho

Ukuthi i-adaptha 1 ihamba phambili ohlwini lwe-hypervisor kuwukulandelana kokubonisa kuphela, futhi ithebula lemizila yesivakashi ayikufundi lokho. Okunquma indlela i-prefix, i-metric kanye nanoma yimuphi umthetho wenqubomgomo osebenza ngaphambi kwakho kokubili. Ngakho ukwengeza i-adaptha yebhuloho ku-VM yaselabhorethri kungadala indlela yesibili ezenzakalelayo ngenkathi i-interface yakudala ye-NAT isabonakala ikhona futhi ibalwa njengesibili. Umphumela i-VM ewusebenzisa i-tunnel kwesinye isikhathi futhi ingayisebenzisi kwesinye, ngaphandle kwanoma yiluphi ushintsho lokucushwa oluchaza lokho.

Izimo ezintathu zinquma indlela

Lezo zimo ezintathu i-prefix esebenza ngokucacile kakhulu, okwenziwa ama-metric lapho ama-prefix elingana, kanye nemithetho esetshenziswe yisivakashi ngemuva koshintsho lwezingxenyekazi. Ngayinye ingaphendulwa ngomyalo owodwa, futhi akukho okuhilela ukubalwa kwe-hypervisor.

Leyo phuzu lokugcina yisinqumo: uma ungeke usho ukuthi iyiphi i-prefix enqobayo ekhelini lomkhawulo we-VPN uqobo, awunayo inqubomgomo yemizila, unendlela yokuhleleka esebenza namuhla ngengozi.

Isimo sokuqala: iyiphi i-prefix enqobayo

Umzila oya ku-10.8.0.0/24 wehlula umzila ozenzakalelayo wekheli elingaphakathi kwawo, kungakhathaliseki ama-metric nokulandelana kwama-adaptha. Yingakho iklayenti le-VPN elifaka umzila othile liqhubeka lisebenza ngisho lapho kuvela i-adaptha yesibili ene-metric ephansi: ukucacisa kunqoba ngaphambi kokucatshangelwa kwezindleko. Hlola nge-ip route show ithebula ocabanga ukuthi liyasetshenziswa, nange-ip route get 203.0.113.9 impendulo ikernel ebingayinikeza ngempela endaweni ethile.

Ikheli lomkhawulo uqobo luhlolo olubaluleke kakhulu. Uma ikheli leseva ye-VPN lixazululwa nge-adaptha yebhuloho esanda kungezwa, i-tunnel ingase ingakhi, noma yakhe bese ilahlekelwa umzila wayo wokuthutha. Buza ngqo ngalelo kheli esikhundleni sokucabanga ukuthi i-interface ye-tunnel iyimpendulo.

Isimo sesibili: i-metric yenzani futhi ayenzini

Indima yayo incane kunalokho abaningi abakulindele. Ama-metric axazulula ukulingana phakathi kwemizila eya ku-prefix eyodwa; awavumeli umzila obanzi ukuthi wehlule othile ocacile. Ekulinganeni kukhethwa inombolo encane, futhi izinhlelo zokusebenza ezihlukene zibala ngezindlela eziphambene, yingakho izeluleko ezikopishiwe phakathi kwe-Linux ne-Windows zivame ukuziphikisa.

Kusivakashi, i-ip route show iphrinta i-metric eceleni komzila ngamunye, futhi i-Get-NetRoute ku-Windows iphrinta i-InterfaceMetric kanye ne-metric yomzila. Funda kokubili, ngoba ukuthandwa okusebenzayo kungaba isamba hhayi inkambu eyodwa. Uma kukhona imizila emibili ezenzakalelayo, yilokho okutholakele: isivakashi sinezindlela ezimbili zokuphuma, futhi okunqobayo kuncike ezinombolweni ezingashintshwa ushintsho lwezingxenyekazi.

Isimo sesithathu: isivakashi sisebenzise ini ngempela

Ukucushwa akufani nesimo esisetshenzisiwe. Amagama e-interface awazinzile ezimweni zoshintsho lwezingxenyekazi kuzo zonke izinkundla, futhi ukucushwa obekuhambisana negama kungenzeka manje kungasebenzi kunoma yini.

Hlola isimo esisetshenzisiwe hhayi esihlosiwe. I-ip -br link ikhombisa ama-interface akhona manje, futhi kumphathi one-NetworkManager i-nmcli connection show ikhombisa ukuthi iyiphi iphrofayili eboshelwe kuyiphi idivayisi. Iphrofayili ehlulekile ukuboshwa ishiya i-interface ivuliwe ngaphandle kwekheli, okubonakala njengenkinga yemizila kodwa kuyinkinga yamagama. Izithombe zesimo ezibuyisiwe zenza lokhu kube kubi kakhulu, ngoba isimo esigciniwe sesivakashi singabhekisela kubunikazi bama-adaptha esingasanikezwa yizingxenyekazi ezintsha.

Gcina ukuhleleka kwelabhorethri kukwazi ukuphindwa

Gcina ukuxhumana kwenethiwekhi ebunjiwe okuhloswe kanye nokucushwa kwesivakashi, ukuze ukuhlelwa kusuka endimeni kuya ku-adaptha kubhalwe phansi hhayi kuqagelwe endaweni ohlwini.

Ngokuvamile izindima ezine zanele ukuqanjwa amagama: isixhumanisi sangasese, ukuphatha, ukuthutha kwangaphandle kanye ne-tunnel. Ngayinye kufanele ihambisane ne-adaptha ethile kanye ne-interface yesivakashi ethile, efayeleni.

Bese uhlola uhlelo lokusebenza lwangempela ngemuva koshintsho lwezingxenyekazi, ukuqalisa kabusha noma isithombe sesimo esibuyisiwe, futhi ufake umzila oya kumkhawulo we-VPN kulolo hlolo. Uma i-VM yesango kufanele ibe ukuphela kokuphuma, qinisekisa ukuthi i-VM yokuhlola ayinawo umzila wesibili ozenzakalelayo ongahlosiwe, ngoba i-adaptha yebhuloho yengeza kanye umzila wesibili ozenzakalelayo. Hlola usuka kusivakashi, hhayi kukhonkoso ye-hypervisor, ngoba kokubili kungase kungavumelani ngokuthi iyiphi i-interface eyiphi.

Imibhalo yenethiwekhi ye-VirtualBox ichaza izindlela zama-adaptha nokuthi ngayinye ixhuma ini, futhi yilokho okufanele kufundwe ngaphambi kokwengeza eyesibili. Ilabhorethri ekhomba ukuthi iyiphi i-adaptha esebenzela indima ngayinye yenza ushintsho lomzila luchazeke. Ilabhorethri ethembele ekubalweni kwe-hypervisor yenza lonke ushintsho lube ukuhlola.