Kungani umhubhe we-Azure OpenVPN uwela cishe njalo ngemizuzwana engamashumi ayisithupha

Umhubhe uqeda ukuxhawulana, uthwala ithrafikhi cishe iminithi eyodwa, bese uxhuma kabusha. Lokho kuhleleka kususa umsolwa ojwayelekile, ngoba udonga lomlilo oluvimbela umgubane lwalungamisa ukuxhawulana hhayi isikhathi sokusebenza. Onakho ukungaboni ngaso linye mayelana nokuphila: uhlangothi olulodwa lunqume ukuthi olunye luthule lwaphenduka lwadiliza umhubhe owawusebenza. Umugqa wokuloga uthi uhlangothi olupi, futhi wona ukhetha isixazululo.

Funda lowo mugqa ngaphambi kokuthinta noma yisiphi isikhathi.

Insumansumane: kukhona okuthile endleleni okuvimba umhubhe

Ukube umgubane wawuvinjiwe, ukuxhumana kwakuzohluleka ekuqaleni futhi kuhlale kuhlulekile. Umjikelezo ophindaphindayo usho ukuthi imiyalezo yokulawula iyahamba, izikhathi ziyasungulwa, futhi kukhona okuthile kamuva engxoxweni okuphelelwa yisikhathi njalo. Ukuvimba kudala ukuthula, lokhu kudala isigqi.

Isigqi yisona sikhombisi esiwusizo. Izikhathi zisikhiqiza; ukulahleka kwamaphakethe akuvamisile.

Funda isizathu sokunqamuka ngaphambi kwesikhathi

OpenVPN ibiza isizathu sayo, futhi igama ngalinye likhomba ohlelweni olungaphansi oluhlukile. Session invalidated: KEEPALIVE_TIMEOUT yisikhathi esiphelelwa yisikhathi, ngakho qhathanisa amanani e-ping ne-ping-restart kuzo zombili iziphetho. AUTH_FAILED yimibhalo yokungena noma isimo sesitifiketi, futhi akukho shintsho lwesikhathi oluzosiza. Iphutha le-TLS lisho ukuthi izinhlangothi azikaze zifinyelele isigaba se-keepalive.

Bhala isikhathi sokuxhuma, isikhathi sokunqamuka nokuthi ingaphakathi lihlala lihleliwe yini kuze kufike kumzuzwana. Lokho kukala okukodwa kwehlukanisa uhlelo olulungisiwe nenhlanhla nje.

Ingaphakathi elizinzile yisikhathi. Elincikayo cishe liyinkinga yendlela noma isikhathi sokusebenza esisusiwe.

Izikhathi ezimbili ze-keepalive ezingakaze zivumelane

Amaphrofayili akhishwe esangweni kwesinye isikhathi asathwala imigqa efana ne-keepalive noma i-ping-restart ekopishwe kusifanekiso seseva yomphakathi. Isango lenza ukuthola kwalo umlingani ofile futhi liphoqelela okulindelwe yikho, futhi izinhlelo ezimbili akudingeki zivumelane. Uma zingavumelani, iklayenti liqala kabusha ngohlelo isango elingakaze livume ngalo.

Lawa manani amabili awawona umlawuli oyedwa. ping yindlela iklayenti elithumela ngayo umsindo wempinda, kanti ping-restart yisikhathi elilinda ngaso ngaphandle kokuva lutho ngaphambi kokudiliza umhubhe. Iphrofayili ebeka i-ping-restart emfishane kanye nesango eliphendula kancane zizoqala kabusha kuzo zonke izikhathi ezithule, okuyisimo esiqondile somjikelezo womzuzu owodwa.

Ushintsho oluncane kakhulu ohlangothini lweklayenti ukuyekisa ukusebenza kwezikhathi ezingeni eliphezulu lephrofayili, ngaphandle kwakho konke ukuvinjwa okungaphakathi:

keepalive 0 0

Gcina, layisha kabusha iphrofayili, xhuma kabusha. Isikhathi sokusebenza esivele sisememorini sigcina amanani amadala, yingakho ngezinye izikhathi ukuhlela kubonakala kungenzanga lutho.

Igama lesitifiketi lingasuka ngaphansi kwezinyawo zakho

Ukuqinisekiswa ngesitifiketi se-Azure kuncike ekutheni iklayenti liyethemba yini igama isango eliliveza namuhla. Umugqa we-verify-x509-name ekulayisheni kwakudala ungagxilisa igama isakhiwo sesango noma ukuvuselelwa kwesitifiketi eseligushile kusukela ngaleso sikhathi, futhi ukungafani kubonakala njengomjikelezo wokuxhuma kabusha hhayi njengephutha elicacile. Ukususa umugqa kubuyisela ukuxhumana, okukwenza kube ukuxilonga okuhle kanye nokulungisa okubi okuhlala njalo, ngoba kususa nokuqinisekisa. Uma umhubhe usubambe, buyisela umugqa ngegama isango eliliveza ngempela.

Hlola isizukulwane sesibili seklayenti kumshini ofanayo ngaphambi kokuhlela isango. Uma iklayenti elilodwa lijikeleza kanti elinye libambile, iphrofayili akuyona inkinga.

Yini okufanele ishintshwe, futhi ngaluphi uhlelo

Bese uhlola isikhathi sokusebenza esisusiwe. Amadivayisi amabili abelana ngesitifiketi esisodwa angaphushana phandle, futhi umphumela ubonakala njengowesikhathi ngoba izinhlangothi zombili ziyaqhubeka nokuxhuma kabusha. Qhathanisa amarekhodi ezikhathi zokusebenza ukusuka endaweni kuya endaweni wokufanayo ubunikazi obuvela njalo.

Bese uhlola indlela engasebenzi ngokuqhuba ithrafikhi eqhubekayo imizuzu embalwa. Uma ukuwa kuma ngesikhathi ithrafikhi ihamba, isikhathi esibalulekile ngesesigameko se-NAT noma isilinganisi somthwalo osendleleni, hhayi se-OpenVPN.

Izilungiselelo zesango kufanele zishintshwe kuphela ngemuva kwalezi zivivinyo ezine.