Kungani ukumephwa kwephothi ye-VPN ye-Docker yakho kungafinyeleli ku-OpenVPN

Isitsha sakho singalalela ku-UDP 1195 ngenkathi umsingathi ushicilela u-1194, futhi lokho kulungile inqobo nje uma ukumephwa kusho njalo. Izinombolo zakha itafula lokuhumusha: iklayenti ishayela iphothi yomsingathi, i-Docker ibhala kabusha indawo ekuyiwa kuyo iye ephothini yesitsha, futhi i-OpenVPN iphendula kuphothi elishiwo ukuhlelwa kwayo. Ukungafani kunoma yisiphi salezi zixhumanisi kukhiqiza ukwehluleka okuthule okubukeka njenge-firewall. Izitifiketi nama-cipher kusezingeni elingezansi futhi akukwazi ukukulungisa.

Landela iphakethe elilodwa kusukela kuklayenti kuya kunqubo ngaphambi kokushintsha noma yini mayelana nokuqinisekisa.

Izinombolo ezintathu, uxhumano olulodwa

Lezi zinombolo ezintathu yindawo ekuyiwa kuyo ekude esetshenziswa iklayenti, ukumephwa okushicilelwe kumsingathi, kanye nesilaleli ngaphakathi kwesitsha. Akudingeki zilingane, kodwa kufanele zakhe iketanga. Izinombolo ezilinganayo yisimo esikhethekile esenzeka ngengozi ukuba sibe yiso esivame kakhulu, yingakho ukungafani kulula ukukubhala kanye futhi kunzima ukukubona kamuva.

Bhala iketanga emugqeni owodwa ngaphambi kokuxazulula: ikheli ne-iphothi yeklayenti, ukumephwa komsingathi, isilaleli sesitsha, ukuthutha. Isici esingalungile eketangeni sibonakala njengenombolo evela kabili ngamanani ahlukene.

I-syntax emfushane isho ukuthini ngempela

Esimweni esifushane uhlangothi lwesobunxele iyiphothi yomsingathi kanti uhlangothi lwesokudla iyiphothi yesitsha, futhi isijobelelo se-slash sikhetha ukuthutha. Uma ushiya isijobelelo, i-Docker ithatha ukumephwa njenge-TCP, ngakho isilaleli se-UDP esingemuva kokumephwa esingenayo i-protocol yisilaleli okungekho muntu ongafinyelela kuso. Lokho okuzenzakalelayo kubhalwe phansi futhi kusamangaza abantu abalinganisa izinombolo bacabanga ukuthi sekuqediwe.

Isimo eside simisa ngokucacile ikheli lokubopha ne-protocol, okuyinto efanele imigqa eyengeziwe kunoma yini ebheke kunethiwekhi. Funda ukumephwa okushicilelwe emuva esikhundleni sokwethemba ifayela elikukhiqizile.

ports:
  - 1194:1195/udp

Iphakethe lingama kuphi

Isicelo singaphonswa ngaphambi kwe-Docker, ngaphakathi kwe-Docker, noma kusilaleli. Phambi kwe-Docker kungaba ne-firewall yefu noma i-router eyenza ukudlulisa kwayo, futhi leyo divayisi idinga iphothi ebheke kumsingathi nokuthutha okulungile. Ngaphakathi kwe-Docker, ukumephwa okuya ephothini yesitsha engalungile kudlulisela ku-socket evaliwe.

Bese kuba isilaleli: ukuhlelwa kwe-OpenVPN kusho iphothi ne-protocol, futhi iklayenti elifika kwelinye ngaphakathi kwesitsha alifinyeleli lutho. Ukuhlola isevisi ye-UDP nge-TCP akufakazi lutho kunoma yisiphi salezi zigaba, ngakho sebenzisa ukuthutha iklayenti elizokuthutha.

Amakheli okubopha anquma ukufinyeleleka

Ukumephwa okushicilelwe okuboshelwe ku-loopback kufinyeleleka kuphela kusuka kumsingathi, kanti okuboshelwe kuzo zonke izixhumanisi kufinyeleleka noma kuphi lapho i-firewall ivuma khona. Kokubili kubukeka kufana efayeleni le-Compose elishiya ikheli, futhi okuzenzakalelayo kwe-Docker yikho okubanzi.

Nquma ukuthi ukusetshenziswa kuhlose ukuveza okunjani, bese ukubhala ngokucacile. Ukuhlola kwangaphakathi okuxhumanisa nge-loopback kanye neklayenti elikude elingakwazi ukuxhumana kungaba yincazelo enembile yesitsha esifanayo kokubili.

Funda isimo esisebenzayo

Hlola ukumephwa kwangempela kwesitsha esisebenzayo kanye nesilaleli endaweni yegama lenethiwekhi yaso. Ifayela le-Compose kungenzeka lashintshwa ngemva kokuqala kwesitsha, imethadatha yesithombe ingase imemezele iphothi ngaphandle kokuyishicilela, futhi esinye isitsha kungenzeka sesivele siphethe iphothi yomsingathi. Ukumemezela iphothi esithombeni akukona ukuyishicilela, futhi akukho kokubili okufana nokulalela.

Izimo ezintathu ezihlukene, imiyalo emithathu ehlukene, futhi ukugcina kuphela okuhilela i-OpenVPN.

Lapho ukumephwa sekulungile

Lapho iphakethe lifinyelela ku-OpenVPN, ilogi yalo iyindawo okufundwa kuyo nge-TLS nokuqinisekisa. Ukukhiqiza kabusha izitifiketi ukuze kulungiswe iphakethe elingakaze lifike kuwumsebenzi oyize owengeza ukuhluka kwesibili. Gcina inothi lokumephwa eceleni kwephrofayela yeklayenti ukuze umuntu olandelayo afunde umugqa owodwa esikhundleni sokuphinda athole zonke izinombolo ezintathu. Ukubamba iphakethe kanye ohlangothini lomsingathi kunquma ukuthi yisiphi kulezi zixhumanisi ezintathu esingalungile, futhi kushibhe kakhulu kunokukhiqiza kabusha isitifiketi.

Icala elichazwe lapha ukushicilela ngebhuloho. Inethiwekhi yomsingathi namakheli esitsha agudlisiwe kudlula ukuhumusha, ngakho izinombolo ezifanayo zisho okunye kulezo zinhlelo.