Kungani ukusesha amagama kwehluleka emhubheni we-OpenVPN ophethwe ngomzila

Isiphathi siphendula i-ping ngekheli kodwa sihluleka kukho konke ukusesha ngokwegama. Umhubhe uvuliwe futhi umzila ukhona, ngakho isiphetho esingokwemvelo ukuthi i-VPN ihlelwe kabi. Isiphetho esiwusizo kakhulu ukuthi lokho kusesha kwakungakaze kube nokuhamba ngomzila: umhubhe ophethwe ngomzila uthwala i-unicast IP, kuyilapho umbuzo wawungukusakaza ofuna isigaba esingekho ngaphesheya. Lapho ukungafani kwezigaba kubonakala, izilungiso zizihlela ngokwazo ngokwezindleko.

Inganekwane: umhubhe uphukile ngoba amagama ehluleka

Isibonakaliso siyakholeka ngoba konke okungaphezulu kwesigaba samagama kuyasebenza. Amakheli ahamba ngomzila, isixhumanisi sivuliwe, futhi umlingani uphendula i-ping. Okwahluleka inqubo yokuthola eyayingakaze ibe nomzila phezu kwesixhumanisi sephoyinti-kuya-ephoyintini, futhi lokho kuyisitatimende esihlukile kunomhubhe ophukile. Ukuhlukanisa lezo zitatimende ezimbili ingxenye enkulu yokuxilonga.

Ukukuthatha njengokungalungi komhubhe kuholela ekulungiseni iphrofayili okungenakuze kusize. Ukwengeza izinketho, ukushintsha ukubethela noma ukufaka kabusha iklayenti kushiya ukusakaza kuleyondawo.

Qamba inqubo ehlulekile ngaphambi kokuthi uqambe isilungiso. Ukusesha okusebenzisa ukusakaza kudinga isigaba, kuyilapho ukusesha okusebenzisa isixazululi kudinga ikheli ongabuza kulo.

Okuthwalwa yi-TUN nokungathwalwa yiyo

Idivayisi ye-TUN iyisixhumanisi se-IP, futhi yikho okwenza ukuthi ihamba ngomzila. OpenVPN inikeza iklayenti ikheli kanye neqoqo lemizila, futhi kusukela lapho iklayenti ithumela ama-datagram kumlingani. Akukho lutho kuleyo modeli olwakha isixhumanisi esabiwe lapho wonke umsindi ezwa wonke uhlaka.

Ithrafikhi yokuthola ayihambisani nakancane naleyo modeli. Imibuzo endala yamagama ye-Windows, izimemezelo ze-SSDP kanye nezicelo ze-mDNS zithunyelwa kubo bonke esigabeni hhayi endaweni eyodwa. Isixhumanisi esihamba ngomzila asinaye «bonke» ongathunyelwa kuye. Ngayinye yalezo nqubo icabanga indawo eyabiwe.

Ngakho umhubhe ungaphila kahle kuyilapho ukuthola kuhluleka ngokuphelele. Yiwona mugqa okufanele ubambelele kuwo lapho othile ebika ukuthi i-VPN iwile.

Ibhuloho lisebenza ngokususa umngcele

Idivayisi ye-TAP ithwala amahlaka, futhi ibhuloho liyixhumanisa nesigaba sangempela se-LAN. Iklayenti iba nekheli kuleso sigaba futhi izwa ithrafikhi yaso yokusakaza. Yikho okwenza ibhuloho libonakale lipholisa inkinga yamagama. Futhi lenza iklayenti lincike kuleso sigaba ekunikezeni amakheli.

Ikhambi ukususa umngcele wokuhamba ngomzila, hhayi amandla amasha amagama ngaphakathi komhubhe. Konke okusakazwa yisigaba manje kuwela nesixhumanisi.

Kwelabhorethri encane lokho ukushintshana okulungile. Kubasebenzi abahlakazekile lokho akuvamisile.

Ukusunduza i-DNS ne-WINS isilungiso esincane

Nikeza iklayenti indawo ethile yokubuza. dhcp-option DNS kanye dhcp-option DOMAIN ziqondisa amagama angaphakathi kuseva eyazi isifunda, futhi iklayenti le-Windows elisathembele ku-NetBIOS lingathola iseva ye-WINS ngendlela efanayo. Umhubhe uhlala uhamba ngomzila futhi isigaba sihlala endaweni yaso.

Izimo ezimbili zinquma ukuthi lokho kuzosebenza yini. Iseva eshiwo kufanele iphendule ngesifunda, futhi umbuzo kufuneka uvunyelwe ngomhubhe.

Hlola isixazululi kusukela kuklayenti hhayi kugobolondo leseva uqobo. Isixazululi esisebenza endaweni asisho lutho mayelana nalokho okuthwalwa umhubhe.

Thola ukuthi yisiphi isigaba esihlulekile

Qala nge-ping ekhelini, bese uxazulula igama futhi ufunde ukuthi iyiphi iseva ephendule. Impendulo engemihle evela kuseva engasibambi isigaba ibukeka ngendlela ehlukile kunombuzo ongakaze uphume emshinini. Igama elixazululekayo kodwa lenqaba ukuxhumana liyinkinga yesithathu ngokuphelele.

I-multicast ingemuva kodonga olufanayo. Iqembu elifana ne-224.0.0.251 alidluliswa emhubheni ohamba ngomzila ngokuzenzakalelayo, futhi umzila weqembu awanele ngaphandle komzila oqonda i-multicast noma isibonisi ku-LAN.