Kungani imodi yelungelo elikhethekile ibanzi kunoVPN ayidingayo

Ikotheni yayingavuli umhubhe wayo, ngakho kufakwa ifulegi lelungelo elikhethekile, futhi manje iyasebenza. Lokho kulandelana kwaveza kuphela ukuthi kwakushoda imvume eyodwa okungenani, futhi akusho lutho mayelana nokuthi iyiphi. Imodi yelungelo elikhethekile inikeza isethi yamakhono kanye nokufinyelela kumadivayisi okubanzi kakhulu kunalokho okudingwa isixhumanisi somhubhe.

Ifulegi lishintsha ini ngempela

Ikotheni yelungelo elikhethekile ithola amakhono abanzi kanye nokufinyelela kumadivayisi ehost, okuyimvume enkulu kakhulu kunalokho okudingwa indlela yenethiwekhi. Isethi eqondile ayichazwa inganekwane, ichazwa imvelo yokwenza, futhi idokhumenti ye-Docker mayelana nokusebenzisa amakotheni ichaza izinketho zamalungelo ezikhona. Ukufunda kanye kuphela kwanele ukubona ukuthi umhubhe uyingxenye encane yakho konke.

Izimfuneko ezimbili ezincane kakhulu zihlanganisa amakotheni amaningi e-VPN. Ukuhlela isixhumanisi kudinga ikhono lokuphatha inethiwekhi, futhi ukuvula idivayisi yomhubhe kudinga ukufinyelela kuleyo node yedivayisi ethile. Lezi zimvume ezihlukene, futhi ngisho zombili ndawonye zisincane kunenketho evamile. Ingxenye esele yesethi yelungelo elikhethekile ayihlobene nhlobo nomhubhe. Ikhona ngenxa yemithwalo yomsebenzi edinga ngempela ukufinyelela ezingeni lehost, futhi ikotheni ye-VPN ngokuvamile ayiyona eyodwa yazo.

Hlanganisa iphutha ngalinye nesimo esisodwa sangaphambili

Umlayezo wephutha ukutshela ukuthi yisiphi isimo sangaphambili esishodayo uma uwufunda ngaphambi kokuwucindezela. Umlayezo mayelana ne-node yedivayisi usho idivayisi, umlayezo mayelana nomsebenzi ongavunyelwe usho ikhono, futhi umlayezo mayelana nemodyuli noma i-sysctl usho ukusekelwa kwe-kernel. Ngakunye kwazo kunesixazululo esihlukile, futhi kukodwa kuphela kuzo okuyikhono.

Ifayela lokuhlela elishodayo lihlala lishoda ngemuva kokunikezwa wonke amakhono, yingakho imodi yelungelo elikhethekile ngesinye isikhathi ingashintshi lutho nhlobo. Ikotheni iyaqala, umhubhe usahluleka, futhi iphutha langempela lalingakaze libe mayelana nemvume. Ukusekelwa kwe-kernel yisimo sesithathu futhi yisona okulula ukusifunda ngokungalungile. Imodyuli engalayishwanga ehost ayikwazi ukulayishwa ngaphakathi kwekhotheni engenalungelo elikhethekile, futhi ukunikeza amakhono engeziwe ngaphakathi kwekhotheni akushintshi isimo sehost.

Hlola imfuneko, hhayi uphawu

Qala ngokubiza okuncane okushiwo yisithombe, kusebenzise, futhi gcina umbhalo oqondile wokuhluleka. Bese wengeza imvume eyodwa ngesikhathi futhi uqaphele ukuthi yikuphi ukwengezwa okushintshe umphumela.

ls -l /dev/net/tun
docker run --rm --cap-add NET_ADMIN --device /dev/net/tun image:tag
ip -br link show type tun

Ikotheni ekwazi ukubona idivayisi futhi enekhono kodwa esahlulekayo ikutshela ukuthi inkinga ikwenye indawo. Lowo umphumela owusizo, futhi imodi yelungelo elikhethekile yayizowufihla.

Hlola futhi izimvume zedivayisi ehost, ngoba i-node yedivayisi enikezwe ngendlela efanele kodwa enobunikazi beqembu elingalungile ikhiqiza iphutha elifanayo nelokushoda kwemvume.

Bhala imvume encane kunazo zonke esebenzayo

Bhala wonke amadivayisi namakhono adingwa ukuthunyelwa, kanye nephutha eliwathethelelayo. Lowo mbhalo yiwo ovumela umuntu olandelayo ukuthi asuse okuthile ngokuphepha, futhi yiwo umcwaningi ozowucela lapho ikotheni ibikwa njengenelungelo elikhethekile.

Buyekeza futhi umongo ozungezile, ngoba inethiwekhi yehost, ukufakwa kwehost kanye nezinketho zemvelo yokwenza kungandisa ngakunye umthelela wemvume. Ukubiza kwelabhorethri okwehlukile okuhlanganisa konke akusona isakhiwo sokukhiqiza, noma ngabe kusebenze kahle kangakanani. Hlola uhlelo lokusebenza, ukuziphatha kwalo kwi-DNS kanye nokuhluleka komhubhe ngaphambi kokumemezela ukuthunyelwa kuphelile. Imvume yokwakha isixhumanisi akuyona inqubomgomo yokuphuma, futhi ikotheni ekwazi ukwenza umhubhe ngokuphelele isahambisa konke okuthunyelwa uhlelo lokusebenza.